(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="a425a1e06ffa5546c06041799fbb557a26672c0300002fce1c7c869427f0b9aaea3a92bd2e57172c5efa25a856c5c95a3acd378270608b3817651f7fb01f9e8f64731273bc5245f35a1e"], 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x2400c050) 18:39:12 executing program 0: sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x2400c050) 18:39:12 executing program 5: r0 = syz_open_dev$vcsn(&(0x7f0000000040), 0x0, 0x0) sync_file_range(r0, 0x0, 0x0, 0x0) 18:39:12 executing program 4: syz_open_dev$vcsn(&(0x7f0000000040), 0x0, 0x0) sync_file_range(0xffffffffffffffff, 0x0, 0x1ff, 0x0) 18:39:12 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x2400c050) 18:39:12 executing program 0: sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x2400c050) 18:39:12 executing program 4: r0 = syz_open_dev$vcsn(&(0x7f0000000040), 0x0, 0x0) sync_file_range(r0, 0x0, 0x0, 0x0) 18:39:12 executing program 1: r0 = eventfd2(0x0, 0x0) write$eventfd(r0, 0x0, 0x40000000000000) io_uring_register$IORING_REGISTER_EVENTFD(0xffffffffffffffff, 0x4, &(0x7f0000000100)=r0, 0x1) 18:39:12 executing program 3: r0 = syz_clone(0x9001100, 0x0, 0x0, 0x0, 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(0x0, r0, 0x7, 0xffffffffffffffff, 0x0) getpid() pidfd_open(r0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000004, 0x10, r1, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000004, 0x10, r2, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r2, 0x4004662b, &(0x7f0000000100)=0x7) r3 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2000) pipe(&(0x7f0000000040)) pipe2$watch_queue(&(0x7f0000000080), 0x80) ptrace$cont(0x7, r0, 0x20000000000000, 0xca9) close(r3) 18:39:12 executing program 1: r0 = eventfd2(0x0, 0x0) write$eventfd(r0, 0x0, 0x40000000000000) io_uring_register$IORING_REGISTER_EVENTFD(0xffffffffffffffff, 0x4, &(0x7f0000000100)=r0, 0x1) 18:39:12 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[], 0x14}}, 0x2400c050) 18:39:12 executing program 0: sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x2400c050) 18:39:12 executing program 4: r0 = syz_clone(0x9001100, 0x0, 0x0, 0x0, 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(0x0, r0, 0x7, 0xffffffffffffffff, 0x0) getpid() pidfd_open(r0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000004, 0x10, r1, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000004, 0x10, r2, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r2, 0x4004662b, &(0x7f0000000100)=0x7) r3 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2000) pipe(&(0x7f0000000040)) pipe2$watch_queue(&(0x7f0000000080), 0x80) ptrace$cont(0x7, r0, 0x20000000000000, 0xca9) close(r3) 18:39:12 executing program 5: r0 = syz_clone(0x9001100, 0x0, 0x0, 0x0, 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(0x0, r0, 0x7, 0xffffffffffffffff, 0x0) getpid() pidfd_open(r0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000004, 0x10, r1, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000004, 0x10, r2, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r2, 0x4004662b, &(0x7f0000000100)=0x7) r3 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2000) pipe(&(0x7f0000000040)) pipe2$watch_queue(&(0x7f0000000080), 0x80) ptrace$cont(0x7, r0, 0x20000000000000, 0xca9) close(r3) 18:39:12 executing program 1: r0 = eventfd2(0x0, 0x0) write$eventfd(r0, 0x0, 0x40000000000000) io_uring_register$IORING_REGISTER_EVENTFD(0xffffffffffffffff, 0x4, &(0x7f0000000100)=r0, 0x1) 18:39:12 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[], 0x14}}, 0x0) 18:39:12 executing program 0: socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x2400c050) 18:39:12 executing program 1: r0 = eventfd2(0x0, 0x0) r1 = syz_io_uring_setup(0x149b, &(0x7f0000000000)={0x0, 0x13db, 0x2, 0x2, 0x15e}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_EVENTFD(r1, 0x4, &(0x7f0000000100)=r0, 0x1) 18:39:12 executing program 4: r0 = syz_clone(0x9001100, 0x0, 0x0, 0x0, 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(0x0, r0, 0x7, 0xffffffffffffffff, 0x0) getpid() pidfd_open(r0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000004, 0x10, r1, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000004, 0x10, r2, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r2, 0x4004662b, &(0x7f0000000100)=0x7) r3 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2000) pipe(&(0x7f0000000040)) pipe2$watch_queue(&(0x7f0000000080), 0x80) ptrace$cont(0x7, r0, 0x20000000000000, 0xca9) close(r3) 18:39:12 executing program 3: r0 = syz_clone(0x9001100, 0x0, 0x0, 0x0, 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(0x0, r0, 0x7, 0xffffffffffffffff, 0x0) getpid() pidfd_open(r0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000004, 0x10, r1, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000004, 0x10, r2, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r2, 0x4004662b, &(0x7f0000000100)=0x7) r3 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2000) pipe(&(0x7f0000000040)) pipe2$watch_queue(&(0x7f0000000080), 0x80) ptrace$cont(0x7, r0, 0x20000000000000, 0xca9) close(r3) 18:39:12 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f00000002c0)={'batadv_slave_1\x00'}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000004, 0x10, r1, 0x0) ioctl$AUTOFS_IOC_EXPIRE(r1, 0x810c9365, &(0x7f0000000080)={{0x9820, 0x8001}, 0x100, './file0\x00'}) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x2c, 0x0, 0x300, 0x70bd29, 0x25dfdbff, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x2}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x883}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x400c001) r2 = signalfd(0xffffffffffffffff, 0x0, 0x0) close(r2) syz_io_uring_setup(0x29c7, &(0x7f0000000300)={0x0, 0xc6f9, 0x800, 0x1, 0x3b, 0x0, r2}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) setsockopt$MRT_TABLE(0xffffffffffffffff, 0x0, 0xcf, &(0x7f0000000000)=0xff, 0x4) openat$pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x200000, 0x0) syz_io_uring_setup(0x2289, &(0x7f00000001c0)={0x0, 0x1c48, 0x45, 0x0, 0x235}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000240), &(0x7f0000000280)) fcntl$F_SET_FILE_RW_HINT(r0, 0x7, &(0x7f0000000040)) setsockopt$MRT_ADD_VIF(r2, 0x0, 0xca, &(0x7f0000000400)={0xffffffffffffffff, 0x1, 0x1f, 0x1, @vifc_lcl_addr=@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback}, 0x10) 18:39:12 executing program 1: r0 = syz_io_uring_setup(0x149b, &(0x7f0000000000)={0x0, 0x13db, 0x2, 0x2, 0x15e}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, &(0x7f0000000100), 0x1) 18:39:12 executing program 0: socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x2400c050) 18:39:12 executing program 5: r0 = pidfd_open(0x0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000100)={0x1, 0x7f0000000, 0x7, 0x3ff, 0x2, 0x9}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)) syz_open_dev$vcsn(&(0x7f0000000040), 0x1, 0xa040) r1 = signalfd(0xffffffffffffffff, 0x0, 0x0) close(r1) accept$packet(r1, &(0x7f0000000000), &(0x7f0000000080)=0xfffffffffffffef4) 18:39:12 executing program 0: socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x2400c050) 18:39:12 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f00000002c0)={'batadv_slave_1\x00'}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000004, 0x10, r1, 0x0) ioctl$AUTOFS_IOC_EXPIRE(r1, 0x810c9365, &(0x7f0000000080)={{0x9820, 0x8001}, 0x100, './file0\x00'}) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x2c, 0x0, 0x300, 0x70bd29, 0x25dfdbff, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x2}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x883}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x400c001) r2 = signalfd(0xffffffffffffffff, 0x0, 0x0) close(r2) syz_io_uring_setup(0x29c7, &(0x7f0000000300)={0x0, 0xc6f9, 0x800, 0x1, 0x3b, 0x0, r2}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) setsockopt$MRT_TABLE(0xffffffffffffffff, 0x0, 0xcf, &(0x7f0000000000)=0xff, 0x4) openat$pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x200000, 0x0) syz_io_uring_setup(0x2289, &(0x7f00000001c0)={0x0, 0x1c48, 0x45, 0x0, 0x235}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000240), &(0x7f0000000280)) fcntl$F_SET_FILE_RW_HINT(r0, 0x7, &(0x7f0000000040)) setsockopt$MRT_ADD_VIF(r2, 0x0, 0xca, &(0x7f0000000400)={0xffffffffffffffff, 0x1, 0x1f, 0x1, @vifc_lcl_addr=@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback}, 0x10) 18:39:13 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r0, 0x0, 0x2400c050) 18:39:13 executing program 3: r0 = syz_clone(0x9001100, 0x0, 0x0, 0x0, 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(0x0, r0, 0x7, 0xffffffffffffffff, 0x0) getpid() pidfd_open(r0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000004, 0x10, r1, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000004, 0x10, r2, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r2, 0x4004662b, &(0x7f0000000100)=0x7) r3 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2000) pipe(&(0x7f0000000040)) pipe2$watch_queue(&(0x7f0000000080), 0x80) close(r3) 18:39:13 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f00000002c0)={'batadv_slave_1\x00'}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000004, 0x10, r1, 0x0) ioctl$AUTOFS_IOC_EXPIRE(r1, 0x810c9365, &(0x7f0000000080)={{0x9820, 0x8001}, 0x100, './file0\x00'}) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x2c, 0x0, 0x300, 0x70bd29, 0x25dfdbff, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x2}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x883}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x400c001) r2 = signalfd(0xffffffffffffffff, 0x0, 0x0) close(r2) syz_io_uring_setup(0x29c7, &(0x7f0000000300)={0x0, 0xc6f9, 0x800, 0x1, 0x3b, 0x0, r2}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) setsockopt$MRT_TABLE(0xffffffffffffffff, 0x0, 0xcf, &(0x7f0000000000)=0xff, 0x4) openat$pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x200000, 0x0) syz_io_uring_setup(0x2289, &(0x7f00000001c0)={0x0, 0x1c48, 0x45, 0x0, 0x235}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000240), &(0x7f0000000280)) fcntl$F_SET_FILE_RW_HINT(r0, 0x7, &(0x7f0000000040)) setsockopt$MRT_ADD_VIF(r2, 0x0, 0xca, &(0x7f0000000400)={0xffffffffffffffff, 0x1, 0x1f, 0x1, @vifc_lcl_addr=@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback}, 0x10) 18:39:13 executing program 1: r0 = syz_io_uring_setup(0x149b, &(0x7f0000000000)={0x0, 0x13db, 0x2, 0x2, 0x15e}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, &(0x7f0000000100), 0x1) 18:39:13 executing program 4: r0 = syz_clone(0x9001100, 0x0, 0x0, 0x0, 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(0x0, r0, 0x7, 0xffffffffffffffff, 0x0) getpid() pidfd_open(r0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000004, 0x10, r1, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000004, 0x10, r2, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r2, 0x4004662b, &(0x7f0000000100)=0x7) r3 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2000) pipe(&(0x7f0000000040)) pipe2$watch_queue(&(0x7f0000000080), 0x80) ptrace$cont(0x7, r0, 0x20000000000000, 0xca9) close(r3) 18:39:13 executing program 5: fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000040)='system.posix_acl_default\x00', &(0x7f0000000540)=ANY=[@ANYBLOB="02000000010001000000000002000300", @ANYRES32=0xee01, @ANYBLOB="0200e300e4af54b5771580fac2b60a1eccb4f0a417c141c9f359002ef8d4e8db92c0d2d8ef0f30fa471052447771e1ef86665223ad9c9a751f488fcdbfa8b585558ac31da93936ec7cd403fcfe63135a9d53207ed3f0a06bf508b9cebeb354f75cc550a1db7d7817feecbfdd9e8ef29d18d4fa190e958af2ed29c2baaa784a379446d79f4a4c65acde893315b6cca73c02ef5711a110", @ANYRES32=0x0, @ANYBLOB="040000000000000008080400bc9149f56fb591d3bf18b9ed6a0d44f49d5a", @ANYRES32=0xee00, @ANYBLOB="1000e1eb000400000000040000048bdb8205256baef3d819e50a2728c3b98fd6909395ba7a5b09a6cd6eb33d7add157d462882ab650c34d61bbe663c5941b846198a2b2e909ef605983690694cafebaa7e9a50cdd31813e519b0095386fdff34662cb6dd85a28f071aa8aeadc2c12ee3bc2504b7c27e01a0315396716a836732bf99b0613a6e45af5f34c8f220ab8f01a23c03437dec08d66439deae5b0bea82948654d2231a8aa6c9d6487a8a0382adfcf2e772b2f484b947939812f7ef1bd9459fa52c"], 0x3c, 0x2) r0 = eventfd2(0x0, 0x0) r1 = signalfd(0xffffffffffffffff, 0x0, 0x0) close(r1) signalfd(r0, &(0x7f0000000080)={[0x5]}, 0x8) pipe2$watch_queue(&(0x7f00000000c0), 0x80) r2 = signalfd(0xffffffffffffffff, 0x0, 0x0) socketpair(0x11, 0x6, 0x5, &(0x7f0000000180)={0xffffffffffffffff}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) fstat(r4, &(0x7f0000000100)) close(r2) write$eventfd(r1, 0x0, 0x0) r5 = socket(0xc, 0x1, 0x5) pidfd_getfd(r1, r3, 0x0) r6 = signalfd(0xffffffffffffffff, 0x0, 0x0) close(r6) r7 = signalfd(0xffffffffffffffff, 0x0, 0x0) close(r7) io_uring_register$IORING_REGISTER_EVENTFD(r7, 0x4, &(0x7f0000000200)=r4, 0x1) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r5, 0x28, 0x1, &(0x7f0000000000)=0x850, 0x8) 18:39:13 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r0, 0x0, 0x2400c050) 18:39:13 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f00000002c0)={'batadv_slave_1\x00'}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000004, 0x10, r1, 0x0) ioctl$AUTOFS_IOC_EXPIRE(r1, 0x810c9365, &(0x7f0000000080)={{0x9820, 0x8001}, 0x100, './file0\x00'}) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x2c, 0x0, 0x300, 0x70bd29, 0x25dfdbff, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x2}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x883}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x400c001) r2 = signalfd(0xffffffffffffffff, 0x0, 0x0) close(r2) syz_io_uring_setup(0x29c7, &(0x7f0000000300)={0x0, 0xc6f9, 0x800, 0x1, 0x3b, 0x0, r2}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) setsockopt$MRT_TABLE(0xffffffffffffffff, 0x0, 0xcf, &(0x7f0000000000)=0xff, 0x4) openat$pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x200000, 0x0) syz_io_uring_setup(0x2289, &(0x7f00000001c0)={0x0, 0x1c48, 0x45, 0x0, 0x235}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000240), &(0x7f0000000280)) fcntl$F_SET_FILE_RW_HINT(r0, 0x7, &(0x7f0000000040)) 18:39:13 executing program 5: fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000040)='system.posix_acl_default\x00', &(0x7f0000000540)=ANY=[@ANYBLOB="02000000010001000000000002000300", @ANYRES32=0xee01, @ANYBLOB="0200e300e4af54b5771580fac2b60a1eccb4f0a417c141c9f359002ef8d4e8db92c0d2d8ef0f30fa471052447771e1ef86665223ad9c9a751f488fcdbfa8b585558ac31da93936ec7cd403fcfe63135a9d53207ed3f0a06bf508b9cebeb354f75cc550a1db7d7817feecbfdd9e8ef29d18d4fa190e958af2ed29c2baaa784a379446d79f4a4c65acde893315b6cca73c02ef5711a110", @ANYRES32=0x0, @ANYBLOB="040000000000000008080400bc9149f56fb591d3bf18b9ed6a0d44f49d5a", @ANYRES32=0xee00, @ANYBLOB="1000e1eb000400000000040000048bdb8205256baef3d819e50a2728c3b98fd6909395ba7a5b09a6cd6eb33d7add157d462882ab650c34d61bbe663c5941b846198a2b2e909ef605983690694cafebaa7e9a50cdd31813e519b0095386fdff34662cb6dd85a28f071aa8aeadc2c12ee3bc2504b7c27e01a0315396716a836732bf99b0613a6e45af5f34c8f220ab8f01a23c03437dec08d66439deae5b0bea82948654d2231a8aa6c9d6487a8a0382adfcf2e772b2f484b947939812f7ef1bd9459fa52c"], 0x3c, 0x2) r0 = eventfd2(0x0, 0x0) r1 = signalfd(0xffffffffffffffff, 0x0, 0x0) close(r1) signalfd(r0, &(0x7f0000000080)={[0x5]}, 0x8) pipe2$watch_queue(&(0x7f00000000c0), 0x80) r2 = signalfd(0xffffffffffffffff, 0x0, 0x0) socketpair(0x11, 0x6, 0x5, &(0x7f0000000180)={0xffffffffffffffff}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) fstat(r4, &(0x7f0000000100)) close(r2) write$eventfd(r1, 0x0, 0x0) r5 = socket(0xc, 0x1, 0x5) pidfd_getfd(r1, r3, 0x0) r6 = signalfd(0xffffffffffffffff, 0x0, 0x0) close(r6) r7 = signalfd(0xffffffffffffffff, 0x0, 0x0) close(r7) io_uring_register$IORING_REGISTER_EVENTFD(r7, 0x4, &(0x7f0000000200)=r4, 0x1) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r5, 0x28, 0x1, &(0x7f0000000000)=0x850, 0x8) 18:39:13 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r0, 0x0, 0x2400c050) 18:39:13 executing program 1: r0 = syz_io_uring_setup(0x149b, &(0x7f0000000000)={0x0, 0x13db, 0x2, 0x2, 0x15e}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, &(0x7f0000000100), 0x1) 18:39:13 executing program 3: r0 = syz_clone(0x9001100, 0x0, 0x0, 0x0, 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(0x0, r0, 0x7, 0xffffffffffffffff, 0x0) getpid() pidfd_open(r0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000004, 0x10, r1, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000004, 0x10, r2, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r2, 0x4004662b, &(0x7f0000000100)=0x7) r3 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2000) pipe(&(0x7f0000000040)) close(r3) 18:39:13 executing program 2: socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000002c0)={'batadv_slave_1\x00'}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000004, 0x10, r0, 0x0) ioctl$AUTOFS_IOC_EXPIRE(r0, 0x810c9365, &(0x7f0000000080)={{0x9820, 0x8001}, 0x100, './file0\x00'}) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x2c, 0x0, 0x300, 0x70bd29, 0x25dfdbff, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x2}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x883}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x400c001) r1 = signalfd(0xffffffffffffffff, 0x0, 0x0) close(r1) syz_io_uring_setup(0x29c7, &(0x7f0000000300)={0x0, 0xc6f9, 0x800, 0x1, 0x3b, 0x0, r1}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) setsockopt$MRT_TABLE(0xffffffffffffffff, 0x0, 0xcf, &(0x7f0000000000)=0xff, 0x4) openat$pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x200000, 0x0) syz_io_uring_setup(0x2289, &(0x7f00000001c0)={0x0, 0x1c48, 0x45, 0x0, 0x235}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000240), &(0x7f0000000280)) 18:39:13 executing program 5: fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000040)='system.posix_acl_default\x00', &(0x7f0000000540)=ANY=[@ANYBLOB="02000000010001000000000002000300", @ANYRES32=0xee01, @ANYBLOB="0200e300e4af54b5771580fac2b60a1eccb4f0a417c141c9f359002ef8d4e8db92c0d2d8ef0f30fa471052447771e1ef86665223ad9c9a751f488fcdbfa8b585558ac31da93936ec7cd403fcfe63135a9d53207ed3f0a06bf508b9cebeb354f75cc550a1db7d7817feecbfdd9e8ef29d18d4fa190e958af2ed29c2baaa784a379446d79f4a4c65acde893315b6cca73c02ef5711a110", @ANYRES32=0x0, @ANYBLOB="040000000000000008080400bc9149f56fb591d3bf18b9ed6a0d44f49d5a", @ANYRES32=0xee00, @ANYBLOB="1000e1eb000400000000040000048bdb8205256baef3d819e50a2728c3b98fd6909395ba7a5b09a6cd6eb33d7add157d462882ab650c34d61bbe663c5941b846198a2b2e909ef605983690694cafebaa7e9a50cdd31813e519b0095386fdff34662cb6dd85a28f071aa8aeadc2c12ee3bc2504b7c27e01a0315396716a836732bf99b0613a6e45af5f34c8f220ab8f01a23c03437dec08d66439deae5b0bea82948654d2231a8aa6c9d6487a8a0382adfcf2e772b2f484b947939812f7ef1bd9459fa52c"], 0x3c, 0x2) r0 = eventfd2(0x0, 0x0) r1 = signalfd(0xffffffffffffffff, 0x0, 0x0) close(r1) signalfd(r0, &(0x7f0000000080)={[0x5]}, 0x8) pipe2$watch_queue(&(0x7f00000000c0), 0x80) r2 = signalfd(0xffffffffffffffff, 0x0, 0x0) socketpair(0x11, 0x6, 0x5, &(0x7f0000000180)={0xffffffffffffffff}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) fstat(r4, &(0x7f0000000100)) close(r2) write$eventfd(r1, 0x0, 0x0) r5 = socket(0xc, 0x1, 0x5) pidfd_getfd(r1, r3, 0x0) r6 = signalfd(0xffffffffffffffff, 0x0, 0x0) close(r6) r7 = signalfd(0xffffffffffffffff, 0x0, 0x0) close(r7) io_uring_register$IORING_REGISTER_EVENTFD(r7, 0x4, &(0x7f0000000200)=r4, 0x1) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r5, 0x28, 0x1, &(0x7f0000000000)=0x850, 0x8) 18:39:13 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x2400c050) 18:39:13 executing program 4: r0 = syz_clone(0x9001100, 0x0, 0x0, 0x0, 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(0x0, r0, 0x7, 0xffffffffffffffff, 0x0) getpid() pidfd_open(r0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000004, 0x10, r1, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000004, 0x10, r2, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r2, 0x4004662b, &(0x7f0000000100)=0x7) r3 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2000) pipe(&(0x7f0000000040)) pipe2$watch_queue(&(0x7f0000000080), 0x80) ptrace$cont(0x7, r0, 0x20000000000000, 0xca9) close(r3) 18:39:13 executing program 5: fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000040)='system.posix_acl_default\x00', &(0x7f0000000540)=ANY=[@ANYBLOB="02000000010001000000000002000300", @ANYRES32=0xee01, @ANYBLOB="0200e300e4af54b5771580fac2b60a1eccb4f0a417c141c9f359002ef8d4e8db92c0d2d8ef0f30fa471052447771e1ef86665223ad9c9a751f488fcdbfa8b585558ac31da93936ec7cd403fcfe63135a9d53207ed3f0a06bf508b9cebeb354f75cc550a1db7d7817feecbfdd9e8ef29d18d4fa190e958af2ed29c2baaa784a379446d79f4a4c65acde893315b6cca73c02ef5711a110", @ANYRES32=0x0, @ANYBLOB="040000000000000008080400bc9149f56fb591d3bf18b9ed6a0d44f49d5a", @ANYRES32=0xee00, @ANYBLOB="1000e1eb000400000000040000048bdb8205256baef3d819e50a2728c3b98fd6909395ba7a5b09a6cd6eb33d7add157d462882ab650c34d61bbe663c5941b846198a2b2e909ef605983690694cafebaa7e9a50cdd31813e519b0095386fdff34662cb6dd85a28f071aa8aeadc2c12ee3bc2504b7c27e01a0315396716a836732bf99b0613a6e45af5f34c8f220ab8f01a23c03437dec08d66439deae5b0bea82948654d2231a8aa6c9d6487a8a0382adfcf2e772b2f484b947939812f7ef1bd9459fa52c"], 0x3c, 0x2) r0 = eventfd2(0x0, 0x0) r1 = signalfd(0xffffffffffffffff, 0x0, 0x0) close(r1) signalfd(r0, &(0x7f0000000080)={[0x5]}, 0x8) pipe2$watch_queue(&(0x7f00000000c0), 0x80) r2 = signalfd(0xffffffffffffffff, 0x0, 0x0) socketpair(0x11, 0x6, 0x5, &(0x7f0000000180)={0xffffffffffffffff}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) fstat(r4, &(0x7f0000000100)) close(r2) write$eventfd(r1, 0x0, 0x0) socket(0xc, 0x1, 0x5) pidfd_getfd(r1, r3, 0x0) r5 = signalfd(0xffffffffffffffff, 0x0, 0x0) close(r5) r6 = signalfd(0xffffffffffffffff, 0x0, 0x0) close(r6) io_uring_register$IORING_REGISTER_EVENTFD(r6, 0x4, &(0x7f0000000200)=r4, 0x1) 18:39:13 executing program 3: r0 = syz_clone(0x9001100, 0x0, 0x0, 0x0, 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(0x0, r0, 0x7, 0xffffffffffffffff, 0x0) getpid() pidfd_open(r0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000004, 0x10, r1, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000004, 0x10, r2, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r2, 0x4004662b, &(0x7f0000000100)=0x7) r3 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2000) close(r3) 18:39:13 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x2400c050) 18:39:13 executing program 1: r0 = eventfd2(0x0, 0x0) r1 = syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x13db, 0x2, 0x2, 0x15e}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_EVENTFD(r1, 0x4, &(0x7f0000000100)=r0, 0x1) 18:39:13 executing program 2: socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000002c0)={'batadv_slave_1\x00'}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000004, 0x10, r0, 0x0) ioctl$AUTOFS_IOC_EXPIRE(r0, 0x810c9365, &(0x7f0000000080)={{0x9820, 0x8001}, 0x100, './file0\x00'}) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x2c, 0x0, 0x300, 0x70bd29, 0x25dfdbff, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x2}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x883}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x400c001) r1 = signalfd(0xffffffffffffffff, 0x0, 0x0) close(r1) syz_io_uring_setup(0x29c7, &(0x7f0000000300)={0x0, 0xc6f9, 0x800, 0x1, 0x3b, 0x0, r1}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) setsockopt$MRT_TABLE(0xffffffffffffffff, 0x0, 0xcf, &(0x7f0000000000)=0xff, 0x4) syz_io_uring_setup(0x2289, &(0x7f00000001c0)={0x0, 0x1c48, 0x45, 0x0, 0x235}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000240), &(0x7f0000000280)) 18:39:13 executing program 1: r0 = eventfd2(0x0, 0x0) r1 = syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x13db, 0x2, 0x2, 0x15e}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_EVENTFD(r1, 0x4, &(0x7f0000000100)=r0, 0x1) 18:39:13 executing program 5: fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000040)='system.posix_acl_default\x00', &(0x7f0000000540)=ANY=[@ANYBLOB="02000000010001000000000002000300", @ANYRES32=0xee01, @ANYBLOB="0200e300e4af54b5771580fac2b60a1eccb4f0a417c141c9f359002ef8d4e8db92c0d2d8ef0f30fa471052447771e1ef86665223ad9c9a751f488fcdbfa8b585558ac31da93936ec7cd403fcfe63135a9d53207ed3f0a06bf508b9cebeb354f75cc550a1db7d7817feecbfdd9e8ef29d18d4fa190e958af2ed29c2baaa784a379446d79f4a4c65acde893315b6cca73c02ef5711a110", @ANYRES32=0x0, @ANYBLOB="040000000000000008080400bc9149f56fb591d3bf18b9ed6a0d44f49d5a", @ANYRES32=0xee00, @ANYBLOB="1000e1eb000400000000040000048bdb8205256baef3d819e50a2728c3b98fd6909395ba7a5b09a6cd6eb33d7add157d462882ab650c34d61bbe663c5941b846198a2b2e909ef605983690694cafebaa7e9a50cdd31813e519b0095386fdff34662cb6dd85a28f071aa8aeadc2c12ee3bc2504b7c27e01a0315396716a836732bf99b0613a6e45af5f34c8f220ab8f01a23c03437dec08d66439deae5b0bea82948654d2231a8aa6c9d6487a8a0382adfcf2e772b2f484b947939812f7ef1bd9459fa52c"], 0x3c, 0x2) r0 = eventfd2(0x0, 0x0) r1 = signalfd(0xffffffffffffffff, 0x0, 0x0) close(r1) signalfd(r0, &(0x7f0000000080)={[0x5]}, 0x8) pipe2$watch_queue(&(0x7f00000000c0), 0x80) r2 = signalfd(0xffffffffffffffff, 0x0, 0x0) socketpair(0x11, 0x6, 0x5, &(0x7f0000000180)={0xffffffffffffffff}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) fstat(r4, &(0x7f0000000100)) close(r2) write$eventfd(r1, 0x0, 0x0) socket(0xc, 0x1, 0x5) pidfd_getfd(r1, r3, 0x0) r5 = signalfd(0xffffffffffffffff, 0x0, 0x0) close(r5) r6 = signalfd(0xffffffffffffffff, 0x0, 0x0) close(r6) 18:39:13 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x2400c050) 18:39:13 executing program 2: socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000002c0)={'batadv_slave_1\x00'}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000004, 0x10, r0, 0x0) ioctl$AUTOFS_IOC_EXPIRE(r0, 0x810c9365, &(0x7f0000000080)={{0x9820, 0x8001}, 0x100, './file0\x00'}) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x2c, 0x0, 0x300, 0x70bd29, 0x25dfdbff, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x2}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x883}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x400c001) r1 = signalfd(0xffffffffffffffff, 0x0, 0x0) close(r1) syz_io_uring_setup(0x29c7, &(0x7f0000000300)={0x0, 0xc6f9, 0x800, 0x1, 0x3b, 0x0, r1}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) syz_io_uring_setup(0x2289, &(0x7f00000001c0)={0x0, 0x1c48, 0x45, 0x0, 0x235}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000240), &(0x7f0000000280)) 18:39:13 executing program 1: r0 = eventfd2(0x0, 0x0) r1 = syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x13db, 0x2, 0x2, 0x15e}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_EVENTFD(r1, 0x4, &(0x7f0000000100)=r0, 0x1) 18:39:13 executing program 5: fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000040)='system.posix_acl_default\x00', &(0x7f0000000540)=ANY=[@ANYBLOB="02000000010001000000000002000300", @ANYRES32=0xee01, @ANYBLOB="0200e300e4af54b5771580fac2b60a1eccb4f0a417c141c9f359002ef8d4e8db92c0d2d8ef0f30fa471052447771e1ef86665223ad9c9a751f488fcdbfa8b585558ac31da93936ec7cd403fcfe63135a9d53207ed3f0a06bf508b9cebeb354f75cc550a1db7d7817feecbfdd9e8ef29d18d4fa190e958af2ed29c2baaa784a379446d79f4a4c65acde893315b6cca73c02ef5711a110", @ANYRES32=0x0, @ANYBLOB="040000000000000008080400bc9149f56fb591d3bf18b9ed6a0d44f49d5a", @ANYRES32=0xee00, @ANYBLOB="1000e1eb000400000000040000048bdb8205256baef3d819e50a2728c3b98fd6909395ba7a5b09a6cd6eb33d7add157d462882ab650c34d61bbe663c5941b846198a2b2e909ef605983690694cafebaa7e9a50cdd31813e519b0095386fdff34662cb6dd85a28f071aa8aeadc2c12ee3bc2504b7c27e01a0315396716a836732bf99b0613a6e45af5f34c8f220ab8f01a23c03437dec08d66439deae5b0bea82948654d2231a8aa6c9d6487a8a0382adfcf2e772b2f484b947939812f7ef1bd9459fa52c"], 0x3c, 0x2) r0 = eventfd2(0x0, 0x0) r1 = signalfd(0xffffffffffffffff, 0x0, 0x0) close(r1) signalfd(r0, &(0x7f0000000080)={[0x5]}, 0x8) pipe2$watch_queue(&(0x7f00000000c0), 0x80) r2 = signalfd(0xffffffffffffffff, 0x0, 0x0) socketpair(0x11, 0x6, 0x5, &(0x7f0000000180)={0xffffffffffffffff}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) fstat(r4, &(0x7f0000000100)) close(r2) write$eventfd(r1, 0x0, 0x0) socket(0xc, 0x1, 0x5) pidfd_getfd(r1, r3, 0x0) r5 = signalfd(0xffffffffffffffff, 0x0, 0x0) close(r5) signalfd(0xffffffffffffffff, 0x0, 0x0) 18:39:13 executing program 4: r0 = syz_clone(0x9001100, 0x0, 0x0, 0x0, 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(0x0, r0, 0x7, 0xffffffffffffffff, 0x0) getpid() pidfd_open(r0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000004, 0x10, r1, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000004, 0x10, r2, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r2, 0x4004662b, &(0x7f0000000100)=0x7) syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2000) pipe(&(0x7f0000000040)) pipe2$watch_queue(&(0x7f0000000080), 0x80) ptrace$cont(0x7, r0, 0x20000000000000, 0xca9) 18:39:13 executing program 3: r0 = syz_clone(0x9001100, 0x0, 0x0, 0x0, 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(0x0, r0, 0x7, 0xffffffffffffffff, 0x0) getpid() pidfd_open(r0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000004, 0x10, r1, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000004, 0x10, r2, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r2, 0x4004662b, &(0x7f0000000100)=0x7) close(0xffffffffffffffff) 18:39:13 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x14}}, 0x2400c050) 18:39:13 executing program 1: r0 = eventfd2(0x0, 0x0) r1 = syz_io_uring_setup(0x149b, 0x0, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_EVENTFD(r1, 0x4, &(0x7f0000000100)=r0, 0x1) 18:39:13 executing program 5: fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000040)='system.posix_acl_default\x00', &(0x7f0000000540)=ANY=[@ANYBLOB="02000000010001000000000002000300", @ANYRES32=0xee01, @ANYBLOB="0200e300e4af54b5771580fac2b60a1eccb4f0a417c141c9f359002ef8d4e8db92c0d2d8ef0f30fa471052447771e1ef86665223ad9c9a751f488fcdbfa8b585558ac31da93936ec7cd403fcfe63135a9d53207ed3f0a06bf508b9cebeb354f75cc550a1db7d7817feecbfdd9e8ef29d18d4fa190e958af2ed29c2baaa784a379446d79f4a4c65acde893315b6cca73c02ef5711a110", @ANYRES32=0x0, @ANYBLOB="040000000000000008080400bc9149f56fb591d3bf18b9ed6a0d44f49d5a", @ANYRES32=0xee00, @ANYBLOB="1000e1eb000400000000040000048bdb8205256baef3d819e50a2728c3b98fd6909395ba7a5b09a6cd6eb33d7add157d462882ab650c34d61bbe663c5941b846198a2b2e909ef605983690694cafebaa7e9a50cdd31813e519b0095386fdff34662cb6dd85a28f071aa8aeadc2c12ee3bc2504b7c27e01a0315396716a836732bf99b0613a6e45af5f34c8f220ab8f01a23c03437dec08d66439deae5b0bea82948654d2231a8aa6c9d6487a8a0382adfcf2e772b2f484b947939812f7ef1bd9459fa52c"], 0x3c, 0x2) r0 = eventfd2(0x0, 0x0) r1 = signalfd(0xffffffffffffffff, 0x0, 0x0) close(r1) signalfd(r0, &(0x7f0000000080)={[0x5]}, 0x8) pipe2$watch_queue(&(0x7f00000000c0), 0x80) r2 = signalfd(0xffffffffffffffff, 0x0, 0x0) socketpair(0x11, 0x6, 0x5, &(0x7f0000000180)={0xffffffffffffffff}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) fstat(r4, &(0x7f0000000100)) close(r2) write$eventfd(r1, 0x0, 0x0) socket(0xc, 0x1, 0x5) pidfd_getfd(r1, r3, 0x0) r5 = signalfd(0xffffffffffffffff, 0x0, 0x0) close(r5) 18:39:13 executing program 2: socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000002c0)={'batadv_slave_1\x00'}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000004, 0x10, r0, 0x0) ioctl$AUTOFS_IOC_EXPIRE(r0, 0x810c9365, &(0x7f0000000080)={{0x9820, 0x8001}, 0x100, './file0\x00'}) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x2c, 0x0, 0x300, 0x70bd29, 0x25dfdbff, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x2}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x883}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x400c001) r1 = signalfd(0xffffffffffffffff, 0x0, 0x0) close(r1) syz_io_uring_setup(0x2289, &(0x7f00000001c0)={0x0, 0x1c48, 0x45, 0x0, 0x235}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000240), &(0x7f0000000280)) 18:39:13 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x14}}, 0x0) 18:39:13 executing program 1: r0 = eventfd2(0x0, 0x0) r1 = syz_io_uring_setup(0x149b, 0x0, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_EVENTFD(r1, 0x4, &(0x7f0000000100)=r0, 0x1) 18:39:13 executing program 3: r0 = syz_clone(0x9001100, 0x0, 0x0, 0x0, 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(0x0, r0, 0x7, 0xffffffffffffffff, 0x0) getpid() pidfd_open(r0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000004, 0x10, r1, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000004, 0x10, r2, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r2, 0x4004662b, &(0x7f0000000100)=0x7) close(0xffffffffffffffff) 18:39:13 executing program 5: fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000040)='system.posix_acl_default\x00', &(0x7f0000000540)=ANY=[@ANYBLOB="02000000010001000000000002000300", @ANYRES32=0xee01, @ANYBLOB="0200e300e4af54b5771580fac2b60a1eccb4f0a417c141c9f359002ef8d4e8db92c0d2d8ef0f30fa471052447771e1ef86665223ad9c9a751f488fcdbfa8b585558ac31da93936ec7cd403fcfe63135a9d53207ed3f0a06bf508b9cebeb354f75cc550a1db7d7817feecbfdd9e8ef29d18d4fa190e958af2ed29c2baaa784a379446d79f4a4c65acde893315b6cca73c02ef5711a110", @ANYRES32=0x0, @ANYBLOB="040000000000000008080400bc9149f56fb591d3bf18b9ed6a0d44f49d5a", @ANYRES32=0xee00, @ANYBLOB="1000e1eb000400000000040000048bdb8205256baef3d819e50a2728c3b98fd6909395ba7a5b09a6cd6eb33d7add157d462882ab650c34d61bbe663c5941b846198a2b2e909ef605983690694cafebaa7e9a50cdd31813e519b0095386fdff34662cb6dd85a28f071aa8aeadc2c12ee3bc2504b7c27e01a0315396716a836732bf99b0613a6e45af5f34c8f220ab8f01a23c03437dec08d66439deae5b0bea82948654d2231a8aa6c9d6487a8a0382adfcf2e772b2f484b947939812f7ef1bd9459fa52c"], 0x3c, 0x2) r0 = eventfd2(0x0, 0x0) r1 = signalfd(0xffffffffffffffff, 0x0, 0x0) close(r1) signalfd(r0, &(0x7f0000000080)={[0x5]}, 0x8) pipe2$watch_queue(&(0x7f00000000c0), 0x80) r2 = signalfd(0xffffffffffffffff, 0x0, 0x0) socketpair(0x11, 0x6, 0x5, &(0x7f0000000180)={0xffffffffffffffff}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) fstat(r4, &(0x7f0000000100)) close(r2) write$eventfd(r1, 0x0, 0x0) socket(0xc, 0x1, 0x5) pidfd_getfd(r1, r3, 0x0) signalfd(0xffffffffffffffff, 0x0, 0x0) 18:39:13 executing program 1: r0 = eventfd2(0x0, 0x0) r1 = syz_io_uring_setup(0x149b, 0x0, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_EVENTFD(r1, 0x4, &(0x7f0000000100)=r0, 0x1) 18:39:13 executing program 2: socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000002c0)={'batadv_slave_1\x00'}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000004, 0x10, r0, 0x0) ioctl$AUTOFS_IOC_EXPIRE(r0, 0x810c9365, &(0x7f0000000080)={{0x9820, 0x8001}, 0x100, './file0\x00'}) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x2c, 0x0, 0x300, 0x70bd29, 0x25dfdbff, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x2}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x883}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x400c001) signalfd(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_setup(0x2289, &(0x7f00000001c0)={0x0, 0x1c48, 0x45, 0x0, 0x235}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000240), &(0x7f0000000280)) 18:39:13 executing program 4: r0 = syz_clone(0x9001100, 0x0, 0x0, 0x0, 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(0x0, r0, 0x7, 0xffffffffffffffff, 0x0) getpid() pidfd_open(r0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000004, 0x10, r1, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000004, 0x10, r2, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r2, 0x4004662b, &(0x7f0000000100)=0x7) syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2000) pipe(&(0x7f0000000040)) pipe2$watch_queue(&(0x7f0000000080), 0x80) 18:39:13 executing program 0: r0 = syz_clone(0x9001100, 0x0, 0x0, 0x0, 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(0x0, r0, 0x7, 0xffffffffffffffff, 0x0) getpid() pidfd_open(r0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000004, 0x10, r1, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000004, 0x10, r2, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r2, 0x4004662b, &(0x7f0000000100)=0x7) r3 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2000) close(r3) 18:39:13 executing program 3: r0 = syz_clone(0x9001100, 0x0, 0x0, 0x0, 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(0x0, r0, 0x7, 0xffffffffffffffff, 0x0) getpid() pidfd_open(r0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000004, 0x10, r1, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000004, 0x10, r2, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r2, 0x4004662b, &(0x7f0000000100)=0x7) close(0xffffffffffffffff) 18:39:13 executing program 5: fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000040)='system.posix_acl_default\x00', &(0x7f0000000540)=ANY=[@ANYBLOB="02000000010001000000000002000300", @ANYRES32=0xee01, @ANYBLOB="0200e300e4af54b5771580fac2b60a1eccb4f0a417c141c9f359002ef8d4e8db92c0d2d8ef0f30fa471052447771e1ef86665223ad9c9a751f488fcdbfa8b585558ac31da93936ec7cd403fcfe63135a9d53207ed3f0a06bf508b9cebeb354f75cc550a1db7d7817feecbfdd9e8ef29d18d4fa190e958af2ed29c2baaa784a379446d79f4a4c65acde893315b6cca73c02ef5711a110", @ANYRES32=0x0, @ANYBLOB="040000000000000008080400bc9149f56fb591d3bf18b9ed6a0d44f49d5a", @ANYRES32=0xee00, @ANYBLOB="1000e1eb000400000000040000048bdb8205256baef3d819e50a2728c3b98fd6909395ba7a5b09a6cd6eb33d7add157d462882ab650c34d61bbe663c5941b846198a2b2e909ef605983690694cafebaa7e9a50cdd31813e519b0095386fdff34662cb6dd85a28f071aa8aeadc2c12ee3bc2504b7c27e01a0315396716a836732bf99b0613a6e45af5f34c8f220ab8f01a23c03437dec08d66439deae5b0bea82948654d2231a8aa6c9d6487a8a0382adfcf2e772b2f484b947939812f7ef1bd9459fa52c"], 0x3c, 0x2) r0 = eventfd2(0x0, 0x0) r1 = signalfd(0xffffffffffffffff, 0x0, 0x0) close(r1) signalfd(r0, &(0x7f0000000080)={[0x5]}, 0x8) pipe2$watch_queue(&(0x7f00000000c0), 0x80) r2 = signalfd(0xffffffffffffffff, 0x0, 0x0) socketpair(0x11, 0x6, 0x5, &(0x7f0000000180)={0xffffffffffffffff}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) fstat(r4, &(0x7f0000000100)) close(r2) write$eventfd(r1, 0x0, 0x0) socket(0xc, 0x1, 0x5) pidfd_getfd(r1, r3, 0x0) 18:39:13 executing program 2: socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000002c0)={'batadv_slave_1\x00'}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000004, 0x10, r0, 0x0) ioctl$AUTOFS_IOC_EXPIRE(r0, 0x810c9365, &(0x7f0000000080)={{0x9820, 0x8001}, 0x100, './file0\x00'}) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x2c, 0x0, 0x300, 0x70bd29, 0x25dfdbff, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x2}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x883}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x400c001) syz_io_uring_setup(0x2289, &(0x7f00000001c0)={0x0, 0x1c48, 0x45, 0x0, 0x235}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000240), &(0x7f0000000280)) 18:39:13 executing program 5: fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000040)='system.posix_acl_default\x00', &(0x7f0000000540)=ANY=[@ANYBLOB="02000000010001000000000002000300", @ANYRES32=0xee01, @ANYBLOB="0200e300e4af54b5771580fac2b60a1eccb4f0a417c141c9f359002ef8d4e8db92c0d2d8ef0f30fa471052447771e1ef86665223ad9c9a751f488fcdbfa8b585558ac31da93936ec7cd403fcfe63135a9d53207ed3f0a06bf508b9cebeb354f75cc550a1db7d7817feecbfdd9e8ef29d18d4fa190e958af2ed29c2baaa784a379446d79f4a4c65acde893315b6cca73c02ef5711a110", @ANYRES32=0x0, @ANYBLOB="040000000000000008080400bc9149f56fb591d3bf18b9ed6a0d44f49d5a", @ANYRES32=0xee00, @ANYBLOB="1000e1eb000400000000040000048bdb8205256baef3d819e50a2728c3b98fd6909395ba7a5b09a6cd6eb33d7add157d462882ab650c34d61bbe663c5941b846198a2b2e909ef605983690694cafebaa7e9a50cdd31813e519b0095386fdff34662cb6dd85a28f071aa8aeadc2c12ee3bc2504b7c27e01a0315396716a836732bf99b0613a6e45af5f34c8f220ab8f01a23c03437dec08d66439deae5b0bea82948654d2231a8aa6c9d6487a8a0382adfcf2e772b2f484b947939812f7ef1bd9459fa52c"], 0x3c, 0x2) r0 = eventfd2(0x0, 0x0) r1 = signalfd(0xffffffffffffffff, 0x0, 0x0) close(r1) signalfd(r0, &(0x7f0000000080)={[0x5]}, 0x8) pipe2$watch_queue(&(0x7f00000000c0), 0x80) r2 = signalfd(0xffffffffffffffff, 0x0, 0x0) socketpair(0x11, 0x6, 0x5, &(0x7f0000000180)) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) fstat(r3, &(0x7f0000000100)) close(r2) write$eventfd(r1, 0x0, 0x0) socket(0xc, 0x1, 0x5) 18:39:13 executing program 1: r0 = eventfd2(0x0, 0x0) r1 = syz_io_uring_setup(0x149b, &(0x7f0000000000)={0x0, 0x0, 0x2, 0x2, 0x15e}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_EVENTFD(r1, 0x4, &(0x7f0000000100)=r0, 0x1) 18:39:13 executing program 3: r0 = syz_clone(0x9001100, 0x0, 0x0, 0x0, 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(0x0, r0, 0x7, 0xffffffffffffffff, 0x0) getpid() pidfd_open(r0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000004, 0x10, r1, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000004, 0x10, r2, 0x0) r3 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2000) close(r3) 18:39:13 executing program 2: socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000002c0)={'batadv_slave_1\x00'}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000004, 0x10, r0, 0x0) ioctl$AUTOFS_IOC_EXPIRE(r0, 0x810c9365, &(0x7f0000000080)={{0x9820, 0x8001}, 0x100, './file0\x00'}) syz_io_uring_setup(0x2289, &(0x7f00000001c0)={0x0, 0x1c48, 0x45, 0x0, 0x235}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000240), &(0x7f0000000280)) 18:39:13 executing program 5: fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000040)='system.posix_acl_default\x00', &(0x7f0000000540)=ANY=[@ANYBLOB="02000000010001000000000002000300", @ANYRES32=0xee01, @ANYBLOB="0200e300e4af54b5771580fac2b60a1eccb4f0a417c141c9f359002ef8d4e8db92c0d2d8ef0f30fa471052447771e1ef86665223ad9c9a751f488fcdbfa8b585558ac31da93936ec7cd403fcfe63135a9d53207ed3f0a06bf508b9cebeb354f75cc550a1db7d7817feecbfdd9e8ef29d18d4fa190e958af2ed29c2baaa784a379446d79f4a4c65acde893315b6cca73c02ef5711a110", @ANYRES32=0x0, @ANYBLOB="040000000000000008080400bc9149f56fb591d3bf18b9ed6a0d44f49d5a", @ANYRES32=0xee00, @ANYBLOB="1000e1eb000400000000040000048bdb8205256baef3d819e50a2728c3b98fd6909395ba7a5b09a6cd6eb33d7add157d462882ab650c34d61bbe663c5941b846198a2b2e909ef605983690694cafebaa7e9a50cdd31813e519b0095386fdff34662cb6dd85a28f071aa8aeadc2c12ee3bc2504b7c27e01a0315396716a836732bf99b0613a6e45af5f34c8f220ab8f01a23c03437dec08d66439deae5b0bea82948654d2231a8aa6c9d6487a8a0382adfcf2e772b2f484b947939812f7ef1bd9459fa52c"], 0x3c, 0x2) r0 = eventfd2(0x0, 0x0) r1 = signalfd(0xffffffffffffffff, 0x0, 0x0) close(r1) signalfd(r0, &(0x7f0000000080)={[0x5]}, 0x8) pipe2$watch_queue(&(0x7f00000000c0), 0x80) r2 = signalfd(0xffffffffffffffff, 0x0, 0x0) socketpair(0x11, 0x6, 0x5, &(0x7f0000000180)) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) fstat(r3, &(0x7f0000000100)) close(r2) socket(0xc, 0x1, 0x5) 18:39:13 executing program 4: r0 = syz_clone(0x9001100, 0x0, 0x0, 0x0, 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(0x0, r0, 0x7, 0xffffffffffffffff, 0x0) getpid() pidfd_open(r0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000004, 0x10, r1, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000004, 0x10, r2, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r2, 0x4004662b, &(0x7f0000000100)=0x7) syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2000) pipe(&(0x7f0000000040)) 18:39:13 executing program 3: r0 = syz_clone(0x9001100, 0x0, 0x0, 0x0, 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(0x0, r0, 0x7, 0xffffffffffffffff, 0x0) getpid() pidfd_open(r0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000004, 0x10, r1, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r2 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2000) close(r2) 18:39:13 executing program 0: r0 = syz_clone(0x9001100, 0x0, 0x0, 0x0, 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(0x0, r0, 0x7, 0xffffffffffffffff, 0x0) getpid() pidfd_open(r0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000004, 0x10, r1, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000004, 0x10, r2, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r2, 0x4004662b, &(0x7f0000000100)=0x7) r3 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2000) close(r3) 18:39:13 executing program 2: socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000002c0)={'batadv_slave_1\x00'}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000004, 0x10, r0, 0x0) syz_io_uring_setup(0x2289, &(0x7f00000001c0)={0x0, 0x1c48, 0x45, 0x0, 0x235}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000240), &(0x7f0000000280)) 18:39:13 executing program 1: r0 = eventfd2(0x0, 0x0) r1 = syz_io_uring_setup(0x149b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2, 0x15e}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_EVENTFD(r1, 0x4, &(0x7f0000000100)=r0, 0x1) 18:39:13 executing program 5: fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000040)='system.posix_acl_default\x00', &(0x7f0000000540)=ANY=[@ANYBLOB="02000000010001000000000002000300", @ANYRES32=0xee01, @ANYBLOB="0200e300e4af54b5771580fac2b60a1eccb4f0a417c141c9f359002ef8d4e8db92c0d2d8ef0f30fa471052447771e1ef86665223ad9c9a751f488fcdbfa8b585558ac31da93936ec7cd403fcfe63135a9d53207ed3f0a06bf508b9cebeb354f75cc550a1db7d7817feecbfdd9e8ef29d18d4fa190e958af2ed29c2baaa784a379446d79f4a4c65acde893315b6cca73c02ef5711a110", @ANYRES32=0x0, @ANYBLOB="040000000000000008080400bc9149f56fb591d3bf18b9ed6a0d44f49d5a", @ANYRES32=0xee00, @ANYBLOB="1000e1eb000400000000040000048bdb8205256baef3d819e50a2728c3b98fd6909395ba7a5b09a6cd6eb33d7add157d462882ab650c34d61bbe663c5941b846198a2b2e909ef605983690694cafebaa7e9a50cdd31813e519b0095386fdff34662cb6dd85a28f071aa8aeadc2c12ee3bc2504b7c27e01a0315396716a836732bf99b0613a6e45af5f34c8f220ab8f01a23c03437dec08d66439deae5b0bea82948654d2231a8aa6c9d6487a8a0382adfcf2e772b2f484b947939812f7ef1bd9459fa52c"], 0x3c, 0x2) r0 = eventfd2(0x0, 0x0) r1 = signalfd(0xffffffffffffffff, 0x0, 0x0) close(r1) signalfd(r0, &(0x7f0000000080)={[0x5]}, 0x8) pipe2$watch_queue(&(0x7f00000000c0), 0x80) signalfd(0xffffffffffffffff, 0x0, 0x0) socketpair(0x11, 0x6, 0x5, &(0x7f0000000180)) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) fstat(r2, &(0x7f0000000100)) socket(0xc, 0x1, 0x5) 18:39:13 executing program 4: r0 = syz_clone(0x9001100, 0x0, 0x0, 0x0, 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(0x0, r0, 0x7, 0xffffffffffffffff, 0x0) getpid() pidfd_open(r0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000004, 0x10, r1, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000004, 0x10, r2, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r2, 0x4004662b, &(0x7f0000000100)=0x7) syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2000) 18:39:13 executing program 5: fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000040)='system.posix_acl_default\x00', &(0x7f0000000540)=ANY=[@ANYBLOB="02000000010001000000000002000300", @ANYRES32=0xee01, @ANYBLOB="0200e300e4af54b5771580fac2b60a1eccb4f0a417c141c9f359002ef8d4e8db92c0d2d8ef0f30fa471052447771e1ef86665223ad9c9a751f488fcdbfa8b585558ac31da93936ec7cd403fcfe63135a9d53207ed3f0a06bf508b9cebeb354f75cc550a1db7d7817feecbfdd9e8ef29d18d4fa190e958af2ed29c2baaa784a379446d79f4a4c65acde893315b6cca73c02ef5711a110", @ANYRES32=0x0, @ANYBLOB="040000000000000008080400bc9149f56fb591d3bf18b9ed6a0d44f49d5a", @ANYRES32=0xee00, @ANYBLOB="1000e1eb000400000000040000048bdb8205256baef3d819e50a2728c3b98fd6909395ba7a5b09a6cd6eb33d7add157d462882ab650c34d61bbe663c5941b846198a2b2e909ef605983690694cafebaa7e9a50cdd31813e519b0095386fdff34662cb6dd85a28f071aa8aeadc2c12ee3bc2504b7c27e01a0315396716a836732bf99b0613a6e45af5f34c8f220ab8f01a23c03437dec08d66439deae5b0bea82948654d2231a8aa6c9d6487a8a0382adfcf2e772b2f484b947939812f7ef1bd9459fa52c"], 0x3c, 0x2) r0 = eventfd2(0x0, 0x0) r1 = signalfd(0xffffffffffffffff, 0x0, 0x0) close(r1) signalfd(r0, &(0x7f0000000080)={[0x5]}, 0x8) pipe2$watch_queue(&(0x7f00000000c0), 0x80) signalfd(0xffffffffffffffff, 0x0, 0x0) socketpair(0x11, 0x6, 0x5, &(0x7f0000000180)) pipe(&(0x7f00000001c0)) socket(0xc, 0x1, 0x5) 18:39:13 executing program 1: r0 = eventfd2(0x0, 0x0) r1 = syz_io_uring_setup(0x149b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x15e}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_EVENTFD(r1, 0x4, &(0x7f0000000100)=r0, 0x1) 18:39:13 executing program 0: r0 = syz_clone(0x9001100, 0x0, 0x0, 0x0, 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(0x0, r0, 0x7, 0xffffffffffffffff, 0x0) getpid() pidfd_open(r0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000004, 0x10, r1, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000004, 0x10, r2, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r2, 0x4004662b, &(0x7f0000000100)=0x7) r3 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2000) close(r3) 18:39:13 executing program 3: r0 = syz_clone(0x9001100, 0x0, 0x0, 0x0, 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(0x0, r0, 0x7, 0xffffffffffffffff, 0x0) getpid() pidfd_open(r0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000004, 0x10, r1, 0x0) r2 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2000) close(r2) 18:39:13 executing program 2: socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000002c0)={'batadv_slave_1\x00'}) syz_io_uring_setup(0x2289, &(0x7f00000001c0)={0x0, 0x1c48, 0x45, 0x0, 0x235}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000240), &(0x7f0000000280)) 18:39:13 executing program 4: r0 = syz_clone(0x9001100, 0x0, 0x0, 0x0, 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(0x0, r0, 0x7, 0xffffffffffffffff, 0x0) getpid() pidfd_open(r0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000004, 0x10, r1, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000004, 0x10, r2, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r2, 0x4004662b, &(0x7f0000000100)=0x7) 18:39:13 executing program 2: socket$inet_udp(0x2, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) syz_io_uring_setup(0x2289, &(0x7f00000001c0)={0x0, 0x1c48, 0x45, 0x0, 0x235}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000240), &(0x7f0000000280)) 18:39:13 executing program 5: fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000040)='system.posix_acl_default\x00', &(0x7f0000000540)=ANY=[@ANYBLOB="02000000010001000000000002000300", @ANYRES32=0xee01, @ANYBLOB="0200e300e4af54b5771580fac2b60a1eccb4f0a417c141c9f359002ef8d4e8db92c0d2d8ef0f30fa471052447771e1ef86665223ad9c9a751f488fcdbfa8b585558ac31da93936ec7cd403fcfe63135a9d53207ed3f0a06bf508b9cebeb354f75cc550a1db7d7817feecbfdd9e8ef29d18d4fa190e958af2ed29c2baaa784a379446d79f4a4c65acde893315b6cca73c02ef5711a110", @ANYRES32=0x0, @ANYBLOB="040000000000000008080400bc9149f56fb591d3bf18b9ed6a0d44f49d5a", @ANYRES32=0xee00, @ANYBLOB="1000e1eb000400000000040000048bdb8205256baef3d819e50a2728c3b98fd6909395ba7a5b09a6cd6eb33d7add157d462882ab650c34d61bbe663c5941b846198a2b2e909ef605983690694cafebaa7e9a50cdd31813e519b0095386fdff34662cb6dd85a28f071aa8aeadc2c12ee3bc2504b7c27e01a0315396716a836732bf99b0613a6e45af5f34c8f220ab8f01a23c03437dec08d66439deae5b0bea82948654d2231a8aa6c9d6487a8a0382adfcf2e772b2f484b947939812f7ef1bd9459fa52c"], 0x3c, 0x2) r0 = eventfd2(0x0, 0x0) r1 = signalfd(0xffffffffffffffff, 0x0, 0x0) close(r1) signalfd(r0, &(0x7f0000000080)={[0x5]}, 0x8) pipe2$watch_queue(&(0x7f00000000c0), 0x80) signalfd(0xffffffffffffffff, 0x0, 0x0) socketpair(0x11, 0x6, 0x5, &(0x7f0000000180)) socket(0xc, 0x1, 0x5) 18:39:13 executing program 3: r0 = syz_clone(0x9001100, 0x0, 0x0, 0x0, 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(0x0, r0, 0x7, 0xffffffffffffffff, 0x0) getpid() pidfd_open(r0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2000) close(r1) 18:39:13 executing program 1: r0 = eventfd2(0x0, 0x0) r1 = syz_io_uring_setup(0x149b, &(0x7f0000000000), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_EVENTFD(r1, 0x4, &(0x7f0000000100)=r0, 0x1) 18:39:13 executing program 5: fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000040)='system.posix_acl_default\x00', &(0x7f0000000540)=ANY=[@ANYBLOB="02000000010001000000000002000300", @ANYRES32=0xee01, @ANYBLOB="0200e300e4af54b5771580fac2b60a1eccb4f0a417c141c9f359002ef8d4e8db92c0d2d8ef0f30fa471052447771e1ef86665223ad9c9a751f488fcdbfa8b585558ac31da93936ec7cd403fcfe63135a9d53207ed3f0a06bf508b9cebeb354f75cc550a1db7d7817feecbfdd9e8ef29d18d4fa190e958af2ed29c2baaa784a379446d79f4a4c65acde893315b6cca73c02ef5711a110", @ANYRES32=0x0, @ANYBLOB="040000000000000008080400bc9149f56fb591d3bf18b9ed6a0d44f49d5a", @ANYRES32=0xee00, @ANYBLOB="1000e1eb000400000000040000048bdb8205256baef3d819e50a2728c3b98fd6909395ba7a5b09a6cd6eb33d7add157d462882ab650c34d61bbe663c5941b846198a2b2e909ef605983690694cafebaa7e9a50cdd31813e519b0095386fdff34662cb6dd85a28f071aa8aeadc2c12ee3bc2504b7c27e01a0315396716a836732bf99b0613a6e45af5f34c8f220ab8f01a23c03437dec08d66439deae5b0bea82948654d2231a8aa6c9d6487a8a0382adfcf2e772b2f484b947939812f7ef1bd9459fa52c"], 0x3c, 0x2) r0 = eventfd2(0x0, 0x0) r1 = signalfd(0xffffffffffffffff, 0x0, 0x0) close(r1) signalfd(r0, &(0x7f0000000080)={[0x5]}, 0x8) pipe2$watch_queue(&(0x7f00000000c0), 0x80) signalfd(0xffffffffffffffff, 0x0, 0x0) socket(0xc, 0x1, 0x5) 18:39:13 executing program 0: r0 = syz_clone(0x9001100, 0x0, 0x0, 0x0, 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(0x0, r0, 0x7, 0xffffffffffffffff, 0x0) getpid() pidfd_open(r0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000004, 0x10, r1, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000004, 0x10, r2, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r2, 0x4004662b, &(0x7f0000000100)=0x7) syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2000) 18:39:13 executing program 2: socket$inet_udp(0x2, 0x2, 0x0) syz_io_uring_setup(0x2289, &(0x7f00000001c0)={0x0, 0x1c48, 0x45, 0x0, 0x235}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000240), &(0x7f0000000280)) 18:39:13 executing program 1: r0 = eventfd2(0x0, 0x0) r1 = syz_io_uring_setup(0x149b, &(0x7f0000000000), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x0, &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_EVENTFD(r1, 0x4, &(0x7f0000000100)=r0, 0x1) 18:39:13 executing program 5: fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000040)='system.posix_acl_default\x00', &(0x7f0000000540)=ANY=[@ANYBLOB="02000000010001000000000002000300", @ANYRES32=0xee01, @ANYBLOB="0200e300e4af54b5771580fac2b60a1eccb4f0a417c141c9f359002ef8d4e8db92c0d2d8ef0f30fa471052447771e1ef86665223ad9c9a751f488fcdbfa8b585558ac31da93936ec7cd403fcfe63135a9d53207ed3f0a06bf508b9cebeb354f75cc550a1db7d7817feecbfdd9e8ef29d18d4fa190e958af2ed29c2baaa784a379446d79f4a4c65acde893315b6cca73c02ef5711a110", @ANYRES32=0x0, @ANYBLOB="040000000000000008080400bc9149f56fb591d3bf18b9ed6a0d44f49d5a", @ANYRES32=0xee00, @ANYBLOB="1000e1eb000400000000040000048bdb8205256baef3d819e50a2728c3b98fd6909395ba7a5b09a6cd6eb33d7add157d462882ab650c34d61bbe663c5941b846198a2b2e909ef605983690694cafebaa7e9a50cdd31813e519b0095386fdff34662cb6dd85a28f071aa8aeadc2c12ee3bc2504b7c27e01a0315396716a836732bf99b0613a6e45af5f34c8f220ab8f01a23c03437dec08d66439deae5b0bea82948654d2231a8aa6c9d6487a8a0382adfcf2e772b2f484b947939812f7ef1bd9459fa52c"], 0x3c, 0x2) r0 = eventfd2(0x0, 0x0) r1 = signalfd(0xffffffffffffffff, 0x0, 0x0) close(r1) signalfd(r0, &(0x7f0000000080)={[0x5]}, 0x8) pipe2$watch_queue(&(0x7f00000000c0), 0x80) socket(0xc, 0x1, 0x5) 18:39:13 executing program 3: r0 = syz_clone(0x9001100, 0x0, 0x0, 0x0, 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(0x0, r0, 0x7, 0xffffffffffffffff, 0x0) getpid() pidfd_open(r0, 0x0) r1 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2000) close(r1) 18:39:13 executing program 1: r0 = eventfd2(0x0, 0x0) r1 = syz_io_uring_setup(0x149b, &(0x7f0000000000), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x0, &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_EVENTFD(r1, 0x4, &(0x7f0000000100)=r0, 0x1) 18:39:13 executing program 4: r0 = syz_clone(0x9001100, 0x0, 0x0, 0x0, 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(0x0, r0, 0x7, 0xffffffffffffffff, 0x0) getpid() pidfd_open(r0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000004, 0x10, r1, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000004, 0x10, r2, 0x0) 18:39:13 executing program 0: r0 = syz_clone(0x9001100, 0x0, 0x0, 0x0, 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(0x0, r0, 0x7, 0xffffffffffffffff, 0x0) getpid() pidfd_open(r0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000004, 0x10, r1, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000004, 0x10, r2, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r2, 0x4004662b, &(0x7f0000000100)=0x7) 18:39:13 executing program 2: syz_io_uring_setup(0x2289, &(0x7f00000001c0)={0x0, 0x1c48, 0x45, 0x0, 0x235}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000240), &(0x7f0000000280)) 18:39:13 executing program 5: fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000040)='system.posix_acl_default\x00', &(0x7f0000000540)=ANY=[@ANYBLOB="02000000010001000000000002000300", @ANYRES32=0xee01, @ANYBLOB="0200e300e4af54b5771580fac2b60a1eccb4f0a417c141c9f359002ef8d4e8db92c0d2d8ef0f30fa471052447771e1ef86665223ad9c9a751f488fcdbfa8b585558ac31da93936ec7cd403fcfe63135a9d53207ed3f0a06bf508b9cebeb354f75cc550a1db7d7817feecbfdd9e8ef29d18d4fa190e958af2ed29c2baaa784a379446d79f4a4c65acde893315b6cca73c02ef5711a110", @ANYRES32=0x0, @ANYBLOB="040000000000000008080400bc9149f56fb591d3bf18b9ed6a0d44f49d5a", @ANYRES32=0xee00, @ANYBLOB="1000e1eb000400000000040000048bdb8205256baef3d819e50a2728c3b98fd6909395ba7a5b09a6cd6eb33d7add157d462882ab650c34d61bbe663c5941b846198a2b2e909ef605983690694cafebaa7e9a50cdd31813e519b0095386fdff34662cb6dd85a28f071aa8aeadc2c12ee3bc2504b7c27e01a0315396716a836732bf99b0613a6e45af5f34c8f220ab8f01a23c03437dec08d66439deae5b0bea82948654d2231a8aa6c9d6487a8a0382adfcf2e772b2f484b947939812f7ef1bd9459fa52c"], 0x3c, 0x2) r0 = eventfd2(0x0, 0x0) r1 = signalfd(0xffffffffffffffff, 0x0, 0x0) close(r1) signalfd(r0, &(0x7f0000000080)={[0x5]}, 0x8) socket(0xc, 0x1, 0x5) 18:39:13 executing program 4: r0 = syz_clone(0x9001100, 0x0, 0x0, 0x0, 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(0x0, r0, 0x7, 0xffffffffffffffff, 0x0) getpid() pidfd_open(r0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000004, 0x10, r1, 0x0) socket$inet_udp(0x2, 0x2, 0x0) 18:39:13 executing program 1: r0 = eventfd2(0x0, 0x0) r1 = syz_io_uring_setup(0x149b, &(0x7f0000000000), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x0, &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_EVENTFD(r1, 0x4, &(0x7f0000000100)=r0, 0x1) 18:39:13 executing program 0: r0 = syz_clone(0x9001100, 0x0, 0x0, 0x0, 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(0x0, r0, 0x7, 0xffffffffffffffff, 0x0) getpid() pidfd_open(r0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000004, 0x10, r1, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000004, 0x10, r2, 0x0) 18:39:13 executing program 5: fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000040)='system.posix_acl_default\x00', &(0x7f0000000540)=ANY=[@ANYBLOB="02000000010001000000000002000300", @ANYRES32=0xee01, @ANYBLOB="0200e300e4af54b5771580fac2b60a1eccb4f0a417c141c9f359002ef8d4e8db92c0d2d8ef0f30fa471052447771e1ef86665223ad9c9a751f488fcdbfa8b585558ac31da93936ec7cd403fcfe63135a9d53207ed3f0a06bf508b9cebeb354f75cc550a1db7d7817feecbfdd9e8ef29d18d4fa190e958af2ed29c2baaa784a379446d79f4a4c65acde893315b6cca73c02ef5711a110", @ANYRES32=0x0, @ANYBLOB="040000000000000008080400bc9149f56fb591d3bf18b9ed6a0d44f49d5a", @ANYRES32=0xee00, @ANYBLOB="1000e1eb000400000000040000048bdb8205256baef3d819e50a2728c3b98fd6909395ba7a5b09a6cd6eb33d7add157d462882ab650c34d61bbe663c5941b846198a2b2e909ef605983690694cafebaa7e9a50cdd31813e519b0095386fdff34662cb6dd85a28f071aa8aeadc2c12ee3bc2504b7c27e01a0315396716a836732bf99b0613a6e45af5f34c8f220ab8f01a23c03437dec08d66439deae5b0bea82948654d2231a8aa6c9d6487a8a0382adfcf2e772b2f484b947939812f7ef1bd9459fa52c"], 0x3c, 0x2) eventfd2(0x0, 0x0) r0 = signalfd(0xffffffffffffffff, 0x0, 0x0) close(r0) socket(0xc, 0x1, 0x5) 18:39:13 executing program 2: syz_io_uring_setup(0x0, &(0x7f00000001c0)={0x0, 0x1c48, 0x45, 0x0, 0x235}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000240), &(0x7f0000000280)) 18:39:13 executing program 3: r0 = syz_clone(0x9001100, 0x0, 0x0, 0x0, 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(0x0, r0, 0x7, 0xffffffffffffffff, 0x0) getpid() r1 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2000) close(r1) 18:39:13 executing program 0: r0 = syz_clone(0x9001100, 0x0, 0x0, 0x0, 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(0x0, r0, 0x7, 0xffffffffffffffff, 0x0) getpid() pidfd_open(r0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000004, 0x10, r1, 0x0) socket$inet_udp(0x2, 0x2, 0x0) 18:39:13 executing program 2: syz_io_uring_setup(0x0, &(0x7f00000001c0)={0x0, 0x1c48, 0x45, 0x0, 0x235}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000240), &(0x7f0000000280)) 18:39:13 executing program 5: fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000040)='system.posix_acl_default\x00', &(0x7f0000000540)=ANY=[@ANYBLOB="02000000010001000000000002000300", @ANYRES32=0xee01, @ANYBLOB="0200e300e4af54b5771580fac2b60a1eccb4f0a417c141c9f359002ef8d4e8db92c0d2d8ef0f30fa471052447771e1ef86665223ad9c9a751f488fcdbfa8b585558ac31da93936ec7cd403fcfe63135a9d53207ed3f0a06bf508b9cebeb354f75cc550a1db7d7817feecbfdd9e8ef29d18d4fa190e958af2ed29c2baaa784a379446d79f4a4c65acde893315b6cca73c02ef5711a110", @ANYRES32=0x0, @ANYBLOB="040000000000000008080400bc9149f56fb591d3bf18b9ed6a0d44f49d5a", @ANYRES32=0xee00, @ANYBLOB="1000e1eb000400000000040000048bdb8205256baef3d819e50a2728c3b98fd6909395ba7a5b09a6cd6eb33d7add157d462882ab650c34d61bbe663c5941b846198a2b2e909ef605983690694cafebaa7e9a50cdd31813e519b0095386fdff34662cb6dd85a28f071aa8aeadc2c12ee3bc2504b7c27e01a0315396716a836732bf99b0613a6e45af5f34c8f220ab8f01a23c03437dec08d66439deae5b0bea82948654d2231a8aa6c9d6487a8a0382adfcf2e772b2f484b947939812f7ef1bd9459fa52c"], 0x3c, 0x2) eventfd2(0x0, 0x0) signalfd(0xffffffffffffffff, 0x0, 0x0) socket(0xc, 0x1, 0x5) 18:39:13 executing program 4: r0 = syz_clone(0x9001100, 0x0, 0x0, 0x0, 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(0x0, r0, 0x7, 0xffffffffffffffff, 0x0) getpid() pidfd_open(r0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000004, 0x10, r1, 0x0) 18:39:13 executing program 3: r0 = syz_clone(0x9001100, 0x0, 0x0, 0x0, 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(0x0, r0, 0x7, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2000) close(r1) 18:39:13 executing program 1: r0 = eventfd2(0x0, 0x0) r1 = syz_io_uring_setup(0x149b, &(0x7f0000000000), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000080), 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r1, 0x4, &(0x7f0000000100)=r0, 0x1) 18:39:13 executing program 2: syz_io_uring_setup(0x0, &(0x7f00000001c0)={0x0, 0x1c48, 0x45, 0x0, 0x235}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000240), &(0x7f0000000280)) 18:39:13 executing program 1: r0 = eventfd2(0x0, 0x0) r1 = syz_io_uring_setup(0x149b, &(0x7f0000000000), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000080), 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r1, 0x4, &(0x7f0000000100)=r0, 0x1) 18:39:13 executing program 5: fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000040)='system.posix_acl_default\x00', &(0x7f0000000540)=ANY=[@ANYBLOB="02000000010001000000000002000300", @ANYRES32=0xee01, @ANYBLOB="0200e300e4af54b5771580fac2b60a1eccb4f0a417c141c9f359002ef8d4e8db92c0d2d8ef0f30fa471052447771e1ef86665223ad9c9a751f488fcdbfa8b585558ac31da93936ec7cd403fcfe63135a9d53207ed3f0a06bf508b9cebeb354f75cc550a1db7d7817feecbfdd9e8ef29d18d4fa190e958af2ed29c2baaa784a379446d79f4a4c65acde893315b6cca73c02ef5711a110", @ANYRES32=0x0, @ANYBLOB="040000000000000008080400bc9149f56fb591d3bf18b9ed6a0d44f49d5a", @ANYRES32=0xee00, @ANYBLOB="1000e1eb000400000000040000048bdb8205256baef3d819e50a2728c3b98fd6909395ba7a5b09a6cd6eb33d7add157d462882ab650c34d61bbe663c5941b846198a2b2e909ef605983690694cafebaa7e9a50cdd31813e519b0095386fdff34662cb6dd85a28f071aa8aeadc2c12ee3bc2504b7c27e01a0315396716a836732bf99b0613a6e45af5f34c8f220ab8f01a23c03437dec08d66439deae5b0bea82948654d2231a8aa6c9d6487a8a0382adfcf2e772b2f484b947939812f7ef1bd9459fa52c"], 0x3c, 0x2) eventfd2(0x0, 0x0) socket(0xc, 0x1, 0x5) 18:39:13 executing program 2: syz_io_uring_setup(0x2289, 0x0, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000240), &(0x7f0000000280)) 18:39:13 executing program 3: syz_clone(0x9001100, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2000) close(r0) 18:39:13 executing program 5: fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000040)='system.posix_acl_default\x00', &(0x7f0000000540)=ANY=[@ANYBLOB="02000000010001000000000002000300", @ANYRES32=0xee01, @ANYBLOB="0200e300e4af54b5771580fac2b60a1eccb4f0a417c141c9f359002ef8d4e8db92c0d2d8ef0f30fa471052447771e1ef86665223ad9c9a751f488fcdbfa8b585558ac31da93936ec7cd403fcfe63135a9d53207ed3f0a06bf508b9cebeb354f75cc550a1db7d7817feecbfdd9e8ef29d18d4fa190e958af2ed29c2baaa784a379446d79f4a4c65acde893315b6cca73c02ef5711a110", @ANYRES32=0x0, @ANYBLOB="040000000000000008080400bc9149f56fb591d3bf18b9ed6a0d44f49d5a", @ANYRES32=0xee00, @ANYBLOB="1000e1eb000400000000040000048bdb8205256baef3d819e50a2728c3b98fd6909395ba7a5b09a6cd6eb33d7add157d462882ab650c34d61bbe663c5941b846198a2b2e909ef605983690694cafebaa7e9a50cdd31813e519b0095386fdff34662cb6dd85a28f071aa8aeadc2c12ee3bc2504b7c27e01a0315396716a836732bf99b0613a6e45af5f34c8f220ab8f01a23c03437dec08d66439deae5b0bea82948654d2231a8aa6c9d6487a8a0382adfcf2e772b2f484b947939812f7ef1bd9459fa52c"], 0x3c, 0x2) socket(0xc, 0x1, 0x5) 18:39:13 executing program 0: r0 = syz_clone(0x9001100, 0x0, 0x0, 0x0, 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(0x0, r0, 0x7, 0xffffffffffffffff, 0x0) getpid() pidfd_open(r0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000004, 0x10, r1, 0x0) 18:39:13 executing program 4: r0 = syz_clone(0x9001100, 0x0, 0x0, 0x0, 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(0x0, r0, 0x7, 0xffffffffffffffff, 0x0) getpid() pidfd_open(r0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) 18:39:13 executing program 1: r0 = eventfd2(0x0, 0x0) r1 = syz_io_uring_setup(0x149b, &(0x7f0000000000), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000080), 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r1, 0x4, &(0x7f0000000100)=r0, 0x1) 18:39:13 executing program 3: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2000) close(r0) 18:39:13 executing program 2: syz_io_uring_setup(0x2289, 0x0, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000240), &(0x7f0000000280)) 18:39:13 executing program 0: r0 = syz_clone(0x9001100, 0x0, 0x0, 0x0, 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(0x0, r0, 0x7, 0xffffffffffffffff, 0x0) getpid() pidfd_open(r0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) 18:39:13 executing program 5: socket(0xc, 0x1, 0x5) 18:39:13 executing program 1: r0 = eventfd2(0x0, 0x0) syz_io_uring_setup(0x149b, &(0x7f0000000000), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_EVENTFD(0xffffffffffffffff, 0x4, &(0x7f0000000100)=r0, 0x1) 18:39:13 executing program 2: syz_io_uring_setup(0x2289, 0x0, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000240), &(0x7f0000000280)) 18:39:13 executing program 5: socket(0x0, 0x1, 0x5) 18:39:13 executing program 4: r0 = syz_clone(0x9001100, 0x0, 0x0, 0x0, 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(0x0, r0, 0x7, 0xffffffffffffffff, 0x0) getpid() pidfd_open(r0, 0x0) 18:39:13 executing program 3: r0 = syz_open_dev$vcsn(0x0, 0x0, 0x2000) close(r0) 18:39:13 executing program 5: socket(0x0, 0x1, 0x5) 18:39:13 executing program 2: syz_io_uring_setup(0x2289, &(0x7f00000001c0)={0x0, 0x0, 0x45, 0x0, 0x235}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000240), &(0x7f0000000280)) 18:39:13 executing program 1: r0 = eventfd2(0x0, 0x0) syz_io_uring_setup(0x149b, &(0x7f0000000000), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_EVENTFD(0xffffffffffffffff, 0x4, &(0x7f0000000100)=r0, 0x1) 18:39:13 executing program 3: r0 = syz_open_dev$vcsn(0x0, 0x0, 0x2000) close(r0) 18:39:13 executing program 0: r0 = syz_clone(0x9001100, 0x0, 0x0, 0x0, 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(0x0, r0, 0x7, 0xffffffffffffffff, 0x0) getpid() pidfd_open(r0, 0x0) 18:39:13 executing program 4: r0 = syz_clone(0x9001100, 0x0, 0x0, 0x0, 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(0x0, r0, 0x7, 0xffffffffffffffff, 0x0) getpid() 18:39:13 executing program 5: socket(0x0, 0x1, 0x5) 18:39:13 executing program 3: r0 = syz_open_dev$vcsn(0x0, 0x0, 0x2000) close(r0) 18:39:13 executing program 2: syz_io_uring_setup(0x2289, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x235}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000240), &(0x7f0000000280)) 18:39:13 executing program 1: r0 = eventfd2(0x0, 0x0) syz_io_uring_setup(0x149b, &(0x7f0000000000), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_EVENTFD(0xffffffffffffffff, 0x4, &(0x7f0000000100)=r0, 0x1) 18:39:13 executing program 5: socket(0xc, 0x0, 0x5) 18:39:13 executing program 1: eventfd2(0x0, 0x0) r0 = syz_io_uring_setup(0x149b, &(0x7f0000000000), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) 18:39:13 executing program 2: syz_io_uring_setup(0x2289, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x235}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000240), &(0x7f0000000280)) 18:39:13 executing program 5: socket(0xc, 0x0, 0x0) 18:39:13 executing program 3: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x0) close(r0) 18:39:13 executing program 0: r0 = syz_clone(0x9001100, 0x0, 0x0, 0x0, 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(0x0, r0, 0x7, 0xffffffffffffffff, 0x0) getpid() 18:39:13 executing program 3: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x0) close(r0) 18:39:13 executing program 4: r0 = syz_clone(0x9001100, 0x0, 0x0, 0x0, 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(0x0, r0, 0x7, 0xffffffffffffffff, 0x0) 18:39:13 executing program 5: r0 = syz_clone(0x9001100, 0x0, 0x0, 0x0, 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(0x0, r0, 0x7, 0xffffffffffffffff, 0x0) getpid() pidfd_open(r0, 0x0) 18:39:13 executing program 2: syz_io_uring_setup(0x2289, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x235}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000240), &(0x7f0000000280)) 18:39:13 executing program 1: eventfd2(0x0, 0x0) r0 = syz_io_uring_setup(0x149b, &(0x7f0000000000), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) 18:39:13 executing program 0: r0 = syz_clone(0x9001100, 0x0, 0x0, 0x0, 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(0x0, r0, 0x7, 0xffffffffffffffff, 0x0) 18:39:13 executing program 3: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x0) close(r0) 18:39:13 executing program 4: syz_clone(0x9001100, 0x0, 0x0, 0x0, 0x0, 0x0) 18:39:13 executing program 2: syz_io_uring_setup(0x2289, &(0x7f00000001c0)={0x0, 0x0, 0x45}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000240), &(0x7f0000000280)) 18:39:13 executing program 0: syz_clone(0x9001100, 0x0, 0x0, 0x0, 0x0, 0x0) 18:39:13 executing program 1: eventfd2(0x0, 0x0) r0 = syz_io_uring_setup(0x149b, &(0x7f0000000000), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) 18:39:13 executing program 3: syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2000) close(0xffffffffffffffff) 18:39:13 executing program 5: r0 = syz_clone(0x9001100, 0x0, 0x0, 0x0, 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(0x0, r0, 0x7, 0xffffffffffffffff, 0x0) getpid() pidfd_open(r0, 0x0) 18:39:13 executing program 4: syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 18:39:13 executing program 2: syz_io_uring_setup(0x2289, &(0x7f00000001c0)={0x0, 0x0, 0x45}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, &(0x7f0000000280)) 18:39:13 executing program 3: syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2000) close(0xffffffffffffffff) 18:39:13 executing program 2: syz_io_uring_setup(0x2289, &(0x7f00000001c0)={0x0, 0x0, 0x45}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, &(0x7f0000000280)) 18:39:13 executing program 0: syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 18:39:13 executing program 1: eventfd2(0x0, 0x0) r0 = syz_io_uring_setup(0x149b, &(0x7f0000000000), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, &(0x7f0000000100), 0x1) 18:39:13 executing program 4: syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 18:39:13 executing program 3: syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2000) close(0xffffffffffffffff) 18:39:13 executing program 0: syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 18:39:13 executing program 2: syz_io_uring_setup(0x2289, &(0x7f00000001c0)={0x0, 0x0, 0x45}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, &(0x7f0000000280)) 18:39:14 executing program 5: r0 = syz_clone(0x9001100, 0x0, 0x0, 0x0, 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(0x0, r0, 0x7, 0xffffffffffffffff, 0x0) getpid() pidfd_open(r0, 0x0) 18:39:14 executing program 3: r0 = eventfd2(0x0, 0x0) r1 = syz_io_uring_setup(0x149b, &(0x7f0000000000), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000080), 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r1, 0x4, &(0x7f0000000100)=r0, 0x1) 18:39:14 executing program 1: eventfd2(0x0, 0x0) r0 = syz_io_uring_setup(0x149b, &(0x7f0000000000), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, &(0x7f0000000100), 0x1) 18:39:14 executing program 2: syz_io_uring_setup(0x2289, &(0x7f00000001c0)={0x0, 0x0, 0x45}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000240), 0x0) 18:39:14 executing program 4: syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 18:39:14 executing program 0: syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 18:39:14 executing program 2: syz_io_uring_setup(0x2289, &(0x7f00000001c0)={0x0, 0x0, 0x45}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000240), 0x0) 18:39:14 executing program 3: syz_clone(0x9001100, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2000) close(r0) 18:39:14 executing program 0: r0 = syz_clone(0x9001100, 0x0, 0x0, 0x0, 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(0x0, r0, 0x7, 0xffffffffffffffff, 0x0) getpid() pidfd_open(r0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000004, 0x10, r1, 0x0) 18:39:14 executing program 5: r0 = syz_clone(0x9001100, 0x0, 0x0, 0x0, 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(0x0, r0, 0x7, 0xffffffffffffffff, 0x0) getpid() 18:39:14 executing program 4: r0 = syz_clone(0x9001100, 0x0, 0x0, 0x0, 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(0x0, r0, 0x7, 0xffffffffffffffff, 0x0) getpid() pidfd_open(r0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000004, 0x10, r1, 0x0) socket$inet_udp(0x2, 0x2, 0x0) 18:39:14 executing program 2: syz_io_uring_setup(0x2289, &(0x7f00000001c0)={0x0, 0x0, 0x45}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000240), 0x0) 18:39:14 executing program 1: eventfd2(0x0, 0x0) r0 = syz_io_uring_setup(0x149b, &(0x7f0000000000), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, &(0x7f0000000100), 0x1) 18:39:14 executing program 5: r0 = syz_clone(0x9001100, 0x0, 0x0, 0x0, 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(0x0, r0, 0x7, 0xffffffffffffffff, 0x0) 18:39:14 executing program 2: r0 = syz_clone(0x9001100, 0x0, 0x0, 0x0, 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(0x0, r0, 0x7, 0xffffffffffffffff, 0x0) getpid() pidfd_open(r0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000004, 0x10, r1, 0x0) socket$inet_udp(0x2, 0x2, 0x0) 18:39:14 executing program 0: r0 = syz_clone(0x9001100, 0x0, 0x0, 0x0, 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(0x0, r0, 0x7, 0xffffffffffffffff, 0x0) getpid() pidfd_open(r0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000004, 0x10, r1, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000004, 0x10, r2, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r2, 0x4004662b, &(0x7f0000000100)=0x7) syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2000) 18:39:14 executing program 4: fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000040)='system.posix_acl_default\x00', &(0x7f0000000540)=ANY=[@ANYBLOB="02000000010001000000000002000300", @ANYRES32=0xee01, @ANYBLOB="0200e300e4af54b5771580fac2b60a1eccb4f0a417c141c9f359002ef8d4e8db92c0d2d8ef0f30fa471052447771e1ef86665223ad9c9a751f488fcdbfa8b585558ac31da93936ec7cd403fcfe63135a9d53207ed3f0a06bf508b9cebeb354f75cc550a1db7d7817feecbfdd9e8ef29d18d4fa190e958af2ed29c2baaa784a379446d79f4a4c65acde893315b6cca73c02ef5711a110", @ANYRES32=0x0, @ANYBLOB="040000000000000008080400bc9149f56fb591d3bf18b9ed6a0d44f49d5a", @ANYRES32=0xee00, @ANYBLOB="1000e1eb000400000000040000048bdb8205256baef3d819e50a2728c3b98fd6909395ba7a5b09a6cd6eb33d7add157d462882ab650c34d61bbe663c5941b846198a2b2e909ef605983690694cafebaa7e9a50cdd31813e519b0095386fdff34662cb6dd85a28f071aa8aeadc2c12ee3bc2504b7c27e01a0315396716a836732bf99b0613a6e45af5f34c8f220ab8f01a23c03437dec08d66439deae5b0bea82948654d2231a8aa6c9d6487a8a0382adfcf2e772b2f484b947939812f7ef1bd9459fa52c"], 0x3c, 0x2) r0 = eventfd2(0x0, 0x0) r1 = signalfd(0xffffffffffffffff, 0x0, 0x0) close(r1) signalfd(r0, &(0x7f0000000080)={[0x5]}, 0x8) pipe2$watch_queue(&(0x7f00000000c0), 0x80) r2 = signalfd(0xffffffffffffffff, 0x0, 0x0) socketpair(0x11, 0x6, 0x5, &(0x7f0000000180)) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) fstat(r3, &(0x7f0000000100)) close(r2) socket(0xc, 0x1, 0x5) 18:39:14 executing program 3: syz_clone(0x9001100, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2000) close(r0) 18:39:14 executing program 2: r0 = syz_clone(0x9001100, 0x0, 0x0, 0x0, 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(0x0, r0, 0x7, 0xffffffffffffffff, 0x0) getpid() pidfd_open(r0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000004, 0x10, r1, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000004, 0x10, r2, 0x0) r3 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2000) close(r3) 18:39:14 executing program 5: syz_clone(0x9001100, 0x0, 0x0, 0x0, 0x0, 0x0) 18:39:14 executing program 1: r0 = syz_clone(0x9001100, 0x0, 0x0, 0x0, 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(0x0, r0, 0x7, 0xffffffffffffffff, 0x0) 18:39:14 executing program 4: fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000040)='system.posix_acl_default\x00', &(0x7f0000000540)=ANY=[@ANYBLOB="02000000010001000000000002000300", @ANYRES32=0xee01, @ANYBLOB="0200e300e4af54b5771580fac2b60a1eccb4f0a417c141c9f359002ef8d4e8db92c0d2d8ef0f30fa471052447771e1ef86665223ad9c9a751f488fcdbfa8b585558ac31da93936ec7cd403fcfe63135a9d53207ed3f0a06bf508b9cebeb354f75cc550a1db7d7817feecbfdd9e8ef29d18d4fa190e958af2ed29c2baaa784a379446d79f4a4c65acde893315b6cca73c02ef5711a110", @ANYRES32=0x0, @ANYBLOB="040000000000000008080400bc9149f56fb591d3bf18b9ed6a0d44f49d5a", @ANYRES32=0xee00, @ANYBLOB="1000e1eb000400000000040000048bdb8205256baef3d819e50a2728c3b98fd6909395ba7a5b09a6cd6eb33d7add157d462882ab650c34d61bbe663c5941b846198a2b2e909ef605983690694cafebaa7e9a50cdd31813e519b0095386fdff34662cb6dd85a28f071aa8aeadc2c12ee3bc2504b7c27e01a0315396716a836732bf99b0613a6e45af5f34c8f220ab8f01a23c03437dec08d66439deae5b0bea82948654d2231a8aa6c9d6487a8a0382adfcf2e772b2f484b947939812f7ef1bd9459fa52c"], 0x3c, 0x2) r0 = eventfd2(0x0, 0x0) r1 = signalfd(0xffffffffffffffff, 0x0, 0x0) close(r1) signalfd(r0, &(0x7f0000000080)={[0x5]}, 0x8) pipe2$watch_queue(&(0x7f00000000c0), 0x80) r2 = signalfd(0xffffffffffffffff, 0x0, 0x0) socketpair(0x11, 0x6, 0x5, &(0x7f0000000180)) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) fstat(r3, &(0x7f0000000100)) close(r2) write$eventfd(r1, 0x0, 0x0) socket(0xc, 0x1, 0x5) 18:39:14 executing program 5: syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 18:39:14 executing program 4: r0 = syz_clone(0x9001100, 0x0, 0x0, 0x0, 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(0x0, r0, 0x7, 0xffffffffffffffff, 0x0) getpid() pidfd_open(r0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000004, 0x10, r1, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000004, 0x10, r2, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r2, 0x4004662b, &(0x7f0000000100)=0x7) syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2000) pipe(&(0x7f0000000040)) pipe2$watch_queue(&(0x7f0000000080), 0x80) ptrace$cont(0x7, r0, 0x20000000000000, 0xca9) 18:39:14 executing program 1: socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000002c0)={'batadv_slave_1\x00'}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000004, 0x10, r0, 0x0) ioctl$AUTOFS_IOC_EXPIRE(r0, 0x810c9365, &(0x7f0000000080)={{0x9820, 0x8001}, 0x100, './file0\x00'}) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x2c, 0x0, 0x300, 0x70bd29, 0x25dfdbff, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x2}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x883}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x400c001) r1 = signalfd(0xffffffffffffffff, 0x0, 0x0) close(r1) syz_io_uring_setup(0x29c7, &(0x7f0000000300)={0x0, 0xc6f9, 0x800, 0x1, 0x3b, 0x0, r1}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) setsockopt$MRT_TABLE(0xffffffffffffffff, 0x0, 0xcf, &(0x7f0000000000)=0xff, 0x4) openat$pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x200000, 0x0) syz_io_uring_setup(0x2289, &(0x7f00000001c0)={0x0, 0x1c48, 0x45, 0x0, 0x235}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000240), &(0x7f0000000280)) 18:39:14 executing program 3: syz_clone(0x9001100, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2000) close(r0) 18:39:14 executing program 5: syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 18:39:14 executing program 0: r0 = syz_clone(0x9001100, 0x0, 0x0, 0x0, 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(0x0, r0, 0x7, 0xffffffffffffffff, 0x0) getpid() pidfd_open(r0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000004, 0x10, r1, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000004, 0x10, r2, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r2, 0x4004662b, &(0x7f0000000100)=0x7) r3 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2000) pipe(&(0x7f0000000040)) pipe2$watch_queue(&(0x7f0000000080), 0x80) close(r3) 18:39:14 executing program 1: syz_open_dev$vcsn(&(0x7f0000000080), 0x81, 0x3fc81ae9b3491d96) 18:39:14 executing program 5: syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 18:39:14 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(r0, 0x942e, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000004, 0x10, r2, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x84009422, &(0x7f0000000000)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0}}) ioctl$BTRFS_IOC_GET_DEV_STATS(r2, 0xc4089434, &(0x7f0000000400)={r3, 0x100, 0x1, [0x8001, 0x401, 0x9, 0x2, 0x9], [0x7ff, 0x0, 0x24, 0x0, 0x0, 0x4, 0x3, 0x1000, 0x0, 0xffffffffffffffff, 0x7, 0x5, 0x5, 0x6c, 0x8, 0x3, 0x6, 0x6, 0x9, 0x1, 0x8, 0x8, 0x3, 0x9, 0x3371000000, 0x7fffffff, 0x77, 0x5, 0xb6, 0x0, 0x8, 0x10001, 0x0, 0xffffffffffffffad, 0x81, 0x64ce, 0xffff, 0x4, 0x9, 0xffffffffffff7fff, 0xfb, 0x4, 0x4, 0x8, 0x8001, 0xa689, 0x0, 0x400, 0x0, 0x2, 0x2, 0x6, 0x1000, 0x5, 0x7fffffffffffffff, 0x6, 0x6, 0xd41, 0x3, 0xffffffffffffffff, 0x7, 0x81, 0x7, 0x1, 0x8, 0x6, 0xfff, 0x2, 0xffffffff, 0xfffffffffffffff8, 0x2, 0x2, 0x7ff, 0x7fa, 0x10000, 0x2, 0x3, 0x8000000000000001, 0x3, 0x101, 0x5e, 0x7, 0x800000000, 0x2, 0x1, 0x2, 0x5, 0x0, 0x0, 0x4, 0x40, 0x8001, 0xffffffffffffffff, 0x2f534b1b, 0x9, 0x6, 0xf35, 0x8, 0x4, 0xfffffffffffffc00, 0x3, 0xffffffffffffff3a, 0x1, 0x3, 0x4, 0x9, 0x8, 0x7fff, 0xffff, 0xf2, 0x4, 0x1, 0x401, 0x10001, 0x7, 0x3ff, 0x3, 0x8, 0x10000, 0xea2, 0xffffffffffffffff]}) close(r1) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x100000c, 0x10, r0, 0x0) r4 = syz_open_dev$vcsn(&(0x7f0000000840), 0x8001, 0x34080) setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(r4, 0x111, 0x4, 0x1, 0x4) ftruncate(r0, 0xffff) fsmount(0xffffffffffffffff, 0x0, 0x10) 18:39:14 executing program 1: syz_open_dev$vcsn(&(0x7f0000000080), 0x81, 0x3fc81ae9b3491d96) 18:39:14 executing program 2: setfsuid(0xee00) syz_clone(0x10000000, &(0x7f00000000c0)="2bba88a00af1ee4f15fec9594dcf471bf7d2e0971da91c44243df5a1bc71e7efb3ff14565ba8ab8fc55785a2401a605c2d93bc28fd6095b5c24a4fb7f8f913600fb3cb85e33dcf0d70cb2abd9707499ff4b2eef4de1b00c882eaed2d0254e6d4274c962a8d3ff2611d060846ef4eab4a818c6235e18f38597dbd5d7c70985920a1839baa8a3bc7b593275b8f04f4c933b27cda7668cf9fd6d88d8b98d2d8993770ccc66d2719c1a061d344207ab0ccd062b30f3c48236638128e8aca3bda97250371938792", 0xc5, &(0x7f0000000000), &(0x7f0000000040), &(0x7f00000001c0)="f2fcf53974687b4b58303ea5b000d7c57d047f25760ddaf4dcb8b5981c9452eb7cd14b062a20377cdab2e1ffaec82d487ef6051d04c509514682201e5e2c369daea05a7b820ebc30fbcc1e73ef4a50f737474653e47cc2459e178ad0c6ffc4694aaf3c5560a486bbaf10d6412a7104651b9a6274240f4189bb539f9f689ae23b0dfb28b90f647fd18c374d7dfb") syz_open_dev$vcsn(&(0x7f0000000080), 0x2e2, 0x2761c3) 18:39:14 executing program 1: syz_open_dev$vcsn(&(0x7f0000000080), 0x81, 0x3fc81ae9b3491d96) 18:39:14 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) fcntl$F_SET_FILE_RW_HINT(r0, 0x7, &(0x7f0000000080)=0x2) r1 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000004, 0x10, r2, 0x0) fcntl$getown(r2, 0x9) ftruncate(r1, 0xea71) 18:39:14 executing program 4: r0 = syz_clone(0x9001100, 0x0, 0x0, 0x0, 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(0x0, r0, 0x7, 0xffffffffffffffff, 0x0) getpid() pidfd_open(r0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000004, 0x10, r1, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000004, 0x10, r2, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r2, 0x4004662b, &(0x7f0000000100)=0x7) syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2000) pipe(&(0x7f0000000040)) pipe2$watch_queue(&(0x7f0000000080), 0x80) ptrace$cont(0x7, r0, 0x20000000000000, 0xca9) 18:39:14 executing program 3: syz_clone(0x9001100, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2000) 18:39:14 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) fcntl$F_SET_FILE_RW_HINT(r0, 0x7, &(0x7f0000000080)=0x2) r1 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000004, 0x10, r2, 0x0) fcntl$getown(r2, 0x9) ftruncate(r1, 0xea71) 18:39:14 executing program 1: syz_open_dev$vcsn(0x0, 0x81, 0x3fc81ae9b3491d96) 18:39:14 executing program 0: eventfd2(0x0, 0x0) write$eventfd(0xffffffffffffffff, 0x0, 0xfffffffffffffe37) 18:39:14 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) fcntl$F_SET_FILE_RW_HINT(r0, 0x7, &(0x7f0000000080)=0x2) r1 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000004, 0x10, r2, 0x0) fcntl$getown(r2, 0x9) ftruncate(r1, 0xea71) 18:39:14 executing program 1: syz_open_dev$vcsn(0x0, 0x81, 0x3fc81ae9b3491d96) 18:39:14 executing program 2: setfsuid(0xee00) syz_clone(0x10000000, &(0x7f00000000c0)="2bba88a00af1ee4f15fec9594dcf471bf7d2e0971da91c44243df5a1bc71e7efb3ff14565ba8ab8fc55785a2401a605c2d93bc28fd6095b5c24a4fb7f8f913600fb3cb85e33dcf0d70cb2abd9707499ff4b2eef4de1b00c882eaed2d0254e6d4274c962a8d3ff2611d060846ef4eab4a818c6235e18f38597dbd5d7c70985920a1839baa8a3bc7b593275b8f04f4c933b27cda7668cf9fd6d88d8b98d2d8993770ccc66d2719c1a061d344207ab0ccd062b30f3c48236638128e8aca3bda97250371938792", 0xc5, &(0x7f0000000000), &(0x7f0000000040), &(0x7f00000001c0)="f2fcf53974687b4b58303ea5b000d7c57d047f25760ddaf4dcb8b5981c9452eb7cd14b062a20377cdab2e1ffaec82d487ef6051d04c509514682201e5e2c369daea05a7b820ebc30fbcc1e73ef4a50f737474653e47cc2459e178ad0c6ffc4694aaf3c5560a486bbaf10d6412a7104651b9a6274240f4189bb539f9f689ae23b0dfb28b90f647fd18c374d7dfb") syz_open_dev$vcsn(&(0x7f0000000080), 0x2e2, 0x2761c3) 18:39:14 executing program 0: fsmount(0xffffffffffffffff, 0x0, 0x68) fsopen(&(0x7f0000000000)='binder\x00', 0x1) 18:39:14 executing program 4: r0 = syz_clone(0x9001100, 0x0, 0x0, 0x0, 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(0x0, r0, 0x7, 0xffffffffffffffff, 0x0) getpid() pidfd_open(r0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000004, 0x10, r1, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000004, 0x10, r2, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r2, 0x4004662b, &(0x7f0000000100)=0x7) syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2000) pipe(&(0x7f0000000040)) pipe2$watch_queue(&(0x7f0000000080), 0x80) ptrace$cont(0x7, r0, 0x20000000000000, 0xca9) 18:39:14 executing program 3: syz_clone(0x9001100, 0x0, 0x0, 0x0, 0x0, 0x0) 18:39:14 executing program 1: syz_open_dev$vcsn(0x0, 0x81, 0x3fc81ae9b3491d96) 18:39:14 executing program 0: fsmount(0xffffffffffffffff, 0x0, 0x68) fsopen(&(0x7f0000000000)='binder\x00', 0x1) 18:39:14 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) fcntl$F_SET_FILE_RW_HINT(r0, 0x7, &(0x7f0000000080)=0x2) openat$pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000004, 0x10, r1, 0x0) fcntl$getown(r1, 0x9) 18:39:14 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) fcntl$F_SET_FILE_RW_HINT(r0, 0x7, &(0x7f0000000080)=0x2) openat$pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000004, 0x10, r1, 0x0) 18:39:14 executing program 4: r0 = eventfd2(0xe000000, 0x800) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x84009422, &(0x7f0000000400)={0x0, 0x0, {0x0, @struct}, {0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, &(0x7f0000000000)={0x4, 0x1, {0x2, @struct={0x4}, 0x0, 0x9, 0x78fec20e, 0x10001, 0x0, 0xee, 0x40, @struct={0x6, 0xa05}, 0xc4, 0x7, [0x8, 0x4, 0x3, 0x1, 0xffff, 0x2]}, {0x7, @struct={0x4, 0x8}, 0x0, 0x5, 0xffffffff, 0x80, 0x7, 0x1000, 0x2c, @struct={0xd, 0x7}, 0x3f, 0x7fffffff, [0x9, 0x3ff, 0x10000, 0x0, 0x6]}, {0x5, @usage=0x10000, 0x0, 0x2, 0x7fffffff, 0xff, 0x4, 0x57, 0x0, @struct={0x9, 0xffff}, 0x5, 0x8, [0x2, 0x8000, 0x200, 0xfffffffffffffffe, 0xfffffffffffffffc, 0x9]}, {0x3, 0xc7c, 0x5}}) r1 = socket(0xa, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r1, 0x28, 0x2, &(0x7f0000000800), 0x8) fsmount(0xffffffffffffffff, 0x0, 0x10) 18:39:14 executing program 2: setfsuid(0xee00) syz_clone(0x10000000, &(0x7f00000000c0)="2bba88a00af1ee4f15fec9594dcf471bf7d2e0971da91c44243df5a1bc71e7efb3ff14565ba8ab8fc55785a2401a605c2d93bc28fd6095b5c24a4fb7f8f913600fb3cb85e33dcf0d70cb2abd9707499ff4b2eef4de1b00c882eaed2d0254e6d4274c962a8d3ff2611d060846ef4eab4a818c6235e18f38597dbd5d7c70985920a1839baa8a3bc7b593275b8f04f4c933b27cda7668cf9fd6d88d8b98d2d8993770ccc66d2719c1a061d344207ab0ccd062b30f3c48236638128e8aca3bda97250371938792", 0xc5, &(0x7f0000000000), &(0x7f0000000040), &(0x7f00000001c0)="f2fcf53974687b4b58303ea5b000d7c57d047f25760ddaf4dcb8b5981c9452eb7cd14b062a20377cdab2e1ffaec82d487ef6051d04c509514682201e5e2c369daea05a7b820ebc30fbcc1e73ef4a50f737474653e47cc2459e178ad0c6ffc4694aaf3c5560a486bbaf10d6412a7104651b9a6274240f4189bb539f9f689ae23b0dfb28b90f647fd18c374d7dfb") syz_open_dev$vcsn(&(0x7f0000000080), 0x2e2, 0x2761c3) 18:39:14 executing program 1: syz_open_dev$vcsn(&(0x7f0000000080), 0x0, 0x3fc81ae9b3491d96) 18:39:14 executing program 3: syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 18:39:14 executing program 4: r0 = eventfd2(0xe000000, 0x800) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x84009422, &(0x7f0000000400)={0x0, 0x0, {0x0, @struct}, {0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, &(0x7f0000000000)={0x4, 0x1, {0x2, @struct={0x4}, 0x0, 0x9, 0x78fec20e, 0x10001, 0x0, 0xee, 0x40, @struct={0x6, 0xa05}, 0xc4, 0x7, [0x8, 0x4, 0x3, 0x1, 0xffff, 0x2]}, {0x7, @struct={0x4, 0x8}, 0x0, 0x5, 0xffffffff, 0x80, 0x7, 0x1000, 0x2c, @struct={0xd, 0x7}, 0x3f, 0x7fffffff, [0x9, 0x3ff, 0x10000, 0x0, 0x6]}, {0x5, @usage=0x10000, 0x0, 0x2, 0x7fffffff, 0xff, 0x4, 0x57, 0x0, @struct={0x9, 0xffff}, 0x5, 0x8, [0x2, 0x8000, 0x200, 0xfffffffffffffffe, 0xfffffffffffffffc, 0x9]}, {0x3, 0xc7c, 0x5}}) r1 = socket(0xa, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r1, 0x28, 0x2, &(0x7f0000000800), 0x8) fsmount(0xffffffffffffffff, 0x0, 0x10) 18:39:14 executing program 2: setfsuid(0xee00) syz_clone(0x10000000, &(0x7f00000000c0)="2bba88a00af1ee4f15fec9594dcf471bf7d2e0971da91c44243df5a1bc71e7efb3ff14565ba8ab8fc55785a2401a605c2d93bc28fd6095b5c24a4fb7f8f913600fb3cb85e33dcf0d70cb2abd9707499ff4b2eef4de1b00c882eaed2d0254e6d4274c962a8d3ff2611d060846ef4eab4a818c6235e18f38597dbd5d7c70985920a1839baa8a3bc7b593275b8f04f4c933b27cda7668cf9fd6d88d8b98d2d8993770ccc66d2719c1a061d344207ab0ccd062b30f3c48236638128e8aca3bda97250371938792", 0xc5, &(0x7f0000000000), &(0x7f0000000040), &(0x7f00000001c0)="f2fcf53974687b4b58303ea5b000d7c57d047f25760ddaf4dcb8b5981c9452eb7cd14b062a20377cdab2e1ffaec82d487ef6051d04c509514682201e5e2c369daea05a7b820ebc30fbcc1e73ef4a50f737474653e47cc2459e178ad0c6ffc4694aaf3c5560a486bbaf10d6412a7104651b9a6274240f4189bb539f9f689ae23b0dfb28b90f647fd18c374d7dfb") 18:39:14 executing program 0: fsmount(0xffffffffffffffff, 0x0, 0x68) fsopen(&(0x7f0000000000)='binder\x00', 0x1) 18:39:14 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) fcntl$F_SET_FILE_RW_HINT(r0, 0x7, &(0x7f0000000080)=0x2) openat$pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) socket$inet_udp(0x2, 0x2, 0x0) 18:39:14 executing program 0: fsopen(&(0x7f0000000000)='binder\x00', 0x1) 18:39:14 executing program 3: syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 18:39:14 executing program 1: syz_open_dev$vcsn(&(0x7f0000000080), 0x0, 0x0) 18:39:14 executing program 3: syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 18:39:14 executing program 4: r0 = eventfd2(0xe000000, 0x800) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x84009422, &(0x7f0000000400)={0x0, 0x0, {0x0, @struct}, {0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, &(0x7f0000000000)={0x4, 0x1, {0x2, @struct={0x4}, 0x0, 0x9, 0x78fec20e, 0x10001, 0x0, 0xee, 0x40, @struct={0x6, 0xa05}, 0xc4, 0x7, [0x8, 0x4, 0x3, 0x1, 0xffff, 0x2]}, {0x7, @struct={0x4, 0x8}, 0x0, 0x5, 0xffffffff, 0x80, 0x7, 0x1000, 0x2c, @struct={0xd, 0x7}, 0x3f, 0x7fffffff, [0x9, 0x3ff, 0x10000, 0x0, 0x6]}, {0x5, @usage=0x10000, 0x0, 0x2, 0x7fffffff, 0xff, 0x4, 0x57, 0x0, @struct={0x9, 0xffff}, 0x5, 0x8, [0x2, 0x8000, 0x200, 0xfffffffffffffffe, 0xfffffffffffffffc, 0x9]}, {0x3, 0xc7c, 0x5}}) r1 = socket(0xa, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r1, 0x28, 0x2, &(0x7f0000000800), 0x8) fsmount(0xffffffffffffffff, 0x0, 0x10) 18:39:14 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) fcntl$F_SET_FILE_RW_HINT(r0, 0x7, &(0x7f0000000080)=0x2) openat$pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) 18:39:14 executing program 2: syz_clone(0x10000000, &(0x7f00000000c0)="2bba88a00af1ee4f15fec9594dcf471bf7d2e0971da91c44243df5a1bc71e7efb3ff14565ba8ab8fc55785a2401a605c2d93bc28fd6095b5c24a4fb7f8f913600fb3cb85e33dcf0d70cb2abd9707499ff4b2eef4de1b00c882eaed2d0254e6d4274c962a8d3ff2611d060846ef4eab4a818c6235e18f38597dbd5d7c70985920a1839baa8a3bc7b593275b8f04f4c933b27cda7668cf9fd6d88d8b98d2d8993770ccc66d2719c1a061d344207ab0ccd062b30f3c48236638128e8aca3bda97250371938792", 0xc5, &(0x7f0000000000), &(0x7f0000000040), &(0x7f00000001c0)="f2fcf53974687b4b58303ea5b000d7c57d047f25760ddaf4dcb8b5981c9452eb7cd14b062a20377cdab2e1ffaec82d487ef6051d04c509514682201e5e2c369daea05a7b820ebc30fbcc1e73ef4a50f737474653e47cc2459e178ad0c6ffc4694aaf3c5560a486bbaf10d6412a7104651b9a6274240f4189bb539f9f689ae23b0dfb28b90f647fd18c374d7dfb") 18:39:14 executing program 1: syz_open_dev$vcsn(&(0x7f0000000080), 0x0, 0x0) 18:39:14 executing program 0: fsopen(0x0, 0x1) 18:39:14 executing program 5: socket$inet_udp(0x2, 0x2, 0x0) openat$pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) 18:39:14 executing program 4: r0 = eventfd2(0xe000000, 0x800) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x84009422, &(0x7f0000000400)={0x0, 0x0, {0x0, @struct}, {0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, &(0x7f0000000000)={0x4, 0x1, {0x2, @struct={0x4}, 0x0, 0x9, 0x78fec20e, 0x10001, 0x0, 0xee, 0x40, @struct={0x6, 0xa05}, 0xc4, 0x7, [0x8, 0x4, 0x3, 0x1, 0xffff, 0x2]}, {0x7, @struct={0x4, 0x8}, 0x0, 0x5, 0xffffffff, 0x80, 0x7, 0x1000, 0x2c, @struct={0xd, 0x7}, 0x3f, 0x7fffffff, [0x9, 0x3ff, 0x10000, 0x0, 0x6]}, {0x5, @usage=0x10000, 0x0, 0x2, 0x7fffffff, 0xff, 0x4, 0x57, 0x0, @struct={0x9, 0xffff}, 0x5, 0x8, [0x2, 0x8000, 0x200, 0xfffffffffffffffe, 0xfffffffffffffffc, 0x9]}, {0x3, 0xc7c, 0x5}}) r1 = socket(0xa, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r1, 0x28, 0x2, &(0x7f0000000800), 0x8) 18:39:14 executing program 3: r0 = eventfd2(0xe000000, 0x800) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x84009422, &(0x7f0000000400)={0x0, 0x0, {0x0, @struct}, {0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, &(0x7f0000000000)={0x4, 0x1, {0x2, @struct={0x4}, 0x0, 0x9, 0x78fec20e, 0x10001, 0x0, 0xee, 0x40, @struct={0x6, 0xa05}, 0xc4, 0x7, [0x8, 0x4, 0x3, 0x1, 0xffff, 0x2]}, {0x7, @struct={0x4, 0x8}, 0x0, 0x5, 0xffffffff, 0x80, 0x7, 0x1000, 0x2c, @struct={0xd, 0x7}, 0x3f, 0x7fffffff, [0x9, 0x3ff, 0x10000, 0x0, 0x6]}, {0x5, @usage=0x10000, 0x0, 0x2, 0x7fffffff, 0xff, 0x4, 0x57, 0x0, @struct={0x9, 0xffff}, 0x5, 0x8, [0x2, 0x8000, 0x200, 0xfffffffffffffffe, 0xfffffffffffffffc, 0x9]}, {0x3, 0xc7c, 0x5}}) r1 = socket(0xa, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r1, 0x28, 0x2, &(0x7f0000000800), 0x8) fsmount(0xffffffffffffffff, 0x0, 0x10) 18:39:14 executing program 4: r0 = eventfd2(0xe000000, 0x800) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x84009422, &(0x7f0000000400)={0x0, 0x0, {0x0, @struct}, {0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, &(0x7f0000000000)={0x4, 0x1, {0x2, @struct={0x4}, 0x0, 0x9, 0x78fec20e, 0x10001, 0x0, 0xee, 0x40, @struct={0x6, 0xa05}, 0xc4, 0x7, [0x8, 0x4, 0x3, 0x1, 0xffff, 0x2]}, {0x7, @struct={0x4, 0x8}, 0x0, 0x5, 0xffffffff, 0x80, 0x7, 0x1000, 0x2c, @struct={0xd, 0x7}, 0x3f, 0x7fffffff, [0x9, 0x3ff, 0x10000, 0x0, 0x6]}, {0x5, @usage=0x10000, 0x0, 0x2, 0x7fffffff, 0xff, 0x4, 0x57, 0x0, @struct={0x9, 0xffff}, 0x5, 0x8, [0x2, 0x8000, 0x200, 0xfffffffffffffffe, 0xfffffffffffffffc, 0x9]}, {0x3, 0xc7c, 0x5}}) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(0xffffffffffffffff, 0x28, 0x2, &(0x7f0000000800), 0x8) 18:39:14 executing program 0: fsopen(0x0, 0x1) 18:39:14 executing program 2: syz_clone(0x0, &(0x7f00000000c0)="2bba88a00af1ee4f15fec9594dcf471bf7d2e0971da91c44243df5a1bc71e7efb3ff14565ba8ab8fc55785a2401a605c2d93bc28fd6095b5c24a4fb7f8f913600fb3cb85e33dcf0d70cb2abd9707499ff4b2eef4de1b00c882eaed2d0254e6d4274c962a8d3ff2611d060846ef4eab4a818c6235e18f38597dbd5d7c70985920a1839baa8a3bc7b593275b8f04f4c933b27cda7668cf9fd6d88d8b98d2d8993770ccc66d2719c1a061d344207ab0ccd062b30f3c48236638128e8aca3bda97250371938792", 0xc5, &(0x7f0000000000), &(0x7f0000000040), &(0x7f00000001c0)="f2fcf53974687b4b58303ea5b000d7c57d047f25760ddaf4dcb8b5981c9452eb7cd14b062a20377cdab2e1ffaec82d487ef6051d04c509514682201e5e2c369daea05a7b820ebc30fbcc1e73ef4a50f737474653e47cc2459e178ad0c6ffc4694aaf3c5560a486bbaf10d6412a7104651b9a6274240f4189bb539f9f689ae23b0dfb28b90f647fd18c374d7dfb") 18:39:14 executing program 5: openat$pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) 18:39:14 executing program 1: syz_open_dev$vcsn(&(0x7f0000000080), 0x0, 0x0) 18:39:14 executing program 0: fsopen(0x0, 0x1) 18:39:14 executing program 3: r0 = eventfd2(0xe000000, 0x800) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x84009422, &(0x7f0000000400)={0x0, 0x0, {0x0, @struct}, {0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, &(0x7f0000000000)={0x4, 0x1, {0x2, @struct={0x4}, 0x0, 0x9, 0x78fec20e, 0x10001, 0x0, 0xee, 0x40, @struct={0x6, 0xa05}, 0xc4, 0x7, [0x8, 0x4, 0x3, 0x1, 0xffff, 0x2]}, {0x7, @struct={0x4, 0x8}, 0x0, 0x5, 0xffffffff, 0x80, 0x7, 0x1000, 0x2c, @struct={0xd, 0x7}, 0x3f, 0x7fffffff, [0x9, 0x3ff, 0x10000, 0x0, 0x6]}, {0x5, @usage=0x10000, 0x0, 0x2, 0x7fffffff, 0xff, 0x4, 0x57, 0x0, @struct={0x9, 0xffff}, 0x5, 0x8, [0x2, 0x8000, 0x200, 0xfffffffffffffffe, 0xfffffffffffffffc, 0x9]}, {0x3, 0xc7c, 0x5}}) r1 = socket(0xa, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r1, 0x28, 0x2, &(0x7f0000000800), 0x8) fsmount(0xffffffffffffffff, 0x0, 0x10) 18:39:14 executing program 4: r0 = eventfd2(0xe000000, 0x800) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x84009422, &(0x7f0000000400)={0x0, 0x0, {0x0, @struct}, {0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, &(0x7f0000000000)={0x4, 0x1, {0x2, @struct={0x4}, 0x0, 0x9, 0x78fec20e, 0x10001, 0x0, 0xee, 0x40, @struct={0x6, 0xa05}, 0xc4, 0x7, [0x8, 0x4, 0x3, 0x1, 0xffff, 0x2]}, {0x7, @struct={0x4, 0x8}, 0x0, 0x5, 0xffffffff, 0x80, 0x7, 0x1000, 0x2c, @struct={0xd, 0x7}, 0x3f, 0x7fffffff, [0x9, 0x3ff, 0x10000, 0x0, 0x6]}, {0x5, @usage=0x10000, 0x0, 0x2, 0x7fffffff, 0xff, 0x4, 0x57, 0x0, @struct={0x9, 0xffff}, 0x5, 0x8, [0x2, 0x8000, 0x200, 0xfffffffffffffffe, 0xfffffffffffffffc, 0x9]}, {0x3, 0xc7c, 0x5}}) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(0xffffffffffffffff, 0x28, 0x2, &(0x7f0000000800), 0x8) 18:39:14 executing program 5: openat$pidfd(0xffffffffffffff9c, 0x0, 0x20000, 0x0) 18:39:14 executing program 0: fsopen(&(0x7f0000000000)='binder\x00', 0x0) 18:39:14 executing program 2: syz_clone(0x0, &(0x7f00000000c0)="2bba88a00af1ee4f15fec9594dcf471bf7d2e0971da91c44243df5a1bc71e7efb3ff14565ba8ab8fc55785a2401a605c2d93bc28fd6095b5c24a4fb7f8f913600fb3cb85e33dcf0d70cb2abd9707499ff4b2eef4de1b00c882eaed2d0254e6d4274c962a8d3ff2611d060846ef4eab4a818c6235e18f38597dbd5d7c70985920a1839baa8a3bc7b593275b8f04f4c933b27cda7668cf9fd6d88d8b98d2d8993770ccc66d2719c1a061d344207ab0ccd062b30f3c48236638128e8aca3bda97250371938792", 0xc5, &(0x7f0000000000), &(0x7f0000000040), &(0x7f00000001c0)="f2fcf53974687b4b58303ea5b000d7c57d047f25760ddaf4dcb8b5981c9452eb7cd14b062a20377cdab2e1ffaec82d487ef6051d04c509514682201e5e2c369daea05a7b820ebc30fbcc1e73ef4a50f737474653e47cc2459e178ad0c6ffc4694aaf3c5560a486bbaf10d6412a7104651b9a6274240f4189bb539f9f689ae23b0dfb28b90f647fd18c374d7dfb") 18:39:14 executing program 4: r0 = eventfd2(0xe000000, 0x800) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x84009422, &(0x7f0000000400)={0x0, 0x0, {0x0, @struct}, {0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, &(0x7f0000000000)={0x4, 0x1, {0x2, @struct={0x4}, 0x0, 0x9, 0x78fec20e, 0x10001, 0x0, 0xee, 0x40, @struct={0x6, 0xa05}, 0xc4, 0x7, [0x8, 0x4, 0x3, 0x1, 0xffff, 0x2]}, {0x7, @struct={0x4, 0x8}, 0x0, 0x5, 0xffffffff, 0x80, 0x7, 0x1000, 0x2c, @struct={0xd, 0x7}, 0x3f, 0x7fffffff, [0x9, 0x3ff, 0x10000, 0x0, 0x6]}, {0x5, @usage=0x10000, 0x0, 0x2, 0x7fffffff, 0xff, 0x4, 0x57, 0x0, @struct={0x9, 0xffff}, 0x5, 0x8, [0x2, 0x8000, 0x200, 0xfffffffffffffffe, 0xfffffffffffffffc, 0x9]}, {0x3, 0xc7c, 0x5}}) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(0xffffffffffffffff, 0x28, 0x2, &(0x7f0000000800), 0x8) 18:39:14 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000004, 0x10, 0xffffffffffffffff, 0x0) fcntl$F_SET_FILE_RW_HINT(r0, 0x25, &(0x7f0000000000)) fcntl$setflags(r0, 0x2, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = signalfd4(r0, &(0x7f00000000c0)={[0x300000000]}, 0x8, 0x80000) r4 = dup3(r0, r2, 0x0) sendmsg$BATADV_CMD_GET_ORIGINATORS(r4, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x3c, 0x0, 0x800, 0x70bd29, 0x25dfdbfd, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x3}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x2}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x9}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, &(0x7f0000000100)={0x0, 0x1, 0xffffffffffffffff, 0x8, 0x80000}) r5 = signalfd4(r1, &(0x7f0000000140)={[0xcbb9]}, 0x8, 0x80000) r6 = signalfd(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r5, 0xc0096616, &(0x7f00000001c0)={0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) close(r6) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r5, 0x7, &(0x7f0000000180)=r6, 0x1) setsockopt$bt_BT_RCVMTU(r2, 0x112, 0xd, &(0x7f0000000080), 0x2) 18:39:14 executing program 3: r0 = eventfd2(0xe000000, 0x800) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x84009422, &(0x7f0000000400)={0x0, 0x0, {0x0, @struct}, {0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, &(0x7f0000000000)={0x4, 0x1, {0x2, @struct={0x4}, 0x0, 0x9, 0x78fec20e, 0x10001, 0x0, 0xee, 0x40, @struct={0x6, 0xa05}, 0xc4, 0x7, [0x8, 0x4, 0x3, 0x1, 0xffff, 0x2]}, {0x7, @struct={0x4, 0x8}, 0x0, 0x5, 0xffffffff, 0x80, 0x7, 0x1000, 0x2c, @struct={0xd, 0x7}, 0x3f, 0x7fffffff, [0x9, 0x3ff, 0x10000, 0x0, 0x6]}, {0x5, @usage=0x10000, 0x0, 0x2, 0x7fffffff, 0xff, 0x4, 0x57, 0x0, @struct={0x9, 0xffff}, 0x5, 0x8, [0x2, 0x8000, 0x200, 0xfffffffffffffffe, 0xfffffffffffffffc, 0x9]}, {0x3, 0xc7c, 0x5}}) r1 = socket(0xa, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r1, 0x28, 0x2, &(0x7f0000000800), 0x8) fsmount(0xffffffffffffffff, 0x0, 0x10) 18:39:14 executing program 5: openat$pidfd(0xffffffffffffff9c, 0x0, 0x20000, 0x0) 18:39:14 executing program 4: r0 = eventfd2(0xe000000, 0x800) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x84009422, &(0x7f0000000400)={0x0, 0x0, {0x0, @struct}, {0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) r1 = socket(0xa, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r1, 0x28, 0x2, &(0x7f0000000800), 0x8) 18:39:14 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000004, 0x10, 0xffffffffffffffff, 0x0) fcntl$F_SET_FILE_RW_HINT(r0, 0x25, &(0x7f0000000000)) fcntl$setflags(r0, 0x2, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = signalfd4(r0, &(0x7f00000000c0)={[0x300000000]}, 0x8, 0x80000) r4 = dup3(r0, r2, 0x0) sendmsg$BATADV_CMD_GET_ORIGINATORS(r4, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x3c, 0x0, 0x800, 0x70bd29, 0x25dfdbfd, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x3}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x2}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x9}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, &(0x7f0000000100)={0x0, 0x1, 0xffffffffffffffff, 0x8, 0x80000}) r5 = signalfd4(r1, &(0x7f0000000140)={[0xcbb9]}, 0x8, 0x80000) r6 = signalfd(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r5, 0xc0096616, &(0x7f00000001c0)={0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) close(r6) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r5, 0x7, &(0x7f0000000180)=r6, 0x1) setsockopt$bt_BT_RCVMTU(r2, 0x112, 0xd, &(0x7f0000000080), 0x2) 18:39:14 executing program 3: r0 = eventfd2(0xe000000, 0x800) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x84009422, &(0x7f0000000400)={0x0, 0x0, {0x0, @struct}, {0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, &(0x7f0000000000)={0x4, 0x1, {0x2, @struct={0x4}, 0x0, 0x9, 0x78fec20e, 0x10001, 0x0, 0xee, 0x40, @struct={0x6, 0xa05}, 0xc4, 0x7, [0x8, 0x4, 0x3, 0x1, 0xffff, 0x2]}, {0x7, @struct={0x4, 0x8}, 0x0, 0x5, 0xffffffff, 0x80, 0x7, 0x1000, 0x2c, @struct={0xd, 0x7}, 0x3f, 0x7fffffff, [0x9, 0x3ff, 0x10000, 0x0, 0x6]}, {0x5, @usage=0x10000, 0x0, 0x2, 0x7fffffff, 0xff, 0x4, 0x57, 0x0, @struct={0x9, 0xffff}, 0x5, 0x8, [0x2, 0x8000, 0x200, 0xfffffffffffffffe, 0xfffffffffffffffc, 0x9]}, {0x3, 0xc7c, 0x5}}) r1 = socket(0xa, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r1, 0x28, 0x2, &(0x7f0000000800), 0x8) 18:39:14 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = getpgrp(0x0) r2 = fcntl$getown(r0, 0x9) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(0x0, r3, 0x7, 0xffffffffffffffff, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = syz_open_dev$vcsu(&(0x7f00000018c0), 0x9, 0x200000) setsockopt$MRT_DEL_VIF(0xffffffffffffffff, 0x0, 0xcb, &(0x7f0000001940)={0x0, 0x0, 0x3f, 0x9, @vifc_lcl_ifindex, @rand_addr=0x64010102}, 0x10) r6 = socket$inet_udp(0x2, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000004, 0x10, r6, 0x0) kcmp$KCMP_EPOLL_TFD(r2, r3, 0x7, r4, &(0x7f0000001900)={r5, r6, 0x80}) r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(0x0, r7, 0x7, 0xffffffffffffffff, 0x0) fstat(r0, &(0x7f0000001840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000002cc0)={&(0x7f0000001800)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000002c80)={&(0x7f0000002d00)=ANY=[@ANYBLOB="b01300000008010227bd7000fbdbdf25020000085a61913e7b7a53611b1a1a9f8eebc82c1a01c5a8154d0bab306906bdaa3129a2feae4c4d93962dd5c467fa70d33469c9c0f99b76ef0de1a200ab99ce40807a6d81962479094c9de92983a4d482654f07993710e0d25becad2dfa3e2990d375b1e3be8e6175e66f51bd455f6c7746feecf41377f5a2c5d2dfc7462246b0d8b17f4ac3e3e68086f32c7deffebb3a113b269a00568008008400", @ANYRES64, @ANYBLOB="ebfaf7d8b4a7adae740a71e51fdb34cb085588211918bbd7b535840ec2e6b0ede5a0d0ce1c02857fc43ee50a3fc0a43488c302777684b393e9fc39b8d32f7a886916b9e8f2f6074a7936a54da28af0c15bc253bda1b0adeef5bbf9600c1c48c9a997ec935feb489fd53dd0c1ad4b0ba2ebb3f330cded103659f2bc7aeb28c7e64867cd27d5ab0231f94c36cd56fd000039006b8099420d6dbd98538ef20035e9a4812d9030a60272ae7804df1120915b23896d148a71862b870c74692b0bc6bd3d06ec9d1e9d477c1900000018028a8008002700", @ANYRES32=0x0, @ANYRES64=r1, @ANYRES32=r7, @ANYBLOB='\b\x00q\x00', @ANYRES64=r8, @ANYBLOB="08c5ea022c8bc608e74021cbde68808824f1ba27d6f44c56b08cab48508703c3e982c11d0fa3726ce4c6ed2cde49b567edaf068246c4d8596de5787f1bc5afdb28b9b4a426ca141da715da0fd5d9036020d23dc3ca62fab22a2e"], 0x13b0}, 0x1, 0x0, 0x0, 0x40000}, 0x4000800) fcntl$F_SET_FILE_RW_HINT(r0, 0x25, &(0x7f0000000080)=0x2) setsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, &(0x7f00000017c0)=0x247, 0x2) r9 = socket(0x3, 0x4, 0x7ff) fstat(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$nl_netfilter(r9, &(0x7f0000001780)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="0c1600000105010329bd70000500000001000009d5014580060000002800000008002d00", @ANYRES32, @ANYBLOB="36bfe8805e9ecd9a5a7345667f5dddbaf55a4198d526fd7b46e15f4880aa106701d20026fdc25e42563f54925e38330fca8a7155d994d0c0788e3b7a0100ddb41b99a4dc6366419184ac8a5135f693aedb86f9cc19875609bab805e46c022f9be26426a9601e74c38647415074f5ebc7a2feb259d152f706fe94f2f2a03c4e3debaaf4afe55b7b07756bbdadf90565bf92e84c06981afa15990da67c7f8fe07704da4d2c6fe706f6d99c6582b4b4b4d3c26fa6997753d75f593bfea966a50a6deea0fe6057dc0884364121320bcf2dc6f45f10ea25c5fcd47473f37442595ed924e5ece26e9641080fa3db04e7cb1f4036bba19d8636d1bfc10bd8bb16596dc2e97c4b9af4f0c84b210bc07e49463d4c3b56c8156f0d29dd45caccf6160d3c77761ad6c008ec535918cbb469700754df0d300992f0185a156c946828cb48f5efe461a1ee2f0313c1d28f2d0211bea8b5e5e60d492f8a6bc97810577665188abd14b2dbe2c9ec505a9d97e8ed22adfe494f8a1fdb780eb6dfadd8ece76552eacca1c7c3b3c387dbe6def8308dac3d0426ae4b6ff13c7c5ba410eb9ae7ad25f957141bba8a6914004d0000000000000000000000ffffe000000208008000", @ANYRES32=r10, @ANYBLOB="000000c38cc4c010722a893a08b1c27da693662d5fa45733a5dd5fef7cb005fa2b8fe57757fda4195eafd4e5eacf1850f0208ab1c1ba8baf6a3be2572a0c1d7d6c9448010629e2b6c4fae7578fbdf3097ba599c63d915daa3a317c55a0bc16df67fdc8f84de8e1fafd33cf5bce121cd241e985242b24086f3db1a78289a49fb3dd2ee34314ed8fae246e042b7cf8e939d0a6291483b4a7a3a2cfd148d5ed126cc05a22933aaf5629ab4b99db47a74feef4ad254711e96231b863483ee60cfbb1efc33fa63597832b52c355a500d5e5a945e1e18a158d0075e906acda077e48c3331ec5709c72c44521c58287bc08009400", @ANYRES32=r0, @ANYBLOB="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"], 0x160c}, 0x1, 0x0, 0x0, 0x20044800}, 0x44816) 18:39:14 executing program 4: eventfd2(0xe000000, 0x800) r0 = socket(0xa, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x28, 0x2, &(0x7f0000000800), 0x8) 18:39:14 executing program 5: openat$pidfd(0xffffffffffffff9c, 0x0, 0x20000, 0x0) 18:39:14 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000004, 0x10, 0xffffffffffffffff, 0x0) fcntl$F_SET_FILE_RW_HINT(r0, 0x25, &(0x7f0000000000)) fcntl$setflags(r0, 0x2, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = signalfd4(r0, &(0x7f00000000c0)={[0x300000000]}, 0x8, 0x80000) r4 = dup3(r0, r2, 0x0) sendmsg$BATADV_CMD_GET_ORIGINATORS(r4, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x3c, 0x0, 0x800, 0x70bd29, 0x25dfdbfd, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x3}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x2}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x9}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, &(0x7f0000000100)={0x0, 0x1, 0xffffffffffffffff, 0x8, 0x80000}) r5 = signalfd4(r1, &(0x7f0000000140)={[0xcbb9]}, 0x8, 0x80000) r6 = signalfd(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r5, 0xc0096616, &(0x7f00000001c0)={0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) close(r6) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r5, 0x7, &(0x7f0000000180)=r6, 0x1) setsockopt$bt_BT_RCVMTU(r2, 0x112, 0xd, &(0x7f0000000080), 0x2) 18:39:14 executing program 2: syz_clone(0x0, &(0x7f00000000c0)="2bba88a00af1ee4f15fec9594dcf471bf7d2e0971da91c44243df5a1bc71e7efb3ff14565ba8ab8fc55785a2401a605c2d93bc28fd6095b5c24a4fb7f8f913600fb3cb85e33dcf0d70cb2abd9707499ff4b2eef4de1b00c882eaed2d0254e6d4274c962a8d3ff2611d060846ef4eab4a818c6235e18f38597dbd5d7c70985920a1839baa8a3bc7b593275b8f04f4c933b27cda7668cf9fd6d88d8b98d2d8993770ccc66d2719c1a061d344207ab0ccd062b30f3c48236638128e8aca3bda97250371938792", 0xc5, &(0x7f0000000000), &(0x7f0000000040), &(0x7f00000001c0)="f2fcf53974687b4b58303ea5b000d7c57d047f25760ddaf4dcb8b5981c9452eb7cd14b062a20377cdab2e1ffaec82d487ef6051d04c509514682201e5e2c369daea05a7b820ebc30fbcc1e73ef4a50f737474653e47cc2459e178ad0c6ffc4694aaf3c5560a486bbaf10d6412a7104651b9a6274240f4189bb539f9f689ae23b0dfb28b90f647fd18c374d7dfb") 18:39:14 executing program 4: r0 = socket(0xa, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x28, 0x2, &(0x7f0000000800), 0x8) 18:39:14 executing program 3: r0 = eventfd2(0xe000000, 0x800) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x84009422, &(0x7f0000000400)={0x0, 0x0, {0x0, @struct}, {0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, &(0x7f0000000000)={0x4, 0x1, {0x2, @struct={0x4}, 0x0, 0x9, 0x78fec20e, 0x10001, 0x0, 0xee, 0x40, @struct={0x6, 0xa05}, 0xc4, 0x7, [0x8, 0x4, 0x3, 0x1, 0xffff, 0x2]}, {0x7, @struct={0x4, 0x8}, 0x0, 0x5, 0xffffffff, 0x80, 0x7, 0x1000, 0x2c, @struct={0xd, 0x7}, 0x3f, 0x7fffffff, [0x9, 0x3ff, 0x10000, 0x0, 0x6]}, {0x5, @usage=0x10000, 0x0, 0x2, 0x7fffffff, 0xff, 0x4, 0x57, 0x0, @struct={0x9, 0xffff}, 0x5, 0x8, [0x2, 0x8000, 0x200, 0xfffffffffffffffe, 0xfffffffffffffffc, 0x9]}, {0x3, 0xc7c, 0x5}}) socket(0xa, 0x1, 0x0) 18:39:14 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000004, 0x10, 0xffffffffffffffff, 0x0) fcntl$F_SET_FILE_RW_HINT(r0, 0x25, &(0x7f0000000000)) fcntl$setflags(r0, 0x2, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = signalfd4(r0, &(0x7f00000000c0)={[0x300000000]}, 0x8, 0x80000) r4 = dup3(r0, r2, 0x0) sendmsg$BATADV_CMD_GET_ORIGINATORS(r4, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x3c, 0x0, 0x800, 0x70bd29, 0x25dfdbfd, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x3}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x2}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x9}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, &(0x7f0000000100)={0x0, 0x1, 0xffffffffffffffff, 0x8, 0x80000}) r5 = signalfd4(r1, &(0x7f0000000140)={[0xcbb9]}, 0x8, 0x80000) r6 = signalfd(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r5, 0xc0096616, &(0x7f00000001c0)={0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) close(r6) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r5, 0x7, &(0x7f0000000180)=r6, 0x1) 18:39:14 executing program 5: openat$pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) 18:39:14 executing program 0: r0 = eventfd2(0x0, 0x0) ioctl$EXT4_IOC_GETSTATE(r0, 0x40046629, &(0x7f0000000000)) write$eventfd(r0, 0x0, 0x8) r1 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = signalfd(0xffffffffffffffff, 0x0, 0x0) close(r2) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r1, 0x7, &(0x7f0000000040)=r2, 0x1) 18:39:14 executing program 5: openat$pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) 18:39:14 executing program 4: r0 = socket(0x0, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x28, 0x2, &(0x7f0000000800), 0x8) 18:39:14 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000004, 0x10, 0xffffffffffffffff, 0x0) fcntl$F_SET_FILE_RW_HINT(r0, 0x25, &(0x7f0000000000)) fcntl$setflags(r0, 0x2, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = signalfd4(r0, &(0x7f00000000c0)={[0x300000000]}, 0x8, 0x80000) r4 = dup3(r0, r2, 0x0) sendmsg$BATADV_CMD_GET_ORIGINATORS(r4, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x3c, 0x0, 0x800, 0x70bd29, 0x25dfdbfd, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x3}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x2}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x9}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, &(0x7f0000000100)={0x0, 0x1, 0xffffffffffffffff, 0x8, 0x80000}) r5 = signalfd4(r1, &(0x7f0000000140)={[0xcbb9]}, 0x8, 0x80000) r6 = signalfd(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r5, 0xc0096616, &(0x7f00000001c0)={0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) close(r6) 18:39:14 executing program 3: r0 = eventfd2(0xe000000, 0x800) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x84009422, &(0x7f0000000400)={0x0, 0x0, {0x0, @struct}, {0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) socket(0xa, 0x1, 0x0) 18:39:14 executing program 4: r0 = socket(0x0, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x28, 0x2, &(0x7f0000000800), 0x8) 18:39:14 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = signalfd(0xffffffffffffffff, 0x0, 0x0) close(r1) ioctl$BTRFS_IOC_START_SYNC(r1, 0x80089418, &(0x7f0000000140)=0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000000180)={"08286f1c5d2ede4a96599fd2678e6049", 0x0, r2, {0x7, 0x20}, {0x6, 0x4e}, 0x6, [0x9, 0x23353ee4, 0x1, 0x10000, 0x73a, 0x80, 0x4, 0x0, 0xb06, 0x8, 0x1ff, 0x20, 0xffffffff, 0x4, 0x211, 0x200]}) r3 = pidfd_open(0x0, 0x0) pidfd_getfd(r3, r1, 0x0) ioctl$SIOCGETSGCNT_IN6(r1, 0x89e1, &(0x7f0000000000)={@mcast1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}) r4 = epoll_create(0xa9) ioctl$EXT4_IOC_GETSTATE(r4, 0x40046629, &(0x7f0000000100)) sync_file_range(r3, 0x9, 0x7, 0x4) fremovexattr(r4, &(0x7f0000000280)=@known='trusted.overlay.origin\x00') fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, &(0x7f0000000040)) fcntl$F_SET_FILE_RW_HINT(r0, 0x25, &(0x7f0000000080)=0x4) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, &(0x7f00000000c0)=0x1) 18:39:14 executing program 2: syz_clone(0x10000000, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000040), &(0x7f00000001c0)="f2fcf53974687b4b58303ea5b000d7c57d047f25760ddaf4dcb8b5981c9452eb7cd14b062a20377cdab2e1ffaec82d487ef6051d04c509514682201e5e2c369daea05a7b820ebc30fbcc1e73ef4a50f737474653e47cc2459e178ad0c6ffc4694aaf3c5560a486bbaf10d6412a7104651b9a6274240f4189bb539f9f689ae23b0dfb28b90f647fd18c374d7dfb") 18:39:14 executing program 5: openat$pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) 18:39:14 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000004, 0x10, 0xffffffffffffffff, 0x0) fcntl$F_SET_FILE_RW_HINT(r0, 0x25, &(0x7f0000000000)) fcntl$setflags(r0, 0x2, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = signalfd4(r0, &(0x7f00000000c0)={[0x300000000]}, 0x8, 0x80000) r4 = dup3(r0, r2, 0x0) sendmsg$BATADV_CMD_GET_ORIGINATORS(r4, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x3c, 0x0, 0x800, 0x70bd29, 0x25dfdbfd, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x3}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x2}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x9}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, &(0x7f0000000100)={0x0, 0x1, 0xffffffffffffffff, 0x8, 0x80000}) r5 = signalfd4(r1, &(0x7f0000000140)={[0xcbb9]}, 0x8, 0x80000) signalfd(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r5, 0xc0096616, &(0x7f00000001c0)={0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) 18:39:14 executing program 4: r0 = socket(0x0, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x28, 0x2, &(0x7f0000000800), 0x8) 18:39:14 executing program 3: eventfd2(0xe000000, 0x800) socket(0xa, 0x1, 0x0) 18:39:14 executing program 0: sync_file_range(0xffffffffffffffff, 0x5, 0x7, 0xa) r0 = syz_open_dev$vcsn(&(0x7f0000000080), 0x0, 0x44183) setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(r0, 0x111, 0x4, 0x1, 0x4) ioctl$BTRFS_IOC_BALANCE_CTL(r0, 0x40049421, 0x2) 18:39:14 executing program 3: socket(0xa, 0x1, 0x0) 18:39:14 executing program 0: syz_open_dev$vcsn(&(0x7f0000000080), 0x4000000000000000, 0x44183) 18:39:14 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000004, 0x10, 0xffffffffffffffff, 0x0) fcntl$F_SET_FILE_RW_HINT(r0, 0x25, &(0x7f0000000000)) fcntl$setflags(r0, 0x2, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = signalfd4(r0, &(0x7f00000000c0)={[0x300000000]}, 0x8, 0x80000) r4 = dup3(r0, r2, 0x0) sendmsg$BATADV_CMD_GET_ORIGINATORS(r4, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x3c, 0x0, 0x800, 0x70bd29, 0x25dfdbfd, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x3}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x2}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x9}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, &(0x7f0000000100)={0x0, 0x1, 0xffffffffffffffff, 0x8, 0x80000}) signalfd4(r1, &(0x7f0000000140)={[0xcbb9]}, 0x8, 0x80000) signalfd(0xffffffffffffffff, 0x0, 0x0) 18:39:14 executing program 5: eventfd2(0x4, 0x80001) r0 = fsmount(0xffffffffffffffff, 0x1, 0x4) r1 = signalfd(0xffffffffffffffff, 0x0, 0x0) close(r1) r2 = signalfd(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000004, 0x10, r3, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000100)={'ip_vti0\x00', &(0x7f0000000040)=ANY=[@ANYBLOB='erspan0\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="100800100000150b000000047b000000000000003f299078e00000027f00000194040100"]}) r4 = signalfd(0xffffffffffffffff, 0x0, 0x0) close(r4) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000004, 0x10, r6, 0x0) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r6, 0x4018f50b, &(0x7f0000000080)={0x1, 0x2, 0xe454}) ioctl$EXT4_IOC_GROUP_ADD(r5, 0x40286608, &(0x7f0000000140)={0xe0000000, 0x4000000, 0x4, 0x1000, 0x4, 0x8}) close(r2) ioctl$KVM_IOEVENTFD(r0, 0x4040ae79, &(0x7f0000000000)={0x6000, &(0x7f00000000c0), 0x0, r4, 0x9}) write$eventfd(r2, 0x0, 0xdf694141de8745e1) 18:39:14 executing program 4: r0 = socket(0xa, 0x0, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x28, 0x2, &(0x7f0000000800), 0x8) 18:39:14 executing program 3: socket(0x0, 0x1, 0x0) 18:39:14 executing program 2: syz_clone(0x10000000, 0x0, 0x0, 0x0, &(0x7f0000000040), &(0x7f00000001c0)="f2fcf53974687b4b58303ea5b000d7c57d047f25760ddaf4dcb8b5981c9452eb7cd14b062a20377cdab2e1ffaec82d487ef6051d04c509514682201e5e2c369daea05a7b820ebc30fbcc1e73ef4a50f737474653e47cc2459e178ad0c6ffc4694aaf3c5560a486bbaf10d6412a7104651b9a6274240f4189bb539f9f689ae23b0dfb28b90f647fd18c374d7dfb") 18:39:14 executing program 5: syz_open_dev$vcsn(&(0x7f0000000080), 0x1000000000000, 0x44183) 18:39:14 executing program 3: socket(0x0, 0x1, 0x0) 18:39:14 executing program 0: syz_open_dev$vcsn(&(0x7f0000000080), 0xf6ffffff, 0x44183) 18:39:14 executing program 4: r0 = socket(0xa, 0x0, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x28, 0x2, &(0x7f0000000800), 0x8) 18:39:14 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000004, 0x10, 0xffffffffffffffff, 0x0) fcntl$F_SET_FILE_RW_HINT(r0, 0x25, &(0x7f0000000000)) fcntl$setflags(r0, 0x2, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = signalfd4(r0, &(0x7f00000000c0)={[0x300000000]}, 0x8, 0x80000) r4 = dup3(r0, r2, 0x0) sendmsg$BATADV_CMD_GET_ORIGINATORS(r4, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x3c, 0x0, 0x800, 0x70bd29, 0x25dfdbfd, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x3}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x2}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x9}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, &(0x7f0000000100)={0x0, 0x1, 0xffffffffffffffff, 0x8, 0x80000}) signalfd4(r1, &(0x7f0000000140)={[0xcbb9]}, 0x8, 0x80000) 18:39:14 executing program 0: syz_open_dev$vcsn(&(0x7f0000000080), 0xf6ffffff, 0x44183) 18:39:14 executing program 4: r0 = socket(0xa, 0x0, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x28, 0x2, &(0x7f0000000800), 0x8) 18:39:14 executing program 3: socket(0x0, 0x1, 0x0) 18:39:14 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000004, 0x10, 0xffffffffffffffff, 0x0) fcntl$F_SET_FILE_RW_HINT(r0, 0x25, &(0x7f0000000000)) fcntl$setflags(r0, 0x2, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = signalfd4(r0, &(0x7f00000000c0)={[0x300000000]}, 0x8, 0x80000) r3 = dup3(r0, r1, 0x0) sendmsg$BATADV_CMD_GET_ORIGINATORS(r3, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x3c, 0x0, 0x800, 0x70bd29, 0x25dfdbfd, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x3}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x2}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x9}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, &(0x7f0000000100)={0x0, 0x1, 0xffffffffffffffff, 0x8, 0x80000}) 18:39:14 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000004, 0x10, r1, 0x0) fcntl$F_SET_FILE_RW_HINT(r0, 0x7, &(0x7f0000000080)=0x1) r2 = syz_open_dev$vcsu(&(0x7f0000000000), 0x5, 0x40) connect$vsock_stream(r2, &(0x7f00000000c0)={0x28, 0x0, 0x3c17916748a81476, @host}, 0x10) syz_open_dev$vcsu(&(0x7f0000000040), 0x938, 0x401) ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(r2, 0x942e, 0x0) 18:39:14 executing program 0: syz_open_dev$vcsn(&(0x7f0000000080), 0xf6ffffff, 0x44183) 18:39:14 executing program 2: syz_clone(0x10000000, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)="f2fcf53974687b4b58303ea5b000d7c57d047f25760ddaf4dcb8b5981c9452eb7cd14b062a20377cdab2e1ffaec82d487ef6051d04c509514682201e5e2c369daea05a7b820ebc30fbcc1e73ef4a50f737474653e47cc2459e178ad0c6ffc4694aaf3c5560a486bbaf10d6412a7104651b9a6274240f4189bb539f9f689ae23b0dfb28b90f647fd18c374d7dfb") 18:39:14 executing program 0: syz_open_dev$vcsn(0x0, 0xf6ffffff, 0x44183) 18:39:14 executing program 3: socket(0xa, 0x0, 0x0) 18:39:14 executing program 4: socket(0xa, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(0xffffffffffffffff, 0x28, 0x2, &(0x7f0000000800), 0x8) 18:39:14 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000004, 0x10, r1, 0x0) fcntl$F_SET_FILE_RW_HINT(r0, 0x7, &(0x7f0000000080)=0x1) r2 = syz_open_dev$vcsu(&(0x7f0000000000), 0x5, 0x40) connect$vsock_stream(r2, &(0x7f00000000c0)={0x28, 0x0, 0x3c17916748a81476, @host}, 0x10) syz_open_dev$vcsu(&(0x7f0000000040), 0x938, 0x401) ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(r2, 0x942e, 0x0) 18:39:14 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000004, 0x10, 0xffffffffffffffff, 0x0) fcntl$F_SET_FILE_RW_HINT(r0, 0x25, &(0x7f0000000000)) fcntl$setflags(r0, 0x2, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) signalfd4(r0, &(0x7f00000000c0)={[0x300000000]}, 0x8, 0x80000) r2 = dup3(r0, r1, 0x0) sendmsg$BATADV_CMD_GET_ORIGINATORS(r2, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x3c, 0x0, 0x800, 0x70bd29, 0x25dfdbfd, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x3}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x2}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x9}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x0) 18:39:14 executing program 3: socket(0xa, 0x0, 0x0) 18:39:14 executing program 4: socket(0xa, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(0xffffffffffffffff, 0x28, 0x2, &(0x7f0000000800), 0x8) 18:39:14 executing program 0: syz_open_dev$vcsn(0x0, 0xf6ffffff, 0x44183) 18:39:14 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000004, 0x10, 0xffffffffffffffff, 0x0) fcntl$F_SET_FILE_RW_HINT(r0, 0x25, &(0x7f0000000000)) fcntl$setflags(r0, 0x2, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) signalfd4(r0, &(0x7f00000000c0)={[0x300000000]}, 0x8, 0x80000) dup3(r0, r1, 0x0) 18:39:14 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000004, 0x10, r1, 0x0) fcntl$F_SET_FILE_RW_HINT(r0, 0x7, &(0x7f0000000080)=0x1) r2 = syz_open_dev$vcsu(&(0x7f0000000000), 0x5, 0x40) connect$vsock_stream(r2, &(0x7f00000000c0)={0x28, 0x0, 0x3c17916748a81476, @host}, 0x10) syz_open_dev$vcsu(&(0x7f0000000040), 0x938, 0x401) ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(r2, 0x942e, 0x0) 18:39:14 executing program 0: syz_open_dev$vcsn(0x0, 0xf6ffffff, 0x44183) 18:39:14 executing program 2: syz_clone(0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0) 18:39:14 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000004, 0x10, 0xffffffffffffffff, 0x0) fcntl$F_SET_FILE_RW_HINT(r0, 0x25, &(0x7f0000000000)) fcntl$setflags(r0, 0x2, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r0, r1, 0x0) 18:39:14 executing program 3: socket(0xa, 0x0, 0x0) 18:39:14 executing program 4: socket(0xa, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(0xffffffffffffffff, 0x28, 0x2, &(0x7f0000000800), 0x8) 18:39:14 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000004, 0x10, r1, 0x0) fcntl$F_SET_FILE_RW_HINT(r0, 0x7, &(0x7f0000000080)=0x1) r2 = syz_open_dev$vcsu(&(0x7f0000000000), 0x5, 0x40) connect$vsock_stream(r2, &(0x7f00000000c0)={0x28, 0x0, 0x3c17916748a81476, @host}, 0x10) syz_open_dev$vcsu(&(0x7f0000000040), 0x938, 0x401) 18:39:14 executing program 0: syz_open_dev$vcsn(&(0x7f0000000080), 0x0, 0x44183) 18:39:14 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000004, 0x10, 0xffffffffffffffff, 0x0) fcntl$F_SET_FILE_RW_HINT(r0, 0x25, &(0x7f0000000000)) fcntl$setflags(r0, 0x2, 0x0) dup3(r0, 0xffffffffffffffff, 0x0) 18:39:14 executing program 0: syz_open_dev$vcsn(&(0x7f0000000080), 0x0, 0x44183) 18:39:15 executing program 4: r0 = socket(0xa, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x28, 0x2, 0x0, 0x0) 18:39:15 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) fcntl$F_SET_FILE_RW_HINT(r0, 0x25, &(0x7f0000000080)=0x3) 18:39:15 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000004, 0x10, r1, 0x0) fcntl$F_SET_FILE_RW_HINT(r0, 0x7, &(0x7f0000000080)=0x1) r2 = syz_open_dev$vcsu(&(0x7f0000000000), 0x5, 0x40) connect$vsock_stream(r2, &(0x7f00000000c0)={0x28, 0x0, 0x3c17916748a81476, @host}, 0x10) 18:39:15 executing program 3: r0 = eventfd2(0x0, 0x0) fremovexattr(r0, &(0x7f0000000000)=@random={'security.', '*!]\'\x00'}) write$eventfd(r0, 0x0, 0x40000000000000) 18:39:15 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000004, 0x10, r1, 0x0) fcntl$F_SET_FILE_RW_HINT(r0, 0x7, &(0x7f0000000080)=0x1) syz_open_dev$vcsu(&(0x7f0000000000), 0x5, 0x40) 18:39:15 executing program 4: r0 = socket(0xa, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x28, 0x2, 0x0, 0x0) (fail_nth: 1) 18:39:15 executing program 0: syz_open_dev$vcsn(&(0x7f0000000080), 0x0, 0x44183) 18:39:15 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000004, 0x10, 0xffffffffffffffff, 0x0) fcntl$F_SET_FILE_RW_HINT(r0, 0x25, &(0x7f0000000000)) fcntl$setflags(r0, 0x2, 0x0) dup3(r0, 0xffffffffffffffff, 0x0) 18:39:15 executing program 2: syz_clone(0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 1) 18:39:15 executing program 3: r0 = eventfd2(0x0, 0x0) fremovexattr(r0, &(0x7f0000000000)=@random={'security.', '*!]\'\x00'}) write$eventfd(r0, 0x0, 0x40000000000000) 18:39:15 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000004, 0x10, 0xffffffffffffffff, 0x0) fcntl$F_SET_FILE_RW_HINT(r0, 0x25, &(0x7f0000000000)) fcntl$setflags(r0, 0x2, 0x0) dup3(r0, 0xffffffffffffffff, 0x0) 18:39:15 executing program 0: syz_open_dev$vcsn(&(0x7f0000000080), 0xf6ffffff, 0x0) 18:39:15 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000004, 0x10, r1, 0x0) fcntl$F_SET_FILE_RW_HINT(r0, 0x7, &(0x7f0000000080)=0x1) 18:39:15 executing program 3: r0 = eventfd2(0x0, 0x0) fremovexattr(r0, &(0x7f0000000000)=@random={'security.', '*!]\'\x00'}) write$eventfd(r0, 0x0, 0x40000000000000) 18:39:15 executing program 0: syz_open_dev$vcsn(&(0x7f0000000080), 0xf6ffffff, 0x0) 18:39:15 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000004, 0x10, 0xffffffffffffffff, 0x0) fcntl$F_SET_FILE_RW_HINT(r0, 0x25, &(0x7f0000000000)) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r0, r1, 0x0) 18:39:15 executing program 3: r0 = eventfd2(0x0, 0x0) fremovexattr(r0, &(0x7f0000000000)=@random={'security.', '*!]\'\x00'}) [ 703.655950][T14471] FAULT_INJECTION: forcing a failure. [ 703.655950][T14471] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 703.672147][T14478] FAULT_INJECTION: forcing a failure. [ 703.672147][T14478] name failslab, interval 1, probability 0, space 0, times 0 [ 703.724073][T14471] CPU: 0 PID: 14471 Comm: syz-executor.4 Not tainted 5.15.74-syzkaller-04383-g7f2e600bf63a #0 [ 703.734227][T14471] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/11/2022 [ 703.744122][T14471] Call Trace: [ 703.747247][T14471] [ 703.750032][T14471] dump_stack_lvl+0x151/0x1b7 [ 703.754554][T14471] ? bfq_pos_tree_add_move+0x43e/0x43e [ 703.759827][T14471] ? avc_has_perm_noaudit+0x2ec/0x450 [ 703.765050][T14471] dump_stack+0x15/0x17 [ 703.769034][T14471] should_fail+0x3c0/0x510 [ 703.773308][T14471] should_fail_usercopy+0x1a/0x20 [ 703.778151][T14471] _copy_to_user+0x20/0x90 [ 703.782409][T14471] simple_read_from_buffer+0xdd/0x160 [ 703.787867][T14471] proc_fail_nth_read+0x1af/0x220 [ 703.792725][T14471] ? proc_fault_inject_write+0x3a0/0x3a0 [ 703.798279][T14471] ? security_file_permission+0x497/0x5f0 [ 703.803845][T14471] ? proc_fault_inject_write+0x3a0/0x3a0 [ 703.809571][T14471] vfs_read+0x299/0xd80 [ 703.813557][T14471] ? kernel_read+0x1f0/0x1f0 [ 703.818252][T14471] ? __kasan_check_write+0x14/0x20 [ 703.823275][T14471] ? mutex_lock+0xb6/0x130 [ 703.827531][T14471] ? wait_for_completion_killable_timeout+0x10/0x10 [ 703.833948][T14471] ? __fdget_pos+0x26d/0x310 [ 703.838559][T14471] ? ksys_read+0x77/0x2c0 [ 703.842728][T14471] ksys_read+0x198/0x2c0 [ 703.846795][T14471] ? __ia32_sys_recv+0xb0/0xb0 [ 703.851396][T14471] ? vfs_write+0x1050/0x1050 [ 703.855828][T14471] ? debug_smp_processor_id+0x17/0x20 [ 703.861042][T14471] __x64_sys_read+0x7b/0x90 [ 703.865463][T14471] do_syscall_64+0x44/0xd0 [ 703.869709][T14471] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 703.875520][T14471] RIP: 0033:0x7f15b60df2ec [ 703.879776][T14471] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 703.899219][T14471] RSP: 002b:00007f15b4ea1160 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 703.907462][T14471] RAX: ffffffffffffffda RBX: 00007f15b624df80 RCX: 00007f15b60df2ec [ 703.915277][T14471] RDX: 000000000000000f RSI: 00007f15b4ea11e0 RDI: 0000000000000004 [ 703.923207][T14471] RBP: 00007f15b4ea11d0 R08: 0000000000000000 R09: 0000000000000000 [ 703.931019][T14471] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 703.938828][T14471] R13: 00007fff062f7cef R14: 00007f15b4ea1300 R15: 0000000000022000 [ 703.946851][T14471] [ 703.949708][T14478] CPU: 1 PID: 14478 Comm: syz-executor.2 Not tainted 5.15.74-syzkaller-04383-g7f2e600bf63a #0 [ 703.959880][T14478] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/11/2022 [ 703.969847][T14478] Call Trace: [ 703.972965][T14478] [ 703.975744][T14478] dump_stack_lvl+0x151/0x1b7 [ 703.980258][T14478] ? bfq_pos_tree_add_move+0x43e/0x43e [ 703.985563][T14478] ? do_handle_mm_fault+0x142f/0x2370 [ 703.990761][T14478] dump_stack+0x15/0x17 [ 703.994755][T14478] should_fail+0x3c0/0x510 [ 703.999005][T14478] __should_failslab+0x9f/0xe0 [ 704.003605][T14478] should_failslab+0x9/0x20 [ 704.007958][T14478] kmem_cache_alloc+0x4f/0x2f0 [ 704.012544][T14478] ? dup_task_struct+0x53/0xa60 [ 704.017331][T14478] ? __kasan_check_write+0x14/0x20 [ 704.022448][T14478] dup_task_struct+0x53/0xa60 [ 704.027044][T14478] ? __kasan_check_write+0x14/0x20 [ 704.031907][T14478] copy_process+0x579/0x3250 [ 704.036451][T14478] ? __kasan_check_write+0x14/0x20 [ 704.041393][T14478] ? proc_fail_nth_write+0x213/0x290 [ 704.046510][T14478] ? proc_fail_nth_read+0x220/0x220 [ 704.051551][T14478] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 704.056618][T14478] ? vfs_write+0x9af/0x1050 [ 704.060960][T14478] ? vmacache_update+0xb7/0x120 [ 704.065642][T14478] kernel_clone+0x22d/0x990 [ 704.069975][T14478] ? file_end_write+0x1b0/0x1b0 [ 704.074667][T14478] ? __kasan_check_write+0x14/0x20 [ 704.079609][T14478] ? create_io_thread+0x1e0/0x1e0 [ 704.084561][T14478] ? __mutex_lock_slowpath+0x10/0x10 [ 704.089690][T14478] __x64_sys_clone+0x289/0x310 [ 704.094306][T14478] ? __do_sys_vfork+0x130/0x130 [ 704.098963][T14478] ? debug_smp_processor_id+0x17/0x20 [ 704.104168][T14478] do_syscall_64+0x44/0xd0 [ 704.108424][T14478] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 704.114150][T14478] RIP: 0033:0x7fb67320a5a9 [ 704.118405][T14478] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 704.137995][T14478] RSP: 002b:00007fb671f7e118 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 704.146232][T14478] RAX: ffffffffffffffda RBX: 00007fb67332af80 RCX: 00007fb67320a5a9 [ 704.154036][T14478] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000010000000 [ 704.161847][T14478] RBP: 00007fb671f7e1d0 R08: 0000000000000000 R09: 0000000000000000 18:39:15 executing program 4: r0 = socket(0xa, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x28, 0x2, 0x0, 0x0) 18:39:15 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) fcntl$F_SET_FILE_RW_HINT(r0, 0x7, &(0x7f0000000080)=0x1) 18:39:15 executing program 0: syz_open_dev$vcsn(&(0x7f0000000080), 0xf6ffffff, 0x0) 18:39:15 executing program 2: syz_clone(0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 2) 18:39:15 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000004, 0x10, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r0, r1, 0x0) 18:39:15 executing program 3: fremovexattr(0xffffffffffffffff, &(0x7f0000000000)=@random={'security.', '*!]\'\x00'}) 18:39:15 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) fcntl$F_SET_FILE_RW_HINT(r0, 0x7, &(0x7f0000000080)=0x1) 18:39:15 executing program 0: r0 = eventfd2(0x0, 0x0) fremovexattr(r0, &(0x7f0000000000)=@random={'security.', '*!]\'\x00'}) 18:39:15 executing program 4: r0 = socket(0xa, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x6, 0x2, 0x0, 0x0) 18:39:15 executing program 3: fremovexattr(0xffffffffffffffff, &(0x7f0000000000)=@random={'security.', '*!]\'\x00'}) 18:39:15 executing program 4: r0 = socket(0xa, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x29, 0x2, 0x0, 0x0) 18:39:15 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r0, r1, 0x0) [ 704.169661][T14478] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000001 [ 704.177471][T14478] R13: 00007ffe782f632f R14: 00007fb671f7e300 R15: 0000000000022000 [ 704.185284][T14478] 18:39:15 executing program 1: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(0xffffffffffffffff, r0, 0x0) 18:39:15 executing program 4: r0 = socket(0xa, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x28, 0x2, 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000004, 0x10, r1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00'}) 18:39:15 executing program 0: r0 = eventfd2(0x0, 0x0) fremovexattr(r0, &(0x7f0000000000)=@random={'security.', '*!]\'\x00'}) [ 704.240533][T14509] FAULT_INJECTION: forcing a failure. [ 704.240533][T14509] name failslab, interval 1, probability 0, space 0, times 0 [ 704.260334][T14509] CPU: 0 PID: 14509 Comm: syz-executor.2 Not tainted 5.15.74-syzkaller-04383-g7f2e600bf63a #0 [ 704.270416][T14509] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/11/2022 [ 704.280303][T14509] Call Trace: [ 704.283424][T14509] [ 704.286205][T14509] dump_stack_lvl+0x151/0x1b7 [ 704.290718][T14509] ? bfq_pos_tree_add_move+0x43e/0x43e [ 704.296010][T14509] ? __kasan_slab_alloc+0xc4/0xe0 [ 704.300871][T14509] ? kmem_cache_alloc+0x189/0x2f0 [ 704.305732][T14509] dump_stack+0x15/0x17 [ 704.309723][T14509] should_fail+0x3c0/0x510 [ 704.313976][T14509] ? __get_vm_area_node+0x13a/0x380 [ 704.319012][T14509] __should_failslab+0x9f/0xe0 [ 704.323610][T14509] should_failslab+0x9/0x20 [ 704.327951][T14509] kmem_cache_alloc_trace+0x4a/0x310 [ 704.333070][T14509] __get_vm_area_node+0x13a/0x380 [ 704.338336][T14509] __vmalloc_node_range+0xda/0x800 [ 704.343281][T14509] ? copy_process+0x579/0x3250 [ 704.348059][T14509] ? kmem_cache_alloc+0x1c1/0x2f0 [ 704.352916][T14509] ? dup_task_struct+0x53/0xa60 [ 704.357600][T14509] dup_task_struct+0x61f/0xa60 [ 704.362209][T14509] ? copy_process+0x579/0x3250 [ 704.366893][T14509] ? __kasan_check_write+0x14/0x20 [ 704.371834][T14509] copy_process+0x579/0x3250 [ 704.376263][T14509] ? __kasan_check_write+0x14/0x20 [ 704.381232][T14509] ? proc_fail_nth_write+0x213/0x290 [ 704.386333][T14509] ? proc_fail_nth_read+0x220/0x220 [ 704.391364][T14509] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 704.396315][T14509] ? vfs_write+0x9af/0x1050 [ 704.400654][T14509] ? vmacache_update+0xb7/0x120 [ 704.405337][T14509] kernel_clone+0x22d/0x990 [ 704.409763][T14509] ? file_end_write+0x1b0/0x1b0 [ 704.414454][T14509] ? __kasan_check_write+0x14/0x20 [ 704.419398][T14509] ? create_io_thread+0x1e0/0x1e0 [ 704.424259][T14509] ? __mutex_lock_slowpath+0x10/0x10 [ 704.429505][T14509] __x64_sys_clone+0x289/0x310 [ 704.434214][T14509] ? __do_sys_vfork+0x130/0x130 [ 704.438896][T14509] ? debug_smp_processor_id+0x17/0x20 [ 704.444113][T14509] do_syscall_64+0x44/0xd0 [ 704.448359][T14509] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 704.454173][T14509] RIP: 0033:0x7fb67320a5a9 [ 704.458430][T14509] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 704.477961][T14509] RSP: 002b:00007fb671f7e118 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 704.486382][T14509] RAX: ffffffffffffffda RBX: 00007fb67332af80 RCX: 00007fb67320a5a9 [ 704.494193][T14509] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000010000000 [ 704.502135][T14509] RBP: 00007fb671f7e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 704.509944][T14509] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000001 [ 704.517791][T14509] R13: 00007ffe782f632f R14: 00007fb671f7e300 R15: 0000000000022000 [ 704.525739][T14509] [ 704.528941][T14509] syz-executor.2: vmalloc error: size 32768, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz2,mems_allowed=0 [ 704.545074][T14509] CPU: 0 PID: 14509 Comm: syz-executor.2 Not tainted 5.15.74-syzkaller-04383-g7f2e600bf63a #0 [ 704.555129][T14509] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/11/2022 [ 704.565035][T14509] Call Trace: [ 704.568152][T14509] [ 704.570927][T14509] dump_stack_lvl+0x151/0x1b7 [ 704.575439][T14509] ? bfq_pos_tree_add_move+0x43e/0x43e [ 704.580733][T14509] ? pr_cont_kernfs_name+0xe6/0x100 [ 704.585767][T14509] dump_stack+0x15/0x17 [ 704.589758][T14509] warn_alloc+0x242/0x3d0 [ 704.593926][T14509] ? zone_watermark_ok_safe+0x280/0x280 [ 704.599397][T14509] ? __get_vm_area_node+0x36a/0x380 [ 704.604427][T14509] __vmalloc_node_range+0x2be/0x800 [ 704.609470][T14509] ? dup_task_struct+0x53/0xa60 [ 704.614148][T14509] dup_task_struct+0x61f/0xa60 [ 704.618746][T14509] ? copy_process+0x579/0x3250 [ 704.623346][T14509] ? __kasan_check_write+0x14/0x20 [ 704.628294][T14509] copy_process+0x579/0x3250 [ 704.632723][T14509] ? __kasan_check_write+0x14/0x20 [ 704.637755][T14509] ? proc_fail_nth_write+0x213/0x290 [ 704.642875][T14509] ? proc_fail_nth_read+0x220/0x220 [ 704.647914][T14509] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 704.652950][T14509] ? vfs_write+0x9af/0x1050 [ 704.657285][T14509] ? vmacache_update+0xb7/0x120 [ 704.662262][T14509] kernel_clone+0x22d/0x990 [ 704.666608][T14509] ? file_end_write+0x1b0/0x1b0 [ 704.671468][T14509] ? __kasan_check_write+0x14/0x20 [ 704.676407][T14509] ? create_io_thread+0x1e0/0x1e0 [ 704.681267][T14509] ? __mutex_lock_slowpath+0x10/0x10 [ 704.686384][T14509] __x64_sys_clone+0x289/0x310 [ 704.691010][T14509] ? __do_sys_vfork+0x130/0x130 [ 704.695675][T14509] ? debug_smp_processor_id+0x17/0x20 [ 704.700986][T14509] do_syscall_64+0x44/0xd0 [ 704.705232][T14509] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 704.710951][T14509] RIP: 0033:0x7fb67320a5a9 [ 704.715203][T14509] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 704.734736][T14509] RSP: 002b:00007fb671f7e118 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 704.743236][T14509] RAX: ffffffffffffffda RBX: 00007fb67332af80 RCX: 00007fb67320a5a9 [ 704.751049][T14509] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000010000000 [ 704.759039][T14509] RBP: 00007fb671f7e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 704.766938][T14509] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000001 [ 704.774745][T14509] R13: 00007ffe782f632f R14: 00007fb671f7e300 R15: 0000000000022000 [ 704.782560][T14509] [ 704.785571][T14509] Mem-Info: [ 704.788547][T14509] active_anon:9431 inactive_anon:17467 isolated_anon:0 [ 704.788547][T14509] active_file:6343 inactive_file:8744 isolated_file:0 [ 704.788547][T14509] unevictable:0 dirty:21 writeback:0 [ 704.788547][T14509] slab_reclaimable:12714 slab_unreclaimable:79994 [ 704.788547][T14509] mapped:28558 shmem:9503 pagetables:562 bounce:0 [ 704.788547][T14509] kernel_misc_reclaimable:0 [ 704.788547][T14509] free:1528688 free_pcp:27619 free_cma:0 [ 704.829811][T14509] Node 0 active_anon:37724kB inactive_anon:69868kB active_file:25372kB inactive_file:34976kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:114232kB dirty:84kB writeback:0kB shmem:38012kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:4564kB pagetables:2248kB all_unreclaimable? no [ 704.860781][T14509] DMA32 free:2976724kB min:62592kB low:78240kB high:93888kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3145324kB managed:2982428kB mlocked:0kB bounce:0kB free_pcp:5704kB local_pcp:5648kB free_cma:0kB [ 704.887969][T14509] lowmem_reserve[]: 0 3941 3941 [ 704.892683][T14509] Normal free:3138028kB min:84860kB low:106072kB high:127284kB reserved_highatomic:0KB active_anon:37724kB inactive_anon:69888kB active_file:25372kB inactive_file:34976kB unevictable:0kB writepending:84kB present:5242880kB managed:4035848kB mlocked:0kB bounce:0kB free_pcp:104768kB local_pcp:52352kB free_cma:0kB [ 704.922162][T14509] lowmem_reserve[]: 0 0 0 [ 704.926394][T14509] DMA32: 3*4kB (M) 1*8kB (M) 2*16kB (M) 3*32kB (M) 3*64kB (M) 3*128kB (M) 3*256kB (M) 3*512kB (M) 4*1024kB (UM) 4*2048kB (UM) 723*4096kB (M) = 2976724kB [ 704.942018][T14509] Normal: 15883*4kB (UME) 5574*8kB (UME) 1997*16kB (UME) 918*32kB (UME) 1267*64kB (UME) 339*128kB (UME) 46*256kB (UME) 8*512kB (UME) 4*1024kB (UME) 1*2048kB (U) 689*4096kB (UM) = 3138092kB [ 704.960625][T14509] 24592 total pagecache pages [ 704.965213][T14509] 0 pages in swap cache [ 704.969084][T14509] Swap cache stats: add 0, delete 0, find 0/0 [ 704.975133][T14509] Free swap = 0kB [ 704.978661][T14509] Total swap = 0kB [ 704.982220][T14509] 2097051 pages RAM [ 704.986249][T14509] 0 pages HighMem/MovableOnly 18:39:16 executing program 2: syz_clone(0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 3) 18:39:16 executing program 5: fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x7, &(0x7f0000000080)=0x1) 18:39:16 executing program 4: r0 = socket(0xa, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x28, 0x2, 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000004, 0x10, r1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00'}) socket(0xa, 0x1, 0x0) (async) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x28, 0x2, 0x0, 0x0) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000004, 0x10, r1, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00'}) (async) 18:39:16 executing program 0: r0 = eventfd2(0x0, 0x0) fremovexattr(r0, &(0x7f0000000000)=@random={'security.', '*!]\'\x00'}) 18:39:16 executing program 1: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(0xffffffffffffffff, r0, 0x0) 18:39:16 executing program 3: fremovexattr(0xffffffffffffffff, &(0x7f0000000000)=@random={'security.', '*!]\'\x00'}) 18:39:16 executing program 3: eventfd2(0x0, 0x0) fremovexattr(0xffffffffffffffff, &(0x7f0000000000)=@random={'security.', '*!]\'\x00'}) 18:39:16 executing program 0: fremovexattr(0xffffffffffffffff, &(0x7f0000000000)=@random={'security.', '*!]\'\x00'}) [ 704.990802][T14509] 342482 pages reserved [ 704.995059][T14509] 0 pages cma reserved 18:39:16 executing program 1: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(0xffffffffffffffff, r0, 0x0) 18:39:16 executing program 5: fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x7, &(0x7f0000000080)=0x1) 18:39:16 executing program 4: r0 = socket(0xa, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x28, 0x2, 0x0, 0x0) (async) r1 = socket$inet_udp(0x2, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000004, 0x10, r1, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00'}) 18:39:16 executing program 3: eventfd2(0x0, 0x0) fremovexattr(0xffffffffffffffff, &(0x7f0000000000)=@random={'security.', '*!]\'\x00'}) [ 705.024911][T14537] FAULT_INJECTION: forcing a failure. [ 705.024911][T14537] name failslab, interval 1, probability 0, space 0, times 0 [ 705.050254][T14537] CPU: 1 PID: 14537 Comm: syz-executor.2 Not tainted 5.15.74-syzkaller-04383-g7f2e600bf63a #0 [ 705.060325][T14537] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/11/2022 [ 705.070570][T14537] Call Trace: [ 705.073702][T14537] [ 705.076466][T14537] dump_stack_lvl+0x151/0x1b7 [ 705.080982][T14537] ? bfq_pos_tree_add_move+0x43e/0x43e [ 705.086369][T14537] dump_stack+0x15/0x17 [ 705.090740][T14537] should_fail+0x3c0/0x510 [ 705.094964][T14537] ? security_prepare_creds+0x50/0x160 [ 705.100244][T14537] __should_failslab+0x9f/0xe0 [ 705.104855][T14537] should_failslab+0x9/0x20 [ 705.109185][T14537] __kmalloc+0x6d/0x350 [ 705.113267][T14537] security_prepare_creds+0x50/0x160 [ 705.118471][T14537] prepare_creds+0x471/0x690 [ 705.122918][T14537] copy_creds+0xde/0x640 [ 705.126994][T14537] copy_process+0x775/0x3250 [ 705.131492][T14537] ? __kasan_check_write+0x14/0x20 [ 705.136641][T14537] ? proc_fail_nth_write+0x213/0x290 [ 705.141740][T14537] ? proc_fail_nth_read+0x220/0x220 [ 705.146765][T14537] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 705.151715][T14537] ? vfs_write+0x9af/0x1050 [ 705.156053][T14537] ? vmacache_update+0xb7/0x120 [ 705.160743][T14537] kernel_clone+0x22d/0x990 [ 705.165167][T14537] ? file_end_write+0x1b0/0x1b0 [ 705.169855][T14537] ? __kasan_check_write+0x14/0x20 [ 705.174953][T14537] ? create_io_thread+0x1e0/0x1e0 [ 705.179799][T14537] ? __mutex_lock_slowpath+0x10/0x10 [ 705.185010][T14537] __x64_sys_clone+0x289/0x310 [ 705.189608][T14537] ? __do_sys_vfork+0x130/0x130 [ 705.194382][T14537] ? debug_smp_processor_id+0x17/0x20 [ 705.199590][T14537] do_syscall_64+0x44/0xd0 [ 705.203841][T14537] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 705.209566][T14537] RIP: 0033:0x7fb67320a5a9 [ 705.213911][T14537] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 705.233523][T14537] RSP: 002b:00007fb671f7e118 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 705.241772][T14537] RAX: ffffffffffffffda RBX: 00007fb67332af80 RCX: 00007fb67320a5a9 [ 705.249583][T14537] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000010000000 [ 705.257566][T14537] RBP: 00007fb671f7e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 705.265551][T14537] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000001 18:39:16 executing program 2: syz_clone(0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 4) 18:39:16 executing program 0: fremovexattr(0xffffffffffffffff, &(0x7f0000000000)=@random={'security.', '*!]\'\x00'}) 18:39:16 executing program 5: fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x7, &(0x7f0000000080)=0x1) 18:39:16 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) pipe(0x0) dup3(r0, 0xffffffffffffffff, 0x0) 18:39:16 executing program 4: r0 = socket(0x4e3ea8a8df76e0d9, 0x1, 0x40) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x28, 0x2, 0x0, 0x0) 18:39:16 executing program 3: eventfd2(0x0, 0x0) fremovexattr(0xffffffffffffffff, &(0x7f0000000000)=@random={'security.', '*!]\'\x00'}) 18:39:16 executing program 5: socket$inet_udp(0x2, 0x2, 0x0) fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x7, &(0x7f0000000080)=0x1) 18:39:16 executing program 0: fremovexattr(0xffffffffffffffff, &(0x7f0000000000)=@random={'security.', '*!]\'\x00'}) [ 705.273363][T14537] R13: 00007ffe782f632f R14: 00007fb671f7e300 R15: 0000000000022000 [ 705.281263][T14537] [ 705.293038][T14556] FAULT_INJECTION: forcing a failure. [ 705.293038][T14556] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 705.309175][T14556] CPU: 1 PID: 14556 Comm: syz-executor.2 Not tainted 5.15.74-syzkaller-04383-g7f2e600bf63a #0 [ 705.319417][T14556] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/11/2022 [ 705.329306][T14556] Call Trace: [ 705.332442][T14556] [ 705.335210][T14556] dump_stack_lvl+0x151/0x1b7 [ 705.339731][T14556] ? bfq_pos_tree_add_move+0x43e/0x43e [ 705.345022][T14556] ? stack_trace_save+0x12d/0x1f0 [ 705.349875][T14556] ? is_bpf_text_address+0x1a2/0x1c0 [ 705.355005][T14556] dump_stack+0x15/0x17 [ 705.359001][T14556] should_fail+0x3c0/0x510 [ 705.363255][T14556] should_fail_alloc_page+0x58/0x70 [ 705.368536][T14556] __alloc_pages+0x1de/0x7c0 [ 705.372973][T14556] ? kmem_cache_alloc+0x189/0x2f0 [ 705.377823][T14556] ? __x64_sys_clone+0x289/0x310 [ 705.382788][T14556] ? __count_vm_events+0x30/0x30 [ 705.387633][T14556] __get_free_pages+0xe/0x30 [ 705.392074][T14556] kasan_populate_vmalloc_pte+0x39/0x130 [ 705.397529][T14556] ? __apply_to_page_range+0x8a5/0xb90 [ 705.402821][T14556] __apply_to_page_range+0x8b8/0xb90 [ 705.407959][T14556] ? kasan_populate_vmalloc+0x70/0x70 [ 705.413247][T14556] ? kasan_populate_vmalloc+0x70/0x70 [ 705.418450][T14556] apply_to_page_range+0x3b/0x50 [ 705.423224][T14556] kasan_populate_vmalloc+0x65/0x70 [ 705.428260][T14556] alloc_vmap_area+0x1946/0x1a90 [ 705.433040][T14556] ? vm_map_ram+0xa80/0xa80 [ 705.437366][T14556] ? __kasan_kmalloc+0x9/0x10 [ 705.441878][T14556] ? __get_vm_area_node+0x13a/0x380 [ 705.446924][T14556] __get_vm_area_node+0x17b/0x380 [ 705.451771][T14556] __vmalloc_node_range+0xda/0x800 [ 705.456717][T14556] ? copy_process+0x579/0x3250 [ 705.461417][T14556] ? kmem_cache_alloc+0x1c1/0x2f0 [ 705.466184][T14556] ? dup_task_struct+0x53/0xa60 [ 705.470878][T14556] dup_task_struct+0x61f/0xa60 [ 705.475471][T14556] ? copy_process+0x579/0x3250 [ 705.480069][T14556] ? __kasan_check_write+0x14/0x20 [ 705.485017][T14556] copy_process+0x579/0x3250 [ 705.489443][T14556] ? __kasan_check_write+0x14/0x20 [ 705.494387][T14556] ? proc_fail_nth_write+0x213/0x290 [ 705.499510][T14556] ? proc_fail_nth_read+0x220/0x220 [ 705.504545][T14556] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 705.509501][T14556] ? vfs_write+0x9af/0x1050 [ 705.513837][T14556] ? vmacache_update+0xb7/0x120 [ 705.518532][T14556] kernel_clone+0x22d/0x990 [ 705.522857][T14556] ? file_end_write+0x1b0/0x1b0 [ 705.527543][T14556] ? __kasan_check_write+0x14/0x20 [ 705.532508][T14556] ? create_io_thread+0x1e0/0x1e0 [ 705.537348][T14556] ? __mutex_lock_slowpath+0x10/0x10 [ 705.542475][T14556] __x64_sys_clone+0x289/0x310 [ 705.547076][T14556] ? __do_sys_vfork+0x130/0x130 [ 705.551768][T14556] ? debug_smp_processor_id+0x17/0x20 [ 705.556971][T14556] do_syscall_64+0x44/0xd0 [ 705.561220][T14556] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 705.566955][T14556] RIP: 0033:0x7fb67320a5a9 [ 705.571203][T14556] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 705.590730][T14556] RSP: 002b:00007fb671f7e118 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 705.598971][T14556] RAX: ffffffffffffffda RBX: 00007fb67332af80 RCX: 00007fb67320a5a9 [ 705.606793][T14556] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000010000000 [ 705.614684][T14556] RBP: 00007fb671f7e1d0 R08: 0000000000000000 R09: 0000000000000000 18:39:17 executing program 2: syz_clone(0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 5) 18:39:17 executing program 4: r0 = socket(0x4e3ea8a8df76e0d9, 0x1, 0x40) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x28, 0x2, 0x0, 0x0) 18:39:17 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) pipe(0x0) dup3(r0, 0xffffffffffffffff, 0x0) 18:39:17 executing program 5: socket$inet_udp(0x2, 0x2, 0x0) fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x7, &(0x7f0000000080)=0x1) [ 705.622583][T14556] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000001 [ 705.630393][T14556] R13: 00007ffe782f632f R14: 00007fb671f7e300 R15: 0000000000022000 [ 705.638218][T14556] 18:39:17 executing program 4: r0 = socket(0x4e3ea8a8df76e0d9, 0x1, 0x40) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x28, 0x2, 0x0, 0x0) 18:39:17 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) pipe(0x0) dup3(r0, 0xffffffffffffffff, 0x0) 18:39:17 executing program 0: eventfd2(0x0, 0x0) fremovexattr(0xffffffffffffffff, &(0x7f0000000000)=@random={'security.', '*!]\'\x00'}) 18:39:17 executing program 3: r0 = eventfd2(0x0, 0x0) fremovexattr(r0, 0x0) 18:39:17 executing program 0: eventfd2(0x0, 0x0) fremovexattr(0xffffffffffffffff, &(0x7f0000000000)=@random={'security.', '*!]\'\x00'}) 18:39:17 executing program 3: r0 = eventfd2(0x0, 0x0) fremovexattr(r0, 0x0) [ 705.674669][T14573] FAULT_INJECTION: forcing a failure. [ 705.674669][T14573] name failslab, interval 1, probability 0, space 0, times 0 [ 705.705153][T14573] CPU: 0 PID: 14573 Comm: syz-executor.2 Not tainted 5.15.74-syzkaller-04383-g7f2e600bf63a #0 18:39:17 executing program 5: socket$inet_udp(0x2, 0x2, 0x0) fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x7, &(0x7f0000000080)=0x1) 18:39:17 executing program 4: r0 = socket(0xa, 0x1, 0x0) r1 = fsmount(0xffffffffffffffff, 0x0, 0x8) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r1, 0x28, 0x2, 0x0, 0x3) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) setsockopt$MRT_DEL_VIF(r0, 0x0, 0xcb, &(0x7f0000000040)={0x1, 0x1, 0x2, 0x40, @vifc_lcl_ifindex=r2, @dev={0xac, 0x14, 0x14, 0x34}}, 0x10) [ 705.715223][T14573] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/11/2022 [ 705.725120][T14573] Call Trace: [ 705.728247][T14573] [ 705.731024][T14573] dump_stack_lvl+0x151/0x1b7 [ 705.735534][T14573] ? bfq_pos_tree_add_move+0x43e/0x43e [ 705.740830][T14573] ? xas_nomem+0x19e/0x1e0 [ 705.745087][T14573] dump_stack+0x15/0x17 [ 705.749075][T14573] should_fail+0x3c0/0x510 [ 705.753334][T14573] ? setup_userns_sysctls+0x55/0x340 [ 705.758448][T14573] __should_failslab+0x9f/0xe0 [ 705.763046][T14573] should_failslab+0x9/0x20 [ 705.767382][T14573] __kmalloc_track_caller+0x6c/0x350 [ 705.772676][T14573] ? setup_userns_sysctls+0x340/0x340 [ 705.777894][T14573] kmemdup+0x24/0x50 [ 705.781630][T14573] setup_userns_sysctls+0x55/0x340 [ 705.786616][T14573] create_user_ns+0x1227/0x19b0 [ 705.791251][T14573] ? utsns_owner+0x40/0x40 [ 705.795503][T14573] ? security_prepare_creds+0x149/0x160 [ 705.800888][T14573] ? prepare_creds+0x485/0x690 [ 705.805487][T14573] copy_creds+0x200/0x640 [ 705.809654][T14573] copy_process+0x775/0x3250 [ 705.814216][T14573] ? __kasan_check_write+0x14/0x20 [ 705.819248][T14573] ? proc_fail_nth_write+0x213/0x290 [ 705.824367][T14573] ? proc_fail_nth_read+0x220/0x220 [ 705.829410][T14573] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 705.834347][T14573] ? vfs_write+0x9af/0x1050 [ 705.838688][T14573] ? vmacache_update+0xb7/0x120 [ 705.843381][T14573] kernel_clone+0x22d/0x990 [ 705.847718][T14573] ? file_end_write+0x1b0/0x1b0 [ 705.852486][T14573] ? __kasan_check_write+0x14/0x20 [ 705.857607][T14573] ? create_io_thread+0x1e0/0x1e0 [ 705.862472][T14573] ? __mutex_lock_slowpath+0x10/0x10 [ 705.867591][T14573] __x64_sys_clone+0x289/0x310 [ 705.872191][T14573] ? __do_sys_vfork+0x130/0x130 [ 705.876881][T14573] ? debug_smp_processor_id+0x17/0x20 [ 705.882086][T14573] do_syscall_64+0x44/0xd0 [ 705.886339][T14573] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 705.892065][T14573] RIP: 0033:0x7fb67320a5a9 [ 705.896492][T14573] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 705.915976][T14573] RSP: 002b:00007fb671f7e118 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 18:39:17 executing program 2: syz_clone(0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 6) 18:39:17 executing program 3: r0 = eventfd2(0x0, 0x0) fremovexattr(r0, 0x0) 18:39:17 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) fcntl$F_SET_FILE_RW_HINT(r0, 0x7, 0x0) 18:39:17 executing program 0: eventfd2(0x0, 0x0) fremovexattr(0xffffffffffffffff, &(0x7f0000000000)=@random={'security.', '*!]\'\x00'}) 18:39:17 executing program 1: socket$inet_udp(0x2, 0x2, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(0xffffffffffffffff, r0, 0x0) 18:39:17 executing program 4: r0 = socket(0xa, 0x1, 0x0) r1 = fsmount(0xffffffffffffffff, 0x0, 0x8) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r1, 0x28, 0x2, 0x0, 0x3) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) setsockopt$MRT_DEL_VIF(r0, 0x0, 0xcb, &(0x7f0000000040)={0x1, 0x1, 0x2, 0x40, @vifc_lcl_ifindex=r2, @dev={0xac, 0x14, 0x14, 0x34}}, 0x10) 18:39:17 executing program 1: socket$inet_udp(0x2, 0x2, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(0xffffffffffffffff, r0, 0x0) 18:39:17 executing program 4: r0 = socket(0xa, 0x1, 0x0) r1 = fsmount(0xffffffffffffffff, 0x0, 0x8) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r1, 0x28, 0x2, 0x0, 0x3) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) setsockopt$MRT_DEL_VIF(r0, 0x0, 0xcb, &(0x7f0000000040)={0x1, 0x1, 0x2, 0x40, @vifc_lcl_ifindex=r2, @dev={0xac, 0x14, 0x14, 0x34}}, 0x10) [ 705.924333][T14573] RAX: ffffffffffffffda RBX: 00007fb67332af80 RCX: 00007fb67320a5a9 [ 705.932146][T14573] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000010000000 [ 705.939956][T14573] RBP: 00007fb671f7e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 705.947766][T14573] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000001 [ 705.955572][T14573] R13: 00007ffe782f632f R14: 00007fb671f7e300 R15: 0000000000022000 [ 705.963509][T14573] 18:39:17 executing program 3: r0 = socket(0xa, 0x1, 0x0) r1 = fsmount(0xffffffffffffffff, 0x0, 0x8) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r1, 0x28, 0x2, 0x0, 0x3) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) setsockopt$MRT_DEL_VIF(r0, 0x0, 0xcb, &(0x7f0000000040)={0x1, 0x1, 0x2, 0x40, @vifc_lcl_ifindex=r2, @dev={0xac, 0x14, 0x14, 0x34}}, 0x10) 18:39:17 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) fcntl$F_SET_FILE_RW_HINT(r0, 0x7, 0x0) 18:39:17 executing program 0: r0 = eventfd2(0x0, 0x0) fremovexattr(r0, 0x0) 18:39:17 executing program 1: socket$inet_udp(0x2, 0x2, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(0xffffffffffffffff, r0, 0x0) [ 705.990164][T14604] FAULT_INJECTION: forcing a failure. [ 705.990164][T14604] name failslab, interval 1, probability 0, space 0, times 0 [ 706.005204][T14604] CPU: 0 PID: 14604 Comm: syz-executor.2 Not tainted 5.15.74-syzkaller-04383-g7f2e600bf63a #0 [ 706.015359][T14604] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/11/2022 [ 706.025248][T14604] Call Trace: [ 706.028470][T14604] [ 706.031233][T14604] dump_stack_lvl+0x151/0x1b7 [ 706.035747][T14604] ? bfq_pos_tree_add_move+0x43e/0x43e [ 706.041042][T14604] dump_stack+0x15/0x17 [ 706.045040][T14604] should_fail+0x3c0/0x510 [ 706.049294][T14604] ? __register_sysctl_table+0xee/0x1330 [ 706.054756][T14604] __should_failslab+0x9f/0xe0 [ 706.059357][T14604] should_failslab+0x9/0x20 [ 706.063693][T14604] __kmalloc+0x6d/0x350 [ 706.067690][T14604] __register_sysctl_table+0xee/0x1330 [ 706.073202][T14604] ? __kmalloc_track_caller+0x202/0x350 [ 706.078754][T14604] ? kmemdup+0x3f/0x50 [ 706.082730][T14604] ? memcpy+0x56/0x70 [ 706.086669][T14604] setup_userns_sysctls+0x2b1/0x340 [ 706.093742][T14604] create_user_ns+0x1227/0x19b0 [ 706.098506][T14604] ? utsns_owner+0x40/0x40 [ 706.102765][T14604] ? security_prepare_creds+0x149/0x160 [ 706.108138][T14604] ? prepare_creds+0x485/0x690 [ 706.112791][T14604] copy_creds+0x200/0x640 [ 706.116924][T14604] copy_process+0x775/0x3250 [ 706.121340][T14604] ? __kasan_check_write+0x14/0x20 [ 706.126278][T14604] ? proc_fail_nth_write+0x213/0x290 [ 706.131406][T14604] ? proc_fail_nth_read+0x220/0x220 [ 706.136433][T14604] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 706.141381][T14604] ? vfs_write+0x9af/0x1050 [ 706.145717][T14604] ? vmacache_update+0xb7/0x120 [ 706.150414][T14604] kernel_clone+0x22d/0x990 [ 706.154745][T14604] ? file_end_write+0x1b0/0x1b0 [ 706.159433][T14604] ? __kasan_check_write+0x14/0x20 [ 706.164386][T14604] ? create_io_thread+0x1e0/0x1e0 [ 706.169247][T14604] ? __mutex_lock_slowpath+0x10/0x10 [ 706.174362][T14604] __x64_sys_clone+0x289/0x310 [ 706.178974][T14604] ? __do_sys_vfork+0x130/0x130 [ 706.183744][T14604] ? debug_smp_processor_id+0x17/0x20 [ 706.188949][T14604] do_syscall_64+0x44/0xd0 [ 706.193199][T14604] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 706.198930][T14604] RIP: 0033:0x7fb67320a5a9 [ 706.203388][T14604] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 706.222810][T14604] RSP: 002b:00007fb671f7e118 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 706.231056][T14604] RAX: ffffffffffffffda RBX: 00007fb67332af80 RCX: 00007fb67320a5a9 18:39:17 executing program 2: syz_clone(0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 7) 18:39:17 executing program 0: r0 = eventfd2(0x0, 0x0) fremovexattr(r0, 0x0) 18:39:17 executing program 3: r0 = socket(0xa, 0x1, 0x0) r1 = fsmount(0xffffffffffffffff, 0x0, 0x8) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r1, 0x28, 0x2, 0x0, 0x3) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) setsockopt$MRT_DEL_VIF(r0, 0x0, 0xcb, &(0x7f0000000040)={0x1, 0x1, 0x2, 0x40, @vifc_lcl_ifindex=r2, @dev={0xac, 0x14, 0x14, 0x34}}, 0x10) 18:39:17 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) fcntl$F_SET_FILE_RW_HINT(r0, 0x7, 0x0) 18:39:17 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) pipe(&(0x7f0000000040)) dup3(r0, 0xffffffffffffffff, 0x0) 18:39:17 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000004, 0x10, r0, 0x0) pipe(&(0x7f0000000600)={0xffffffffffffffff}) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f0000000640)={0x0, 0x0, {}, {0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) r2 = socket(0xa, 0x1, 0x0) r3 = signalfd(0xffffffffffffffff, 0x0, 0x0) close(r3) r4 = open_tree(r3, &(0x7f0000000440)='./file0\x00', 0x0) r5 = signalfd(r4, &(0x7f0000000480)={[0x8000]}, 0x8) r6 = signalfd(0xffffffffffffffff, 0x0, 0x0) close(r6) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r2, 0x28, 0x2, 0x0, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000004, 0x10, r7, 0x0) pread64(r7, &(0x7f00000004c0)=""/241, 0xf1, 0xbaba) setsockopt$MRT_TABLE(r2, 0x0, 0xcf, &(0x7f0000000400), 0x4) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r5, 0x28, 0x1, &(0x7f00000005c0)=0x7f, 0x8) 18:39:17 executing program 0: r0 = eventfd2(0x0, 0x0) fremovexattr(r0, 0x0) 18:39:17 executing program 3: r0 = socket(0xa, 0x1, 0x0) r1 = fsmount(0xffffffffffffffff, 0x0, 0x8) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r1, 0x28, 0x2, 0x0, 0x3) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) setsockopt$MRT_DEL_VIF(r0, 0x0, 0xcb, &(0x7f0000000040)={0x1, 0x1, 0x2, 0x40, @vifc_lcl_ifindex=r2, @dev={0xac, 0x14, 0x14, 0x34}}, 0x10) 18:39:17 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) pipe(&(0x7f0000000040)) dup3(r0, 0xffffffffffffffff, 0x0) [ 706.238872][T14604] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000010000000 [ 706.246681][T14604] RBP: 00007fb671f7e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 706.254573][T14604] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000001 [ 706.262389][T14604] R13: 00007ffe782f632f R14: 00007fb671f7e300 R15: 0000000000022000 [ 706.270199][T14604] 18:39:17 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) fcntl$F_SET_FILE_RW_HINT(r0, 0x7, &(0x7f0000000080)) 18:39:17 executing program 0: r0 = socket(0xa, 0x1, 0x0) r1 = fsmount(0xffffffffffffffff, 0x0, 0x8) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r1, 0x28, 0x2, 0x0, 0x3) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) setsockopt$MRT_DEL_VIF(r0, 0x0, 0xcb, &(0x7f0000000040)={0x1, 0x1, 0x2, 0x40, @vifc_lcl_ifindex=r2, @dev={0xac, 0x14, 0x14, 0x34}}, 0x10) 18:39:17 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) pipe(&(0x7f0000000040)) dup3(r0, 0xffffffffffffffff, 0x0) [ 706.297223][T14625] FAULT_INJECTION: forcing a failure. [ 706.297223][T14625] name failslab, interval 1, probability 0, space 0, times 0 [ 706.317374][T14625] CPU: 0 PID: 14625 Comm: syz-executor.2 Not tainted 5.15.74-syzkaller-04383-g7f2e600bf63a #0 [ 706.327625][T14625] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/11/2022 [ 706.337523][T14625] Call Trace: [ 706.340640][T14625] [ 706.343422][T14625] dump_stack_lvl+0x151/0x1b7 [ 706.347939][T14625] ? bfq_pos_tree_add_move+0x43e/0x43e [ 706.353234][T14625] dump_stack+0x15/0x17 [ 706.357224][T14625] should_fail+0x3c0/0x510 [ 706.361474][T14625] ? __register_sysctl_table+0xa66/0x1330 [ 706.367027][T14625] __should_failslab+0x9f/0xe0 [ 706.371629][T14625] should_failslab+0x9/0x20 [ 706.375985][T14625] __kmalloc+0x6d/0x350 [ 706.380045][T14625] ? __register_sysctl_table+0xee/0x1330 [ 706.385791][T14625] __register_sysctl_table+0xa66/0x1330 [ 706.391245][T14625] ? memcpy+0x56/0x70 [ 706.395072][T14625] setup_userns_sysctls+0x2b1/0x340 [ 706.400097][T14625] create_user_ns+0x1227/0x19b0 [ 706.404778][T14625] ? utsns_owner+0x40/0x40 [ 706.409031][T14625] ? security_prepare_creds+0x149/0x160 [ 706.414416][T14625] ? prepare_creds+0x485/0x690 [ 706.419130][T14625] copy_creds+0x200/0x640 [ 706.423383][T14625] copy_process+0x775/0x3250 [ 706.427808][T14625] ? __kasan_check_write+0x14/0x20 [ 706.432755][T14625] ? proc_fail_nth_write+0x213/0x290 [ 706.437879][T14625] ? proc_fail_nth_read+0x220/0x220 [ 706.442996][T14625] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 706.447945][T14625] ? vfs_write+0x9af/0x1050 [ 706.452284][T14625] ? vmacache_update+0xb7/0x120 [ 706.456976][T14625] kernel_clone+0x22d/0x990 [ 706.461325][T14625] ? file_end_write+0x1b0/0x1b0 [ 706.465997][T14625] ? __kasan_check_write+0x14/0x20 [ 706.470946][T14625] ? create_io_thread+0x1e0/0x1e0 [ 706.476163][T14625] ? __mutex_lock_slowpath+0x10/0x10 [ 706.481480][T14625] __x64_sys_clone+0x289/0x310 [ 706.486081][T14625] ? __do_sys_vfork+0x130/0x130 [ 706.490774][T14625] ? debug_smp_processor_id+0x17/0x20 [ 706.495984][T14625] do_syscall_64+0x44/0xd0 [ 706.500235][T14625] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 706.505963][T14625] RIP: 0033:0x7fb67320a5a9 [ 706.510211][T14625] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 706.529825][T14625] RSP: 002b:00007fb671f7e118 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 706.538068][T14625] RAX: ffffffffffffffda RBX: 00007fb67332af80 RCX: 00007fb67320a5a9 [ 706.545969][T14625] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000010000000 [ 706.553791][T14625] RBP: 00007fb671f7e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 706.561679][T14625] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000001 [ 706.569488][T14625] R13: 00007ffe782f632f R14: 00007fb671f7e300 R15: 0000000000022000 [ 706.577304][T14625] [ 706.580670][T14625] sysctl could not get directory: //user -12 [ 706.586606][T14625] CPU: 0 PID: 14625 Comm: syz-executor.2 Not tainted 5.15.74-syzkaller-04383-g7f2e600bf63a #0 [ 706.596667][T14625] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/11/2022 [ 706.606647][T14625] Call Trace: [ 706.609768][T14625] [ 706.612545][T14625] dump_stack_lvl+0x151/0x1b7 [ 706.617138][T14625] ? __kasan_slab_free+0x11/0x20 [ 706.621909][T14625] ? bfq_pos_tree_add_move+0x43e/0x43e [ 706.627228][T14625] ? __register_sysctl_table+0x1293/0x1330 [ 706.632850][T14625] ? kfree+0xc8/0x210 [ 706.636667][T14625] dump_stack+0x15/0x17 [ 706.640654][T14625] __register_sysctl_table+0x1298/0x1330 [ 706.646215][T14625] ? memcpy+0x56/0x70 [ 706.650129][T14625] setup_userns_sysctls+0x2b1/0x340 [ 706.655155][T14625] create_user_ns+0x1227/0x19b0 [ 706.659839][T14625] ? utsns_owner+0x40/0x40 [ 706.664178][T14625] ? security_prepare_creds+0x149/0x160 [ 706.669558][T14625] ? prepare_creds+0x485/0x690 [ 706.674561][T14625] copy_creds+0x200/0x640 [ 706.678705][T14625] copy_process+0x775/0x3250 [ 706.683121][T14625] ? __kasan_check_write+0x14/0x20 [ 706.688067][T14625] ? proc_fail_nth_write+0x213/0x290 [ 706.693479][T14625] ? proc_fail_nth_read+0x220/0x220 [ 706.698500][T14625] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 706.703451][T14625] ? vfs_write+0x9af/0x1050 [ 706.707782][T14625] ? vmacache_update+0xb7/0x120 [ 706.712475][T14625] kernel_clone+0x22d/0x990 [ 706.716812][T14625] ? file_end_write+0x1b0/0x1b0 [ 706.721591][T14625] ? __kasan_check_write+0x14/0x20 [ 706.726618][T14625] ? create_io_thread+0x1e0/0x1e0 [ 706.731488][T14625] ? __mutex_lock_slowpath+0x10/0x10 [ 706.736601][T14625] __x64_sys_clone+0x289/0x310 [ 706.741198][T14625] ? __do_sys_vfork+0x130/0x130 [ 706.745894][T14625] ? debug_smp_processor_id+0x17/0x20 [ 706.751132][T14625] do_syscall_64+0x44/0xd0 [ 706.755367][T14625] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 706.761073][T14625] RIP: 0033:0x7fb67320a5a9 [ 706.765335][T14625] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 706.784867][T14625] RSP: 002b:00007fb671f7e118 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 18:39:18 executing program 2: syz_clone(0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 8) 18:39:18 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000004, 0x10, r0, 0x0) (async) pipe(&(0x7f0000000600)={0xffffffffffffffff}) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f0000000640)={0x0, 0x0, {}, {0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) (async) r2 = socket(0xa, 0x1, 0x0) (async, rerun: 64) r3 = signalfd(0xffffffffffffffff, 0x0, 0x0) (rerun: 64) close(r3) (async, rerun: 64) r4 = open_tree(r3, &(0x7f0000000440)='./file0\x00', 0x0) (rerun: 64) r5 = signalfd(r4, &(0x7f0000000480)={[0x8000]}, 0x8) (async) r6 = signalfd(0xffffffffffffffff, 0x0, 0x0) close(r6) (async) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r2, 0x28, 0x2, 0x0, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000004, 0x10, r7, 0x0) pread64(r7, &(0x7f00000004c0)=""/241, 0xf1, 0xbaba) setsockopt$MRT_TABLE(r2, 0x0, 0xcf, &(0x7f0000000400), 0x4) (async, rerun: 32) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r5, 0x28, 0x1, &(0x7f00000005c0)=0x7f, 0x8) (rerun: 32) 18:39:18 executing program 1: r0 = socket(0xa, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x29, 0x2, 0x0, 0x0) 18:39:18 executing program 0: r0 = socket(0xa, 0x1, 0x0) r1 = fsmount(0xffffffffffffffff, 0x0, 0x8) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r1, 0x28, 0x2, 0x0, 0x3) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) setsockopt$MRT_DEL_VIF(r0, 0x0, 0xcb, &(0x7f0000000040)={0x1, 0x1, 0x2, 0x40, @vifc_lcl_ifindex=r2, @dev={0xac, 0x14, 0x14, 0x34}}, 0x10) 18:39:18 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) fcntl$F_SET_FILE_RW_HINT(r0, 0x7, &(0x7f0000000080)) 18:39:18 executing program 3: r0 = socket(0xa, 0x1, 0x0) r1 = fsmount(0xffffffffffffffff, 0x0, 0x8) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r1, 0x28, 0x2, 0x0, 0x3) setsockopt$MRT_DEL_VIF(r0, 0x0, 0xcb, &(0x7f0000000040)={0x1, 0x1, 0x2, 0x40, @vifc_lcl_ifindex, @dev={0xac, 0x14, 0x14, 0x34}}, 0x10) 18:39:18 executing program 3: r0 = socket(0xa, 0x1, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x8) setsockopt$MRT_DEL_VIF(r0, 0x0, 0xcb, &(0x7f0000000040)={0x1, 0x1, 0x2, 0x40, @vifc_lcl_ifindex, @dev={0xac, 0x14, 0x14, 0x34}}, 0x10) 18:39:18 executing program 1: r0 = socket(0xa, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x29, 0x2, 0x0, 0x0) 18:39:18 executing program 0: r0 = socket(0xa, 0x1, 0x0) r1 = fsmount(0xffffffffffffffff, 0x0, 0x8) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r1, 0x28, 0x2, 0x0, 0x3) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) setsockopt$MRT_DEL_VIF(r0, 0x0, 0xcb, &(0x7f0000000040)={0x1, 0x1, 0x2, 0x40, @vifc_lcl_ifindex=r2, @dev={0xac, 0x14, 0x14, 0x34}}, 0x10) 18:39:18 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) fcntl$F_SET_FILE_RW_HINT(r0, 0x7, &(0x7f0000000080)) [ 706.793115][T14625] RAX: ffffffffffffffda RBX: 00007fb67332af80 RCX: 00007fb67320a5a9 [ 706.800999][T14625] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000010000000 [ 706.808852][T14625] RBP: 00007fb671f7e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 706.816630][T14625] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000001 [ 706.824433][T14625] R13: 00007ffe782f632f R14: 00007fb671f7e300 R15: 0000000000022000 [ 706.832248][T14625] 18:39:18 executing program 3: r0 = socket(0xa, 0x1, 0x0) setsockopt$MRT_DEL_VIF(r0, 0x0, 0xcb, &(0x7f0000000040)={0x1, 0x1, 0x2, 0x40, @vifc_lcl_ifindex, @dev={0xac, 0x14, 0x14, 0x34}}, 0x10) 18:39:18 executing program 1: r0 = socket(0xa, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x29, 0x2, 0x0, 0x0) [ 706.879145][T14663] FAULT_INJECTION: forcing a failure. [ 706.879145][T14663] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 706.898510][T14663] CPU: 1 PID: 14663 Comm: syz-executor.2 Not tainted 5.15.74-syzkaller-04383-g7f2e600bf63a #0 [ 706.908590][T14663] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/11/2022 [ 706.918483][T14663] Call Trace: [ 706.921611][T14663] [ 706.924389][T14663] dump_stack_lvl+0x151/0x1b7 [ 706.928993][T14663] ? bfq_pos_tree_add_move+0x43e/0x43e [ 706.934273][T14663] dump_stack+0x15/0x17 [ 706.938414][T14663] should_fail+0x3c0/0x510 [ 706.942663][T14663] should_fail_alloc_page+0x58/0x70 [ 706.947784][T14663] __alloc_pages+0x1de/0x7c0 [ 706.952211][T14663] ? __count_vm_events+0x30/0x30 [ 706.956983][T14663] ? __kasan_kmalloc+0x9/0x10 [ 706.961502][T14663] ? __kmalloc+0x203/0x350 [ 706.965750][T14663] ? __vmalloc_node_range+0x2e3/0x800 [ 706.970964][T14663] __vmalloc_node_range+0x48f/0x800 [ 706.975994][T14663] dup_task_struct+0x61f/0xa60 [ 706.980605][T14663] ? copy_process+0x579/0x3250 [ 706.985195][T14663] ? __kasan_check_write+0x14/0x20 [ 706.990143][T14663] copy_process+0x579/0x3250 [ 706.994566][T14663] ? __kasan_check_write+0x14/0x20 [ 706.999613][T14663] ? proc_fail_nth_write+0x213/0x290 [ 707.004817][T14663] ? proc_fail_nth_read+0x220/0x220 [ 707.009857][T14663] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 707.014796][T14663] ? vfs_write+0x9af/0x1050 [ 707.019134][T14663] ? vmacache_update+0xb7/0x120 [ 707.023838][T14663] kernel_clone+0x22d/0x990 [ 707.028174][T14663] ? file_end_write+0x1b0/0x1b0 [ 707.032859][T14663] ? __kasan_check_write+0x14/0x20 [ 707.037883][T14663] ? create_io_thread+0x1e0/0x1e0 [ 707.042748][T14663] ? __mutex_lock_slowpath+0x10/0x10 [ 707.047869][T14663] __x64_sys_clone+0x289/0x310 [ 707.052466][T14663] ? __do_sys_vfork+0x130/0x130 [ 707.057154][T14663] ? debug_smp_processor_id+0x17/0x20 [ 707.062360][T14663] do_syscall_64+0x44/0xd0 [ 707.066613][T14663] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 707.072343][T14663] RIP: 0033:0x7fb67320a5a9 [ 707.076595][T14663] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 707.096047][T14663] RSP: 002b:00007fb671f7e118 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 707.104280][T14663] RAX: ffffffffffffffda RBX: 00007fb67332af80 RCX: 00007fb67320a5a9 [ 707.112090][T14663] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000010000000 [ 707.119905][T14663] RBP: 00007fb671f7e1d0 R08: 0000000000000000 R09: 0000000000000000 18:39:18 executing program 2: syz_clone(0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 9) 18:39:18 executing program 0: r0 = socket(0xa, 0x1, 0x0) r1 = fsmount(0xffffffffffffffff, 0x0, 0x8) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r1, 0x28, 0x2, 0x0, 0x3) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00'}) 18:39:18 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000004, 0x10, r0, 0x0) (async) pipe(&(0x7f0000000600)={0xffffffffffffffff}) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f0000000640)={0x0, 0x0, {}, {0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) (async) r2 = socket(0xa, 0x1, 0x0) (async) r3 = signalfd(0xffffffffffffffff, 0x0, 0x0) close(r3) (async) r4 = open_tree(r3, &(0x7f0000000440)='./file0\x00', 0x0) r5 = signalfd(r4, &(0x7f0000000480)={[0x8000]}, 0x8) (async) r6 = signalfd(0xffffffffffffffff, 0x0, 0x0) close(r6) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) (async) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r2, 0x28, 0x2, 0x0, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000004, 0x10, r7, 0x0) (async) pread64(r7, &(0x7f00000004c0)=""/241, 0xf1, 0xbaba) (async) setsockopt$MRT_TABLE(r2, 0x0, 0xcf, &(0x7f0000000400), 0x4) (async) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r5, 0x28, 0x1, &(0x7f00000005c0)=0x7f, 0x8) 18:39:18 executing program 1: setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(0xffffffffffffffff, 0x29, 0x2, 0x0, 0x0) 18:39:18 executing program 3: setsockopt$MRT_DEL_VIF(0xffffffffffffffff, 0x0, 0xcb, &(0x7f0000000040)={0x1, 0x1, 0x2, 0x40, @vifc_lcl_ifindex, @dev={0xac, 0x14, 0x14, 0x34}}, 0x10) 18:39:18 executing program 5: r0 = socket(0xa, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x6, 0x2, 0x0, 0x0) 18:39:18 executing program 1: setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(0xffffffffffffffff, 0x29, 0x2, 0x0, 0x0) 18:39:18 executing program 0: r0 = socket(0xa, 0x1, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x8) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00'}) [ 707.127713][T14663] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000001 [ 707.135526][T14663] R13: 00007ffe782f632f R14: 00007fb671f7e300 R15: 0000000000022000 [ 707.143343][T14663] 18:39:18 executing program 1: setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(0xffffffffffffffff, 0x29, 0x2, 0x0, 0x0) 18:39:18 executing program 5: r0 = socket(0xa, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x6, 0x2, 0x0, 0x0) 18:39:18 executing program 3: setsockopt$MRT_DEL_VIF(0xffffffffffffffff, 0x0, 0xcb, &(0x7f0000000040)={0x1, 0x1, 0x2, 0x40, @vifc_lcl_ifindex, @dev={0xac, 0x14, 0x14, 0x34}}, 0x10) 18:39:18 executing program 4: r0 = socket(0xa, 0x1, 0x0) r1 = signalfd(0xffffffffffffffff, 0x0, 0x0) close(r1) r2 = syz_genetlink_get_family_id$fou(&(0x7f0000000040), r0) sendmsg$FOU_CMD_ADD(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x84, r2, 0x400, 0x70bd2a, 0x25dfdbfd, {}, [@FOU_ATTR_LOCAL_V6={0x14, 0x7, @local}, @FOU_ATTR_PEER_V4={0x8, 0x8, @multicast1}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e24}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e21}, @FOU_ATTR_PEER_V6={0x14, 0x9, @remote}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @private0}, @FOU_ATTR_PEER_V6={0x14, 0x9, @loopback}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @private=0xa010102}]}, 0x84}, 0x1, 0x0, 0x0, 0x1}, 0x44000) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x28, 0x2, 0x0, 0x0) [ 707.180017][T14687] FAULT_INJECTION: forcing a failure. [ 707.180017][T14687] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 707.211024][T14687] CPU: 0 PID: 14687 Comm: syz-executor.2 Not tainted 5.15.74-syzkaller-04383-g7f2e600bf63a #0 [ 707.221104][T14687] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/11/2022 [ 707.231006][T14687] Call Trace: [ 707.234118][T14687] [ 707.236906][T14687] dump_stack_lvl+0x151/0x1b7 [ 707.241411][T14687] ? bfq_pos_tree_add_move+0x43e/0x43e [ 707.246704][T14687] dump_stack+0x15/0x17 [ 707.250709][T14687] should_fail+0x3c0/0x510 [ 707.254950][T14687] should_fail_alloc_page+0x58/0x70 [ 707.259988][T14687] __alloc_pages+0x1de/0x7c0 [ 707.264409][T14687] ? __count_vm_events+0x30/0x30 [ 707.269186][T14687] ? __kasan_kmalloc+0x9/0x10 [ 707.273697][T14687] ? __kmalloc+0x203/0x350 [ 707.277948][T14687] ? __vmalloc_node_range+0x2e3/0x800 [ 707.283160][T14687] __vmalloc_node_range+0x48f/0x800 [ 707.288192][T14687] dup_task_struct+0x61f/0xa60 [ 707.292791][T14687] ? copy_process+0x579/0x3250 [ 707.297397][T14687] ? __kasan_check_write+0x14/0x20 [ 707.302349][T14687] copy_process+0x579/0x3250 [ 707.306770][T14687] ? __kasan_check_write+0x14/0x20 [ 707.311714][T14687] ? proc_fail_nth_write+0x213/0x290 [ 707.316837][T14687] ? proc_fail_nth_read+0x220/0x220 [ 707.321870][T14687] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 707.326821][T14687] ? vfs_write+0x9af/0x1050 [ 707.331241][T14687] ? vmacache_update+0xb7/0x120 [ 707.335957][T14687] kernel_clone+0x22d/0x990 [ 707.340268][T14687] ? file_end_write+0x1b0/0x1b0 [ 707.345048][T14687] ? __kasan_check_write+0x14/0x20 [ 707.349991][T14687] ? create_io_thread+0x1e0/0x1e0 [ 707.354851][T14687] ? __mutex_lock_slowpath+0x10/0x10 [ 707.359977][T14687] __x64_sys_clone+0x289/0x310 [ 707.364574][T14687] ? __do_sys_vfork+0x130/0x130 [ 707.369258][T14687] ? debug_smp_processor_id+0x17/0x20 [ 707.374466][T14687] do_syscall_64+0x44/0xd0 [ 707.378891][T14687] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 707.384624][T14687] RIP: 0033:0x7fb67320a5a9 [ 707.388882][T14687] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 707.408316][T14687] RSP: 002b:00007fb671f7e118 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 707.416567][T14687] RAX: ffffffffffffffda RBX: 00007fb67332af80 RCX: 00007fb67320a5a9 18:39:18 executing program 2: syz_clone(0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 10) 18:39:18 executing program 0: r0 = socket(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00'}) 18:39:18 executing program 5: r0 = socket(0xa, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x6, 0x2, 0x0, 0x0) 18:39:18 executing program 1: r0 = socket(0x0, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x29, 0x2, 0x0, 0x0) 18:39:18 executing program 4: r0 = socket(0xa, 0x1, 0x0) (async) r1 = signalfd(0xffffffffffffffff, 0x0, 0x0) close(r1) (async) r2 = syz_genetlink_get_family_id$fou(&(0x7f0000000040), r0) sendmsg$FOU_CMD_ADD(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x84, r2, 0x400, 0x70bd2a, 0x25dfdbfd, {}, [@FOU_ATTR_LOCAL_V6={0x14, 0x7, @local}, @FOU_ATTR_PEER_V4={0x8, 0x8, @multicast1}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e24}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e21}, @FOU_ATTR_PEER_V6={0x14, 0x9, @remote}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @private0}, @FOU_ATTR_PEER_V6={0x14, 0x9, @loopback}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @private=0xa010102}]}, 0x84}, 0x1, 0x0, 0x0, 0x1}, 0x44000) (async) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x28, 0x2, 0x0, 0x0) 18:39:18 executing program 3: setsockopt$MRT_DEL_VIF(0xffffffffffffffff, 0x0, 0xcb, &(0x7f0000000040)={0x1, 0x1, 0x2, 0x40, @vifc_lcl_ifindex, @dev={0xac, 0x14, 0x14, 0x34}}, 0x10) 18:39:18 executing program 1: r0 = socket(0x0, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x29, 0x2, 0x0, 0x0) 18:39:18 executing program 3: r0 = socket(0x0, 0x1, 0x0) setsockopt$MRT_DEL_VIF(r0, 0x0, 0xcb, &(0x7f0000000040)={0x1, 0x1, 0x2, 0x40, @vifc_lcl_ifindex, @dev={0xac, 0x14, 0x14, 0x34}}, 0x10) 18:39:18 executing program 4: r0 = socket(0xa, 0x1, 0x0) r1 = signalfd(0xffffffffffffffff, 0x0, 0x0) close(r1) r2 = syz_genetlink_get_family_id$fou(&(0x7f0000000040), r0) sendmsg$FOU_CMD_ADD(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x84, r2, 0x400, 0x70bd2a, 0x25dfdbfd, {}, [@FOU_ATTR_LOCAL_V6={0x14, 0x7, @local}, @FOU_ATTR_PEER_V4={0x8, 0x8, @multicast1}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e24}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e21}, @FOU_ATTR_PEER_V6={0x14, 0x9, @remote}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @private0}, @FOU_ATTR_PEER_V6={0x14, 0x9, @loopback}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @private=0xa010102}]}, 0x84}, 0x1, 0x0, 0x0, 0x1}, 0x44000) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x28, 0x2, 0x0, 0x0) socket(0xa, 0x1, 0x0) (async) signalfd(0xffffffffffffffff, 0x0, 0x0) (async) close(r1) (async) syz_genetlink_get_family_id$fou(&(0x7f0000000040), r0) (async) sendmsg$FOU_CMD_ADD(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x84, r2, 0x400, 0x70bd2a, 0x25dfdbfd, {}, [@FOU_ATTR_LOCAL_V6={0x14, 0x7, @local}, @FOU_ATTR_PEER_V4={0x8, 0x8, @multicast1}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e24}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e21}, @FOU_ATTR_PEER_V6={0x14, 0x9, @remote}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @private0}, @FOU_ATTR_PEER_V6={0x14, 0x9, @loopback}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @private=0xa010102}]}, 0x84}, 0x1, 0x0, 0x0, 0x1}, 0x44000) (async) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x28, 0x2, 0x0, 0x0) (async) 18:39:18 executing program 0: ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00'}) 18:39:18 executing program 5: setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(0xffffffffffffffff, 0x6, 0x2, 0x0, 0x0) 18:39:18 executing program 3: r0 = socket(0x0, 0x1, 0x0) setsockopt$MRT_DEL_VIF(r0, 0x0, 0xcb, &(0x7f0000000040)={0x1, 0x1, 0x2, 0x40, @vifc_lcl_ifindex, @dev={0xac, 0x14, 0x14, 0x34}}, 0x10) [ 707.424373][T14687] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000010000000 [ 707.432214][T14687] RBP: 00007fb671f7e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 707.439996][T14687] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000001 [ 707.447804][T14687] R13: 00007ffe782f632f R14: 00007fb671f7e300 R15: 0000000000022000 [ 707.455629][T14687] [ 707.510628][T14722] FAULT_INJECTION: forcing a failure. [ 707.510628][T14722] name failslab, interval 1, probability 0, space 0, times 0 [ 707.524613][T14722] CPU: 1 PID: 14722 Comm: syz-executor.2 Not tainted 5.15.74-syzkaller-04383-g7f2e600bf63a #0 [ 707.534686][T14722] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/11/2022 [ 707.544579][T14722] Call Trace: [ 707.547788][T14722] [ 707.550564][T14722] dump_stack_lvl+0x151/0x1b7 [ 707.555079][T14722] ? bfq_pos_tree_add_move+0x43e/0x43e [ 707.560470][T14722] dump_stack+0x15/0x17 [ 707.564457][T14722] should_fail+0x3c0/0x510 [ 707.568703][T14722] ? alloc_fdtable+0xaf/0x2b0 [ 707.573310][T14722] __should_failslab+0x9f/0xe0 [ 707.578251][T14722] should_failslab+0x9/0x20 [ 707.582591][T14722] kmem_cache_alloc_trace+0x4a/0x310 [ 707.587971][T14722] ? __kasan_check_write+0x14/0x20 [ 707.592918][T14722] ? _raw_spin_lock+0xa3/0x1b0 [ 707.597519][T14722] alloc_fdtable+0xaf/0x2b0 [ 707.601871][T14722] dup_fd+0x781/0xa40 [ 707.605675][T14722] ? avc_has_perm+0x16d/0x260 [ 707.610188][T14722] copy_files+0xe6/0x200 [ 707.614272][T14722] ? perf_event_attrs+0x30/0x30 [ 707.618957][T14722] ? dup_task_struct+0xa60/0xa60 [ 707.623730][T14722] ? security_task_alloc+0x132/0x150 [ 707.628850][T14722] copy_process+0x11e9/0x3250 [ 707.633366][T14722] ? proc_fail_nth_write+0x213/0x290 [ 707.638572][T14722] ? proc_fail_nth_read+0x220/0x220 [ 707.643689][T14722] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 707.648650][T14722] ? vfs_write+0x9af/0x1050 [ 707.652992][T14722] ? vmacache_update+0xb7/0x120 [ 707.657674][T14722] kernel_clone+0x22d/0x990 [ 707.662021][T14722] ? file_end_write+0x1b0/0x1b0 [ 707.666699][T14722] ? __kasan_check_write+0x14/0x20 [ 707.671653][T14722] ? create_io_thread+0x1e0/0x1e0 [ 707.676510][T14722] ? __mutex_lock_slowpath+0x10/0x10 [ 707.681632][T14722] __x64_sys_clone+0x289/0x310 [ 707.686230][T14722] ? __do_sys_vfork+0x130/0x130 [ 707.690918][T14722] ? debug_smp_processor_id+0x17/0x20 [ 707.696211][T14722] do_syscall_64+0x44/0xd0 [ 707.700551][T14722] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 707.706275][T14722] RIP: 0033:0x7fb67320a5a9 [ 707.710533][T14722] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 707.729973][T14722] RSP: 002b:00007fb671f7e118 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 707.738219][T14722] RAX: ffffffffffffffda RBX: 00007fb67332af80 RCX: 00007fb67320a5a9 [ 707.746066][T14722] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000010000000 [ 707.753930][T14722] RBP: 00007fb671f7e1d0 R08: 0000000000000000 R09: 0000000000000000 18:39:19 executing program 2: syz_clone(0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 11) 18:39:19 executing program 5: setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(0xffffffffffffffff, 0x6, 0x2, 0x0, 0x0) 18:39:19 executing program 0: ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00'}) 18:39:19 executing program 4: r0 = socket(0xa, 0x1, 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(r0, 0x942e, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x28, 0x2, 0x0, 0x0) socket(0x26, 0xa, 0x7fff) r1 = signalfd(0xffffffffffffffff, 0x0, 0x0) close(r1) r2 = signalfd(0xffffffffffffffff, 0x0, 0x0) close(r2) getsockopt$MRT(r2, 0x0, 0xce, &(0x7f0000000080), &(0x7f0000000040)=0x4) 18:39:19 executing program 1: r0 = socket(0x0, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x29, 0x2, 0x0, 0x0) 18:39:19 executing program 3: r0 = socket(0x0, 0x1, 0x0) setsockopt$MRT_DEL_VIF(r0, 0x0, 0xcb, &(0x7f0000000040)={0x1, 0x1, 0x2, 0x40, @vifc_lcl_ifindex, @dev={0xac, 0x14, 0x14, 0x34}}, 0x10) [ 707.761740][T14722] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 707.769552][T14722] R13: 00007ffe782f632f R14: 00007fb671f7e300 R15: 0000000000022000 [ 707.777374][T14722] [ 707.790865][T14728] FAULT_INJECTION: forcing a failure. [ 707.790865][T14728] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 707.809665][T14728] CPU: 1 PID: 14728 Comm: syz-executor.2 Not tainted 5.15.74-syzkaller-04383-g7f2e600bf63a #0 [ 707.819818][T14728] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/11/2022 [ 707.829707][T14728] Call Trace: [ 707.832829][T14728] [ 707.835704][T14728] dump_stack_lvl+0x151/0x1b7 [ 707.840210][T14728] ? bfq_pos_tree_add_move+0x43e/0x43e [ 707.845517][T14728] dump_stack+0x15/0x17 [ 707.849500][T14728] should_fail+0x3c0/0x510 [ 707.853762][T14728] should_fail_alloc_page+0x58/0x70 18:39:19 executing program 4: r0 = socket(0xa, 0x1, 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(r0, 0x942e, 0x0) (async, rerun: 64) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x28, 0x2, 0x0, 0x0) (async, rerun: 64) socket(0x26, 0xa, 0x7fff) r1 = signalfd(0xffffffffffffffff, 0x0, 0x0) close(r1) r2 = signalfd(0xffffffffffffffff, 0x0, 0x0) close(r2) (async) getsockopt$MRT(r2, 0x0, 0xce, &(0x7f0000000080), &(0x7f0000000040)=0x4) 18:39:19 executing program 0: ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00'}) 18:39:19 executing program 5: setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(0xffffffffffffffff, 0x6, 0x2, 0x0, 0x0) 18:39:19 executing program 1: r0 = socket(0xa, 0x0, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x29, 0x2, 0x0, 0x0) 18:39:19 executing program 0: r0 = socket(0x0, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00'}) 18:39:19 executing program 4: r0 = socket(0xa, 0x1, 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(r0, 0x942e, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x28, 0x2, 0x0, 0x0) (async) socket(0x26, 0xa, 0x7fff) (async) r1 = signalfd(0xffffffffffffffff, 0x0, 0x0) close(r1) r2 = signalfd(0xffffffffffffffff, 0x0, 0x0) close(r2) (async) getsockopt$MRT(r2, 0x0, 0xce, &(0x7f0000000080), &(0x7f0000000040)=0x4) [ 707.858876][T14728] __alloc_pages+0x1de/0x7c0 [ 707.863296][T14728] ? __count_vm_events+0x30/0x30 [ 707.868068][T14728] ? __kasan_kmalloc+0x9/0x10 [ 707.872583][T14728] ? __kmalloc+0x203/0x350 [ 707.876841][T14728] ? __vmalloc_node_range+0x2e3/0x800 [ 707.882043][T14728] __vmalloc_node_range+0x48f/0x800 [ 707.887166][T14728] dup_task_struct+0x61f/0xa60 [ 707.891787][T14728] ? copy_process+0x579/0x3250 [ 707.896364][T14728] ? __kasan_check_write+0x14/0x20 [ 707.901308][T14728] copy_process+0x579/0x3250 [ 707.905746][T14728] ? __kasan_check_write+0x14/0x20 [ 707.910683][T14728] ? proc_fail_nth_write+0x213/0x290 [ 707.915802][T14728] ? proc_fail_nth_read+0x220/0x220 [ 707.920838][T14728] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 707.925891][T14728] ? vfs_write+0x9af/0x1050 [ 707.930238][T14728] ? vmacache_update+0xb7/0x120 [ 707.934919][T14728] kernel_clone+0x22d/0x990 [ 707.939260][T14728] ? file_end_write+0x1b0/0x1b0 [ 707.943949][T14728] ? __kasan_check_write+0x14/0x20 [ 707.948894][T14728] ? create_io_thread+0x1e0/0x1e0 [ 707.953757][T14728] ? __mutex_lock_slowpath+0x10/0x10 [ 707.958980][T14728] __x64_sys_clone+0x289/0x310 [ 707.963584][T14728] ? __do_sys_vfork+0x130/0x130 [ 707.968275][T14728] ? debug_smp_processor_id+0x17/0x20 [ 707.973477][T14728] do_syscall_64+0x44/0xd0 [ 707.977774][T14728] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 707.983457][T14728] RIP: 0033:0x7fb67320a5a9 [ 707.987712][T14728] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 18:39:19 executing program 2: syz_clone(0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 12) 18:39:19 executing program 0: r0 = socket(0x0, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00'}) 18:39:19 executing program 3: r0 = socket(0xa, 0x0, 0x0) setsockopt$MRT_DEL_VIF(r0, 0x0, 0xcb, &(0x7f0000000040)={0x1, 0x1, 0x2, 0x40, @vifc_lcl_ifindex, @dev={0xac, 0x14, 0x14, 0x34}}, 0x10) 18:39:19 executing program 4: r0 = socket(0xa, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x28, 0x2, 0x0, 0x0) r1 = signalfd4(r0, &(0x7f0000000000)={[0xffffffffffff7fff]}, 0x8, 0x80000) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$WG_CMD_SET_DEVICE(r2, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="5c00000058bce0af02c30f5363ee0cc4329a00160f3b54f50633888fb07c2d9094c4e19357d10af8e19481e830ae5a60fb79da39e9638d5506000000f61f88a1c69f2f5de6aa2a8635cd1cd38e3a52aa55cd8dc30ccb64840666eb92353ddc51c43e0000000000000061ec2c33c7edb27f32ee17f0d46ff7527df1", @ANYRES16=0x0, @ANYBLOB="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"], 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000085) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f0000000040)={0xffffffffffffffff, 0x1, 0x7, 0x4, @vifc_lcl_addr=@broadcast, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10) 18:39:19 executing program 1: r0 = socket(0xa, 0x0, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x29, 0x2, 0x0, 0x0) 18:39:19 executing program 5: r0 = socket(0x0, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x6, 0x2, 0x0, 0x0) 18:39:19 executing program 0: r0 = socket(0x0, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00'}) 18:39:19 executing program 5: r0 = socket(0x0, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x6, 0x2, 0x0, 0x0) [ 708.007158][T14728] RSP: 002b:00007fb671f7e118 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 708.015403][T14728] RAX: ffffffffffffffda RBX: 00007fb67332af80 RCX: 00007fb67320a5a9 [ 708.023301][T14728] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000010000000 [ 708.031106][T14728] RBP: 00007fb671f7e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 708.039007][T14728] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 708.046818][T14728] R13: 00007ffe782f632f R14: 00007fb671f7e300 R15: 0000000000022000 [ 708.054631][T14728] 18:39:19 executing program 0: r0 = socket(0xa, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00'}) 18:39:19 executing program 1: r0 = socket(0xa, 0x0, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x29, 0x2, 0x0, 0x0) 18:39:19 executing program 3: r0 = socket(0xa, 0x0, 0x0) setsockopt$MRT_DEL_VIF(r0, 0x0, 0xcb, &(0x7f0000000040)={0x1, 0x1, 0x2, 0x40, @vifc_lcl_ifindex, @dev={0xac, 0x14, 0x14, 0x34}}, 0x10) 18:39:19 executing program 4: r0 = socket(0xa, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x28, 0x2, 0x0, 0x0) (async) r1 = signalfd4(r0, &(0x7f0000000000)={[0xffffffffffff7fff]}, 0x8, 0x80000) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$WG_CMD_SET_DEVICE(r2, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="5c00000058bce0af02c30f5363ee0cc4329a00160f3b54f50633888fb07c2d9094c4e19357d10af8e19481e830ae5a60fb79da39e9638d5506000000f61f88a1c69f2f5de6aa2a8635cd1cd38e3a52aa55cd8dc30ccb64840666eb92353ddc51c43e0000000000000061ec2c33c7edb27f32ee17f0d46ff7527df1", @ANYRES16=0x0, @ANYBLOB="048027bd7000fbdbdf2501000001000000000000000008000500020000000000000077673100000000000000000000000000240003000000000000000000000000000000000000000000000000000000000000000000705d79b58d40b830938894df28fe758c91fb387ec764a3871c491b9fc2df70c688068ecc02dc7ce632268b39958e4f18557bf19718bc48371e32bfd17b0a508f625a470299f55206594ace546b93ca214fc2473b7889a01081fb5b6dba1819eb0418e4c3e6222db610f7639b4f74bc4c2bc8d6f079b36b14213a6c667bf37cb34e247e110888a47717f4ac72ec4f7dd653bfa49aa21acbe29c4f9a6605e905f59576f5e4"], 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000085) (async, rerun: 64) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f0000000040)={0xffffffffffffffff, 0x1, 0x7, 0x4, @vifc_lcl_addr=@broadcast, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10) (rerun: 64) [ 708.083766][T14765] FAULT_INJECTION: forcing a failure. [ 708.083766][T14765] name failslab, interval 1, probability 0, space 0, times 0 [ 708.115748][T14765] CPU: 0 PID: 14765 Comm: syz-executor.2 Not tainted 5.15.74-syzkaller-04383-g7f2e600bf63a #0 [ 708.126015][T14765] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/11/2022 [ 708.135906][T14765] Call Trace: [ 708.139186][T14765] [ 708.141950][T14765] dump_stack_lvl+0x151/0x1b7 [ 708.146468][T14765] ? bfq_pos_tree_add_move+0x43e/0x43e [ 708.151817][T14765] dump_stack+0x15/0x17 [ 708.155869][T14765] should_fail+0x3c0/0x510 [ 708.160114][T14765] ? kvmalloc_node+0x82/0x130 [ 708.164625][T14765] __should_failslab+0x9f/0xe0 [ 708.169227][T14765] should_failslab+0x9/0x20 [ 708.173655][T14765] __kmalloc+0x6d/0x350 [ 708.177825][T14765] ? kvmalloc_node+0x82/0x130 [ 708.182331][T14765] kvmalloc_node+0x82/0x130 [ 708.186676][T14765] alloc_fdtable+0x173/0x2b0 [ 708.191112][T14765] dup_fd+0x781/0xa40 [ 708.194916][T14765] ? avc_has_perm+0x16d/0x260 [ 708.199464][T14765] copy_files+0xe6/0x200 [ 708.203511][T14765] ? perf_event_attrs+0x30/0x30 [ 708.208199][T14765] ? dup_task_struct+0xa60/0xa60 [ 708.213066][T14765] ? security_task_alloc+0x132/0x150 [ 708.218182][T14765] copy_process+0x11e9/0x3250 [ 708.222692][T14765] ? proc_fail_nth_write+0x213/0x290 [ 708.227908][T14765] ? proc_fail_nth_read+0x220/0x220 [ 708.232943][T14765] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 708.237892][T14765] ? vfs_write+0x9af/0x1050 [ 708.242230][T14765] ? vmacache_update+0xb7/0x120 [ 708.247092][T14765] kernel_clone+0x22d/0x990 [ 708.251526][T14765] ? file_end_write+0x1b0/0x1b0 [ 708.256212][T14765] ? __kasan_check_write+0x14/0x20 [ 708.261158][T14765] ? create_io_thread+0x1e0/0x1e0 [ 708.266024][T14765] ? __mutex_lock_slowpath+0x10/0x10 [ 708.271142][T14765] __x64_sys_clone+0x289/0x310 [ 708.275743][T14765] ? __do_sys_vfork+0x130/0x130 [ 708.280614][T14765] ? debug_smp_processor_id+0x17/0x20 [ 708.285820][T14765] do_syscall_64+0x44/0xd0 [ 708.290242][T14765] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 708.295964][T14765] RIP: 0033:0x7fb67320a5a9 [ 708.300219][T14765] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 708.319837][T14765] RSP: 002b:00007fb671f7e118 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 18:39:19 executing program 2: syz_clone(0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 13) 18:39:19 executing program 5: r0 = socket(0x0, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x6, 0x2, 0x0, 0x0) 18:39:19 executing program 3: r0 = socket(0xa, 0x0, 0x0) setsockopt$MRT_DEL_VIF(r0, 0x0, 0xcb, &(0x7f0000000040)={0x1, 0x1, 0x2, 0x40, @vifc_lcl_ifindex, @dev={0xac, 0x14, 0x14, 0x34}}, 0x10) 18:39:19 executing program 1: socket(0xa, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(0xffffffffffffffff, 0x29, 0x2, 0x0, 0x0) 18:39:19 executing program 0: r0 = socket(0xa, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00'}) 18:39:19 executing program 4: r0 = socket(0xa, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x28, 0x2, 0x0, 0x0) r1 = signalfd4(r0, &(0x7f0000000000)={[0xffffffffffff7fff]}, 0x8, 0x80000) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$WG_CMD_SET_DEVICE(r2, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="5c00000058bce0af02c30f5363ee0cc4329a00160f3b54f50633888fb07c2d9094c4e19357d10af8e19481e830ae5a60fb79da39e9638d5506000000f61f88a1c69f2f5de6aa2a8635cd1cd38e3a52aa55cd8dc30ccb64840666eb92353ddc51c43e0000000000000061ec2c33c7edb27f32ee17f0d46ff7527df1", @ANYRES16=0x0, @ANYBLOB="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"], 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000085) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f0000000040)={0xffffffffffffffff, 0x1, 0x7, 0x4, @vifc_lcl_addr=@broadcast, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10) socket(0xa, 0x1, 0x0) (async) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x28, 0x2, 0x0, 0x0) (async) signalfd4(r0, &(0x7f0000000000)={[0xffffffffffff7fff]}, 0x8, 0x80000) (async) pipe(&(0x7f0000000080)) (async) sendmsg$WG_CMD_SET_DEVICE(r2, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="5c00000058bce0af02c30f5363ee0cc4329a00160f3b54f50633888fb07c2d9094c4e19357d10af8e19481e830ae5a60fb79da39e9638d5506000000f61f88a1c69f2f5de6aa2a8635cd1cd38e3a52aa55cd8dc30ccb64840666eb92353ddc51c43e0000000000000061ec2c33c7edb27f32ee17f0d46ff7527df1", @ANYRES16=0x0, @ANYBLOB="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"], 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000085) (async) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f0000000040)={0xffffffffffffffff, 0x1, 0x7, 0x4, @vifc_lcl_addr=@broadcast, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10) (async) 18:39:19 executing program 5: r0 = socket(0xa, 0x0, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x6, 0x2, 0x0, 0x0) 18:39:19 executing program 3: socket(0xa, 0x1, 0x0) setsockopt$MRT_DEL_VIF(0xffffffffffffffff, 0x0, 0xcb, &(0x7f0000000040)={0x1, 0x1, 0x2, 0x40, @vifc_lcl_ifindex, @dev={0xac, 0x14, 0x14, 0x34}}, 0x10) 18:39:19 executing program 0: r0 = socket(0xa, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00'}) 18:39:19 executing program 1: socket(0xa, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(0xffffffffffffffff, 0x29, 0x2, 0x0, 0x0) [ 708.328080][T14765] RAX: ffffffffffffffda RBX: 00007fb67332af80 RCX: 00007fb67320a5a9 [ 708.336015][T14765] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000010000000 [ 708.343999][T14765] RBP: 00007fb671f7e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 708.351812][T14765] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 708.359620][T14765] R13: 00007ffe782f632f R14: 00007fb671f7e300 R15: 0000000000022000 [ 708.367438][T14765] 18:39:19 executing program 3: socket(0xa, 0x1, 0x0) setsockopt$MRT_DEL_VIF(0xffffffffffffffff, 0x0, 0xcb, &(0x7f0000000040)={0x1, 0x1, 0x2, 0x40, @vifc_lcl_ifindex, @dev={0xac, 0x14, 0x14, 0x34}}, 0x10) 18:39:19 executing program 4: r0 = socket(0xa, 0x1, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x28, 0x2, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="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", 0x1000) [ 708.401457][T14796] FAULT_INJECTION: forcing a failure. [ 708.401457][T14796] name failslab, interval 1, probability 0, space 0, times 0 [ 708.420616][T14796] CPU: 1 PID: 14796 Comm: syz-executor.2 Not tainted 5.15.74-syzkaller-04383-g7f2e600bf63a #0 [ 708.430690][T14796] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/11/2022 [ 708.440590][T14796] Call Trace: [ 708.443709][T14796] [ 708.446485][T14796] dump_stack_lvl+0x151/0x1b7 [ 708.450999][T14796] ? bfq_pos_tree_add_move+0x43e/0x43e [ 708.456288][T14796] ? _raw_spin_lock+0xa3/0x1b0 [ 708.460887][T14796] ? dup_fd+0x51f/0xa40 [ 708.464879][T14796] dump_stack+0x15/0x17 [ 708.468869][T14796] should_fail+0x3c0/0x510 [ 708.473127][T14796] __should_failslab+0x9f/0xe0 [ 708.477725][T14796] should_failslab+0x9/0x20 [ 708.482064][T14796] kmem_cache_alloc+0x4f/0x2f0 [ 708.486664][T14796] ? copy_fs_struct+0x4e/0x230 [ 708.491263][T14796] copy_fs_struct+0x4e/0x230 [ 708.495698][T14796] copy_fs+0x72/0x140 [ 708.499512][T14796] copy_process+0x1214/0x3250 [ 708.504024][T14796] ? proc_fail_nth_write+0x213/0x290 [ 708.509145][T14796] ? proc_fail_nth_read+0x220/0x220 [ 708.514187][T14796] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 708.519127][T14796] ? vfs_write+0x9af/0x1050 [ 708.523464][T14796] ? vmacache_update+0xb7/0x120 [ 708.528151][T14796] kernel_clone+0x22d/0x990 [ 708.532490][T14796] ? file_end_write+0x1b0/0x1b0 [ 708.537183][T14796] ? __kasan_check_write+0x14/0x20 [ 708.542125][T14796] ? create_io_thread+0x1e0/0x1e0 [ 708.546987][T14796] ? __mutex_lock_slowpath+0x10/0x10 [ 708.552105][T14796] __x64_sys_clone+0x289/0x310 [ 708.556705][T14796] ? __do_sys_vfork+0x130/0x130 [ 708.561394][T14796] ? debug_smp_processor_id+0x17/0x20 [ 708.566600][T14796] do_syscall_64+0x44/0xd0 [ 708.570854][T14796] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 708.576583][T14796] RIP: 0033:0x7fb67320a5a9 [ 708.580851][T14796] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 18:39:20 executing program 2: syz_clone(0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 14) 18:39:20 executing program 3: socket(0xa, 0x1, 0x0) setsockopt$MRT_DEL_VIF(0xffffffffffffffff, 0x0, 0xcb, &(0x7f0000000040)={0x1, 0x1, 0x2, 0x40, @vifc_lcl_ifindex, @dev={0xac, 0x14, 0x14, 0x34}}, 0x10) 18:39:20 executing program 5: r0 = socket(0xa, 0x0, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x6, 0x2, 0x0, 0x0) 18:39:20 executing program 0: socket(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00'}) 18:39:20 executing program 1: socket(0xa, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(0xffffffffffffffff, 0x29, 0x2, 0x0, 0x0) 18:39:20 executing program 4: r0 = socket(0xa, 0x1, 0x0) (async) socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x28, 0x2, 0x0, 0x0) (async) write(0xffffffffffffffff, &(0x7f0000000000)="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", 0x1000) 18:39:20 executing program 5: r0 = socket(0xa, 0x0, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x6, 0x2, 0x0, 0x0) 18:39:20 executing program 4: r0 = socket(0xa, 0x1, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x28, 0x2, 0x0, 0x0) (async) write(0xffffffffffffffff, &(0x7f0000000000)="f254970286ead60ef3cd2cf6666945a1ae081bba085661fd57044aaf0e86d1feea612c0ebe7182b569752eb72a5b5f1523bd9e4e7f1fecc52dc9ac1b074767d058f880bda6bab1ee2ec7d56a1600b1c379a04ec07f34b0db9bb697fa5c47750814a98575f5dff29dd14e2586096973eebef177b8dab7a29950f594721abd7aeab07a587dced7ed0bb74bf8f05a30bf3959f864bf132d391197de255ba8754d41b94e98b65a0375b07c6538f5307cc074111f51845f703ff8234701150bf43c9326b2b69ab33ff014d363fecb1e580b4d66332e23450b5d865583b3ef9720fe6b2cff1693967dc9d728cee6ef0480d7f8ca5d47ed24e92b83b9cd9b6fc62949563a3534a7e8a25822b93db262c1a59763149c7f1d375306aa9d2e20d64b33f708ad796ca0c06f42f43394e09b744d47e0dfbf327ab55f4f89d31cafd8f77ebe4d22e8ef384f952f27977ffb72e4101520b8bae5adf06ea8636e61b6ed5aeb6fa816f69130299c6a9524916f3415b29fd11e22fce2f35b3372414795c31a806f66cf5371cbb2bda739b6a526a0c5b4355ec6add0c9db488c7a4c707c8b79ee10e838cf85f5ba4bab00763b6642a4c4141021291420bce8d0778cf84b6a1cbbb655026037a600510858b46b7f2048cac6b89e764218f5fb428a0926695816ecac77e030547de58c47d60ff69435eaf28eb88345ea1aab7b41b0f95684f7e76802276c86a972b5fad9a43724e2bcaa328fc50674c327239bf07ca0ca453b0638bd8b0f8689ce9a0ea7c64e38d03aa22ed046a3147e56a5b604b9e917a07fdee22122198360d82450e96ecae3e75f4714ce90f37351a05e30594d52587a02daea3e07754fbd6c97c67d9c319b571c57a08c1db132b09a878b9ac2996e417dbae7b089334b31ba5475109de76ffec01e799593246ea2f1eb9f83d50263c12de72d858e57466a77838d36bb4222da928b2ab28988868f052a6b2746b70d36c2891acc29b9a69f0a00af85a1c5b27f55d490aa74477a19125ea2ea584d49de99dec2b47632f7f410efe207f9d60217c388d626067045ef68aa1f9edfb435513caa383447071bfb441e212cbe15324cb474a7dd1347bd0b08e3f4f3fdeb393aedb1e7c6b678bd0f776714afc4df9f966493118624be3ea9cedaf894fd490227675aa199fd46b9a715d46f8e2d87cf07a500b6daeb7f617085c14fd4a23b6552ad88906a09c5271a3943b752128b04ba3ca8724e53a4f56df5bf9e711aca5172a3504ea93a971ed2710aca7fcd567909b5cb01c7904966c5e61aa3ffe4b99748f63eddc6b77b13a6f2871ac71a54fed6a63efd4e3d493cf45ae62cf1a51cf80f357dfbd3c9801ab6b9a194004bd826414c7428ecea4cb58993653321c6e95a7599d544f779c8b946cccf06dba1fe73eaa44e14217b2403c0d0587c5d5469538e90b299be5ed5f53aaab45520141b1a77f600bf4855701b3cb82dee98b8b7619d69702afce0747f640b5aec4da8696a5982b7779f642dbad50573a99eb9eb49f7ac514088665413bc8f5b22cea4f4dd37125ae85a1d4331d45390161f87840cc6ee0d02dd477228d425809bf30bc71d22fddf1855717e894f3ed53333f3dcd13fc17566fd5dd92ec307046764c0539b8b14d121954c4e167477270e8368e5f7f9e898ec23e113aa3fe9370311cac7a1f68f0a0d6eba2bccb40522e0681973ce00b0907c04c48d07a88c2163c82240741566d60a1885fb31b53e443b5699ba1aa4fb3325b120367d70dd0976d00836e71a93126ad71be86aaa326b52dbde04bfa1d2d2d3a278c18e7b445d8f379f7644e619bb652347e465fa6415db9cd72251dd0010cce801fc10263d67b3905e6b36b671f91b9e445a8e91c2ae44459bf2470438456ceed15c21cac5e87ba375bb030d7f837746f8ab447b66aff90183d94619e24a8f2f61393e75f374bcd435b9d0c13b95ea1625057e31b81a7498df44010bd3e4a6cecd2e8d01b75284f813927335d3d2fb8abb9c83fc9eff9965aec27a03e6b66a1edb06f62b48e7b53c0a37ec9cfa9e73d8a242832f01390ba64d301a4e7f20741633e24606f7bc75f2f31d2e0aa922ded0a9b9fafc682b937e9274b21766b57f44afa3cda3bf08c309ad13c3d06ffdfab5fa86fb638a81085b8aa07ede5971d921522f8f5c314d326d2fdcda65dfcf2011ecb4b6e961704e345498857a63158f2ea3619b1e9cf9152775fe639d5129fcb735b785a38c70887979b8e0d08bb6f09567fda15a61c98ae5430edcec524c66e712d51df1234146cf0dc84994c01942d51beee6ef30bccf0d1c9e513c19a193e4a07d75f7a3e20d758c965739316592ca8ba4698a8ba4671c014a9e84c24b840afc8803937560f13ee45d892087135b62dfcf581358c0ce3d598bfa8d5ecf1088610cda49bc5e073dc017fedaa9fd7cbb4bcb17a9b09c2c176d6b52182e9776e694bd3184db2bf068cfc55def7f0f203ca9d77d0201d08f53d12e00c7e9874acb93c61745cbce8b2beea50dac685c21dcc9a4c5e59b8e92d3232b960de866df934d1fe3947f11b54be1fedd8bf55cd4e59ef35d420bc5397175c8aeec506e2e1429d516da62d850afe18fa35fd077db1cedb22763ac024191b061d374e3f68d0c7dd2a8d3c5b4a468ea02b0afbe25efdfa9a150624fb279e54551ae634f253c89ba80e94b040b59a72f6e7b524ce68a94e0b1a4b25e56726be0c34dc8334d04d62519362c38d0e9020f494ed6c92e3a56671e52c97cf00366fae76a09a3fe59530d244abec251c25117a0a4ddd8edff72c1a082cebe79333cf791d8396f9414a1c0cafccfc324340b5b6e7626fdd466431422bfe8d6602404fb42fb31c27b99dcd82dd41c029a353d164c31e67d54a526d189f1602d810a9663da41084bdc35c41e4cd4c61ea634e0033d7a162e5d7d13769325db51f404a9690f0886aed42d7d9e99f0c56d9e43cce527e014a1cfb3deb7f778d5e226e1fdc3a560135dcb2dd5a2e916b1e4b55ecc312e3f2ce5bc17e03b0c2fd921f721d345c467907fdf36db935f8bb2d29de7ce7ecbcc1278de54e0ea569f85451a33cfa5930bcd7b499ebf4b66543023e6d0ec24c194d87f23e26bd4c67397f5c2b52c11eb35a02330164c2b8510760bc2bf102f437b2a22e6d47542f4137a7b925edfef68dcbe7f6bd29fef369726b0cbefc0d24eca0a9f025e9f462a5487732b413655faf2397281df62cb18b53449c89f0861856382441ddd79ab30402cdcd0d78fc911d98fb68edc0633acd3adbf34becbae62b5eb06c797818f36f584634bbda24c5556a8ada44311d1a7170107425dd36ec7ff8895ce10d6551c9bf195fdf214fae5efca9bec9b47a4cf3d43a36e52d0a2d152c96f7ea7f67a68cfb140778881f8c83c2893c55065001fa1aeebd64203d122505ded53c4d5cff1a296780b0f5c972db81c81a6f37eb50130025e95ca155e49f3db4456658b7272c901336578804df73677ce0d2f5f3d7c9a384b9a2ba02fc29bf4c5120fbfee7ce75f2984a80562dea7cb505e6f8ef62b401886d5398e4d6bba29a40affb25193e9f57c2337d0832017fd57a3d984b87c568c575d2e5080a4d1bc68acd746811ee131254d2f99efcc8e07809e71eb9df6ef037d9f22ef2f6deeb17db5009da7b67a9226f270b65c869c25801a69584b8b05b9a997571910c27c537d14e858339090ee622b4758166af8c2032faae90429389e8bcb3b08612bcc6d1e41136cd095306ac4ae05b5aae4d99da5a543c6434f2fee5875578cbf72de6a8610d8c6f825fbf2a2ef80ac13daa8fe311ad1626ebfb60f35bbd8f584774159ec3485aa752ed6122840938ebabf5c50a6712c08758824adb79131aaaf8d241b34e6ed6b6b6c56bb306d6d706596531ad3fceea31f792fbafd115326d12ef020aaa43e5ae595b18533baa4df215838367242c94b19a5c40ddc4d0f5b9117f89721390ead4a2b134c4f0d8a3f3cb644f4ed7ef903cc9195ecf3e55e5edd6bf6b1ed5413b3dfb0706b95dc7e12570c2c6e1c4f55f0d43edc2a5d16b3430527913b27deb9af82a01379e4ebcead1303fceed55c77b470e9c4dab70134a8de79ec3ce0e1a856194556156f635a04193abb82fbfa484619a443ef9e8379b3185fd0df643d27d2fc38d492391517a3e1151b8c0eca22a96e1027023500c3ef7312633ecd42f1267f0ab04c0d27d0d2da7441dd46877b297ab3727a817b10355f0c88cccf4e68a670443965253f122973ebb5b7e1854bee8a0d1a419272703f92b5f4406d97d2bd94c110a7c60c6dea53894b71c79d22f45b15980f1afdcf032814347d8cd7ce3bbee2a7f77255cd5c52c78fc7a451994c2ae5645fe77aaeb902d7aa0a07fd3ee77fb3f0be719ceac03c843647105ce309df1fc8f740ce6acb7d1236d1781c01a684bd34594d95e636631c25e8df0062722bd92c6bd6123b4e51e5bf649aada3f8d2511be927e69a24756d806dda52cc464c0848d3b491528a7208ec3838fc97effc93366ae20f3ad63ab48450facd95735d01f27d2a912f27665e6998a0f722563affff892e7c59da596cd5676e782bf54fb7a93c17483031fda7e1601e59f44cbeaa1e36298631bb1a39a92d711214abf5a03291da7ccbd19c52563cc8ba4b441385ffbd31121f831a3bb4265b3efa417d4bd145629e01f26295e337a64c4898223228c050ad8c89c28465dbefb8e044c4e2905e89a4ff7dea77e3c3ae92bc05b880a194cc54eb135055f27e07f6a05e60ae6dedcfc4c2bbef2da5e1eb4fb6c89f90a5fcb2e4ad8c23b648a81441671a4c48cb11a65cf0774e5cb44622eeaead9d3f267c786052780495d9ade394b06f89683e0fce8544778f6b1e6ec1ee05acf6bd73deaf32a4aa969e7609878ded6b2dd8bd948095523ffdcbf0ac2fb37d1713717ad668f93e432b624c3ef418ab923ffed9b68a6225375445a9b54817ce453aa5cc18a0714c496cb92add5a66a00df1029abcbaa33a491bea190e6b99e410e4ca336ca7f120ade7b7de6506ea64ba553b8835bdf50192967d7a81684c65794b2e97df6d3370dc66a37229bf2275c24c94aca93c60e3ec964a503429575f5088fe48b59e9bcd7369a02ec548fa804612d3c233073c947dc944956015d9b3351f715633fa3daf16443a9f6c7e0e4311dd37a0bffa81e8d6a15733d480e27d25fdf3403d6674b9433fde235897bc3ad893019e0df626195450afa0e1aa217b30227926b0abb94681fcc6b32ecaa5f8e5ccbfb4b4ac1afd22bccc6fee258933712962320b2966ccb65c22b4cfad9125a9f140dc51e9a4478f28ebc7e7eb98107de35be8019c24869aa4d5b28407145d1a4e837981a9f2fcbf5258f162daf2559ca0276c7cccf47974fda03a13dc000c4212d6475dfdd619870c504f7f5c28409eba54c4b6b117d05bfe6ce4e8fa9442b431f46aaf279d646e8448049183b36e346d6acbd5306d1bfd254078c2463d0255f1bb9022326a6d6ac5bfdcf77f943e94cc1291f44626c0aeb97d6af09f101a3181f1b6b9d1fc3011ac277145b9c6a7664306f8f06d860baa5a0632238d602741088e52c9e266f1a3ba23a1d1ea54c2f35934956a62e13a69a9422da7d74a7fdcdf9067f6756e7535aea1a79f7d816d977671bc66995aa721d8047583308da480baf573d86819de1a121069d7bd5b3fc3e817bc55b13b1c4c250298aa7b9c0799e6226ab787e19c1606c24374720dc154d7c26129b34e9d925dc96179efc75e83755ebcec111e34763fee4c69c759181fb3", 0x1000) 18:39:20 executing program 0: socket(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00'}) 18:39:20 executing program 3: r0 = socket(0xa, 0x1, 0x0) setsockopt$MRT_DEL_VIF(r0, 0x0, 0xcb, 0x0, 0x0) [ 708.600279][T14796] RSP: 002b:00007fb671f7e118 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 708.608521][T14796] RAX: ffffffffffffffda RBX: 00007fb67332af80 RCX: 00007fb67320a5a9 [ 708.616332][T14796] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000010000000 [ 708.624146][T14796] RBP: 00007fb671f7e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 708.631956][T14796] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 708.639767][T14796] R13: 00007ffe782f632f R14: 00007fb671f7e300 R15: 0000000000022000 [ 708.647581][T14796] 18:39:20 executing program 0: socket(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00'}) 18:39:20 executing program 1: r0 = socket(0xa, 0x1, 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(r0, 0x942e, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x28, 0x2, 0x0, 0x0) socket(0x26, 0xa, 0x7fff) r1 = signalfd(0xffffffffffffffff, 0x0, 0x0) close(r1) r2 = signalfd(0xffffffffffffffff, 0x0, 0x0) close(r2) getsockopt$MRT(r2, 0x0, 0xce, &(0x7f0000000080), &(0x7f0000000040)=0x4) [ 708.684462][T14823] FAULT_INJECTION: forcing a failure. [ 708.684462][T14823] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 708.703201][T14823] CPU: 1 PID: 14823 Comm: syz-executor.2 Not tainted 5.15.74-syzkaller-04383-g7f2e600bf63a #0 [ 708.713644][T14823] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/11/2022 [ 708.723539][T14823] Call Trace: [ 708.726661][T14823] [ 708.729442][T14823] dump_stack_lvl+0x151/0x1b7 [ 708.733951][T14823] ? bfq_pos_tree_add_move+0x43e/0x43e [ 708.739243][T14823] dump_stack+0x15/0x17 [ 708.743259][T14823] should_fail+0x3c0/0x510 [ 708.747487][T14823] should_fail_alloc_page+0x58/0x70 [ 708.752520][T14823] __alloc_pages+0x1de/0x7c0 [ 708.756947][T14823] ? __count_vm_events+0x30/0x30 [ 708.761719][T14823] ? __kasan_kmalloc+0x9/0x10 [ 708.766236][T14823] ? __kmalloc+0x203/0x350 [ 708.770491][T14823] ? __vmalloc_node_range+0x2e3/0x800 [ 708.775697][T14823] __vmalloc_node_range+0x48f/0x800 [ 708.781180][T14823] dup_task_struct+0x61f/0xa60 [ 708.785761][T14823] ? copy_process+0x579/0x3250 [ 708.790362][T14823] ? __kasan_check_write+0x14/0x20 [ 708.795311][T14823] copy_process+0x579/0x3250 [ 708.799754][T14823] ? __kasan_check_write+0x14/0x20 [ 708.804686][T14823] ? proc_fail_nth_write+0x213/0x290 [ 708.809809][T14823] ? proc_fail_nth_read+0x220/0x220 [ 708.814969][T14823] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 708.820031][T14823] ? vfs_write+0x9af/0x1050 [ 708.824375][T14823] ? vmacache_update+0xb7/0x120 [ 708.829042][T14823] kernel_clone+0x22d/0x990 [ 708.833381][T14823] ? file_end_write+0x1b0/0x1b0 [ 708.838164][T14823] ? __kasan_check_write+0x14/0x20 [ 708.843225][T14823] ? create_io_thread+0x1e0/0x1e0 [ 708.848486][T14823] ? __mutex_lock_slowpath+0x10/0x10 [ 708.853864][T14823] __x64_sys_clone+0x289/0x310 [ 708.858634][T14823] ? __do_sys_vfork+0x130/0x130 [ 708.863580][T14823] ? debug_smp_processor_id+0x17/0x20 [ 708.869049][T14823] do_syscall_64+0x44/0xd0 [ 708.873303][T14823] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 708.879035][T14823] RIP: 0033:0x7fb67320a5a9 [ 708.883300][T14823] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 708.902845][T14823] RSP: 002b:00007fb671f7e118 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 708.911193][T14823] RAX: ffffffffffffffda RBX: 00007fb67332af80 RCX: 00007fb67320a5a9 [ 708.919094][T14823] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000010000000 [ 708.926916][T14823] RBP: 00007fb671f7e1d0 R08: 0000000000000000 R09: 0000000000000000 18:39:20 executing program 2: syz_clone(0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 15) 18:39:20 executing program 4: r0 = signalfd(0xffffffffffffffff, 0x0, 0x0) close(r0) setsockopt$MRT_ADD_MFC_PROXY(r0, 0x0, 0xd2, &(0x7f0000000400)={@private=0x4, @rand_addr=0x64010102, 0x0, "b29e03a2260459430d1fcc94d8749eec63fb1f25904351d4dae61b9354aa6735", 0x7, 0x401, 0x80, 0x74}, 0x3c) r1 = socket(0xa, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r1, 0x28, 0x2, 0x0, 0x0) ioctl$BTRFS_IOC_START_SYNC(r1, 0x80089418, &(0x7f00000003c0)) r2 = mmap$IORING_OFF_SQES(&(0x7f0000ff5000/0xa000)=nil, 0xa000, 0x0, 0x12, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r2, &(0x7f0000000040)=@IORING_OP_MADVISE={0x19, 0x21, 0x0, 0x0, 0x0, &(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x64, 0x1}, 0x8) syz_io_uring_submit(0x0, r2, &(0x7f0000000380)=@IORING_OP_WRITEV={0x2, 0x1a, 0x4007, @fd_index=0x3, 0x3, &(0x7f0000000300)=[{&(0x7f0000000000)="4822c701fc59efae9520378a07ab54093d2f0c73b728c41a9909ff2885d3bfef2ab1a86ef8997df5b9e37a516cee470eeb21e07ddd376c089f745e48aa063022d2d1802f86dc909a334b5538ccb896c64817edaf33cdf45c4ff11d09035e72890e767244d0615c63dde7b7280b27b3e20e5578935b", 0x75}, {&(0x7f0000000080)="a99231a74be1092a90c548617141e375f40f5eba1194240036b6de2a29e373e73f0212601c89088705e8b2ce016c772c6ba375bdae93620e637da4339b57c342a7d8978b0e7f78a56bfde8391fd306a0e04bf11d0468f6b907bd3d8278c8312a0c7a5b2a5c35321c4922ca49b816b5a497cdae65c10de3cbd88663c7280db3983483e1687954edff9a5de7e25ae82c8894d9a30008f7d15a6ca6e98ee29ec53e46778ea50da12998aca9ff7fea12fbdfb9b429df9004ddbe571109b81bbb02220e3afbaa93bf8a040f7c25cf133b9ba13a8156f110975b58f9239988cec2cfbc2582f6859f2346868278de", 0xeb}, {&(0x7f0000000180)="0cba73908b245d58b45d1615d264cb6517919d8c1025e39873878ec8d17cdbe094effce3168916da680b938f953c71da2cb5be53e5b0a3253bc8f4b30f5efd29156bcfdf04dddb71c5ba722605975ed4dd631eaf6cd079c477a47a24c3e150246878b95d165f2a45822a615560e56c246eb532", 0x73}, {&(0x7f0000000200)="1ecb16c7efc701cd178b779a48af9de845e132bb3e388de2221a3f2868140164204ad285ea767a47ebf9c292dc93681e843b96ea1254c5bccbc78f4e61a0debaa9019c07f46b2b37cd2df669761da9e06fba898efb743c0707b385231bfbf32ca0dad37b8e1340b1b21137c2f35abae718d99e8b202ade4daaeb73968c8ab569ec070da3", 0x84}, {&(0x7f00000002c0)="96e1bd7165dd5d0dfe30f42d84b68eec95da898ea6c473b910f71c48df0fbf83cafd485ad1", 0x25}], 0x5, 0x2}, 0x9) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r1, 0xc0096616, &(0x7f0000000440)={0x2, [0x0, 0x0]}) 18:39:20 executing program 1: r0 = socket(0xa, 0x1, 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(r0, 0x942e, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x28, 0x2, 0x0, 0x0) socket(0x26, 0xa, 0x7fff) r1 = signalfd(0xffffffffffffffff, 0x0, 0x0) close(r1) r2 = signalfd(0xffffffffffffffff, 0x0, 0x0) close(r2) getsockopt$MRT(r2, 0x0, 0xce, &(0x7f0000000080), &(0x7f0000000040)=0x4) 18:39:20 executing program 5: socket(0xa, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(0xffffffffffffffff, 0x6, 0x2, 0x0, 0x0) 18:39:20 executing program 0: r0 = socket(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, 0x0) 18:39:20 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000004, 0x10, r1, 0x0) fcntl$F_SET_FILE_RW_HINT(r0, 0x7, &(0x7f0000000080)=0x1) 18:39:20 executing program 4: r0 = signalfd(0xffffffffffffffff, 0x0, 0x0) close(r0) setsockopt$MRT_ADD_MFC_PROXY(r0, 0x0, 0xd2, &(0x7f0000000400)={@private=0x4, @rand_addr=0x64010102, 0x0, "b29e03a2260459430d1fcc94d8749eec63fb1f25904351d4dae61b9354aa6735", 0x7, 0x401, 0x80, 0x74}, 0x3c) r1 = socket(0xa, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r1, 0x28, 0x2, 0x0, 0x0) ioctl$BTRFS_IOC_START_SYNC(r1, 0x80089418, &(0x7f00000003c0)) r2 = mmap$IORING_OFF_SQES(&(0x7f0000ff5000/0xa000)=nil, 0xa000, 0x0, 0x12, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r2, &(0x7f0000000040)=@IORING_OP_MADVISE={0x19, 0x21, 0x0, 0x0, 0x0, &(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x64, 0x1}, 0x8) syz_io_uring_submit(0x0, r2, &(0x7f0000000380)=@IORING_OP_WRITEV={0x2, 0x1a, 0x4007, @fd_index=0x3, 0x3, &(0x7f0000000300)=[{&(0x7f0000000000)="4822c701fc59efae9520378a07ab54093d2f0c73b728c41a9909ff2885d3bfef2ab1a86ef8997df5b9e37a516cee470eeb21e07ddd376c089f745e48aa063022d2d1802f86dc909a334b5538ccb896c64817edaf33cdf45c4ff11d09035e72890e767244d0615c63dde7b7280b27b3e20e5578935b", 0x75}, {&(0x7f0000000080)="a99231a74be1092a90c548617141e375f40f5eba1194240036b6de2a29e373e73f0212601c89088705e8b2ce016c772c6ba375bdae93620e637da4339b57c342a7d8978b0e7f78a56bfde8391fd306a0e04bf11d0468f6b907bd3d8278c8312a0c7a5b2a5c35321c4922ca49b816b5a497cdae65c10de3cbd88663c7280db3983483e1687954edff9a5de7e25ae82c8894d9a30008f7d15a6ca6e98ee29ec53e46778ea50da12998aca9ff7fea12fbdfb9b429df9004ddbe571109b81bbb02220e3afbaa93bf8a040f7c25cf133b9ba13a8156f110975b58f9239988cec2cfbc2582f6859f2346868278de", 0xeb}, {&(0x7f0000000180)="0cba73908b245d58b45d1615d264cb6517919d8c1025e39873878ec8d17cdbe094effce3168916da680b938f953c71da2cb5be53e5b0a3253bc8f4b30f5efd29156bcfdf04dddb71c5ba722605975ed4dd631eaf6cd079c477a47a24c3e150246878b95d165f2a45822a615560e56c246eb532", 0x73}, {&(0x7f0000000200)="1ecb16c7efc701cd178b779a48af9de845e132bb3e388de2221a3f2868140164204ad285ea767a47ebf9c292dc93681e843b96ea1254c5bccbc78f4e61a0debaa9019c07f46b2b37cd2df669761da9e06fba898efb743c0707b385231bfbf32ca0dad37b8e1340b1b21137c2f35abae718d99e8b202ade4daaeb73968c8ab569ec070da3", 0x84}, {&(0x7f00000002c0)="96e1bd7165dd5d0dfe30f42d84b68eec95da898ea6c473b910f71c48df0fbf83cafd485ad1", 0x25}], 0x5, 0x2}, 0x9) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r1, 0xc0096616, &(0x7f0000000440)={0x2, [0x0, 0x0]}) signalfd(0xffffffffffffffff, 0x0, 0x0) (async) close(r0) (async) setsockopt$MRT_ADD_MFC_PROXY(r0, 0x0, 0xd2, &(0x7f0000000400)={@private=0x4, @rand_addr=0x64010102, 0x0, "b29e03a2260459430d1fcc94d8749eec63fb1f25904351d4dae61b9354aa6735", 0x7, 0x401, 0x80, 0x74}, 0x3c) (async) socket(0xa, 0x1, 0x0) (async) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r1, 0x28, 0x2, 0x0, 0x0) (async) ioctl$BTRFS_IOC_START_SYNC(r1, 0x80089418, &(0x7f00000003c0)) (async) mmap$IORING_OFF_SQES(&(0x7f0000ff5000/0xa000)=nil, 0xa000, 0x0, 0x12, 0xffffffffffffffff, 0x10000000) (async) syz_io_uring_submit(0x0, r2, &(0x7f0000000040)=@IORING_OP_MADVISE={0x19, 0x21, 0x0, 0x0, 0x0, &(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x64, 0x1}, 0x8) (async) syz_io_uring_submit(0x0, r2, &(0x7f0000000380)=@IORING_OP_WRITEV={0x2, 0x1a, 0x4007, @fd_index=0x3, 0x3, &(0x7f0000000300)=[{&(0x7f0000000000)="4822c701fc59efae9520378a07ab54093d2f0c73b728c41a9909ff2885d3bfef2ab1a86ef8997df5b9e37a516cee470eeb21e07ddd376c089f745e48aa063022d2d1802f86dc909a334b5538ccb896c64817edaf33cdf45c4ff11d09035e72890e767244d0615c63dde7b7280b27b3e20e5578935b", 0x75}, {&(0x7f0000000080)="a99231a74be1092a90c548617141e375f40f5eba1194240036b6de2a29e373e73f0212601c89088705e8b2ce016c772c6ba375bdae93620e637da4339b57c342a7d8978b0e7f78a56bfde8391fd306a0e04bf11d0468f6b907bd3d8278c8312a0c7a5b2a5c35321c4922ca49b816b5a497cdae65c10de3cbd88663c7280db3983483e1687954edff9a5de7e25ae82c8894d9a30008f7d15a6ca6e98ee29ec53e46778ea50da12998aca9ff7fea12fbdfb9b429df9004ddbe571109b81bbb02220e3afbaa93bf8a040f7c25cf133b9ba13a8156f110975b58f9239988cec2cfbc2582f6859f2346868278de", 0xeb}, {&(0x7f0000000180)="0cba73908b245d58b45d1615d264cb6517919d8c1025e39873878ec8d17cdbe094effce3168916da680b938f953c71da2cb5be53e5b0a3253bc8f4b30f5efd29156bcfdf04dddb71c5ba722605975ed4dd631eaf6cd079c477a47a24c3e150246878b95d165f2a45822a615560e56c246eb532", 0x73}, {&(0x7f0000000200)="1ecb16c7efc701cd178b779a48af9de845e132bb3e388de2221a3f2868140164204ad285ea767a47ebf9c292dc93681e843b96ea1254c5bccbc78f4e61a0debaa9019c07f46b2b37cd2df669761da9e06fba898efb743c0707b385231bfbf32ca0dad37b8e1340b1b21137c2f35abae718d99e8b202ade4daaeb73968c8ab569ec070da3", 0x84}, {&(0x7f00000002c0)="96e1bd7165dd5d0dfe30f42d84b68eec95da898ea6c473b910f71c48df0fbf83cafd485ad1", 0x25}], 0x5, 0x2}, 0x9) (async) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r1, 0xc0096616, &(0x7f0000000440)={0x2, [0x0, 0x0]}) (async) 18:39:20 executing program 5: socket(0xa, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(0xffffffffffffffff, 0x6, 0x2, 0x0, 0x0) [ 708.934815][T14823] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 708.942720][T14823] R13: 00007ffe782f632f R14: 00007fb671f7e300 R15: 0000000000022000 [ 708.950526][T14823] 18:39:20 executing program 3: r0 = socket(0xa, 0x1, 0x0) setsockopt$MRT_DEL_VIF(r0, 0x0, 0xcb, 0x0, 0x0) (fail_nth: 1) 18:39:20 executing program 0: r0 = socket(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, 0x0) 18:39:20 executing program 1: r0 = socket(0xa, 0x1, 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(r0, 0x942e, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x28, 0x2, 0x0, 0x0) socket(0x26, 0xa, 0x7fff) r1 = signalfd(0xffffffffffffffff, 0x0, 0x0) close(r1) r2 = signalfd(0xffffffffffffffff, 0x0, 0x0) close(r2) getsockopt$MRT(r2, 0x0, 0xce, &(0x7f0000000080), &(0x7f0000000040)=0x4) [ 708.982248][T14844] FAULT_INJECTION: forcing a failure. [ 708.982248][T14844] name failslab, interval 1, probability 0, space 0, times 0 [ 708.997832][T14844] CPU: 0 PID: 14844 Comm: syz-executor.2 Not tainted 5.15.74-syzkaller-04383-g7f2e600bf63a #0 [ 709.007899][T14844] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/11/2022 [ 709.011213][T14862] FAULT_INJECTION: forcing a failure. [ 709.011213][T14862] name fail_usercopy, interval 1, probability 0, space 0, times 0 18:39:20 executing program 0: r0 = socket(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, 0x0) 18:39:20 executing program 4: r0 = signalfd(0xffffffffffffffff, 0x0, 0x0) close(r0) setsockopt$MRT_ADD_MFC_PROXY(r0, 0x0, 0xd2, &(0x7f0000000400)={@private=0x4, @rand_addr=0x64010102, 0x0, "b29e03a2260459430d1fcc94d8749eec63fb1f25904351d4dae61b9354aa6735", 0x7, 0x401, 0x80, 0x74}, 0x3c) r1 = socket(0xa, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r1, 0x28, 0x2, 0x0, 0x0) ioctl$BTRFS_IOC_START_SYNC(r1, 0x80089418, &(0x7f00000003c0)) r2 = mmap$IORING_OFF_SQES(&(0x7f0000ff5000/0xa000)=nil, 0xa000, 0x0, 0x12, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r2, &(0x7f0000000040)=@IORING_OP_MADVISE={0x19, 0x21, 0x0, 0x0, 0x0, &(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x64, 0x1}, 0x8) syz_io_uring_submit(0x0, r2, &(0x7f0000000380)=@IORING_OP_WRITEV={0x2, 0x1a, 0x4007, @fd_index=0x3, 0x3, &(0x7f0000000300)=[{&(0x7f0000000000)="4822c701fc59efae9520378a07ab54093d2f0c73b728c41a9909ff2885d3bfef2ab1a86ef8997df5b9e37a516cee470eeb21e07ddd376c089f745e48aa063022d2d1802f86dc909a334b5538ccb896c64817edaf33cdf45c4ff11d09035e72890e767244d0615c63dde7b7280b27b3e20e5578935b", 0x75}, {&(0x7f0000000080)="a99231a74be1092a90c548617141e375f40f5eba1194240036b6de2a29e373e73f0212601c89088705e8b2ce016c772c6ba375bdae93620e637da4339b57c342a7d8978b0e7f78a56bfde8391fd306a0e04bf11d0468f6b907bd3d8278c8312a0c7a5b2a5c35321c4922ca49b816b5a497cdae65c10de3cbd88663c7280db3983483e1687954edff9a5de7e25ae82c8894d9a30008f7d15a6ca6e98ee29ec53e46778ea50da12998aca9ff7fea12fbdfb9b429df9004ddbe571109b81bbb02220e3afbaa93bf8a040f7c25cf133b9ba13a8156f110975b58f9239988cec2cfbc2582f6859f2346868278de", 0xeb}, {&(0x7f0000000180)="0cba73908b245d58b45d1615d264cb6517919d8c1025e39873878ec8d17cdbe094effce3168916da680b938f953c71da2cb5be53e5b0a3253bc8f4b30f5efd29156bcfdf04dddb71c5ba722605975ed4dd631eaf6cd079c477a47a24c3e150246878b95d165f2a45822a615560e56c246eb532", 0x73}, {&(0x7f0000000200)="1ecb16c7efc701cd178b779a48af9de845e132bb3e388de2221a3f2868140164204ad285ea767a47ebf9c292dc93681e843b96ea1254c5bccbc78f4e61a0debaa9019c07f46b2b37cd2df669761da9e06fba898efb743c0707b385231bfbf32ca0dad37b8e1340b1b21137c2f35abae718d99e8b202ade4daaeb73968c8ab569ec070da3", 0x84}, {&(0x7f00000002c0)="96e1bd7165dd5d0dfe30f42d84b68eec95da898ea6c473b910f71c48df0fbf83cafd485ad1", 0x25}], 0x5, 0x2}, 0x9) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r1, 0xc0096616, &(0x7f0000000440)={0x2, [0x0, 0x0]}) signalfd(0xffffffffffffffff, 0x0, 0x0) (async) close(r0) (async) setsockopt$MRT_ADD_MFC_PROXY(r0, 0x0, 0xd2, &(0x7f0000000400)={@private=0x4, @rand_addr=0x64010102, 0x0, "b29e03a2260459430d1fcc94d8749eec63fb1f25904351d4dae61b9354aa6735", 0x7, 0x401, 0x80, 0x74}, 0x3c) (async) socket(0xa, 0x1, 0x0) (async) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r1, 0x28, 0x2, 0x0, 0x0) (async) ioctl$BTRFS_IOC_START_SYNC(r1, 0x80089418, &(0x7f00000003c0)) (async) mmap$IORING_OFF_SQES(&(0x7f0000ff5000/0xa000)=nil, 0xa000, 0x0, 0x12, 0xffffffffffffffff, 0x10000000) (async) syz_io_uring_submit(0x0, r2, &(0x7f0000000040)=@IORING_OP_MADVISE={0x19, 0x21, 0x0, 0x0, 0x0, &(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x64, 0x1}, 0x8) (async) syz_io_uring_submit(0x0, r2, &(0x7f0000000380)=@IORING_OP_WRITEV={0x2, 0x1a, 0x4007, @fd_index=0x3, 0x3, &(0x7f0000000300)=[{&(0x7f0000000000)="4822c701fc59efae9520378a07ab54093d2f0c73b728c41a9909ff2885d3bfef2ab1a86ef8997df5b9e37a516cee470eeb21e07ddd376c089f745e48aa063022d2d1802f86dc909a334b5538ccb896c64817edaf33cdf45c4ff11d09035e72890e767244d0615c63dde7b7280b27b3e20e5578935b", 0x75}, {&(0x7f0000000080)="a99231a74be1092a90c548617141e375f40f5eba1194240036b6de2a29e373e73f0212601c89088705e8b2ce016c772c6ba375bdae93620e637da4339b57c342a7d8978b0e7f78a56bfde8391fd306a0e04bf11d0468f6b907bd3d8278c8312a0c7a5b2a5c35321c4922ca49b816b5a497cdae65c10de3cbd88663c7280db3983483e1687954edff9a5de7e25ae82c8894d9a30008f7d15a6ca6e98ee29ec53e46778ea50da12998aca9ff7fea12fbdfb9b429df9004ddbe571109b81bbb02220e3afbaa93bf8a040f7c25cf133b9ba13a8156f110975b58f9239988cec2cfbc2582f6859f2346868278de", 0xeb}, {&(0x7f0000000180)="0cba73908b245d58b45d1615d264cb6517919d8c1025e39873878ec8d17cdbe094effce3168916da680b938f953c71da2cb5be53e5b0a3253bc8f4b30f5efd29156bcfdf04dddb71c5ba722605975ed4dd631eaf6cd079c477a47a24c3e150246878b95d165f2a45822a615560e56c246eb532", 0x73}, {&(0x7f0000000200)="1ecb16c7efc701cd178b779a48af9de845e132bb3e388de2221a3f2868140164204ad285ea767a47ebf9c292dc93681e843b96ea1254c5bccbc78f4e61a0debaa9019c07f46b2b37cd2df669761da9e06fba898efb743c0707b385231bfbf32ca0dad37b8e1340b1b21137c2f35abae718d99e8b202ade4daaeb73968c8ab569ec070da3", 0x84}, {&(0x7f00000002c0)="96e1bd7165dd5d0dfe30f42d84b68eec95da898ea6c473b910f71c48df0fbf83cafd485ad1", 0x25}], 0x5, 0x2}, 0x9) (async) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r1, 0xc0096616, &(0x7f0000000440)={0x2, [0x0, 0x0]}) (async) [ 709.017798][T14844] Call Trace: [ 709.017810][T14844] [ 709.017818][T14844] dump_stack_lvl+0x151/0x1b7 [ 709.017843][T14844] ? bfq_pos_tree_add_move+0x43e/0x43e [ 709.017862][T14844] dump_stack+0x15/0x17 [ 709.051042][T14844] should_fail+0x3c0/0x510 [ 709.055489][T14844] __should_failslab+0x9f/0xe0 [ 709.060075][T14844] should_failslab+0x9/0x20 [ 709.064419][T14844] kmem_cache_alloc+0x4f/0x2f0 [ 709.069019][T14844] ? copy_signal+0x55/0x610 [ 709.073357][T14844] copy_signal+0x55/0x610 [ 709.077527][T14844] copy_process+0x126a/0x3250 [ 709.082100][T14844] ? proc_fail_nth_write+0x213/0x290 [ 709.087167][T14844] ? proc_fail_nth_read+0x220/0x220 [ 709.092192][T14844] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 709.097134][T14844] ? vfs_write+0x9af/0x1050 [ 709.101478][T14844] ? vmacache_update+0xb7/0x120 [ 709.106175][T14844] kernel_clone+0x22d/0x990 [ 709.110504][T14844] ? file_end_write+0x1b0/0x1b0 [ 709.115191][T14844] ? __kasan_check_write+0x14/0x20 [ 709.120138][T14844] ? create_io_thread+0x1e0/0x1e0 [ 709.124993][T14844] ? __mutex_lock_slowpath+0x10/0x10 [ 709.130115][T14844] __x64_sys_clone+0x289/0x310 [ 709.134813][T14844] ? __do_sys_vfork+0x130/0x130 [ 709.139501][T14844] ? debug_smp_processor_id+0x17/0x20 [ 709.144714][T14844] do_syscall_64+0x44/0xd0 [ 709.149045][T14844] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 709.154775][T14844] RIP: 0033:0x7fb67320a5a9 [ 709.159033][T14844] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 709.178556][T14844] RSP: 002b:00007fb671f7e118 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 709.186819][T14844] RAX: ffffffffffffffda RBX: 00007fb67332af80 RCX: 00007fb67320a5a9 [ 709.194612][T14844] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000010000000 [ 709.202427][T14844] RBP: 00007fb671f7e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 709.210236][T14844] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 709.218042][T14844] R13: 00007ffe782f632f R14: 00007fb671f7e300 R15: 0000000000022000 [ 709.225944][T14844] [ 709.229423][T14862] CPU: 1 PID: 14862 Comm: syz-executor.3 Not tainted 5.15.74-syzkaller-04383-g7f2e600bf63a #0 [ 709.239567][T14862] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/11/2022 [ 709.249541][T14862] Call Trace: [ 709.252762][T14862] [ 709.255617][T14862] dump_stack_lvl+0x151/0x1b7 [ 709.260135][T14862] ? bfq_pos_tree_add_move+0x43e/0x43e [ 709.265426][T14862] ? avc_has_perm_noaudit+0x2ec/0x450 [ 709.270635][T14862] dump_stack+0x15/0x17 [ 709.274627][T14862] should_fail+0x3c0/0x510 [ 709.278880][T14862] should_fail_usercopy+0x1a/0x20 [ 709.283744][T14862] _copy_to_user+0x20/0x90 [ 709.288000][T14862] simple_read_from_buffer+0xdd/0x160 [ 709.293203][T14862] proc_fail_nth_read+0x1af/0x220 [ 709.298062][T14862] ? proc_fault_inject_write+0x3a0/0x3a0 [ 709.303532][T14862] ? security_file_permission+0x497/0x5f0 [ 709.309170][T14862] ? proc_fault_inject_write+0x3a0/0x3a0 [ 709.314667][T14862] vfs_read+0x299/0xd80 [ 709.318631][T14862] ? kernel_read+0x1f0/0x1f0 [ 709.323063][T14862] ? __kasan_check_write+0x14/0x20 [ 709.328099][T14862] ? mutex_lock+0xb6/0x130 [ 709.332348][T14862] ? wait_for_completion_killable_timeout+0x10/0x10 [ 709.338868][T14862] ? __fdget_pos+0x26d/0x310 [ 709.343296][T14862] ? ksys_read+0x77/0x2c0 [ 709.347451][T14862] ksys_read+0x198/0x2c0 [ 709.351537][T14862] ? __ia32_sys_recv+0xb0/0xb0 [ 709.356127][T14862] ? vfs_write+0x1050/0x1050 [ 709.360556][T14862] ? debug_smp_processor_id+0x17/0x20 [ 709.365772][T14862] __x64_sys_read+0x7b/0x90 [ 709.370195][T14862] do_syscall_64+0x44/0xd0 [ 709.374443][T14862] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 709.380171][T14862] RIP: 0033:0x7f987cb7e2ec [ 709.384423][T14862] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 709.404131][T14862] RSP: 002b:00007f987b940160 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 709.412367][T14862] RAX: ffffffffffffffda RBX: 00007f987ccecf80 RCX: 00007f987cb7e2ec [ 709.420190][T14862] RDX: 000000000000000f RSI: 00007f987b9401e0 RDI: 0000000000000004 18:39:20 executing program 2: syz_clone(0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 16) 18:39:20 executing program 1: r0 = socket(0xa, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x29, 0x2, 0x0, 0x0) (fail_nth: 1) 18:39:20 executing program 0: r0 = socket(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00'}) (fail_nth: 1) 18:39:20 executing program 4: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000540)={0x5, &(0x7f0000000500)=[{0x8000, 0x0, 0x81}, {}, {0x2, 0x2, 0x40}, {}, {}]}) fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000480)={0x0}) r2 = socket$inet_udp(0x2, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000004, 0x10, r2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f00000002c0)={r1, 0x2, r2, 0x2}) r3 = socket(0xa, 0x1, 0x0) eventfd2(0x3, 0x0) sync_file_range(r3, 0x1, 0x8094, 0x1) fsopen(&(0x7f0000000040)='ceph\x00', 0x0) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100), r3) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r3, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="200026bd7000e97200000600000005002e00010000000800320006000000050030000100000008003b000600000008000300", @ANYRES32=0x0, @ANYBLOB="030000003e88683af22041d87a4a0800000008003200f9ff7aa7a584dbffff000000000000"], 0x5c}, 0x1, 0x0, 0x0, 0x20004094}, 0x4000000) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180), r3) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r3, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="0e3ba72c0da3f093dac8dd127b575eedb53bb548999ef80e9ff976e1877ffb984ee297c4a9ddc5c6dc11807c40cd3dafb03154c70a09c980b30c7835942cebb4d36289a58f387d981e1565faef7ee167465f0fb3dd2b99cce4769438be9f09ebb12034548cc49a3a49e32829c2de977c7f97ac70716342c66734536e724f2351b7879fc5d06b0ecc2be57e1215dc209cd66813f4511d44034b6b89b79bd5a6990bdc3f57d32300735bddd15c2a", @ANYRES16=r5, @ANYBLOB="00042dbd7000fbdbdf250400000005002d0000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x48880}, 0x800) ioctl$EXT4_IOC_CHECKPOINT(r3, 0x4004662b, &(0x7f0000000080)=0x4) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r3, 0x28, 0x2, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x90c4749c1ad3745a, 0x0, 0x0, 0x3, &(0x7f0000000580)={0x0, 0x3938700}, 0x1, 0x1, 0x1}, 0x7) 18:39:20 executing program 5: socket(0xa, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(0xffffffffffffffff, 0x6, 0x2, 0x0, 0x0) [ 709.427998][T14862] RBP: 00007f987b9401d0 R08: 0000000000000000 R09: 0000000000000000 [ 709.435806][T14862] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 709.443801][T14862] R13: 00007ffe9b00adcf R14: 00007f987b940300 R15: 0000000000022000 [ 709.451697][T14862] [ 709.473443][T14883] FAULT_INJECTION: forcing a failure. [ 709.473443][T14883] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 709.485023][T14887] FAULT_INJECTION: forcing a failure. [ 709.485023][T14887] name failslab, interval 1, probability 0, space 0, times 0 [ 709.490984][T14883] CPU: 1 PID: 14883 Comm: syz-executor.0 Not tainted 5.15.74-syzkaller-04383-g7f2e600bf63a #0 [ 709.509118][T14883] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/11/2022 [ 709.519025][T14883] Call Trace: [ 709.522137][T14883] [ 709.524914][T14883] dump_stack_lvl+0x151/0x1b7 [ 709.529426][T14883] ? bfq_pos_tree_add_move+0x43e/0x43e [ 709.534725][T14883] ? inet6_ioctl+0x13f/0x240 [ 709.539148][T14883] ? inet6_getname+0x7f0/0x7f0 [ 709.543748][T14883] dump_stack+0x15/0x17 [ 709.547740][T14883] should_fail+0x3c0/0x510 [ 709.551994][T14883] should_fail_usercopy+0x1a/0x20 [ 709.556853][T14883] _copy_from_user+0x20/0xd0 [ 709.561278][T14883] sock_do_ioctl+0x228/0x5b0 [ 709.565712][T14883] ? sock_show_fdinfo+0xa0/0xa0 [ 709.570391][T14883] ? __kasan_check_write+0x14/0x20 [ 709.575340][T14883] ? mutex_lock+0xb6/0x130 [ 709.579595][T14883] ? selinux_file_ioctl+0x3c9/0x530 [ 709.584647][T14883] sock_ioctl+0x457/0x740 [ 709.588794][T14883] ? __kasan_check_write+0x14/0x20 [ 709.593741][T14883] ? sock_poll+0x400/0x400 [ 709.597995][T14883] ? __fget_files+0x310/0x370 [ 709.602521][T14883] ? security_file_ioctl+0xb1/0xd0 [ 709.607457][T14883] ? sock_poll+0x400/0x400 [ 709.611716][T14883] __se_sys_ioctl+0x115/0x190 [ 709.616228][T14883] __x64_sys_ioctl+0x7b/0x90 [ 709.620651][T14883] do_syscall_64+0x44/0xd0 [ 709.624902][T14883] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 709.630736][T14883] RIP: 0033:0x7fe2737a45a9 [ 709.634970][T14883] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 709.654504][T14883] RSP: 002b:00007fe272518168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 709.662861][T14883] RAX: ffffffffffffffda RBX: 00007fe2738c4f80 RCX: 00007fe2737a45a9 [ 709.670939][T14883] RDX: 0000000020000000 RSI: 0000000000008933 RDI: 0000000000000003 18:39:21 executing program 5: r0 = socket(0xa, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x6, 0x2, 0x0, 0x0) (fail_nth: 1) 18:39:21 executing program 4: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000540)={0x5, &(0x7f0000000500)=[{0x8000, 0x0, 0x81}, {}, {0x2, 0x2, 0x40}, {}, {}]}) fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, 0x0) (async) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000480)={0x0}) (async) r2 = socket$inet_udp(0x2, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000004, 0x10, r2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f00000002c0)={r1, 0x2, r2, 0x2}) (async) r3 = socket(0xa, 0x1, 0x0) eventfd2(0x3, 0x0) (async) sync_file_range(r3, 0x1, 0x8094, 0x1) fsopen(&(0x7f0000000040)='ceph\x00', 0x0) (async) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100), r3) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r3, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="200026bd7000e97200000600000005002e00010000000800320006000000050030000100000008003b000600000008000300", @ANYRES32=0x0, @ANYBLOB="030000003e88683af22041d87a4a0800000008003200f9ff7aa7a584dbffff000000000000"], 0x5c}, 0x1, 0x0, 0x0, 0x20004094}, 0x4000000) (async) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180), r3) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r3, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="0e3ba72c0da3f093dac8dd127b575eedb53bb548999ef80e9ff976e1877ffb984ee297c4a9ddc5c6dc11807c40cd3dafb03154c70a09c980b30c7835942cebb4d36289a58f387d981e1565faef7ee167465f0fb3dd2b99cce4769438be9f09ebb12034548cc49a3a49e32829c2de977c7f97ac70716342c66734536e724f2351b7879fc5d06b0ecc2be57e1215dc209cd66813f4511d44034b6b89b79bd5a6990bdc3f57d32300735bddd15c2a", @ANYRES16=r5, @ANYBLOB="00042dbd7000fbdbdf250400000005002d0000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x48880}, 0x800) ioctl$EXT4_IOC_CHECKPOINT(r3, 0x4004662b, &(0x7f0000000080)=0x4) (async) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r3, 0x28, 0x2, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x90c4749c1ad3745a, 0x0, 0x0, 0x3, &(0x7f0000000580)={0x0, 0x3938700}, 0x1, 0x1, 0x1}, 0x7) [ 709.678785][T14883] RBP: 00007fe2725181d0 R08: 0000000000000000 R09: 0000000000000000 [ 709.686559][T14883] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 709.694378][T14883] R13: 00007ffd16befe8f R14: 00007fe272518300 R15: 0000000000022000 [ 709.702290][T14883] [ 709.705153][T14887] CPU: 0 PID: 14887 Comm: syz-executor.2 Not tainted 5.15.74-syzkaller-04383-g7f2e600bf63a #0 [ 709.715241][T14887] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/11/2022 [ 709.725124][T14887] Call Trace: [ 709.728241][T14887] [ 709.728843][T14889] FAULT_INJECTION: forcing a failure. [ 709.728843][T14889] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 709.731017][T14887] dump_stack_lvl+0x151/0x1b7 [ 709.731046][T14887] ? bfq_pos_tree_add_move+0x43e/0x43e [ 709.753772][T14887] ? __this_cpu_preempt_check+0x13/0x20 [ 709.759239][T14887] dump_stack+0x15/0x17 [ 709.763318][T14887] should_fail+0x3c0/0x510 [ 709.767703][T14887] __should_failslab+0x9f/0xe0 [ 709.772270][T14887] should_failslab+0x9/0x20 [ 709.776592][T14887] kmem_cache_alloc+0x4f/0x2f0 [ 709.781203][T14887] ? __kasan_check_write+0x14/0x20 [ 709.786145][T14887] ? prepare_creds+0x30/0x690 [ 709.790745][T14887] ? _raw_spin_lock_irqsave+0xf8/0x210 [ 709.796048][T14887] prepare_creds+0x30/0x690 [ 709.800468][T14887] copy_creds+0xde/0x640 [ 709.804540][T14887] copy_process+0x775/0x3250 [ 709.808972][T14887] ? __kasan_check_write+0x14/0x20 [ 709.814005][T14887] ? proc_fail_nth_write+0x213/0x290 [ 709.819127][T14887] ? proc_fail_nth_read+0x220/0x220 [ 709.824243][T14887] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 709.829192][T14887] ? vfs_write+0x9af/0x1050 [ 709.833537][T14887] ? vmacache_update+0xb7/0x120 [ 709.838223][T14887] kernel_clone+0x22d/0x990 [ 709.842556][T14887] ? file_end_write+0x1b0/0x1b0 [ 709.847426][T14887] ? __kasan_check_write+0x14/0x20 [ 709.852458][T14887] ? create_io_thread+0x1e0/0x1e0 [ 709.857400][T14887] ? __mutex_lock_slowpath+0x10/0x10 [ 709.862620][T14887] __x64_sys_clone+0x289/0x310 [ 709.867295][T14887] ? __do_sys_vfork+0x130/0x130 [ 709.871981][T14887] ? debug_smp_processor_id+0x17/0x20 [ 709.877187][T14887] do_syscall_64+0x44/0xd0 [ 709.881443][T14887] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 709.887428][T14887] RIP: 0033:0x7fb67320a5a9 [ 709.891694][T14887] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 709.911125][T14887] RSP: 002b:00007fb671f7e118 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 709.919366][T14887] RAX: ffffffffffffffda RBX: 00007fb67332af80 RCX: 00007fb67320a5a9 [ 709.927182][T14887] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000010000000 [ 709.934996][T14887] RBP: 00007fb671f7e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 709.942805][T14887] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 709.950616][T14887] R13: 00007ffe782f632f R14: 00007fb671f7e300 R15: 0000000000022000 [ 709.958431][T14887] [ 709.961341][T14889] CPU: 1 PID: 14889 Comm: syz-executor.1 Not tainted 5.15.74-syzkaller-04383-g7f2e600bf63a #0 [ 709.971376][T14889] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/11/2022 [ 709.981347][T14889] Call Trace: [ 709.981738][T14894] FAULT_INJECTION: forcing a failure. [ 709.981738][T14894] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 709.984463][T14889] [ 709.984472][T14889] dump_stack_lvl+0x151/0x1b7 [ 710.004691][T14889] ? bfq_pos_tree_add_move+0x43e/0x43e [ 710.009983][T14889] ? avc_has_perm_noaudit+0x2ec/0x450 [ 710.015196][T14889] dump_stack+0x15/0x17 [ 710.019279][T14889] should_fail+0x3c0/0x510 [ 710.023610][T14889] should_fail_usercopy+0x1a/0x20 [ 710.028472][T14889] _copy_to_user+0x20/0x90 [ 710.032731][T14889] simple_read_from_buffer+0xdd/0x160 [ 710.038105][T14889] proc_fail_nth_read+0x1af/0x220 [ 710.042971][T14889] ? proc_fault_inject_write+0x3a0/0x3a0 [ 710.048436][T14889] ? security_file_permission+0x497/0x5f0 [ 710.053987][T14889] ? proc_fault_inject_write+0x3a0/0x3a0 [ 710.059453][T14889] vfs_read+0x299/0xd80 [ 710.063448][T14889] ? kernel_read+0x1f0/0x1f0 [ 710.067879][T14889] ? __kasan_check_write+0x14/0x20 [ 710.072819][T14889] ? mutex_lock+0xb6/0x130 [ 710.077169][T14889] ? wait_for_completion_killable_timeout+0x10/0x10 [ 710.083583][T14889] ? __fdget_pos+0x26d/0x310 [ 710.088111][T14889] ? ksys_read+0x77/0x2c0 [ 710.092265][T14889] ksys_read+0x198/0x2c0 [ 710.096342][T14889] ? __ia32_sys_recv+0xb0/0xb0 [ 710.101149][T14889] ? vfs_write+0x1050/0x1050 [ 710.105543][T14889] ? debug_smp_processor_id+0x17/0x20 [ 710.110750][T14889] __x64_sys_read+0x7b/0x90 [ 710.115103][T14889] do_syscall_64+0x44/0xd0 [ 710.119445][T14889] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 710.125177][T14889] RIP: 0033:0x7f9c9f86c2ec [ 710.129429][T14889] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 710.149224][T14889] RSP: 002b:00007f9c9e62e160 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 710.157460][T14889] RAX: ffffffffffffffda RBX: 00007f9c9f9daf80 RCX: 00007f9c9f86c2ec [ 710.165332][T14889] RDX: 000000000000000f RSI: 00007f9c9e62e1e0 RDI: 0000000000000004 [ 710.173094][T14889] RBP: 00007f9c9e62e1d0 R08: 0000000000000000 R09: 0000000000000000 18:39:21 executing program 3: r0 = socket(0xa, 0x1, 0x0) setsockopt$MRT_DEL_VIF(r0, 0x0, 0xcb, 0x0, 0x0) 18:39:21 executing program 0: r0 = socket(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00'}) (fail_nth: 2) 18:39:21 executing program 2: syz_clone(0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 17) 18:39:21 executing program 4: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000540)={0x5, &(0x7f0000000500)=[{0x8000, 0x0, 0x81}, {}, {0x2, 0x2, 0x40}, {}, {}]}) fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000480)={0x0}) r2 = socket$inet_udp(0x2, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000004, 0x10, r2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f00000002c0)={r1, 0x2, r2, 0x2}) r3 = socket(0xa, 0x1, 0x0) eventfd2(0x3, 0x0) sync_file_range(r3, 0x1, 0x8094, 0x1) fsopen(&(0x7f0000000040)='ceph\x00', 0x0) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100), r3) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r3, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="200026bd7000e97200000600000005002e00010000000800320006000000050030000100000008003b000600000008000300", @ANYRES32=0x0, @ANYBLOB="030000003e88683af22041d87a4a0800000008003200f9ff7aa7a584dbffff000000000000"], 0x5c}, 0x1, 0x0, 0x0, 0x20004094}, 0x4000000) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180), r3) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r3, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="0e3ba72c0da3f093dac8dd127b575eedb53bb548999ef80e9ff976e1877ffb984ee297c4a9ddc5c6dc11807c40cd3dafb03154c70a09c980b30c7835942cebb4d36289a58f387d981e1565faef7ee167465f0fb3dd2b99cce4769438be9f09ebb12034548cc49a3a49e32829c2de977c7f97ac70716342c66734536e724f2351b7879fc5d06b0ecc2be57e1215dc209cd66813f4511d44034b6b89b79bd5a6990bdc3f57d32300735bddd15c2a", @ANYRES16=r5, @ANYBLOB="00042dbd7000fbdbdf250400000005002d0000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x48880}, 0x800) ioctl$EXT4_IOC_CHECKPOINT(r3, 0x4004662b, &(0x7f0000000080)=0x4) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r3, 0x28, 0x2, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x90c4749c1ad3745a, 0x0, 0x0, 0x3, &(0x7f0000000580)={0x0, 0x3938700}, 0x1, 0x1, 0x1}, 0x7) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000540)={0x5, &(0x7f0000000500)=[{0x8000, 0x0, 0x81}, {}, {0x2, 0x2, 0x40}, {}, {}]}) (async) fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, 0x0) (async) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000480)) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000004, 0x10, r2, 0x0) (async) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f00000002c0)={r1, 0x2, r2, 0x2}) (async) socket(0xa, 0x1, 0x0) (async) eventfd2(0x3, 0x0) (async) sync_file_range(r3, 0x1, 0x8094, 0x1) (async) fsopen(&(0x7f0000000040)='ceph\x00', 0x0) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000100), r3) (async) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r3, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="200026bd7000e97200000600000005002e00010000000800320006000000050030000100000008003b000600000008000300", @ANYRES32=0x0, @ANYBLOB="030000003e88683af22041d87a4a0800000008003200f9ff7aa7a584dbffff000000000000"], 0x5c}, 0x1, 0x0, 0x0, 0x20004094}, 0x4000000) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000180), r3) (async) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r3, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="0e3ba72c0da3f093dac8dd127b575eedb53bb548999ef80e9ff976e1877ffb984ee297c4a9ddc5c6dc11807c40cd3dafb03154c70a09c980b30c7835942cebb4d36289a58f387d981e1565faef7ee167465f0fb3dd2b99cce4769438be9f09ebb12034548cc49a3a49e32829c2de977c7f97ac70716342c66734536e724f2351b7879fc5d06b0ecc2be57e1215dc209cd66813f4511d44034b6b89b79bd5a6990bdc3f57d32300735bddd15c2a", @ANYRES16=r5, @ANYBLOB="00042dbd7000fbdbdf250400000005002d0000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x48880}, 0x800) (async) ioctl$EXT4_IOC_CHECKPOINT(r3, 0x4004662b, &(0x7f0000000080)=0x4) (async) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r3, 0x28, 0x2, 0x0, 0x0) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x90c4749c1ad3745a, 0x0, 0x0, 0x3, &(0x7f0000000580)={0x0, 0x3938700}, 0x1, 0x1, 0x1}, 0x7) (async) 18:39:21 executing program 1: r0 = socket(0xa, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x29, 0x2, 0x0, 0x0) 18:39:21 executing program 1: r0 = socket(0xa, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x6, 0x2, 0x0, 0x0) [ 710.180899][T14889] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 710.188714][T14889] R13: 00007ffc7ebb95af R14: 00007f9c9e62e300 R15: 0000000000022000 [ 710.196521][T14889] [ 710.199383][T14894] CPU: 0 PID: 14894 Comm: syz-executor.5 Not tainted 5.15.74-syzkaller-04383-g7f2e600bf63a #0 [ 710.209568][T14894] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/11/2022 [ 710.219437][T14894] Call Trace: [ 710.222739][T14894] [ 710.225511][T14894] dump_stack_lvl+0x151/0x1b7 [ 710.230028][T14894] ? bfq_pos_tree_add_move+0x43e/0x43e 18:39:21 executing program 3: r0 = socket(0xa, 0x1, 0x0) setsockopt$MRT_DEL_VIF(r0, 0x0, 0xcb, 0x0, 0x0) [ 710.235319][T14894] ? avc_has_perm_noaudit+0x2ec/0x450 [ 710.236390][T14906] FAULT_INJECTION: forcing a failure. [ 710.236390][T14906] name failslab, interval 1, probability 0, space 0, times 0 [ 710.240526][T14894] dump_stack+0x15/0x17 [ 710.240551][T14894] should_fail+0x3c0/0x510 [ 710.261704][T14894] should_fail_usercopy+0x1a/0x20 [ 710.266565][T14894] _copy_to_user+0x20/0x90 [ 710.270816][T14894] simple_read_from_buffer+0xdd/0x160 [ 710.276027][T14894] proc_fail_nth_read+0x1af/0x220 [ 710.280980][T14894] ? proc_fault_inject_write+0x3a0/0x3a0 [ 710.286535][T14894] ? security_file_permission+0x497/0x5f0 [ 710.292078][T14894] ? proc_fault_inject_write+0x3a0/0x3a0 [ 710.297648][T14894] vfs_read+0x299/0xd80 [ 710.301633][T14894] ? kernel_read+0x1f0/0x1f0 [ 710.306054][T14894] ? __kasan_check_write+0x14/0x20 [ 710.311008][T14894] ? mutex_lock+0xb6/0x130 [ 710.315270][T14894] ? wait_for_completion_killable_timeout+0x10/0x10 [ 710.321942][T14894] ? __fdget_pos+0x26d/0x310 [ 710.326456][T14894] ? ksys_read+0x77/0x2c0 [ 710.330620][T14894] ksys_read+0x198/0x2c0 18:39:21 executing program 3: r0 = socket(0xa, 0x1, 0x0) setsockopt$MRT_DEL_VIF(r0, 0x6, 0xcb, 0x0, 0x0) [ 710.334872][T14894] ? __ia32_sys_recv+0xb0/0xb0 [ 710.339556][T14894] ? vfs_write+0x1050/0x1050 [ 710.343993][T14894] ? debug_smp_processor_id+0x17/0x20 [ 710.349194][T14894] __x64_sys_read+0x7b/0x90 [ 710.353536][T14894] do_syscall_64+0x44/0xd0 [ 710.357872][T14894] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 710.363600][T14894] RIP: 0033:0x7f98de2aa2ec [ 710.367859][T14894] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 18:39:21 executing program 5: r0 = socket(0xa, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x6, 0x2, 0x0, 0x0) 18:39:21 executing program 1: r0 = socket(0xa, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x29, 0x3, 0x0, 0x0) [ 710.368667][T14913] FAULT_INJECTION: forcing a failure. [ 710.368667][T14913] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 710.387295][T14894] RSP: 002b:00007f98dd06c160 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 710.387321][T14894] RAX: ffffffffffffffda RBX: 00007f98de418f80 RCX: 00007f98de2aa2ec [ 710.387333][T14894] RDX: 000000000000000f RSI: 00007f98dd06c1e0 RDI: 0000000000000004 [ 710.387343][T14894] RBP: 00007f98dd06c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 710.387352][T14894] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 710.387361][T14894] R13: 00007fff98ab888f R14: 00007f98dd06c300 R15: 0000000000022000 [ 710.387375][T14894] [ 710.397144][T14906] CPU: 0 PID: 14906 Comm: syz-executor.2 Not tainted 5.15.74-syzkaller-04383-g7f2e600bf63a #0 [ 710.460601][T14906] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/11/2022 [ 710.470478][T14906] Call Trace: [ 710.473601][T14906] [ 710.476382][T14906] dump_stack_lvl+0x151/0x1b7 [ 710.480899][T14906] ? bfq_pos_tree_add_move+0x43e/0x43e [ 710.486187][T14906] dump_stack+0x15/0x17 [ 710.490180][T14906] should_fail+0x3c0/0x510 [ 710.494520][T14906] ? security_prepare_creds+0x50/0x160 [ 710.499815][T14906] __should_failslab+0x9f/0xe0 [ 710.504411][T14906] should_failslab+0x9/0x20 [ 710.508752][T14906] __kmalloc+0x6d/0x350 [ 710.512745][T14906] security_prepare_creds+0x50/0x160 [ 710.517868][T14906] prepare_creds+0x471/0x690 [ 710.522292][T14906] copy_creds+0xde/0x640 [ 710.526371][T14906] copy_process+0x775/0x3250 [ 710.530797][T14906] ? __kasan_check_write+0x14/0x20 [ 710.535744][T14906] ? proc_fail_nth_write+0x213/0x290 [ 710.540867][T14906] ? proc_fail_nth_read+0x220/0x220 [ 710.545900][T14906] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 710.550850][T14906] ? vfs_write+0x9af/0x1050 [ 710.555280][T14906] ? vmacache_update+0xb7/0x120 [ 710.559970][T14906] kernel_clone+0x22d/0x990 [ 710.564304][T14906] ? file_end_write+0x1b0/0x1b0 [ 710.568990][T14906] ? __kasan_check_write+0x14/0x20 [ 710.573933][T14906] ? create_io_thread+0x1e0/0x1e0 [ 710.578796][T14906] ? __mutex_lock_slowpath+0x10/0x10 [ 710.583916][T14906] __x64_sys_clone+0x289/0x310 [ 710.588518][T14906] ? __do_sys_vfork+0x130/0x130 [ 710.593204][T14906] ? debug_smp_processor_id+0x17/0x20 [ 710.598412][T14906] do_syscall_64+0x44/0xd0 [ 710.602666][T14906] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 710.608398][T14906] RIP: 0033:0x7fb67320a5a9 [ 710.612653][T14906] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 710.632183][T14906] RSP: 002b:00007fb671f7e118 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 18:39:22 executing program 3: r0 = socket(0xa, 0x1, 0x0) setsockopt$MRT_DEL_VIF(r0, 0x11, 0xcb, 0x0, 0x0) [ 710.640419][T14906] RAX: ffffffffffffffda RBX: 00007fb67332af80 RCX: 00007fb67320a5a9 [ 710.648233][T14906] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000010000000 [ 710.656043][T14906] RBP: 00007fb671f7e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 710.663856][T14906] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 710.671933][T14906] R13: 00007ffe782f632f R14: 00007fb671f7e300 R15: 0000000000022000 [ 710.679744][T14906] 18:39:22 executing program 4: r0 = syz_open_dev$vcsn(&(0x7f0000000800), 0x0, 0x0) getsockopt$MRT(r0, 0x0, 0x0, 0x0, 0x0) r1 = socket(0xa, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r1, 0x28, 0x2, 0x0, 0x0) 18:39:22 executing program 3: r0 = socket(0xa, 0x1, 0x0) setsockopt$MRT_DEL_VIF(r0, 0x29, 0xcb, 0x0, 0x0) [ 710.686062][T14913] CPU: 0 PID: 14913 Comm: syz-executor.0 Not tainted 5.15.74-syzkaller-04383-g7f2e600bf63a #0 [ 710.696126][T14913] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/11/2022 [ 710.706131][T14913] Call Trace: [ 710.709251][T14913] [ 710.712029][T14913] dump_stack_lvl+0x151/0x1b7 [ 710.716544][T14913] ? bfq_pos_tree_add_move+0x43e/0x43e [ 710.721834][T14913] ? vsnprintf+0x1fa/0x1ce0 [ 710.726174][T14913] dump_stack+0x15/0x17 [ 710.730164][T14913] should_fail+0x3c0/0x510 [ 710.734418][T14913] should_fail_usercopy+0x1a/0x20 [ 710.739279][T14913] _copy_from_user+0x20/0xd0 [ 710.743703][T14913] kstrtouint_from_user+0xd7/0x2b0 [ 710.748654][T14913] ? kstrtol_from_user+0x310/0x310 [ 710.753717][T14913] ? snprintf+0xd6/0x120 [ 710.757795][T14913] ? __kasan_check_read+0x11/0x20 [ 710.762655][T14913] ? _copy_to_user+0x78/0x90 [ 710.767083][T14913] proc_fail_nth_write+0xa5/0x290 [ 710.771943][T14913] ? proc_fail_nth_read+0x220/0x220 [ 710.776982][T14913] ? security_file_permission+0xf3/0x5f0 [ 710.782448][T14913] ? proc_fail_nth_read+0x220/0x220 [ 710.787480][T14913] vfs_write+0x3fd/0x1050 [ 710.791647][T14913] ? __kasan_check_read+0x11/0x20 [ 710.796509][T14913] ? file_end_write+0x1b0/0x1b0 [ 710.801195][T14913] ? __kasan_check_write+0x14/0x20 [ 710.806659][T14913] ? mutex_lock+0xb6/0x130 [ 710.810914][T14913] ? wait_for_completion_killable_timeout+0x10/0x10 [ 710.817340][T14913] ? __fdget_pos+0x26d/0x310 [ 710.821765][T14913] ? ksys_write+0x77/0x2c0 [ 710.826024][T14913] ksys_write+0x198/0x2c0 [ 710.830190][T14913] ? __ia32_sys_read+0x90/0x90 [ 710.834788][T14913] ? __se_sys_ioctl+0x1f/0x190 [ 710.839384][T14913] ? debug_smp_processor_id+0x17/0x20 [ 710.844592][T14913] __x64_sys_write+0x7b/0x90 [ 710.849113][T14913] do_syscall_64+0x44/0xd0 [ 710.853455][T14913] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 710.859183][T14913] RIP: 0033:0x7fe27375624f [ 710.863431][T14913] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 fd ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 cc fd ff ff 48 [ 710.883069][T14913] RSP: 002b:00007fe2724f7160 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 18:39:22 executing program 0: r0 = socket(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00'}) 18:39:22 executing program 2: syz_clone(0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 18) 18:39:22 executing program 4: r0 = syz_open_dev$vcsn(&(0x7f0000000800), 0x0, 0x0) getsockopt$MRT(r0, 0x0, 0x0, 0x0, 0x0) r1 = socket(0xa, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r1, 0x28, 0x2, 0x0, 0x0) 18:39:22 executing program 3: r0 = socket(0xa, 0x1, 0x0) setsockopt$MRT_DEL_VIF(r0, 0x88, 0xcb, 0x0, 0x0) 18:39:22 executing program 1: r0 = socket(0xa, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x29, 0x4, 0x0, 0x0) 18:39:22 executing program 5: r0 = socket(0xa, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x6, 0xd, 0x0, 0x0) [ 710.891309][T14913] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fe27375624f [ 710.899133][T14913] RDX: 0000000000000001 RSI: 00007fe2724f71e0 RDI: 0000000000000003 [ 710.906941][T14913] RBP: 00007fe2724f71d0 R08: 0000000000000000 R09: 0000000000000000 [ 710.914746][T14913] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 710.922645][T14913] R13: 00007ffd16befe8f R14: 00007fe2724f7300 R15: 0000000000022000 [ 710.930462][T14913] 18:39:22 executing program 4: r0 = syz_open_dev$vcsn(&(0x7f0000000800), 0x0, 0x0) getsockopt$MRT(r0, 0x0, 0x0, 0x0, 0x0) (async) r1 = socket(0xa, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r1, 0x28, 0x2, 0x0, 0x0) 18:39:22 executing program 3: r0 = socket(0xa, 0x1, 0x0) setsockopt$MRT_DEL_VIF(r0, 0xcb, 0xcb, 0x0, 0x0) 18:39:22 executing program 1: r0 = socket(0xa, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x29, 0x5, 0x0, 0x0) [ 710.965696][T14933] FAULT_INJECTION: forcing a failure. [ 710.965696][T14933] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 710.979544][T14933] CPU: 0 PID: 14933 Comm: syz-executor.2 Not tainted 5.15.74-syzkaller-04383-g7f2e600bf63a #0 [ 710.989719][T14933] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/11/2022 [ 710.999612][T14933] Call Trace: [ 711.002736][T14933] [ 711.005514][T14933] dump_stack_lvl+0x151/0x1b7 [ 711.010030][T14933] ? bfq_pos_tree_add_move+0x43e/0x43e 18:39:22 executing program 1: r0 = socket(0xa, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x29, 0x6, 0x0, 0x0) 18:39:22 executing program 5: r0 = socket(0xa, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x6, 0x21, 0x0, 0x0) 18:39:22 executing program 1: r0 = socket(0xa, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x29, 0x8, 0x0, 0x0) [ 711.015333][T14933] ? pcpu_block_update_hint_alloc+0x972/0xd00 [ 711.021228][T14933] dump_stack+0x15/0x17 [ 711.025220][T14933] should_fail+0x3c0/0x510 [ 711.029475][T14933] should_fail_alloc_page+0x58/0x70 [ 711.034505][T14933] __alloc_pages+0x1de/0x7c0 [ 711.038940][T14933] ? __count_vm_events+0x30/0x30 [ 711.043708][T14933] __get_free_pages+0xe/0x30 [ 711.048131][T14933] pgd_alloc+0x22/0x2c0 [ 711.052129][T14933] mm_init+0x5bf/0x960 [ 711.056032][T14933] dup_mm+0x7d/0x330 [ 711.059764][T14933] copy_mm+0x108/0x1b0 [ 711.063666][T14933] copy_process+0x1295/0x3250 [ 711.068182][T14933] ? proc_fail_nth_write+0x213/0x290 [ 711.073390][T14933] ? proc_fail_nth_read+0x220/0x220 [ 711.078436][T14933] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 711.083370][T14933] ? vfs_write+0x9af/0x1050 [ 711.087707][T14933] ? vmacache_update+0xb7/0x120 [ 711.092393][T14933] kernel_clone+0x22d/0x990 [ 711.096819][T14933] ? file_end_write+0x1b0/0x1b0 [ 711.101504][T14933] ? __kasan_check_write+0x14/0x20 [ 711.106452][T14933] ? create_io_thread+0x1e0/0x1e0 [ 711.111312][T14933] ? __mutex_lock_slowpath+0x10/0x10 [ 711.116551][T14933] __x64_sys_clone+0x289/0x310 [ 711.121143][T14933] ? __do_sys_vfork+0x130/0x130 [ 711.125943][T14933] ? debug_smp_processor_id+0x17/0x20 [ 711.131289][T14933] do_syscall_64+0x44/0xd0 [ 711.135563][T14933] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 711.141289][T14933] RIP: 0033:0x7fb67320a5a9 [ 711.145509][T14933] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 18:39:22 executing program 5: r0 = socket(0xa, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x6, 0x2, 0x0, 0x4) 18:39:22 executing program 2: syz_clone(0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 19) 18:39:22 executing program 0: r0 = socket(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x2, &(0x7f0000000000)={'batadv_slave_1\x00'}) 18:39:22 executing program 3: r0 = socket(0xa, 0x1, 0x0) setsockopt$MRT_DEL_VIF(r0, 0x600, 0xcb, 0x0, 0x0) 18:39:22 executing program 4: r0 = socket(0xb, 0x2, 0x0) getsockopt$packet_buf(r0, 0x107, 0x6, &(0x7f0000000000)=""/19, &(0x7f0000000040)=0x13) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x28, 0x2, 0x0, 0x0) 18:39:22 executing program 1: r0 = socket(0xa, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x29, 0xb, 0x0, 0x0) 18:39:22 executing program 5: r0 = socket(0xa, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x6, 0x2, 0x0, 0x4000000) 18:39:22 executing program 0: r0 = socket(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x4b47, &(0x7f0000000000)={'batadv_slave_1\x00'}) [ 711.164953][T14933] RSP: 002b:00007fb671f7e118 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 711.173276][T14933] RAX: ffffffffffffffda RBX: 00007fb67332af80 RCX: 00007fb67320a5a9 [ 711.181085][T14933] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000010000000 [ 711.188899][T14933] RBP: 00007fb671f7e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 711.196710][T14933] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 711.204522][T14933] R13: 00007ffe782f632f R14: 00007fb671f7e300 R15: 0000000000022000 [ 711.212336][T14933] 18:39:22 executing program 1: r0 = socket(0xa, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x29, 0x10, 0x0, 0x0) 18:39:22 executing program 5: r0 = socket(0xa, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x6, 0x2, 0x0, 0x400000000000000) 18:39:22 executing program 0: r0 = socket(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x4b49, &(0x7f0000000000)={'batadv_slave_1\x00'}) 18:39:22 executing program 4: r0 = socket(0xb, 0x2, 0x0) getsockopt$packet_buf(r0, 0x107, 0x6, &(0x7f0000000000)=""/19, &(0x7f0000000040)=0x13) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x28, 0x2, 0x0, 0x0) 18:39:22 executing program 3: r0 = socket(0xa, 0x1, 0x0) setsockopt$MRT_DEL_VIF(r0, 0x1100, 0xcb, 0x0, 0x0) [ 711.255975][T14967] FAULT_INJECTION: forcing a failure. [ 711.255975][T14967] name failslab, interval 1, probability 0, space 0, times 0 [ 711.272485][T14967] CPU: 1 PID: 14967 Comm: syz-executor.2 Not tainted 5.15.74-syzkaller-04383-g7f2e600bf63a #0 [ 711.282565][T14967] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/11/2022 [ 711.292456][T14967] Call Trace: [ 711.295579][T14967] [ 711.298361][T14967] dump_stack_lvl+0x151/0x1b7 [ 711.302873][T14967] ? bfq_pos_tree_add_move+0x43e/0x43e [ 711.308164][T14967] dump_stack+0x15/0x17 [ 711.312157][T14967] should_fail+0x3c0/0x510 [ 711.316405][T14967] __should_failslab+0x9f/0xe0 [ 711.321017][T14967] should_failslab+0x9/0x20 [ 711.325345][T14967] kmem_cache_alloc+0x4f/0x2f0 [ 711.329944][T14967] ? vm_area_dup+0x26/0x1d0 [ 711.334401][T14967] vm_area_dup+0x26/0x1d0 [ 711.338576][T14967] dup_mmap+0x6b8/0xea0 [ 711.342645][T14967] ? __delayed_free_task+0x20/0x20 [ 711.347594][T14967] ? mm_init+0x807/0x960 [ 711.351672][T14967] dup_mm+0x91/0x330 [ 711.355400][T14967] copy_mm+0x108/0x1b0 [ 711.359309][T14967] copy_process+0x1295/0x3250 [ 711.363826][T14967] ? proc_fail_nth_write+0x213/0x290 [ 711.368940][T14967] ? proc_fail_nth_read+0x220/0x220 [ 711.373977][T14967] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 711.378926][T14967] ? vfs_write+0x9af/0x1050 [ 711.383261][T14967] ? vmacache_update+0xb7/0x120 [ 711.387964][T14967] kernel_clone+0x22d/0x990 [ 711.392293][T14967] ? file_end_write+0x1b0/0x1b0 [ 711.396975][T14967] ? __kasan_check_write+0x14/0x20 [ 711.401924][T14967] ? create_io_thread+0x1e0/0x1e0 [ 711.406785][T14967] ? __mutex_lock_slowpath+0x10/0x10 [ 711.411910][T14967] __x64_sys_clone+0x289/0x310 [ 711.416505][T14967] ? __do_sys_vfork+0x130/0x130 [ 711.421195][T14967] ? debug_smp_processor_id+0x17/0x20 [ 711.426400][T14967] do_syscall_64+0x44/0xd0 [ 711.430652][T14967] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 711.436627][T14967] RIP: 0033:0x7fb67320a5a9 [ 711.440869][T14967] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 711.460312][T14967] RSP: 002b:00007fb671f7e118 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 711.468649][T14967] RAX: ffffffffffffffda RBX: 00007fb67332af80 RCX: 00007fb67320a5a9 [ 711.476588][T14967] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000010000000 [ 711.484353][T14967] RBP: 00007fb671f7e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 711.492161][T14967] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 18:39:22 executing program 2: syz_clone(0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 20) 18:39:22 executing program 1: r0 = socket(0xa, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x29, 0x11, 0x0, 0x0) 18:39:22 executing program 5: r0 = socket(0xa, 0x1, 0x0) r1 = signalfd(0xffffffffffffffff, 0x0, 0x0) close(r1) sendmsg$FOU_CMD_DEL(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x100, 0x70bd26, 0x25dfdbfe, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x851}, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x6, 0x2, 0x0, 0x0) 18:39:22 executing program 0: r0 = socket(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x5411, &(0x7f0000000000)={'batadv_slave_1\x00'}) 18:39:22 executing program 3: r0 = socket(0xa, 0x1, 0x0) setsockopt$MRT_DEL_VIF(r0, 0x2900, 0xcb, 0x0, 0x0) 18:39:22 executing program 4: r0 = socket(0xb, 0x2, 0x0) getsockopt$packet_buf(r0, 0x107, 0x6, &(0x7f0000000000)=""/19, &(0x7f0000000040)=0x13) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x28, 0x2, 0x0, 0x0) socket(0xb, 0x2, 0x0) (async) getsockopt$packet_buf(r0, 0x107, 0x6, &(0x7f0000000000)=""/19, &(0x7f0000000040)=0x13) (async) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x28, 0x2, 0x0, 0x0) (async) 18:39:22 executing program 1: r0 = socket(0xa, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x29, 0x12, 0x0, 0x0) 18:39:22 executing program 5: r0 = socket(0xa, 0x1, 0x0) (async) r1 = signalfd(0xffffffffffffffff, 0x0, 0x0) close(r1) (async) sendmsg$FOU_CMD_DEL(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x100, 0x70bd26, 0x25dfdbfe, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x851}, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x6, 0x2, 0x0, 0x0) 18:39:22 executing program 1: r0 = socket(0xa, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x29, 0x13, 0x0, 0x0) [ 711.499980][T14967] R13: 00007ffe782f632f R14: 00007fb671f7e300 R15: 0000000000022000 [ 711.507887][T14967] 18:39:22 executing program 0: r0 = socket(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x541b, &(0x7f0000000000)={'batadv_slave_1\x00'}) 18:39:22 executing program 3: r0 = socket(0xa, 0x1, 0x0) setsockopt$MRT_DEL_VIF(r0, 0x8800, 0xcb, 0x0, 0x0) 18:39:22 executing program 4: r0 = socket(0xa, 0x1, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000004, 0x10, r1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00'}) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x28, 0x2, 0x0, 0x0) socket(0x1e, 0xd64358fb3bc92a19, 0xee) [ 711.544758][T14988] FAULT_INJECTION: forcing a failure. [ 711.544758][T14988] name failslab, interval 1, probability 0, space 0, times 0 [ 711.571294][T14988] CPU: 1 PID: 14988 Comm: syz-executor.2 Not tainted 5.15.74-syzkaller-04383-g7f2e600bf63a #0 [ 711.581488][T14988] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/11/2022 [ 711.591468][T14988] Call Trace: [ 711.594588][T14988] [ 711.597369][T14988] dump_stack_lvl+0x151/0x1b7 [ 711.601879][T14988] ? bfq_pos_tree_add_move+0x43e/0x43e [ 711.607270][T14988] dump_stack+0x15/0x17 [ 711.611265][T14988] should_fail+0x3c0/0x510 [ 711.615515][T14988] ? __register_sysctl_table+0xee/0x1330 [ 711.620984][T14988] __should_failslab+0x9f/0xe0 [ 711.625574][T14988] should_failslab+0x9/0x20 [ 711.629917][T14988] __kmalloc+0x6d/0x350 [ 711.633911][T14988] __register_sysctl_table+0xee/0x1330 [ 711.639200][T14988] ? __kmalloc_track_caller+0x202/0x350 [ 711.644580][T14988] ? kmemdup+0x3f/0x50 [ 711.648487][T14988] ? memcpy+0x56/0x70 [ 711.652307][T14988] setup_userns_sysctls+0x2b1/0x340 [ 711.657341][T14988] create_user_ns+0x1227/0x19b0 [ 711.662032][T14988] ? utsns_owner+0x40/0x40 [ 711.666284][T14988] ? security_prepare_creds+0x149/0x160 [ 711.671664][T14988] ? prepare_creds+0x485/0x690 [ 711.676265][T14988] copy_creds+0x200/0x640 [ 711.680434][T14988] copy_process+0x775/0x3250 [ 711.684856][T14988] ? __kasan_check_write+0x14/0x20 [ 711.689802][T14988] ? proc_fail_nth_write+0x213/0x290 [ 711.694924][T14988] ? proc_fail_nth_read+0x220/0x220 [ 711.699964][T14988] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 711.704907][T14988] ? vfs_write+0x9af/0x1050 [ 711.709246][T14988] ? vmacache_update+0xb7/0x120 [ 711.713933][T14988] kernel_clone+0x22d/0x990 [ 711.718270][T14988] ? file_end_write+0x1b0/0x1b0 [ 711.722959][T14988] ? __kasan_check_write+0x14/0x20 [ 711.727916][T14988] ? create_io_thread+0x1e0/0x1e0 [ 711.732766][T14988] ? __mutex_lock_slowpath+0x10/0x10 [ 711.737888][T14988] __x64_sys_clone+0x289/0x310 [ 711.742499][T14988] ? __do_sys_vfork+0x130/0x130 [ 711.747179][T14988] ? debug_smp_processor_id+0x17/0x20 [ 711.752402][T14988] do_syscall_64+0x44/0xd0 [ 711.756638][T14988] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 711.762374][T14988] RIP: 0033:0x7fb67320a5a9 [ 711.766633][T14988] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 711.786060][T14988] RSP: 002b:00007fb671f7e118 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 18:39:23 executing program 2: syz_clone(0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 21) 18:39:23 executing program 0: r0 = socket(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x5421, &(0x7f0000000000)={'batadv_slave_1\x00'}) 18:39:23 executing program 1: r0 = socket(0xa, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x29, 0x14, 0x0, 0x0) 18:39:23 executing program 3: r0 = socket(0xa, 0x1, 0x0) setsockopt$MRT_DEL_VIF(r0, 0xcb00, 0xcb, 0x0, 0x0) 18:39:23 executing program 4: r0 = socket(0xa, 0x1, 0x0) (async) r1 = socket$inet_udp(0x2, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000004, 0x10, r1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00'}) (async) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x28, 0x2, 0x0, 0x0) (async) socket(0x1e, 0xd64358fb3bc92a19, 0xee) 18:39:23 executing program 5: r0 = socket(0xa, 0x1, 0x0) r1 = signalfd(0xffffffffffffffff, 0x0, 0x0) close(r1) sendmsg$FOU_CMD_DEL(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x100, 0x70bd26, 0x25dfdbfe, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x851}, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x6, 0x2, 0x0, 0x0) socket(0xa, 0x1, 0x0) (async) signalfd(0xffffffffffffffff, 0x0, 0x0) (async) close(r1) (async) sendmsg$FOU_CMD_DEL(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x100, 0x70bd26, 0x25dfdbfe, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x851}, 0x0) (async) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x6, 0x2, 0x0, 0x0) (async) 18:39:23 executing program 3: r0 = socket(0xa, 0x1, 0x0) setsockopt$MRT_DEL_VIF(r0, 0x1000000, 0xcb, 0x0, 0x0) 18:39:23 executing program 4: r0 = socket(0xa, 0x1, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000004, 0x10, r1, 0x0) (async, rerun: 32) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00'}) (async, rerun: 32) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x28, 0x2, 0x0, 0x0) (async) socket(0x1e, 0xd64358fb3bc92a19, 0xee) [ 711.794310][T14988] RAX: ffffffffffffffda RBX: 00007fb67332af80 RCX: 00007fb67320a5a9 [ 711.802115][T14988] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000010000000 [ 711.809940][T14988] RBP: 00007fb671f7e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 711.817834][T14988] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 711.825643][T14988] R13: 00007ffe782f632f R14: 00007fb671f7e300 R15: 0000000000022000 [ 711.833457][T14988] 18:39:23 executing program 5: setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(0xffffffffffffffff, 0x6, 0x2, 0x0, 0x0) finit_module(0xffffffffffffffff, &(0x7f0000000000)='}@\x00', 0x0) 18:39:23 executing program 0: r0 = socket(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x5450, &(0x7f0000000000)={'batadv_slave_1\x00'}) 18:39:23 executing program 1: r0 = socket(0xa, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x29, 0x15, 0x0, 0x0) [ 711.876976][T15024] FAULT_INJECTION: forcing a failure. [ 711.876976][T15024] name failslab, interval 1, probability 0, space 0, times 0 [ 711.896938][T15024] CPU: 0 PID: 15024 Comm: syz-executor.2 Not tainted 5.15.74-syzkaller-04383-g7f2e600bf63a #0 [ 711.907100][T15024] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/11/2022 [ 711.916992][T15024] Call Trace: [ 711.920118][T15024] 18:39:23 executing program 3: r0 = socket(0xa, 0x1, 0x0) setsockopt$MRT_DEL_VIF(r0, 0x6000000, 0xcb, 0x0, 0x0) [ 711.922897][T15024] dump_stack_lvl+0x151/0x1b7 [ 711.927409][T15024] ? bfq_pos_tree_add_move+0x43e/0x43e [ 711.932714][T15024] dump_stack+0x15/0x17 [ 711.936693][T15024] should_fail+0x3c0/0x510 [ 711.940948][T15024] __should_failslab+0x9f/0xe0 [ 711.945549][T15024] should_failslab+0x9/0x20 [ 711.949880][T15024] kmem_cache_alloc+0x4f/0x2f0 [ 711.954520][T15024] ? vm_area_dup+0x26/0x1d0 [ 711.958826][T15024] vm_area_dup+0x26/0x1d0 [ 711.962993][T15024] dup_mmap+0x6b8/0xea0 [ 711.966984][T15024] ? __delayed_free_task+0x20/0x20 [ 711.971927][T15024] ? mm_init+0x807/0x960 [ 711.976007][T15024] dup_mm+0x91/0x330 [ 711.979739][T15024] copy_mm+0x108/0x1b0 [ 711.983653][T15024] copy_process+0x1295/0x3250 [ 711.988160][T15024] ? proc_fail_nth_write+0x213/0x290 [ 711.993287][T15024] ? proc_fail_nth_read+0x220/0x220 [ 711.998399][T15024] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 712.003350][T15024] ? vfs_write+0x9af/0x1050 [ 712.007694][T15024] ? vmacache_update+0xb7/0x120 [ 712.012381][T15024] kernel_clone+0x22d/0x990 [ 712.016715][T15024] ? file_end_write+0x1b0/0x1b0 [ 712.021408][T15024] ? __kasan_check_write+0x14/0x20 [ 712.026348][T15024] ? create_io_thread+0x1e0/0x1e0 [ 712.031210][T15024] ? __mutex_lock_slowpath+0x10/0x10 [ 712.036335][T15024] __x64_sys_clone+0x289/0x310 [ 712.040931][T15024] ? __do_sys_vfork+0x130/0x130 [ 712.045617][T15024] ? debug_smp_processor_id+0x17/0x20 [ 712.050825][T15024] do_syscall_64+0x44/0xd0 [ 712.055078][T15024] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 712.060820][T15024] RIP: 0033:0x7fb67320a5a9 [ 712.065132][T15024] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 712.084624][T15024] RSP: 002b:00007fb671f7e118 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 712.092949][T15024] RAX: ffffffffffffffda RBX: 00007fb67332af80 RCX: 00007fb67320a5a9 [ 712.100761][T15024] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000010000000 [ 712.108572][T15024] RBP: 00007fb671f7e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 712.116388][T15024] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 18:39:23 executing program 2: syz_clone(0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 22) 18:39:23 executing program 4: r0 = socket(0xa, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x28, 0x2, 0x0, 0x0) getsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, &(0x7f0000000000), 0x2) 18:39:23 executing program 5: setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(0xffffffffffffffff, 0x6, 0x2, 0x0, 0x0) finit_module(0xffffffffffffffff, &(0x7f0000000000)='}@\x00', 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(0xffffffffffffffff, 0x6, 0x2, 0x0, 0x0) (async) finit_module(0xffffffffffffffff, &(0x7f0000000000)='}@\x00', 0x0) (async) 18:39:23 executing program 1: r0 = socket(0xa, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x29, 0x16, 0x0, 0x0) 18:39:23 executing program 3: r0 = socket(0xa, 0x1, 0x0) setsockopt$MRT_DEL_VIF(r0, 0x11000000, 0xcb, 0x0, 0x0) 18:39:23 executing program 0: r0 = socket(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x5451, &(0x7f0000000000)={'batadv_slave_1\x00'}) 18:39:23 executing program 0: r0 = socket(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x5452, &(0x7f0000000000)={'batadv_slave_1\x00'}) 18:39:23 executing program 4: r0 = socket(0xa, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x28, 0x2, 0x0, 0x0) getsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, &(0x7f0000000000), 0x2) socket(0xa, 0x1, 0x0) (async) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x28, 0x2, 0x0, 0x0) (async) getsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, &(0x7f0000000000), 0x2) (async) 18:39:23 executing program 5: setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(0xffffffffffffffff, 0x6, 0x2, 0x0, 0x0) finit_module(0xffffffffffffffff, &(0x7f0000000000)='}@\x00', 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(0xffffffffffffffff, 0x6, 0x2, 0x0, 0x0) (async) finit_module(0xffffffffffffffff, &(0x7f0000000000)='}@\x00', 0x0) (async) 18:39:23 executing program 3: r0 = socket(0xa, 0x1, 0x0) setsockopt$MRT_DEL_VIF(r0, 0x29000000, 0xcb, 0x0, 0x0) 18:39:23 executing program 1: r0 = socket(0xa, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x29, 0x17, 0x0, 0x0) [ 712.124202][T15024] R13: 00007ffe782f632f R14: 00007fb671f7e300 R15: 0000000000022000 [ 712.132102][T15024] [ 712.159678][T15054] FAULT_INJECTION: forcing a failure. [ 712.159678][T15054] name failslab, interval 1, probability 0, space 0, times 0 18:39:23 executing program 1: r0 = socket(0xa, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x29, 0x18, 0x0, 0x0) [ 712.172783][T15054] CPU: 0 PID: 15054 Comm: syz-executor.2 Not tainted 5.15.74-syzkaller-04383-g7f2e600bf63a #0 [ 712.182938][T15054] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/11/2022 [ 712.192912][T15054] Call Trace: [ 712.196035][T15054] [ 712.198823][T15054] dump_stack_lvl+0x151/0x1b7 [ 712.203334][T15054] ? bfq_pos_tree_add_move+0x43e/0x43e [ 712.208716][T15054] ? avc_has_perm_noaudit+0x358/0x450 [ 712.213930][T15054] dump_stack+0x15/0x17 [ 712.217908][T15054] should_fail+0x3c0/0x510 [ 712.222605][T15054] __should_failslab+0x9f/0xe0 [ 712.227198][T15054] should_failslab+0x9/0x20 [ 712.231539][T15054] kmem_cache_alloc+0x4f/0x2f0 [ 712.236133][T15054] ? dup_fd+0x71/0xa40 [ 712.240044][T15054] dup_fd+0x71/0xa40 [ 712.243773][T15054] ? avc_has_perm+0x16d/0x260 [ 712.248379][T15054] ? avc_has_perm_noaudit+0x450/0x450 [ 712.253675][T15054] copy_files+0xe6/0x200 [ 712.257748][T15054] ? perf_event_attrs+0x30/0x30 [ 712.262427][T15054] ? dup_task_struct+0xa60/0xa60 [ 712.267203][T15054] ? security_task_alloc+0x132/0x150 [ 712.272331][T15054] copy_process+0x11e9/0x3250 [ 712.276838][T15054] ? proc_fail_nth_write+0x213/0x290 [ 712.282010][T15054] ? proc_fail_nth_read+0x220/0x220 [ 712.286990][T15054] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 712.292025][T15054] ? vfs_write+0x9af/0x1050 [ 712.296386][T15054] ? vmacache_update+0xb7/0x120 [ 712.301055][T15054] kernel_clone+0x22d/0x990 [ 712.305390][T15054] ? file_end_write+0x1b0/0x1b0 [ 712.310078][T15054] ? __kasan_check_write+0x14/0x20 [ 712.315807][T15054] ? create_io_thread+0x1e0/0x1e0 [ 712.320677][T15054] ? __mutex_lock_slowpath+0x10/0x10 [ 712.325788][T15054] __x64_sys_clone+0x289/0x310 [ 712.330391][T15054] ? __do_sys_vfork+0x130/0x130 [ 712.335084][T15054] ? debug_smp_processor_id+0x17/0x20 [ 712.340292][T15054] do_syscall_64+0x44/0xd0 [ 712.344544][T15054] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 712.350269][T15054] RIP: 0033:0x7fb67320a5a9 [ 712.354655][T15054] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 18:39:23 executing program 2: syz_clone(0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 23) 18:39:23 executing program 1: r0 = socket(0xa, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x29, 0x19, 0x0, 0x0) 18:39:23 executing program 3: r0 = socket(0xa, 0x1, 0x0) setsockopt$MRT_DEL_VIF(r0, 0x88000000, 0xcb, 0x0, 0x0) 18:39:23 executing program 5: r0 = socket(0xa, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x6, 0x2, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)) 18:39:23 executing program 4: r0 = socket(0xa, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x28, 0x2, 0x0, 0x0) (async) getsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, &(0x7f0000000000), 0x2) 18:39:23 executing program 0: r0 = socket(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x5460, &(0x7f0000000000)={'batadv_slave_1\x00'}) [ 712.374110][T15054] RSP: 002b:00007fb671f7e118 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 712.382341][T15054] RAX: ffffffffffffffda RBX: 00007fb67332af80 RCX: 00007fb67320a5a9 [ 712.390251][T15054] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000010000000 [ 712.398227][T15054] RBP: 00007fb671f7e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 712.406387][T15054] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 712.414194][T15054] R13: 00007ffe782f632f R14: 00007fb671f7e300 R15: 0000000000022000 [ 712.422096][T15054] 18:39:23 executing program 4: r0 = socket(0x27, 0x2, 0x0) socket(0x2a, 0x80000, 0x6) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x28, 0x2, 0x0, 0x0) 18:39:23 executing program 0: r0 = socket(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8901, &(0x7f0000000000)={'batadv_slave_1\x00'}) 18:39:23 executing program 1: r0 = socket(0xa, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x29, 0x1a, 0x0, 0x0) 18:39:23 executing program 3: r0 = socket(0xa, 0x1, 0x0) setsockopt$MRT_DEL_VIF(r0, 0xcb000000, 0xcb, 0x0, 0x0) [ 712.436208][T15070] FAULT_INJECTION: forcing a failure. [ 712.436208][T15070] name failslab, interval 1, probability 0, space 0, times 0 [ 712.458412][T15070] CPU: 0 PID: 15070 Comm: syz-executor.2 Not tainted 5.15.74-syzkaller-04383-g7f2e600bf63a #0 [ 712.468490][T15070] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/11/2022 [ 712.478482][T15070] Call Trace: [ 712.481759][T15070] 18:39:23 executing program 4: r0 = socket(0x27, 0x2, 0x0) socket(0x2a, 0x80000, 0x6) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x28, 0x2, 0x0, 0x0) socket(0x27, 0x2, 0x0) (async) socket(0x2a, 0x80000, 0x6) (async) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x28, 0x2, 0x0, 0x0) (async) 18:39:23 executing program 0: r0 = socket(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8902, &(0x7f0000000000)={'batadv_slave_1\x00'}) [ 712.484472][T15070] dump_stack_lvl+0x151/0x1b7 [ 712.488973][T15070] ? bfq_pos_tree_add_move+0x43e/0x43e [ 712.494266][T15070] dump_stack+0x15/0x17 [ 712.498382][T15070] should_fail+0x3c0/0x510 [ 712.502634][T15070] ? alloc_fdtable+0xaf/0x2b0 [ 712.507146][T15070] __should_failslab+0x9f/0xe0 [ 712.511750][T15070] should_failslab+0x9/0x20 [ 712.516253][T15070] kmem_cache_alloc_trace+0x4a/0x310 [ 712.521466][T15070] ? __kasan_check_write+0x14/0x20 [ 712.526411][T15070] ? _raw_spin_lock+0xa3/0x1b0 [ 712.531015][T15070] alloc_fdtable+0xaf/0x2b0 [ 712.535362][T15070] dup_fd+0x781/0xa40 [ 712.539271][T15070] ? avc_has_perm+0x16d/0x260 [ 712.540125][ T30] audit: type=1400 audit(1666895963.860:198): avc: denied { create } for pid=15082 comm="syz-executor.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 712.543776][T15070] copy_files+0xe6/0x200 [ 712.567660][T15070] ? perf_event_attrs+0x30/0x30 [ 712.572348][T15070] ? dup_task_struct+0xa60/0xa60 [ 712.577245][T15070] ? security_task_alloc+0x132/0x150 [ 712.582540][T15070] copy_process+0x11e9/0x3250 [ 712.587132][T15070] ? proc_fail_nth_write+0x213/0x290 [ 712.592446][T15070] ? proc_fail_nth_read+0x220/0x220 [ 712.597483][T15070] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 712.602506][T15070] ? vfs_write+0x9af/0x1050 [ 712.606927][T15070] ? vmacache_update+0xb7/0x120 [ 712.611613][T15070] kernel_clone+0x22d/0x990 [ 712.616042][T15070] ? file_end_write+0x1b0/0x1b0 [ 712.621077][T15070] ? __kasan_check_write+0x14/0x20 [ 712.626014][T15070] ? create_io_thread+0x1e0/0x1e0 [ 712.630890][T15070] ? __mutex_lock_slowpath+0x10/0x10 [ 712.636009][T15070] __x64_sys_clone+0x289/0x310 [ 712.640697][T15070] ? __do_sys_vfork+0x130/0x130 [ 712.645381][T15070] ? debug_smp_processor_id+0x17/0x20 [ 712.650673][T15070] do_syscall_64+0x44/0xd0 [ 712.655193][T15070] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 712.661113][T15070] RIP: 0033:0x7fb67320a5a9 [ 712.665372][T15070] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 18:39:24 executing program 2: syz_clone(0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 24) 18:39:24 executing program 1: r0 = socket(0xa, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x29, 0x1b, 0x0, 0x0) 18:39:24 executing program 4: r0 = socket(0x27, 0x2, 0x0) socket(0x2a, 0x80000, 0x6) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x28, 0x2, 0x0, 0x0) 18:39:24 executing program 0: r0 = socket(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8903, &(0x7f0000000000)={'batadv_slave_1\x00'}) 18:39:24 executing program 5: r0 = socket(0xa, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x6, 0x2, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)) socket(0xa, 0x1, 0x0) (async) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x6, 0x2, 0x0, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)) (async) 18:39:24 executing program 3: r0 = socket(0xa, 0x1, 0x0) setsockopt$MRT_DEL_VIF(r0, 0x0, 0x2, 0x0, 0x0) [ 712.684979][T15070] RSP: 002b:00007fb671f7e118 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 712.693224][T15070] RAX: ffffffffffffffda RBX: 00007fb67332af80 RCX: 00007fb67320a5a9 [ 712.701037][T15070] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000010000000 [ 712.708860][T15070] RBP: 00007fb671f7e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 712.716661][T15070] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 712.724475][T15070] R13: 00007ffe782f632f R14: 00007fb671f7e300 R15: 0000000000022000 [ 712.732300][T15070] 18:39:24 executing program 0: r0 = socket(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8904, &(0x7f0000000000)={'batadv_slave_1\x00'}) 18:39:24 executing program 1: r0 = socket(0xa, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x29, 0x1c, 0x0, 0x0) 18:39:24 executing program 3: r0 = socket(0xa, 0x1, 0x0) setsockopt$MRT_DEL_VIF(r0, 0x0, 0x3, 0x0, 0x0) [ 712.760586][T15105] FAULT_INJECTION: forcing a failure. [ 712.760586][T15105] name failslab, interval 1, probability 0, space 0, times 0 [ 712.774597][T15105] CPU: 1 PID: 15105 Comm: syz-executor.2 Not tainted 5.15.74-syzkaller-04383-g7f2e600bf63a #0 [ 712.784840][T15105] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/11/2022 [ 712.794801][T15105] Call Trace: [ 712.797850][T15105] [ 712.800807][T15105] dump_stack_lvl+0x151/0x1b7 [ 712.805336][T15105] ? bfq_pos_tree_add_move+0x43e/0x43e [ 712.810623][T15105] ? do_syscall_64+0x44/0xd0 [ 712.815041][T15105] dump_stack+0x15/0x17 [ 712.819028][T15105] should_fail+0x3c0/0x510 [ 712.823293][T15105] __should_failslab+0x9f/0xe0 [ 712.828160][T15105] should_failslab+0x9/0x20 [ 712.832595][T15105] kmem_cache_alloc+0x4f/0x2f0 [ 712.837277][T15105] ? anon_vma_clone+0xa1/0x4f0 [ 712.841962][T15105] anon_vma_clone+0xa1/0x4f0 [ 712.846449][T15105] anon_vma_fork+0x91/0x4f0 [ 712.850732][T15105] ? anon_vma_name+0x4c/0x70 [ 712.855159][T15105] dup_mmap+0x750/0xea0 [ 712.859162][T15105] ? __delayed_free_task+0x20/0x20 [ 712.864095][T15105] ? mm_init+0x807/0x960 [ 712.868180][T15105] dup_mm+0x91/0x330 [ 712.871905][T15105] copy_mm+0x108/0x1b0 [ 712.875822][T15105] copy_process+0x1295/0x3250 [ 712.880340][T15105] ? proc_fail_nth_write+0x213/0x290 [ 712.885569][T15105] ? proc_fail_nth_read+0x220/0x220 [ 712.890591][T15105] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 712.895541][T15105] ? vfs_write+0x9af/0x1050 [ 712.899964][T15105] ? vmacache_update+0xb7/0x120 [ 712.904662][T15105] kernel_clone+0x22d/0x990 [ 712.908992][T15105] ? file_end_write+0x1b0/0x1b0 [ 712.913677][T15105] ? __kasan_check_write+0x14/0x20 [ 712.918628][T15105] ? create_io_thread+0x1e0/0x1e0 [ 712.923595][T15105] ? __mutex_lock_slowpath+0x10/0x10 [ 712.928715][T15105] __x64_sys_clone+0x289/0x310 [ 712.933315][T15105] ? __do_sys_vfork+0x130/0x130 [ 712.938156][T15105] ? debug_smp_processor_id+0x17/0x20 [ 712.943305][T15105] do_syscall_64+0x44/0xd0 [ 712.947551][T15105] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 712.953278][T15105] RIP: 0033:0x7fb67320a5a9 [ 712.957543][T15105] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 712.977505][T15105] RSP: 002b:00007fb671f7e118 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 712.985738][T15105] RAX: ffffffffffffffda RBX: 00007fb67332af80 RCX: 00007fb67320a5a9 [ 712.993550][T15105] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000010000000 [ 713.001390][T15105] RBP: 00007fb671f7e1d0 R08: 0000000000000000 R09: 0000000000000000 18:39:24 executing program 3: r0 = socket(0xa, 0x1, 0x0) setsockopt$MRT_DEL_VIF(r0, 0x0, 0x4, 0x0, 0x0) 18:39:24 executing program 1: r0 = socket(0xa, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x29, 0x1d, 0x0, 0x0) 18:39:24 executing program 5: r0 = socket(0xa, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x6, 0x2, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)) socket(0xa, 0x1, 0x0) (async) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x6, 0x2, 0x0, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)) (async) 18:39:24 executing program 2: syz_clone(0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 25) 18:39:24 executing program 4: r0 = socket(0xa, 0x3, 0x5) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x28, 0x2, 0x0, 0x0) 18:39:24 executing program 0: r0 = socket(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8905, &(0x7f0000000000)={'batadv_slave_1\x00'}) 18:39:24 executing program 4: r0 = socket(0xa, 0x3, 0x5) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x28, 0x2, 0x0, 0x0) 18:39:24 executing program 1: r0 = socket(0xa, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x29, 0x1e, 0x0, 0x0) 18:39:24 executing program 5: r0 = socket(0xa, 0x1, 0x0) r1 = accept4$vsock_stream(r0, &(0x7f0000000000)={0x28, 0x0, 0x2711, @local}, 0x10, 0x80400) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r1, 0x6, 0x2, 0x0, 0x0) write(r0, &(0x7f00000000c0)="0a7634861adf5913bba1e22414c54ed84289aa4bbe90d87476e681a47f724f8741b4efa2e935bb7b86fa33d77a5fd5a07e189cc424873190ba0bbd06e2929b935d99c2896ac37442e83ebafd69ff70373bcab4ba567d46", 0x57) r2 = accept4$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10, 0x80000) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r2, 0x28, 0x2, &(0x7f0000000080)=0x6, 0x8) 18:39:24 executing program 3: r0 = socket(0xa, 0x1, 0x0) setsockopt$MRT_DEL_VIF(r0, 0x0, 0x5, 0x0, 0x0) 18:39:24 executing program 0: r0 = socket(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8906, &(0x7f0000000000)={'batadv_slave_1\x00'}) [ 713.009358][T15105] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 713.017342][T15105] R13: 00007ffe782f632f R14: 00007fb671f7e300 R15: 0000000000022000 [ 713.025157][T15105] 18:39:24 executing program 0: r0 = socket(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8907, &(0x7f0000000000)={'batadv_slave_1\x00'}) 18:39:24 executing program 5: r0 = socket(0xa, 0x1, 0x0) r1 = accept4$vsock_stream(r0, &(0x7f0000000000)={0x28, 0x0, 0x2711, @local}, 0x10, 0x80400) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r1, 0x6, 0x2, 0x0, 0x0) (async) write(r0, &(0x7f00000000c0)="0a7634861adf5913bba1e22414c54ed84289aa4bbe90d87476e681a47f724f8741b4efa2e935bb7b86fa33d77a5fd5a07e189cc424873190ba0bbd06e2929b935d99c2896ac37442e83ebafd69ff70373bcab4ba567d46", 0x57) (async) r2 = accept4$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10, 0x80000) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r2, 0x28, 0x2, &(0x7f0000000080)=0x6, 0x8) 18:39:24 executing program 1: r0 = socket(0xa, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x29, 0x21, 0x0, 0x0) 18:39:24 executing program 4: r0 = socket(0xa, 0x3, 0x5) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x28, 0x2, 0x0, 0x0) socket(0xa, 0x3, 0x5) (async) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x28, 0x2, 0x0, 0x0) (async) [ 713.078395][T15141] FAULT_INJECTION: forcing a failure. [ 713.078395][T15141] name failslab, interval 1, probability 0, space 0, times 0 [ 713.107904][T15141] CPU: 1 PID: 15141 Comm: syz-executor.2 Not tainted 5.15.74-syzkaller-04383-g7f2e600bf63a #0 [ 713.118082][T15141] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/11/2022 [ 713.127964][T15141] Call Trace: [ 713.131090][T15141] [ 713.133867][T15141] dump_stack_lvl+0x151/0x1b7 [ 713.138376][T15141] ? bfq_pos_tree_add_move+0x43e/0x43e [ 713.143664][T15141] ? do_syscall_64+0x44/0xd0 [ 713.148178][T15141] dump_stack+0x15/0x17 [ 713.152180][T15141] should_fail+0x3c0/0x510 [ 713.156424][T15141] __should_failslab+0x9f/0xe0 [ 713.161024][T15141] should_failslab+0x9/0x20 [ 713.165363][T15141] kmem_cache_alloc+0x4f/0x2f0 [ 713.169974][T15141] ? anon_vma_clone+0xa1/0x4f0 [ 713.174564][T15141] anon_vma_clone+0xa1/0x4f0 [ 713.179001][T15141] anon_vma_fork+0x91/0x4f0 [ 713.183338][T15141] ? anon_vma_name+0x4c/0x70 [ 713.187847][T15141] dup_mmap+0x750/0xea0 [ 713.191840][T15141] ? __delayed_free_task+0x20/0x20 [ 713.196787][T15141] ? mm_init+0x807/0x960 [ 713.200862][T15141] dup_mm+0x91/0x330 [ 713.204751][T15141] copy_mm+0x108/0x1b0 [ 713.208655][T15141] copy_process+0x1295/0x3250 [ 713.213197][T15141] ? proc_fail_nth_write+0x213/0x290 [ 713.218383][T15141] ? proc_fail_nth_read+0x220/0x220 [ 713.223410][T15141] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 713.228355][T15141] ? vfs_write+0x9af/0x1050 [ 713.232695][T15141] ? vmacache_update+0xb7/0x120 [ 713.237390][T15141] kernel_clone+0x22d/0x990 [ 713.242041][T15141] ? file_end_write+0x1b0/0x1b0 [ 713.246756][T15141] ? __kasan_check_write+0x14/0x20 [ 713.251710][T15141] ? create_io_thread+0x1e0/0x1e0 [ 713.256563][T15141] ? __mutex_lock_slowpath+0x10/0x10 [ 713.261685][T15141] __x64_sys_clone+0x289/0x310 [ 713.266294][T15141] ? __do_sys_vfork+0x130/0x130 [ 713.270977][T15141] ? debug_smp_processor_id+0x17/0x20 [ 713.276265][T15141] do_syscall_64+0x44/0xd0 [ 713.280519][T15141] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 713.286332][T15141] RIP: 0033:0x7fb67320a5a9 [ 713.290586][T15141] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 713.310127][T15141] RSP: 002b:00007fb671f7e118 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 713.318374][T15141] RAX: ffffffffffffffda RBX: 00007fb67332af80 RCX: 00007fb67320a5a9 18:39:24 executing program 2: syz_clone(0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 26) 18:39:24 executing program 0: r0 = socket(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x890b, &(0x7f0000000000)={'batadv_slave_1\x00'}) 18:39:24 executing program 5: r0 = socket(0xa, 0x1, 0x0) r1 = accept4$vsock_stream(r0, &(0x7f0000000000)={0x28, 0x0, 0x2711, @local}, 0x10, 0x80400) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r1, 0x6, 0x2, 0x0, 0x0) (async) write(r0, &(0x7f00000000c0)="0a7634861adf5913bba1e22414c54ed84289aa4bbe90d87476e681a47f724f8741b4efa2e935bb7b86fa33d77a5fd5a07e189cc424873190ba0bbd06e2929b935d99c2896ac37442e83ebafd69ff70373bcab4ba567d46", 0x57) (async) r2 = accept4$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10, 0x80000) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r2, 0x28, 0x2, &(0x7f0000000080)=0x6, 0x8) 18:39:24 executing program 3: r0 = socket(0xa, 0x1, 0x0) setsockopt$MRT_DEL_VIF(r0, 0x0, 0x6, 0x0, 0x0) 18:39:24 executing program 1: r0 = socket(0xa, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x29, 0x22, 0x0, 0x0) 18:39:24 executing program 4: r0 = socket(0xa, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x28, 0x2, 0x0, 0x0) r1 = signalfd(0xffffffffffffffff, 0x0, 0x0) r2 = accept4$vsock_stream(r1, &(0x7f0000000000)={0x28, 0x0, 0xffffffff, @local}, 0x10, 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r3, 0x28, 0x1, &(0x7f0000000140)=0x4f, 0x8) connect$vsock_stream(r2, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000000c0)={0x2, &(0x7f0000000080)=[{0xfffb, 0xe5, 0x4c, 0xffffffe1}, {0x1, 0x5, 0xe2, 0x42}]}) fremovexattr(r4, &(0x7f0000000100)=@known='system.advise\x00') 18:39:24 executing program 3: r0 = socket(0xa, 0x1, 0x0) setsockopt$MRT_DEL_VIF(r0, 0x0, 0x7, 0x0, 0x0) 18:39:24 executing program 1: r0 = socket(0xa, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x29, 0x23, 0x0, 0x0) 18:39:24 executing program 0: r0 = socket(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x890c, &(0x7f0000000000)={'batadv_slave_1\x00'}) 18:39:24 executing program 5: sync_file_range(0xffffffffffffffff, 0x7, 0x3f, 0x1) r0 = epoll_create(0xb38) r1 = dup3(0xffffffffffffffff, r0, 0x7247eaedf9414915) ioctl$PPPIOCGL2TPSTATS(r1, 0x80487436, &(0x7f0000000000)="13aa0844188f3e8662d140a40b5ac69c007a47dc2e562e0a0c03e4661dd20fc5dd506c9ae090258da045000e80b1afff5fdd160a9537bcb7d4724a784e418055dac1aa6c8bd63f20148d38d9406c9f52aa50f5c8b6e28d17d5dc4b7c473cc5461fe7d4762f219ec8571b53df4fa2666156b3e9ad465b38976c84cceb9156eafa18aa8d22f9b1ab67d27c155bd8068275d92ea01d10e696d92b7ae449420cc33424ed660551313e9fc379743d4b0ae531b185f3e3d95b487b2d916e1f2a56177b2e18f1bfd100712d310882aeabf9a6120bf880d1") r2 = socket(0xa, 0x1, 0x0) r3 = dup3(r2, r2, 0x0) fstatfs(r3, &(0x7f0000000100)=""/4096) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r2, 0x6, 0x2, 0x0, 0x0) 18:39:24 executing program 0: r0 = socket(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8910, &(0x7f0000000000)={'batadv_slave_1\x00'}) [ 713.326178][T15141] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000010000000 [ 713.333985][T15141] RBP: 00007fb671f7e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 713.341794][T15141] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 713.349631][T15141] R13: 00007ffe782f632f R14: 00007fb671f7e300 R15: 0000000000022000 [ 713.357424][T15141] 18:39:24 executing program 4: r0 = socket(0xa, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x28, 0x2, 0x0, 0x0) (async) r1 = signalfd(0xffffffffffffffff, 0x0, 0x0) r2 = accept4$vsock_stream(r1, &(0x7f0000000000)={0x28, 0x0, 0xffffffff, @local}, 0x10, 0x0) (async, rerun: 64) r3 = socket$vsock_stream(0x28, 0x1, 0x0) (rerun: 64) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r3, 0x28, 0x1, &(0x7f0000000140)=0x4f, 0x8) (async) connect$vsock_stream(r2, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) (async) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000000c0)={0x2, &(0x7f0000000080)=[{0xfffb, 0xe5, 0x4c, 0xffffffe1}, {0x1, 0x5, 0xe2, 0x42}]}) fremovexattr(r4, &(0x7f0000000100)=@known='system.advise\x00') [ 713.407309][T15172] FAULT_INJECTION: forcing a failure. [ 713.407309][T15172] name failslab, interval 1, probability 0, space 0, times 0 [ 713.421029][T15172] CPU: 0 PID: 15172 Comm: syz-executor.2 Not tainted 5.15.74-syzkaller-04383-g7f2e600bf63a #0 [ 713.431099][T15172] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/11/2022 [ 713.441101][T15172] Call Trace: [ 713.444214][T15172] [ 713.446999][T15172] dump_stack_lvl+0x151/0x1b7 [ 713.451508][T15172] ? bfq_pos_tree_add_move+0x43e/0x43e [ 713.456798][T15172] ? _raw_spin_lock+0xa3/0x1b0 [ 713.461485][T15172] ? dup_fd+0x51f/0xa40 [ 713.465481][T15172] dump_stack+0x15/0x17 [ 713.469470][T15172] should_fail+0x3c0/0x510 [ 713.473723][T15172] __should_failslab+0x9f/0xe0 [ 713.478321][T15172] should_failslab+0x9/0x20 [ 713.482660][T15172] kmem_cache_alloc+0x4f/0x2f0 [ 713.487278][T15172] ? copy_fs_struct+0x4e/0x230 [ 713.491861][T15172] copy_fs_struct+0x4e/0x230 [ 713.496290][T15172] copy_fs+0x72/0x140 [ 713.500135][T15172] copy_process+0x1214/0x3250 [ 713.504623][T15172] ? proc_fail_nth_write+0x213/0x290 [ 713.509839][T15172] ? proc_fail_nth_read+0x220/0x220 [ 713.514863][T15172] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 713.520003][T15172] ? vfs_write+0x9af/0x1050 [ 713.524519][T15172] ? vmacache_update+0xb7/0x120 [ 713.529216][T15172] kernel_clone+0x22d/0x990 [ 713.533546][T15172] ? file_end_write+0x1b0/0x1b0 [ 713.538412][T15172] ? __kasan_check_write+0x14/0x20 [ 713.543350][T15172] ? create_io_thread+0x1e0/0x1e0 [ 713.548211][T15172] ? __mutex_lock_slowpath+0x10/0x10 [ 713.553328][T15172] __x64_sys_clone+0x289/0x310 [ 713.557934][T15172] ? __do_sys_vfork+0x130/0x130 [ 713.562620][T15172] ? debug_smp_processor_id+0x17/0x20 [ 713.567825][T15172] do_syscall_64+0x44/0xd0 [ 713.572079][T15172] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 713.577807][T15172] RIP: 0033:0x7fb67320a5a9 [ 713.582059][T15172] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 18:39:25 executing program 2: syz_clone(0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 27) 18:39:25 executing program 5: sync_file_range(0xffffffffffffffff, 0x7, 0x3f, 0x1) r0 = epoll_create(0xb38) r1 = dup3(0xffffffffffffffff, r0, 0x7247eaedf9414915) ioctl$PPPIOCGL2TPSTATS(r1, 0x80487436, &(0x7f0000000000)="13aa0844188f3e8662d140a40b5ac69c007a47dc2e562e0a0c03e4661dd20fc5dd506c9ae090258da045000e80b1afff5fdd160a9537bcb7d4724a784e418055dac1aa6c8bd63f20148d38d9406c9f52aa50f5c8b6e28d17d5dc4b7c473cc5461fe7d4762f219ec8571b53df4fa2666156b3e9ad465b38976c84cceb9156eafa18aa8d22f9b1ab67d27c155bd8068275d92ea01d10e696d92b7ae449420cc33424ed660551313e9fc379743d4b0ae531b185f3e3d95b487b2d916e1f2a56177b2e18f1bfd100712d310882aeabf9a6120bf880d1") (async, rerun: 32) r2 = socket(0xa, 0x1, 0x0) (rerun: 32) r3 = dup3(r2, r2, 0x0) fstatfs(r3, &(0x7f0000000100)=""/4096) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r2, 0x6, 0x2, 0x0, 0x0) 18:39:25 executing program 0: r0 = socket(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8911, &(0x7f0000000000)={'batadv_slave_1\x00'}) 18:39:25 executing program 3: r0 = socket(0xa, 0x1, 0x0) setsockopt$MRT_DEL_VIF(r0, 0x0, 0x8, 0x0, 0x0) 18:39:25 executing program 4: r0 = socket(0xa, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x28, 0x2, 0x0, 0x0) r1 = signalfd(0xffffffffffffffff, 0x0, 0x0) r2 = accept4$vsock_stream(r1, &(0x7f0000000000)={0x28, 0x0, 0xffffffff, @local}, 0x10, 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r3, 0x28, 0x1, &(0x7f0000000140)=0x4f, 0x8) connect$vsock_stream(r2, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000000c0)={0x2, &(0x7f0000000080)=[{0xfffb, 0xe5, 0x4c, 0xffffffe1}, {0x1, 0x5, 0xe2, 0x42}]}) fremovexattr(r4, &(0x7f0000000100)=@known='system.advise\x00') socket(0xa, 0x1, 0x0) (async) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x28, 0x2, 0x0, 0x0) (async) signalfd(0xffffffffffffffff, 0x0, 0x0) (async) accept4$vsock_stream(r1, &(0x7f0000000000)={0x28, 0x0, 0xffffffff, @local}, 0x10, 0x0) (async) socket$vsock_stream(0x28, 0x1, 0x0) (async) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r3, 0x28, 0x1, &(0x7f0000000140)=0x4f, 0x8) (async) connect$vsock_stream(r2, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000000c0)={0x2, &(0x7f0000000080)=[{0xfffb, 0xe5, 0x4c, 0xffffffe1}, {0x1, 0x5, 0xe2, 0x42}]}) (async) fremovexattr(r4, &(0x7f0000000100)=@known='system.advise\x00') (async) 18:39:25 executing program 1: r0 = socket(0xa, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x29, 0x2a, 0x0, 0x0) 18:39:25 executing program 1: r0 = socket(0xa, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x29, 0x2b, 0x0, 0x0) 18:39:25 executing program 3: r0 = socket(0xa, 0x1, 0x0) setsockopt$MRT_DEL_VIF(r0, 0x0, 0xa, 0x0, 0x0) 18:39:25 executing program 0: r0 = socket(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8912, &(0x7f0000000000)={'batadv_slave_1\x00'}) 18:39:25 executing program 4: r0 = socket(0xa, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x28, 0x2, 0x0, 0x0) r1 = signalfd(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r1, 0xc0096616, &(0x7f0000000040)={0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) close(r1) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r0, 0x28, 0x1, &(0x7f0000000000)=0x4, 0x8) socket$inet_udp(0x2, 0x2, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(0xffffffffffffffff, 0x111, 0x5, 0x4, 0x4) [ 713.601674][T15172] RSP: 002b:00007fb671f7e118 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 713.609919][T15172] RAX: ffffffffffffffda RBX: 00007fb67332af80 RCX: 00007fb67320a5a9 [ 713.617730][T15172] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000010000000 [ 713.625543][T15172] RBP: 00007fb671f7e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 713.633530][T15172] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 713.641343][T15172] R13: 00007ffe782f632f R14: 00007fb671f7e300 R15: 0000000000022000 [ 713.649154][T15172] 18:39:25 executing program 1: r0 = socket(0xa, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x29, 0x2c, 0x0, 0x0) 18:39:25 executing program 5: sync_file_range(0xffffffffffffffff, 0x7, 0x3f, 0x1) r0 = epoll_create(0xb38) r1 = dup3(0xffffffffffffffff, r0, 0x7247eaedf9414915) ioctl$PPPIOCGL2TPSTATS(r1, 0x80487436, &(0x7f0000000000)="13aa0844188f3e8662d140a40b5ac69c007a47dc2e562e0a0c03e4661dd20fc5dd506c9ae090258da045000e80b1afff5fdd160a9537bcb7d4724a784e418055dac1aa6c8bd63f20148d38d9406c9f52aa50f5c8b6e28d17d5dc4b7c473cc5461fe7d4762f219ec8571b53df4fa2666156b3e9ad465b38976c84cceb9156eafa18aa8d22f9b1ab67d27c155bd8068275d92ea01d10e696d92b7ae449420cc33424ed660551313e9fc379743d4b0ae531b185f3e3d95b487b2d916e1f2a56177b2e18f1bfd100712d310882aeabf9a6120bf880d1") (async) r2 = socket(0xa, 0x1, 0x0) r3 = dup3(r2, r2, 0x0) fstatfs(r3, &(0x7f0000000100)=""/4096) (async) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r2, 0x6, 0x2, 0x0, 0x0) [ 713.694424][T15203] FAULT_INJECTION: forcing a failure. [ 713.694424][T15203] name failslab, interval 1, probability 0, space 0, times 0 [ 713.720941][T15203] CPU: 1 PID: 15203 Comm: syz-executor.2 Not tainted 5.15.74-syzkaller-04383-g7f2e600bf63a #0 [ 713.731109][T15203] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/11/2022 [ 713.741003][T15203] Call Trace: [ 713.744121][T15203] [ 713.746930][T15203] dump_stack_lvl+0x151/0x1b7 [ 713.751411][T15203] ? bfq_pos_tree_add_move+0x43e/0x43e [ 713.756703][T15203] ? _raw_spin_lock+0xa3/0x1b0 [ 713.761306][T15203] ? dup_fd+0x51f/0xa40 [ 713.765421][T15203] dump_stack+0x15/0x17 [ 713.769412][T15203] should_fail+0x3c0/0x510 [ 713.773658][T15203] __should_failslab+0x9f/0xe0 [ 713.778261][T15203] should_failslab+0x9/0x20 [ 713.782603][T15203] kmem_cache_alloc+0x4f/0x2f0 [ 713.787198][T15203] ? copy_fs_struct+0x4e/0x230 [ 713.791893][T15203] copy_fs_struct+0x4e/0x230 [ 713.796311][T15203] copy_fs+0x72/0x140 [ 713.800133][T15203] copy_process+0x1214/0x3250 [ 713.804656][T15203] ? proc_fail_nth_write+0x213/0x290 [ 713.809852][T15203] ? proc_fail_nth_read+0x220/0x220 [ 713.814889][T15203] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 713.819839][T15203] ? vfs_write+0x9af/0x1050 [ 713.824262][T15203] ? vmacache_update+0xb7/0x120 [ 713.829065][T15203] kernel_clone+0x22d/0x990 [ 713.833405][T15203] ? file_end_write+0x1b0/0x1b0 [ 713.838264][T15203] ? __kasan_check_write+0x14/0x20 [ 713.843304][T15203] ? create_io_thread+0x1e0/0x1e0 [ 713.848179][T15203] ? __mutex_lock_slowpath+0x10/0x10 [ 713.853279][T15203] __x64_sys_clone+0x289/0x310 [ 713.857887][T15203] ? __do_sys_vfork+0x130/0x130 [ 713.862570][T15203] ? debug_smp_processor_id+0x17/0x20 [ 713.867772][T15203] do_syscall_64+0x44/0xd0 [ 713.872246][T15203] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 713.877963][T15203] RIP: 0033:0x7fb67320a5a9 [ 713.882216][T15203] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 713.901659][T15203] RSP: 002b:00007fb671f7e118 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 713.909902][T15203] RAX: ffffffffffffffda RBX: 00007fb67332af80 RCX: 00007fb67320a5a9 [ 713.917714][T15203] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000010000000 [ 713.925528][T15203] RBP: 00007fb671f7e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 713.933338][T15203] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 18:39:25 executing program 2: syz_clone(0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 28) 18:39:25 executing program 0: r0 = socket(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8913, &(0x7f0000000000)={'batadv_slave_1\x00'}) 18:39:25 executing program 3: r0 = socket(0xa, 0x1, 0x0) setsockopt$MRT_DEL_VIF(r0, 0x0, 0xb, 0x0, 0x0) 18:39:25 executing program 1: r0 = socket(0xa, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x29, 0x2d, 0x0, 0x0) 18:39:25 executing program 5: r0 = socket(0x9, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x6, 0x2, 0x0, 0x0) r1 = mmap$IORING_OFF_SQES(&(0x7f0000ff5000/0xa000)=nil, 0xa000, 0x0, 0x12, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r1, &(0x7f0000000040)=@IORING_OP_MADVISE={0x19, 0x21, 0x0, 0x0, 0x0, &(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x64, 0x1}, 0x8) syz_io_uring_submit(0x0, r1, &(0x7f0000000040)=@IORING_OP_TIMEOUT={0xb, 0x24, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x77359400}}, 0x2a) 18:39:25 executing program 4: r0 = socket(0xa, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x28, 0x2, 0x0, 0x0) (async) r1 = signalfd(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r1, 0xc0096616, &(0x7f0000000040)={0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) (async) close(r1) (async) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r0, 0x28, 0x1, &(0x7f0000000000)=0x4, 0x8) (async) socket$inet_udp(0x2, 0x2, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(0xffffffffffffffff, 0x111, 0x5, 0x4, 0x4) 18:39:25 executing program 3: r0 = socket(0xa, 0x1, 0x0) setsockopt$MRT_DEL_VIF(r0, 0x0, 0xc, 0x0, 0x0) 18:39:25 executing program 1: r0 = socket(0xa, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x29, 0x2e, 0x0, 0x0) 18:39:25 executing program 0: r0 = socket(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8914, &(0x7f0000000000)={'batadv_slave_1\x00'}) [ 713.941150][T15203] R13: 00007ffe782f632f R14: 00007fb671f7e300 R15: 0000000000022000 [ 713.948962][T15203] 18:39:25 executing program 3: r0 = socket(0xa, 0x1, 0x0) setsockopt$MRT_DEL_VIF(r0, 0x0, 0xd, 0x0, 0x0) 18:39:25 executing program 4: r0 = socket(0xa, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x28, 0x2, 0x0, 0x0) (async) r1 = signalfd(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r1, 0xc0096616, &(0x7f0000000040)={0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) (async, rerun: 32) close(r1) (async, rerun: 32) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r0, 0x28, 0x1, &(0x7f0000000000)=0x4, 0x8) socket$inet_udp(0x2, 0x2, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(0xffffffffffffffff, 0x111, 0x5, 0x4, 0x4) 18:39:25 executing program 3: r0 = socket(0xa, 0x1, 0x0) setsockopt$MRT_DEL_VIF(r0, 0x0, 0xf, 0x0, 0x0) [ 713.988613][T15228] FAULT_INJECTION: forcing a failure. [ 713.988613][T15228] name failslab, interval 1, probability 0, space 0, times 0 [ 714.001832][T15228] CPU: 1 PID: 15228 Comm: syz-executor.2 Not tainted 5.15.74-syzkaller-04383-g7f2e600bf63a #0 [ 714.011912][T15228] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/11/2022 [ 714.021895][T15228] Call Trace: [ 714.025019][T15228] [ 714.028066][T15228] dump_stack_lvl+0x151/0x1b7 [ 714.032588][T15228] ? bfq_pos_tree_add_move+0x43e/0x43e [ 714.037870][T15228] dump_stack+0x15/0x17 [ 714.041865][T15228] should_fail+0x3c0/0x510 [ 714.046153][T15228] __should_failslab+0x9f/0xe0 [ 714.050710][T15228] should_failslab+0x9/0x20 [ 714.055051][T15228] kmem_cache_alloc+0x4f/0x2f0 [ 714.059651][T15228] ? anon_vma_fork+0x1b9/0x4f0 [ 714.064273][T15228] anon_vma_fork+0x1b9/0x4f0 [ 714.068765][T15228] dup_mmap+0x750/0xea0 [ 714.072757][T15228] ? __delayed_free_task+0x20/0x20 [ 714.077705][T15228] ? mm_init+0x807/0x960 [ 714.081785][T15228] dup_mm+0x91/0x330 [ 714.085519][T15228] copy_mm+0x108/0x1b0 [ 714.089427][T15228] copy_process+0x1295/0x3250 [ 714.093933][T15228] ? proc_fail_nth_write+0x213/0x290 [ 714.099065][T15228] ? proc_fail_nth_read+0x220/0x220 [ 714.104187][T15228] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 714.109220][T15228] ? vfs_write+0x9af/0x1050 [ 714.113566][T15228] ? vmacache_update+0xb7/0x120 [ 714.118247][T15228] kernel_clone+0x22d/0x990 [ 714.122584][T15228] ? file_end_write+0x1b0/0x1b0 [ 714.127272][T15228] ? __kasan_check_write+0x14/0x20 [ 714.132324][T15228] ? create_io_thread+0x1e0/0x1e0 [ 714.137169][T15228] ? __mutex_lock_slowpath+0x10/0x10 [ 714.142288][T15228] __x64_sys_clone+0x289/0x310 [ 714.146909][T15228] ? __do_sys_vfork+0x130/0x130 [ 714.151690][T15228] ? debug_smp_processor_id+0x17/0x20 [ 714.156906][T15228] do_syscall_64+0x44/0xd0 [ 714.161150][T15228] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 714.167057][T15228] RIP: 0033:0x7fb67320a5a9 [ 714.171321][T15228] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 714.190844][T15228] RSP: 002b:00007fb671f7e118 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 714.199356][T15228] RAX: ffffffffffffffda RBX: 00007fb67332af80 RCX: 00007fb67320a5a9 [ 714.207239][T15228] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000010000000 [ 714.215102][T15228] RBP: 00007fb671f7e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 714.222866][T15228] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 714.230675][T15228] R13: 00007ffe782f632f R14: 00007fb671f7e300 R15: 0000000000022000 18:39:25 executing program 2: syz_clone(0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 29) 18:39:25 executing program 5: r0 = socket(0x9, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x6, 0x2, 0x0, 0x0) r1 = mmap$IORING_OFF_SQES(&(0x7f0000ff5000/0xa000)=nil, 0xa000, 0x0, 0x12, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r1, &(0x7f0000000040)=@IORING_OP_MADVISE={0x19, 0x21, 0x0, 0x0, 0x0, &(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x64, 0x1}, 0x8) syz_io_uring_submit(0x0, r1, &(0x7f0000000040)=@IORING_OP_TIMEOUT={0xb, 0x24, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x77359400}}, 0x2a) socket(0x9, 0x1, 0x0) (async) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x6, 0x2, 0x0, 0x0) (async) mmap$IORING_OFF_SQES(&(0x7f0000ff5000/0xa000)=nil, 0xa000, 0x0, 0x12, 0xffffffffffffffff, 0x10000000) (async) syz_io_uring_submit(0x0, r1, &(0x7f0000000040)=@IORING_OP_MADVISE={0x19, 0x21, 0x0, 0x0, 0x0, &(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x64, 0x1}, 0x8) (async) syz_io_uring_submit(0x0, r1, &(0x7f0000000040)=@IORING_OP_TIMEOUT={0xb, 0x24, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x77359400}}, 0x2a) (async) 18:39:25 executing program 3: r0 = socket(0xa, 0x1, 0x0) setsockopt$MRT_DEL_VIF(r0, 0x0, 0x10, 0x0, 0x0) 18:39:25 executing program 4: r0 = socket(0xa, 0x1, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1000000, 0x40010, r1, 0x10000000) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x28, 0x2, 0x0, 0x0) 18:39:25 executing program 0: r0 = socket(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8916, &(0x7f0000000000)={'batadv_slave_1\x00'}) 18:39:25 executing program 1: r0 = socket(0xa, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x29, 0x2f, 0x0, 0x0) 18:39:25 executing program 3: r0 = socket(0xa, 0x1, 0x0) setsockopt$MRT_DEL_VIF(r0, 0x0, 0x11, 0x0, 0x0) 18:39:25 executing program 1: r0 = socket(0xa, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x29, 0x30, 0x0, 0x0) [ 714.238491][T15228] 18:39:25 executing program 1: r0 = socket(0xa, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x29, 0x31, 0x0, 0x0) 18:39:25 executing program 3: r0 = socket(0xa, 0x1, 0x0) setsockopt$MRT_DEL_VIF(r0, 0x0, 0x12, 0x0, 0x0) 18:39:25 executing program 0: r0 = socket(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8918, &(0x7f0000000000)={'batadv_slave_1\x00'}) 18:39:25 executing program 5: r0 = socket(0x9, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x6, 0x2, 0x0, 0x0) r1 = mmap$IORING_OFF_SQES(&(0x7f0000ff5000/0xa000)=nil, 0xa000, 0x0, 0x12, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r1, &(0x7f0000000040)=@IORING_OP_MADVISE={0x19, 0x21, 0x0, 0x0, 0x0, &(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x64, 0x1}, 0x8) syz_io_uring_submit(0x0, r1, &(0x7f0000000040)=@IORING_OP_TIMEOUT={0xb, 0x24, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x77359400}}, 0x2a) socket(0x9, 0x1, 0x0) (async) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x6, 0x2, 0x0, 0x0) (async) mmap$IORING_OFF_SQES(&(0x7f0000ff5000/0xa000)=nil, 0xa000, 0x0, 0x12, 0xffffffffffffffff, 0x10000000) (async) syz_io_uring_submit(0x0, r1, &(0x7f0000000040)=@IORING_OP_MADVISE={0x19, 0x21, 0x0, 0x0, 0x0, &(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x64, 0x1}, 0x8) (async) syz_io_uring_submit(0x0, r1, &(0x7f0000000040)=@IORING_OP_TIMEOUT={0xb, 0x24, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x77359400}}, 0x2a) (async) [ 714.279505][T15259] FAULT_INJECTION: forcing a failure. [ 714.279505][T15259] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 714.308785][T15259] CPU: 0 PID: 15259 Comm: syz-executor.2 Not tainted 5.15.74-syzkaller-04383-g7f2e600bf63a #0 [ 714.318863][T15259] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/11/2022 [ 714.328758][T15259] Call Trace: [ 714.331883][T15259] [ 714.334659][T15259] dump_stack_lvl+0x151/0x1b7 [ 714.339173][T15259] ? bfq_pos_tree_add_move+0x43e/0x43e [ 714.344562][T15259] ? stack_trace_save+0x1f0/0x1f0 [ 714.349411][T15259] ? __kernel_text_address+0x9a/0x110 [ 714.354617][T15259] dump_stack+0x15/0x17 [ 714.358610][T15259] should_fail+0x3c0/0x510 [ 714.362861][T15259] should_fail_alloc_page+0x58/0x70 [ 714.367895][T15259] __alloc_pages+0x1de/0x7c0 [ 714.372321][T15259] ? stack_trace_save+0x12d/0x1f0 [ 714.377185][T15259] ? stack_trace_snprint+0x100/0x100 [ 714.382303][T15259] ? __count_vm_events+0x30/0x30 [ 714.387076][T15259] ? __kasan_slab_alloc+0xc4/0xe0 [ 714.391939][T15259] ? __kasan_slab_alloc+0xb2/0xe0 [ 714.396798][T15259] ? kmem_cache_alloc+0x189/0x2f0 [ 714.401657][T15259] ? anon_vma_fork+0x1b9/0x4f0 [ 714.406258][T15259] get_zeroed_page+0x19/0x40 [ 714.410684][T15259] __pud_alloc+0x8b/0x260 [ 714.414852][T15259] ? do_handle_mm_fault+0x2370/0x2370 [ 714.420059][T15259] copy_page_range+0xd9e/0x1090 [ 714.424747][T15259] ? pfn_valid+0x1e0/0x1e0 [ 714.429006][T15259] dup_mmap+0x99f/0xea0 [ 714.432990][T15259] ? __delayed_free_task+0x20/0x20 [ 714.437944][T15259] ? mm_init+0x807/0x960 [ 714.442016][T15259] dup_mm+0x91/0x330 [ 714.445750][T15259] copy_mm+0x108/0x1b0 [ 714.449660][T15259] copy_process+0x1295/0x3250 [ 714.454170][T15259] ? proc_fail_nth_write+0x213/0x290 [ 714.459292][T15259] ? proc_fail_nth_read+0x220/0x220 [ 714.464327][T15259] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 714.469273][T15259] ? vfs_write+0x9af/0x1050 [ 714.473613][T15259] ? vmacache_update+0xb7/0x120 [ 714.478297][T15259] kernel_clone+0x22d/0x990 [ 714.482639][T15259] ? file_end_write+0x1b0/0x1b0 [ 714.487321][T15259] ? __kasan_check_write+0x14/0x20 [ 714.492271][T15259] ? create_io_thread+0x1e0/0x1e0 [ 714.497135][T15259] ? __mutex_lock_slowpath+0x10/0x10 [ 714.502270][T15259] __x64_sys_clone+0x289/0x310 [ 714.506856][T15259] ? __do_sys_vfork+0x130/0x130 [ 714.511543][T15259] ? debug_smp_processor_id+0x17/0x20 [ 714.516755][T15259] do_syscall_64+0x44/0xd0 [ 714.521001][T15259] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 714.526727][T15259] RIP: 0033:0x7fb67320a5a9 [ 714.530984][T15259] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 714.550422][T15259] RSP: 002b:00007fb671f7e118 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 714.558667][T15259] RAX: ffffffffffffffda RBX: 00007fb67332af80 RCX: 00007fb67320a5a9 [ 714.566478][T15259] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000010000000 18:39:26 executing program 2: syz_clone(0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 30) 18:39:26 executing program 4: r0 = socket(0xa, 0x1, 0x0) (async, rerun: 32) pipe(&(0x7f0000000000)={0xffffffffffffffff}) (rerun: 32) mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1000000, 0x40010, r1, 0x10000000) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x28, 0x2, 0x0, 0x0) 18:39:26 executing program 1: r0 = socket(0xa, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x29, 0x32, 0x0, 0x0) 18:39:26 executing program 3: r0 = socket(0xa, 0x1, 0x0) setsockopt$MRT_DEL_VIF(r0, 0x0, 0x13, 0x0, 0x0) 18:39:26 executing program 5: r0 = socket(0x26, 0x3, 0x6) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_OPENAT={0x12, 0x40, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000000)='./file0\x00', 0xa0, 0x200000, 0x77fbf}, 0x9) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x6, 0x2, 0x0, 0x0) r1 = signalfd(r0, &(0x7f0000000080)={[0x7fffffff]}, 0x8) setsockopt$bt_BT_SNDMTU(r0, 0x112, 0xc, &(0x7f0000000140)=0x6cb, 0x2) accept$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000100)=0x14) socket$inet6_udplite(0xa, 0x2, 0x88) 18:39:26 executing program 0: r0 = socket(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x891d, &(0x7f0000000000)={'batadv_slave_1\x00'}) 18:39:26 executing program 1: r0 = socket(0xa, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x29, 0x33, 0x0, 0x0) 18:39:26 executing program 3: r0 = socket(0xa, 0x1, 0x0) setsockopt$MRT_DEL_VIF(r0, 0x0, 0x14, 0x0, 0x0) 18:39:26 executing program 5: r0 = socket(0x26, 0x3, 0x6) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_OPENAT={0x12, 0x40, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000000)='./file0\x00', 0xa0, 0x200000, 0x77fbf}, 0x9) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x6, 0x2, 0x0, 0x0) r1 = signalfd(r0, &(0x7f0000000080)={[0x7fffffff]}, 0x8) (async, rerun: 32) setsockopt$bt_BT_SNDMTU(r0, 0x112, 0xc, &(0x7f0000000140)=0x6cb, 0x2) (rerun: 32) accept$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000100)=0x14) (async) socket$inet6_udplite(0xa, 0x2, 0x88) [ 714.574291][T15259] RBP: 00007fb671f7e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 714.582102][T15259] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 714.589914][T15259] R13: 00007ffe782f632f R14: 00007fb671f7e300 R15: 0000000000022000 [ 714.597729][T15259] 18:39:26 executing program 0: r0 = socket(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x891e, &(0x7f0000000000)={'batadv_slave_1\x00'}) 18:39:26 executing program 4: r0 = socket(0xa, 0x1, 0x0) (async) pipe(&(0x7f0000000000)={0xffffffffffffffff}) mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1000000, 0x40010, r1, 0x10000000) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x28, 0x2, 0x0, 0x0) 18:39:26 executing program 3: r0 = socket(0xa, 0x1, 0x0) setsockopt$MRT_DEL_VIF(r0, 0x0, 0x15, 0x0, 0x0) [ 714.629299][T15285] FAULT_INJECTION: forcing a failure. [ 714.629299][T15285] name failslab, interval 1, probability 0, space 0, times 0 [ 714.647898][T15285] CPU: 0 PID: 15285 Comm: syz-executor.2 Not tainted 5.15.74-syzkaller-04383-g7f2e600bf63a #0 [ 714.657971][T15285] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/11/2022 [ 714.667862][T15285] Call Trace: [ 714.670987][T15285] [ 714.673761][T15285] dump_stack_lvl+0x151/0x1b7 [ 714.678279][T15285] ? bfq_pos_tree_add_move+0x43e/0x43e [ 714.683575][T15285] dump_stack+0x15/0x17 [ 714.687564][T15285] should_fail+0x3c0/0x510 [ 714.691820][T15285] ? mm_init+0x392/0x960 [ 714.695898][T15285] __should_failslab+0x9f/0xe0 [ 714.700496][T15285] should_failslab+0x9/0x20 [ 714.704832][T15285] kmem_cache_alloc_trace+0x4a/0x310 [ 714.709955][T15285] mm_init+0x392/0x960 [ 714.713862][T15285] dup_mm+0x7d/0x330 [ 714.717593][T15285] copy_mm+0x108/0x1b0 [ 714.721502][T15285] copy_process+0x1295/0x3250 [ 714.726013][T15285] ? proc_fail_nth_write+0x213/0x290 [ 714.731310][T15285] ? proc_fail_nth_read+0x220/0x220 [ 714.736353][T15285] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 714.741463][T15285] ? vfs_write+0x9af/0x1050 [ 714.745797][T15285] ? vmacache_update+0xb7/0x120 [ 714.750493][T15285] kernel_clone+0x22d/0x990 [ 714.754929][T15285] ? file_end_write+0x1b0/0x1b0 [ 714.759726][T15285] ? __kasan_check_write+0x14/0x20 [ 714.764849][T15285] ? create_io_thread+0x1e0/0x1e0 [ 714.769708][T15285] ? __mutex_lock_slowpath+0x10/0x10 [ 714.774828][T15285] __x64_sys_clone+0x289/0x310 [ 714.779560][T15285] ? __do_sys_vfork+0x130/0x130 [ 714.784431][T15285] ? debug_smp_processor_id+0x17/0x20 [ 714.789633][T15285] do_syscall_64+0x44/0xd0 [ 714.793881][T15285] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 714.799610][T15285] RIP: 0033:0x7fb67320a5a9 [ 714.803876][T15285] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 18:39:26 executing program 2: syz_clone(0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 31) 18:39:26 executing program 4: r0 = socket(0xa, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x28, 0x2, 0x0, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x404000, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r1, 0x28, 0x1, &(0x7f0000000040)=0x4, 0x8) 18:39:26 executing program 3: r0 = socket(0xa, 0x1, 0x0) setsockopt$MRT_DEL_VIF(r0, 0x0, 0x16, 0x0, 0x0) 18:39:26 executing program 0: r0 = socket(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x891f, &(0x7f0000000000)={'batadv_slave_1\x00'}) 18:39:26 executing program 1: r0 = socket(0xa, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x29, 0x35, 0x0, 0x0) 18:39:26 executing program 5: r0 = socket(0x26, 0x3, 0x6) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_OPENAT={0x12, 0x40, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000000)='./file0\x00', 0xa0, 0x200000, 0x77fbf}, 0x9) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x6, 0x2, 0x0, 0x0) r1 = signalfd(r0, &(0x7f0000000080)={[0x7fffffff]}, 0x8) setsockopt$bt_BT_SNDMTU(r0, 0x112, 0xc, &(0x7f0000000140)=0x6cb, 0x2) accept$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000100)=0x14) socket$inet6_udplite(0xa, 0x2, 0x88) socket(0x26, 0x3, 0x6) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_OPENAT={0x12, 0x40, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000000)='./file0\x00', 0xa0, 0x200000, 0x77fbf}, 0x9) (async) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x6, 0x2, 0x0, 0x0) (async) signalfd(r0, &(0x7f0000000080)={[0x7fffffff]}, 0x8) (async) setsockopt$bt_BT_SNDMTU(r0, 0x112, 0xc, &(0x7f0000000140)=0x6cb, 0x2) (async) accept$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000100)=0x14) (async) socket$inet6_udplite(0xa, 0x2, 0x88) (async) [ 714.823764][T15285] RSP: 002b:00007fb671f7e118 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 714.832034][T15285] RAX: ffffffffffffffda RBX: 00007fb67332af80 RCX: 00007fb67320a5a9 [ 714.839822][T15285] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000010000000 [ 714.847636][T15285] RBP: 00007fb671f7e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 714.855445][T15285] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 714.863263][T15285] R13: 00007ffe782f632f R14: 00007fb671f7e300 R15: 0000000000022000 [ 714.871073][T15285] 18:39:26 executing program 0: r0 = socket(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8920, &(0x7f0000000000)={'batadv_slave_1\x00'}) 18:39:26 executing program 4: r0 = socket(0xa, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x28, 0x2, 0x0, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x404000, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r1, 0x28, 0x1, &(0x7f0000000040)=0x4, 0x8) 18:39:26 executing program 3: r0 = socket(0xa, 0x1, 0x0) setsockopt$MRT_DEL_VIF(r0, 0x0, 0x17, 0x0, 0x0) 18:39:26 executing program 1: r0 = socket(0xa, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x29, 0x36, 0x0, 0x0) [ 714.885114][T15306] FAULT_INJECTION: forcing a failure. [ 714.885114][T15306] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 714.903507][T15306] CPU: 0 PID: 15306 Comm: syz-executor.2 Not tainted 5.15.74-syzkaller-04383-g7f2e600bf63a #0 [ 714.913575][T15306] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/11/2022 [ 714.923470][T15306] Call Trace: [ 714.926593][T15306] [ 714.929369][T15306] dump_stack_lvl+0x151/0x1b7 18:39:26 executing program 3: r0 = socket(0xa, 0x1, 0x0) setsockopt$MRT_DEL_VIF(r0, 0x0, 0x18, 0x0, 0x0) 18:39:26 executing program 1: r0 = socket(0xa, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x29, 0x37, 0x0, 0x0) [ 714.933886][T15306] ? bfq_pos_tree_add_move+0x43e/0x43e [ 714.939177][T15306] ? pcpu_block_update_hint_alloc+0x972/0xd00 [ 714.945085][T15306] dump_stack+0x15/0x17 [ 714.949073][T15306] should_fail+0x3c0/0x510 [ 714.953501][T15306] should_fail_alloc_page+0x58/0x70 [ 714.958626][T15306] __alloc_pages+0x1de/0x7c0 [ 714.963048][T15306] ? __count_vm_events+0x30/0x30 [ 714.967924][T15306] __get_free_pages+0xe/0x30 [ 714.972455][T15306] pgd_alloc+0x22/0x2c0 [ 714.976449][T15306] mm_init+0x5bf/0x960 [ 714.980356][T15306] dup_mm+0x7d/0x330 [ 714.984089][T15306] copy_mm+0x108/0x1b0 [ 714.988081][T15306] copy_process+0x1295/0x3250 [ 714.992605][T15306] ? proc_fail_nth_write+0x213/0x290 [ 714.997713][T15306] ? proc_fail_nth_read+0x220/0x220 [ 715.002745][T15306] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 715.007701][T15306] ? vfs_write+0x9af/0x1050 [ 715.012473][T15306] ? vmacache_update+0xb7/0x120 [ 715.017153][T15306] kernel_clone+0x22d/0x990 [ 715.021491][T15306] ? file_end_write+0x1b0/0x1b0 [ 715.026179][T15306] ? __kasan_check_write+0x14/0x20 [ 715.031126][T15306] ? create_io_thread+0x1e0/0x1e0 [ 715.035988][T15306] ? __mutex_lock_slowpath+0x10/0x10 [ 715.041107][T15306] __x64_sys_clone+0x289/0x310 [ 715.045912][T15306] ? __do_sys_vfork+0x130/0x130 [ 715.050608][T15306] ? debug_smp_processor_id+0x17/0x20 [ 715.055810][T15306] do_syscall_64+0x44/0xd0 [ 715.060072][T15306] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 715.065881][T15306] RIP: 0033:0x7fb67320a5a9 [ 715.070134][T15306] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 715.089656][T15306] RSP: 002b:00007fb671f7e118 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 715.097902][T15306] RAX: ffffffffffffffda RBX: 00007fb67332af80 RCX: 00007fb67320a5a9 [ 715.105714][T15306] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000010000000 [ 715.113525][T15306] RBP: 00007fb671f7e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 715.121337][T15306] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 18:39:26 executing program 2: syz_clone(0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 32) 18:39:26 executing program 3: r0 = socket(0xa, 0x1, 0x0) setsockopt$MRT_DEL_VIF(r0, 0x0, 0x19, 0x0, 0x0) 18:39:26 executing program 0: r0 = socket(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8921, &(0x7f0000000000)={'batadv_slave_1\x00'}) 18:39:26 executing program 4: r0 = socket(0xa, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x28, 0x2, 0x0, 0x0) (async) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x404000, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r1, 0x28, 0x1, &(0x7f0000000040)=0x4, 0x8) 18:39:26 executing program 5: ioctl$BTRFS_IOC_QGROUP_CREATE(0xffffffffffffffff, 0x4010942a, &(0x7f0000000000)={0x1, 0xffffffffffffffc0}) r0 = socket(0xa, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x6, 0x2, 0x0, 0x0) 18:39:26 executing program 1: r0 = socket(0xa, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x29, 0x38, 0x0, 0x0) 18:39:26 executing program 3: r0 = socket(0xa, 0x1, 0x0) setsockopt$MRT_DEL_VIF(r0, 0x0, 0x1a, 0x0, 0x0) 18:39:26 executing program 0: r0 = socket(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8922, &(0x7f0000000000)={'batadv_slave_1\x00'}) 18:39:26 executing program 1: r0 = socket(0xa, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x29, 0x39, 0x0, 0x0) 18:39:26 executing program 4: r0 = socket(0xa, 0x1, 0x0) sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x200, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x0) [ 715.129163][T15306] R13: 00007ffe782f632f R14: 00007fb671f7e300 R15: 0000000000022000 [ 715.136963][T15306] [ 715.155347][T15342] FAULT_INJECTION: forcing a failure. [ 715.155347][T15342] name fail_page_alloc, interval 1, probability 0, space 0, times 0 18:39:26 executing program 1: r0 = socket(0xa, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x29, 0x3a, 0x0, 0x0) 18:39:26 executing program 0: r0 = socket(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8923, &(0x7f0000000000)={'batadv_slave_1\x00'}) [ 715.178051][T15342] CPU: 1 PID: 15342 Comm: syz-executor.2 Not tainted 5.15.74-syzkaller-04383-g7f2e600bf63a #0 [ 715.186683][T15348] net_ratelimit: 10 callbacks suppressed [ 715.186700][T15348] batadv_slave_1: mtu less than device minimum [ 715.188122][T15342] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/11/2022 [ 715.188136][T15342] Call Trace: [ 715.188142][T15342] [ 715.215643][T15342] dump_stack_lvl+0x151/0x1b7 [ 715.220151][T15342] ? bfq_pos_tree_add_move+0x43e/0x43e [ 715.225443][T15342] ? pcpu_block_update_hint_alloc+0x972/0xd00 [ 715.231435][T15342] dump_stack+0x15/0x17 [ 715.235429][T15342] should_fail+0x3c0/0x510 [ 715.239690][T15342] should_fail_alloc_page+0x58/0x70 [ 715.244717][T15342] __alloc_pages+0x1de/0x7c0 [ 715.249147][T15342] ? __count_vm_events+0x30/0x30 [ 715.253936][T15342] __get_free_pages+0xe/0x30 [ 715.258429][T15342] pgd_alloc+0x22/0x2c0 [ 715.262412][T15342] mm_init+0x5bf/0x960 [ 715.266320][T15342] dup_mm+0x7d/0x330 [ 715.270052][T15342] copy_mm+0x108/0x1b0 [ 715.273964][T15342] copy_process+0x1295/0x3250 [ 715.278471][T15342] ? proc_fail_nth_write+0x213/0x290 [ 715.283606][T15342] ? proc_fail_nth_read+0x220/0x220 [ 715.288624][T15342] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 715.293657][T15342] ? vfs_write+0x9af/0x1050 [ 715.298002][T15342] ? vmacache_update+0xb7/0x120 [ 715.302686][T15342] kernel_clone+0x22d/0x990 [ 715.307116][T15342] ? file_end_write+0x1b0/0x1b0 [ 715.311800][T15342] ? __kasan_check_write+0x14/0x20 [ 715.316917][T15342] ? create_io_thread+0x1e0/0x1e0 [ 715.321779][T15342] ? __mutex_lock_slowpath+0x10/0x10 [ 715.326901][T15342] __x64_sys_clone+0x289/0x310 [ 715.331501][T15342] ? __do_sys_vfork+0x130/0x130 [ 715.336190][T15342] ? debug_smp_processor_id+0x17/0x20 [ 715.341401][T15342] do_syscall_64+0x44/0xd0 [ 715.345662][T15342] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 715.351635][T15342] RIP: 0033:0x7fb67320a5a9 [ 715.355892][T15342] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 715.375334][T15342] RSP: 002b:00007fb671f7e118 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 18:39:26 executing program 2: syz_clone(0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 33) 18:39:26 executing program 5: ioctl$BTRFS_IOC_QGROUP_CREATE(0xffffffffffffffff, 0x4010942a, &(0x7f0000000000)={0x1, 0xffffffffffffffc0}) r0 = socket(0xa, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x6, 0x2, 0x0, 0x0) ioctl$BTRFS_IOC_QGROUP_CREATE(0xffffffffffffffff, 0x4010942a, &(0x7f0000000000)={0x1, 0xffffffffffffffc0}) (async) socket(0xa, 0x1, 0x0) (async) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x6, 0x2, 0x0, 0x0) (async) 18:39:26 executing program 0: r0 = socket(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8924, &(0x7f0000000000)={'batadv_slave_1\x00'}) 18:39:26 executing program 1: r0 = socket(0xa, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x29, 0x3b, 0x0, 0x0) 18:39:26 executing program 4: r0 = socket(0xa, 0x1, 0x0) sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x200, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x0) socket(0xa, 0x1, 0x0) (async) sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x200, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x0) (async) 18:39:26 executing program 3: r0 = socket(0xa, 0x1, 0x0) setsockopt$MRT_DEL_VIF(r0, 0x0, 0x21, 0x0, 0x0) [ 715.383663][T15342] RAX: ffffffffffffffda RBX: 00007fb67332af80 RCX: 00007fb67320a5a9 [ 715.391480][T15342] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000010000000 [ 715.399285][T15342] RBP: 00007fb671f7e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 715.407106][T15342] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 715.414911][T15342] R13: 00007ffe782f632f R14: 00007fb671f7e300 R15: 0000000000022000 [ 715.422815][T15342] 18:39:26 executing program 0: r0 = socket(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8927, &(0x7f0000000000)={'batadv_slave_1\x00'}) 18:39:26 executing program 1: r0 = socket(0xa, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x29, 0x3c, 0x0, 0x0) 18:39:26 executing program 3: r0 = socket(0xa, 0x1, 0x0) setsockopt$MRT_DEL_VIF(r0, 0x0, 0x22, 0x0, 0x0) 18:39:26 executing program 4: r0 = socket(0xa, 0x1, 0x0) sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x200, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x0) [ 715.435916][T15359] FAULT_INJECTION: forcing a failure. [ 715.435916][T15359] name failslab, interval 1, probability 0, space 0, times 0 [ 715.453360][T15359] CPU: 1 PID: 15359 Comm: syz-executor.2 Not tainted 5.15.74-syzkaller-04383-g7f2e600bf63a #0 [ 715.463693][T15359] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/11/2022 [ 715.473580][T15359] Call Trace: [ 715.476799][T15359] [ 715.479572][T15359] dump_stack_lvl+0x151/0x1b7 18:39:26 executing program 3: r0 = socket(0xa, 0x1, 0x0) setsockopt$MRT_DEL_VIF(r0, 0x0, 0x23, 0x0, 0x0) 18:39:26 executing program 4: r0 = socket(0xa, 0x6, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x28, 0x2, 0x0, 0x0) [ 715.484194][T15359] ? bfq_pos_tree_add_move+0x43e/0x43e [ 715.489484][T15359] dump_stack+0x15/0x17 [ 715.493461][T15359] should_fail+0x3c0/0x510 [ 715.497802][T15359] __should_failslab+0x9f/0xe0 [ 715.502409][T15359] should_failslab+0x9/0x20 [ 715.506826][T15359] kmem_cache_alloc+0x4f/0x2f0 [ 715.511427][T15359] ? vm_area_dup+0x26/0x1d0 [ 715.515803][T15359] ? __kasan_check_read+0x11/0x20 [ 715.520634][T15359] vm_area_dup+0x26/0x1d0 [ 715.525054][T15359] dup_mmap+0x6b8/0xea0 [ 715.529049][T15359] ? __delayed_free_task+0x20/0x20 [ 715.533996][T15359] ? mm_init+0x807/0x960 [ 715.538077][T15359] dup_mm+0x91/0x330 [ 715.541812][T15359] copy_mm+0x108/0x1b0 [ 715.545863][T15359] copy_process+0x1295/0x3250 [ 715.550457][T15359] ? proc_fail_nth_write+0x213/0x290 [ 715.555754][T15359] ? proc_fail_nth_read+0x220/0x220 [ 715.560781][T15359] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 715.565739][T15359] ? vfs_write+0x9af/0x1050 [ 715.570082][T15359] ? vmacache_update+0xb7/0x120 [ 715.574761][T15359] kernel_clone+0x22d/0x990 [ 715.579186][T15359] ? file_end_write+0x1b0/0x1b0 [ 715.583917][T15359] ? __kasan_check_write+0x14/0x20 [ 715.588993][T15359] ? create_io_thread+0x1e0/0x1e0 [ 715.593854][T15359] ? __mutex_lock_slowpath+0x10/0x10 [ 715.599133][T15359] __x64_sys_clone+0x289/0x310 [ 715.603731][T15359] ? __do_sys_vfork+0x130/0x130 [ 715.608497][T15359] ? debug_smp_processor_id+0x17/0x20 [ 715.613704][T15359] do_syscall_64+0x44/0xd0 [ 715.617959][T15359] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 715.623861][T15359] RIP: 0033:0x7fb67320a5a9 [ 715.628113][T15359] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 715.647556][T15359] RSP: 002b:00007fb671f7e118 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 715.655813][T15359] RAX: ffffffffffffffda RBX: 00007fb67332af80 RCX: 00007fb67320a5a9 [ 715.663619][T15359] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000010000000 [ 715.671424][T15359] RBP: 00007fb671f7e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 715.679237][T15359] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 18:39:27 executing program 2: syz_clone(0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 34) 18:39:27 executing program 3: r0 = socket(0xa, 0x1, 0x0) setsockopt$MRT_DEL_VIF(r0, 0x0, 0x24, 0x0, 0x0) 18:39:27 executing program 0: r0 = socket(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8929, &(0x7f0000000000)={'batadv_slave_1\x00'}) 18:39:27 executing program 5: ioctl$BTRFS_IOC_QGROUP_CREATE(0xffffffffffffffff, 0x4010942a, &(0x7f0000000000)={0x1, 0xffffffffffffffc0}) r0 = socket(0xa, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x6, 0x2, 0x0, 0x0) ioctl$BTRFS_IOC_QGROUP_CREATE(0xffffffffffffffff, 0x4010942a, &(0x7f0000000000)={0x1, 0xffffffffffffffc0}) (async) socket(0xa, 0x1, 0x0) (async) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x6, 0x2, 0x0, 0x0) (async) 18:39:27 executing program 4: r0 = socket(0xa, 0x6, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x28, 0x2, 0x0, 0x0) 18:39:27 executing program 1: r0 = socket(0xa, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x29, 0x3e, 0x0, 0x0) 18:39:27 executing program 3: r0 = socket(0xa, 0x1, 0x0) setsockopt$MRT_DEL_VIF(r0, 0x0, 0x25, 0x0, 0x0) 18:39:27 executing program 1: r0 = socket(0xa, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x29, 0x42, 0x0, 0x0) 18:39:27 executing program 0: r0 = socket(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8930, &(0x7f0000000000)={'batadv_slave_1\x00'}) [ 715.687061][T15359] R13: 00007ffe782f632f R14: 00007fb671f7e300 R15: 0000000000022000 [ 715.694863][T15359] [ 715.715846][T15393] FAULT_INJECTION: forcing a failure. [ 715.715846][T15393] name failslab, interval 1, probability 0, space 0, times 0 18:39:27 executing program 4: r0 = socket(0xa, 0x6, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x28, 0x2, 0x0, 0x0) 18:39:27 executing program 5: syz_io_uring_setup(0x2bb4, &(0x7f0000000000)={0x0, 0x0, 0x2}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) r0 = socket(0xa, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x6, 0x2, 0x0, 0x0) 18:39:27 executing program 3: r0 = socket(0xa, 0x1, 0x0) setsockopt$MRT_DEL_VIF(r0, 0x0, 0x26, 0x0, 0x0) [ 715.737190][T15393] CPU: 0 PID: 15393 Comm: syz-executor.2 Not tainted 5.15.74-syzkaller-04383-g7f2e600bf63a #0 [ 715.747258][T15393] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/11/2022 [ 715.757153][T15393] Call Trace: [ 715.760318][T15393] [ 715.763055][T15393] dump_stack_lvl+0x151/0x1b7 [ 715.767566][T15393] ? bfq_pos_tree_add_move+0x43e/0x43e [ 715.772863][T15393] dump_stack+0x15/0x17 [ 715.776857][T15393] should_fail+0x3c0/0x510 [ 715.781109][T15393] __should_failslab+0x9f/0xe0 [ 715.785710][T15393] should_failslab+0x9/0x20 [ 715.790049][T15393] kmem_cache_alloc+0x4f/0x2f0 [ 715.794650][T15393] ? vm_area_dup+0x26/0x1d0 [ 715.798982][T15393] ? __kasan_check_read+0x11/0x20 [ 715.803947][T15393] vm_area_dup+0x26/0x1d0 [ 715.808122][T15393] dup_mmap+0x6b8/0xea0 [ 715.812288][T15393] ? __delayed_free_task+0x20/0x20 [ 715.817224][T15393] ? mm_init+0x807/0x960 [ 715.821306][T15393] dup_mm+0x91/0x330 [ 715.825391][T15393] copy_mm+0x108/0x1b0 [ 715.829327][T15393] copy_process+0x1295/0x3250 [ 715.833918][T15393] ? proc_fail_nth_write+0x213/0x290 [ 715.839018][T15393] ? proc_fail_nth_read+0x220/0x220 [ 715.844054][T15393] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 715.849003][T15393] ? vfs_write+0x9af/0x1050 [ 715.853339][T15393] ? vmacache_update+0xb7/0x120 [ 715.858118][T15393] kernel_clone+0x22d/0x990 [ 715.862915][T15393] ? file_end_write+0x1b0/0x1b0 [ 715.867586][T15393] ? __kasan_check_write+0x14/0x20 [ 715.872533][T15393] ? create_io_thread+0x1e0/0x1e0 [ 715.877393][T15393] ? __mutex_lock_slowpath+0x10/0x10 [ 715.882514][T15393] __x64_sys_clone+0x289/0x310 [ 715.887206][T15393] ? __do_sys_vfork+0x130/0x130 [ 715.891994][T15393] ? debug_smp_processor_id+0x17/0x20 [ 715.897211][T15393] do_syscall_64+0x44/0xd0 [ 715.901457][T15393] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 715.907182][T15393] RIP: 0033:0x7fb67320a5a9 [ 715.911433][T15393] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 715.930876][T15393] RSP: 002b:00007fb671f7e118 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 18:39:27 executing program 2: syz_clone(0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 35) 18:39:27 executing program 3: r0 = socket(0xa, 0x1, 0x0) setsockopt$MRT_DEL_VIF(r0, 0x0, 0x27, 0x0, 0x0) 18:39:27 executing program 5: syz_io_uring_setup(0x2bb4, &(0x7f0000000000)={0x0, 0x0, 0x2}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) (async, rerun: 64) r0 = socket(0xa, 0x1, 0x0) (rerun: 64) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x6, 0x2, 0x0, 0x0) 18:39:27 executing program 1: r0 = socket(0xa, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x29, 0x43, 0x0, 0x0) 18:39:27 executing program 0: r0 = socket(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8931, &(0x7f0000000000)={'batadv_slave_1\x00'}) 18:39:27 executing program 4: r0 = socket(0x29, 0x1, 0xfffffffd) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x28, 0x2, 0x0, 0x0) [ 715.939120][T15393] RAX: ffffffffffffffda RBX: 00007fb67332af80 RCX: 00007fb67320a5a9 [ 715.947019][T15393] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000010000000 [ 715.954829][T15393] RBP: 00007fb671f7e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 715.962641][T15393] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 715.970453][T15393] R13: 00007ffe782f632f R14: 00007fb671f7e300 R15: 0000000000022000 [ 715.978273][T15393] 18:39:27 executing program 3: r0 = socket(0xa, 0x1, 0x0) setsockopt$MRT_DEL_VIF(r0, 0x0, 0x28, 0x0, 0x0) 18:39:27 executing program 3: r0 = socket(0xa, 0x1, 0x0) setsockopt$MRT_DEL_VIF(r0, 0x0, 0x29, 0x0, 0x0) 18:39:27 executing program 3: r0 = socket(0xa, 0x1, 0x0) setsockopt$MRT_DEL_VIF(r0, 0x0, 0x2a, 0x0, 0x0) 18:39:27 executing program 1: r0 = socket(0xa, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x29, 0x46, 0x0, 0x0) [ 715.990819][T15414] FAULT_INJECTION: forcing a failure. [ 715.990819][T15414] name failslab, interval 1, probability 0, space 0, times 0 [ 716.004217][T15414] CPU: 0 PID: 15414 Comm: syz-executor.2 Not tainted 5.15.74-syzkaller-04383-g7f2e600bf63a #0 [ 716.014456][T15414] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/11/2022 [ 716.024352][T15414] Call Trace: [ 716.027473][T15414] [ 716.030250][T15414] dump_stack_lvl+0x151/0x1b7 [ 716.034766][T15414] ? bfq_pos_tree_add_move+0x43e/0x43e 18:39:27 executing program 3: r0 = socket(0xa, 0x1, 0x0) setsockopt$MRT_DEL_VIF(r0, 0x0, 0x2b, 0x0, 0x0) 18:39:27 executing program 4: r0 = socket(0x29, 0x1, 0xfffffffd) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x28, 0x2, 0x0, 0x0) [ 716.040061][T15414] dump_stack+0x15/0x17 [ 716.044047][T15414] should_fail+0x3c0/0x510 [ 716.048306][T15414] __should_failslab+0x9f/0xe0 [ 716.052907][T15414] should_failslab+0x9/0x20 [ 716.057245][T15414] kmem_cache_alloc+0x4f/0x2f0 [ 716.061843][T15414] ? vm_area_dup+0x26/0x1d0 [ 716.066274][T15414] vm_area_dup+0x26/0x1d0 [ 716.070443][T15414] dup_mmap+0x6b8/0xea0 [ 716.074526][T15414] ? __delayed_free_task+0x20/0x20 [ 716.079466][T15414] ? mm_init+0x807/0x960 [ 716.083542][T15414] dup_mm+0x91/0x330 [ 716.087277][T15414] copy_mm+0x108/0x1b0 [ 716.091186][T15414] copy_process+0x1295/0x3250 [ 716.095699][T15414] ? proc_fail_nth_write+0x213/0x290 [ 716.100820][T15414] ? proc_fail_nth_read+0x220/0x220 [ 716.105858][T15414] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 716.110797][T15414] ? vfs_write+0x9af/0x1050 [ 716.115137][T15414] ? vmacache_update+0xb7/0x120 [ 716.119828][T15414] kernel_clone+0x22d/0x990 [ 716.124200][T15414] ? file_end_write+0x1b0/0x1b0 [ 716.128854][T15414] ? __kasan_check_write+0x14/0x20 [ 716.133802][T15414] ? create_io_thread+0x1e0/0x1e0 [ 716.138660][T15414] ? __mutex_lock_slowpath+0x10/0x10 [ 716.143777][T15414] __x64_sys_clone+0x289/0x310 [ 716.148507][T15414] ? __do_sys_vfork+0x130/0x130 [ 716.153182][T15414] ? debug_smp_processor_id+0x17/0x20 [ 716.158390][T15414] do_syscall_64+0x44/0xd0 [ 716.162642][T15414] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 716.168369][T15414] RIP: 0033:0x7fb67320a5a9 [ 716.172708][T15414] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 716.192153][T15414] RSP: 002b:00007fb671f7e118 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 716.200393][T15414] RAX: ffffffffffffffda RBX: 00007fb67332af80 RCX: 00007fb67320a5a9 [ 716.208217][T15414] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000010000000 [ 716.216113][T15414] RBP: 00007fb671f7e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 716.223917][T15414] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 716.231721][T15414] R13: 00007ffe782f632f R14: 00007fb671f7e300 R15: 0000000000022000 18:39:27 executing program 2: syz_clone(0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 36) 18:39:27 executing program 3: r0 = socket(0xa, 0x1, 0x0) setsockopt$MRT_DEL_VIF(r0, 0x0, 0x2c, 0x0, 0x0) 18:39:27 executing program 0: r0 = socket(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8932, &(0x7f0000000000)={'batadv_slave_1\x00'}) 18:39:27 executing program 4: r0 = socket(0x29, 0x1, 0xfffffffd) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x28, 0x2, 0x0, 0x0) socket(0x29, 0x1, 0xfffffffd) (async) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x28, 0x2, 0x0, 0x0) (async) 18:39:27 executing program 5: syz_io_uring_setup(0x2bb4, &(0x7f0000000000)={0x0, 0x0, 0x2}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) (async) r0 = socket(0xa, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x6, 0x2, 0x0, 0x0) 18:39:27 executing program 1: r0 = socket(0xa, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x29, 0x48, 0x0, 0x0) 18:39:27 executing program 1: r0 = socket(0xa, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x29, 0x49, 0x0, 0x0) 18:39:27 executing program 3: r0 = socket(0xa, 0x1, 0x0) setsockopt$MRT_DEL_VIF(r0, 0x0, 0x2d, 0x0, 0x0) 18:39:27 executing program 1: r0 = socket(0xa, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x29, 0x4a, 0x0, 0x0) 18:39:27 executing program 0: r0 = socket(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8936, &(0x7f0000000000)={'batadv_slave_1\x00'}) [ 716.239631][T15414] 18:39:27 executing program 4: setsockopt$IP_VS_SO_SET_FLUSH(0xffffffffffffffff, 0x0, 0x485, 0x0, 0x0) r0 = socket(0xa, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x28, 0x2, 0x0, 0x0) ioctl$ASHMEM_PURGE_ALL_CACHES(0xffffffffffffffff, 0x770a, 0x0) write(r0, &(0x7f0000000000)="28735491fdff074403803c466a49b672c9b8e6c936ba606945d5d7b036cb1893962b", 0x22) 18:39:27 executing program 1: r0 = socket(0xa, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x29, 0x4b, 0x0, 0x0) [ 716.296196][T15579] FAULT_INJECTION: forcing a failure. [ 716.296196][T15579] name failslab, interval 1, probability 0, space 0, times 0 [ 716.312405][T15579] CPU: 1 PID: 15579 Comm: syz-executor.2 Not tainted 5.15.74-syzkaller-04383-g7f2e600bf63a #0 [ 716.322569][T15579] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/11/2022 [ 716.332454][T15579] Call Trace: [ 716.335661][T15579] [ 716.338442][T15579] dump_stack_lvl+0x151/0x1b7 [ 716.342955][T15579] ? bfq_pos_tree_add_move+0x43e/0x43e [ 716.348249][T15579] dump_stack+0x15/0x17 [ 716.352423][T15579] should_fail+0x3c0/0x510 [ 716.356932][T15579] __should_failslab+0x9f/0xe0 [ 716.361614][T15579] should_failslab+0x9/0x20 [ 716.365960][T15579] kmem_cache_alloc+0x4f/0x2f0 [ 716.370562][T15579] ? vm_area_dup+0x26/0x1d0 [ 716.374901][T15579] ? __kasan_check_read+0x11/0x20 [ 716.379769][T15579] vm_area_dup+0x26/0x1d0 [ 716.383925][T15579] dup_mmap+0x6b8/0xea0 [ 716.387919][T15579] ? __delayed_free_task+0x20/0x20 [ 716.392867][T15579] ? mm_init+0x807/0x960 [ 716.396953][T15579] dup_mm+0x91/0x330 [ 716.400683][T15579] copy_mm+0x108/0x1b0 [ 716.404585][T15579] copy_process+0x1295/0x3250 [ 716.409097][T15579] ? proc_fail_nth_write+0x213/0x290 [ 716.414223][T15579] ? proc_fail_nth_read+0x220/0x220 [ 716.419254][T15579] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 716.424198][T15579] ? vfs_write+0x9af/0x1050 [ 716.428536][T15579] ? vmacache_update+0xb7/0x120 [ 716.433222][T15579] kernel_clone+0x22d/0x990 [ 716.437649][T15579] ? file_end_write+0x1b0/0x1b0 [ 716.442429][T15579] ? __kasan_check_write+0x14/0x20 [ 716.447377][T15579] ? create_io_thread+0x1e0/0x1e0 [ 716.452234][T15579] ? __mutex_lock_slowpath+0x10/0x10 [ 716.457362][T15579] __x64_sys_clone+0x289/0x310 [ 716.461962][T15579] ? __do_sys_vfork+0x130/0x130 [ 716.466757][T15579] ? debug_smp_processor_id+0x17/0x20 [ 716.471978][T15579] do_syscall_64+0x44/0xd0 [ 716.476310][T15579] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 716.482221][T15579] RIP: 0033:0x7fb67320a5a9 [ 716.486464][T15579] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 716.506043][T15579] RSP: 002b:00007fb671f7e118 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 716.514441][T15579] RAX: ffffffffffffffda RBX: 00007fb67332af80 RCX: 00007fb67320a5a9 [ 716.522258][T15579] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000010000000 [ 716.530161][T15579] RBP: 00007fb671f7e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 716.537964][T15579] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 18:39:27 executing program 2: syz_clone(0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 37) 18:39:27 executing program 5: r0 = socket(0xa, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x6, 0x2, 0x0, 0x0) r1 = socket(0x23, 0x800, 0x200) connect$vsock_stream(r1, &(0x7f0000000000)={0x28, 0x0, 0xffffffff, @my=0x1}, 0x10) 18:39:27 executing program 1: r0 = socket(0xa, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x29, 0x4c, 0x0, 0x0) 18:39:27 executing program 3: r0 = socket(0xa, 0x1, 0x0) setsockopt$MRT_DEL_VIF(r0, 0x0, 0x2e, 0x0, 0x0) 18:39:27 executing program 0: r0 = socket(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8937, &(0x7f0000000000)={'batadv_slave_1\x00'}) 18:39:27 executing program 4: setsockopt$IP_VS_SO_SET_FLUSH(0xffffffffffffffff, 0x0, 0x485, 0x0, 0x0) (async) r0 = socket(0xa, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x28, 0x2, 0x0, 0x0) (async) ioctl$ASHMEM_PURGE_ALL_CACHES(0xffffffffffffffff, 0x770a, 0x0) write(r0, &(0x7f0000000000)="28735491fdff074403803c466a49b672c9b8e6c936ba606945d5d7b036cb1893962b", 0x22) 18:39:27 executing program 5: r0 = socket(0xa, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x6, 0x2, 0x0, 0x0) r1 = socket(0x23, 0x800, 0x200) connect$vsock_stream(r1, &(0x7f0000000000)={0x28, 0x0, 0xffffffff, @my=0x1}, 0x10) socket(0xa, 0x1, 0x0) (async) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x6, 0x2, 0x0, 0x0) (async) socket(0x23, 0x800, 0x200) (async) connect$vsock_stream(r1, &(0x7f0000000000)={0x28, 0x0, 0xffffffff, @my=0x1}, 0x10) (async) 18:39:27 executing program 1: r0 = socket(0xa, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x29, 0x4d, 0x0, 0x0) 18:39:27 executing program 3: r0 = socket(0xa, 0x1, 0x0) setsockopt$MRT_DEL_VIF(r0, 0x0, 0x2f, 0x0, 0x0) 18:39:27 executing program 0: r0 = socket(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8940, &(0x7f0000000000)={'batadv_slave_1\x00'}) [ 716.545862][T15579] R13: 00007ffe782f632f R14: 00007fb671f7e300 R15: 0000000000022000 [ 716.553676][T15579] 18:39:28 executing program 4: setsockopt$IP_VS_SO_SET_FLUSH(0xffffffffffffffff, 0x0, 0x485, 0x0, 0x0) r0 = socket(0xa, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x28, 0x2, 0x0, 0x0) (async, rerun: 64) ioctl$ASHMEM_PURGE_ALL_CACHES(0xffffffffffffffff, 0x770a, 0x0) (async, rerun: 64) write(r0, &(0x7f0000000000)="28735491fdff074403803c466a49b672c9b8e6c936ba606945d5d7b036cb1893962b", 0x22) 18:39:28 executing program 3: r0 = socket(0xa, 0x1, 0x0) setsockopt$MRT_DEL_VIF(r0, 0x0, 0x30, 0x0, 0x0) [ 716.591513][T15606] FAULT_INJECTION: forcing a failure. [ 716.591513][T15606] name failslab, interval 1, probability 0, space 0, times 0 [ 716.611662][T15606] CPU: 1 PID: 15606 Comm: syz-executor.2 Not tainted 5.15.74-syzkaller-04383-g7f2e600bf63a #0 [ 716.621747][T15606] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/11/2022 [ 716.631735][T15606] Call Trace: [ 716.635632][T15606] [ 716.638403][T15606] dump_stack_lvl+0x151/0x1b7 [ 716.642918][T15606] ? bfq_pos_tree_add_move+0x43e/0x43e [ 716.648231][T15606] dump_stack+0x15/0x17 [ 716.652199][T15606] should_fail+0x3c0/0x510 [ 716.656452][T15606] __should_failslab+0x9f/0xe0 [ 716.661056][T15606] should_failslab+0x9/0x20 [ 716.665400][T15606] kmem_cache_alloc+0x4f/0x2f0 [ 716.669994][T15606] ? vm_area_dup+0x26/0x1d0 [ 716.674424][T15606] ? __kasan_check_read+0x11/0x20 [ 716.679282][T15606] vm_area_dup+0x26/0x1d0 [ 716.683455][T15606] dup_mmap+0x6b8/0xea0 [ 716.687441][T15606] ? __delayed_free_task+0x20/0x20 [ 716.692386][T15606] ? mm_init+0x807/0x960 [ 716.696645][T15606] dup_mm+0x91/0x330 [ 716.700476][T15606] copy_mm+0x108/0x1b0 [ 716.704374][T15606] copy_process+0x1295/0x3250 [ 716.708891][T15606] ? proc_fail_nth_write+0x213/0x290 [ 716.714008][T15606] ? proc_fail_nth_read+0x220/0x220 [ 716.719041][T15606] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 716.723997][T15606] ? vfs_write+0x9af/0x1050 [ 716.728329][T15606] ? vmacache_update+0xb7/0x120 [ 716.733021][T15606] kernel_clone+0x22d/0x990 [ 716.737355][T15606] ? file_end_write+0x1b0/0x1b0 [ 716.742041][T15606] ? __kasan_check_write+0x14/0x20 [ 716.746991][T15606] ? create_io_thread+0x1e0/0x1e0 [ 716.751848][T15606] ? __mutex_lock_slowpath+0x10/0x10 [ 716.756970][T15606] __x64_sys_clone+0x289/0x310 [ 716.761569][T15606] ? __do_sys_vfork+0x130/0x130 [ 716.766259][T15606] ? debug_smp_processor_id+0x17/0x20 [ 716.771465][T15606] do_syscall_64+0x44/0xd0 [ 716.775716][T15606] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 716.781447][T15606] RIP: 0033:0x7fb67320a5a9 [ 716.785699][T15606] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 716.805138][T15606] RSP: 002b:00007fb671f7e118 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 716.813473][T15606] RAX: ffffffffffffffda RBX: 00007fb67332af80 RCX: 00007fb67320a5a9 [ 716.821285][T15606] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000010000000 [ 716.829101][T15606] RBP: 00007fb671f7e1d0 R08: 0000000000000000 R09: 0000000000000000 18:39:28 executing program 2: syz_clone(0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 38) 18:39:28 executing program 0: r0 = socket(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8941, &(0x7f0000000000)={'batadv_slave_1\x00'}) 18:39:28 executing program 4: r0 = socket(0x1a, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x28, 0x2, 0x0, 0x0) 18:39:28 executing program 3: r0 = socket(0xa, 0x1, 0x0) setsockopt$MRT_DEL_VIF(r0, 0x0, 0x31, 0x0, 0x0) 18:39:28 executing program 1: r0 = socket(0xa, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x29, 0x4e, 0x0, 0x0) 18:39:28 executing program 5: r0 = socket(0xa, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x6, 0x2, 0x0, 0x0) (async) r1 = socket(0x23, 0x800, 0x200) connect$vsock_stream(r1, &(0x7f0000000000)={0x28, 0x0, 0xffffffff, @my=0x1}, 0x10) 18:39:28 executing program 1: r0 = socket(0xa, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x29, 0x2, 0x0, 0x4) 18:39:28 executing program 0: r0 = socket(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8942, &(0x7f0000000000)={'batadv_slave_1\x00'}) 18:39:28 executing program 5: r0 = socket(0xa, 0x1, 0x0) r1 = signalfd(r0, &(0x7f0000000000)={[0x8]}, 0x8) setsockopt$MRT_ASSERT(r1, 0x0, 0xcf, &(0x7f0000000040)=0x1, 0x4) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x6, 0x2, 0x0, 0x0) 18:39:28 executing program 4: r0 = socket(0x1a, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x28, 0x2, 0x0, 0x0) [ 716.836907][T15606] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 716.844727][T15606] R13: 00007ffe782f632f R14: 00007fb671f7e300 R15: 0000000000022000 [ 716.852542][T15606] 18:39:28 executing program 3: r0 = socket(0xa, 0x1, 0x0) setsockopt$MRT_DEL_VIF(r0, 0x0, 0x32, 0x0, 0x0) 18:39:28 executing program 0: r0 = socket(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8943, &(0x7f0000000000)={'batadv_slave_1\x00'}) [ 716.890931][T15634] FAULT_INJECTION: forcing a failure. [ 716.890931][T15634] name failslab, interval 1, probability 0, space 0, times 0 [ 716.904220][T15634] CPU: 1 PID: 15634 Comm: syz-executor.2 Not tainted 5.15.74-syzkaller-04383-g7f2e600bf63a #0 [ 716.914290][T15634] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/11/2022 [ 716.924188][T15634] Call Trace: [ 716.927310][T15634] [ 716.930083][T15634] dump_stack_lvl+0x151/0x1b7 [ 716.934771][T15634] ? bfq_pos_tree_add_move+0x43e/0x43e [ 716.940075][T15634] ? do_syscall_64+0x44/0xd0 [ 716.944521][T15634] dump_stack+0x15/0x17 [ 716.948482][T15634] should_fail+0x3c0/0x510 [ 716.952744][T15634] __should_failslab+0x9f/0xe0 [ 716.957342][T15634] should_failslab+0x9/0x20 [ 716.961675][T15634] kmem_cache_alloc+0x4f/0x2f0 [ 716.966273][T15634] ? anon_vma_clone+0xa1/0x4f0 [ 716.970871][T15634] anon_vma_clone+0xa1/0x4f0 [ 716.975300][T15634] anon_vma_fork+0x91/0x4f0 [ 716.979638][T15634] ? anon_vma_name+0x4c/0x70 [ 716.984077][T15634] dup_mmap+0x750/0xea0 [ 716.988061][T15634] ? __delayed_free_task+0x20/0x20 [ 716.993004][T15634] ? mm_init+0x807/0x960 [ 716.997087][T15634] dup_mm+0x91/0x330 [ 717.000837][T15634] copy_mm+0x108/0x1b0 [ 717.004726][T15634] copy_process+0x1295/0x3250 [ 717.009369][T15634] ? proc_fail_nth_write+0x213/0x290 [ 717.014541][T15634] ? proc_fail_nth_read+0x220/0x220 [ 717.019574][T15634] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 717.024529][T15634] ? vfs_write+0x9af/0x1050 [ 717.028961][T15634] ? vmacache_update+0xb7/0x120 [ 717.033633][T15634] kernel_clone+0x22d/0x990 [ 717.037973][T15634] ? file_end_write+0x1b0/0x1b0 [ 717.042668][T15634] ? __kasan_check_write+0x14/0x20 [ 717.047607][T15634] ? create_io_thread+0x1e0/0x1e0 [ 717.052467][T15634] ? __mutex_lock_slowpath+0x10/0x10 [ 717.057587][T15634] __x64_sys_clone+0x289/0x310 [ 717.062188][T15634] ? __do_sys_vfork+0x130/0x130 [ 717.066877][T15634] ? debug_smp_processor_id+0x17/0x20 [ 717.072344][T15634] do_syscall_64+0x44/0xd0 [ 717.076596][T15634] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 717.082322][T15634] RIP: 0033:0x7fb67320a5a9 [ 717.086755][T15634] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 717.106292][T15634] RSP: 002b:00007fb671f7e118 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 717.114527][T15634] RAX: ffffffffffffffda RBX: 00007fb67332af80 RCX: 00007fb67320a5a9 [ 717.122338][T15634] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000010000000 [ 717.130157][T15634] RBP: 00007fb671f7e1d0 R08: 0000000000000000 R09: 0000000000000000 18:39:28 executing program 2: syz_clone(0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 39) 18:39:28 executing program 4: r0 = socket(0x1a, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x28, 0x2, 0x0, 0x0) socket(0x1a, 0x1, 0x0) (async) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x28, 0x2, 0x0, 0x0) (async) 18:39:28 executing program 5: r0 = socket(0xa, 0x1, 0x0) r1 = signalfd(r0, &(0x7f0000000000)={[0x8]}, 0x8) setsockopt$MRT_ASSERT(r1, 0x0, 0xcf, &(0x7f0000000040)=0x1, 0x4) (async) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x6, 0x2, 0x0, 0x0) 18:39:28 executing program 3: r0 = socket(0xa, 0x1, 0x0) setsockopt$MRT_DEL_VIF(r0, 0x0, 0x42, 0x0, 0x0) 18:39:28 executing program 0: r0 = socket(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8946, &(0x7f0000000000)={'batadv_slave_1\x00'}) 18:39:28 executing program 1: r0 = socket(0xa, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x29, 0x2, 0x0, 0x4000000) 18:39:28 executing program 5: r0 = socket(0xa, 0x1, 0x0) r1 = signalfd(r0, &(0x7f0000000000)={[0x8]}, 0x8) setsockopt$MRT_ASSERT(r1, 0x0, 0xcf, &(0x7f0000000040)=0x1, 0x4) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x6, 0x2, 0x0, 0x0) 18:39:28 executing program 0: r0 = socket(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8947, &(0x7f0000000000)={'batadv_slave_1\x00'}) 18:39:28 executing program 4: r0 = syz_open_dev$vcsu(&(0x7f0000000000), 0x0, 0x401) r1 = signalfd(0xffffffffffffffff, 0x0, 0x0) pipe2$watch_queue(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$ASHMEM_GET_PIN_STATUS(r2, 0x7709, 0x0) close(r1) r3 = socket(0x2a, 0x3, 0x4) pidfd_getfd(r1, r3, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000040)='\\\x00') r4 = socket(0x1f, 0x800, 0x8) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r4, 0x28, 0x2, 0x0, 0x0) [ 717.137960][T15634] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 717.145772][T15634] R13: 00007ffe782f632f R14: 00007fb671f7e300 R15: 0000000000022000 [ 717.154630][T15634] [ 717.178280][T15658] FAULT_INJECTION: forcing a failure. [ 717.178280][T15658] name fail_page_alloc, interval 1, probability 0, space 0, times 0 18:39:28 executing program 4: r0 = syz_open_dev$vcsu(&(0x7f0000000000), 0x0, 0x401) (async) r1 = signalfd(0xffffffffffffffff, 0x0, 0x0) (async) pipe2$watch_queue(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$ASHMEM_GET_PIN_STATUS(r2, 0x7709, 0x0) close(r1) r3 = socket(0x2a, 0x3, 0x4) pidfd_getfd(r1, r3, 0x0) (async, rerun: 32) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000040)='\\\x00') (async, rerun: 32) r4 = socket(0x1f, 0x800, 0x8) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r4, 0x28, 0x2, 0x0, 0x0) 18:39:28 executing program 0: r0 = socket(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8948, &(0x7f0000000000)={'batadv_slave_1\x00'}) 18:39:28 executing program 5: r0 = socket(0x1e, 0x1, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x24100, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x6, 0x2, 0x0, 0x0) r2 = accept4$bt_l2cap(r0, 0x0, &(0x7f0000000040), 0x80800) fcntl$getown(r2, 0x9) ftruncate(r1, 0x8) [ 717.194171][T15658] CPU: 0 PID: 15658 Comm: syz-executor.2 Not tainted 5.15.74-syzkaller-04383-g7f2e600bf63a #0 [ 717.204244][T15658] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/11/2022 [ 717.214140][T15658] Call Trace: [ 717.217261][T15658] [ 717.220041][T15658] dump_stack_lvl+0x151/0x1b7 [ 717.224554][T15658] ? bfq_pos_tree_add_move+0x43e/0x43e [ 717.229848][T15658] dump_stack+0x15/0x17 [ 717.233839][T15658] should_fail+0x3c0/0x510 [ 717.238094][T15658] should_fail_alloc_page+0x58/0x70 [ 717.243128][T15658] __alloc_pages+0x1de/0x7c0 [ 717.245836][ T30] audit: type=1400 audit(1666895968.650:199): avc: denied { accept } for pid=15674 comm="syz-executor.5" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 717.247562][T15658] ? __count_vm_events+0x30/0x30 [ 717.271950][T15658] ? dup_mm+0x91/0x330 [ 717.275850][T15658] ? copy_mm+0x108/0x1b0 [ 717.279923][T15658] ? copy_process+0x1295/0x3250 [ 717.284615][T15658] ? kernel_clone+0x22d/0x990 [ 717.289235][T15658] ? __x64_sys_clone+0x289/0x310 [ 717.294010][T15658] pte_alloc_one+0x73/0x1b0 [ 717.298348][T15658] ? pfn_modify_allowed+0x2e0/0x2e0 [ 717.303404][T15658] ? __kasan_check_write+0x14/0x20 [ 717.308333][T15658] ? __set_page_owner+0x2ee/0x310 [ 717.313195][T15658] __pte_alloc+0x86/0x350 [ 717.317357][T15658] ? post_alloc_hook+0x1ab/0x1b0 [ 717.322140][T15658] ? free_pgtables+0x210/0x210 [ 717.326743][T15658] ? get_page_from_freelist+0x38b/0x400 [ 717.332115][T15658] copy_pte_range+0x1b1f/0x20b0 [ 717.336805][T15658] ? __kunmap_atomic+0x80/0x80 [ 717.341402][T15658] ? __pud_alloc+0x260/0x260 [ 717.345835][T15658] ? __pud_alloc+0x218/0x260 [ 717.350253][T15658] ? do_handle_mm_fault+0x2370/0x2370 [ 717.355460][T15658] copy_page_range+0xc1e/0x1090 [ 717.360149][T15658] ? pfn_valid+0x1e0/0x1e0 [ 717.364404][T15658] dup_mmap+0x99f/0xea0 [ 717.368400][T15658] ? __delayed_free_task+0x20/0x20 [ 717.373341][T15658] ? mm_init+0x807/0x960 [ 717.377529][T15658] dup_mm+0x91/0x330 [ 717.381253][T15658] copy_mm+0x108/0x1b0 [ 717.385156][T15658] copy_process+0x1295/0x3250 [ 717.389686][T15658] ? proc_fail_nth_write+0x213/0x290 [ 717.394794][T15658] ? proc_fail_nth_read+0x220/0x220 [ 717.399828][T15658] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 717.404772][T15658] ? vfs_write+0x9af/0x1050 [ 717.409111][T15658] ? vmacache_update+0xb7/0x120 [ 717.413803][T15658] kernel_clone+0x22d/0x990 [ 717.418138][T15658] ? file_end_write+0x1b0/0x1b0 [ 717.422824][T15658] ? __kasan_check_write+0x14/0x20 [ 717.427772][T15658] ? create_io_thread+0x1e0/0x1e0 [ 717.432636][T15658] ? __mutex_lock_slowpath+0x10/0x10 [ 717.437761][T15658] __x64_sys_clone+0x289/0x310 [ 717.442362][T15658] ? __do_sys_vfork+0x130/0x130 [ 717.447041][T15658] ? debug_smp_processor_id+0x17/0x20 [ 717.452248][T15658] do_syscall_64+0x44/0xd0 [ 717.456503][T15658] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 717.462230][T15658] RIP: 0033:0x7fb67320a5a9 [ 717.466484][T15658] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 717.485932][T15658] RSP: 002b:00007fb671f7e118 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 18:39:28 executing program 2: syz_clone(0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 40) 18:39:28 executing program 4: r0 = syz_open_dev$vcsu(&(0x7f0000000000), 0x0, 0x401) r1 = signalfd(0xffffffffffffffff, 0x0, 0x0) pipe2$watch_queue(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$ASHMEM_GET_PIN_STATUS(r2, 0x7709, 0x0) close(r1) r3 = socket(0x2a, 0x3, 0x4) pidfd_getfd(r1, r3, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000040)='\\\x00') r4 = socket(0x1f, 0x800, 0x8) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r4, 0x28, 0x2, 0x0, 0x0) syz_open_dev$vcsu(&(0x7f0000000000), 0x0, 0x401) (async) signalfd(0xffffffffffffffff, 0x0, 0x0) (async) pipe2$watch_queue(&(0x7f0000000080), 0x80) (async) ioctl$ASHMEM_GET_PIN_STATUS(r2, 0x7709, 0x0) (async) close(r1) (async) socket(0x2a, 0x3, 0x4) (async) pidfd_getfd(r1, r3, 0x0) (async) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000040)='\\\x00') (async) socket(0x1f, 0x800, 0x8) (async) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r4, 0x28, 0x2, 0x0, 0x0) (async) 18:39:28 executing program 5: r0 = socket(0x1e, 0x1, 0x0) (async, rerun: 32) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x24100, 0x0) (rerun: 32) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x6, 0x2, 0x0, 0x0) (async) r2 = accept4$bt_l2cap(r0, 0x0, &(0x7f0000000040), 0x80800) fcntl$getown(r2, 0x9) (async) ftruncate(r1, 0x8) 18:39:28 executing program 0: r0 = socket(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8949, &(0x7f0000000000)={'batadv_slave_1\x00'}) 18:39:28 executing program 3: r0 = socket(0xa, 0x1, 0x0) setsockopt$MRT_DEL_VIF(r0, 0x0, 0x60, 0x0, 0x0) 18:39:28 executing program 1: r0 = socket(0xa, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x29, 0x2, 0x0, 0x400000000000000) 18:39:28 executing program 0: r0 = socket(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x894a, &(0x7f0000000000)={'batadv_slave_1\x00'}) [ 717.494178][T15658] RAX: ffffffffffffffda RBX: 00007fb67332af80 RCX: 00007fb67320a5a9 [ 717.501980][T15658] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000010000000 [ 717.509963][T15658] RBP: 00007fb671f7e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 717.517863][T15658] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 717.525762][T15658] R13: 00007ffe782f632f R14: 00007fb671f7e300 R15: 0000000000022000 [ 717.533665][T15658] 18:39:28 executing program 5: r0 = socket(0x1e, 0x1, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x24100, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x6, 0x2, 0x0, 0x0) r2 = accept4$bt_l2cap(r0, 0x0, &(0x7f0000000040), 0x80800) fcntl$getown(r2, 0x9) ftruncate(r1, 0x8) socket(0x1e, 0x1, 0x0) (async) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x24100, 0x0) (async) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x6, 0x2, 0x0, 0x0) (async) accept4$bt_l2cap(r0, 0x0, &(0x7f0000000040), 0x80800) (async) fcntl$getown(r2, 0x9) (async) ftruncate(r1, 0x8) (async) 18:39:28 executing program 3: r0 = socket(0xa, 0x1, 0x0) setsockopt$MRT_DEL_VIF(r0, 0x0, 0x62, 0x0, 0x0) 18:39:29 executing program 1: r0 = socket(0xa, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x29, 0x2, 0x0, 0x0) sendmsg$WG_CMD_GET_DEVICE(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x34, 0x0, 0x0, 0x70bd25, 0x25dfdbfc, {}, [@WGDEVICE_A_FLAGS={0x8}, @WGDEVICE_A_IFINDEX={0x8}, @WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}, @WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4004084}, 0x20048000) 18:39:29 executing program 4: r0 = socket(0xa, 0x80000, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000004, 0x10, r1, 0x0) ioctl$BTRFS_IOC_BALANCE_CTL(r1, 0x40049421, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x28, 0x2, 0x0, 0x0) 18:39:29 executing program 3: r0 = socket(0xa, 0x1, 0x0) setsockopt$MRT_DEL_VIF(r0, 0x0, 0xcb, 0x0, 0x6) [ 717.568475][T15698] FAULT_INJECTION: forcing a failure. [ 717.568475][T15698] name failslab, interval 1, probability 0, space 0, times 0 [ 717.581000][T15698] CPU: 0 PID: 15698 Comm: syz-executor.2 Not tainted 5.15.74-syzkaller-04383-g7f2e600bf63a #0 [ 717.591062][T15698] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/11/2022 [ 717.600954][T15698] Call Trace: [ 717.604076][T15698] [ 717.606856][T15698] dump_stack_lvl+0x151/0x1b7 [ 717.611369][T15698] ? bfq_pos_tree_add_move+0x43e/0x43e [ 717.616672][T15698] ? vma_interval_tree_augment_rotate+0x210/0x210 [ 717.622917][T15698] dump_stack+0x15/0x17 [ 717.626906][T15698] should_fail+0x3c0/0x510 [ 717.631157][T15698] __should_failslab+0x9f/0xe0 [ 717.635755][T15698] should_failslab+0x9/0x20 [ 717.640097][T15698] kmem_cache_alloc+0x4f/0x2f0 [ 717.644699][T15698] ? anon_vma_fork+0xf7/0x4f0 [ 717.649210][T15698] anon_vma_fork+0xf7/0x4f0 [ 717.653555][T15698] ? anon_vma_name+0x4c/0x70 [ 717.657979][T15698] dup_mmap+0x750/0xea0 [ 717.661972][T15698] ? __delayed_free_task+0x20/0x20 [ 717.666914][T15698] ? mm_init+0x807/0x960 [ 717.670998][T15698] dup_mm+0x91/0x330 [ 717.674819][T15698] copy_mm+0x108/0x1b0 [ 717.678719][T15698] copy_process+0x1295/0x3250 [ 717.683234][T15698] ? proc_fail_nth_write+0x213/0x290 [ 717.688349][T15698] ? proc_fail_nth_read+0x220/0x220 [ 717.693382][T15698] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 717.698512][T15698] ? vfs_write+0x9af/0x1050 [ 717.702844][T15698] ? vmacache_update+0xb7/0x120 [ 717.707532][T15698] kernel_clone+0x22d/0x990 [ 717.711869][T15698] ? file_end_write+0x1b0/0x1b0 [ 717.716558][T15698] ? __kasan_check_write+0x14/0x20 [ 717.721504][T15698] ? create_io_thread+0x1e0/0x1e0 [ 717.726370][T15698] ? __mutex_lock_slowpath+0x10/0x10 [ 717.731572][T15698] __x64_sys_clone+0x289/0x310 [ 717.736174][T15698] ? __do_sys_vfork+0x130/0x130 [ 717.740860][T15698] ? debug_smp_processor_id+0x17/0x20 [ 717.746075][T15698] do_syscall_64+0x44/0xd0 [ 717.750412][T15698] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 717.756135][T15698] RIP: 0033:0x7fb67320a5a9 [ 717.760389][T15698] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 717.779920][T15698] RSP: 002b:00007fb671f7e118 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 717.788162][T15698] RAX: ffffffffffffffda RBX: 00007fb67332af80 RCX: 00007fb67320a5a9 [ 717.796147][T15698] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000010000000 [ 717.803962][T15698] RBP: 00007fb671f7e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 717.811770][T15698] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 18:39:29 executing program 2: syz_clone(0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 41) 18:39:29 executing program 0: r0 = socket(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x894b, &(0x7f0000000000)={'batadv_slave_1\x00'}) 18:39:29 executing program 1: r0 = socket(0xa, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x29, 0x2, 0x0, 0x0) sendmsg$WG_CMD_GET_DEVICE(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x34, 0x0, 0x0, 0x70bd25, 0x25dfdbfc, {}, [@WGDEVICE_A_FLAGS={0x8}, @WGDEVICE_A_IFINDEX={0x8}, @WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}, @WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4004084}, 0x20048000) socket(0xa, 0x1, 0x0) (async) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x29, 0x2, 0x0, 0x0) (async) sendmsg$WG_CMD_GET_DEVICE(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x34, 0x0, 0x0, 0x70bd25, 0x25dfdbfc, {}, [@WGDEVICE_A_FLAGS={0x8}, @WGDEVICE_A_IFINDEX={0x8}, @WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}, @WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4004084}, 0x20048000) (async) 18:39:29 executing program 4: r0 = socket(0xa, 0x80000, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000004, 0x10, r1, 0x0) (async) ioctl$BTRFS_IOC_BALANCE_CTL(r1, 0x40049421, 0x0) (async) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x28, 0x2, 0x0, 0x0) 18:39:29 executing program 3: r0 = socket(0xa, 0x1, 0x0) setsockopt$MRT_DEL_VIF(r0, 0x0, 0xcb, 0x0, 0x11) 18:39:29 executing program 5: r0 = socket(0xa, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x6, 0x2, 0x0, 0x0) r1 = dup(r0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000080)={'batadv_slave_0\x00'}) accept$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000040)=0x14) setsockopt$bt_BT_VOICE(r1, 0x112, 0xb, &(0x7f00000000c0)=0x63, 0x2) 18:39:29 executing program 5: r0 = socket(0xa, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x6, 0x2, 0x0, 0x0) r1 = dup(r0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000080)={'batadv_slave_0\x00'}) accept$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000040)=0x14) setsockopt$bt_BT_VOICE(r1, 0x112, 0xb, &(0x7f00000000c0)=0x63, 0x2) socket(0xa, 0x1, 0x0) (async) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x6, 0x2, 0x0, 0x0) (async) dup(r0) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000080)={'batadv_slave_0\x00'}) (async) accept$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000040)=0x14) (async) setsockopt$bt_BT_VOICE(r1, 0x112, 0xb, &(0x7f00000000c0)=0x63, 0x2) (async) 18:39:29 executing program 1: r0 = socket(0xa, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x29, 0x2, 0x0, 0x0) (async) sendmsg$WG_CMD_GET_DEVICE(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x34, 0x0, 0x0, 0x70bd25, 0x25dfdbfc, {}, [@WGDEVICE_A_FLAGS={0x8}, @WGDEVICE_A_IFINDEX={0x8}, @WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}, @WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4004084}, 0x20048000) 18:39:29 executing program 4: r0 = socket(0xa, 0x80000, 0x0) (async) r1 = socket$inet_udp(0x2, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000004, 0x10, r1, 0x0) ioctl$BTRFS_IOC_BALANCE_CTL(r1, 0x40049421, 0x0) (async) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x28, 0x2, 0x0, 0x0) 18:39:29 executing program 3: r0 = socket(0xa, 0x1, 0x0) setsockopt$MRT_DEL_VIF(r0, 0x0, 0xcb, 0x0, 0x29) 18:39:29 executing program 0: r0 = socket(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x894c, &(0x7f0000000000)={'batadv_slave_1\x00'}) [ 717.819582][T15698] R13: 00007ffe782f632f R14: 00007fb671f7e300 R15: 0000000000022000 [ 717.827396][T15698] 18:39:29 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x200000c, 0x10, r0, 0x0) finit_module(r0, &(0x7f0000000000)='%\x00', 0x2) open_tree(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x8000) r1 = socket(0xa, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r1, 0x28, 0x2, 0x0, 0x0) [ 717.873232][T15736] FAULT_INJECTION: forcing a failure. [ 717.873232][T15736] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 717.893348][T15736] CPU: 1 PID: 15736 Comm: syz-executor.2 Not tainted 5.15.74-syzkaller-04383-g7f2e600bf63a #0 [ 717.903515][T15736] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/11/2022 [ 717.913689][T15736] Call Trace: [ 717.916988][T15736] [ 717.919764][T15736] dump_stack_lvl+0x151/0x1b7 [ 717.924273][T15736] ? bfq_pos_tree_add_move+0x43e/0x43e [ 717.929569][T15736] dump_stack+0x15/0x17 [ 717.933577][T15736] should_fail+0x3c0/0x510 [ 717.937902][T15736] should_fail_alloc_page+0x58/0x70 [ 717.943901][T15736] __alloc_pages+0x1de/0x7c0 [ 717.948234][T15736] ? __count_vm_events+0x30/0x30 [ 717.953003][T15736] ? __this_cpu_preempt_check+0x13/0x20 [ 717.958389][T15736] ? __mod_node_page_state+0xac/0xf0 [ 717.963512][T15736] pte_alloc_one+0x73/0x1b0 [ 717.967844][T15736] ? pfn_modify_allowed+0x2e0/0x2e0 [ 717.972882][T15736] __pte_alloc+0x86/0x350 [ 717.977046][T15736] ? free_pgtables+0x210/0x210 [ 717.981643][T15736] ? _raw_spin_lock+0xa3/0x1b0 [ 717.986247][T15736] ? _raw_spin_trylock_bh+0x1d0/0x1d0 [ 717.991450][T15736] ? __kernel_text_address+0x9a/0x110 [ 717.996660][T15736] copy_pte_range+0x1b1f/0x20b0 [ 718.001357][T15736] ? __kunmap_atomic+0x80/0x80 [ 718.005956][T15736] ? __kasan_slab_alloc+0xc4/0xe0 [ 718.010820][T15736] ? __kasan_slab_alloc+0xb2/0xe0 [ 718.015668][T15736] ? kmem_cache_alloc+0x189/0x2f0 [ 718.020528][T15736] ? vm_area_dup+0x26/0x1d0 [ 718.024867][T15736] ? dup_mmap+0x6b8/0xea0 [ 718.029034][T15736] ? dup_mm+0x91/0x330 [ 718.032938][T15736] ? copy_mm+0x108/0x1b0 [ 718.037019][T15736] ? copy_process+0x1295/0x3250 [ 718.041713][T15736] ? kernel_clone+0x22d/0x990 [ 718.046220][T15736] ? __x64_sys_clone+0x289/0x310 [ 718.050992][T15736] ? do_syscall_64+0x44/0xd0 [ 718.055431][T15736] ? entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 718.061326][T15736] copy_page_range+0xc1e/0x1090 [ 718.066040][T15736] ? pfn_valid+0x1e0/0x1e0 [ 718.070264][T15736] dup_mmap+0x99f/0xea0 [ 718.074258][T15736] ? __delayed_free_task+0x20/0x20 [ 718.079301][T15736] ? mm_init+0x807/0x960 [ 718.083373][T15736] dup_mm+0x91/0x330 [ 718.087104][T15736] copy_mm+0x108/0x1b0 [ 718.091028][T15736] copy_process+0x1295/0x3250 [ 718.095608][T15736] ? proc_fail_nth_write+0x213/0x290 [ 718.100725][T15736] ? proc_fail_nth_read+0x220/0x220 [ 718.105879][T15736] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 718.110828][T15736] ? vfs_write+0x9af/0x1050 [ 718.115179][T15736] ? vmacache_update+0xb7/0x120 [ 718.119859][T15736] kernel_clone+0x22d/0x990 [ 718.124320][T15736] ? file_end_write+0x1b0/0x1b0 [ 718.129007][T15736] ? __kasan_check_write+0x14/0x20 [ 718.133951][T15736] ? create_io_thread+0x1e0/0x1e0 [ 718.138900][T15736] ? __mutex_lock_slowpath+0x10/0x10 [ 718.144109][T15736] __x64_sys_clone+0x289/0x310 [ 718.148808][T15736] ? __do_sys_vfork+0x130/0x130 [ 718.153480][T15736] ? debug_smp_processor_id+0x17/0x20 [ 718.158696][T15736] do_syscall_64+0x44/0xd0 [ 718.163029][T15736] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 718.168756][T15736] RIP: 0033:0x7fb67320a5a9 [ 718.173016][T15736] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 718.192458][T15736] RSP: 002b:00007fb671f7e118 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 718.200702][T15736] RAX: ffffffffffffffda RBX: 00007fb67332af80 RCX: 00007fb67320a5a9 [ 718.208512][T15736] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000010000000 [ 718.216321][T15736] RBP: 00007fb671f7e1d0 R08: 0000000000000000 R09: 0000000000000000 18:39:29 executing program 2: syz_clone(0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 42) 18:39:29 executing program 5: r0 = socket(0xa, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x6, 0x2, 0x0, 0x0) (async) r1 = dup(r0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000080)={'batadv_slave_0\x00'}) accept$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000040)=0x14) (async) setsockopt$bt_BT_VOICE(r1, 0x112, 0xb, &(0x7f00000000c0)=0x63, 0x2) 18:39:29 executing program 0: r0 = socket(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8970, &(0x7f0000000000)={'batadv_slave_1\x00'}) 18:39:29 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x200000c, 0x10, r0, 0x0) finit_module(r0, &(0x7f0000000000)='%\x00', 0x2) open_tree(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x8000) r1 = socket(0xa, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r1, 0x28, 0x2, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) (async) mmap$IORING_OFF_SQ_RING(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x200000c, 0x10, r0, 0x0) (async) finit_module(r0, &(0x7f0000000000)='%\x00', 0x2) (async) open_tree(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x8000) (async) socket(0xa, 0x1, 0x0) (async) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r1, 0x28, 0x2, 0x0, 0x0) (async) 18:39:29 executing program 3: r0 = socket(0xa, 0x1, 0x0) setsockopt$MRT_DEL_VIF(r0, 0x0, 0xcb, 0x0, 0x88) 18:39:29 executing program 1: r0 = socket(0x5, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x29, 0x2, 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(0xffffffffffffffff, 0x7704, 0x0) 18:39:29 executing program 1: r0 = socket(0x5, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x29, 0x2, 0x0, 0x0) (async, rerun: 64) ioctl$ASHMEM_GET_SIZE(0xffffffffffffffff, 0x7704, 0x0) (rerun: 64) 18:39:29 executing program 5: r0 = socket(0xa, 0x1, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x84009422, &(0x7f0000000000)={0x0, 0x0, {}, {0x0, @struct, 0x0}, {0x0, @struct}}) ioctl$BTRFS_IOC_GET_DEV_STATS(r0, 0xc4089434, &(0x7f0000000400)={r1, 0x1c00000, 0x111476b9ba301ebc, [0x3, 0x7841, 0x8, 0x401, 0x80000001], [0x8000000000000001, 0x6, 0x400, 0x1, 0x8000000000000000, 0xa31, 0xfffffffffffffff7, 0x9, 0x1, 0xffffffff, 0x95f, 0x2, 0x2, 0x2, 0xf06, 0xfbc7, 0x0, 0xfff, 0x6, 0xffff, 0x8, 0x4f13, 0x7, 0x5, 0x8000000000000001, 0x3ff, 0x0, 0x6, 0x9, 0x5, 0xdc, 0xffffffffffffffff, 0x7, 0xa59, 0x24000000, 0xffffffff, 0x40, 0x8, 0x4, 0x120, 0xffffffffffffffff, 0x2, 0x1ff, 0x20, 0x5, 0xa4, 0x9, 0xb6a3, 0x7, 0x405b, 0x6e, 0x8, 0x7fff, 0x0, 0x9f35b6e, 0x4, 0x7, 0x4, 0xffffffffffffff53, 0x8, 0x8000, 0x100000001, 0x101, 0x7f, 0x2, 0x9, 0x0, 0x8472, 0x401, 0x1, 0x6f8, 0x8000000000000001, 0xd0, 0xfffffffffffffffc, 0x4010000000000000, 0xff, 0x8000, 0x7fffffff, 0x5, 0x8, 0x80000001, 0x3bd, 0xfffffffeffffffff, 0x1acb, 0x4, 0x3, 0x0, 0x80000001, 0x8, 0x57b3, 0x7f, 0x451, 0x200, 0x9e0f, 0x5, 0xb1c, 0x8, 0xd814, 0x5, 0x9, 0x2, 0x501e6c20, 0x4, 0x6b5a, 0x6, 0xdb, 0x7, 0xc000000000000000, 0x9, 0xb71, 0x6, 0x0, 0x0, 0x3, 0x0, 0x0, 0xc0c, 0x80, 0x7fff, 0x2, 0x77]}) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x6, 0x2, 0x0, 0x0) 18:39:29 executing program 0: r0 = socket(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8971, &(0x7f0000000000)={'batadv_slave_1\x00'}) 18:39:29 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x200000c, 0x10, r0, 0x0) (async) finit_module(r0, &(0x7f0000000000)='%\x00', 0x2) open_tree(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x8000) (async) r1 = socket(0xa, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r1, 0x28, 0x2, 0x0, 0x0) 18:39:29 executing program 3: r0 = socket(0xa, 0x1, 0x0) setsockopt$MRT_DEL_VIF(r0, 0x0, 0xcb, 0x0, 0xcb) [ 718.224140][T15736] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 718.231942][T15736] R13: 00007ffe782f632f R14: 00007fb671f7e300 R15: 0000000000022000 [ 718.239846][T15736] 18:39:29 executing program 3: r0 = socket(0xa, 0x1, 0x0) setsockopt$MRT_DEL_VIF(r0, 0x0, 0xcb, 0x0, 0x600) [ 718.287848][T15774] FAULT_INJECTION: forcing a failure. [ 718.287848][T15774] name failslab, interval 1, probability 0, space 0, times 0 [ 718.310361][T15774] CPU: 1 PID: 15774 Comm: syz-executor.2 Not tainted 5.15.74-syzkaller-04383-g7f2e600bf63a #0 [ 718.320869][T15774] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/11/2022 [ 718.330946][T15774] Call Trace: [ 718.334060][T15774] [ 718.336842][T15774] dump_stack_lvl+0x151/0x1b7 [ 718.341458][T15774] ? bfq_pos_tree_add_move+0x43e/0x43e [ 718.346750][T15774] dump_stack+0x15/0x17 [ 718.350914][T15774] should_fail+0x3c0/0x510 [ 718.355340][T15774] __should_failslab+0x9f/0xe0 [ 718.359939][T15774] should_failslab+0x9/0x20 [ 718.364289][T15774] kmem_cache_alloc+0x4f/0x2f0 [ 718.368883][T15774] ? anon_vma_fork+0x1b9/0x4f0 [ 718.373568][T15774] anon_vma_fork+0x1b9/0x4f0 [ 718.377993][T15774] dup_mmap+0x750/0xea0 [ 718.381987][T15774] ? __delayed_free_task+0x20/0x20 [ 718.386933][T15774] ? mm_init+0x807/0x960 [ 718.391021][T15774] dup_mm+0x91/0x330 [ 718.394919][T15774] copy_mm+0x108/0x1b0 [ 718.398824][T15774] copy_process+0x1295/0x3250 [ 718.403342][T15774] ? proc_fail_nth_write+0x213/0x290 [ 718.408463][T15774] ? proc_fail_nth_read+0x220/0x220 [ 718.413582][T15774] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 718.418527][T15774] ? vfs_write+0x9af/0x1050 [ 718.422868][T15774] ? vmacache_update+0xb7/0x120 [ 718.427641][T15774] kernel_clone+0x22d/0x990 [ 718.431986][T15774] ? file_end_write+0x1b0/0x1b0 [ 718.436675][T15774] ? __kasan_check_write+0x14/0x20 [ 718.441613][T15774] ? create_io_thread+0x1e0/0x1e0 [ 718.446472][T15774] ? __mutex_lock_slowpath+0x10/0x10 [ 718.451596][T15774] __x64_sys_clone+0x289/0x310 [ 718.456299][T15774] ? __do_sys_vfork+0x130/0x130 [ 718.461000][T15774] ? debug_smp_processor_id+0x17/0x20 [ 718.466281][T15774] do_syscall_64+0x44/0xd0 [ 718.470536][T15774] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 718.476264][T15774] RIP: 0033:0x7fb67320a5a9 [ 718.480650][T15774] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 718.500077][T15774] RSP: 002b:00007fb671f7e118 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 718.508322][T15774] RAX: ffffffffffffffda RBX: 00007fb67332af80 RCX: 00007fb67320a5a9 [ 718.516134][T15774] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000010000000 [ 718.523945][T15774] RBP: 00007fb671f7e1d0 R08: 0000000000000000 R09: 0000000000000000 18:39:29 executing program 2: syz_clone(0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 43) 18:39:29 executing program 3: r0 = socket(0xa, 0x1, 0x0) setsockopt$MRT_DEL_VIF(r0, 0x0, 0xcb, 0x0, 0x1100) 18:39:29 executing program 0: r0 = socket(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8982, &(0x7f0000000000)={'batadv_slave_1\x00'}) 18:39:29 executing program 4: socket(0x1d, 0x0, 0x10001) r0 = socket(0xa, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x28, 0x2, 0x0, 0x0) setsockopt$MRT_DEL_MFC_PROXY(r0, 0x0, 0xd3, &(0x7f0000000000)={@multicast1, @local, 0xffffffffffffffff, "a2d7bcb82f5a024db472c7b2223a058d5166c3bf6b29c6da36534ad37e84be4f", 0x8000, 0x5, 0x3, 0x5}, 0x3c) 18:39:29 executing program 1: r0 = socket(0x5, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x29, 0x2, 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(0xffffffffffffffff, 0x7704, 0x0) socket(0x5, 0x1, 0x0) (async) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x29, 0x2, 0x0, 0x0) (async) ioctl$ASHMEM_GET_SIZE(0xffffffffffffffff, 0x7704, 0x0) (async) 18:39:29 executing program 5: r0 = socket(0xa, 0x1, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x84009422, &(0x7f0000000000)={0x0, 0x0, {}, {0x0, @struct, 0x0}, {0x0, @struct}}) ioctl$BTRFS_IOC_GET_DEV_STATS(r0, 0xc4089434, &(0x7f0000000400)={r1, 0x1c00000, 0x111476b9ba301ebc, [0x3, 0x7841, 0x8, 0x401, 0x80000001], [0x8000000000000001, 0x6, 0x400, 0x1, 0x8000000000000000, 0xa31, 0xfffffffffffffff7, 0x9, 0x1, 0xffffffff, 0x95f, 0x2, 0x2, 0x2, 0xf06, 0xfbc7, 0x0, 0xfff, 0x6, 0xffff, 0x8, 0x4f13, 0x7, 0x5, 0x8000000000000001, 0x3ff, 0x0, 0x6, 0x9, 0x5, 0xdc, 0xffffffffffffffff, 0x7, 0xa59, 0x24000000, 0xffffffff, 0x40, 0x8, 0x4, 0x120, 0xffffffffffffffff, 0x2, 0x1ff, 0x20, 0x5, 0xa4, 0x9, 0xb6a3, 0x7, 0x405b, 0x6e, 0x8, 0x7fff, 0x0, 0x9f35b6e, 0x4, 0x7, 0x4, 0xffffffffffffff53, 0x8, 0x8000, 0x100000001, 0x101, 0x7f, 0x2, 0x9, 0x0, 0x8472, 0x401, 0x1, 0x6f8, 0x8000000000000001, 0xd0, 0xfffffffffffffffc, 0x4010000000000000, 0xff, 0x8000, 0x7fffffff, 0x5, 0x8, 0x80000001, 0x3bd, 0xfffffffeffffffff, 0x1acb, 0x4, 0x3, 0x0, 0x80000001, 0x8, 0x57b3, 0x7f, 0x451, 0x200, 0x9e0f, 0x5, 0xb1c, 0x8, 0xd814, 0x5, 0x9, 0x2, 0x501e6c20, 0x4, 0x6b5a, 0x6, 0xdb, 0x7, 0xc000000000000000, 0x9, 0xb71, 0x6, 0x0, 0x0, 0x3, 0x0, 0x0, 0xc0c, 0x80, 0x7fff, 0x2, 0x77]}) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x6, 0x2, 0x0, 0x0) socket(0xa, 0x1, 0x0) (async) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x84009422, &(0x7f0000000000)={0x0, 0x0, {}, {0x0, @struct}, {0x0, @struct}}) (async) ioctl$BTRFS_IOC_GET_DEV_STATS(r0, 0xc4089434, &(0x7f0000000400)={r1, 0x1c00000, 0x111476b9ba301ebc, [0x3, 0x7841, 0x8, 0x401, 0x80000001], [0x8000000000000001, 0x6, 0x400, 0x1, 0x8000000000000000, 0xa31, 0xfffffffffffffff7, 0x9, 0x1, 0xffffffff, 0x95f, 0x2, 0x2, 0x2, 0xf06, 0xfbc7, 0x0, 0xfff, 0x6, 0xffff, 0x8, 0x4f13, 0x7, 0x5, 0x8000000000000001, 0x3ff, 0x0, 0x6, 0x9, 0x5, 0xdc, 0xffffffffffffffff, 0x7, 0xa59, 0x24000000, 0xffffffff, 0x40, 0x8, 0x4, 0x120, 0xffffffffffffffff, 0x2, 0x1ff, 0x20, 0x5, 0xa4, 0x9, 0xb6a3, 0x7, 0x405b, 0x6e, 0x8, 0x7fff, 0x0, 0x9f35b6e, 0x4, 0x7, 0x4, 0xffffffffffffff53, 0x8, 0x8000, 0x100000001, 0x101, 0x7f, 0x2, 0x9, 0x0, 0x8472, 0x401, 0x1, 0x6f8, 0x8000000000000001, 0xd0, 0xfffffffffffffffc, 0x4010000000000000, 0xff, 0x8000, 0x7fffffff, 0x5, 0x8, 0x80000001, 0x3bd, 0xfffffffeffffffff, 0x1acb, 0x4, 0x3, 0x0, 0x80000001, 0x8, 0x57b3, 0x7f, 0x451, 0x200, 0x9e0f, 0x5, 0xb1c, 0x8, 0xd814, 0x5, 0x9, 0x2, 0x501e6c20, 0x4, 0x6b5a, 0x6, 0xdb, 0x7, 0xc000000000000000, 0x9, 0xb71, 0x6, 0x0, 0x0, 0x3, 0x0, 0x0, 0xc0c, 0x80, 0x7fff, 0x2, 0x77]}) (async) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x6, 0x2, 0x0, 0x0) (async) [ 718.531755][T15774] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 718.539565][T15774] R13: 00007ffe782f632f R14: 00007fb671f7e300 R15: 0000000000022000 [ 718.547480][T15774] [ 718.559821][T15785] FAULT_INJECTION: forcing a failure. [ 718.559821][T15785] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 718.574786][T15785] CPU: 1 PID: 15785 Comm: syz-executor.2 Not tainted 5.15.74-syzkaller-04383-g7f2e600bf63a #0 18:39:29 executing program 0: r0 = socket(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8983, &(0x7f0000000000)={'batadv_slave_1\x00'}) 18:39:29 executing program 3: r0 = socket(0xa, 0x1, 0x0) setsockopt$MRT_DEL_VIF(r0, 0x0, 0xcb, 0x0, 0x2900) 18:39:30 executing program 3: r0 = socket(0xa, 0x1, 0x0) setsockopt$MRT_DEL_VIF(r0, 0x0, 0xcb, 0x0, 0x8800) 18:39:30 executing program 3: r0 = socket(0xa, 0x1, 0x0) setsockopt$MRT_DEL_VIF(r0, 0x0, 0xcb, 0x0, 0xcb00) 18:39:30 executing program 1: r0 = dup(0xffffffffffffffff) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_VLAN(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, r1, 0x20, 0x70bd27, 0x25dfdbfd, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xfffffffd}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x40000800) r2 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$FIBMAP(r2, 0x1, &(0x7f0000000000)=0x1) socket(0x22, 0x2, 0xffffff04) socketpair(0x27, 0x3, 0x3f, &(0x7f0000000040)) connect$vsock_stream(r2, &(0x7f00000000c0)={0x28, 0x0, 0x0, @local}, 0x10) r3 = signalfd(0xffffffffffffffff, 0x0, 0x0) fcntl$F_SET_FILE_RW_HINT(r2, 0x40e, &(0x7f0000000080)=0x4) close(r3) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r3, 0x29, 0x2, 0x0, 0x0) 18:39:30 executing program 4: socket(0x1d, 0x0, 0x10001) r0 = socket(0xa, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x28, 0x2, 0x0, 0x0) (async) setsockopt$MRT_DEL_MFC_PROXY(r0, 0x0, 0xd3, &(0x7f0000000000)={@multicast1, @local, 0xffffffffffffffff, "a2d7bcb82f5a024db472c7b2223a058d5166c3bf6b29c6da36534ad37e84be4f", 0x8000, 0x5, 0x3, 0x5}, 0x3c) [ 718.584852][T15785] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/11/2022 [ 718.594763][T15785] Call Trace: [ 718.597870][T15785] [ 718.600646][T15785] dump_stack_lvl+0x151/0x1b7 [ 718.605163][T15785] ? bfq_pos_tree_add_move+0x43e/0x43e [ 718.610542][T15785] ? __kasan_check_write+0x14/0x20 [ 718.615490][T15785] ? __set_page_owner+0x2ee/0x310 [ 718.620348][T15785] dump_stack+0x15/0x17 [ 718.624344][T15785] should_fail+0x3c0/0x510 [ 718.628598][T15785] should_fail_alloc_page+0x58/0x70 [ 718.633630][T15785] __alloc_pages+0x1de/0x7c0 [ 718.638057][T15785] ? __count_vm_events+0x30/0x30 [ 718.642831][T15785] ? __count_vm_events+0x30/0x30 [ 718.647602][T15785] ? __kasan_check_write+0x14/0x20 [ 718.652551][T15785] ? _raw_spin_lock+0xa3/0x1b0 [ 718.657150][T15785] __pmd_alloc+0xb1/0x550 [ 718.661316][T15785] ? kmem_cache_alloc+0x189/0x2f0 [ 718.666186][T15785] ? anon_vma_fork+0x1b9/0x4f0 [ 718.670868][T15785] ? __pud_alloc+0x260/0x260 [ 718.675320][T15785] ? __pud_alloc+0x218/0x260 [ 718.676912][ T30] audit: type=1400 audit(1666895970.050:200): avc: denied { connect } for pid=15803 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 718.679715][T15785] ? do_handle_mm_fault+0x2370/0x2370 [ 718.704717][T15785] copy_page_range+0xd04/0x1090 [ 718.709485][T15785] ? pfn_valid+0x1e0/0x1e0 [ 718.713737][T15785] dup_mmap+0x99f/0xea0 [ 718.717815][T15785] ? __delayed_free_task+0x20/0x20 [ 718.722770][T15785] ? mm_init+0x807/0x960 [ 718.726850][T15785] dup_mm+0x91/0x330 [ 718.730573][T15785] copy_mm+0x108/0x1b0 [ 718.734478][T15785] copy_process+0x1295/0x3250 [ 718.738992][T15785] ? proc_fail_nth_write+0x213/0x290 [ 718.744142][T15785] ? proc_fail_nth_read+0x220/0x220 [ 718.749320][T15785] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 718.754270][T15785] ? vfs_write+0x9af/0x1050 [ 718.758608][T15785] ? vmacache_update+0xb7/0x120 [ 718.763295][T15785] kernel_clone+0x22d/0x990 [ 718.767632][T15785] ? file_end_write+0x1b0/0x1b0 [ 718.772321][T15785] ? __kasan_check_write+0x14/0x20 [ 718.777266][T15785] ? create_io_thread+0x1e0/0x1e0 [ 718.782128][T15785] ? __mutex_lock_slowpath+0x10/0x10 [ 718.787252][T15785] __x64_sys_clone+0x289/0x310 [ 718.791851][T15785] ? __do_sys_vfork+0x130/0x130 [ 718.796536][T15785] ? debug_smp_processor_id+0x17/0x20 [ 718.801784][T15785] do_syscall_64+0x44/0xd0 [ 718.806012][T15785] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 718.811737][T15785] RIP: 0033:0x7fb67320a5a9 [ 718.815980][T15785] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 18:39:30 executing program 2: syz_clone(0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 44) 18:39:30 executing program 4: socket(0x1d, 0x0, 0x10001) r0 = socket(0xa, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x28, 0x2, 0x0, 0x0) setsockopt$MRT_DEL_MFC_PROXY(r0, 0x0, 0xd3, &(0x7f0000000000)={@multicast1, @local, 0xffffffffffffffff, "a2d7bcb82f5a024db472c7b2223a058d5166c3bf6b29c6da36534ad37e84be4f", 0x8000, 0x5, 0x3, 0x5}, 0x3c) socket(0x1d, 0x0, 0x10001) (async) socket(0xa, 0x1, 0x0) (async) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x28, 0x2, 0x0, 0x0) (async) setsockopt$MRT_DEL_MFC_PROXY(r0, 0x0, 0xd3, &(0x7f0000000000)={@multicast1, @local, 0xffffffffffffffff, "a2d7bcb82f5a024db472c7b2223a058d5166c3bf6b29c6da36534ad37e84be4f", 0x8000, 0x5, 0x3, 0x5}, 0x3c) (async) 18:39:30 executing program 0: r0 = socket(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8990, &(0x7f0000000000)={'batadv_slave_1\x00'}) 18:39:30 executing program 5: r0 = socket(0xa, 0x1, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x84009422, &(0x7f0000000000)={0x0, 0x0, {}, {0x0, @struct, 0x0}, {0x0, @struct}}) ioctl$BTRFS_IOC_GET_DEV_STATS(r0, 0xc4089434, &(0x7f0000000400)={r1, 0x1c00000, 0x111476b9ba301ebc, [0x3, 0x7841, 0x8, 0x401, 0x80000001], [0x8000000000000001, 0x6, 0x400, 0x1, 0x8000000000000000, 0xa31, 0xfffffffffffffff7, 0x9, 0x1, 0xffffffff, 0x95f, 0x2, 0x2, 0x2, 0xf06, 0xfbc7, 0x0, 0xfff, 0x6, 0xffff, 0x8, 0x4f13, 0x7, 0x5, 0x8000000000000001, 0x3ff, 0x0, 0x6, 0x9, 0x5, 0xdc, 0xffffffffffffffff, 0x7, 0xa59, 0x24000000, 0xffffffff, 0x40, 0x8, 0x4, 0x120, 0xffffffffffffffff, 0x2, 0x1ff, 0x20, 0x5, 0xa4, 0x9, 0xb6a3, 0x7, 0x405b, 0x6e, 0x8, 0x7fff, 0x0, 0x9f35b6e, 0x4, 0x7, 0x4, 0xffffffffffffff53, 0x8, 0x8000, 0x100000001, 0x101, 0x7f, 0x2, 0x9, 0x0, 0x8472, 0x401, 0x1, 0x6f8, 0x8000000000000001, 0xd0, 0xfffffffffffffffc, 0x4010000000000000, 0xff, 0x8000, 0x7fffffff, 0x5, 0x8, 0x80000001, 0x3bd, 0xfffffffeffffffff, 0x1acb, 0x4, 0x3, 0x0, 0x80000001, 0x8, 0x57b3, 0x7f, 0x451, 0x200, 0x9e0f, 0x5, 0xb1c, 0x8, 0xd814, 0x5, 0x9, 0x2, 0x501e6c20, 0x4, 0x6b5a, 0x6, 0xdb, 0x7, 0xc000000000000000, 0x9, 0xb71, 0x6, 0x0, 0x0, 0x3, 0x0, 0x0, 0xc0c, 0x80, 0x7fff, 0x2, 0x77]}) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x6, 0x2, 0x0, 0x0) socket(0xa, 0x1, 0x0) (async) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x84009422, &(0x7f0000000000)={0x0, 0x0, {}, {0x0, @struct}, {0x0, @struct}}) (async) ioctl$BTRFS_IOC_GET_DEV_STATS(r0, 0xc4089434, &(0x7f0000000400)={r1, 0x1c00000, 0x111476b9ba301ebc, [0x3, 0x7841, 0x8, 0x401, 0x80000001], [0x8000000000000001, 0x6, 0x400, 0x1, 0x8000000000000000, 0xa31, 0xfffffffffffffff7, 0x9, 0x1, 0xffffffff, 0x95f, 0x2, 0x2, 0x2, 0xf06, 0xfbc7, 0x0, 0xfff, 0x6, 0xffff, 0x8, 0x4f13, 0x7, 0x5, 0x8000000000000001, 0x3ff, 0x0, 0x6, 0x9, 0x5, 0xdc, 0xffffffffffffffff, 0x7, 0xa59, 0x24000000, 0xffffffff, 0x40, 0x8, 0x4, 0x120, 0xffffffffffffffff, 0x2, 0x1ff, 0x20, 0x5, 0xa4, 0x9, 0xb6a3, 0x7, 0x405b, 0x6e, 0x8, 0x7fff, 0x0, 0x9f35b6e, 0x4, 0x7, 0x4, 0xffffffffffffff53, 0x8, 0x8000, 0x100000001, 0x101, 0x7f, 0x2, 0x9, 0x0, 0x8472, 0x401, 0x1, 0x6f8, 0x8000000000000001, 0xd0, 0xfffffffffffffffc, 0x4010000000000000, 0xff, 0x8000, 0x7fffffff, 0x5, 0x8, 0x80000001, 0x3bd, 0xfffffffeffffffff, 0x1acb, 0x4, 0x3, 0x0, 0x80000001, 0x8, 0x57b3, 0x7f, 0x451, 0x200, 0x9e0f, 0x5, 0xb1c, 0x8, 0xd814, 0x5, 0x9, 0x2, 0x501e6c20, 0x4, 0x6b5a, 0x6, 0xdb, 0x7, 0xc000000000000000, 0x9, 0xb71, 0x6, 0x0, 0x0, 0x3, 0x0, 0x0, 0xc0c, 0x80, 0x7fff, 0x2, 0x77]}) (async) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x6, 0x2, 0x0, 0x0) (async) 18:39:30 executing program 1: r0 = dup(0xffffffffffffffff) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_VLAN(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, r1, 0x20, 0x70bd27, 0x25dfdbfd, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xfffffffd}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x40000800) r2 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$FIBMAP(r2, 0x1, &(0x7f0000000000)=0x1) socket(0x22, 0x2, 0xffffff04) socketpair(0x27, 0x3, 0x3f, &(0x7f0000000040)) connect$vsock_stream(r2, &(0x7f00000000c0)={0x28, 0x0, 0x0, @local}, 0x10) r3 = signalfd(0xffffffffffffffff, 0x0, 0x0) fcntl$F_SET_FILE_RW_HINT(r2, 0x40e, &(0x7f0000000080)=0x4) close(r3) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r3, 0x29, 0x2, 0x0, 0x0) dup(0xffffffffffffffff) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000140), 0xffffffffffffffff) (async) sendmsg$BATADV_CMD_GET_VLAN(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, r1, 0x20, 0x70bd27, 0x25dfdbfd, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xfffffffd}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x40000800) (async) socket$vsock_stream(0x28, 0x1, 0x0) (async) ioctl$FIBMAP(r2, 0x1, &(0x7f0000000000)=0x1) (async) socket(0x22, 0x2, 0xffffff04) (async) socketpair(0x27, 0x3, 0x3f, &(0x7f0000000040)) (async) connect$vsock_stream(r2, &(0x7f00000000c0)={0x28, 0x0, 0x0, @local}, 0x10) (async) signalfd(0xffffffffffffffff, 0x0, 0x0) (async) fcntl$F_SET_FILE_RW_HINT(r2, 0x40e, &(0x7f0000000080)=0x4) (async) close(r3) (async) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r3, 0x29, 0x2, 0x0, 0x0) (async) 18:39:30 executing program 3: r0 = socket(0xa, 0x1, 0x0) setsockopt$MRT_DEL_VIF(r0, 0x0, 0xcb, 0x0, 0x1000000) [ 718.835420][T15785] RSP: 002b:00007fb671f7e118 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 718.843752][T15785] RAX: ffffffffffffffda RBX: 00007fb67332af80 RCX: 00007fb67320a5a9 [ 718.851564][T15785] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000010000000 [ 718.859375][T15785] RBP: 00007fb671f7e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 718.867190][T15785] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 718.875009][T15785] R13: 00007ffe782f632f R14: 00007fb671f7e300 R15: 0000000000022000 [ 718.882819][T15785] 18:39:30 executing program 3: r0 = socket(0xa, 0x1, 0x0) setsockopt$MRT_DEL_VIF(r0, 0x0, 0xcb, 0x0, 0x6000000) 18:39:30 executing program 4: r0 = socket(0xa, 0x1, 0x1000) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x28, 0x2, 0x0, 0x0) ioctl$BTRFS_IOC_WAIT_SYNC(r0, 0x40089416, &(0x7f0000000080)) r1 = signalfd(0xffffffffffffffff, 0x0, 0x0) close(r1) accept4$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10, 0x180800) r2 = socket$inet_udp(0x2, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000004, 0x10, r2, 0x0) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r2, 0x4018f50b, &(0x7f0000000100)={0x0, 0x7, 0x81}) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) fcntl$F_SET_FILE_RW_HINT(r3, 0x40e, &(0x7f00000000c0)=0x3) accept$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000140)=0xfffffffffffffea3) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r1, 0x28, 0x1, &(0x7f0000000000)=0x8, 0x8) 18:39:30 executing program 0: r0 = socket(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8991, &(0x7f0000000000)={'batadv_slave_1\x00'}) 18:39:30 executing program 1: r0 = dup(0xffffffffffffffff) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_VLAN(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, r1, 0x20, 0x70bd27, 0x25dfdbfd, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xfffffffd}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x40000800) (async) r2 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$FIBMAP(r2, 0x1, &(0x7f0000000000)=0x1) (async) socket(0x22, 0x2, 0xffffff04) socketpair(0x27, 0x3, 0x3f, &(0x7f0000000040)) (async) connect$vsock_stream(r2, &(0x7f00000000c0)={0x28, 0x0, 0x0, @local}, 0x10) r3 = signalfd(0xffffffffffffffff, 0x0, 0x0) fcntl$F_SET_FILE_RW_HINT(r2, 0x40e, &(0x7f0000000080)=0x4) (async) close(r3) (async) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r3, 0x29, 0x2, 0x0, 0x0) 18:39:30 executing program 5: r0 = socket(0xa, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x6, 0x2, 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) [ 718.897007][T15814] FAULT_INJECTION: forcing a failure. [ 718.897007][T15814] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 718.921890][T15814] CPU: 1 PID: 15814 Comm: syz-executor.2 Not tainted 5.15.74-syzkaller-04383-g7f2e600bf63a #0 [ 718.931967][T15814] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/11/2022 [ 718.941865][T15814] Call Trace: 18:39:30 executing program 3: r0 = socket(0xa, 0x1, 0x0) setsockopt$MRT_DEL_VIF(r0, 0x0, 0xcb, 0x0, 0x11000000) [ 718.945167][T15814] [ 718.948040][T15814] dump_stack_lvl+0x151/0x1b7 [ 718.952560][T15814] ? bfq_pos_tree_add_move+0x43e/0x43e [ 718.958036][T15814] dump_stack+0x15/0x17 [ 718.962001][T15814] should_fail+0x3c0/0x510 [ 718.966253][T15814] should_fail_alloc_page+0x58/0x70 [ 718.971382][T15814] __alloc_pages+0x1de/0x7c0 [ 718.975797][T15814] ? __count_vm_events+0x30/0x30 [ 718.980865][T15814] ? dup_mm+0x91/0x330 [ 718.984745][T15814] ? copy_mm+0x108/0x1b0 [ 718.988824][T15814] ? copy_process+0x1295/0x3250 [ 718.993604][T15814] ? kernel_clone+0x22d/0x990 [ 718.998113][T15814] ? __x64_sys_clone+0x289/0x310 [ 719.002989][T15814] pte_alloc_one+0x73/0x1b0 [ 719.007316][T15814] ? pfn_modify_allowed+0x2e0/0x2e0 [ 719.012350][T15814] ? __kasan_check_write+0x14/0x20 [ 719.017296][T15814] ? __set_page_owner+0x2ee/0x310 [ 719.022249][T15814] __pte_alloc+0x86/0x350 [ 719.026410][T15814] ? post_alloc_hook+0x1ab/0x1b0 [ 719.031186][T15814] ? free_pgtables+0x210/0x210 [ 719.035779][T15814] ? get_page_from_freelist+0x38b/0x400 [ 719.041163][T15814] copy_pte_range+0x1b1f/0x20b0 [ 719.046010][T15814] ? __kunmap_atomic+0x80/0x80 [ 719.050597][T15814] ? __pud_alloc+0x260/0x260 [ 719.055197][T15814] ? __pud_alloc+0x218/0x260 [ 719.059622][T15814] ? do_handle_mm_fault+0x2370/0x2370 [ 719.064831][T15814] copy_page_range+0xc1e/0x1090 [ 719.069526][T15814] ? pfn_valid+0x1e0/0x1e0 [ 719.073776][T15814] dup_mmap+0x99f/0xea0 [ 719.077771][T15814] ? __delayed_free_task+0x20/0x20 [ 719.082707][T15814] ? mm_init+0x807/0x960 [ 719.086800][T15814] dup_mm+0x91/0x330 [ 719.090537][T15814] copy_mm+0x108/0x1b0 [ 719.094516][T15814] copy_process+0x1295/0x3250 [ 719.099052][T15814] ? proc_fail_nth_write+0x213/0x290 [ 719.104147][T15814] ? proc_fail_nth_read+0x220/0x220 [ 719.109269][T15814] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 719.114215][T15814] ? vfs_write+0x9af/0x1050 [ 719.118557][T15814] ? vmacache_update+0xb7/0x120 [ 719.123243][T15814] kernel_clone+0x22d/0x990 [ 719.127584][T15814] ? file_end_write+0x1b0/0x1b0 [ 719.132276][T15814] ? __kasan_check_write+0x14/0x20 [ 719.137216][T15814] ? create_io_thread+0x1e0/0x1e0 [ 719.142076][T15814] ? __mutex_lock_slowpath+0x10/0x10 [ 719.147198][T15814] __x64_sys_clone+0x289/0x310 [ 719.151797][T15814] ? __do_sys_vfork+0x130/0x130 [ 719.156596][T15814] ? debug_smp_processor_id+0x17/0x20 [ 719.161800][T15814] do_syscall_64+0x44/0xd0 [ 719.166082][T15814] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 719.171790][T15814] RIP: 0033:0x7fb67320a5a9 [ 719.176037][T15814] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 18:39:30 executing program 2: syz_clone(0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 45) 18:39:30 executing program 4: r0 = socket(0xa, 0x1, 0x1000) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x28, 0x2, 0x0, 0x0) (async, rerun: 32) ioctl$BTRFS_IOC_WAIT_SYNC(r0, 0x40089416, &(0x7f0000000080)) (async, rerun: 32) r1 = signalfd(0xffffffffffffffff, 0x0, 0x0) close(r1) (async, rerun: 64) accept4$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10, 0x180800) (async, rerun: 64) r2 = socket$inet_udp(0x2, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000004, 0x10, r2, 0x0) (async, rerun: 64) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r2, 0x4018f50b, &(0x7f0000000100)={0x0, 0x7, 0x81}) (rerun: 64) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) fcntl$F_SET_FILE_RW_HINT(r3, 0x40e, &(0x7f00000000c0)=0x3) (async) accept$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000140)=0xfffffffffffffea3) (async) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r1, 0x28, 0x1, &(0x7f0000000000)=0x8, 0x8) 18:39:30 executing program 0: r0 = socket(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8992, &(0x7f0000000000)={'batadv_slave_1\x00'}) 18:39:30 executing program 3: r0 = socket(0xa, 0x1, 0x0) setsockopt$MRT_DEL_VIF(r0, 0x0, 0xcb, 0x0, 0x29000000) 18:39:30 executing program 1: r0 = socket(0xa, 0x1, 0x0) setsockopt$bt_BT_SNDMTU(r0, 0x112, 0xc, &(0x7f0000000000)=0x7, 0x2) r1 = signalfd(0xffffffffffffffff, 0x0, 0x0) close(r1) ioctl$F2FS_IOC_WRITE_CHECKPOINT(r1, 0xf507, 0x0) r2 = pidfd_getfd(r1, r0, 0x0) getsockopt$bt_BT_DEFER_SETUP(r2, 0x112, 0x7, &(0x7f0000000040), &(0x7f0000000080)=0x4) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r2, 0x29, 0x2, 0x0, 0x0) 18:39:30 executing program 5: r0 = socket(0xa, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x6, 0x2, 0x0, 0x0) (async, rerun: 64) socket$packet(0x11, 0x2, 0x300) (rerun: 64) 18:39:30 executing program 3: r0 = socket(0xa, 0x1, 0x0) setsockopt$MRT_DEL_VIF(r0, 0x0, 0xcb, 0x0, 0x88000000) 18:39:30 executing program 0: r0 = socket(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8993, &(0x7f0000000000)={'batadv_slave_1\x00'}) [ 719.195485][T15814] RSP: 002b:00007fb671f7e118 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 719.203728][T15814] RAX: ffffffffffffffda RBX: 00007fb67332af80 RCX: 00007fb67320a5a9 [ 719.211796][T15814] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000010000000 [ 719.219696][T15814] RBP: 00007fb671f7e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 719.227506][T15814] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 719.235320][T15814] R13: 00007ffe782f632f R14: 00007fb671f7e300 R15: 0000000000022000 [ 719.243150][T15814] 18:39:30 executing program 1: r0 = socket(0xa, 0x1, 0x0) setsockopt$bt_BT_SNDMTU(r0, 0x112, 0xc, &(0x7f0000000000)=0x7, 0x2) (async) r1 = signalfd(0xffffffffffffffff, 0x0, 0x0) close(r1) (async) ioctl$F2FS_IOC_WRITE_CHECKPOINT(r1, 0xf507, 0x0) (async) r2 = pidfd_getfd(r1, r0, 0x0) getsockopt$bt_BT_DEFER_SETUP(r2, 0x112, 0x7, &(0x7f0000000040), &(0x7f0000000080)=0x4) (async) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r2, 0x29, 0x2, 0x0, 0x0) 18:39:30 executing program 4: r0 = socket(0xa, 0x1, 0x1000) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x28, 0x2, 0x0, 0x0) (async) ioctl$BTRFS_IOC_WAIT_SYNC(r0, 0x40089416, &(0x7f0000000080)) (async) r1 = signalfd(0xffffffffffffffff, 0x0, 0x0) close(r1) (async) accept4$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10, 0x180800) (async) r2 = socket$inet_udp(0x2, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000004, 0x10, r2, 0x0) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r2, 0x4018f50b, &(0x7f0000000100)={0x0, 0x7, 0x81}) (async) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) fcntl$F_SET_FILE_RW_HINT(r3, 0x40e, &(0x7f00000000c0)=0x3) (async) accept$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000140)=0xfffffffffffffea3) (async) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r1, 0x28, 0x1, &(0x7f0000000000)=0x8, 0x8) 18:39:30 executing program 3: r0 = socket(0xa, 0x1, 0x0) setsockopt$MRT_DEL_VIF(r0, 0x0, 0xcb, 0x0, 0xcb000000) 18:39:30 executing program 4: r0 = socket(0x2b, 0x2, 0x80000000) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x28, 0x2, 0x0, 0x0) r1 = signalfd(0xffffffffffffffff, 0x0, 0x0) close(r1) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r1, 0x111, 0x5, 0x2, 0x4) fstatfs(r0, &(0x7f0000000240)=""/199) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x61de5e24, 0x4) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = signalfd(0xffffffffffffffff, 0x0, 0x0) close(r3) ioctl$PPPIOCGL2TPSTATS(r3, 0x80487436, &(0x7f0000000340)="03bfc414201336935e063224215dcb7d466637981d1bb53dbac8da6309cfb5cf03328ff9dca88f5f4795ff4a59b87894923afbcab6cce75b6be6055100c2dd141f61844d482c52823910b5487cf813cc02357ad7c6313ccc4e7e58298ae361ca793866330d9758f817ee938053cf422572c58ff435837327a48619518247c6cccce60002d8abaaabdcde97a6d4dfeaa6bdc351dd08e582bf79cd343af56cd4285505000000000000") mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000004, 0x10, r2, 0x0) pread64(r0, &(0x7f0000000400)=""/222, 0xde, 0x5) ioctl$VFAT_IOCTL_READDIR_BOTH(r2, 0x82307201, &(0x7f0000000000)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) [ 719.277703][T15870] FAULT_INJECTION: forcing a failure. [ 719.277703][T15870] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 719.297148][T15870] CPU: 1 PID: 15870 Comm: syz-executor.2 Not tainted 5.15.74-syzkaller-04383-g7f2e600bf63a #0 [ 719.307228][T15870] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/11/2022 [ 719.317301][T15870] Call Trace: [ 719.320514][T15870] [ 719.323369][T15870] dump_stack_lvl+0x151/0x1b7 [ 719.328074][T15870] ? bfq_pos_tree_add_move+0x43e/0x43e [ 719.333351][T15870] dump_stack+0x15/0x17 [ 719.337342][T15870] should_fail+0x3c0/0x510 [ 719.341598][T15870] should_fail_alloc_page+0x58/0x70 [ 719.346624][T15870] __alloc_pages+0x1de/0x7c0 [ 719.351062][T15870] ? __count_vm_events+0x30/0x30 [ 719.355834][T15870] ? __this_cpu_preempt_check+0x13/0x20 [ 719.361816][T15870] ? __mod_node_page_state+0xac/0xf0 [ 719.367026][T15870] pte_alloc_one+0x73/0x1b0 [ 719.371368][T15870] ? pfn_modify_allowed+0x2e0/0x2e0 [ 719.376537][T15870] __pte_alloc+0x86/0x350 [ 719.380685][T15870] ? free_pgtables+0x210/0x210 [ 719.385279][T15870] ? _raw_spin_lock+0xa3/0x1b0 [ 719.389978][T15870] ? _raw_spin_trylock_bh+0x1d0/0x1d0 [ 719.395176][T15870] ? __kernel_text_address+0x9a/0x110 [ 719.400397][T15870] copy_pte_range+0x1b1f/0x20b0 [ 719.405075][T15870] ? __kunmap_atomic+0x80/0x80 [ 719.409677][T15870] ? __kasan_slab_alloc+0xc4/0xe0 [ 719.414533][T15870] ? __kasan_slab_alloc+0xb2/0xe0 [ 719.419389][T15870] ? kmem_cache_alloc+0x189/0x2f0 [ 719.424248][T15870] ? vm_area_dup+0x26/0x1d0 [ 719.428588][T15870] ? dup_mmap+0x6b8/0xea0 [ 719.432755][T15870] ? dup_mm+0x91/0x330 [ 719.436662][T15870] ? copy_mm+0x108/0x1b0 [ 719.440965][T15870] ? copy_process+0x1295/0x3250 [ 719.445645][T15870] ? kernel_clone+0x22d/0x990 [ 719.450149][T15870] ? __x64_sys_clone+0x289/0x310 [ 719.454927][T15870] ? do_syscall_64+0x44/0xd0 [ 719.459458][T15870] ? entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 719.465368][T15870] copy_page_range+0xc1e/0x1090 [ 719.470078][T15870] ? pfn_valid+0x1e0/0x1e0 [ 719.474302][T15870] dup_mmap+0x99f/0xea0 [ 719.478294][T15870] ? __delayed_free_task+0x20/0x20 [ 719.483239][T15870] ? mm_init+0x807/0x960 [ 719.487323][T15870] dup_mm+0x91/0x330 [ 719.491139][T15870] copy_mm+0x108/0x1b0 [ 719.495065][T15870] copy_process+0x1295/0x3250 [ 719.499559][T15870] ? proc_fail_nth_write+0x213/0x290 [ 719.504694][T15870] ? proc_fail_nth_read+0x220/0x220 [ 719.509716][T15870] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 719.514663][T15870] ? vfs_write+0x9af/0x1050 [ 719.519119][T15870] ? vmacache_update+0xb7/0x120 [ 719.523871][T15870] kernel_clone+0x22d/0x990 [ 719.528200][T15870] ? file_end_write+0x1b0/0x1b0 [ 719.532904][T15870] ? __kasan_check_write+0x14/0x20 [ 719.537833][T15870] ? create_io_thread+0x1e0/0x1e0 [ 719.542693][T15870] ? __mutex_lock_slowpath+0x10/0x10 [ 719.547926][T15870] __x64_sys_clone+0x289/0x310 [ 719.552503][T15870] ? __do_sys_vfork+0x130/0x130 [ 719.557331][T15870] ? debug_smp_processor_id+0x17/0x20 [ 719.562508][T15870] do_syscall_64+0x44/0xd0 [ 719.566766][T15870] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 719.572501][T15870] RIP: 0033:0x7fb67320a5a9 [ 719.576744][T15870] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 719.596272][T15870] RSP: 002b:00007fb671f7e118 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 719.604518][T15870] RAX: ffffffffffffffda RBX: 00007fb67332af80 RCX: 00007fb67320a5a9 [ 719.612416][T15870] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000010000000 [ 719.620319][T15870] RBP: 00007fb671f7e1d0 R08: 0000000000000000 R09: 0000000000000000 18:39:31 executing program 2: syz_clone(0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 46) 18:39:31 executing program 4: r0 = socket(0x2b, 0x2, 0x80000000) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x28, 0x2, 0x0, 0x0) r1 = signalfd(0xffffffffffffffff, 0x0, 0x0) close(r1) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r1, 0x111, 0x5, 0x2, 0x4) (async, rerun: 32) fstatfs(r0, &(0x7f0000000240)=""/199) (async, rerun: 32) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x61de5e24, 0x4) r2 = socket$inet_udp(0x2, 0x2, 0x0) (async) r3 = signalfd(0xffffffffffffffff, 0x0, 0x0) close(r3) (async) ioctl$PPPIOCGL2TPSTATS(r3, 0x80487436, &(0x7f0000000340)="03bfc414201336935e063224215dcb7d466637981d1bb53dbac8da6309cfb5cf03328ff9dca88f5f4795ff4a59b87894923afbcab6cce75b6be6055100c2dd141f61844d482c52823910b5487cf813cc02357ad7c6313ccc4e7e58298ae361ca793866330d9758f817ee938053cf422572c58ff435837327a48619518247c6cccce60002d8abaaabdcde97a6d4dfeaa6bdc351dd08e582bf79cd343af56cd4285505000000000000") (async) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000004, 0x10, r2, 0x0) pread64(r0, &(0x7f0000000400)=""/222, 0xde, 0x5) (async) ioctl$VFAT_IOCTL_READDIR_BOTH(r2, 0x82307201, &(0x7f0000000000)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) 18:39:31 executing program 3: r0 = socket(0xa, 0x1, 0x0) setsockopt$MRT_DEL_VIF(r0, 0x0, 0xcb, 0x0, 0x100000000000000) 18:39:31 executing program 1: r0 = socket(0xa, 0x1, 0x0) setsockopt$bt_BT_SNDMTU(r0, 0x112, 0xc, &(0x7f0000000000)=0x7, 0x2) (async) r1 = signalfd(0xffffffffffffffff, 0x0, 0x0) close(r1) ioctl$F2FS_IOC_WRITE_CHECKPOINT(r1, 0xf507, 0x0) (async, rerun: 64) r2 = pidfd_getfd(r1, r0, 0x0) (rerun: 64) getsockopt$bt_BT_DEFER_SETUP(r2, 0x112, 0x7, &(0x7f0000000040), &(0x7f0000000080)=0x4) (async) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r2, 0x29, 0x2, 0x0, 0x0) 18:39:31 executing program 0: r0 = socket(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8994, &(0x7f0000000000)={'batadv_slave_1\x00'}) 18:39:31 executing program 5: r0 = socket(0xa, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x6, 0x2, 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) socket(0xa, 0x1, 0x0) (async) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x6, 0x2, 0x0, 0x0) (async) socket$packet(0x11, 0x2, 0x300) (async) 18:39:31 executing program 3: r0 = socket(0xa, 0x1, 0x0) setsockopt$MRT_DEL_VIF(r0, 0x0, 0xcb, 0x0, 0x600000000000000) 18:39:31 executing program 0: r0 = socket(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8995, &(0x7f0000000000)={'batadv_slave_1\x00'}) 18:39:31 executing program 5: r0 = socket(0x20, 0xa, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x6, 0x2, 0x0, 0x0) 18:39:31 executing program 4: r0 = socket(0x2b, 0x2, 0x80000000) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x28, 0x2, 0x0, 0x0) r1 = signalfd(0xffffffffffffffff, 0x0, 0x0) close(r1) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r1, 0x111, 0x5, 0x2, 0x4) (async, rerun: 32) fstatfs(r0, &(0x7f0000000240)=""/199) (rerun: 32) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x61de5e24, 0x4) r2 = socket$inet_udp(0x2, 0x2, 0x0) (async, rerun: 32) r3 = signalfd(0xffffffffffffffff, 0x0, 0x0) (rerun: 32) close(r3) (async) ioctl$PPPIOCGL2TPSTATS(r3, 0x80487436, &(0x7f0000000340)="03bfc414201336935e063224215dcb7d466637981d1bb53dbac8da6309cfb5cf03328ff9dca88f5f4795ff4a59b87894923afbcab6cce75b6be6055100c2dd141f61844d482c52823910b5487cf813cc02357ad7c6313ccc4e7e58298ae361ca793866330d9758f817ee938053cf422572c58ff435837327a48619518247c6cccce60002d8abaaabdcde97a6d4dfeaa6bdc351dd08e582bf79cd343af56cd4285505000000000000") (async) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000004, 0x10, r2, 0x0) (async) pread64(r0, &(0x7f0000000400)=""/222, 0xde, 0x5) (async) ioctl$VFAT_IOCTL_READDIR_BOTH(r2, 0x82307201, &(0x7f0000000000)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) 18:39:31 executing program 1: socket(0x25, 0x4, 0x0) [ 719.628196][T15870] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 719.635956][T15870] R13: 00007ffe782f632f R14: 00007fb671f7e300 R15: 0000000000022000 [ 719.643757][T15870] [ 719.688384][T15908] FAULT_INJECTION: forcing a failure. [ 719.688384][T15908] name failslab, interval 1, probability 0, space 0, times 0 [ 719.704573][T15908] CPU: 1 PID: 15908 Comm: syz-executor.2 Not tainted 5.15.74-syzkaller-04383-g7f2e600bf63a #0 [ 719.704746][ T30] audit: type=1400 audit(1666895971.110:201): avc: denied { create } for pid=15909 comm="syz-executor.5" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=iucv_socket permissive=1 18:39:31 executing program 1: socket(0x25, 0x4, 0x0) socket(0x25, 0x4, 0x0) (async) [ 719.714641][T15908] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/11/2022 [ 719.714653][T15908] Call Trace: [ 719.714659][T15908] [ 719.714665][T15908] dump_stack_lvl+0x151/0x1b7 [ 719.755091][T15908] ? bfq_pos_tree_add_move+0x43e/0x43e [ 719.760472][T15908] dump_stack+0x15/0x17 [ 719.764461][T15908] should_fail+0x3c0/0x510 [ 719.768811][T15908] __should_failslab+0x9f/0xe0 [ 719.773401][T15908] should_failslab+0x9/0x20 [ 719.777743][T15908] kmem_cache_alloc+0x4f/0x2f0 [ 719.782437][T15908] ? vm_area_dup+0x26/0x1d0 [ 719.786775][T15908] vm_area_dup+0x26/0x1d0 [ 719.790969][T15908] dup_mmap+0x6b8/0xea0 [ 719.794926][T15908] ? __delayed_free_task+0x20/0x20 [ 719.799870][T15908] ? mm_init+0x807/0x960 [ 719.804005][T15908] dup_mm+0x91/0x330 [ 719.807681][T15908] copy_mm+0x108/0x1b0 [ 719.811674][T15908] copy_process+0x1295/0x3250 [ 719.816186][T15908] ? proc_fail_nth_write+0x213/0x290 [ 719.821307][T15908] ? proc_fail_nth_read+0x220/0x220 [ 719.826344][T15908] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 719.831288][T15908] ? vfs_write+0x9af/0x1050 [ 719.835634][T15908] ? vmacache_update+0xb7/0x120 [ 719.840317][T15908] kernel_clone+0x22d/0x990 [ 719.844655][T15908] ? file_end_write+0x1b0/0x1b0 [ 719.849343][T15908] ? __kasan_check_write+0x14/0x20 [ 719.854290][T15908] ? create_io_thread+0x1e0/0x1e0 [ 719.859276][T15908] ? __mutex_lock_slowpath+0x10/0x10 [ 719.864397][T15908] __x64_sys_clone+0x289/0x310 [ 719.868998][T15908] ? __do_sys_vfork+0x130/0x130 [ 719.873848][T15908] ? debug_smp_processor_id+0x17/0x20 [ 719.879142][T15908] do_syscall_64+0x44/0xd0 [ 719.883402][T15908] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 719.889370][T15908] RIP: 0033:0x7fb67320a5a9 [ 719.893626][T15908] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 719.913065][T15908] RSP: 002b:00007fb671f7e118 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 719.921305][T15908] RAX: ffffffffffffffda RBX: 00007fb67332af80 RCX: 00007fb67320a5a9 [ 719.929116][T15908] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000010000000 18:39:31 executing program 2: syz_clone(0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 47) 18:39:31 executing program 1: socket(0x25, 0x4, 0x0) 18:39:31 executing program 4: r0 = socket(0xa, 0x1, 0x0) setsockopt$bt_BT_SNDMTU(r0, 0x112, 0xc, &(0x7f0000000000)=0x1, 0x2) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x28, 0x2, 0x0, 0x0) 18:39:31 executing program 3: r0 = socket(0xa, 0x1, 0x0) setsockopt$MRT_DEL_VIF(r0, 0x0, 0xcb, 0x0, 0x1100000000000000) 18:39:31 executing program 5: r0 = socket(0x20, 0xa, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x6, 0x2, 0x0, 0x0) 18:39:31 executing program 0: r0 = socket(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x89a0, &(0x7f0000000000)={'batadv_slave_1\x00'}) 18:39:31 executing program 3: r0 = socket(0xa, 0x1, 0x0) setsockopt$MRT_DEL_VIF(r0, 0x0, 0xcb, 0x0, 0x2900000000000000) [ 719.936931][T15908] RBP: 00007fb671f7e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 719.944746][T15908] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 719.952553][T15908] R13: 00007ffe782f632f R14: 00007fb671f7e300 R15: 0000000000022000 [ 719.960371][T15908] 18:39:31 executing program 5: r0 = socket(0x20, 0xa, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x6, 0x2, 0x0, 0x0) 18:39:31 executing program 4: r0 = socket(0xa, 0x1, 0x0) setsockopt$bt_BT_SNDMTU(r0, 0x112, 0xc, &(0x7f0000000000)=0x1, 0x2) (async) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x28, 0x2, 0x0, 0x0) 18:39:31 executing program 3: r0 = socket(0xa, 0x1, 0x0) setsockopt$MRT_DEL_VIF(r0, 0x0, 0xcb, 0x0, 0x8800000000000000) 18:39:31 executing program 1: ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00'}) r0 = socket(0x28, 0x800, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x29, 0x2, 0x0, 0x0) 18:39:31 executing program 0: r0 = socket(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x89a1, &(0x7f0000000000)={'batadv_slave_1\x00'}) [ 719.992264][T15933] FAULT_INJECTION: forcing a failure. [ 719.992264][T15933] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 720.014460][T15933] CPU: 0 PID: 15933 Comm: syz-executor.2 Not tainted 5.15.74-syzkaller-04383-g7f2e600bf63a #0 [ 720.024540][T15933] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/11/2022 [ 720.034517][T15933] Call Trace: [ 720.037641][T15933] [ 720.040505][T15933] dump_stack_lvl+0x151/0x1b7 [ 720.045021][T15933] ? bfq_pos_tree_add_move+0x43e/0x43e [ 720.050315][T15933] dump_stack+0x15/0x17 [ 720.054485][T15933] should_fail+0x3c0/0x510 [ 720.058729][T15933] should_fail_alloc_page+0x58/0x70 [ 720.063774][T15933] __alloc_pages+0x1de/0x7c0 [ 720.068420][T15933] ? __count_vm_events+0x30/0x30 [ 720.073192][T15933] ? __this_cpu_preempt_check+0x13/0x20 [ 720.078572][T15933] ? __mod_node_page_state+0xac/0xf0 [ 720.083693][T15933] pte_alloc_one+0x73/0x1b0 [ 720.088038][T15933] ? pfn_modify_allowed+0x2e0/0x2e0 [ 720.093071][T15933] __pte_alloc+0x86/0x350 [ 720.097237][T15933] ? free_pgtables+0x210/0x210 [ 720.101834][T15933] ? _raw_spin_lock+0xa3/0x1b0 [ 720.106609][T15933] ? _raw_spin_trylock_bh+0x1d0/0x1d0 [ 720.111813][T15933] ? __kernel_text_address+0x9a/0x110 [ 720.117028][T15933] copy_pte_range+0x1b1f/0x20b0 [ 720.121729][T15933] ? __kunmap_atomic+0x80/0x80 [ 720.126619][T15933] ? __kasan_slab_alloc+0xc4/0xe0 [ 720.131648][T15933] ? __kasan_slab_alloc+0xb2/0xe0 [ 720.136598][T15933] ? kmem_cache_alloc+0x189/0x2f0 [ 720.141468][T15933] ? vm_area_dup+0x26/0x1d0 [ 720.145793][T15933] ? dup_mmap+0x6b8/0xea0 [ 720.149966][T15933] ? dup_mm+0x91/0x330 [ 720.153873][T15933] ? copy_mm+0x108/0x1b0 [ 720.157939][T15933] ? copy_process+0x1295/0x3250 [ 720.162629][T15933] ? kernel_clone+0x22d/0x990 [ 720.167151][T15933] ? __x64_sys_clone+0x289/0x310 [ 720.171920][T15933] ? do_syscall_64+0x44/0xd0 [ 720.176354][T15933] ? entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 720.182245][T15933] copy_page_range+0xc1e/0x1090 [ 720.186949][T15933] ? pfn_valid+0x1e0/0x1e0 [ 720.191191][T15933] dup_mmap+0x99f/0xea0 [ 720.195437][T15933] ? __delayed_free_task+0x20/0x20 [ 720.200383][T15933] ? mm_init+0x807/0x960 [ 720.204478][T15933] dup_mm+0x91/0x330 [ 720.208298][T15933] copy_mm+0x108/0x1b0 [ 720.212195][T15933] copy_process+0x1295/0x3250 [ 720.216964][T15933] ? proc_fail_nth_write+0x213/0x290 [ 720.222092][T15933] ? proc_fail_nth_read+0x220/0x220 [ 720.227302][T15933] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 720.232250][T15933] ? vfs_write+0x9af/0x1050 [ 720.236597][T15933] ? vmacache_update+0xb7/0x120 [ 720.241277][T15933] kernel_clone+0x22d/0x990 [ 720.245618][T15933] ? file_end_write+0x1b0/0x1b0 [ 720.250311][T15933] ? __kasan_check_write+0x14/0x20 [ 720.255250][T15933] ? create_io_thread+0x1e0/0x1e0 [ 720.260111][T15933] ? __mutex_lock_slowpath+0x10/0x10 [ 720.265235][T15933] __x64_sys_clone+0x289/0x310 [ 720.269835][T15933] ? __do_sys_vfork+0x130/0x130 [ 720.274521][T15933] ? debug_smp_processor_id+0x17/0x20 [ 720.279844][T15933] do_syscall_64+0x44/0xd0 [ 720.284094][T15933] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 720.289816][T15933] RIP: 0033:0x7fb67320a5a9 [ 720.294078][T15933] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 720.314498][T15933] RSP: 002b:00007fb671f7e118 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 720.322752][T15933] RAX: ffffffffffffffda RBX: 00007fb67332af80 RCX: 00007fb67320a5a9 [ 720.330724][T15933] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000010000000 18:39:31 executing program 2: syz_clone(0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 48) 18:39:31 executing program 1: ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00'}) (async, rerun: 32) r0 = socket(0x28, 0x800, 0x0) (rerun: 32) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x29, 0x2, 0x0, 0x0) 18:39:31 executing program 0: r0 = socket(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x89a2, &(0x7f0000000000)={'batadv_slave_1\x00'}) 18:39:31 executing program 4: r0 = socket(0xa, 0x1, 0x0) setsockopt$bt_BT_SNDMTU(r0, 0x112, 0xc, &(0x7f0000000000)=0x1, 0x2) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x28, 0x2, 0x0, 0x0) socket(0xa, 0x1, 0x0) (async) setsockopt$bt_BT_SNDMTU(r0, 0x112, 0xc, &(0x7f0000000000)=0x1, 0x2) (async) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x28, 0x2, 0x0, 0x0) (async) 18:39:31 executing program 5: r0 = socket(0x2b, 0x5, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x6, 0x2, 0x0, 0x0) 18:39:31 executing program 3: r0 = socket(0xa, 0x1, 0x0) setsockopt$MRT_DEL_VIF(r0, 0x0, 0xcb, 0x0, 0xcb00000000000000) [ 720.338800][T15933] RBP: 00007fb671f7e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 720.346696][T15933] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 720.354503][T15933] R13: 00007ffe782f632f R14: 00007fb671f7e300 R15: 0000000000022000 [ 720.362491][T15933] [ 720.377703][T15950] FAULT_INJECTION: forcing a failure. [ 720.377703][T15950] name failslab, interval 1, probability 0, space 0, times 0 [ 720.392114][T15950] CPU: 1 PID: 15950 Comm: syz-executor.2 Not tainted 5.15.74-syzkaller-04383-g7f2e600bf63a #0 [ 720.402195][T15950] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/11/2022 [ 720.412072][T15950] Call Trace: [ 720.415195][T15950] [ 720.417995][T15950] dump_stack_lvl+0x151/0x1b7 [ 720.422490][T15950] ? bfq_pos_tree_add_move+0x43e/0x43e [ 720.427866][T15950] ? do_syscall_64+0x44/0xd0 [ 720.432385][T15950] dump_stack+0x15/0x17 [ 720.436374][T15950] should_fail+0x3c0/0x510 [ 720.440628][T15950] __should_failslab+0x9f/0xe0 [ 720.445242][T15950] should_failslab+0x9/0x20 [ 720.449565][T15950] kmem_cache_alloc+0x4f/0x2f0 [ 720.454178][T15950] ? anon_vma_clone+0xa1/0x4f0 [ 720.458896][T15950] anon_vma_clone+0xa1/0x4f0 [ 720.463327][T15950] anon_vma_fork+0x91/0x4f0 [ 720.467672][T15950] ? anon_vma_name+0x4c/0x70 [ 720.472089][T15950] dup_mmap+0x750/0xea0 [ 720.476092][T15950] ? __delayed_free_task+0x20/0x20 [ 720.481048][T15950] ? mm_init+0x807/0x960 [ 720.485110][T15950] dup_mm+0x91/0x330 [ 720.488892][T15950] copy_mm+0x108/0x1b0 [ 720.492831][T15950] copy_process+0x1295/0x3250 [ 720.497344][T15950] ? proc_fail_nth_write+0x213/0x290 [ 720.502582][T15950] ? proc_fail_nth_read+0x220/0x220 [ 720.507588][T15950] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 720.512564][T15950] ? vfs_write+0x9af/0x1050 [ 720.516873][T15950] ? vmacache_update+0xb7/0x120 [ 720.521560][T15950] kernel_clone+0x22d/0x990 [ 720.525901][T15950] ? file_end_write+0x1b0/0x1b0 [ 720.530587][T15950] ? __kasan_check_write+0x14/0x20 [ 720.535552][T15950] ? create_io_thread+0x1e0/0x1e0 [ 720.540394][T15950] ? __mutex_lock_slowpath+0x10/0x10 [ 720.545610][T15950] __x64_sys_clone+0x289/0x310 [ 720.550204][T15950] ? __do_sys_vfork+0x130/0x130 [ 720.554889][T15950] ? debug_smp_processor_id+0x17/0x20 [ 720.560095][T15950] do_syscall_64+0x44/0xd0 [ 720.564349][T15950] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 720.570080][T15950] RIP: 0033:0x7fb67320a5a9 [ 720.574332][T15950] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 18:39:32 executing program 3: r0 = socket(0xa, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet_udp(0x2, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000004, 0x10, r1, 0x0) r2 = signalfd(0xffffffffffffffff, 0x0, 0x0) close(r2) syz_io_uring_setup(0x3cb2, &(0x7f0000000080)={0x0, 0x857, 0x200, 0x3, 0x33d, 0x0, r2}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000100)) sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x18, 0x0, 0x2, 0x70bd29, 0x25dfdbfd, {}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x20000000}, 0x4001) r3 = socket$inet_udp(0x2, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000004, 0x10, r3, 0x0) r4 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$FS_IOC_GETFLAGS(r4, 0x80086601, &(0x7f0000000040)) setsockopt$MRT_DEL_VIF(r0, 0x0, 0xcb, 0x0, 0x0) 18:39:32 executing program 0: r0 = socket(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x89a3, &(0x7f0000000000)={'batadv_slave_1\x00'}) 18:39:32 executing program 5: r0 = socket(0x2b, 0x5, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x6, 0x2, 0x0, 0x0) socket(0x2b, 0x5, 0x0) (async) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x6, 0x2, 0x0, 0x0) (async) 18:39:32 executing program 1: ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00'}) r0 = socket(0x28, 0x800, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x29, 0x2, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00'}) (async) socket(0x28, 0x800, 0x0) (async) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x29, 0x2, 0x0, 0x0) (async) 18:39:32 executing program 4: r0 = signalfd(0xffffffffffffffff, 0x0, 0x0) close(r0) fsmount(r0, 0x1, 0xd) r1 = socket(0xa, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r1, 0x28, 0x2, 0x0, 0x0) [ 720.594120][T15950] RSP: 002b:00007fb671f7e118 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 720.602368][T15950] RAX: ffffffffffffffda RBX: 00007fb67332af80 RCX: 00007fb67320a5a9 [ 720.610443][T15950] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000010000000 [ 720.618373][T15950] RBP: 00007fb671f7e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 720.626282][T15950] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 720.634094][T15950] R13: 00007ffe782f632f R14: 00007fb671f7e300 R15: 0000000000022000 [ 720.641907][T15950] 18:39:32 executing program 0: r0 = socket(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x89b0, &(0x7f0000000000)={'batadv_slave_1\x00'}) 18:39:32 executing program 2: syz_clone(0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 49) 18:39:32 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$VFAT_IOCTL_READDIR_BOTH(r0, 0x82307201, &(0x7f0000000000)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x2c, r1, 0x20, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x81}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20044800}, 0x20044880) socket$inet_udplite(0x2, 0x2, 0x88) r2 = socket(0xa, 0x1, 0x0) socket(0x11, 0x800, 0x7f) r3 = signalfd(0xffffffffffffffff, 0x0, 0x0) close(r3) getpeername$packet(r2, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000280)=0x14) connect$packet(r3, &(0x7f00000002c0)={0x11, 0x0, r4, 0x1, 0x3f, 0x6, @remote}, 0x14) r5 = signalfd(0xffffffffffffffff, 0x0, 0x0) close(r5) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r2, 0x29, 0x2, 0x0, 0x0) 18:39:32 executing program 3: r0 = socket(0xa, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet_udp(0x2, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000004, 0x10, r1, 0x0) r2 = signalfd(0xffffffffffffffff, 0x0, 0x0) close(r2) syz_io_uring_setup(0x3cb2, &(0x7f0000000080)={0x0, 0x857, 0x200, 0x3, 0x33d, 0x0, r2}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000100)) sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x18, 0x0, 0x2, 0x70bd29, 0x25dfdbfd, {}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x20000000}, 0x4001) r3 = socket$inet_udp(0x2, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000004, 0x10, r3, 0x0) r4 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$FS_IOC_GETFLAGS(r4, 0x80086601, &(0x7f0000000040)) setsockopt$MRT_DEL_VIF(r0, 0x0, 0xcb, 0x0, 0x0) socket(0xa, 0x1, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000004, 0x10, r1, 0x0) (async) signalfd(0xffffffffffffffff, 0x0, 0x0) (async) close(r2) (async) syz_io_uring_setup(0x3cb2, &(0x7f0000000080)={0x0, 0x857, 0x200, 0x3, 0x33d, 0x0, r2}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000100)) (async) sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x18, 0x0, 0x2, 0x70bd29, 0x25dfdbfd, {}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x20000000}, 0x4001) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000004, 0x10, r3, 0x0) (async) openat$pidfd(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async) ioctl$FS_IOC_GETFLAGS(r4, 0x80086601, &(0x7f0000000040)) (async) setsockopt$MRT_DEL_VIF(r0, 0x0, 0xcb, 0x0, 0x0) (async) 18:39:32 executing program 5: r0 = socket(0x2b, 0x5, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x6, 0x2, 0x0, 0x0) 18:39:32 executing program 4: r0 = signalfd(0xffffffffffffffff, 0x0, 0x0) close(r0) (async) fsmount(r0, 0x1, 0xd) r1 = socket(0xa, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r1, 0x28, 0x2, 0x0, 0x0) 18:39:32 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$VFAT_IOCTL_READDIR_BOTH(r0, 0x82307201, &(0x7f0000000000)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) (async) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x2c, r1, 0x20, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x81}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20044800}, 0x20044880) (async) socket$inet_udplite(0x2, 0x2, 0x88) (async) r2 = socket(0xa, 0x1, 0x0) (async) socket(0x11, 0x800, 0x7f) r3 = signalfd(0xffffffffffffffff, 0x0, 0x0) close(r3) (async) getpeername$packet(r2, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000280)=0x14) connect$packet(r3, &(0x7f00000002c0)={0x11, 0x0, r4, 0x1, 0x3f, 0x6, @remote}, 0x14) (async) r5 = signalfd(0xffffffffffffffff, 0x0, 0x0) close(r5) (async) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r2, 0x29, 0x2, 0x0, 0x0) 18:39:32 executing program 0: r0 = socket(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x89b1, &(0x7f0000000000)={'batadv_slave_1\x00'}) 18:39:32 executing program 5: r0 = socket(0xa, 0x1, 0x0) r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) syz_genetlink_get_family_id$wireguard(&(0x7f0000000540), r0) r3 = syz_open_dev$vcsu(&(0x7f0000000580), 0xffff, 0x80000) ioctl$F2FS_IOC_RESIZE_FS(r3, 0x4008f510, &(0x7f00000005c0)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000004, 0x10, r2, 0x0) ioctl$BTRFS_IOC_SCRUB(r2, 0xc400941b, &(0x7f0000000140)={0x0, 0xfffffffffffff7a9, 0x8, 0x1}) sendmsg$BATADV_CMD_GET_GATEWAYS(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x54, 0x0, 0x300, 0x70bd27, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x4}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x3965}, @BATADV_ATTR_MULTICAST_FANOUT={0xffffffffffffff0a, 0x3c, 0x82}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xec}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x8}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x3}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x9}]}, 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x20000040) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x6, 0x2, 0x0, 0x0) 18:39:32 executing program 0: r0 = socket(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x40049409, &(0x7f0000000000)={'batadv_slave_1\x00'}) [ 720.708979][T15989] FAULT_INJECTION: forcing a failure. [ 720.708979][T15989] name failslab, interval 1, probability 0, space 0, times 0 [ 720.734103][T15989] CPU: 0 PID: 15989 Comm: syz-executor.2 Not tainted 5.15.74-syzkaller-04383-g7f2e600bf63a #0 [ 720.744183][T15989] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/11/2022 [ 720.754083][T15989] Call Trace: [ 720.757205][T15989] [ 720.760074][T15989] dump_stack_lvl+0x151/0x1b7 [ 720.764593][T15989] ? bfq_pos_tree_add_move+0x43e/0x43e [ 720.769875][T15989] ? vma_interval_tree_augment_rotate+0x210/0x210 [ 720.776121][T15989] dump_stack+0x15/0x17 [ 720.780114][T15989] should_fail+0x3c0/0x510 [ 720.784376][T15989] __should_failslab+0x9f/0xe0 [ 720.788967][T15989] should_failslab+0x9/0x20 [ 720.793306][T15989] kmem_cache_alloc+0x4f/0x2f0 [ 720.797911][T15989] ? anon_vma_fork+0xf7/0x4f0 [ 720.802420][T15989] anon_vma_fork+0xf7/0x4f0 18:39:32 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$VFAT_IOCTL_READDIR_BOTH(r0, 0x82307201, &(0x7f0000000000)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) (async) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x2c, r1, 0x20, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x81}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20044800}, 0x20044880) socket$inet_udplite(0x2, 0x2, 0x88) (async) r2 = socket(0xa, 0x1, 0x0) socket(0x11, 0x800, 0x7f) (async) r3 = signalfd(0xffffffffffffffff, 0x0, 0x0) close(r3) getpeername$packet(r2, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000280)=0x14) connect$packet(r3, &(0x7f00000002c0)={0x11, 0x0, r4, 0x1, 0x3f, 0x6, @remote}, 0x14) r5 = signalfd(0xffffffffffffffff, 0x0, 0x0) close(r5) (async) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r2, 0x29, 0x2, 0x0, 0x0) 18:39:32 executing program 3: r0 = socket(0xa, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet_udp(0x2, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000004, 0x10, r1, 0x0) r2 = signalfd(0xffffffffffffffff, 0x0, 0x0) close(r2) syz_io_uring_setup(0x3cb2, &(0x7f0000000080)={0x0, 0x857, 0x200, 0x3, 0x33d, 0x0, r2}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000100)) sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x18, 0x0, 0x2, 0x70bd29, 0x25dfdbfd, {}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x20000000}, 0x4001) r3 = socket$inet_udp(0x2, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000004, 0x10, r3, 0x0) r4 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$FS_IOC_GETFLAGS(r4, 0x80086601, &(0x7f0000000040)) setsockopt$MRT_DEL_VIF(r0, 0x0, 0xcb, 0x0, 0x0) socket(0xa, 0x1, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000004, 0x10, r1, 0x0) (async) signalfd(0xffffffffffffffff, 0x0, 0x0) (async) close(r2) (async) syz_io_uring_setup(0x3cb2, &(0x7f0000000080)={0x0, 0x857, 0x200, 0x3, 0x33d, 0x0, r2}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000100)) (async) sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x18, 0x0, 0x2, 0x70bd29, 0x25dfdbfd, {}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x20000000}, 0x4001) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000004, 0x10, r3, 0x0) (async) openat$pidfd(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async) ioctl$FS_IOC_GETFLAGS(r4, 0x80086601, &(0x7f0000000040)) (async) setsockopt$MRT_DEL_VIF(r0, 0x0, 0xcb, 0x0, 0x0) (async) 18:39:32 executing program 1: r0 = socket(0xa, 0x1, 0x0) syz_open_dev$vcsu(&(0x7f0000000000), 0x7ff, 0x200) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x29, 0x2, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_CONNECT={0x10, 0x31, 0x0, r0, 0x80, &(0x7f0000000040)=@tipc=@name={0x1e, 0x2, 0x3, {{}, 0x3}}}, 0x8a) [ 720.806763][T15989] ? anon_vma_name+0x4c/0x70 [ 720.811273][T15989] dup_mmap+0x750/0xea0 [ 720.815266][T15989] ? __delayed_free_task+0x20/0x20 [ 720.820212][T15989] ? mm_init+0x807/0x960 [ 720.824292][T15989] dup_mm+0x91/0x330 [ 720.828023][T15989] copy_mm+0x108/0x1b0 [ 720.831929][T15989] copy_process+0x1295/0x3250 [ 720.836449][T15989] ? proc_fail_nth_write+0x213/0x290 [ 720.841558][T15989] ? proc_fail_nth_read+0x220/0x220 [ 720.846606][T15989] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 720.851538][T15989] ? vfs_write+0x9af/0x1050 [ 720.856487][T15989] ? vmacache_update+0xb7/0x120 [ 720.861176][T15989] kernel_clone+0x22d/0x990 [ 720.865586][T15989] ? file_end_write+0x1b0/0x1b0 [ 720.870204][T15989] ? __kasan_check_write+0x14/0x20 [ 720.875149][T15989] ? create_io_thread+0x1e0/0x1e0 [ 720.880015][T15989] ? __mutex_lock_slowpath+0x10/0x10 [ 720.885133][T15989] __x64_sys_clone+0x289/0x310 [ 720.889731][T15989] ? __do_sys_vfork+0x130/0x130 [ 720.894418][T15989] ? debug_smp_processor_id+0x17/0x20 [ 720.899629][T15989] do_syscall_64+0x44/0xd0 [ 720.903878][T15989] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 720.909604][T15989] RIP: 0033:0x7fb67320a5a9 [ 720.913864][T15989] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 720.933300][T15989] RSP: 002b:00007fb671f7e118 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 720.941562][T15989] RAX: ffffffffffffffda RBX: 00007fb67332af80 RCX: 00007fb67320a5a9 [ 720.949369][T15989] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000010000000 18:39:32 executing program 2: syz_clone(0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 50) 18:39:32 executing program 0: r0 = socket(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x40086602, &(0x7f0000000000)={'batadv_slave_1\x00'}) 18:39:32 executing program 1: r0 = socket(0xa, 0x1, 0x0) syz_open_dev$vcsu(&(0x7f0000000000), 0x7ff, 0x200) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x29, 0x2, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_CONNECT={0x10, 0x31, 0x0, r0, 0x80, &(0x7f0000000040)=@tipc=@name={0x1e, 0x2, 0x3, {{}, 0x3}}}, 0x8a) socket(0xa, 0x1, 0x0) (async) syz_open_dev$vcsu(&(0x7f0000000000), 0x7ff, 0x200) (async) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x29, 0x2, 0x0, 0x0) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_CONNECT={0x10, 0x31, 0x0, r0, 0x80, &(0x7f0000000040)=@tipc=@name={0x1e, 0x2, 0x3, {{}, 0x3}}}, 0x8a) (async) 18:39:32 executing program 3: r0 = socket(0xa, 0x1, 0x0) ioctl$AUTOFS_IOC_READY(r0, 0x9360, 0xffffffffffffff15) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000140), 0xc0, 0x0) ioctl$ASHMEM_GET_SIZE(r1, 0x7704, 0x0) setsockopt$MRT_DEL_VIF(r0, 0x0, 0xcb, 0x0, 0x0) sendmsg$FOU_CMD_DEL(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8084a20}, 0xc, &(0x7f0000000180)={&(0x7f0000000040)={0x44, 0x0, 0x300, 0x70bc2d, 0x25dfdbfd, {}, [@FOU_ATTR_IFINDEX={0x8}, @FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @private1={0xfc, 0x1, '\x00', 0x1}}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}]}, 0x44}, 0x1, 0x0, 0x0, 0x95}, 0x45) 18:39:32 executing program 5: r0 = socket(0xa, 0x1, 0x0) r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) (async) r2 = socket$inet_udp(0x2, 0x2, 0x0) syz_genetlink_get_family_id$wireguard(&(0x7f0000000540), r0) r3 = syz_open_dev$vcsu(&(0x7f0000000580), 0xffff, 0x80000) ioctl$F2FS_IOC_RESIZE_FS(r3, 0x4008f510, &(0x7f00000005c0)) (async) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000004, 0x10, r2, 0x0) (async) ioctl$BTRFS_IOC_SCRUB(r2, 0xc400941b, &(0x7f0000000140)={0x0, 0xfffffffffffff7a9, 0x8, 0x1}) (async) sendmsg$BATADV_CMD_GET_GATEWAYS(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x54, 0x0, 0x300, 0x70bd27, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x4}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x3965}, @BATADV_ATTR_MULTICAST_FANOUT={0xffffffffffffff0a, 0x3c, 0x82}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xec}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x8}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x3}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x9}]}, 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x20000040) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x6, 0x2, 0x0, 0x0) 18:39:32 executing program 4: r0 = signalfd(0xffffffffffffffff, 0x0, 0x0) close(r0) fsmount(r0, 0x1, 0xd) (async) r1 = socket(0xa, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r1, 0x28, 0x2, 0x0, 0x0) 18:39:32 executing program 3: r0 = socket(0xa, 0x1, 0x0) ioctl$AUTOFS_IOC_READY(r0, 0x9360, 0xffffffffffffff15) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000140), 0xc0, 0x0) ioctl$ASHMEM_GET_SIZE(r1, 0x7704, 0x0) (async) setsockopt$MRT_DEL_VIF(r0, 0x0, 0xcb, 0x0, 0x0) (async) sendmsg$FOU_CMD_DEL(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8084a20}, 0xc, &(0x7f0000000180)={&(0x7f0000000040)={0x44, 0x0, 0x300, 0x70bc2d, 0x25dfdbfd, {}, [@FOU_ATTR_IFINDEX={0x8}, @FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @private1={0xfc, 0x1, '\x00', 0x1}}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}]}, 0x44}, 0x1, 0x0, 0x0, 0x95}, 0x45) [ 720.957257][T15989] RBP: 00007fb671f7e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 720.965163][T15989] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 720.972966][T15989] R13: 00007ffe782f632f R14: 00007fb671f7e300 R15: 0000000000022000 [ 720.980783][T15989] 18:39:32 executing program 1: r0 = socket(0xa, 0x1, 0x0) syz_open_dev$vcsu(&(0x7f0000000000), 0x7ff, 0x200) (async) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x29, 0x2, 0x0, 0x0) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_CONNECT={0x10, 0x31, 0x0, r0, 0x80, &(0x7f0000000040)=@tipc=@name={0x1e, 0x2, 0x3, {{}, 0x3}}}, 0x8a) 18:39:32 executing program 5: r0 = socket(0xa, 0x1, 0x0) r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) (async) r2 = socket$inet_udp(0x2, 0x2, 0x0) syz_genetlink_get_family_id$wireguard(&(0x7f0000000540), r0) (async) r3 = syz_open_dev$vcsu(&(0x7f0000000580), 0xffff, 0x80000) ioctl$F2FS_IOC_RESIZE_FS(r3, 0x4008f510, &(0x7f00000005c0)) (async) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000004, 0x10, r2, 0x0) (async) ioctl$BTRFS_IOC_SCRUB(r2, 0xc400941b, &(0x7f0000000140)={0x0, 0xfffffffffffff7a9, 0x8, 0x1}) (async, rerun: 64) sendmsg$BATADV_CMD_GET_GATEWAYS(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x54, 0x0, 0x300, 0x70bd27, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x4}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x3965}, @BATADV_ATTR_MULTICAST_FANOUT={0xffffffffffffff0a, 0x3c, 0x82}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xec}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x8}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x3}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x9}]}, 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x20000040) (rerun: 64) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x6, 0x2, 0x0, 0x0) 18:39:32 executing program 0: r0 = socket(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x40087602, &(0x7f0000000000)={'batadv_slave_1\x00'}) 18:39:32 executing program 4: syz_io_uring_setup(0x1f88, &(0x7f0000000000)={0x0, 0xc55b, 0x80, 0x2, 0x1ff}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)=0x0) r1 = signalfd(0xffffffffffffffff, 0x0, 0x0) close(r1) syz_io_uring_submit(0x0, r0, &(0x7f00000001c0)=@IORING_OP_MSG_RING={0x28, 0x0, 0x0, r1, 0x3, &(0x7f0000000100)="78bd3644662671ca50a3e0b528058acdab5b8d4eb283a7cb96f50f1aa621ddc21db40528d2093c4244e83e6e17b17c783fb125944564037722c27250f40b3a204e5b465284e91e07377b0d0aba3cb7a68b081c5778da14e8eb1d87d19d225976b3711c3d5db2012143d14204ae9440022277f9335a7db0f4fc70790755d5cc8b1c74f215c0b2fb98a350c2cae5d0970b6436f5c4267c62df63055f0b00a53b422a3decf88e41d4fb7a3c8b", 0xab, 0x0, 0x1}, 0x100) r2 = socket(0x29, 0x6, 0x7fff) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r2, 0x28, 0x2, 0x0, 0x0) 18:39:32 executing program 0: r0 = socket(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x401c5820, &(0x7f0000000000)={'batadv_slave_1\x00'}) [ 721.037908][T16053] FAULT_INJECTION: forcing a failure. [ 721.037908][T16053] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 721.057288][T16053] CPU: 0 PID: 16053 Comm: syz-executor.2 Not tainted 5.15.74-syzkaller-04383-g7f2e600bf63a #0 [ 721.067363][T16053] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/11/2022 [ 721.077259][T16053] Call Trace: [ 721.080384][T16053] [ 721.083161][T16053] dump_stack_lvl+0x151/0x1b7 [ 721.087676][T16053] ? bfq_pos_tree_add_move+0x43e/0x43e [ 721.092968][T16053] ? stack_trace_save+0x1f0/0x1f0 [ 721.097834][T16053] ? __kernel_text_address+0x9a/0x110 [ 721.103037][T16053] dump_stack+0x15/0x17 [ 721.107034][T16053] should_fail+0x3c0/0x510 [ 721.111406][T16053] should_fail_alloc_page+0x58/0x70 [ 721.116439][T16053] __alloc_pages+0x1de/0x7c0 [ 721.120862][T16053] ? stack_trace_save+0x12d/0x1f0 [ 721.125733][T16053] ? stack_trace_snprint+0x100/0x100 [ 721.130841][T16053] ? __count_vm_events+0x30/0x30 [ 721.135618][T16053] ? __kasan_slab_alloc+0xc4/0xe0 [ 721.140482][T16053] ? __kasan_slab_alloc+0xb2/0xe0 [ 721.145340][T16053] ? kmem_cache_alloc+0x189/0x2f0 [ 721.150323][T16053] ? anon_vma_fork+0x1b9/0x4f0 [ 721.154925][T16053] get_zeroed_page+0x19/0x40 [ 721.159436][T16053] __pud_alloc+0x8b/0x260 [ 721.163607][T16053] ? do_handle_mm_fault+0x2370/0x2370 [ 721.168817][T16053] copy_page_range+0xd9e/0x1090 [ 721.173504][T16053] ? pfn_valid+0x1e0/0x1e0 [ 721.177755][T16053] dup_mmap+0x99f/0xea0 [ 721.181753][T16053] ? __delayed_free_task+0x20/0x20 [ 721.186691][T16053] ? mm_init+0x807/0x960 [ 721.190771][T16053] dup_mm+0x91/0x330 [ 721.194503][T16053] copy_mm+0x108/0x1b0 [ 721.198413][T16053] copy_process+0x1295/0x3250 [ 721.202939][T16053] ? proc_fail_nth_write+0x213/0x290 [ 721.208049][T16053] ? proc_fail_nth_read+0x220/0x220 [ 721.213193][T16053] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 721.218140][T16053] ? vfs_write+0x9af/0x1050 [ 721.222478][T16053] ? vmacache_update+0xb7/0x120 [ 721.227166][T16053] kernel_clone+0x22d/0x990 [ 721.231508][T16053] ? file_end_write+0x1b0/0x1b0 [ 721.236193][T16053] ? __kasan_check_write+0x14/0x20 [ 721.241147][T16053] ? create_io_thread+0x1e0/0x1e0 [ 721.245999][T16053] ? __mutex_lock_slowpath+0x10/0x10 [ 721.251122][T16053] __x64_sys_clone+0x289/0x310 [ 721.255724][T16053] ? __do_sys_vfork+0x130/0x130 [ 721.260501][T16053] ? debug_smp_processor_id+0x17/0x20 [ 721.265840][T16053] do_syscall_64+0x44/0xd0 [ 721.270091][T16053] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 721.275821][T16053] RIP: 0033:0x7fb67320a5a9 [ 721.280082][T16053] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 721.299607][T16053] RSP: 002b:00007fb671f7e118 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 721.307845][T16053] RAX: ffffffffffffffda RBX: 00007fb67332af80 RCX: 00007fb67320a5a9 [ 721.315659][T16053] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000010000000 [ 721.323467][T16053] RBP: 00007fb671f7e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 721.331311][T16053] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 18:39:32 executing program 2: syz_clone(0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 51) 18:39:32 executing program 3: r0 = socket(0xa, 0x1, 0x0) ioctl$AUTOFS_IOC_READY(r0, 0x9360, 0xffffffffffffff15) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000140), 0xc0, 0x0) ioctl$ASHMEM_GET_SIZE(r1, 0x7704, 0x0) setsockopt$MRT_DEL_VIF(r0, 0x0, 0xcb, 0x0, 0x0) sendmsg$FOU_CMD_DEL(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8084a20}, 0xc, &(0x7f0000000180)={&(0x7f0000000040)={0x44, 0x0, 0x300, 0x70bc2d, 0x25dfdbfd, {}, [@FOU_ATTR_IFINDEX={0x8}, @FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @private1={0xfc, 0x1, '\x00', 0x1}}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}]}, 0x44}, 0x1, 0x0, 0x0, 0x95}, 0x45) socket(0xa, 0x1, 0x0) (async) ioctl$AUTOFS_IOC_READY(r0, 0x9360, 0xffffffffffffff15) (async) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000140), 0xc0, 0x0) (async) ioctl$ASHMEM_GET_SIZE(r1, 0x7704, 0x0) (async) setsockopt$MRT_DEL_VIF(r0, 0x0, 0xcb, 0x0, 0x0) (async) sendmsg$FOU_CMD_DEL(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8084a20}, 0xc, &(0x7f0000000180)={&(0x7f0000000040)={0x44, 0x0, 0x300, 0x70bc2d, 0x25dfdbfd, {}, [@FOU_ATTR_IFINDEX={0x8}, @FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @private1={0xfc, 0x1, '\x00', 0x1}}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}]}, 0x44}, 0x1, 0x0, 0x0, 0x95}, 0x45) (async) 18:39:32 executing program 5: r0 = socket(0xa, 0x1, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000004, 0x10, r1, 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(r1, 0x942e, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x6, 0x2, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000000)={'wg2\x00'}) 18:39:32 executing program 1: ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f00000001c0)={0x1, &(0x7f0000000180), 0x8, 0xffffffffffffffff, 0x2}) r0 = socket$inet_udp(0x2, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000004, 0x10, r0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000004, 0x8110, r1, 0x0) ioctl$EXT4_IOC_GETSTATE(r1, 0x40046629, &(0x7f00000002c0)) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x64, r2, 0x400, 0x70bd28, 0x25dfdbf9, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x8}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0xfffffffd}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x40}, 0x8020) r3 = socket(0xa, 0x1, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x34, r2, 0x20, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x94a}]}, 0x34}, 0x1, 0x0, 0x0, 0x240048d1}, 0x4000810) r4 = fsopen(&(0x7f0000000240)='mqueue\x00', 0x0) ioctl$BTRFS_IOC_WAIT_SYNC(r4, 0x40089416, &(0x7f0000000280)) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r3, 0x29, 0x2, 0x0, 0x0) 18:39:32 executing program 0: r0 = socket(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x4020940d, &(0x7f0000000000)={'batadv_slave_1\x00'}) 18:39:32 executing program 4: syz_io_uring_setup(0x1f88, &(0x7f0000000000)={0x0, 0xc55b, 0x80, 0x2, 0x1ff}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)=0x0) (async) r1 = signalfd(0xffffffffffffffff, 0x0, 0x0) close(r1) syz_io_uring_submit(0x0, r0, &(0x7f00000001c0)=@IORING_OP_MSG_RING={0x28, 0x0, 0x0, r1, 0x3, &(0x7f0000000100)="78bd3644662671ca50a3e0b528058acdab5b8d4eb283a7cb96f50f1aa621ddc21db40528d2093c4244e83e6e17b17c783fb125944564037722c27250f40b3a204e5b465284e91e07377b0d0aba3cb7a68b081c5778da14e8eb1d87d19d225976b3711c3d5db2012143d14204ae9440022277f9335a7db0f4fc70790755d5cc8b1c74f215c0b2fb98a350c2cae5d0970b6436f5c4267c62df63055f0b00a53b422a3decf88e41d4fb7a3c8b", 0xab, 0x0, 0x1}, 0x100) r2 = socket(0x29, 0x6, 0x7fff) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r2, 0x28, 0x2, 0x0, 0x0) 18:39:32 executing program 3: r0 = socket(0xa, 0x1, 0x0) accept4$packet(r0, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14, 0x80000) setsockopt$MRT_DEL_VIF(r0, 0x0, 0xcb, 0x0, 0x0) 18:39:32 executing program 1: ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f00000001c0)={0x1, &(0x7f0000000180), 0x8, 0xffffffffffffffff, 0x2}) r0 = socket$inet_udp(0x2, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000004, 0x10, r0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000004, 0x8110, r1, 0x0) (async) ioctl$EXT4_IOC_GETSTATE(r1, 0x40046629, &(0x7f00000002c0)) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x64, r2, 0x400, 0x70bd28, 0x25dfdbf9, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x8}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0xfffffffd}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x40}, 0x8020) r3 = socket(0xa, 0x1, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x34, r2, 0x20, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x94a}]}, 0x34}, 0x1, 0x0, 0x0, 0x240048d1}, 0x4000810) (async) r4 = fsopen(&(0x7f0000000240)='mqueue\x00', 0x0) ioctl$BTRFS_IOC_WAIT_SYNC(r4, 0x40089416, &(0x7f0000000280)) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r3, 0x29, 0x2, 0x0, 0x0) 18:39:32 executing program 5: r0 = socket(0xa, 0x1, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000004, 0x10, r1, 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(r1, 0x942e, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x6, 0x2, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000000)={'wg2\x00'}) socket(0xa, 0x1, 0x0) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000004, 0x10, r1, 0x0) (async) ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(r1, 0x942e, 0x0) (async) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x6, 0x2, 0x0, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000000)={'wg2\x00'}) (async) [ 721.339089][T16053] R13: 00007ffe782f632f R14: 00007fb671f7e300 R15: 0000000000022000 [ 721.346906][T16053] [ 721.371212][T16075] FAULT_INJECTION: forcing a failure. [ 721.371212][T16075] name fail_page_alloc, interval 1, probability 0, space 0, times 0 18:39:32 executing program 1: ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f00000001c0)={0x1, &(0x7f0000000180), 0x8, 0xffffffffffffffff, 0x2}) (async) r0 = socket$inet_udp(0x2, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000004, 0x10, r0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000004, 0x8110, r1, 0x0) ioctl$EXT4_IOC_GETSTATE(r1, 0x40046629, &(0x7f00000002c0)) (async) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x64, r2, 0x400, 0x70bd28, 0x25dfdbf9, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x8}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0xfffffffd}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x40}, 0x8020) (async) r3 = socket(0xa, 0x1, 0x0) (async) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x34, r2, 0x20, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x94a}]}, 0x34}, 0x1, 0x0, 0x0, 0x240048d1}, 0x4000810) (async) r4 = fsopen(&(0x7f0000000240)='mqueue\x00', 0x0) ioctl$BTRFS_IOC_WAIT_SYNC(r4, 0x40089416, &(0x7f0000000280)) (async) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r3, 0x29, 0x2, 0x0, 0x0) 18:39:32 executing program 1: r0 = socket(0x2a, 0x6, 0x10000) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x29, 0x2, 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000004, 0x10, r1, 0x0) r2 = socket(0x2a, 0xa, 0x8) getsockopt$bt_BT_CHANNEL_POLICY(r2, 0x112, 0xa, &(0x7f0000000040)=0xffff, &(0x7f0000000080)=0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000000)) 18:39:32 executing program 1: r0 = socket(0x2a, 0x6, 0x10000) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x29, 0x2, 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000004, 0x10, r1, 0x0) r2 = socket(0x2a, 0xa, 0x8) getsockopt$bt_BT_CHANNEL_POLICY(r2, 0x112, 0xa, &(0x7f0000000040)=0xffff, &(0x7f0000000080)=0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000000)) socket(0x2a, 0x6, 0x10000) (async) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x29, 0x2, 0x0, 0x0) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000004, 0x10, r1, 0x0) (async) socket(0x2a, 0xa, 0x8) (async) getsockopt$bt_BT_CHANNEL_POLICY(r2, 0x112, 0xa, &(0x7f0000000040)=0xffff, &(0x7f0000000080)=0x4) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000000)) (async) [ 721.388388][T16075] CPU: 0 PID: 16075 Comm: syz-executor.2 Not tainted 5.15.74-syzkaller-04383-g7f2e600bf63a #0 [ 721.398473][T16075] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/11/2022 [ 721.408367][T16075] Call Trace: [ 721.411486][T16075] [ 721.414350][T16075] dump_stack_lvl+0x151/0x1b7 [ 721.418870][T16075] ? bfq_pos_tree_add_move+0x43e/0x43e [ 721.424155][T16075] ? __kasan_check_write+0x14/0x20 [ 721.429104][T16075] ? __set_page_owner+0x2ee/0x310 [ 721.433965][T16075] dump_stack+0x15/0x17 [ 721.437969][T16075] should_fail+0x3c0/0x510 [ 721.442213][T16075] should_fail_alloc_page+0x58/0x70 [ 721.447243][T16075] __alloc_pages+0x1de/0x7c0 [ 721.451669][T16075] ? __count_vm_events+0x30/0x30 [ 721.456447][T16075] ? __count_vm_events+0x30/0x30 [ 721.461215][T16075] ? __kasan_check_write+0x14/0x20 [ 721.466162][T16075] ? _raw_spin_lock+0xa3/0x1b0 [ 721.470765][T16075] __pmd_alloc+0xb1/0x550 [ 721.475035][T16075] ? kmem_cache_alloc+0x189/0x2f0 [ 721.479885][T16075] ? anon_vma_fork+0x1b9/0x4f0 [ 721.484478][T16075] ? __pud_alloc+0x260/0x260 [ 721.488909][T16075] ? __pud_alloc+0x218/0x260 [ 721.493419][T16075] ? do_handle_mm_fault+0x2370/0x2370 [ 721.498741][T16075] copy_page_range+0xd04/0x1090 [ 721.503432][T16075] ? pfn_valid+0x1e0/0x1e0 [ 721.507678][T16075] dup_mmap+0x99f/0xea0 [ 721.511674][T16075] ? __delayed_free_task+0x20/0x20 [ 721.516621][T16075] ? mm_init+0x807/0x960 [ 721.520783][T16075] dup_mm+0x91/0x330 [ 721.524517][T16075] copy_mm+0x108/0x1b0 [ 721.528421][T16075] copy_process+0x1295/0x3250 [ 721.532935][T16075] ? proc_fail_nth_write+0x213/0x290 [ 721.538229][T16075] ? proc_fail_nth_read+0x220/0x220 [ 721.543349][T16075] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 721.548393][T16075] ? vfs_write+0x9af/0x1050 [ 721.552726][T16075] ? vmacache_update+0xb7/0x120 [ 721.557409][T16075] kernel_clone+0x22d/0x990 [ 721.561751][T16075] ? file_end_write+0x1b0/0x1b0 [ 721.566440][T16075] ? __kasan_check_write+0x14/0x20 [ 721.571472][T16075] ? create_io_thread+0x1e0/0x1e0 [ 721.576331][T16075] ? __mutex_lock_slowpath+0x10/0x10 [ 721.581548][T16075] __x64_sys_clone+0x289/0x310 [ 721.586141][T16075] ? __do_sys_vfork+0x130/0x130 [ 721.590920][T16075] ? debug_smp_processor_id+0x17/0x20 [ 721.596118][T16075] do_syscall_64+0x44/0xd0 [ 721.600371][T16075] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 721.606102][T16075] RIP: 0033:0x7fb67320a5a9 [ 721.610356][T16075] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 721.629795][T16075] RSP: 002b:00007fb671f7e118 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 18:39:33 executing program 2: syz_clone(0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 52) 18:39:33 executing program 0: r0 = socket(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x80086601, &(0x7f0000000000)={'batadv_slave_1\x00'}) 18:39:33 executing program 1: r0 = socket(0x2a, 0x6, 0x10000) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x29, 0x2, 0x0, 0x0) (async) r1 = socket$inet_udp(0x2, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000004, 0x10, r1, 0x0) (async) r2 = socket(0x2a, 0xa, 0x8) getsockopt$bt_BT_CHANNEL_POLICY(r2, 0x112, 0xa, &(0x7f0000000040)=0xffff, &(0x7f0000000080)=0x4) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000000)) 18:39:33 executing program 5: r0 = socket(0xa, 0x1, 0x0) (async) r1 = socket$inet_udp(0x2, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000004, 0x10, r1, 0x0) (async) ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(r1, 0x942e, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x6, 0x2, 0x0, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000000)={'wg2\x00'}) 18:39:33 executing program 3: r0 = socket(0xa, 0x1, 0x0) accept4$packet(r0, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14, 0x80000) setsockopt$MRT_DEL_VIF(r0, 0x0, 0xcb, 0x0, 0x0) 18:39:33 executing program 4: syz_io_uring_setup(0x1f88, &(0x7f0000000000)={0x0, 0xc55b, 0x80, 0x2, 0x1ff}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)=0x0) (async, rerun: 64) r1 = signalfd(0xffffffffffffffff, 0x0, 0x0) (rerun: 64) close(r1) (async, rerun: 64) syz_io_uring_submit(0x0, r0, &(0x7f00000001c0)=@IORING_OP_MSG_RING={0x28, 0x0, 0x0, r1, 0x3, &(0x7f0000000100)="78bd3644662671ca50a3e0b528058acdab5b8d4eb283a7cb96f50f1aa621ddc21db40528d2093c4244e83e6e17b17c783fb125944564037722c27250f40b3a204e5b465284e91e07377b0d0aba3cb7a68b081c5778da14e8eb1d87d19d225976b3711c3d5db2012143d14204ae9440022277f9335a7db0f4fc70790755d5cc8b1c74f215c0b2fb98a350c2cae5d0970b6436f5c4267c62df63055f0b00a53b422a3decf88e41d4fb7a3c8b", 0xab, 0x0, 0x1}, 0x100) (async, rerun: 64) r2 = socket(0x29, 0x6, 0x7fff) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r2, 0x28, 0x2, 0x0, 0x0) 18:39:33 executing program 3: r0 = socket(0xa, 0x1, 0x0) accept4$packet(r0, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14, 0x80000) setsockopt$MRT_DEL_VIF(r0, 0x0, 0xcb, 0x0, 0x0) socket(0xa, 0x1, 0x0) (async) accept4$packet(r0, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14, 0x80000) (async) setsockopt$MRT_DEL_VIF(r0, 0x0, 0xcb, 0x0, 0x0) (async) 18:39:33 executing program 0: r0 = socket(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x80087601, &(0x7f0000000000)={'batadv_slave_1\x00'}) 18:39:33 executing program 1: r0 = socket(0xa, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x29, 0x2, 0x0, 0x0) r1 = accept4$vsock_stream(r0, &(0x7f0000000000), 0x10, 0x80800) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, &(0x7f00000001c0)=0x6) r2 = socket$inet_udp(0x2, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x80010, r2, 0x0) ioctl$AUTOFS_IOC_EXPIRE(r2, 0x810c9365, &(0x7f0000000080)={{0x2, 0x6}, 0x100, './file0\x00'}) signalfd(r1, &(0x7f0000000040)={[0x400]}, 0x8) [ 721.638039][T16075] RAX: ffffffffffffffda RBX: 00007fb67332af80 RCX: 00007fb67320a5a9 [ 721.645852][T16075] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000010000000 [ 721.653663][T16075] RBP: 00007fb671f7e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 721.661479][T16075] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 721.669284][T16075] R13: 00007ffe782f632f R14: 00007fb671f7e300 R15: 0000000000022000 [ 721.677188][T16075] 18:39:33 executing program 1: r0 = socket(0xa, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x29, 0x2, 0x0, 0x0) (async) r1 = accept4$vsock_stream(r0, &(0x7f0000000000), 0x10, 0x80800) (async) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, &(0x7f00000001c0)=0x6) (async) r2 = socket$inet_udp(0x2, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x80010, r2, 0x0) (async) ioctl$AUTOFS_IOC_EXPIRE(r2, 0x810c9365, &(0x7f0000000080)={{0x2, 0x6}, 0x100, './file0\x00'}) (async) signalfd(r1, &(0x7f0000000040)={[0x400]}, 0x8) 18:39:33 executing program 5: sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x1, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1f}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4044041) r0 = signalfd(0xffffffffffffffff, 0x0, 0x0) close(r0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x2c, 0x0, 0x0, 0x70bd28, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x4}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x624c}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x6ba0e079}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4008094}, 0x4c080) r1 = socket(0xa, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r1, 0x6, 0x2, 0x0, 0x0) 18:39:33 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000004, 0x10, r0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000004, 0x10, r1, 0x0) r2 = signalfd(r1, 0x0, 0x0) close(r2) getsockopt$bt_BT_DEFER_SETUP(r2, 0x112, 0x7, &(0x7f0000000040), &(0x7f0000000080)=0x4) r3 = socket(0xa, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r3, 0x28, 0x2, 0x0, 0x0) [ 721.727267][T16124] FAULT_INJECTION: forcing a failure. [ 721.727267][T16124] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 721.760785][T16124] CPU: 1 PID: 16124 Comm: syz-executor.2 Not tainted 5.15.74-syzkaller-04383-g7f2e600bf63a #0 [ 721.770865][T16124] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/11/2022 [ 721.780756][T16124] Call Trace: [ 721.783884][T16124] [ 721.786664][T16124] dump_stack_lvl+0x151/0x1b7 [ 721.791167][T16124] ? bfq_pos_tree_add_move+0x43e/0x43e [ 721.796467][T16124] dump_stack+0x15/0x17 [ 721.800540][T16124] should_fail+0x3c0/0x510 [ 721.804900][T16124] should_fail_alloc_page+0x58/0x70 [ 721.809935][T16124] __alloc_pages+0x1de/0x7c0 [ 721.814361][T16124] ? __count_vm_events+0x30/0x30 [ 721.819133][T16124] ? dup_mm+0x91/0x330 [ 721.823041][T16124] ? copy_mm+0x108/0x1b0 [ 721.827204][T16124] ? copy_process+0x1295/0x3250 [ 721.831891][T16124] ? kernel_clone+0x22d/0x990 [ 721.836412][T16124] ? __x64_sys_clone+0x289/0x310 [ 721.841180][T16124] pte_alloc_one+0x73/0x1b0 [ 721.845524][T16124] ? pfn_modify_allowed+0x2e0/0x2e0 [ 721.850574][T16124] ? __kasan_check_write+0x14/0x20 [ 721.855500][T16124] ? __set_page_owner+0x2ee/0x310 [ 721.860361][T16124] __pte_alloc+0x86/0x350 [ 721.864527][T16124] ? post_alloc_hook+0x1ab/0x1b0 [ 721.869483][T16124] ? free_pgtables+0x210/0x210 [ 721.874076][T16124] ? get_page_from_freelist+0x38b/0x400 [ 721.879466][T16124] copy_pte_range+0x1b1f/0x20b0 [ 721.884146][T16124] ? __kunmap_atomic+0x80/0x80 [ 721.888743][T16124] ? __pud_alloc+0x260/0x260 [ 721.893170][T16124] ? __pud_alloc+0x218/0x260 [ 721.897683][T16124] ? do_handle_mm_fault+0x2370/0x2370 [ 721.902976][T16124] copy_page_range+0xc1e/0x1090 [ 721.907666][T16124] ? pfn_valid+0x1e0/0x1e0 [ 721.911919][T16124] dup_mmap+0x99f/0xea0 [ 721.915916][T16124] ? __delayed_free_task+0x20/0x20 [ 721.920861][T16124] ? mm_init+0x807/0x960 [ 721.924936][T16124] dup_mm+0x91/0x330 [ 721.928668][T16124] copy_mm+0x108/0x1b0 [ 721.932578][T16124] copy_process+0x1295/0x3250 [ 721.937091][T16124] ? proc_fail_nth_write+0x213/0x290 [ 721.942214][T16124] ? proc_fail_nth_read+0x220/0x220 [ 721.947330][T16124] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 721.952285][T16124] ? vfs_write+0x9af/0x1050 [ 721.956616][T16124] ? vmacache_update+0xb7/0x120 [ 721.961312][T16124] kernel_clone+0x22d/0x990 [ 721.965663][T16124] ? file_end_write+0x1b0/0x1b0 [ 721.970331][T16124] ? __kasan_check_write+0x14/0x20 [ 721.975282][T16124] ? create_io_thread+0x1e0/0x1e0 [ 721.980227][T16124] ? __mutex_lock_slowpath+0x10/0x10 [ 721.985354][T16124] __x64_sys_clone+0x289/0x310 [ 721.989946][T16124] ? __do_sys_vfork+0x130/0x130 [ 721.994653][T16124] ? debug_smp_processor_id+0x17/0x20 [ 721.999840][T16124] do_syscall_64+0x44/0xd0 [ 722.004091][T16124] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 722.009822][T16124] RIP: 0033:0x7fb67320a5a9 [ 722.014078][T16124] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 722.033689][T16124] RSP: 002b:00007fb671f7e118 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 722.041938][T16124] RAX: ffffffffffffffda RBX: 00007fb67332af80 RCX: 00007fb67320a5a9 [ 722.049833][T16124] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000010000000 [ 722.057643][T16124] RBP: 00007fb671f7e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 722.065554][T16124] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 18:39:33 executing program 2: syz_clone(0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 53) 18:39:33 executing program 3: r0 = socket(0xa, 0x1, 0x0) setsockopt$MRT_DEL_VIF(r0, 0x0, 0xcb, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$FOU_CMD_GET(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20001001}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x60, 0x0, 0x400, 0x70bd29, 0x25dfdbfb, {}, [@FOU_ATTR_PORT={0x6, 0x1, 0x4e24}, @FOU_ATTR_AF={0x5, 0x2, 0x2}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x2f}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e23}, @FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_PEER_V6={0x14, 0x9, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e24}]}, 0x60}, 0x1, 0x0, 0x0, 0x24000000}, 0x40080) 18:39:33 executing program 5: sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x1, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1f}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4044041) r0 = signalfd(0xffffffffffffffff, 0x0, 0x0) close(r0) (async) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x2c, 0x0, 0x0, 0x70bd28, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x4}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x624c}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x6ba0e079}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4008094}, 0x4c080) r1 = socket(0xa, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r1, 0x6, 0x2, 0x0, 0x0) 18:39:33 executing program 1: r0 = socket(0xa, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x29, 0x2, 0x0, 0x0) r1 = accept4$vsock_stream(r0, &(0x7f0000000000), 0x10, 0x80800) (async) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, &(0x7f00000001c0)=0x6) (async) r2 = socket$inet_udp(0x2, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x80010, r2, 0x0) (async) ioctl$AUTOFS_IOC_EXPIRE(r2, 0x810c9365, &(0x7f0000000080)={{0x2, 0x6}, 0x100, './file0\x00'}) (async) signalfd(r1, &(0x7f0000000040)={[0x400]}, 0x8) 18:39:33 executing program 0: r0 = socket(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x80108906, &(0x7f0000000000)={'batadv_slave_1\x00'}) 18:39:33 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000004, 0x10, r0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000004, 0x10, r1, 0x0) (async) r2 = signalfd(r1, 0x0, 0x0) close(r2) getsockopt$bt_BT_DEFER_SETUP(r2, 0x112, 0x7, &(0x7f0000000040), &(0x7f0000000080)=0x4) (async) r3 = socket(0xa, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r3, 0x28, 0x2, 0x0, 0x0) 18:39:33 executing program 1: r0 = socket(0x8, 0x800, 0x5) r1 = socket$inet_udp(0x2, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000004, 0x10, r1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x29, 0x2, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x8010, 0xffffffffffffffff, 0x0) 18:39:33 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000004, 0x10, r0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000004, 0x10, r1, 0x0) (async) r2 = signalfd(r1, 0x0, 0x0) close(r2) getsockopt$bt_BT_DEFER_SETUP(r2, 0x112, 0x7, &(0x7f0000000040), &(0x7f0000000080)=0x4) r3 = socket(0xa, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r3, 0x28, 0x2, 0x0, 0x0) 18:39:33 executing program 3: r0 = socket(0xa, 0x1, 0x0) setsockopt$MRT_DEL_VIF(r0, 0x0, 0xcb, 0x0, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$FOU_CMD_GET(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20001001}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x60, 0x0, 0x400, 0x70bd29, 0x25dfdbfb, {}, [@FOU_ATTR_PORT={0x6, 0x1, 0x4e24}, @FOU_ATTR_AF={0x5, 0x2, 0x2}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x2f}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e23}, @FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_PEER_V6={0x14, 0x9, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e24}]}, 0x60}, 0x1, 0x0, 0x0, 0x24000000}, 0x40080) 18:39:33 executing program 0: r0 = socket(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x80108907, &(0x7f0000000000)={'batadv_slave_1\x00'}) 18:39:33 executing program 5: sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x1, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1f}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4044041) (async) r0 = signalfd(0xffffffffffffffff, 0x0, 0x0) close(r0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x2c, 0x0, 0x0, 0x70bd28, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x4}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x624c}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x6ba0e079}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4008094}, 0x4c080) r1 = socket(0xa, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r1, 0x6, 0x2, 0x0, 0x0) 18:39:33 executing program 1: r0 = socket(0x8, 0x800, 0x5) (async) r1 = socket$inet_udp(0x2, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000004, 0x10, r1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x29, 0x2, 0x0, 0x0) (async) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x8010, 0xffffffffffffffff, 0x0) [ 722.073358][T16124] R13: 00007ffe782f632f R14: 00007fb671f7e300 R15: 0000000000022000 [ 722.081169][T16124] [ 722.130046][T16162] FAULT_INJECTION: forcing a failure. [ 722.130046][T16162] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 722.156387][T16162] CPU: 0 PID: 16162 Comm: syz-executor.2 Not tainted 5.15.74-syzkaller-04383-g7f2e600bf63a #0 [ 722.166460][T16162] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/11/2022 [ 722.176357][T16162] Call Trace: [ 722.179565][T16162] [ 722.182339][T16162] dump_stack_lvl+0x151/0x1b7 [ 722.186864][T16162] ? bfq_pos_tree_add_move+0x43e/0x43e [ 722.192246][T16162] dump_stack+0x15/0x17 [ 722.196228][T16162] should_fail+0x3c0/0x510 [ 722.200480][T16162] should_fail_alloc_page+0x58/0x70 [ 722.205519][T16162] __alloc_pages+0x1de/0x7c0 [ 722.209945][T16162] ? __count_vm_events+0x30/0x30 [ 722.214712][T16162] ? __this_cpu_preempt_check+0x13/0x20 [ 722.220102][T16162] ? __mod_node_page_state+0xac/0xf0 [ 722.225216][T16162] pte_alloc_one+0x73/0x1b0 [ 722.229557][T16162] ? pfn_modify_allowed+0x2e0/0x2e0 [ 722.234679][T16162] __pte_alloc+0x86/0x350 [ 722.238841][T16162] ? free_pgtables+0x210/0x210 [ 722.243442][T16162] ? _raw_spin_lock+0xa3/0x1b0 [ 722.248143][T16162] ? _raw_spin_trylock_bh+0x1d0/0x1d0 [ 722.253353][T16162] ? __kernel_text_address+0x9a/0x110 [ 722.258560][T16162] copy_pte_range+0x1b1f/0x20b0 [ 722.263256][T16162] ? __kunmap_atomic+0x80/0x80 [ 722.267855][T16162] ? __kasan_slab_alloc+0xc4/0xe0 [ 722.272709][T16162] ? __kasan_slab_alloc+0xb2/0xe0 [ 722.277568][T16162] ? kmem_cache_alloc+0x189/0x2f0 [ 722.282443][T16162] ? vm_area_dup+0x26/0x1d0 [ 722.286768][T16162] ? dup_mmap+0x6b8/0xea0 [ 722.290963][T16162] ? dup_mm+0x91/0x330 [ 722.294846][T16162] ? copy_mm+0x108/0x1b0 [ 722.298921][T16162] ? copy_process+0x1295/0x3250 [ 722.303721][T16162] ? kernel_clone+0x22d/0x990 [ 722.308207][T16162] ? __x64_sys_clone+0x289/0x310 [ 722.312982][T16162] ? do_syscall_64+0x44/0xd0 [ 722.317406][T16162] ? entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 722.323322][T16162] copy_page_range+0xc1e/0x1090 [ 722.328004][T16162] ? pfn_valid+0x1e0/0x1e0 [ 722.332256][T16162] dup_mmap+0x99f/0xea0 [ 722.336277][T16162] ? __delayed_free_task+0x20/0x20 [ 722.341192][T16162] ? mm_init+0x807/0x960 [ 722.345276][T16162] dup_mm+0x91/0x330 [ 722.349001][T16162] copy_mm+0x108/0x1b0 [ 722.352916][T16162] copy_process+0x1295/0x3250 [ 722.357609][T16162] ? proc_fail_nth_write+0x213/0x290 [ 722.362715][T16162] ? proc_fail_nth_read+0x220/0x220 [ 722.367750][T16162] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 722.372697][T16162] ? vfs_write+0x9af/0x1050 [ 722.377037][T16162] ? vmacache_update+0xb7/0x120 [ 722.381822][T16162] kernel_clone+0x22d/0x990 [ 722.386418][T16162] ? file_end_write+0x1b0/0x1b0 [ 722.391105][T16162] ? __kasan_check_write+0x14/0x20 [ 722.396044][T16162] ? create_io_thread+0x1e0/0x1e0 [ 722.400996][T16162] ? __mutex_lock_slowpath+0x10/0x10 [ 722.406112][T16162] __x64_sys_clone+0x289/0x310 [ 722.410720][T16162] ? __do_sys_vfork+0x130/0x130 [ 722.415399][T16162] ? debug_smp_processor_id+0x17/0x20 [ 722.420704][T16162] do_syscall_64+0x44/0xd0 [ 722.424949][T16162] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 722.430685][T16162] RIP: 0033:0x7fb67320a5a9 [ 722.434928][T16162] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 722.454493][T16162] RSP: 002b:00007fb671f7e118 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 722.462734][T16162] RAX: ffffffffffffffda RBX: 00007fb67332af80 RCX: 00007fb67320a5a9 [ 722.470541][T16162] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000010000000 18:39:33 executing program 2: syz_clone(0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 54) 18:39:33 executing program 0: r0 = socket(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x801c581f, &(0x7f0000000000)={'batadv_slave_1\x00'}) 18:39:33 executing program 5: r0 = socket(0xa, 0x1, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) signalfd4(r1, &(0x7f0000000040)={[0x5]}, 0x8, 0x80000) r2 = signalfd(0xffffffffffffffff, 0x0, 0x0) r3 = syz_open_dev$vcsu(&(0x7f0000000080), 0x5, 0x400602) ioctl$AUTOFS_IOC_EXPIRE(r3, 0x810c9365, &(0x7f00000000c0)={{0x2, 0x5}, 0x100, './file0\x00'}) close(r2) r4 = fsmount(r2, 0x0, 0xa) setsockopt$MRT_TABLE(r4, 0x0, 0xcf, &(0x7f0000000000)=0xffffffff, 0x4) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r4, 0x6, 0x2, 0x0, 0x0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x20, 0x0, 0x100, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa}]}, 0x20}, 0x1, 0x0, 0x0, 0x8041}, 0x4008000) 18:39:33 executing program 3: r0 = socket(0xa, 0x1, 0x0) setsockopt$MRT_DEL_VIF(r0, 0x0, 0xcb, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$FOU_CMD_GET(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20001001}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x60, 0x0, 0x400, 0x70bd29, 0x25dfdbfb, {}, [@FOU_ATTR_PORT={0x6, 0x1, 0x4e24}, @FOU_ATTR_AF={0x5, 0x2, 0x2}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x2f}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e23}, @FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_PEER_V6={0x14, 0x9, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e24}]}, 0x60}, 0x1, 0x0, 0x0, 0x24000000}, 0x40080) socket(0xa, 0x1, 0x0) (async) setsockopt$MRT_DEL_VIF(r0, 0x0, 0xcb, 0x0, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$FOU_CMD_GET(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20001001}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x60, 0x0, 0x400, 0x70bd29, 0x25dfdbfb, {}, [@FOU_ATTR_PORT={0x6, 0x1, 0x4e24}, @FOU_ATTR_AF={0x5, 0x2, 0x2}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x2f}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e23}, @FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_PEER_V6={0x14, 0x9, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e24}]}, 0x60}, 0x1, 0x0, 0x0, 0x24000000}, 0x40080) (async) 18:39:33 executing program 4: r0 = socket(0xa, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x28, 0x2, 0x0, 0x0) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_DEL_VIF(r1, 0x0, 0xcb, &(0x7f0000000200)={0x0, 0x4, 0x2, 0x1000, @vifc_lcl_addr=@loopback, @rand_addr=0x64010102}, 0x10) connect$vsock_stream(r0, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) r2 = socket$inet_udp(0x2, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x80016, 0xffffffffffffffff, 0x0) r3 = open_tree(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x80801) fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x40e, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000340)={0x0}) r5 = accept$unix(r3, &(0x7f00000003c0)=@abs, &(0x7f0000000440)=0x6e) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000480)={r4, 0xbc38631c279bbef0, r5, 0x6, 0x80000}) setsockopt$MRT_DEL_VIF(r3, 0x0, 0xcb, &(0x7f0000000280)={0xffffffffffffffff, 0x8, 0x3f, 0x3, @vifc_lcl_ifindex, @multicast2}, 0x10) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x181440, 0x0) ioctl$FS_IOC_SETFSLABEL(r6, 0x41009432, &(0x7f0000000100)="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") r7 = syz_clone(0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(0x0, r7, 0x7, 0xffffffffffffffff, 0x0) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r7, 0x9, &(0x7f00000002c0)=""/75) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f0000000080)={0x80, 0x4, 0x709d, 0xfffffffffffffffc, 0xf1}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000040)) 18:39:33 executing program 1: r0 = socket(0x8, 0x800, 0x5) r1 = socket$inet_udp(0x2, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000004, 0x10, r1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x29, 0x2, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x8010, 0xffffffffffffffff, 0x0) socket(0x8, 0x800, 0x5) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000004, 0x10, r1, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) (async) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x29, 0x2, 0x0, 0x0) (async) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x8010, 0xffffffffffffffff, 0x0) (async) 18:39:33 executing program 3: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x101241, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00', 0x0}) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x44, 0x0, 0x100, 0x70bd27, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x40}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r1}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xffff}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x48c0}, 0x40010) r2 = socket(0xa, 0x1, 0x0) setsockopt$MRT_DEL_VIF(r2, 0x0, 0xcb, 0x0, 0x0) 18:39:33 executing program 5: r0 = socket(0xa, 0x1, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) signalfd4(r1, &(0x7f0000000040)={[0x5]}, 0x8, 0x80000) r2 = signalfd(0xffffffffffffffff, 0x0, 0x0) r3 = syz_open_dev$vcsu(&(0x7f0000000080), 0x5, 0x400602) ioctl$AUTOFS_IOC_EXPIRE(r3, 0x810c9365, &(0x7f00000000c0)={{0x2, 0x5}, 0x100, './file0\x00'}) close(r2) r4 = fsmount(r2, 0x0, 0xa) setsockopt$MRT_TABLE(r4, 0x0, 0xcf, &(0x7f0000000000)=0xffffffff, 0x4) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r4, 0x6, 0x2, 0x0, 0x0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x20, 0x0, 0x100, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa}]}, 0x20}, 0x1, 0x0, 0x0, 0x8041}, 0x4008000) socket(0xa, 0x1, 0x0) (async) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) (async) signalfd4(r1, &(0x7f0000000040)={[0x5]}, 0x8, 0x80000) (async) signalfd(0xffffffffffffffff, 0x0, 0x0) (async) syz_open_dev$vcsu(&(0x7f0000000080), 0x5, 0x400602) (async) ioctl$AUTOFS_IOC_EXPIRE(r3, 0x810c9365, &(0x7f00000000c0)={{0x2, 0x5}, 0x100, './file0\x00'}) (async) close(r2) (async) fsmount(r2, 0x0, 0xa) (async) setsockopt$MRT_TABLE(r4, 0x0, 0xcf, &(0x7f0000000000)=0xffffffff, 0x4) (async) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r4, 0x6, 0x2, 0x0, 0x0) (async) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x20, 0x0, 0x100, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa}]}, 0x20}, 0x1, 0x0, 0x0, 0x8041}, 0x4008000) (async) 18:39:33 executing program 0: r0 = socket(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0xc0045878, &(0x7f0000000000)={'batadv_slave_1\x00'}) [ 722.478548][T16162] RBP: 00007fb671f7e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 722.486344][T16162] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 722.494161][T16162] R13: 00007ffe782f632f R14: 00007fb671f7e300 R15: 0000000000022000 [ 722.501970][T16162] 18:39:33 executing program 4: r0 = socket(0xa, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x28, 0x2, 0x0, 0x0) (async) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_DEL_VIF(r1, 0x0, 0xcb, &(0x7f0000000200)={0x0, 0x4, 0x2, 0x1000, @vifc_lcl_addr=@loopback, @rand_addr=0x64010102}, 0x10) (async) connect$vsock_stream(r0, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) r2 = socket$inet_udp(0x2, 0x2, 0x0) (async) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x80016, 0xffffffffffffffff, 0x0) (async) r3 = open_tree(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x80801) fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x40e, 0x0) (async) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000340)={0x0}) (async) r5 = accept$unix(r3, &(0x7f00000003c0)=@abs, &(0x7f0000000440)=0x6e) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000480)={r4, 0xbc38631c279bbef0, r5, 0x6, 0x80000}) (async) setsockopt$MRT_DEL_VIF(r3, 0x0, 0xcb, &(0x7f0000000280)={0xffffffffffffffff, 0x8, 0x3f, 0x3, @vifc_lcl_ifindex, @multicast2}, 0x10) (async) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x181440, 0x0) ioctl$FS_IOC_SETFSLABEL(r6, 0x41009432, &(0x7f0000000100)="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") r7 = syz_clone(0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(0x0, r7, 0x7, 0xffffffffffffffff, 0x0) (async) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r7, 0x9, &(0x7f00000002c0)=""/75) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f0000000080)={0x80, 0x4, 0x709d, 0xfffffffffffffffc, 0xf1}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000040)) 18:39:33 executing program 1: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(0x0, r0, 0x7, 0xffffffffffffffff, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000001500)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000014c0)={&(0x7f0000000080)={0x1410, 0x1, 0xa, 0x3, 0x70bd28, 0x25dfdbfe, {0x5, 0x0, 0x5}, [@nested={0x1322, 0x15, 0x0, 0x1, [@typed={0x8, 0x65, 0x0, 0x0, @pid=r0}, @generic="eace239de83891418ecf14283e42291157cb1235acc8cadef01e2af67539b80ccaeb6aaf5007da8fae67fbf00ceaea43f84447a6626a0164acfeec9e2dd12cb25a7bd2c5aed599b1d83939fa7419fd8f5089e44f8f1e3a25c15abd39fc7ff7ebc39d6bd5eb44d4ba8024b09893007e8c7f93144a366f39b2b945b618e844f674eab0a5bae65f3a7981ada9a09fc7a7e934cec8f6d685ec8b94fd6657dd522d92a22063dac5b65b3e4e2d02ac4ccc717e736ce5adc13d4fb76df4d57e0733c1d8aa3b081f659cecdc8aa3bc470811f20b34bf2a060e7bbc44eac9d99c718c96", @generic="c98387cc82e60b8187713ee5a03455071e63d6614125d76483bb93f13e00ab37e2690fd3bc798dfd96b29982cf0f613c91d29364d2f8f5bf9640bd1e8ac4738f43cff5331b01a52c7218db6787286a5271446e3015500ae67ea0a463b1a64162f159cd1c8366458f0fca188b6c06e59cfdffd4ac24e8b9a37dc9799892966c13f83e3c9789b2bc7677b31c7536b516eee867444b9c3fddb5900a7c22b8316695e907a36dd1effcb1ca64f4cf8aa33395d44474adcd2fcbdf89f3", @typed={0xc, 0x35, 0x0, 0x0, @u64=0x400000000000000}, @generic="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", @typed={0x14, 0x26, 0x0, 0x0, @ipv6=@private2}, @generic="67703cc096bc99be241e44308bbf5256b586dd4ef20ff3fdd0336a3e334b988df319cc165120c32b1fa1de67170d52e1b0895db5dc2bbf17beb4fc2f54fa168584ba90aa5eef36c0eee5e2335117aceb1cdec0a1c60520bd373a111cf9f60aee582b8a618d574f65be087970", @generic="3337ef26772ed2afb48179803c0255234f8465a257bcc767eb114482c687cc2bd8a119adf717d16ac7dd3d88bdab7b2532e0c697320bc6d20624760c3cb502c1a499fd8d117f1112f5ad7a8fd0acd6360ecf82ebdebcd4989c3631a411c6bdee7a5041713db3f3d27e77127ce45acf729794498e891b433498cb95364c4058c0ed9f26965e29f45cd2fe7e48d3191c291705283481b4c48afdb5e094cbf2fe1cb2ea93d1d4553251f7993e46655f8e40f11fc6d9c22f0114aaa1b62fc0945b31cdd6f3d7176b392b97", @typed={0x14, 0x7e, 0x0, 0x0, @ipv6=@empty}, @typed={0x14, 0x45, 0x0, 0x0, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}]}, @generic="260245e296779564d79c3232966cf4b7d5a8f3d4e0ff4a4d0877130cf7934a453ff00b884a7db73c5f62e4f89001f067b8da92dd07b6b24d921b746ac3f36165ecb77600615348ac6d00d83d4d817606eb9ea8bde01d453dd93d194e9b69692b78bc25fd24ca1b9073d22a08fd8df68da773c9dd572be5eb6ab7b8635c474fb2641fa3f4f2bf91a64b05a379cf49599117d53297ac971b5597f66908a096cbc2cf6107322720f70897a480a86baa295a52a3d08c7ba922be98b35d34cea719ddb99c64e34e851677dda22d2bc77b76c4983a69dc845705"]}, 0x1410}, 0x1, 0x0, 0x0, 0x88c0}, 0x0) r1 = socket(0xa, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r1, 0x29, 0x2, 0x0, 0x0) socketpair(0x2, 0x800, 0x3f, &(0x7f0000000000)) 18:39:33 executing program 4: r0 = socket(0xa, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x28, 0x2, 0x0, 0x0) (async, rerun: 64) r1 = socket$igmp(0x2, 0x3, 0x2) (rerun: 64) setsockopt$MRT_DEL_VIF(r1, 0x0, 0xcb, &(0x7f0000000200)={0x0, 0x4, 0x2, 0x1000, @vifc_lcl_addr=@loopback, @rand_addr=0x64010102}, 0x10) connect$vsock_stream(r0, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) (async, rerun: 32) r2 = socket$inet_udp(0x2, 0x2, 0x0) (async, rerun: 32) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x80016, 0xffffffffffffffff, 0x0) r3 = open_tree(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x80801) fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x40e, 0x0) (async) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000340)={0x0}) r5 = accept$unix(r3, &(0x7f00000003c0)=@abs, &(0x7f0000000440)=0x6e) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000480)={r4, 0xbc38631c279bbef0, r5, 0x6, 0x80000}) (async, rerun: 32) setsockopt$MRT_DEL_VIF(r3, 0x0, 0xcb, &(0x7f0000000280)={0xffffffffffffffff, 0x8, 0x3f, 0x3, @vifc_lcl_ifindex, @multicast2}, 0x10) (async, rerun: 32) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x181440, 0x0) ioctl$FS_IOC_SETFSLABEL(r6, 0x41009432, &(0x7f0000000100)="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") (async) r7 = syz_clone(0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(0x0, r7, 0x7, 0xffffffffffffffff, 0x0) (async, rerun: 64) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r7, 0x9, &(0x7f00000002c0)=""/75) (rerun: 64) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f0000000080)={0x80, 0x4, 0x709d, 0xfffffffffffffffc, 0xf1}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000040)) [ 722.576363][T16207] FAULT_INJECTION: forcing a failure. [ 722.576363][T16207] name failslab, interval 1, probability 0, space 0, times 0 [ 722.592988][T16207] CPU: 0 PID: 16207 Comm: syz-executor.2 Not tainted 5.15.74-syzkaller-04383-g7f2e600bf63a #0 [ 722.603057][T16207] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/11/2022 [ 722.612971][T16207] Call Trace: [ 722.616070][T16207] [ 722.618859][T16207] dump_stack_lvl+0x151/0x1b7 [ 722.623361][T16207] ? bfq_pos_tree_add_move+0x43e/0x43e [ 722.628656][T16207] dump_stack+0x15/0x17 [ 722.632647][T16207] should_fail+0x3c0/0x510 [ 722.636903][T16207] __should_failslab+0x9f/0xe0 [ 722.641501][T16207] should_failslab+0x9/0x20 [ 722.645932][T16207] kmem_cache_alloc+0x4f/0x2f0 [ 722.650527][T16207] ? vm_area_dup+0x26/0x1d0 [ 722.654871][T16207] vm_area_dup+0x26/0x1d0 [ 722.659031][T16207] dup_mmap+0x6b8/0xea0 [ 722.663026][T16207] ? __delayed_free_task+0x20/0x20 [ 722.667979][T16207] ? mm_init+0x807/0x960 [ 722.672055][T16207] dup_mm+0x91/0x330 [ 722.675791][T16207] copy_mm+0x108/0x1b0 [ 722.679703][T16207] copy_process+0x1295/0x3250 [ 722.684214][T16207] ? proc_fail_nth_write+0x213/0x290 [ 722.689334][T16207] ? proc_fail_nth_read+0x220/0x220 [ 722.694366][T16207] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 722.699311][T16207] ? vfs_write+0x9af/0x1050 [ 722.703651][T16207] ? vmacache_update+0xb7/0x120 [ 722.708600][T16207] kernel_clone+0x22d/0x990 [ 722.712939][T16207] ? file_end_write+0x1b0/0x1b0 [ 722.717630][T16207] ? __kasan_check_write+0x14/0x20 [ 722.722580][T16207] ? create_io_thread+0x1e0/0x1e0 [ 722.727554][T16207] ? __mutex_lock_slowpath+0x10/0x10 [ 722.732679][T16207] __x64_sys_clone+0x289/0x310 [ 722.737288][T16207] ? __do_sys_vfork+0x130/0x130 [ 722.741973][T16207] ? debug_smp_processor_id+0x17/0x20 [ 722.747713][T16207] do_syscall_64+0x44/0xd0 [ 722.751947][T16207] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 722.757678][T16207] RIP: 0033:0x7fb67320a5a9 [ 722.761931][T16207] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 722.781390][T16207] RSP: 002b:00007fb671f7e118 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 722.789615][T16207] RAX: ffffffffffffffda RBX: 00007fb67332af80 RCX: 00007fb67320a5a9 [ 722.797432][T16207] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000010000000 [ 722.805254][T16207] RBP: 00007fb671f7e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 722.813051][T16207] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 18:39:34 executing program 2: syz_clone(0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 55) 18:39:34 executing program 3: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x101241, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00', 0x0}) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x44, 0x0, 0x100, 0x70bd27, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x40}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r1}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xffff}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x48c0}, 0x40010) (async) r2 = socket(0xa, 0x1, 0x0) setsockopt$MRT_DEL_VIF(r2, 0x0, 0xcb, 0x0, 0x0) 18:39:34 executing program 0: r0 = socket(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0xc0045878, &(0x7f0000000000)={'batadv_slave_1\x00'}) 18:39:34 executing program 1: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(0x0, r0, 0x7, 0xffffffffffffffff, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000001500)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000014c0)={&(0x7f0000000080)={0x1410, 0x1, 0xa, 0x3, 0x70bd28, 0x25dfdbfe, {0x5, 0x0, 0x5}, [@nested={0x1322, 0x15, 0x0, 0x1, [@typed={0x8, 0x65, 0x0, 0x0, @pid=r0}, @generic="eace239de83891418ecf14283e42291157cb1235acc8cadef01e2af67539b80ccaeb6aaf5007da8fae67fbf00ceaea43f84447a6626a0164acfeec9e2dd12cb25a7bd2c5aed599b1d83939fa7419fd8f5089e44f8f1e3a25c15abd39fc7ff7ebc39d6bd5eb44d4ba8024b09893007e8c7f93144a366f39b2b945b618e844f674eab0a5bae65f3a7981ada9a09fc7a7e934cec8f6d685ec8b94fd6657dd522d92a22063dac5b65b3e4e2d02ac4ccc717e736ce5adc13d4fb76df4d57e0733c1d8aa3b081f659cecdc8aa3bc470811f20b34bf2a060e7bbc44eac9d99c718c96", @generic="c98387cc82e60b8187713ee5a03455071e63d6614125d76483bb93f13e00ab37e2690fd3bc798dfd96b29982cf0f613c91d29364d2f8f5bf9640bd1e8ac4738f43cff5331b01a52c7218db6787286a5271446e3015500ae67ea0a463b1a64162f159cd1c8366458f0fca188b6c06e59cfdffd4ac24e8b9a37dc9799892966c13f83e3c9789b2bc7677b31c7536b516eee867444b9c3fddb5900a7c22b8316695e907a36dd1effcb1ca64f4cf8aa33395d44474adcd2fcbdf89f3", @typed={0xc, 0x35, 0x0, 0x0, @u64=0x400000000000000}, @generic="fd0d46011501a9b5ab36a15cdd9eac8e7336cbe03858e12b6a337b885c1337ac3f8b0668c4a68793a79b7c5b200709968e33056d1477e1948493dd76939702c5fd79ed8f68a8bc3e6afd475496d8f283d469b2827c8dd51ee334740ac4566620d8584da621a83472875657ebacd3666b0234916c98716e6f474a0d661a6c891af11aa746d18bb1b8de9f20666e32442f5834bd3489fc1807508db89b4c83b825163bebad86671d4b19c3559c646a56d50839e53766eeb2b7cecbbc0ca3a9ea617f49a407067679d0e76cececd58200a0819d386e1eda4aa7d9a59df56666b076ad3c4c71a5d27deee950f8352081e41f055b82190d5fa56805d9fd0d1c0e0f57cb96be3d48d7952db3d274193dfb01bc46d3f98ad5d081cd6543caa2da6a1e40a2bd6c3b1aeb1227e2831bbf7ed0fde752fa7165a23e28353c483a4303093cd75e84098b5aa00bdffadb7130a326392328d73ea3eaa7f7e940174a13c6154b5e69822aefd134fbc9f3623ba7cb9d00a128f7bde992fe32d72fce5f69ddb808269509430d28dd5b3748e3bc9afcd5ec44e374a173c9b896323f50de0607a3874b4dbc0a1e76afd37d8a0c21a9d94d2ef0087f4abf6a00f51ae1cb5cd86c74cc9367dbcd49095ee3724d0f89da96681d7aa54e3fd823071ca643ff485474fdec5312c50c69846fe53126794a01a70ca81268060a69f50c170dfeb36883a12766801c052f2f3df51949e6cf5295a0b27b23500ad256c6fb930ba467eee94ff212efa4ad18452615ae365e70c0ed5a0bd1b32aa961da0c0ae7c4f24677eb49210492bb976e1e33d20a07be3067b902d1f183067c92bb5f2d96a4569420816ec20137316ed854a4945ca220e27427b273a3be9434636348b36065fd6eea98ba034a402c2f5f82901a91da72ab2a8070e74e96599b7758840a71dfcb26594f32ff9ae9bdd0040a1c85f6013086a574def9265cb5ff3e87ac4bcdb7b2ff16e600406d064855266c689e737c7139b609acd3dfcfc8f84766ba78cd2abc5b75a44620820e944c951164d4c0fa466366b686b82c4587cffa95659d7735bede1597846032bf4d54b490d1125731d0534fcceef8fc6fba013d961df0ade714a2dbf63f8a14fa6cf511d9cc40cc7b789154c36c4f93938ddd1c361f71bc87dcfc6626530b817ef0771b07ac8af8d014ea7b986c2e410aee3eb07c7dd93b10e0bb3e84c71129bd1ac4b9db92f55a4a76caad5d7d6f7e470a2af8ae242662c2e6ea854e92d0b3457c01707d4e5bda42e8192e6869b8ea9d3a9e9502c0b94fce23adee2d89acbfac1a6326d1f88fe96cbb3c56fd756b23c3c1fb73efb2136f37197a9a6b8a29578fdedfef10bca715c11aeea6e28300e296fe053fb96b9a75a24ad1a294c1b4f974d90b06704316af160e78f6727a3264658336c05ec9fb06004a246a6d590d04790292ee7044391b0242e088efe4b3503b3e98131f91c62d39fc2d2cbb40bb8b634a874b47f40162fbf69e7d725e5c04b949accd35e1e8e6107ac1e5c8c158a3a5589946a1a605a2e30127fd0e33fc1eea85fae01013c397f7837d6d1dbfd3ae5d0f1e6ded72962221df3351de36423479c7ed1b7fd72601ffb165b4fc508f5f23f5236f1fc3d25cc133a6d8df5a6384ddefdddb7c87361fcc886004788a6d4aa634a9bcc8d4cbc10dff8b66f1fe7b2fc529ad1e85ff8e333f00dcbec5c076a354319a5018830fb6901a8ea24cdf2de8ecc4424338c41c0d1230048661e5ce400ec55e88d0d3fc75e84d7452127c0f4b530f50638a7ab5f67b3d68c82871141c22368841dce4bffd3787f09948678069b979411a9abb12f1cd0158c6882f52ba989065047bbd04429f73b336d88e208a535c92ed05bfc22c1f576c42c493e06b9906dfbd3109a2e32c73e1776b81ed9e2b75522fac3e1d3a61c116be826e66bb6c3e3a8bb2236bf4684bd3495c16bc42695e4cb48bdd1f7e37c4bb2990694b3da16ed9c6e7c0a3a17a900629204ce422ec00125a8f91805a39bd9acd2cebdbe274540ae48706800733b704f970a6cb7839e4e4253aa110dba1c93d0f2e022838498ae289b17b5ad8aa09ad3a3b343fbeae7f2a48743ee6d19c7b9fdc341c927365ee34c092939f5ef52b5e6df019d06b7bad5b61498922cb98963ca2dcbf3bbc66b735225c1a6321b1b893663e9494d8de1eaa77f4ef54f717b1215c2372bf0f48996951d641d0d40bbba73b4a8911e8b89ed01e6f1633a78d711548f88d8894635f6202311c6fd93b974ddebcf7f846eed0c63d862d10a22e51de4fd1798567a0bd63c373e6591f7c414905a335bea1fa0451591c7851a4f195778f8a17a1208df0aa93a88c401a75d5412d87ec6d05874e3c0ea8d0a6b31c3b75cfea79ef8a7b8547b3009433635b60bba800280ac5686e351bf84b9e778bb02522b9445429875752d297d1c431bbd51a1b457137a10036a56260d77d598a0fbeaa8acb9363b4d1ef490c479ba80442537f3697a0706243c9b147c8b26ce7562fd6f85e6476a0246a2336144a30ca23fc2da157ee00e513d6bb21eb4ea2228d765826b537e909786ec3fb03a6e412a5536d3b515babd48bdca115f24ee3041042092118c920ae1726a0f26c8b1bf402c328c408d8dca4b4c3ed7de613ea16a3607650d1131a7c7612a321462a47291eeb26b651e33ee1e1d7fe7e86d82721d508d234f5f057325f09cd1721bbf117a5cc4f1eaaa2f57d20deaf526bb95f71e21805c06857070b660b6e184ab3d327fdb3e050d7181affcdb4f3f21ecf9525711e3e1767e47604a2fae73f634006c25efa81387587be88d40bdeb0b64ffbf576ffaa8491afd910dafd8d220479f7e99039def66eed8063c62b7fda8da1d4659f0f7f6b127915c56d2751b7c8d0e623ec4fa07dc4d69d5b8549a4c446f0ecf908322b30c990388bc89d87377bc3f9acd0c7b28d6673e56833c1e301e2d4425fb181878acdc4c099084b6e35b551440e637d3222f18445cd09786f29143824b131a49fe7ffc43e93dad61f08e008c4a2a90a9e0be5a9f23827ee0693763d41f84b7a0e9875612cd84a33ae404f5ae3e2c811525b46dea9f6027e79e44ac849622dedc4dca63f0554e02310ccc144f4f7bfc1d4fcb8ae46d8d2a4919b28ede125054c8459d63fb9d8639028da4b3e4cd76e76c173d608de7b55fb17609007329b39ee8598da9615ae3267b46bf1d0c5d037a48697f29636274ce9a65dc9b795325e5f2357e5f86805aa792b130ef0fc35214710a875d8e184fa891f9d563f5b97480e08e4d1ed5df5ae57e1758877abc11324789d686b906f302afd5fb4d44e096b7a527d21c928b6577dce2a9d8ad984b331b81f2b3e270363b99237e721399a3d39769086682469372dae8474450347ae5f45f6d600aa526996f70a56832b521902305343ceb36aa7eaea09395a4fe64cb9b560f32135b7b4ec49a08f325ff425d2326b25678dc01da270e66f66bd4b2656b2ccb582e4ba18cda0f7dfac5a98573511a610d32bbdea75c6d8c57017ff102c03d63d15209bb0610fafb2735f22df41abb7632d3a3e852312381c811fd767890c2f3bcf14358de2ba1f245042a7e83c65efeffaa29d33bb01f0109ddf93e63fb0fb7000f836ba9e6b4ae3a4156e535f5e778cebdc847ee2c883de5c02ba91ca477e6b907531008d0897c5846d22c0bea8094c427b6a6dbd4d01d8abbddf424970c16ba12ceee2d7585bcc72ef7893339dcb984003942bb4715b08ce4425eaddb73a6724c4a9b3dcf2f574603e0b7ada900f870f8b72f0f1cd73ce4f30fb1acb9097c72837e62c8aecccde7bba0168d3438324b4ba3e022321fef2d340c27157f423ef6a3497398dcc851e9418eff0c53eb290f416be9038d581ffa44e04a2f541f74f020c52acf1083c160769627a1fc4783869ed6bce5ea15f0a96552733319cf2950d243dbcfe075d0065e44dc52c66b26e4024f4589eae7c6419470168bd381e9d35d37441c4562addf2c2e5e06a99863a29d95bc7e378b788307b84e415d3347f6b67327f9543598b10f83ba816632115803ea899b5f8f9688a54a4c647569ba0826ac853131a17b96ede1c3f65a156bad4a7d7670deb674bc8a711c0a3db12a37ac4fe1e4b52c79a63658d33f2c18927c419730194527b6d2022522ff377f97a177fbc9ded5082481d589b756d49b260efdf8f64fab58956b8ff6e3320f36fc14cb71ef8955b091f2b6e7efce8e87b8c14d36cc4e81140ca22dcc74e36bc15b23b477f5588432c042bf76806d34984c5026db33c96fb419666edb51b307fb8996d20a15818ff3192698a7bf9669cc15922cd41df2de577c3beb10aa478f81b3553fa3dc2f9958e28beb19e377a6349f1c9f3bee9079d1c9af4f2d211e341d69c5bc489bdd7922a2ae7535ac590cc3762baa9ec5692cd60dbaae860c5b4469ef029b5cc8a53d51d49aa313de12c36459642209d8355042bb59901c45bef601157b20b6276d358ce0b6136fb711f1b68fe80fe43e0e6ce30249d1df7577b712d199df61a00092c17ffda42e311d8fdc33bf582ec7aebef292e06fc9ae4e62eb5548ddec166bd5581fc463193a1d0eb8cafc4e1e2d269f063d76450595cb3224fa050be8648b6dd86a1082d57a1df4543243ead377023fc127c35261133976a10acfde9993d2862d9bc516756895fb4a46c54ac22c57917f105d32bfcd3ee8a8c2b8eba06cfacb3030bdbada1d0e22a89104b118b75977a953277c254947871b34bfd1b9faff243b32304576cf1d65c793f89c792e75f379cc0800f868c6282624486f766ea5df0cec5bff8ae8c2b67b5df151d0e6a39cf393691ac9afb1a4ad47b69b66162d97fe21d777ee22ff4769b3a300ed245ee8be0ff86e61b1144549bd365b27ed8243f59411cd9c60dbb9c86ad58458fcff80295a2547f092b67749d46a5bed6009503a8970c223b00863de889fb6546cf5124a14aa357f1377de28f0674c2ff2d25318bc73df1844c1e3c4a14b9c3c01b9a314aa6c45b5d4a18d8bf5ba3fb4b25c0a5442fd5d09c7f7d49cb008c8c4e94f3b2b892bcbf9b767cce75f02472a4b72183371d745127e4bb6a16a1fffa7eefe1ed7d25e8a3fcd78cf7ddc457cb6713b8c47fc029dfc928ddfc37b5b8b15835ab33da1911b9739d718ff5e75f2b1fabe790c9054bfb09ec2923dc8512c8d793cfd5b48d76c99c2684479d08da52df08ffc7f8f7e830e3145e633c9d6f27a068fff61ad70f4a90c570ca12f7ffb9ccaad819b5c752e1abacde7bb6557c510911a6841a04297c9e7a54598db06324d0e3a5164c3fd492603562ad0adf6643412b04c0b84199d17d2b6198949b945edb1927202f03819fc81152e5e10f05b7a3e5fb555528e53449ffbd4b55e80bd3c4c947b23125e9a76c3547dc14b5dd90753714ead34a2c70b583ad329d58de4ef30be974aeffc34f606b62087e3ad106450da8845a9b6ecdaeda060b0a675f864335cc678e86533f44dc1cd01c1c728f3b8a0fca41b4e73b136092eea9349f51ef819885f02b816743d25115fc4a9382f099c2d8969c3147cef777b64f6a3f18988346d3e18f3b18997f500e58e91a65c7778394f96fba3dc45b8511ae3ab90ed792acb2191e2e7c3c6721ea0a9bbe92a12ce175da36d6d96d0e2f40c03d4de23c6601754adafcd708cae20938a2cd728f09b3de4ddeeb6e8d7a8036297496c8a51babe6de30c07c0172a1fcd3c4aa67a4caa4081fb6e99db00d65edb846c28390c82554967101ab42049c44f9ad2d9ba3", @typed={0x14, 0x26, 0x0, 0x0, @ipv6=@private2}, @generic="67703cc096bc99be241e44308bbf5256b586dd4ef20ff3fdd0336a3e334b988df319cc165120c32b1fa1de67170d52e1b0895db5dc2bbf17beb4fc2f54fa168584ba90aa5eef36c0eee5e2335117aceb1cdec0a1c60520bd373a111cf9f60aee582b8a618d574f65be087970", @generic="3337ef26772ed2afb48179803c0255234f8465a257bcc767eb114482c687cc2bd8a119adf717d16ac7dd3d88bdab7b2532e0c697320bc6d20624760c3cb502c1a499fd8d117f1112f5ad7a8fd0acd6360ecf82ebdebcd4989c3631a411c6bdee7a5041713db3f3d27e77127ce45acf729794498e891b433498cb95364c4058c0ed9f26965e29f45cd2fe7e48d3191c291705283481b4c48afdb5e094cbf2fe1cb2ea93d1d4553251f7993e46655f8e40f11fc6d9c22f0114aaa1b62fc0945b31cdd6f3d7176b392b97", @typed={0x14, 0x7e, 0x0, 0x0, @ipv6=@empty}, @typed={0x14, 0x45, 0x0, 0x0, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}]}, @generic="260245e296779564d79c3232966cf4b7d5a8f3d4e0ff4a4d0877130cf7934a453ff00b884a7db73c5f62e4f89001f067b8da92dd07b6b24d921b746ac3f36165ecb77600615348ac6d00d83d4d817606eb9ea8bde01d453dd93d194e9b69692b78bc25fd24ca1b9073d22a08fd8df68da773c9dd572be5eb6ab7b8635c474fb2641fa3f4f2bf91a64b05a379cf49599117d53297ac971b5597f66908a096cbc2cf6107322720f70897a480a86baa295a52a3d08c7ba922be98b35d34cea719ddb99c64e34e851677dda22d2bc77b76c4983a69dc845705"]}, 0x1410}, 0x1, 0x0, 0x0, 0x88c0}, 0x0) r1 = socket(0xa, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r1, 0x29, 0x2, 0x0, 0x0) socketpair(0x2, 0x800, 0x3f, &(0x7f0000000000)) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) kcmp$KCMP_EPOLL_TFD(0x0, r0, 0x7, 0xffffffffffffffff, 0x0) (async) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000001500)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000014c0)={&(0x7f0000000080)={0x1410, 0x1, 0xa, 0x3, 0x70bd28, 0x25dfdbfe, {0x5, 0x0, 0x5}, [@nested={0x1322, 0x15, 0x0, 0x1, [@typed={0x8, 0x65, 0x0, 0x0, @pid=r0}, @generic="eace239de83891418ecf14283e42291157cb1235acc8cadef01e2af67539b80ccaeb6aaf5007da8fae67fbf00ceaea43f84447a6626a0164acfeec9e2dd12cb25a7bd2c5aed599b1d83939fa7419fd8f5089e44f8f1e3a25c15abd39fc7ff7ebc39d6bd5eb44d4ba8024b09893007e8c7f93144a366f39b2b945b618e844f674eab0a5bae65f3a7981ada9a09fc7a7e934cec8f6d685ec8b94fd6657dd522d92a22063dac5b65b3e4e2d02ac4ccc717e736ce5adc13d4fb76df4d57e0733c1d8aa3b081f659cecdc8aa3bc470811f20b34bf2a060e7bbc44eac9d99c718c96", @generic="c98387cc82e60b8187713ee5a03455071e63d6614125d76483bb93f13e00ab37e2690fd3bc798dfd96b29982cf0f613c91d29364d2f8f5bf9640bd1e8ac4738f43cff5331b01a52c7218db6787286a5271446e3015500ae67ea0a463b1a64162f159cd1c8366458f0fca188b6c06e59cfdffd4ac24e8b9a37dc9799892966c13f83e3c9789b2bc7677b31c7536b516eee867444b9c3fddb5900a7c22b8316695e907a36dd1effcb1ca64f4cf8aa33395d44474adcd2fcbdf89f3", @typed={0xc, 0x35, 0x0, 0x0, @u64=0x400000000000000}, @generic="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", @typed={0x14, 0x26, 0x0, 0x0, @ipv6=@private2}, @generic="67703cc096bc99be241e44308bbf5256b586dd4ef20ff3fdd0336a3e334b988df319cc165120c32b1fa1de67170d52e1b0895db5dc2bbf17beb4fc2f54fa168584ba90aa5eef36c0eee5e2335117aceb1cdec0a1c60520bd373a111cf9f60aee582b8a618d574f65be087970", @generic="3337ef26772ed2afb48179803c0255234f8465a257bcc767eb114482c687cc2bd8a119adf717d16ac7dd3d88bdab7b2532e0c697320bc6d20624760c3cb502c1a499fd8d117f1112f5ad7a8fd0acd6360ecf82ebdebcd4989c3631a411c6bdee7a5041713db3f3d27e77127ce45acf729794498e891b433498cb95364c4058c0ed9f26965e29f45cd2fe7e48d3191c291705283481b4c48afdb5e094cbf2fe1cb2ea93d1d4553251f7993e46655f8e40f11fc6d9c22f0114aaa1b62fc0945b31cdd6f3d7176b392b97", @typed={0x14, 0x7e, 0x0, 0x0, @ipv6=@empty}, @typed={0x14, 0x45, 0x0, 0x0, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}]}, @generic="260245e296779564d79c3232966cf4b7d5a8f3d4e0ff4a4d0877130cf7934a453ff00b884a7db73c5f62e4f89001f067b8da92dd07b6b24d921b746ac3f36165ecb77600615348ac6d00d83d4d817606eb9ea8bde01d453dd93d194e9b69692b78bc25fd24ca1b9073d22a08fd8df68da773c9dd572be5eb6ab7b8635c474fb2641fa3f4f2bf91a64b05a379cf49599117d53297ac971b5597f66908a096cbc2cf6107322720f70897a480a86baa295a52a3d08c7ba922be98b35d34cea719ddb99c64e34e851677dda22d2bc77b76c4983a69dc845705"]}, 0x1410}, 0x1, 0x0, 0x0, 0x88c0}, 0x0) (async) socket(0xa, 0x1, 0x0) (async) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r1, 0x29, 0x2, 0x0, 0x0) (async) socketpair(0x2, 0x800, 0x3f, &(0x7f0000000000)) (async) 18:39:34 executing program 4: setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(0xffffffffffffffff, 0x111, 0x5, 0xd7, 0x4) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(0xffffffffffffffff, 0x28, 0x2, 0x0, 0x61) 18:39:34 executing program 5: r0 = socket(0xa, 0x1, 0x0) (async) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) signalfd4(r1, &(0x7f0000000040)={[0x5]}, 0x8, 0x80000) (async) r2 = signalfd(0xffffffffffffffff, 0x0, 0x0) r3 = syz_open_dev$vcsu(&(0x7f0000000080), 0x5, 0x400602) ioctl$AUTOFS_IOC_EXPIRE(r3, 0x810c9365, &(0x7f00000000c0)={{0x2, 0x5}, 0x100, './file0\x00'}) close(r2) r4 = fsmount(r2, 0x0, 0xa) setsockopt$MRT_TABLE(r4, 0x0, 0xcf, &(0x7f0000000000)=0xffffffff, 0x4) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r4, 0x6, 0x2, 0x0, 0x0) (async) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x20, 0x0, 0x100, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa}]}, 0x20}, 0x1, 0x0, 0x0, 0x8041}, 0x4008000) 18:39:34 executing program 0: r0 = socket(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0xc0189436, &(0x7f0000000000)={'batadv_slave_1\x00'}) 18:39:34 executing program 3: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x101241, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00', 0x0}) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x44, 0x0, 0x100, 0x70bd27, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x40}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r1}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xffff}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x48c0}, 0x40010) r2 = socket(0xa, 0x1, 0x0) setsockopt$MRT_DEL_VIF(r2, 0x0, 0xcb, 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x101241, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00'}) (async) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x44, 0x0, 0x100, 0x70bd27, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x40}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r1}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xffff}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x48c0}, 0x40010) (async) socket(0xa, 0x1, 0x0) (async) setsockopt$MRT_DEL_VIF(r2, 0x0, 0xcb, 0x0, 0x0) (async) 18:39:34 executing program 5: r0 = signalfd(0xffffffffffffffff, 0x0, 0x0) close(r0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000040)={0x0, 0x0, 0xffffffffffffffff, 0x6}) r1 = socket(0xa, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r1, 0x6, 0x2, 0x0, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="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"], 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x44) setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(r1, 0x111, 0x1, 0x3, 0x4) [ 722.820954][T16207] R13: 00007ffe782f632f R14: 00007fb671f7e300 R15: 0000000000022000 [ 722.828762][T16207] 18:39:34 executing program 1: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(0x0, r0, 0x7, 0xffffffffffffffff, 0x0) (async) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000001500)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000014c0)={&(0x7f0000000080)={0x1410, 0x1, 0xa, 0x3, 0x70bd28, 0x25dfdbfe, {0x5, 0x0, 0x5}, [@nested={0x1322, 0x15, 0x0, 0x1, [@typed={0x8, 0x65, 0x0, 0x0, @pid=r0}, @generic="eace239de83891418ecf14283e42291157cb1235acc8cadef01e2af67539b80ccaeb6aaf5007da8fae67fbf00ceaea43f84447a6626a0164acfeec9e2dd12cb25a7bd2c5aed599b1d83939fa7419fd8f5089e44f8f1e3a25c15abd39fc7ff7ebc39d6bd5eb44d4ba8024b09893007e8c7f93144a366f39b2b945b618e844f674eab0a5bae65f3a7981ada9a09fc7a7e934cec8f6d685ec8b94fd6657dd522d92a22063dac5b65b3e4e2d02ac4ccc717e736ce5adc13d4fb76df4d57e0733c1d8aa3b081f659cecdc8aa3bc470811f20b34bf2a060e7bbc44eac9d99c718c96", @generic="c98387cc82e60b8187713ee5a03455071e63d6614125d76483bb93f13e00ab37e2690fd3bc798dfd96b29982cf0f613c91d29364d2f8f5bf9640bd1e8ac4738f43cff5331b01a52c7218db6787286a5271446e3015500ae67ea0a463b1a64162f159cd1c8366458f0fca188b6c06e59cfdffd4ac24e8b9a37dc9799892966c13f83e3c9789b2bc7677b31c7536b516eee867444b9c3fddb5900a7c22b8316695e907a36dd1effcb1ca64f4cf8aa33395d44474adcd2fcbdf89f3", @typed={0xc, 0x35, 0x0, 0x0, @u64=0x400000000000000}, @generic="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", @typed={0x14, 0x26, 0x0, 0x0, @ipv6=@private2}, @generic="67703cc096bc99be241e44308bbf5256b586dd4ef20ff3fdd0336a3e334b988df319cc165120c32b1fa1de67170d52e1b0895db5dc2bbf17beb4fc2f54fa168584ba90aa5eef36c0eee5e2335117aceb1cdec0a1c60520bd373a111cf9f60aee582b8a618d574f65be087970", @generic="3337ef26772ed2afb48179803c0255234f8465a257bcc767eb114482c687cc2bd8a119adf717d16ac7dd3d88bdab7b2532e0c697320bc6d20624760c3cb502c1a499fd8d117f1112f5ad7a8fd0acd6360ecf82ebdebcd4989c3631a411c6bdee7a5041713db3f3d27e77127ce45acf729794498e891b433498cb95364c4058c0ed9f26965e29f45cd2fe7e48d3191c291705283481b4c48afdb5e094cbf2fe1cb2ea93d1d4553251f7993e46655f8e40f11fc6d9c22f0114aaa1b62fc0945b31cdd6f3d7176b392b97", @typed={0x14, 0x7e, 0x0, 0x0, @ipv6=@empty}, @typed={0x14, 0x45, 0x0, 0x0, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}]}, @generic="260245e296779564d79c3232966cf4b7d5a8f3d4e0ff4a4d0877130cf7934a453ff00b884a7db73c5f62e4f89001f067b8da92dd07b6b24d921b746ac3f36165ecb77600615348ac6d00d83d4d817606eb9ea8bde01d453dd93d194e9b69692b78bc25fd24ca1b9073d22a08fd8df68da773c9dd572be5eb6ab7b8635c474fb2641fa3f4f2bf91a64b05a379cf49599117d53297ac971b5597f66908a096cbc2cf6107322720f70897a480a86baa295a52a3d08c7ba922be98b35d34cea719ddb99c64e34e851677dda22d2bc77b76c4983a69dc845705"]}, 0x1410}, 0x1, 0x0, 0x0, 0x88c0}, 0x0) r1 = socket(0xa, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r1, 0x29, 0x2, 0x0, 0x0) (async) socketpair(0x2, 0x800, 0x3f, &(0x7f0000000000)) 18:39:34 executing program 4: setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(0xffffffffffffffff, 0x111, 0x5, 0xd7, 0x4) (async, rerun: 32) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(0xffffffffffffffff, 0x28, 0x2, 0x0, 0x61) (rerun: 32) 18:39:34 executing program 0: r0 = socket(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0xc020660b, &(0x7f0000000000)={'batadv_slave_1\x00'}) [ 722.869818][T16224] FAULT_INJECTION: forcing a failure. [ 722.869818][T16224] name failslab, interval 1, probability 0, space 0, times 0 [ 722.886182][T16224] CPU: 1 PID: 16224 Comm: syz-executor.2 Not tainted 5.15.74-syzkaller-04383-g7f2e600bf63a #0 [ 722.896254][T16224] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/11/2022 [ 722.906153][T16224] Call Trace: [ 722.909275][T16224] [ 722.912054][T16224] dump_stack_lvl+0x151/0x1b7 [ 722.917764][T16224] ? bfq_pos_tree_add_move+0x43e/0x43e [ 722.923047][T16224] dump_stack+0x15/0x17 [ 722.927210][T16224] should_fail+0x3c0/0x510 [ 722.931472][T16224] __should_failslab+0x9f/0xe0 [ 722.936061][T16224] should_failslab+0x9/0x20 [ 722.940429][T16224] kmem_cache_alloc+0x4f/0x2f0 [ 722.945026][T16224] ? vm_area_dup+0x26/0x1d0 [ 722.949340][T16224] vm_area_dup+0x26/0x1d0 [ 722.953505][T16224] dup_mmap+0x6b8/0xea0 [ 722.957499][T16224] ? __delayed_free_task+0x20/0x20 [ 722.962441][T16224] ? mm_init+0x807/0x960 [ 722.966530][T16224] dup_mm+0x91/0x330 [ 722.970294][T16224] copy_mm+0x108/0x1b0 [ 722.974161][T16224] copy_process+0x1295/0x3250 [ 722.978673][T16224] ? proc_fail_nth_write+0x213/0x290 [ 722.983808][T16224] ? proc_fail_nth_read+0x220/0x220 [ 722.988837][T16224] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 722.993782][T16224] ? vfs_write+0x9af/0x1050 [ 722.998119][T16224] ? vmacache_update+0xb7/0x120 [ 723.002803][T16224] kernel_clone+0x22d/0x990 [ 723.007153][T16224] ? file_end_write+0x1b0/0x1b0 [ 723.011839][T16224] ? __kasan_check_write+0x14/0x20 [ 723.016787][T16224] ? create_io_thread+0x1e0/0x1e0 [ 723.021735][T16224] ? __mutex_lock_slowpath+0x10/0x10 [ 723.026845][T16224] __x64_sys_clone+0x289/0x310 [ 723.031451][T16224] ? __do_sys_vfork+0x130/0x130 [ 723.036133][T16224] ? debug_smp_processor_id+0x17/0x20 [ 723.041449][T16224] do_syscall_64+0x44/0xd0 [ 723.045766][T16224] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 723.051492][T16224] RIP: 0033:0x7fb67320a5a9 [ 723.055747][T16224] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 723.075277][T16224] RSP: 002b:00007fb671f7e118 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 723.083521][T16224] RAX: ffffffffffffffda RBX: 00007fb67332af80 RCX: 00007fb67320a5a9 [ 723.091339][T16224] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000010000000 [ 723.099359][T16224] RBP: 00007fb671f7e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 723.107178][T16224] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 18:39:34 executing program 2: syz_clone(0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 56) 18:39:34 executing program 3: r0 = socket(0xa, 0x1, 0x0) setsockopt$MRT_DEL_VIF(r0, 0x0, 0xcb, 0x0, 0x0) socketpair(0x3, 0x6, 0x1, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$BATADV_CMD_TP_METER_CANCEL(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x44, 0x0, 0x20, 0x70bd2a, 0x25dfdbff, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x4015ca6f}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xfffffffa}]}, 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x40) 18:39:34 executing program 5: r0 = signalfd(0xffffffffffffffff, 0x0, 0x0) close(r0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000040)={0x0, 0x0, 0xffffffffffffffff, 0x6}) (async) r1 = socket(0xa, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r1, 0x6, 0x2, 0x0, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="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"], 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x44) (async) setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(r1, 0x111, 0x1, 0x3, 0x4) 18:39:34 executing program 0: r0 = socket(0xa, 0x1, 0x0) socket$inet(0x2, 0x5, 0x7ff) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00'}) 18:39:34 executing program 4: setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(0xffffffffffffffff, 0x111, 0x5, 0xd7, 0x4) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(0xffffffffffffffff, 0x28, 0x2, 0x0, 0x61) 18:39:34 executing program 1: fcntl$setflags(0xffffffffffffffff, 0x2, 0x0) r0 = pidfd_open(0x0, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x84009422, &(0x7f0000000000)={0x0, 0x0, {0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct}}) 18:39:34 executing program 3: r0 = socket(0xa, 0x1, 0x0) setsockopt$MRT_DEL_VIF(r0, 0x0, 0xcb, 0x0, 0x0) socketpair(0x3, 0x6, 0x1, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$BATADV_CMD_TP_METER_CANCEL(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x44, 0x0, 0x20, 0x70bd2a, 0x25dfdbff, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x4015ca6f}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xfffffffa}]}, 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x40) socket(0xa, 0x1, 0x0) (async) setsockopt$MRT_DEL_VIF(r0, 0x0, 0xcb, 0x0, 0x0) (async) socketpair(0x3, 0x6, 0x1, &(0x7f0000000000)) (async) sendmsg$BATADV_CMD_TP_METER_CANCEL(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x44, 0x0, 0x20, 0x70bd2a, 0x25dfdbff, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x4015ca6f}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xfffffffa}]}, 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x40) (async) 18:39:34 executing program 4: setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(0xffffffffffffffff, 0x28, 0x2, 0x0, 0x0) 18:39:34 executing program 5: r0 = signalfd(0xffffffffffffffff, 0x0, 0x0) close(r0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000040)={0x0, 0x0, 0xffffffffffffffff, 0x6}) r1 = socket(0xa, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r1, 0x6, 0x2, 0x0, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="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"], 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x44) setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(r1, 0x111, 0x1, 0x3, 0x4) signalfd(0xffffffffffffffff, 0x0, 0x0) (async) close(r0) (async) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000040)={0x0, 0x0, 0xffffffffffffffff, 0x6}) (async) socket(0xa, 0x1, 0x0) (async) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r1, 0x6, 0x2, 0x0, 0x0) (async) sendmsg$BATADV_CMD_GET_HARDIF(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="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"], 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x44) (async) setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(r1, 0x111, 0x1, 0x3, 0x4) (async) [ 723.115005][T16224] R13: 00007ffe782f632f R14: 00007fb671f7e300 R15: 0000000000022000 [ 723.122794][T16224] [ 723.136928][T16258] FAULT_INJECTION: forcing a failure. [ 723.136928][T16258] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 723.155562][T16258] CPU: 1 PID: 16258 Comm: syz-executor.2 Not tainted 5.15.74-syzkaller-04383-g7f2e600bf63a #0 18:39:34 executing program 5: r0 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$FIBMAP(r0, 0x1, &(0x7f0000000040)=0x10001) r1 = socket(0xa, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r1, 0x6, 0x2, 0x0, 0x0) 18:39:34 executing program 5: r0 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$FIBMAP(r0, 0x1, &(0x7f0000000040)=0x10001) r1 = socket(0xa, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r1, 0x6, 0x2, 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) (async) ioctl$FIBMAP(r0, 0x1, &(0x7f0000000040)=0x10001) (async) socket(0xa, 0x1, 0x0) (async) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r1, 0x6, 0x2, 0x0, 0x0) (async) 18:39:34 executing program 0: r0 = socket(0xa, 0x1, 0x0) socket$inet(0x2, 0x5, 0x7ff) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00'}) [ 723.165632][T16258] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/11/2022 [ 723.175617][T16258] Call Trace: [ 723.178746][T16258] [ 723.181520][T16258] dump_stack_lvl+0x151/0x1b7 [ 723.186036][T16258] ? bfq_pos_tree_add_move+0x43e/0x43e [ 723.191330][T16258] dump_stack+0x15/0x17 [ 723.195318][T16258] should_fail+0x3c0/0x510 [ 723.199581][T16258] should_fail_alloc_page+0x58/0x70 [ 723.204617][T16258] __alloc_pages+0x1de/0x7c0 [ 723.209031][T16258] ? __count_vm_events+0x30/0x30 [ 723.213803][T16258] ? __this_cpu_preempt_check+0x13/0x20 [ 723.219193][T16258] ? __mod_node_page_state+0xac/0xf0 [ 723.224396][T16258] pte_alloc_one+0x73/0x1b0 [ 723.228737][T16258] ? pfn_modify_allowed+0x2e0/0x2e0 [ 723.233868][T16258] __pte_alloc+0x86/0x350 [ 723.238028][T16258] ? free_pgtables+0x210/0x210 [ 723.242626][T16258] ? _raw_spin_lock+0xa3/0x1b0 [ 723.247235][T16258] ? _raw_spin_trylock_bh+0x1d0/0x1d0 [ 723.252436][T16258] ? __kernel_text_address+0x9a/0x110 [ 723.257642][T16258] copy_pte_range+0x1b1f/0x20b0 [ 723.262338][T16258] ? __kunmap_atomic+0x80/0x80 [ 723.266930][T16258] ? __kasan_slab_alloc+0xc4/0xe0 [ 723.271792][T16258] ? __kasan_slab_alloc+0xb2/0xe0 [ 723.276764][T16258] ? kmem_cache_alloc+0x189/0x2f0 [ 723.281792][T16258] ? vm_area_dup+0x26/0x1d0 [ 723.286131][T16258] ? dup_mmap+0x6b8/0xea0 [ 723.290299][T16258] ? dup_mm+0x91/0x330 [ 723.294293][T16258] ? copy_mm+0x108/0x1b0 [ 723.298367][T16258] ? copy_process+0x1295/0x3250 [ 723.303060][T16258] ? kernel_clone+0x22d/0x990 [ 723.307570][T16258] ? __x64_sys_clone+0x289/0x310 [ 723.312342][T16258] ? do_syscall_64+0x44/0xd0 [ 723.316768][T16258] ? entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 723.322674][T16258] copy_page_range+0xc1e/0x1090 [ 723.327360][T16258] ? pfn_valid+0x1e0/0x1e0 [ 723.331611][T16258] dup_mmap+0x99f/0xea0 [ 723.335605][T16258] ? __delayed_free_task+0x20/0x20 [ 723.340561][T16258] ? mm_init+0x807/0x960 [ 723.344629][T16258] dup_mm+0x91/0x330 [ 723.348366][T16258] copy_mm+0x108/0x1b0 [ 723.352267][T16258] copy_process+0x1295/0x3250 [ 723.356783][T16258] ? proc_fail_nth_write+0x213/0x290 [ 723.361897][T16258] ? proc_fail_nth_read+0x220/0x220 [ 723.366935][T16258] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 723.371881][T16258] ? vfs_write+0x9af/0x1050 [ 723.376309][T16258] ? vmacache_update+0xb7/0x120 [ 723.380997][T16258] kernel_clone+0x22d/0x990 [ 723.385342][T16258] ? file_end_write+0x1b0/0x1b0 [ 723.390114][T16258] ? __kasan_check_write+0x14/0x20 [ 723.395182][T16258] ? create_io_thread+0x1e0/0x1e0 [ 723.400039][T16258] ? __mutex_lock_slowpath+0x10/0x10 [ 723.405251][T16258] __x64_sys_clone+0x289/0x310 [ 723.409849][T16258] ? __do_sys_vfork+0x130/0x130 [ 723.414537][T16258] ? debug_smp_processor_id+0x17/0x20 [ 723.419743][T16258] do_syscall_64+0x44/0xd0 [ 723.423993][T16258] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 723.429731][T16258] RIP: 0033:0x7fb67320a5a9 [ 723.433997][T16258] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 723.453419][T16258] RSP: 002b:00007fb671f7e118 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 723.461664][T16258] RAX: ffffffffffffffda RBX: 00007fb67332af80 RCX: 00007fb67320a5a9 18:39:34 executing program 2: syz_clone(0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 57) 18:39:34 executing program 4: setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(0xffffffffffffffff, 0x28, 0x2, 0x0, 0x0) 18:39:34 executing program 1: fcntl$setflags(0xffffffffffffffff, 0x2, 0x0) r0 = pidfd_open(0x0, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x84009422, &(0x7f0000000000)={0x0, 0x0, {0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct}}) 18:39:34 executing program 5: r0 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$FIBMAP(r0, 0x1, &(0x7f0000000040)=0x10001) r1 = socket(0xa, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r1, 0x6, 0x2, 0x0, 0x0) 18:39:34 executing program 0: r0 = socket(0xa, 0x1, 0x0) socket$inet(0x2, 0x5, 0x7ff) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00'}) socket(0xa, 0x1, 0x0) (async) socket$inet(0x2, 0x5, 0x7ff) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00'}) (async) 18:39:34 executing program 3: r0 = socket(0xa, 0x1, 0x0) setsockopt$MRT_DEL_VIF(r0, 0x0, 0xcb, 0x0, 0x0) (async) socketpair(0x3, 0x6, 0x1, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$BATADV_CMD_TP_METER_CANCEL(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x44, 0x0, 0x20, 0x70bd2a, 0x25dfdbff, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x4015ca6f}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xfffffffa}]}, 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x40) [ 723.469480][T16258] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000010000000 [ 723.477284][T16258] RBP: 00007fb671f7e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 723.485097][T16258] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 723.492908][T16258] R13: 00007ffe782f632f R14: 00007fb671f7e300 R15: 0000000000022000 [ 723.500721][T16258] [ 723.513927][T16289] FAULT_INJECTION: forcing a failure. 18:39:34 executing program 4: setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(0xffffffffffffffff, 0x28, 0x2, 0x0, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(0xffffffffffffffff, 0x28, 0x2, 0x0, 0x0) (async) 18:39:34 executing program 5: r0 = socket(0xa, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x6, 0x2, 0x0, 0x0) sendto$unix(r0, &(0x7f0000000000)="e7a72fedb291b97311de73076122cd4536a8477d5fe1320cca28d3526eeec82ed96c3f39d91a9920ab01e330e09bbc1e6d1d0fe8ae335648bb10d52e9973405a21ad7640e1ebc5f55ecb4337423f058181460f0ab669dce2927fccda8ae9f8fcc2dd927d5e36b8d73295b7a31d20ea06ffc75123f31caaf179dc677b4df743a4ced0a363966b9ccad3213462d04dd2749d36f9028d497b57a8604c38cbc3c45fe665fc3b19c36f297ba0aa492d704c35c3b85672f7704ca834e8358daec5a126c45591b012a733c99a6b7668b59d2e142d06c0165c1f", 0xd6, 0x8404, &(0x7f0000000100)=@file={0x0, './file0\x00'}, 0x6e) 18:39:34 executing program 4: r0 = socket(0xa, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x28, 0x2, 0x0, 0x0) socket$igmp(0x2, 0x3, 0x2) 18:39:34 executing program 5: r0 = socket(0xa, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x6, 0x2, 0x0, 0x0) (async) sendto$unix(r0, &(0x7f0000000000)="e7a72fedb291b97311de73076122cd4536a8477d5fe1320cca28d3526eeec82ed96c3f39d91a9920ab01e330e09bbc1e6d1d0fe8ae335648bb10d52e9973405a21ad7640e1ebc5f55ecb4337423f058181460f0ab669dce2927fccda8ae9f8fcc2dd927d5e36b8d73295b7a31d20ea06ffc75123f31caaf179dc677b4df743a4ced0a363966b9ccad3213462d04dd2749d36f9028d497b57a8604c38cbc3c45fe665fc3b19c36f297ba0aa492d704c35c3b85672f7704ca834e8358daec5a126c45591b012a733c99a6b7668b59d2e142d06c0165c1f", 0xd6, 0x8404, &(0x7f0000000100)=@file={0x0, './file0\x00'}, 0x6e) 18:39:34 executing program 4: r0 = socket(0xa, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x28, 0x2, 0x0, 0x0) socket$igmp(0x2, 0x3, 0x2) socket(0xa, 0x1, 0x0) (async) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x28, 0x2, 0x0, 0x0) (async) socket$igmp(0x2, 0x3, 0x2) (async) 18:39:34 executing program 5: r0 = socket(0xa, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x6, 0x2, 0x0, 0x0) sendto$unix(r0, &(0x7f0000000000)="e7a72fedb291b97311de73076122cd4536a8477d5fe1320cca28d3526eeec82ed96c3f39d91a9920ab01e330e09bbc1e6d1d0fe8ae335648bb10d52e9973405a21ad7640e1ebc5f55ecb4337423f058181460f0ab669dce2927fccda8ae9f8fcc2dd927d5e36b8d73295b7a31d20ea06ffc75123f31caaf179dc677b4df743a4ced0a363966b9ccad3213462d04dd2749d36f9028d497b57a8604c38cbc3c45fe665fc3b19c36f297ba0aa492d704c35c3b85672f7704ca834e8358daec5a126c45591b012a733c99a6b7668b59d2e142d06c0165c1f", 0xd6, 0x8404, &(0x7f0000000100)=@file={0x0, './file0\x00'}, 0x6e) socket(0xa, 0x1, 0x0) (async) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x6, 0x2, 0x0, 0x0) (async) sendto$unix(r0, &(0x7f0000000000)="e7a72fedb291b97311de73076122cd4536a8477d5fe1320cca28d3526eeec82ed96c3f39d91a9920ab01e330e09bbc1e6d1d0fe8ae335648bb10d52e9973405a21ad7640e1ebc5f55ecb4337423f058181460f0ab669dce2927fccda8ae9f8fcc2dd927d5e36b8d73295b7a31d20ea06ffc75123f31caaf179dc677b4df743a4ced0a363966b9ccad3213462d04dd2749d36f9028d497b57a8604c38cbc3c45fe665fc3b19c36f297ba0aa492d704c35c3b85672f7704ca834e8358daec5a126c45591b012a733c99a6b7668b59d2e142d06c0165c1f", 0xd6, 0x8404, &(0x7f0000000100)=@file={0x0, './file0\x00'}, 0x6e) (async) [ 723.513927][T16289] name failslab, interval 1, probability 0, space 0, times 0 [ 723.529501][T16289] CPU: 1 PID: 16289 Comm: syz-executor.2 Not tainted 5.15.74-syzkaller-04383-g7f2e600bf63a #0 [ 723.539573][T16289] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/11/2022 [ 723.549462][T16289] Call Trace: [ 723.552586][T16289] [ 723.555365][T16289] dump_stack_lvl+0x151/0x1b7 [ 723.559885][T16289] ? bfq_pos_tree_add_move+0x43e/0x43e [ 723.565183][T16289] dump_stack+0x15/0x17 [ 723.569168][T16289] should_fail+0x3c0/0x510 [ 723.573419][T16289] __should_failslab+0x9f/0xe0 [ 723.578021][T16289] should_failslab+0x9/0x20 [ 723.582360][T16289] kmem_cache_alloc+0x4f/0x2f0 [ 723.587056][T16289] ? vm_area_dup+0x26/0x1d0 [ 723.591407][T16289] vm_area_dup+0x26/0x1d0 [ 723.595568][T16289] dup_mmap+0x6b8/0xea0 [ 723.599641][T16289] ? __delayed_free_task+0x20/0x20 [ 723.604592][T16289] ? mm_init+0x807/0x960 [ 723.608669][T16289] dup_mm+0x91/0x330 [ 723.612402][T16289] copy_mm+0x108/0x1b0 [ 723.616402][T16289] copy_process+0x1295/0x3250 [ 723.620898][T16289] ? proc_fail_nth_write+0x213/0x290 [ 723.626062][T16289] ? proc_fail_nth_read+0x220/0x220 [ 723.631054][T16289] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 723.636006][T16289] ? vfs_write+0x9af/0x1050 [ 723.640342][T16289] ? vmacache_update+0xb7/0x120 [ 723.645028][T16289] kernel_clone+0x22d/0x990 [ 723.649379][T16289] ? file_end_write+0x1b0/0x1b0 [ 723.654055][T16289] ? __kasan_check_write+0x14/0x20 [ 723.659006][T16289] ? create_io_thread+0x1e0/0x1e0 [ 723.665600][T16289] ? __mutex_lock_slowpath+0x10/0x10 [ 723.670730][T16289] __x64_sys_clone+0x289/0x310 [ 723.675321][T16289] ? __do_sys_vfork+0x130/0x130 [ 723.680009][T16289] ? debug_smp_processor_id+0x17/0x20 [ 723.685218][T16289] do_syscall_64+0x44/0xd0 [ 723.689469][T16289] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 723.695197][T16289] RIP: 0033:0x7fb67320a5a9 [ 723.699458][T16289] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 18:39:35 executing program 2: syz_clone(0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 58) 18:39:35 executing program 5: r0 = socket(0xa, 0x1, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000004, 0x10, r1, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000080)={0x0, 0x2, r1, 0x1000, 0x80000}) r2 = socket$inet_udp(0x2, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000004, 0x10, r2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3in6={0x18, 0x1, {0x0, r2, 0x4, 0x0, 0x1, 0x0, {0xa, 0x4e24, 0x5, @dev={0xfe, 0x80, '\x00', 0x14}, 0x3f}}}, 0x3a) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x6, 0x2, 0x0, 0x0) setsockopt$MRT_DEL_MFC_PROXY(r0, 0x0, 0xd3, &(0x7f0000000040)={@multicast2, @dev={0xac, 0x14, 0x14, 0x10}, 0xffffffffffffffff, "2f75c990576d75845c0e66640f9b7ed209274ed58d5b2d8e4725efd3923ea166", 0x81, 0x1ff, 0x20, 0x3}, 0x3c) 18:39:35 executing program 4: r0 = socket(0xa, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x28, 0x2, 0x0, 0x0) socket$igmp(0x2, 0x3, 0x2) 18:39:35 executing program 1: fcntl$setflags(0xffffffffffffffff, 0x2, 0x0) (async) r0 = pidfd_open(0x0, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x84009422, &(0x7f0000000000)={0x0, 0x0, {0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct}}) 18:39:35 executing program 3: r0 = socket(0xa, 0x1, 0x0) setsockopt$MRT_DEL_VIF(r0, 0x0, 0xcb, 0x0, 0x0) accept4$bt_l2cap(r0, 0x0, &(0x7f0000000000), 0x80800) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000280), 0x4142, 0x0) ioctl$ASHMEM_GET_PROT_MASK(r2, 0x7706, &(0x7f00000002c0)) ioctl$VFAT_IOCTL_READDIR_BOTH(r1, 0x82307201, &(0x7f0000000040)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) 18:39:35 executing program 0: r0 = socket(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00'}) getsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x2, &(0x7f0000000040), &(0x7f0000000080)) 18:39:35 executing program 4: r0 = socket(0xa, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x28, 0x2, 0x0, 0xffffffffffffffc6) 18:39:35 executing program 1: r0 = socket(0x23, 0x80000, 0xffffffff) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x29, 0x2, 0x0, 0x0) 18:39:35 executing program 0: r0 = socket(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00'}) getsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x2, &(0x7f0000000040), &(0x7f0000000080)) socket(0xa, 0x1, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00'}) (async) getsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x2, &(0x7f0000000040), &(0x7f0000000080)) (async) [ 723.718893][T16289] RSP: 002b:00007fb671f7e118 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 723.727139][T16289] RAX: ffffffffffffffda RBX: 00007fb67332af80 RCX: 00007fb67320a5a9 [ 723.734950][T16289] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000010000000 [ 723.743020][T16289] RBP: 00007fb671f7e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 723.750831][T16289] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 723.758647][T16289] R13: 00007ffe782f632f R14: 00007fb671f7e300 R15: 0000000000022000 [ 723.766459][T16289] 18:39:35 executing program 5: r0 = socket(0xa, 0x1, 0x0) (async) r1 = socket$inet_udp(0x2, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000004, 0x10, r1, 0x0) (async) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000080)={0x0, 0x2, r1, 0x1000, 0x80000}) r2 = socket$inet_udp(0x2, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000004, 0x10, r2, 0x0) (async) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3in6={0x18, 0x1, {0x0, r2, 0x4, 0x0, 0x1, 0x0, {0xa, 0x4e24, 0x5, @dev={0xfe, 0x80, '\x00', 0x14}, 0x3f}}}, 0x3a) (async) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x6, 0x2, 0x0, 0x0) (async) setsockopt$MRT_DEL_MFC_PROXY(r0, 0x0, 0xd3, &(0x7f0000000040)={@multicast2, @dev={0xac, 0x14, 0x14, 0x10}, 0xffffffffffffffff, "2f75c990576d75845c0e66640f9b7ed209274ed58d5b2d8e4725efd3923ea166", 0x81, 0x1ff, 0x20, 0x3}, 0x3c) 18:39:35 executing program 1: r0 = socket(0x23, 0x80000, 0xffffffff) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x29, 0x2, 0x0, 0x0) 18:39:35 executing program 3: r0 = socket(0xa, 0x1, 0x0) setsockopt$MRT_DEL_VIF(r0, 0x0, 0xcb, 0x0, 0x0) accept4$bt_l2cap(r0, 0x0, &(0x7f0000000000), 0x80800) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000280), 0x4142, 0x0) ioctl$ASHMEM_GET_PROT_MASK(r2, 0x7706, &(0x7f00000002c0)) ioctl$VFAT_IOCTL_READDIR_BOTH(r1, 0x82307201, &(0x7f0000000040)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) socket(0xa, 0x1, 0x0) (async) setsockopt$MRT_DEL_VIF(r0, 0x0, 0xcb, 0x0, 0x0) (async) accept4$bt_l2cap(r0, 0x0, &(0x7f0000000000), 0x80800) (async) socket$pppl2tp(0x18, 0x1, 0x1) (async) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000280), 0x4142, 0x0) (async) ioctl$ASHMEM_GET_PROT_MASK(r2, 0x7706, &(0x7f00000002c0)) (async) ioctl$VFAT_IOCTL_READDIR_BOTH(r1, 0x82307201, &(0x7f0000000040)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) (async) [ 723.808725][T16330] FAULT_INJECTION: forcing a failure. [ 723.808725][T16330] name failslab, interval 1, probability 0, space 0, times 0 [ 723.835991][T16330] CPU: 1 PID: 16330 Comm: syz-executor.2 Not tainted 5.15.74-syzkaller-04383-g7f2e600bf63a #0 [ 723.846067][T16330] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/11/2022 [ 723.855958][T16330] Call Trace: [ 723.859082][T16330] [ 723.861856][T16330] dump_stack_lvl+0x151/0x1b7 [ 723.866371][T16330] ? bfq_pos_tree_add_move+0x43e/0x43e [ 723.871665][T16330] dump_stack+0x15/0x17 [ 723.875745][T16330] should_fail+0x3c0/0x510 [ 723.879995][T16330] __should_failslab+0x9f/0xe0 [ 723.884595][T16330] should_failslab+0x9/0x20 [ 723.888942][T16330] kmem_cache_alloc+0x4f/0x2f0 [ 723.893536][T16330] ? vm_area_dup+0x26/0x1d0 [ 723.897877][T16330] vm_area_dup+0x26/0x1d0 [ 723.902044][T16330] dup_mmap+0x6b8/0xea0 [ 723.906383][T16330] ? __delayed_free_task+0x20/0x20 [ 723.911335][T16330] ? mm_init+0x807/0x960 [ 723.915409][T16330] dup_mm+0x91/0x330 [ 723.919140][T16330] copy_mm+0x108/0x1b0 [ 723.923048][T16330] copy_process+0x1295/0x3250 [ 723.927559][T16330] ? proc_fail_nth_write+0x213/0x290 [ 723.932768][T16330] ? proc_fail_nth_read+0x220/0x220 [ 723.937808][T16330] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 723.942754][T16330] ? vfs_write+0x9af/0x1050 [ 723.947108][T16330] ? vmacache_update+0xb7/0x120 [ 723.951776][T16330] kernel_clone+0x22d/0x990 [ 723.956114][T16330] ? file_end_write+0x1b0/0x1b0 [ 723.960803][T16330] ? __kasan_check_write+0x14/0x20 [ 723.965753][T16330] ? create_io_thread+0x1e0/0x1e0 [ 723.970608][T16330] ? __mutex_lock_slowpath+0x10/0x10 [ 723.975730][T16330] __x64_sys_clone+0x289/0x310 [ 723.980330][T16330] ? __do_sys_vfork+0x130/0x130 [ 723.985110][T16330] ? debug_smp_processor_id+0x17/0x20 [ 723.990443][T16330] do_syscall_64+0x44/0xd0 [ 723.994661][T16330] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 724.000390][T16330] RIP: 0033:0x7fb67320a5a9 [ 724.004642][T16330] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 724.024261][T16330] RSP: 002b:00007fb671f7e118 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 724.032502][T16330] RAX: ffffffffffffffda RBX: 00007fb67332af80 RCX: 00007fb67320a5a9 [ 724.040345][T16330] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000010000000 [ 724.048226][T16330] RBP: 00007fb671f7e1d0 R08: 0000000000000000 R09: 0000000000000000 18:39:35 executing program 2: syz_clone(0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 59) 18:39:35 executing program 4: r0 = socket(0xa, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x28, 0x2, 0x0, 0xffffffffffffffc6) socket(0xa, 0x1, 0x0) (async) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x28, 0x2, 0x0, 0xffffffffffffffc6) (async) 18:39:35 executing program 5: r0 = socket(0xa, 0x1, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000004, 0x10, r1, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000080)={0x0, 0x2, r1, 0x1000, 0x80000}) r2 = socket$inet_udp(0x2, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000004, 0x10, r2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3in6={0x18, 0x1, {0x0, r2, 0x4, 0x0, 0x1, 0x0, {0xa, 0x4e24, 0x5, @dev={0xfe, 0x80, '\x00', 0x14}, 0x3f}}}, 0x3a) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x6, 0x2, 0x0, 0x0) setsockopt$MRT_DEL_MFC_PROXY(r0, 0x0, 0xd3, &(0x7f0000000040)={@multicast2, @dev={0xac, 0x14, 0x14, 0x10}, 0xffffffffffffffff, "2f75c990576d75845c0e66640f9b7ed209274ed58d5b2d8e4725efd3923ea166", 0x81, 0x1ff, 0x20, 0x3}, 0x3c) socket(0xa, 0x1, 0x0) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000004, 0x10, r1, 0x0) (async) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000080)={0x0, 0x2, r1, 0x1000, 0x80000}) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000004, 0x10, r2, 0x0) (async) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3in6={0x18, 0x1, {0x0, r2, 0x4, 0x0, 0x1, 0x0, {0xa, 0x4e24, 0x5, @dev={0xfe, 0x80, '\x00', 0x14}, 0x3f}}}, 0x3a) (async) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x6, 0x2, 0x0, 0x0) (async) setsockopt$MRT_DEL_MFC_PROXY(r0, 0x0, 0xd3, &(0x7f0000000040)={@multicast2, @dev={0xac, 0x14, 0x14, 0x10}, 0xffffffffffffffff, "2f75c990576d75845c0e66640f9b7ed209274ed58d5b2d8e4725efd3923ea166", 0x81, 0x1ff, 0x20, 0x3}, 0x3c) (async) 18:39:35 executing program 0: r0 = socket(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00'}) getsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x2, &(0x7f0000000040), &(0x7f0000000080)) socket(0xa, 0x1, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00'}) (async) getsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x2, &(0x7f0000000040), &(0x7f0000000080)) (async) 18:39:35 executing program 1: r0 = socket(0x23, 0x80000, 0xffffffff) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x29, 0x2, 0x0, 0x0) 18:39:35 executing program 3: r0 = socket(0xa, 0x1, 0x0) setsockopt$MRT_DEL_VIF(r0, 0x0, 0xcb, 0x0, 0x0) (async) accept4$bt_l2cap(r0, 0x0, &(0x7f0000000000), 0x80800) (async) r1 = socket$pppl2tp(0x18, 0x1, 0x1) (async) r2 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000280), 0x4142, 0x0) ioctl$ASHMEM_GET_PROT_MASK(r2, 0x7706, &(0x7f00000002c0)) (async) ioctl$VFAT_IOCTL_READDIR_BOTH(r1, 0x82307201, &(0x7f0000000040)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) 18:39:35 executing program 1: r0 = socket(0x10, 0x4, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x29, 0x2, 0x0, 0x0) [ 724.056020][T16330] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 724.063839][T16330] R13: 00007ffe782f632f R14: 00007fb671f7e300 R15: 0000000000022000 [ 724.071648][T16330] [ 724.084798][T16358] FAULT_INJECTION: forcing a failure. [ 724.084798][T16358] name failslab, interval 1, probability 0, space 0, times 0 18:39:35 executing program 4: r0 = socket(0xa, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x28, 0x2, 0x0, 0xffffffffffffffc6) 18:39:35 executing program 1: r0 = socket(0x10, 0x4, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x29, 0x2, 0x0, 0x0) socket(0x10, 0x4, 0x0) (async) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x29, 0x2, 0x0, 0x0) (async) 18:39:35 executing program 5: r0 = socket(0xa, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x6, 0x2, 0x0, 0x0) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x300, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0xfff}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x20048894) 18:39:35 executing program 1: r0 = socket(0x10, 0x4, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x29, 0x2, 0x0, 0x0) [ 724.101442][T16358] CPU: 1 PID: 16358 Comm: syz-executor.2 Not tainted 5.15.74-syzkaller-04383-g7f2e600bf63a #0 [ 724.111530][T16358] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/11/2022 [ 724.121405][T16358] Call Trace: [ 724.124528][T16358] [ 724.127301][T16358] dump_stack_lvl+0x151/0x1b7 [ 724.131818][T16358] ? bfq_pos_tree_add_move+0x43e/0x43e [ 724.137118][T16358] dump_stack+0x15/0x17 [ 724.141188][T16358] should_fail+0x3c0/0x510 [ 724.145443][T16358] __should_failslab+0x9f/0xe0 [ 724.150043][T16358] should_failslab+0x9/0x20 [ 724.154380][T16358] kmem_cache_alloc+0x4f/0x2f0 18:39:35 executing program 3: r0 = socket(0xa, 0xa, 0x8) setsockopt$MRT_DEL_VIF(r0, 0x0, 0xcb, 0x0, 0x0) r1 = eventfd2(0x2, 0x80801) dup(r1) [ 724.158980][T16358] ? vm_area_dup+0x26/0x1d0 [ 724.163323][T16358] vm_area_dup+0x26/0x1d0 [ 724.167488][T16358] dup_mmap+0x6b8/0xea0 [ 724.171492][T16358] ? __delayed_free_task+0x20/0x20 [ 724.176519][T16358] ? mm_init+0x807/0x960 [ 724.180603][T16358] dup_mm+0x91/0x330 [ 724.184327][T16358] copy_mm+0x108/0x1b0 [ 724.188230][T16358] copy_process+0x1295/0x3250 [ 724.192753][T16358] ? proc_fail_nth_write+0x213/0x290 [ 724.197867][T16358] ? proc_fail_nth_read+0x220/0x220 [ 724.202990][T16358] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 724.207936][T16358] ? vfs_write+0x9af/0x1050 [ 724.212277][T16358] ? vmacache_update+0xb7/0x120 [ 724.216960][T16358] kernel_clone+0x22d/0x990 [ 724.221297][T16358] ? file_end_write+0x1b0/0x1b0 [ 724.225986][T16358] ? __kasan_check_write+0x14/0x20 [ 724.230936][T16358] ? create_io_thread+0x1e0/0x1e0 [ 724.235794][T16358] ? __mutex_lock_slowpath+0x10/0x10 [ 724.240999][T16358] __x64_sys_clone+0x289/0x310 [ 724.245600][T16358] ? __do_sys_vfork+0x130/0x130 [ 724.250287][T16358] ? debug_smp_processor_id+0x17/0x20 [ 724.255494][T16358] do_syscall_64+0x44/0xd0 [ 724.260008][T16358] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 724.265737][T16358] RIP: 0033:0x7fb67320a5a9 [ 724.269989][T16358] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 724.289647][T16358] RSP: 002b:00007fb671f7e118 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 724.297894][T16358] RAX: ffffffffffffffda RBX: 00007fb67332af80 RCX: 00007fb67320a5a9 18:39:35 executing program 2: syz_clone(0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 60) 18:39:35 executing program 1: r0 = socket(0x1, 0x80000, 0xfffffffd) pidfd_getfd(0xffffffffffffffff, r0, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x200500, 0x0) getsockopt$bt_BT_CHANNEL_POLICY(r1, 0x112, 0xa, &(0x7f0000000040)=0xffffff80, &(0x7f0000000080)=0x4) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x29, 0x2, 0x0, 0x0) 18:39:35 executing program 0: r0 = socket(0xa, 0x1, 0x0) r1 = signalfd(0xffffffffffffffff, 0x0, 0x0) close(r1) connect$vsock_stream(r1, &(0x7f0000000080)={0x28, 0x0, 0x2710, @hyper}, 0x10) getsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, &(0x7f00000000c0), 0x2) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f0000000040)={0x2, r1}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00'}) 18:39:35 executing program 3: r0 = socket(0xa, 0xa, 0x8) setsockopt$MRT_DEL_VIF(r0, 0x0, 0xcb, 0x0, 0x0) r1 = eventfd2(0x2, 0x80801) dup(r1) socket(0xa, 0xa, 0x8) (async) setsockopt$MRT_DEL_VIF(r0, 0x0, 0xcb, 0x0, 0x0) (async) eventfd2(0x2, 0x80801) (async) dup(r1) (async) 18:39:35 executing program 4: r0 = socket(0x5, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x28, 0x2, 0x0, 0x0) eventfd2(0x8, 0x0) 18:39:35 executing program 5: r0 = socket(0xa, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x6, 0x2, 0x0, 0x0) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x300, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0xfff}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x20048894) socket(0xa, 0x1, 0x0) (async) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x6, 0x2, 0x0, 0x0) (async) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x300, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0xfff}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x20048894) (async) [ 724.305702][T16358] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000010000000 [ 724.313508][T16358] RBP: 00007fb671f7e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 724.321407][T16358] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 724.329216][T16358] R13: 00007ffe782f632f R14: 00007fb671f7e300 R15: 0000000000022000 [ 724.337030][T16358] [ 724.351095][T16395] FAULT_INJECTION: forcing a failure. 18:39:35 executing program 0: r0 = socket(0xa, 0x1, 0x0) (async) r1 = signalfd(0xffffffffffffffff, 0x0, 0x0) close(r1) (async) connect$vsock_stream(r1, &(0x7f0000000080)={0x28, 0x0, 0x2710, @hyper}, 0x10) (async) getsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, &(0x7f00000000c0), 0x2) (async) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f0000000040)={0x2, r1}) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00'}) 18:39:35 executing program 4: r0 = socket(0x5, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x28, 0x2, 0x0, 0x0) eventfd2(0x8, 0x0) socket(0x5, 0x1, 0x0) (async) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x28, 0x2, 0x0, 0x0) (async) eventfd2(0x8, 0x0) (async) 18:39:35 executing program 5: r0 = socket(0xa, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x6, 0x2, 0x0, 0x0) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x300, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0xfff}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x20048894) socket(0xa, 0x1, 0x0) (async) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x6, 0x2, 0x0, 0x0) (async) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x300, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0xfff}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x20048894) (async) 18:39:35 executing program 4: r0 = socket(0x5, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x28, 0x2, 0x0, 0x0) eventfd2(0x8, 0x0) socket(0x5, 0x1, 0x0) (async) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x28, 0x2, 0x0, 0x0) (async) eventfd2(0x8, 0x0) (async) 18:39:35 executing program 5: r0 = socket(0x5, 0x4, 0xfffffffb) r1 = signalfd(0xffffffffffffffff, 0x0, 0x0) close(r1) r2 = signalfd(0xffffffffffffffff, 0x0, 0x0) close(r2) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'batadv_slave_1\x00'}) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r2, 0x6, 0x2, 0x0, 0xfffffffffffffd68) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x10, 0x70bd25, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x9}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x84) 18:39:35 executing program 5: r0 = socket(0x5, 0x4, 0xfffffffb) r1 = signalfd(0xffffffffffffffff, 0x0, 0x0) close(r1) (async) r2 = signalfd(0xffffffffffffffff, 0x0, 0x0) close(r2) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'batadv_slave_1\x00'}) (async) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r2, 0x6, 0x2, 0x0, 0xfffffffffffffd68) (async) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x10, 0x70bd25, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x9}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x84) [ 724.351095][T16395] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 724.369180][T16395] CPU: 1 PID: 16395 Comm: syz-executor.2 Not tainted 5.15.74-syzkaller-04383-g7f2e600bf63a #0 [ 724.379251][T16395] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/11/2022 [ 724.389142][T16395] Call Trace: [ 724.392266][T16395] [ 724.395043][T16395] dump_stack_lvl+0x151/0x1b7 [ 724.399560][T16395] ? bfq_pos_tree_add_move+0x43e/0x43e [ 724.404851][T16395] dump_stack+0x15/0x17 [ 724.408846][T16395] should_fail+0x3c0/0x510 [ 724.413097][T16395] should_fail_alloc_page+0x58/0x70 [ 724.418222][T16395] __alloc_pages+0x1de/0x7c0 [ 724.422682][T16395] ? __count_vm_events+0x30/0x30 [ 724.427430][T16395] ? __this_cpu_preempt_check+0x13/0x20 [ 724.432886][T16395] ? __mod_node_page_state+0xac/0xf0 [ 724.438008][T16395] pte_alloc_one+0x73/0x1b0 [ 724.442344][T16395] ? pfn_modify_allowed+0x2e0/0x2e0 [ 724.447390][T16395] __pte_alloc+0x86/0x350 [ 724.451550][T16395] ? free_pgtables+0x210/0x210 [ 724.456153][T16395] ? _raw_spin_lock+0xa3/0x1b0 [ 724.460752][T16395] ? _raw_spin_trylock_bh+0x1d0/0x1d0 [ 724.466037][T16395] ? __kernel_text_address+0x9a/0x110 [ 724.471247][T16395] copy_pte_range+0x1b1f/0x20b0 [ 724.475934][T16395] ? __kunmap_atomic+0x80/0x80 [ 724.480534][T16395] ? __kasan_slab_alloc+0xc4/0xe0 [ 724.485391][T16395] ? __kasan_slab_alloc+0xb2/0xe0 [ 724.490260][T16395] ? kmem_cache_alloc+0x189/0x2f0 [ 724.495112][T16395] ? vm_area_dup+0x26/0x1d0 [ 724.499452][T16395] ? dup_mmap+0x6b8/0xea0 [ 724.503617][T16395] ? dup_mm+0x91/0x330 [ 724.507522][T16395] ? copy_mm+0x108/0x1b0 [ 724.511604][T16395] ? copy_process+0x1295/0x3250 [ 724.516295][T16395] ? kernel_clone+0x22d/0x990 [ 724.520802][T16395] ? __x64_sys_clone+0x289/0x310 [ 724.525576][T16395] ? do_syscall_64+0x44/0xd0 [ 724.530001][T16395] ? entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 724.535910][T16395] copy_page_range+0xc1e/0x1090 [ 724.540593][T16395] ? pfn_valid+0x1e0/0x1e0 [ 724.544846][T16395] dup_mmap+0x99f/0xea0 [ 724.548839][T16395] ? __delayed_free_task+0x20/0x20 [ 724.553784][T16395] ? mm_init+0x807/0x960 [ 724.557876][T16395] dup_mm+0x91/0x330 [ 724.561602][T16395] copy_mm+0x108/0x1b0 [ 724.565504][T16395] copy_process+0x1295/0x3250 [ 724.570018][T16395] ? proc_fail_nth_write+0x213/0x290 [ 724.575319][T16395] ? proc_fail_nth_read+0x220/0x220 [ 724.580522][T16395] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 724.585473][T16395] ? vfs_write+0x9af/0x1050 [ 724.589819][T16395] ? vmacache_update+0xb7/0x120 [ 724.594497][T16395] kernel_clone+0x22d/0x990 [ 724.598839][T16395] ? file_end_write+0x1b0/0x1b0 [ 724.603520][T16395] ? __kasan_check_write+0x14/0x20 [ 724.608467][T16395] ? create_io_thread+0x1e0/0x1e0 [ 724.613328][T16395] ? __mutex_lock_slowpath+0x10/0x10 [ 724.618539][T16395] __x64_sys_clone+0x289/0x310 [ 724.623137][T16395] ? __do_sys_vfork+0x130/0x130 [ 724.627823][T16395] ? debug_smp_processor_id+0x17/0x20 [ 724.633028][T16395] do_syscall_64+0x44/0xd0 [ 724.637281][T16395] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 724.643009][T16395] RIP: 0033:0x7fb67320a5a9 [ 724.647353][T16395] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 724.666886][T16395] RSP: 002b:00007fb671f7e118 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 724.675128][T16395] RAX: ffffffffffffffda RBX: 00007fb67332af80 RCX: 00007fb67320a5a9 [ 724.682938][T16395] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000010000000 [ 724.690834][T16395] RBP: 00007fb671f7e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 724.698651][T16395] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 18:39:36 executing program 2: syz_clone(0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 61) 18:39:36 executing program 4: r0 = socket(0xa, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x28, 0x2, 0x0, 0x0) syz_open_dev$vcsn(&(0x7f0000000000), 0x5, 0x0) r1 = accept$packet(r0, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000080)=0x14) fstat(r1, &(0x7f00000000c0)) 18:39:36 executing program 5: r0 = socket(0x5, 0x4, 0xfffffffb) r1 = signalfd(0xffffffffffffffff, 0x0, 0x0) close(r1) (async) r2 = signalfd(0xffffffffffffffff, 0x0, 0x0) close(r2) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'batadv_slave_1\x00'}) (async) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r2, 0x6, 0x2, 0x0, 0xfffffffffffffd68) (async) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x10, 0x70bd25, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x9}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x84) 18:39:36 executing program 1: r0 = socket(0x1, 0x80000, 0xfffffffd) pidfd_getfd(0xffffffffffffffff, r0, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x200500, 0x0) getsockopt$bt_BT_CHANNEL_POLICY(r1, 0x112, 0xa, &(0x7f0000000040)=0xffffff80, &(0x7f0000000080)=0x4) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x29, 0x2, 0x0, 0x0) socket(0x1, 0x80000, 0xfffffffd) (async) pidfd_getfd(0xffffffffffffffff, r0, 0x0) (async) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x200500, 0x0) (async) getsockopt$bt_BT_CHANNEL_POLICY(r1, 0x112, 0xa, &(0x7f0000000040)=0xffffff80, &(0x7f0000000080)=0x4) (async) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x29, 0x2, 0x0, 0x0) (async) 18:39:36 executing program 0: r0 = socket(0xa, 0x1, 0x0) (async, rerun: 64) r1 = signalfd(0xffffffffffffffff, 0x0, 0x0) (rerun: 64) close(r1) (async, rerun: 64) connect$vsock_stream(r1, &(0x7f0000000080)={0x28, 0x0, 0x2710, @hyper}, 0x10) (rerun: 64) getsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, &(0x7f00000000c0), 0x2) (async, rerun: 64) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f0000000040)={0x2, r1}) (rerun: 64) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00'}) 18:39:36 executing program 3: r0 = socket(0xa, 0xa, 0x8) setsockopt$MRT_DEL_VIF(r0, 0x0, 0xcb, 0x0, 0x0) r1 = eventfd2(0x2, 0x80801) dup(r1) socket(0xa, 0xa, 0x8) (async) setsockopt$MRT_DEL_VIF(r0, 0x0, 0xcb, 0x0, 0x0) (async) eventfd2(0x2, 0x80801) (async) dup(r1) (async) 18:39:36 executing program 4: r0 = socket(0xa, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x28, 0x2, 0x0, 0x0) syz_open_dev$vcsn(&(0x7f0000000000), 0x5, 0x0) (async) r1 = accept$packet(r0, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000080)=0x14) fstat(r1, &(0x7f00000000c0)) 18:39:36 executing program 5: socket(0xa, 0x1, 0x0) r0 = open_tree(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x1000) r1 = socket$vsock_stream(0x28, 0x1, 0x0) fremovexattr(r1, &(0x7f0000000040)=@known='security.apparmor\x00') setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x6, 0x2, 0x0, 0x0) [ 724.706456][T16395] R13: 00007ffe782f632f R14: 00007fb671f7e300 R15: 0000000000022000 [ 724.714358][T16395] [ 724.729189][T16438] FAULT_INJECTION: forcing a failure. [ 724.729189][T16438] name failslab, interval 1, probability 0, space 0, times 0 [ 724.747424][T16438] CPU: 1 PID: 16438 Comm: syz-executor.2 Not tainted 5.15.74-syzkaller-04383-g7f2e600bf63a #0 18:39:36 executing program 1: r0 = socket(0x1, 0x80000, 0xfffffffd) pidfd_getfd(0xffffffffffffffff, r0, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x200500, 0x0) getsockopt$bt_BT_CHANNEL_POLICY(r1, 0x112, 0xa, &(0x7f0000000040)=0xffffff80, &(0x7f0000000080)=0x4) (async) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x29, 0x2, 0x0, 0x0) 18:39:36 executing program 5: socket(0xa, 0x1, 0x0) (async) r0 = open_tree(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x1000) (async) r1 = socket$vsock_stream(0x28, 0x1, 0x0) fremovexattr(r1, &(0x7f0000000040)=@known='security.apparmor\x00') (async) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x6, 0x2, 0x0, 0x0) 18:39:36 executing program 3: r0 = socket(0x3a, 0x5, 0x10000001) setsockopt$MRT_DEL_VIF(r0, 0x0, 0xcb, 0x0, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x7fffffff, 0x4) socket$igmp(0x2, 0x3, 0x2) 18:39:36 executing program 5: socket(0xa, 0x1, 0x0) r0 = open_tree(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x1000) r1 = socket$vsock_stream(0x28, 0x1, 0x0) fremovexattr(r1, &(0x7f0000000040)=@known='security.apparmor\x00') setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x6, 0x2, 0x0, 0x0) socket(0xa, 0x1, 0x0) (async) open_tree(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x1000) (async) socket$vsock_stream(0x28, 0x1, 0x0) (async) fremovexattr(r1, &(0x7f0000000040)=@known='security.apparmor\x00') (async) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x6, 0x2, 0x0, 0x0) (async) [ 724.757496][T16438] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/11/2022 [ 724.767387][T16438] Call Trace: [ 724.770513][T16438] [ 724.773297][T16438] dump_stack_lvl+0x151/0x1b7 [ 724.777803][T16438] ? bfq_pos_tree_add_move+0x43e/0x43e [ 724.783101][T16438] dump_stack+0x15/0x17 [ 724.787088][T16438] should_fail+0x3c0/0x510 [ 724.791430][T16438] __should_failslab+0x9f/0xe0 [ 724.796031][T16438] should_failslab+0x9/0x20 [ 724.800372][T16438] kmem_cache_alloc+0x4f/0x2f0 [ 724.805066][T16438] ? vm_area_dup+0x26/0x1d0 [ 724.809402][T16438] vm_area_dup+0x26/0x1d0 [ 724.813666][T16438] dup_mmap+0x6b8/0xea0 [ 724.817652][T16438] ? __delayed_free_task+0x20/0x20 [ 724.822685][T16438] ? mm_init+0x807/0x960 [ 724.826756][T16438] dup_mm+0x91/0x330 [ 724.830483][T16438] copy_mm+0x108/0x1b0 [ 724.834392][T16438] copy_process+0x1295/0x3250 [ 724.838911][T16438] ? proc_fail_nth_write+0x213/0x290 [ 724.844026][T16438] ? proc_fail_nth_read+0x220/0x220 [ 724.849066][T16438] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 724.854115][T16438] ? vfs_write+0x9af/0x1050 [ 724.858457][T16438] ? vmacache_update+0xb7/0x120 [ 724.863157][T16438] kernel_clone+0x22d/0x990 [ 724.867487][T16438] ? file_end_write+0x1b0/0x1b0 [ 724.872173][T16438] ? __kasan_check_write+0x14/0x20 [ 724.877127][T16438] ? create_io_thread+0x1e0/0x1e0 [ 724.881982][T16438] ? __mutex_lock_slowpath+0x10/0x10 [ 724.887098][T16438] __x64_sys_clone+0x289/0x310 [ 724.891704][T16438] ? __do_sys_vfork+0x130/0x130 [ 724.896517][T16438] ? debug_smp_processor_id+0x17/0x20 [ 724.901722][T16438] do_syscall_64+0x44/0xd0 [ 724.905968][T16438] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 724.911705][T16438] RIP: 0033:0x7fb67320a5a9 [ 724.916127][T16438] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 724.935567][T16438] RSP: 002b:00007fb671f7e118 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 724.943809][T16438] RAX: ffffffffffffffda RBX: 00007fb67332af80 RCX: 00007fb67320a5a9 [ 724.951619][T16438] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000010000000 18:39:36 executing program 2: syz_clone(0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 62) 18:39:36 executing program 4: r0 = socket(0xa, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x28, 0x2, 0x0, 0x0) (async) syz_open_dev$vcsn(&(0x7f0000000000), 0x5, 0x0) (async) r1 = accept$packet(r0, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000080)=0x14) fstat(r1, &(0x7f00000000c0)) 18:39:36 executing program 5: socket(0xa, 0x1, 0x0) pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r1 = fsmount(r0, 0x1, 0x2) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r1, 0x6, 0x2, 0x0, 0x0) r2 = signalfd(0xffffffffffffffff, 0x0, 0x0) close(r2) ioctl$SIOCGETMIFCNT_IN6(r2, 0x89e0, &(0x7f0000000040)={0x1}) 18:39:36 executing program 1: r0 = socket(0x3, 0x800, 0x1) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x29, 0x2, 0x0, 0x0) 18:39:36 executing program 3: r0 = socket(0x3a, 0x5, 0x10000001) setsockopt$MRT_DEL_VIF(r0, 0x0, 0xcb, 0x0, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x7fffffff, 0x4) socket$igmp(0x2, 0x3, 0x2) socket(0x3a, 0x5, 0x10000001) (async) setsockopt$MRT_DEL_VIF(r0, 0x0, 0xcb, 0x0, 0x0) (async) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x7fffffff, 0x4) (async) socket$igmp(0x2, 0x3, 0x2) (async) 18:39:36 executing program 0: socketpair(0xcabbde7eb74b057e, 0x0, 0x0, &(0x7f0000001200)) r0 = socket(0x2, 0xc6af0bf14ea11401, 0x3ffffe) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00'}) 18:39:36 executing program 0: socketpair(0xcabbde7eb74b057e, 0x0, 0x0, &(0x7f0000001200)) r0 = socket(0x2, 0xc6af0bf14ea11401, 0x3ffffe) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00'}) 18:39:36 executing program 1: r0 = socket(0x3, 0x800, 0x1) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x29, 0x2, 0x0, 0x0) 18:39:36 executing program 4: r0 = socket(0xa, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x28, 0x2, 0x0, 0x0) r1 = signalfd(0xffffffffffffffff, 0x0, 0x0) close(r1) open_tree(r1, &(0x7f0000000000)='./file0\x00', 0x80000) 18:39:36 executing program 0: socketpair(0xcabbde7eb74b057e, 0x0, 0x0, &(0x7f0000001200)) r0 = socket(0x2, 0xc6af0bf14ea11401, 0x3ffffe) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00'}) socketpair(0xcabbde7eb74b057e, 0x0, 0x0, &(0x7f0000001200)) (async) socket(0x2, 0xc6af0bf14ea11401, 0x3ffffe) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00'}) (async) [ 724.959430][T16438] RBP: 00007fb671f7e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 724.967243][T16438] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 724.975053][T16438] R13: 00007ffe782f632f R14: 00007fb671f7e300 R15: 0000000000022000 [ 724.982868][T16438] 18:39:36 executing program 1: r0 = socket(0x3, 0x800, 0x1) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x29, 0x2, 0x0, 0x0) 18:39:36 executing program 5: socket(0xa, 0x1, 0x0) (async, rerun: 32) pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) (rerun: 32) r1 = fsmount(r0, 0x1, 0x2) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r1, 0x6, 0x2, 0x0, 0x0) (async) r2 = signalfd(0xffffffffffffffff, 0x0, 0x0) close(r2) (async) ioctl$SIOCGETMIFCNT_IN6(r2, 0x89e0, &(0x7f0000000040)={0x1}) [ 725.025208][T16498] FAULT_INJECTION: forcing a failure. [ 725.025208][T16498] name failslab, interval 1, probability 0, space 0, times 0 [ 725.040050][T16498] CPU: 1 PID: 16498 Comm: syz-executor.2 Not tainted 5.15.74-syzkaller-04383-g7f2e600bf63a #0 [ 725.050119][T16498] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/11/2022 [ 725.060017][T16498] Call Trace: [ 725.063136][T16498] [ 725.065912][T16498] dump_stack_lvl+0x151/0x1b7 [ 725.070425][T16498] ? bfq_pos_tree_add_move+0x43e/0x43e [ 725.075802][T16498] ? vma_interval_tree_augment_rotate+0x210/0x210 [ 725.082054][T16498] dump_stack+0x15/0x17 [ 725.086044][T16498] should_fail+0x3c0/0x510 [ 725.090297][T16498] __should_failslab+0x9f/0xe0 [ 725.094901][T16498] should_failslab+0x9/0x20 [ 725.099238][T16498] kmem_cache_alloc+0x4f/0x2f0 [ 725.103837][T16498] ? anon_vma_fork+0xf7/0x4f0 [ 725.108734][T16498] anon_vma_fork+0xf7/0x4f0 [ 725.113062][T16498] ? anon_vma_name+0x43/0x70 [ 725.117503][T16498] dup_mmap+0x750/0xea0 [ 725.121484][T16498] ? __delayed_free_task+0x20/0x20 [ 725.126434][T16498] ? mm_init+0x807/0x960 [ 725.130515][T16498] dup_mm+0x91/0x330 [ 725.134258][T16498] copy_mm+0x108/0x1b0 [ 725.138156][T16498] copy_process+0x1295/0x3250 [ 725.142675][T16498] ? proc_fail_nth_write+0x213/0x290 [ 725.147789][T16498] ? proc_fail_nth_read+0x220/0x220 [ 725.152827][T16498] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 725.157762][T16498] ? vfs_write+0x9af/0x1050 [ 725.162099][T16498] ? vmacache_update+0xb7/0x120 [ 725.166795][T16498] kernel_clone+0x22d/0x990 [ 725.171143][T16498] ? file_end_write+0x1b0/0x1b0 [ 725.175820][T16498] ? __kasan_check_write+0x14/0x20 [ 725.180764][T16498] ? create_io_thread+0x1e0/0x1e0 [ 725.185624][T16498] ? __mutex_lock_slowpath+0x10/0x10 [ 725.190745][T16498] __x64_sys_clone+0x289/0x310 [ 725.195345][T16498] ? __do_sys_vfork+0x130/0x130 [ 725.200128][T16498] ? debug_smp_processor_id+0x17/0x20 [ 725.205414][T16498] do_syscall_64+0x44/0xd0 [ 725.209668][T16498] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 725.215393][T16498] RIP: 0033:0x7fb67320a5a9 [ 725.219741][T16498] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 725.239273][T16498] RSP: 002b:00007fb671f7e118 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 725.247508][T16498] RAX: ffffffffffffffda RBX: 00007fb67332af80 RCX: 00007fb67320a5a9 [ 725.255426][T16498] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000010000000 [ 725.263320][T16498] RBP: 00007fb671f7e1d0 R08: 0000000000000000 R09: 0000000000000000 18:39:36 executing program 2: syz_clone(0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 63) 18:39:36 executing program 4: r0 = socket(0xa, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x28, 0x2, 0x0, 0x0) (async) r1 = signalfd(0xffffffffffffffff, 0x0, 0x0) close(r1) open_tree(r1, &(0x7f0000000000)='./file0\x00', 0x80000) 18:39:36 executing program 0: r0 = socket(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00'}) r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$VFAT_IOCTL_READDIR_BOTH(r1, 0x82307201, &(0x7f00000001c0)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x70, 0x0, 0x10, 0x70bd26, 0x25dfdbfd, {}, [@FOU_ATTR_AF={0x5, 0x2, 0x2}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x2f}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e21}, @FOU_ATTR_PEER_V6={0x14, 0x9, @empty}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @FOU_ATTR_PEER_V6={0x14, 0x9, @mcast2}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e21}]}, 0x70}, 0x1, 0x0, 0x0, 0x4000}, 0x2400c010) 18:39:36 executing program 3: r0 = socket(0x3a, 0x5, 0x10000001) setsockopt$MRT_DEL_VIF(r0, 0x0, 0xcb, 0x0, 0x0) (async) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x7fffffff, 0x4) socket$igmp(0x2, 0x3, 0x2) 18:39:36 executing program 1: r0 = socket(0xb, 0x4, 0x200) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x29, 0x2, 0x0, 0x0) [ 725.271113][T16498] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 725.279970][T16498] R13: 00007ffe782f632f R14: 00007fb671f7e300 R15: 0000000000022000 [ 725.287783][T16498] 18:39:36 executing program 0: r0 = socket(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00'}) r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$VFAT_IOCTL_READDIR_BOTH(r1, 0x82307201, &(0x7f00000001c0)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x70, 0x0, 0x10, 0x70bd26, 0x25dfdbfd, {}, [@FOU_ATTR_AF={0x5, 0x2, 0x2}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x2f}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e21}, @FOU_ATTR_PEER_V6={0x14, 0x9, @empty}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @FOU_ATTR_PEER_V6={0x14, 0x9, @mcast2}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e21}]}, 0x70}, 0x1, 0x0, 0x0, 0x4000}, 0x2400c010) socket(0xa, 0x1, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00'}) (async) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) (async) ioctl$VFAT_IOCTL_READDIR_BOTH(r1, 0x82307201, &(0x7f00000001c0)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) (async) sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x70, 0x0, 0x10, 0x70bd26, 0x25dfdbfd, {}, [@FOU_ATTR_AF={0x5, 0x2, 0x2}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x2f}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e21}, @FOU_ATTR_PEER_V6={0x14, 0x9, @empty}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @FOU_ATTR_PEER_V6={0x14, 0x9, @mcast2}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e21}]}, 0x70}, 0x1, 0x0, 0x0, 0x4000}, 0x2400c010) (async) 18:39:36 executing program 4: r0 = socket(0xa, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x28, 0x2, 0x0, 0x0) (async) r1 = signalfd(0xffffffffffffffff, 0x0, 0x0) close(r1) (async) open_tree(r1, &(0x7f0000000000)='./file0\x00', 0x80000) [ 725.338171][T16515] FAULT_INJECTION: forcing a failure. [ 725.338171][T16515] name failslab, interval 1, probability 0, space 0, times 0 [ 725.356788][T16515] CPU: 0 PID: 16515 Comm: syz-executor.2 Not tainted 5.15.74-syzkaller-04383-g7f2e600bf63a #0 [ 725.366944][T16515] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/11/2022 [ 725.376841][T16515] Call Trace: [ 725.379965][T16515] [ 725.382745][T16515] dump_stack_lvl+0x151/0x1b7 18:39:36 executing program 0: r0 = socket(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00'}) (async) r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$VFAT_IOCTL_READDIR_BOTH(r1, 0x82307201, &(0x7f00000001c0)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) (async) sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x70, 0x0, 0x10, 0x70bd26, 0x25dfdbfd, {}, [@FOU_ATTR_AF={0x5, 0x2, 0x2}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x2f}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e21}, @FOU_ATTR_PEER_V6={0x14, 0x9, @empty}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @FOU_ATTR_PEER_V6={0x14, 0x9, @mcast2}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e21}]}, 0x70}, 0x1, 0x0, 0x0, 0x4000}, 0x2400c010) 18:39:36 executing program 1: r0 = socket(0xb, 0x4, 0x200) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x29, 0x2, 0x0, 0x0) socket(0xb, 0x4, 0x200) (async) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x29, 0x2, 0x0, 0x0) (async) 18:39:36 executing program 4: r0 = socket(0xa, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x28, 0x2, 0x0, 0x0) getsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, &(0x7f0000000040), &(0x7f0000000080)=0x4) kcmp$KCMP_EPOLL_TFD(0xffffffffffffffff, 0xffffffffffffffff, 0x7, 0xffffffffffffffff, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff, 0xffffffff}) 18:39:36 executing program 0: r0 = socket(0xa, 0x1, 0x0) r1 = dup3(r0, r0, 0x80000) r2 = socket$unix(0x1, 0x1, 0x0) connect$pppl2tp(r1, &(0x7f0000000040)=@pppol2tpin6={0x18, 0x1, {0x0, r2, 0x0, 0x0, 0x2, 0x1, {0xa, 0x4e22, 0x1, @empty, 0xfffffff9}}}, 0x32) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00'}) [ 725.387257][T16515] ? bfq_pos_tree_add_move+0x43e/0x43e [ 725.392562][T16515] dump_stack+0x15/0x17 [ 725.396641][T16515] should_fail+0x3c0/0x510 [ 725.400884][T16515] __should_failslab+0x9f/0xe0 [ 725.405489][T16515] should_failslab+0x9/0x20 [ 725.409996][T16515] kmem_cache_alloc+0x4f/0x2f0 [ 725.414594][T16515] ? anon_vma_fork+0x1b9/0x4f0 [ 725.419201][T16515] anon_vma_fork+0x1b9/0x4f0 [ 725.423621][T16515] dup_mmap+0x750/0xea0 [ 725.427611][T16515] ? __delayed_free_task+0x20/0x20 [ 725.432560][T16515] ? mm_init+0x807/0x960 [ 725.436749][T16515] dup_mm+0x91/0x330 [ 725.440456][T16515] copy_mm+0x108/0x1b0 [ 725.444367][T16515] copy_process+0x1295/0x3250 [ 725.448872][T16515] ? proc_fail_nth_write+0x213/0x290 [ 725.453994][T16515] ? proc_fail_nth_read+0x220/0x220 [ 725.459028][T16515] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 725.463975][T16515] ? vfs_write+0x9af/0x1050 [ 725.468322][T16515] ? vmacache_update+0xb7/0x120 [ 725.473005][T16515] kernel_clone+0x22d/0x990 [ 725.477469][T16515] ? file_end_write+0x1b0/0x1b0 [ 725.482154][T16515] ? __kasan_check_write+0x14/0x20 [ 725.487109][T16515] ? create_io_thread+0x1e0/0x1e0 [ 725.491962][T16515] ? __mutex_lock_slowpath+0x10/0x10 [ 725.497084][T16515] __x64_sys_clone+0x289/0x310 [ 725.501684][T16515] ? __do_sys_vfork+0x130/0x130 [ 725.506376][T16515] ? debug_smp_processor_id+0x17/0x20 [ 725.511751][T16515] do_syscall_64+0x44/0xd0 [ 725.516096][T16515] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 725.521818][T16515] RIP: 0033:0x7fb67320a5a9 [ 725.526073][T16515] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 725.545646][T16515] RSP: 002b:00007fb671f7e118 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 725.553844][T16515] RAX: ffffffffffffffda RBX: 00007fb67332af80 RCX: 00007fb67320a5a9 [ 725.561656][T16515] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000010000000 [ 725.569468][T16515] RBP: 00007fb671f7e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 725.577280][T16515] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 18:39:37 executing program 5: socket(0xa, 0x1, 0x0) (async) pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r1 = fsmount(r0, 0x1, 0x2) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r1, 0x6, 0x2, 0x0, 0x0) r2 = signalfd(0xffffffffffffffff, 0x0, 0x0) close(r2) (async) ioctl$SIOCGETMIFCNT_IN6(r2, 0x89e0, &(0x7f0000000040)={0x1}) 18:39:37 executing program 2: syz_clone(0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 64) 18:39:37 executing program 4: r0 = socket(0xa, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x28, 0x2, 0x0, 0x0) getsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, &(0x7f0000000040), &(0x7f0000000080)=0x4) kcmp$KCMP_EPOLL_TFD(0xffffffffffffffff, 0xffffffffffffffff, 0x7, 0xffffffffffffffff, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff, 0xffffffff}) socket(0xa, 0x1, 0x0) (async) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x28, 0x2, 0x0, 0x0) (async) getsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, &(0x7f0000000040), &(0x7f0000000080)=0x4) (async) kcmp$KCMP_EPOLL_TFD(0xffffffffffffffff, 0xffffffffffffffff, 0x7, 0xffffffffffffffff, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff, 0xffffffff}) (async) 18:39:37 executing program 3: r0 = socket(0xa, 0x1, 0x0) fcntl$getown(r0, 0x9) syz_genetlink_get_family_id$fou(&(0x7f0000000100), r0) r1 = signalfd4(r0, &(0x7f0000000080), 0x8, 0x0) connect$pppl2tp(r0, &(0x7f00000000c0)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x19}}, 0x4, 0x3, 0x3f, 0x4}}, 0x26) sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x5c, 0x0, 0x100, 0x70bd2a, 0x25dfdbff, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x2}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x8}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x2dbb3522}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x2}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x410c0) r2 = signalfd(r0, &(0x7f0000000000)={[0x3ff]}, 0x8) fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f0000000040)=']+!/\x00', 0x0, r2) setsockopt$MRT_DEL_VIF(r0, 0x0, 0xcb, 0x0, 0x0) 18:39:37 executing program 0: r0 = socket(0xa, 0x1, 0x0) r1 = dup3(r0, r0, 0x80000) (async) r2 = socket$unix(0x1, 0x1, 0x0) connect$pppl2tp(r1, &(0x7f0000000040)=@pppol2tpin6={0x18, 0x1, {0x0, r2, 0x0, 0x0, 0x2, 0x1, {0xa, 0x4e22, 0x1, @empty, 0xfffffff9}}}, 0x32) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00'}) 18:39:37 executing program 1: r0 = socket(0xb, 0x4, 0x200) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x29, 0x2, 0x0, 0x0) 18:39:37 executing program 3: r0 = socket(0xa, 0x1, 0x0) fcntl$getown(r0, 0x9) syz_genetlink_get_family_id$fou(&(0x7f0000000100), r0) r1 = signalfd4(r0, &(0x7f0000000080), 0x8, 0x0) connect$pppl2tp(r0, &(0x7f00000000c0)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x19}}, 0x4, 0x3, 0x3f, 0x4}}, 0x26) sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x5c, 0x0, 0x100, 0x70bd2a, 0x25dfdbff, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x2}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x8}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x2dbb3522}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x2}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x410c0) r2 = signalfd(r0, &(0x7f0000000000)={[0x3ff]}, 0x8) fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f0000000040)=']+!/\x00', 0x0, r2) setsockopt$MRT_DEL_VIF(r0, 0x0, 0xcb, 0x0, 0x0) socket(0xa, 0x1, 0x0) (async) fcntl$getown(r0, 0x9) (async) syz_genetlink_get_family_id$fou(&(0x7f0000000100), r0) (async) signalfd4(r0, &(0x7f0000000080), 0x8, 0x0) (async) connect$pppl2tp(r0, &(0x7f00000000c0)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x19}}, 0x4, 0x3, 0x3f, 0x4}}, 0x26) (async) sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x5c, 0x0, 0x100, 0x70bd2a, 0x25dfdbff, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x2}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x8}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x2dbb3522}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x2}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x410c0) (async) signalfd(r0, &(0x7f0000000000)={[0x3ff]}, 0x8) (async) fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f0000000040)=']+!/\x00', 0x0, r2) (async) setsockopt$MRT_DEL_VIF(r0, 0x0, 0xcb, 0x0, 0x0) (async) 18:39:37 executing program 4: r0 = socket(0xa, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x28, 0x2, 0x0, 0x0) getsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, &(0x7f0000000040), &(0x7f0000000080)=0x4) kcmp$KCMP_EPOLL_TFD(0xffffffffffffffff, 0xffffffffffffffff, 0x7, 0xffffffffffffffff, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff, 0xffffffff}) socket(0xa, 0x1, 0x0) (async) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x28, 0x2, 0x0, 0x0) (async) getsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, &(0x7f0000000040), &(0x7f0000000080)=0x4) (async) kcmp$KCMP_EPOLL_TFD(0xffffffffffffffff, 0xffffffffffffffff, 0x7, 0xffffffffffffffff, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff, 0xffffffff}) (async) 18:39:37 executing program 5: r0 = socket(0xa, 0x1, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x485, 0x0, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x6, 0x2, 0x0, 0x0) r1 = dup3(r0, r0, 0x80000) connect$vsock_stream(r1, &(0x7f0000000000)={0x28, 0x0, 0x2710, @hyper}, 0x10) 18:39:37 executing program 0: r0 = socket(0xa, 0x1, 0x0) r1 = dup3(r0, r0, 0x80000) (async) r2 = socket$unix(0x1, 0x1, 0x0) connect$pppl2tp(r1, &(0x7f0000000040)=@pppol2tpin6={0x18, 0x1, {0x0, r2, 0x0, 0x0, 0x2, 0x1, {0xa, 0x4e22, 0x1, @empty, 0xfffffff9}}}, 0x32) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00'}) [ 725.585091][T16515] R13: 00007ffe782f632f R14: 00007fb671f7e300 R15: 0000000000022000 [ 725.592905][T16515] [ 725.627918][T16554] FAULT_INJECTION: forcing a failure. 18:39:37 executing program 1: r0 = socket(0xa, 0x1, 0x0) pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) syz_io_uring_setup(0x67ed, &(0x7f0000000180)={0x0, 0xbd1e, 0x200, 0x2, 0x396, 0x0, r1}, &(0x7f0000001000/0x1000)=nil, &(0x7f0000001000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000240)=0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000004, 0x10, r3, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000440)=@IORING_OP_WRITEV={0x2, 0x4, 0x4000, @fd=r3, 0xfffffffffffffff9, &(0x7f0000000400)=[{&(0x7f0000000280)="ea9bd21380fe42fcbd949ea1da480a545930a158d26bb019bb16", 0x1a}, {&(0x7f00000002c0)="84ba7f9aa0eab396f1d89883d987ac79ed3cbddd336e31d5064815b91deb662e78f4fb95e9e4c13e923b3253faa41736e30d49f3bd46f4269fd9c10300d97596974ada9310a787cb93", 0x49}, {&(0x7f0000000340)="73f9b6a4bdce1d68b12aa645c0c804f7941f162971242fb01bd656c38b1bc79561af7ccd15e277b4da68f347c94c94bae7559ba9e6d0e1acff2ef08fea9f66c6d2c9e8b27512b1b5677451a32390c66c1d36357d8a53b58741906a1191d4595b07c0413ab9d9d6dbb3748f25be38255ecb4f2c3a2f129e7355d56fbfb0cf97b625e995c3dcd37bf08413c6892d8f7f", 0x8f}], 0x3, 0x18, 0x1}, 0x0) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r0) sendmsg$BATADV_CMD_GET_ORIGINATORS(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, r4, 0x400, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x3}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x64004005}, 0x20010) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x29, 0x2, 0x0, 0x0) 18:39:37 executing program 4: r0 = socket(0xa, 0x1, 0x42) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x28, 0x2, 0x0, 0x0) 18:39:37 executing program 5: r0 = socket(0xa, 0x1, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x485, 0x0, 0x0) (async) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x6, 0x2, 0x0, 0x0) r1 = dup3(r0, r0, 0x80000) connect$vsock_stream(r1, &(0x7f0000000000)={0x28, 0x0, 0x2710, @hyper}, 0x10) 18:39:37 executing program 3: r0 = socket(0xa, 0x1, 0x0) fcntl$getown(r0, 0x9) syz_genetlink_get_family_id$fou(&(0x7f0000000100), r0) r1 = signalfd4(r0, &(0x7f0000000080), 0x8, 0x0) connect$pppl2tp(r0, &(0x7f00000000c0)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x19}}, 0x4, 0x3, 0x3f, 0x4}}, 0x26) sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x5c, 0x0, 0x100, 0x70bd2a, 0x25dfdbff, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x2}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x8}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x2dbb3522}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x2}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x410c0) r2 = signalfd(r0, &(0x7f0000000000)={[0x3ff]}, 0x8) fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f0000000040)=']+!/\x00', 0x0, r2) setsockopt$MRT_DEL_VIF(r0, 0x0, 0xcb, 0x0, 0x0) socket(0xa, 0x1, 0x0) (async) fcntl$getown(r0, 0x9) (async) syz_genetlink_get_family_id$fou(&(0x7f0000000100), r0) (async) signalfd4(r0, &(0x7f0000000080), 0x8, 0x0) (async) connect$pppl2tp(r0, &(0x7f00000000c0)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x19}}, 0x4, 0x3, 0x3f, 0x4}}, 0x26) (async) sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x5c, 0x0, 0x100, 0x70bd2a, 0x25dfdbff, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x2}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x8}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x2dbb3522}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x2}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x410c0) (async) signalfd(r0, &(0x7f0000000000)={[0x3ff]}, 0x8) (async) fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f0000000040)=']+!/\x00', 0x0, r2) (async) setsockopt$MRT_DEL_VIF(r0, 0x0, 0xcb, 0x0, 0x0) (async) [ 725.627918][T16554] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 725.671570][T16554] CPU: 0 PID: 16554 Comm: syz-executor.2 Not tainted 5.15.74-syzkaller-04383-g7f2e600bf63a #0 [ 725.682085][T16554] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/11/2022 [ 725.691985][T16554] Call Trace: [ 725.695100][T16554] [ 725.697878][T16554] dump_stack_lvl+0x151/0x1b7 [ 725.702458][T16554] ? bfq_pos_tree_add_move+0x43e/0x43e [ 725.707687][T16554] dump_stack+0x15/0x17 [ 725.711681][T16554] should_fail+0x3c0/0x510 [ 725.715932][T16554] should_fail_alloc_page+0x58/0x70 [ 725.721229][T16554] __alloc_pages+0x1de/0x7c0 [ 725.725655][T16554] ? __count_vm_events+0x30/0x30 [ 725.730424][T16554] ? __this_cpu_preempt_check+0x13/0x20 [ 725.735980][T16554] ? __mod_node_page_state+0xac/0xf0 [ 725.741100][T16554] pte_alloc_one+0x73/0x1b0 [ 725.745439][T16554] ? pfn_modify_allowed+0x2e0/0x2e0 [ 725.750474][T16554] __pte_alloc+0x86/0x350 [ 725.754648][T16554] ? free_pgtables+0x210/0x210 [ 725.759240][T16554] ? _raw_spin_lock+0xa3/0x1b0 [ 725.763863][T16554] ? _raw_spin_trylock_bh+0x1d0/0x1d0 [ 725.769047][T16554] ? __kernel_text_address+0x9a/0x110 [ 725.774261][T16554] copy_pte_range+0x1b1f/0x20b0 [ 725.778945][T16554] ? __kunmap_atomic+0x80/0x80 [ 725.783657][T16554] ? __kasan_slab_alloc+0xc4/0xe0 [ 725.788517][T16554] ? __kasan_slab_alloc+0xb2/0xe0 [ 725.793377][T16554] ? kmem_cache_alloc+0x189/0x2f0 [ 725.798325][T16554] ? vm_area_dup+0x26/0x1d0 [ 725.802663][T16554] ? dup_mmap+0x6b8/0xea0 [ 725.806829][T16554] ? dup_mm+0x91/0x330 [ 725.810735][T16554] ? copy_mm+0x108/0x1b0 [ 725.815337][T16554] ? copy_process+0x1295/0x3250 [ 725.820020][T16554] ? kernel_clone+0x22d/0x990 [ 725.824538][T16554] ? __x64_sys_clone+0x289/0x310 [ 725.829318][T16554] ? do_syscall_64+0x44/0xd0 [ 725.833740][T16554] ? entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 725.839744][T16554] copy_page_range+0xc1e/0x1090 [ 725.844429][T16554] ? pfn_valid+0x1e0/0x1e0 [ 725.848678][T16554] dup_mmap+0x99f/0xea0 [ 725.852672][T16554] ? __delayed_free_task+0x20/0x20 [ 725.857622][T16554] ? mm_init+0x807/0x960 [ 725.861700][T16554] dup_mm+0x91/0x330 [ 725.865430][T16554] copy_mm+0x108/0x1b0 [ 725.869341][T16554] copy_process+0x1295/0x3250 [ 725.874549][T16554] ? proc_fail_nth_write+0x213/0x290 [ 725.879663][T16554] ? proc_fail_nth_read+0x220/0x220 [ 725.884697][T16554] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 725.889653][T16554] ? vfs_write+0x9af/0x1050 [ 725.893986][T16554] ? vmacache_update+0xb7/0x120 [ 725.898673][T16554] kernel_clone+0x22d/0x990 [ 725.903018][T16554] ? file_end_write+0x1b0/0x1b0 [ 725.907701][T16554] ? __kasan_check_write+0x14/0x20 [ 725.912652][T16554] ? create_io_thread+0x1e0/0x1e0 [ 725.917690][T16554] ? __mutex_lock_slowpath+0x10/0x10 [ 725.922813][T16554] __x64_sys_clone+0x289/0x310 [ 725.927402][T16554] ? __do_sys_vfork+0x130/0x130 [ 725.932275][T16554] ? debug_smp_processor_id+0x17/0x20 [ 725.937499][T16554] do_syscall_64+0x44/0xd0 [ 725.941730][T16554] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 725.947561][T16554] RIP: 0033:0x7fb67320a5a9 [ 725.951796][T16554] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 18:39:37 executing program 2: syz_clone(0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 65) 18:39:37 executing program 5: r0 = socket(0xa, 0x1, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x485, 0x0, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x6, 0x2, 0x0, 0x0) r1 = dup3(r0, r0, 0x80000) connect$vsock_stream(r1, &(0x7f0000000000)={0x28, 0x0, 0x2710, @hyper}, 0x10) 18:39:37 executing program 1: r0 = socket(0xa, 0x1, 0x0) (async) pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) syz_io_uring_setup(0x67ed, &(0x7f0000000180)={0x0, 0xbd1e, 0x200, 0x2, 0x396, 0x0, r1}, &(0x7f0000001000/0x1000)=nil, &(0x7f0000001000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000240)=0x0) (async) r3 = socket$inet_udp(0x2, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000004, 0x10, r3, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000440)=@IORING_OP_WRITEV={0x2, 0x4, 0x4000, @fd=r3, 0xfffffffffffffff9, &(0x7f0000000400)=[{&(0x7f0000000280)="ea9bd21380fe42fcbd949ea1da480a545930a158d26bb019bb16", 0x1a}, {&(0x7f00000002c0)="84ba7f9aa0eab396f1d89883d987ac79ed3cbddd336e31d5064815b91deb662e78f4fb95e9e4c13e923b3253faa41736e30d49f3bd46f4269fd9c10300d97596974ada9310a787cb93", 0x49}, {&(0x7f0000000340)="73f9b6a4bdce1d68b12aa645c0c804f7941f162971242fb01bd656c38b1bc79561af7ccd15e277b4da68f347c94c94bae7559ba9e6d0e1acff2ef08fea9f66c6d2c9e8b27512b1b5677451a32390c66c1d36357d8a53b58741906a1191d4595b07c0413ab9d9d6dbb3748f25be38255ecb4f2c3a2f129e7355d56fbfb0cf97b625e995c3dcd37bf08413c6892d8f7f", 0x8f}], 0x3, 0x18, 0x1}, 0x0) (async) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r0) sendmsg$BATADV_CMD_GET_ORIGINATORS(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, r4, 0x400, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x3}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x64004005}, 0x20010) (async) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x29, 0x2, 0x0, 0x0) 18:39:37 executing program 0: r0 = signalfd(0xffffffffffffffff, 0x0, 0x0) close(r0) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(0x0, r1, 0x7, 0xffffffffffffffff, 0x0) sendmsg$nl_netfilter(r0, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x16d10b71aa4c6cac}, 0xc, &(0x7f0000000280)={&(0x7f0000000080)={0x1f0, 0x11, 0x9, 0x401, 0x70bd28, 0x25dfdbfc, {0x2, 0x0, 0x4}, [@generic="6b0438acbbb075b0b2d75d970d21ffa122b603ece6ee99a74a9c4db1d277958f56b95c59be594d74b6391be21c07119292c5e99bc8001b4aa36a2c4310d95ba435712a5530fba22ef9d52068460a9841024eb54e252a1aaee208264d0d2462d8a9973bce3bf63fa67d4b2305c06f3553fd350849dc8c61b28566490784d3833fbffb693b09494a67", @generic="c38a8678628ccb80536c39f83d051b45fb2a142f2516a38ca4e25da3fb02bb7ef11dc23ddd49f659ee820355c80140d4862debd9e15f2aabc342f42b8f061ba19204fccb848526fd1c79683a66a264dccf61d75e84016b0cf6e9a921d7a6087efe632cb1a410fe3d5e6a18e2340c44614d6df2bcb2320052ac63fd", @generic="951da77c833de914742d05d463cbaced7b8cdf55d125493ee37a6c859f24ec4b468d012d24c2ffc17ad875e3", @typed={0x8, 0x69, 0x0, 0x0, @pid=r1}, @typed={0x4, 0x61}, @generic="0a0bfed0ea86ad3377f3af968b37938fd9b6e10be1213e3da1f9fba0f9a48f01f1419026c6f54c62f1e246f57137ce27f0fcfb31317e97d2e77f77901365c0cb753eee877fa847d64632187c1ae40a76f3eaf92a6344a844d5ae1de2e50c4a02aeab7b708664bdd5d3662381c8523095f47c7e2f82b71f32b7f9125c42b3b02675b1a761bb10f871417d07c7ffc36ca1cd27b85b74b507b15dc022d84610"]}, 0x1f0}, 0x1, 0x0, 0x0, 0x4004010}, 0x40840) r2 = socket(0x9, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00'}) 18:39:37 executing program 4: r0 = socket(0xa, 0x1, 0x42) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x28, 0x2, 0x0, 0x0) 18:39:37 executing program 3: r0 = signalfd(0xffffffffffffffff, 0x0, 0x0) close(r0) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000bc0)={'wg0\x00', 0x0}) sendmsg$WG_CMD_GET_DEVICE(r0, &(0x7f0000000c80)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x34, 0x0, 0x8, 0x70bd28, 0x25dfdbfd, {}, [@WGDEVICE_A_IFINDEX={0x8, 0x1, r1}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x3f}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x61}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e20}]}, 0x34}, 0x1, 0x0, 0x0, 0x840}, 0x51) r2 = socket(0x1, 0x1, 0x3ffffd) setsockopt$MRT_DEL_VIF(r2, 0x0, 0xcb, 0x0, 0x0) r3 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), r2) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000a80), r2) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, &(0x7f0000000b40)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x34, r4, 0x2f6ba04b368b0930, 0x70bd2b, 0x25dfdbff, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xc}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}]}, 0x34}}, 0x40004) sendmsg$WG_CMD_SET_DEVICE(r2, &(0x7f0000000a00)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000009c0)={&(0x7f0000000080)={0x92c, r3, 0x100, 0x70bd29, 0x25dfdbfe, {}, [@WGDEVICE_A_PEERS={0x5f8, 0x8, 0x0, 0x1, [{0x584, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8, 0x3, 0x2}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e21, 0x3, @dev={0xfe, 0x80, '\x00', 0x3b}, 0x1f}}, @WGPEER_A_ALLOWEDIPS={0x1f8, 0x9, 0x0, 0x1, [{0xe8, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010102}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x3}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @local}, {0x5}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x3}}]}, {0x7c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5, 0x3, 0x1}}]}, {0x4c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x2}}]}]}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e20, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xfffffffe}}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ALLOWEDIPS={0x250, 0x9, 0x0, 0x1, [{0xe8, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x1e}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x44}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x3}}]}, {0xc4, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0xa}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5, 0x3, 0x3}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x2}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x5, 0x3, 0x2}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00'}, {0x5, 0x3, 0x2}}]}]}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e23, 0x5, @mcast1, 0xc3e}}, @WGPEER_A_ALLOWEDIPS={0x9c, 0x9, 0x0, 0x1, [{0x58, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x2}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x3}}]}]}, @WGPEER_A_PROTOCOL_VERSION={0x8}]}, {0x70, 0x0, 0x0, 0x1, [@WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0xf30}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e24, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, 0xff}}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e21, 0x100, @loopback, 0x3}}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "1e501917eff2daa4406a99e010f524cd9059625bbcf731e2a638b1de58021cfa"}]}]}, @WGDEVICE_A_IFINDEX={0x8}, @WGDEVICE_A_FLAGS={0x8}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @c}, @WGDEVICE_A_IFINDEX={0x8}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0xa7b}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e21}, @WGDEVICE_A_PEERS={0x2cc, 0x8, 0x0, 0x1, [{0x2c8, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x2c4, 0x9, 0x0, 0x1, [{0xe8, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010100}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010101}, {0x5, 0x3, 0x1}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x2}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x2}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x2}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @local}, {0x5}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x3}}]}, {0x7c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x41}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010101}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010101}, {0x5, 0x3, 0x2}}]}, {0x94, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x38}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}]}]}]}]}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x40}]}, 0x92c}, 0x1, 0x0, 0x0, 0x20004005}, 0x50) 18:39:37 executing program 4: r0 = socket(0xa, 0x1, 0x42) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x28, 0x2, 0x0, 0x0) [ 725.971244][T16554] RSP: 002b:00007fb671f7e118 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 725.979670][T16554] RAX: ffffffffffffffda RBX: 00007fb67332af80 RCX: 00007fb67320a5a9 [ 725.987481][T16554] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000010000000 [ 725.995279][T16554] RBP: 00007fb671f7e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 726.003180][T16554] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 726.011077][T16554] R13: 00007ffe782f632f R14: 00007fb671f7e300 R15: 0000000000022000 [ 726.018892][T16554] 18:39:37 executing program 1: r0 = socket(0xa, 0x1, 0x0) (async) pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) syz_io_uring_setup(0x67ed, &(0x7f0000000180)={0x0, 0xbd1e, 0x200, 0x2, 0x396, 0x0, r1}, &(0x7f0000001000/0x1000)=nil, &(0x7f0000001000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000240)=0x0) (async) r3 = socket$inet_udp(0x2, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000004, 0x10, r3, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000440)=@IORING_OP_WRITEV={0x2, 0x4, 0x4000, @fd=r3, 0xfffffffffffffff9, &(0x7f0000000400)=[{&(0x7f0000000280)="ea9bd21380fe42fcbd949ea1da480a545930a158d26bb019bb16", 0x1a}, {&(0x7f00000002c0)="84ba7f9aa0eab396f1d89883d987ac79ed3cbddd336e31d5064815b91deb662e78f4fb95e9e4c13e923b3253faa41736e30d49f3bd46f4269fd9c10300d97596974ada9310a787cb93", 0x49}, {&(0x7f0000000340)="73f9b6a4bdce1d68b12aa645c0c804f7941f162971242fb01bd656c38b1bc79561af7ccd15e277b4da68f347c94c94bae7559ba9e6d0e1acff2ef08fea9f66c6d2c9e8b27512b1b5677451a32390c66c1d36357d8a53b58741906a1191d4595b07c0413ab9d9d6dbb3748f25be38255ecb4f2c3a2f129e7355d56fbfb0cf97b625e995c3dcd37bf08413c6892d8f7f", 0x8f}], 0x3, 0x18, 0x1}, 0x0) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r0) sendmsg$BATADV_CMD_GET_ORIGINATORS(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, r4, 0x400, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x3}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x64004005}, 0x20010) (async) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x29, 0x2, 0x0, 0x0) 18:39:37 executing program 0: r0 = signalfd(0xffffffffffffffff, 0x0, 0x0) close(r0) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(0x0, r1, 0x7, 0xffffffffffffffff, 0x0) sendmsg$nl_netfilter(r0, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x16d10b71aa4c6cac}, 0xc, &(0x7f0000000280)={&(0x7f0000000080)={0x1f0, 0x11, 0x9, 0x401, 0x70bd28, 0x25dfdbfc, {0x2, 0x0, 0x4}, [@generic="6b0438acbbb075b0b2d75d970d21ffa122b603ece6ee99a74a9c4db1d277958f56b95c59be594d74b6391be21c07119292c5e99bc8001b4aa36a2c4310d95ba435712a5530fba22ef9d52068460a9841024eb54e252a1aaee208264d0d2462d8a9973bce3bf63fa67d4b2305c06f3553fd350849dc8c61b28566490784d3833fbffb693b09494a67", @generic="c38a8678628ccb80536c39f83d051b45fb2a142f2516a38ca4e25da3fb02bb7ef11dc23ddd49f659ee820355c80140d4862debd9e15f2aabc342f42b8f061ba19204fccb848526fd1c79683a66a264dccf61d75e84016b0cf6e9a921d7a6087efe632cb1a410fe3d5e6a18e2340c44614d6df2bcb2320052ac63fd", @generic="951da77c833de914742d05d463cbaced7b8cdf55d125493ee37a6c859f24ec4b468d012d24c2ffc17ad875e3", @typed={0x8, 0x69, 0x0, 0x0, @pid=r1}, @typed={0x4, 0x61}, @generic="0a0bfed0ea86ad3377f3af968b37938fd9b6e10be1213e3da1f9fba0f9a48f01f1419026c6f54c62f1e246f57137ce27f0fcfb31317e97d2e77f77901365c0cb753eee877fa847d64632187c1ae40a76f3eaf92a6344a844d5ae1de2e50c4a02aeab7b708664bdd5d3662381c8523095f47c7e2f82b71f32b7f9125c42b3b02675b1a761bb10f871417d07c7ffc36ca1cd27b85b74b507b15dc022d84610"]}, 0x1f0}, 0x1, 0x0, 0x0, 0x4004010}, 0x40840) r2 = socket(0x9, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00'}) signalfd(0xffffffffffffffff, 0x0, 0x0) (async) close(r0) (async) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) kcmp$KCMP_EPOLL_TFD(0x0, r1, 0x7, 0xffffffffffffffff, 0x0) (async) sendmsg$nl_netfilter(r0, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x16d10b71aa4c6cac}, 0xc, &(0x7f0000000280)={&(0x7f0000000080)={0x1f0, 0x11, 0x9, 0x401, 0x70bd28, 0x25dfdbfc, {0x2, 0x0, 0x4}, [@generic="6b0438acbbb075b0b2d75d970d21ffa122b603ece6ee99a74a9c4db1d277958f56b95c59be594d74b6391be21c07119292c5e99bc8001b4aa36a2c4310d95ba435712a5530fba22ef9d52068460a9841024eb54e252a1aaee208264d0d2462d8a9973bce3bf63fa67d4b2305c06f3553fd350849dc8c61b28566490784d3833fbffb693b09494a67", @generic="c38a8678628ccb80536c39f83d051b45fb2a142f2516a38ca4e25da3fb02bb7ef11dc23ddd49f659ee820355c80140d4862debd9e15f2aabc342f42b8f061ba19204fccb848526fd1c79683a66a264dccf61d75e84016b0cf6e9a921d7a6087efe632cb1a410fe3d5e6a18e2340c44614d6df2bcb2320052ac63fd", @generic="951da77c833de914742d05d463cbaced7b8cdf55d125493ee37a6c859f24ec4b468d012d24c2ffc17ad875e3", @typed={0x8, 0x69, 0x0, 0x0, @pid=r1}, @typed={0x4, 0x61}, @generic="0a0bfed0ea86ad3377f3af968b37938fd9b6e10be1213e3da1f9fba0f9a48f01f1419026c6f54c62f1e246f57137ce27f0fcfb31317e97d2e77f77901365c0cb753eee877fa847d64632187c1ae40a76f3eaf92a6344a844d5ae1de2e50c4a02aeab7b708664bdd5d3662381c8523095f47c7e2f82b71f32b7f9125c42b3b02675b1a761bb10f871417d07c7ffc36ca1cd27b85b74b507b15dc022d84610"]}, 0x1f0}, 0x1, 0x0, 0x0, 0x4004010}, 0x40840) (async) socket(0x9, 0x2, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00'}) (async) 18:39:37 executing program 4: syz_io_uring_setup(0x5b3f, &(0x7f0000000000)={0x0, 0x56ec, 0x400, 0x3, 0x166}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000080), &(0x7f00000000c0)=0x0) socketpair(0x11, 0x80000, 0xffffff01, &(0x7f0000000100)={0xffffffffffffffff}) syz_io_uring_submit(0x0, r0, &(0x7f0000000140)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x2, 0x0, @fd=r1, 0x7d, 0x0, 0x0, 0x10, 0x1, {0x1}}, 0x5) r2 = socket(0xa, 0x1, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$MRT_DEL_MFC(r4, 0x0, 0xcd, &(0x7f0000000200)={@multicast2, @remote, 0x1, "182bb5a80519f201fcbdf1e4de8b4b528e8182b7bc740a621f3b992c6d64c7f4", 0x6a86, 0x81, 0xcae2, 0x4}, 0x3c) r5 = socket$inet_udp(0x2, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000004, 0x10, r5, 0x0) fsetxattr(r5, &(0x7f00000002c0)=ANY=[@ANYBLOB="62747276732e00ec325a9c61813dc7e906572edf8baae437e2277e0c0c6d2d340dea5f2adace4dc5e7f2e863a788152d016c9768518de99cc9072d2e250eb66d9284b3a5902eb8d4a0857945919cb2d1ea021543a5cb678c154901c491"], &(0x7f0000000280)='\x00', 0x1, 0x1) ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(r3, 0x942e, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r2, 0x28, 0x2, 0x0, 0x0) 18:39:37 executing program 3: r0 = signalfd(0xffffffffffffffff, 0x0, 0x0) close(r0) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000bc0)={'wg0\x00', 0x0}) sendmsg$WG_CMD_GET_DEVICE(r0, &(0x7f0000000c80)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x34, 0x0, 0x8, 0x70bd28, 0x25dfdbfd, {}, [@WGDEVICE_A_IFINDEX={0x8, 0x1, r1}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x3f}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x61}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e20}]}, 0x34}, 0x1, 0x0, 0x0, 0x840}, 0x51) r2 = socket(0x1, 0x1, 0x3ffffd) setsockopt$MRT_DEL_VIF(r2, 0x0, 0xcb, 0x0, 0x0) r3 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), r2) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000a80), r2) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, &(0x7f0000000b40)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x34, r4, 0x2f6ba04b368b0930, 0x70bd2b, 0x25dfdbff, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xc}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}]}, 0x34}}, 0x40004) sendmsg$WG_CMD_SET_DEVICE(r2, &(0x7f0000000a00)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000009c0)={&(0x7f0000000080)={0x92c, r3, 0x100, 0x70bd29, 0x25dfdbfe, {}, [@WGDEVICE_A_PEERS={0x5f8, 0x8, 0x0, 0x1, [{0x584, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8, 0x3, 0x2}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e21, 0x3, @dev={0xfe, 0x80, '\x00', 0x3b}, 0x1f}}, @WGPEER_A_ALLOWEDIPS={0x1f8, 0x9, 0x0, 0x1, [{0xe8, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010102}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x3}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @local}, {0x5}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x3}}]}, {0x7c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5, 0x3, 0x1}}]}, {0x4c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x2}}]}]}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e20, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xfffffffe}}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ALLOWEDIPS={0x250, 0x9, 0x0, 0x1, [{0xe8, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x1e}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x44}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x3}}]}, {0xc4, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0xa}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5, 0x3, 0x3}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x2}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x5, 0x3, 0x2}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00'}, {0x5, 0x3, 0x2}}]}]}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e23, 0x5, @mcast1, 0xc3e}}, @WGPEER_A_ALLOWEDIPS={0x9c, 0x9, 0x0, 0x1, [{0x58, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x2}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x3}}]}]}, @WGPEER_A_PROTOCOL_VERSION={0x8}]}, {0x70, 0x0, 0x0, 0x1, [@WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0xf30}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e24, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, 0xff}}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e21, 0x100, @loopback, 0x3}}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "1e501917eff2daa4406a99e010f524cd9059625bbcf731e2a638b1de58021cfa"}]}]}, @WGDEVICE_A_IFINDEX={0x8}, @WGDEVICE_A_FLAGS={0x8}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @c}, @WGDEVICE_A_IFINDEX={0x8}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0xa7b}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e21}, @WGDEVICE_A_PEERS={0x2cc, 0x8, 0x0, 0x1, [{0x2c8, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x2c4, 0x9, 0x0, 0x1, [{0xe8, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010100}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010101}, {0x5, 0x3, 0x1}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x2}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x2}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x2}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @local}, {0x5}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x3}}]}, {0x7c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x41}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010101}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010101}, {0x5, 0x3, 0x2}}]}, {0x94, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x38}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}]}]}]}]}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x40}]}, 0x92c}, 0x1, 0x0, 0x0, 0x20004005}, 0x50) signalfd(0xffffffffffffffff, 0x0, 0x0) (async) close(r0) (async) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000bc0)={'wg0\x00'}) (async) sendmsg$WG_CMD_GET_DEVICE(r0, &(0x7f0000000c80)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x34, 0x0, 0x8, 0x70bd28, 0x25dfdbfd, {}, [@WGDEVICE_A_IFINDEX={0x8, 0x1, r1}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x3f}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x61}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e20}]}, 0x34}, 0x1, 0x0, 0x0, 0x840}, 0x51) (async) socket(0x1, 0x1, 0x3ffffd) (async) setsockopt$MRT_DEL_VIF(r2, 0x0, 0xcb, 0x0, 0x0) (async) syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), r2) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000a80), r2) (async) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, &(0x7f0000000b40)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x34, r4, 0x2f6ba04b368b0930, 0x70bd2b, 0x25dfdbff, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xc}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}]}, 0x34}}, 0x40004) (async) sendmsg$WG_CMD_SET_DEVICE(r2, &(0x7f0000000a00)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000009c0)={&(0x7f0000000080)={0x92c, r3, 0x100, 0x70bd29, 0x25dfdbfe, {}, [@WGDEVICE_A_PEERS={0x5f8, 0x8, 0x0, 0x1, [{0x584, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8, 0x3, 0x2}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e21, 0x3, @dev={0xfe, 0x80, '\x00', 0x3b}, 0x1f}}, @WGPEER_A_ALLOWEDIPS={0x1f8, 0x9, 0x0, 0x1, [{0xe8, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010102}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x3}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @local}, {0x5}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x3}}]}, {0x7c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5, 0x3, 0x1}}]}, {0x4c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x2}}]}]}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e20, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xfffffffe}}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ALLOWEDIPS={0x250, 0x9, 0x0, 0x1, [{0xe8, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x1e}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x44}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x3}}]}, {0xc4, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0xa}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5, 0x3, 0x3}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x2}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x5, 0x3, 0x2}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00'}, {0x5, 0x3, 0x2}}]}]}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e23, 0x5, @mcast1, 0xc3e}}, @WGPEER_A_ALLOWEDIPS={0x9c, 0x9, 0x0, 0x1, [{0x58, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x2}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x3}}]}]}, @WGPEER_A_PROTOCOL_VERSION={0x8}]}, {0x70, 0x0, 0x0, 0x1, [@WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0xf30}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e24, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, 0xff}}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e21, 0x100, @loopback, 0x3}}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "1e501917eff2daa4406a99e010f524cd9059625bbcf731e2a638b1de58021cfa"}]}]}, @WGDEVICE_A_IFINDEX={0x8}, @WGDEVICE_A_FLAGS={0x8}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @c}, @WGDEVICE_A_IFINDEX={0x8}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0xa7b}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e21}, @WGDEVICE_A_PEERS={0x2cc, 0x8, 0x0, 0x1, [{0x2c8, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x2c4, 0x9, 0x0, 0x1, [{0xe8, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010100}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010101}, {0x5, 0x3, 0x1}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x2}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x2}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x2}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @local}, {0x5}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x3}}]}, {0x7c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x41}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010101}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010101}, {0x5, 0x3, 0x2}}]}, {0x94, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x38}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}]}]}]}]}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x40}]}, 0x92c}, 0x1, 0x0, 0x0, 0x20004005}, 0x50) (async) [ 726.084606][T16599] FAULT_INJECTION: forcing a failure. [ 726.084606][T16599] name failslab, interval 1, probability 0, space 0, times 0 [ 726.102457][T16599] CPU: 1 PID: 16599 Comm: syz-executor.2 Not tainted 5.15.74-syzkaller-04383-g7f2e600bf63a #0 [ 726.112551][T16599] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/11/2022 [ 726.122424][T16599] Call Trace: [ 726.125590][T16599] [ 726.128329][T16599] dump_stack_lvl+0x151/0x1b7 18:39:37 executing program 5: r0 = socket(0xa, 0x1, 0x0) sendmsg$nl_netfilter(r0, &(0x7f0000001500)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000014c0)={&(0x7f0000000080)={0x1434, 0x9, 0x0, 0x101, 0x70bd2d, 0x25dfdbfb, {0x1, 0x0, 0x1}, [@typed={0x50, 0x90, 0x0, 0x0, @binary="ab64e8d960a88f94ca65ac6564db8a86f65674c945348b51dbe5338c529f7bca79c074888c417d03ccb3d1a3b93948ab250864ecdbb3fa93a016f549e1e461ad6c0eaf2c297cf38d4aca14eb"}, @generic, @nested={0xe9, 0x13, 0x0, 0x1, [@typed={0x8, 0xe, 0x0, 0x0, @ipv4=@private=0xa010101}, @generic="f03230085439d1a97d1ff08f2f199184cd579e6d53d03d70c64461ed0abaf41b179c0fbac129ba72e6b8ff8cab44d9f950de0057f13b766ac0370ae2656584da9b7107b3d6d1557b900345c18302da53c8fe0c6432de41fbc28a3e71e2d4effb9f2c2270fd6fcb8d64bc054bf4d030402abd23a7687dd7f63b0024ec9331fe057d6dcdc3fd9c417f6e0f6ca97a9010cd1cd13a5df5a598203c85d33cef4274204fe33704a2c6e95b093964b34537f34274d4bfa27ade2af26b8effd124", @typed={0xc, 0x5d, 0x0, 0x0, @u64}, @typed={0x14, 0x80, 0x0, 0x0, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, @generic="f8e493946fbc52b4797da85e99a22ac26da759eae8c4092d2b14b2666bb92068f5b482efb3477c07c639a8396e8e47d583dec244a3aa26facf21114d884ec1bf7254094e44aa5dcfdb9dd0cdd8f673041d0b9c914213ab034020", @nested={0x100c, 0x8c, 0x0, 0x1, [@typed={0x8, 0x7, 0x0, 0x0, @str='}{^\x00'}, @generic="7e4412d51be14d04fe4abbea03f8f51321987d2d8f9c0b00d99be3756496f27ae7656abd2717cddef06bebb4faadc578aa27b28ca5c2f846d99afc27af290dd97f418ef35d1d92c35f8286d23bd17dceb2d47dfb6d98a79bb07f96544ef090083705945dc46e884ff8d79432c3fed045a67e4007c83ca0efabfff0f4a3820d4ea929e80837df8bd86096bb8053671a3ed70981e0ee3a075eb5f0dd065462dbebec41a68de668cd7374058630f8c8830925f269131bbde6dc8ffa779b674f9d824f73a982efec7170cd27198819ec2639e057c963ff548c5b8a9ac430aeabfbf947b2369f6311c36a9309bf5158c56f547c3d549617a9def265926f1d31634dd8f48e596fd4228859573b280833046dd3a439382eecb8f007c527052dd0bbf882be6572777e6d9d63f114124e359ca0d4df4dea4558991f80b5c2c16745fdf386fcad010654a4ce5c79b8dcf7e939687ebc53308a93894002c0cf4d1436f8d7c9c38205be262bbb4e032d578c904f147c9b69039ada323c4b4c951813a0d26a79c0368e0e239a77fee5519811302956493deb9d09581a168f7a277f168a8cccce840efdc454c2f9aad9941acf72e361ac0feeca1bf5ecfa40769ff9dbd751ddc110a5894116f1c31137855ced1b91dc58040cfe2525eeec5f9cb8af1cf6f35f54303a50aef694c448ae3e1341d90d449d230920def84ef98773c034d303be312875e4320919075c256f6d59a8c56ad1dc1fc912373119c53380520b4a19818dbb9464ab8c383afc9b649503a3fd9e93eef5c3837d130fb0b00ff55432b852d585f0b87561f342aa781e287604c48dc2684fe7b4ccf040a8394710259c03cfd3e6c3cf294c6be18d3e4d7bb9510c2c0bf86140af955b312b95e9e6a3bc2382c9fce205262ab2a7112db7384a12c1654b15a172c234d01be15198e178483a3e03d58bccdffb27eade761201fabae8075b7ea202096b5cfc5eaa2970e969bf02eb99b2a44b8f897d3cf3170ad1bddaa796833f50ac527db6e16e10287a006f28e08581ed153604b1c64cf6573802841132365eb21b3fe8fef37a398b4568a4b4f831deca970646c6c26e8dfaf12c9c86c8561adff84ec6ffe3eb20e609c1f862ed214fc94c0124a389925a99da25373fba6d135ec7abe1c496863529c5b24ef897dba12c62e78fd77a44b9ce47adf728a652c2444f8d0ad234100b8e46a7671165b7f7a95789ef799a0075701859a071a3771ffbfd15045ce8536653a98a0c04aec95ed4b82e02f8951da9fb35d858c357a94acd4a7ec3d228c6ef789f9010b4ec48c2a37917d89e775a0975d86281a3bdc029bb57728567ed9e46601531b2c0d01e00a8c03097184a61d881fd79b9d37f8702b53f26c1c6c988882f1e728f452057bace5fcfedf5b5c6c0a93aab29c5721e711ff76d511b414174756ec28f50dfb7445b767002e2a8cc0e535bb74c0661081fa9e58cf34006380e86d5c87d7948d8fba4200e408a101b717cd42453d5baf22d4eee72ef1002264b0ab6d1189693eba8640cbd3fa50c44c5496a9ec09396bbe5c10a5b36885fee05eea14b6b29501c36f54d689467f8a37e64360b1238ed858009e188a2b4ad1a5380ba32da2e2d37dcca88365001f74de86af6a728a0f3a38ce251cb3db3a8a413fe2dee2a2e494762bf2e3ec16e4b46ef667c631ed31d3b2f76706a5881d8bf6b2f11dc31558980905208c25312a63a1affb1225dbdb9325fb03d1b62c3ad34487b3d20fc83d0628c29e0f1ced3f381c1d342dfd8db5ac2c97c032febce464ea738f175e92d9bfdeb501a1e582f9254436e3057caeace82b94ec7d36c608cd23cf7bd1aba379f13ac6a396f092f341d43e044af6f14fd8829a8f69ec521f92144eb7d444d335b3cdf4284f324b65df97d840c3ae24bccf19dc3a3f5bb321f46d00bb10f53b9c475857cc85121f8f7ece8f61a3ed134806bfb2f4314687853188a87252f6e00593c4ecd0a052c2b4707b42da5f271959c4196a37569fae6872d76ae1d44a0bf7c94d0efc9e1a2b8f762725bab2516d1800b8bb24c3910f57e56d4350ee475838a14e486ff5fe4f2824e2f8388b24dd4cda87c8e680c1f3c660d8dc38abe270b87180617de4014f7e157307d5495e4532d1a2fd7a7a4c4f699e3f961635394c4231c654394dcce632950c3809a7318a6edc4b942c29f8646cdd8b4599fe3179b09cf2a7a7e5eebb6c26453397177ee39bfa2c8eb91fb35d3b8bc4d6152d3f4906bb7578878e3937ae7b9ca7e97a609c052cc5bd7b0d50e65f7d16eec479c8ac202114d1334a5d764ff2e9a2bc3fd15b4c1e31e6a08bb9227310573bebf98b71a0d7c0f1b3e849f7994c4955eac780529f2878a3c3ffa152f5292116affbe88058044a5a361b50e072b4d76e14dddd7367a6156da4bff6a02a6fc5014a6174f67eeb701d91ae1a00999fcba0b41211d62090b1dc50fa113910dd5ceeab662e07a0ca97304c4b80d17894e77846bb25f1baf14fa58e31cf3bc9bf5555d6b7fc42d9b8fd95d1568120f3d894976c58127b2ff5292d5adec5da722947fd45cccc8a1277e16c20516b22d81e8d8667bfca0d1cd687f6796e02199eb0be0915a6dfabe9b4ccba9dd5fce285479908f412baf4e5235345ab863b2dac98ff2bcf380d4a5be3e1d76f60805a1ba3b3f9f4311865944bc5f14e6a00564363b2557457d35b4c76d4e58da12eac64574e6b76d2fadb5a2362406ba04a5989bd8b012a3f9ac6065d2c90e3063b17228d0161ea5e10955f71d0848981de72e4dfb5828f0a0969cab00dd1e2b6cf861ee8ff36a52784bcfd2e9e645ee8359f3222384e03baf21779e58d828ca3bcd5b98c20374dc28f77cbba24de86dbe9f954400fc94c80b72dbaf7f03c33a86d5eb1e0e5000838250443927422696265e916511bf585a3a05b2c6e4d9923491dfe0f552180787a9a09549a30c7ece2552183a0fac6225a30828e9d47f5ea7aad803f01b8834273ec127d8cb23734da155680b4edbf4e3d6efd26ab778c83686c7db2b8c0f8d2f0c27c2697881df167d4ed3796e94df825bad90286f36de73d257c8c98a7597cf34b7f5569059df530fe6a28392d6398b62bf196cf9bf9cea4e7f8d51665747b9adbaff2dc1a979e43ec9a84497bc5eba2fa30c6645313cee7081e65ce7261c260554577fca6ae6dabd942967614db2030a92584be20524c98dfcedb8b882305840d813fe29951823e06a1feeaa2d0232652d77c16146ae9d7cc5cae3bbe24a72a041ed3c06594fc2a4887be86f22f617d2e93efb3a005d073730f78d201d0079779d0fbde4aae8334822edb5c43cce6a6724ad3fbca7d037dc3cdc67b293171584beb73ce32d637b9b6773f84579f4b3eb6b5cb7b22839dc60b192f155c4a1760a88ef25fd8d26b5942dea70aa616b59f7ad4f40803a86f6c9aacfbb52d50fdb232c7af8a8d6cdbf956b42d3a91bcf05c9f25241213a363e21383a1c132217643ab0124fa05477009c29481c44224bc88e52783d4a379f82e9df83e38336006f4188e7c8c65a17dcf4d5b822823f6c995cba1cc5ce2244f9c483d99d4d19bae2b0bf358f6fe8bf296f2597c669ca252a05a13ee5c738c57cd45393ef05c9d2e33cbb2595c9aadecb85aa13c63ce4d3ea083ceded1a2585bbbb05760bdbda756e63a2bc28e27fefe0602b521b110058b09aee3c67960c752401a4bbafb93818f662e4df508ca5158ed67281dd64475b2287606e3740a667e9508686814846fc77042fa483f9d8bf603af117a4b0ad1fdc7cbc4ed4ff8fc1b79475233c88b2e815fa8df7f24cff08ac48e1e5df67b4fab3e34b154f78077e7797985b5d5cdd430ec6f1cb1d649587d894894388f70705ed540d1bc9c7698bfec77854d42bd15157f050bbf0be2a4e1cd1bc59f27862b95b1cd1b157fea4cde934bc9e4298190ea0505111ad1fad7654df67066c7486a41da1ca2c2e4e0cd30ea8fc77fd1eb184d2e404ceff8f411c03457d972aac6383028748226ac605984f4d6c07faec580ad93f60bcb85801ff4250e46dd8588edd7f01bbed9e2d07487ddc4ee30a9e42599989aeed65fcaf2f558f209266dcbb6a7e24daa541963a439254a1553dbfaeb9fc64759d74918f690c71cc6ef5a43e5dcf60422bdf8456dff690327e37c1b12797798b7a327ee8c30ada812be778571d5039a7ccb39a1c36e5e8254998727eca7e729b88f87ddb8219de0a90a1d750912e7a23a87e469e71e78a277b994d997e0f7543331957ee1e202bb2e8ff36972a49043f913c2a452017c7a178abc7873edc8897c9592dcb636255768f485e681ed893a39232e756ec988c1a831a8e8beadfcdb319cd83c60d6f37f019bb20697913255d4119362fc306e3c9611b60acd3c48b6f10e8c5dee28c25058f893a58f166935c268bdb9dfac4c62a82baf213708e3f364a5d87ed30b8a374154dd5c46c5e3bc794b59dc12b04a92210972fae9fa7394a6f6feb7506c83d676792219399c1395162b899164b2411e8d74acf19adc0711c6b0d5e74364021e24e90381a62c186b5f3103ff30cc4ae9530e41f914e7f3519f75959afab0c586a02addfcda052dfe0d2c99fe5c4d2a0648cd9e7d3c7955e1fa7a25706ffacd9a1cb2c476d75faccc41732a919a6b2954eee71b11eac25d6fc31dd3b33f169f8ac80df60c13b22289de74261ac43fafbb0d4eb25a177e5c95fc1f7c86e2e8121d0a37b2294793eede97de1360ec4d4e88bc5448d71c16a63e04e0043844c95c33cbbd97e1908ef963cc60f8d92c71649c34728a248f942b8a409453951f1da2bcc96f641973012586c65996a5afbd8b41a7233fe5a9751620ac623f6bac57081414dbdfbb2b026ef5cb5367483c45335446253ea2b6cd822f609bab999599b087fc030d8ac99ae7c5fbb9814a7f1138e05edecd291b4eb70731befbf6f499ce541fc0da08a107359da5a8e949c42ffadada7c15b98ca05c77c55645808f1359e0e59311744a328d789fe2bf836fd8fde57d98ddd6e04ee8646f7961a6c238034c03566c9cf6fe6cda3afccfa7119da8e4244f25e2a40adbdb096641de3c622058c51ab3cb6d0f10872dd08963956b8a89d69f015a0a4ef822102d4cf542ff087d18afbdcb8bac5a9f41c7845649c13363ce88361bcf691875f96f4dbf1f51c8dd80ca690c1218ce64bd7f09b25e97ef4afe625812b77fec67139e85f77ca32c9ced6929c786dbcaea423fd52bac1a93ae25cae6ace773b9600447a145710e958c4cd9dacdc9200344881e458b45d1fc58b39b244493bd8e4c6bd4386445f9488a452c2b13fefefb30428b9b1ea73f2bef5d92bbc3f314abdc94945039a657f671540c855f45a03562934ee7aa42d031d7658294ac505154543965da02f771e722de811a83f308aa4795636892731d21664a555f8174ea400c5fc097ca67e714490ef24c0ff7c1f8d9079354ae2b566869265387f044b2e10af14340e95e52f5a73c9b15d8a9a70b39a54abed7507c43e75423c1a89dd91c1dbd258ac37ce95c0b61c48449cdf1e2f6fa1f7a01eecf0cd61c4314807a6eaeba8429f5fcaa60b4e972b09b9fb6a64e8435270f7234cb3be8e1363035ee2d09dfca467829e4f85e6f5bcdbc872be0d785c0fd20cdb6e59ada0ec70e6a51f4ba53d8eba36498e89eb5c817a4a755b93454960279d821d14affad7501c489052f979271f74765bf4330bb3d4de6d6621a673ffbec9c8ee9ac3ca682af4c1cd7cf960e4ed88d33f3682dea631d6e474817401dbab04"]}, @generic="bba35d2ba0fdbf6816a5d2c31614127245df088aa87f5b5391a6", @typed={0xf9, 0xe, 0x0, 0x0, @binary="d23e3b185474e0c37d7d222c23b80edb0d6b0b24c4873301a720627920b6aa306e1811f53b8574dc0c0b8a70aa3471a7cdc9c5115dd705a97a72854a9dcfc5d4bfda6640f27c1f0d00e818f8ae5cc8b0d8d9b5834fa8b88840a95deaed86ea1821c52613d384488aef1bbe238bc5ba75eacc1eb286c1ce781d97be04466d0e51ebc302f8fb32b9467d31073105967c2e2ae020c88339d28103a6c17421057e32bf9e68b5e6e2868c74c989043ef61d777ad9352095d790ba1da356a9fd21ebed1316d9b2465f9167150687c101c57b453ca2e5f205c1bc91eb7a11bd5848314462ef6426cbaa7722cbfa924cdea526791a0119c582"}, @generic="524872c9a1562b0b3d0d415fb4a73f178e", @generic="d16f766b3e36cacd090e42833872664e6b7b3ce22a97f17044a9e750ec1e9a0de1ba9649e40ca02ac9d4235a2e7070317b2373483755eec629697aefa4d82d48fb1ea190ccc784e1588c043447095e70fdbf6dbfe5ddc27269e6cb44cd9d87da960697cceb5248c785a578f94fe567981222219ab3723ddd16bdb977dc33b50f06f109b0f2c65cf6eb8f85d7f11dadd81c8df5872b161b65db3afe11255c6557ee29e3ea1b7375f5ea90d2ab5aa13b9b84fa1929bb068b936b82906163215931bdfaef84335fe74c014ebb25d2663f54", @generic="316fde614236db60d6a402a2a859e2e40c78d6c581c83f138ae54658cd45ed905c0ef98ebfc21c9beb32f9bb72886a1e1aa601d8aa89a9690c9488bb52be5943b6a1c01471fedff2b605ac7342fa700d80e84ff70c2be70712f1eade0223878d5a60f81e136fa9ddad03aeccc3c221e2197456414111e6f47e3340bb231b3a59bae441a8485f"]}, 0x1434}, 0x1, 0x0, 0x0, 0x24040800}, 0x8000) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x6, 0x2, 0x0, 0x0) pipe2$watch_queue(&(0x7f0000000040), 0x80) [ 726.132840][T16599] ? bfq_pos_tree_add_move+0x43e/0x43e [ 726.138228][T16599] dump_stack+0x15/0x17 [ 726.142215][T16599] should_fail+0x3c0/0x510 [ 726.146470][T16599] __should_failslab+0x9f/0xe0 [ 726.151077][T16599] should_failslab+0x9/0x20 [ 726.155408][T16599] kmem_cache_alloc+0x4f/0x2f0 [ 726.160018][T16599] ? vm_area_dup+0x26/0x1d0 [ 726.164343][T16599] ? __kasan_check_read+0x11/0x20 [ 726.169215][T16599] vm_area_dup+0x26/0x1d0 [ 726.173374][T16599] dup_mmap+0x6b8/0xea0 [ 726.177361][T16599] ? __delayed_free_task+0x20/0x20 [ 726.182395][T16599] ? mm_init+0x807/0x960 [ 726.186486][T16599] dup_mm+0x91/0x330 [ 726.190213][T16599] copy_mm+0x108/0x1b0 [ 726.194195][T16599] copy_process+0x1295/0x3250 [ 726.198711][T16599] ? proc_fail_nth_write+0x213/0x290 [ 726.203837][T16599] ? proc_fail_nth_read+0x220/0x220 [ 726.208863][T16599] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 726.213821][T16599] ? vfs_write+0x9af/0x1050 [ 726.218149][T16599] ? vmacache_update+0xb7/0x120 [ 726.222839][T16599] kernel_clone+0x22d/0x990 [ 726.227272][T16599] ? file_end_write+0x1b0/0x1b0 [ 726.231967][T16599] ? __kasan_check_write+0x14/0x20 [ 726.236902][T16599] ? create_io_thread+0x1e0/0x1e0 [ 726.241769][T16599] ? __mutex_lock_slowpath+0x10/0x10 [ 726.247067][T16599] __x64_sys_clone+0x289/0x310 [ 726.251657][T16599] ? __do_sys_vfork+0x130/0x130 [ 726.256448][T16599] ? debug_smp_processor_id+0x17/0x20 [ 726.261644][T16599] do_syscall_64+0x44/0xd0 [ 726.265905][T16599] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 726.271713][T16599] RIP: 0033:0x7fb67320a5a9 [ 726.275974][T16599] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 726.295492][T16599] RSP: 002b:00007fb671f7e118 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 726.303736][T16599] RAX: ffffffffffffffda RBX: 00007fb67332af80 RCX: 00007fb67320a5a9 [ 726.311557][T16599] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000010000000 [ 726.319357][T16599] RBP: 00007fb671f7e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 726.327260][T16599] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 18:39:37 executing program 2: syz_clone(0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 66) 18:39:37 executing program 1: r0 = socket(0xa, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x29, 0x2, 0x0, 0x0) r1 = signalfd(0xffffffffffffffff, 0x0, 0x0) close(r1) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r1, 0x28, 0x2, &(0x7f0000000000)=0x7ff, 0x8) 18:39:37 executing program 5: r0 = socket(0xa, 0x1, 0x0) sendmsg$nl_netfilter(r0, &(0x7f0000001500)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000014c0)={&(0x7f0000000080)={0x1434, 0x9, 0x0, 0x101, 0x70bd2d, 0x25dfdbfb, {0x1, 0x0, 0x1}, [@typed={0x50, 0x90, 0x0, 0x0, @binary="ab64e8d960a88f94ca65ac6564db8a86f65674c945348b51dbe5338c529f7bca79c074888c417d03ccb3d1a3b93948ab250864ecdbb3fa93a016f549e1e461ad6c0eaf2c297cf38d4aca14eb"}, @generic, @nested={0xe9, 0x13, 0x0, 0x1, [@typed={0x8, 0xe, 0x0, 0x0, @ipv4=@private=0xa010101}, @generic="f03230085439d1a97d1ff08f2f199184cd579e6d53d03d70c64461ed0abaf41b179c0fbac129ba72e6b8ff8cab44d9f950de0057f13b766ac0370ae2656584da9b7107b3d6d1557b900345c18302da53c8fe0c6432de41fbc28a3e71e2d4effb9f2c2270fd6fcb8d64bc054bf4d030402abd23a7687dd7f63b0024ec9331fe057d6dcdc3fd9c417f6e0f6ca97a9010cd1cd13a5df5a598203c85d33cef4274204fe33704a2c6e95b093964b34537f34274d4bfa27ade2af26b8effd124", @typed={0xc, 0x5d, 0x0, 0x0, @u64}, @typed={0x14, 0x80, 0x0, 0x0, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, @generic="f8e493946fbc52b4797da85e99a22ac26da759eae8c4092d2b14b2666bb92068f5b482efb3477c07c639a8396e8e47d583dec244a3aa26facf21114d884ec1bf7254094e44aa5dcfdb9dd0cdd8f673041d0b9c914213ab034020", @nested={0x100c, 0x8c, 0x0, 0x1, [@typed={0x8, 0x7, 0x0, 0x0, @str='}{^\x00'}, @generic="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"]}, @generic="bba35d2ba0fdbf6816a5d2c31614127245df088aa87f5b5391a6", @typed={0xf9, 0xe, 0x0, 0x0, @binary="d23e3b185474e0c37d7d222c23b80edb0d6b0b24c4873301a720627920b6aa306e1811f53b8574dc0c0b8a70aa3471a7cdc9c5115dd705a97a72854a9dcfc5d4bfda6640f27c1f0d00e818f8ae5cc8b0d8d9b5834fa8b88840a95deaed86ea1821c52613d384488aef1bbe238bc5ba75eacc1eb286c1ce781d97be04466d0e51ebc302f8fb32b9467d31073105967c2e2ae020c88339d28103a6c17421057e32bf9e68b5e6e2868c74c989043ef61d777ad9352095d790ba1da356a9fd21ebed1316d9b2465f9167150687c101c57b453ca2e5f205c1bc91eb7a11bd5848314462ef6426cbaa7722cbfa924cdea526791a0119c582"}, @generic="524872c9a1562b0b3d0d415fb4a73f178e", @generic="d16f766b3e36cacd090e42833872664e6b7b3ce22a97f17044a9e750ec1e9a0de1ba9649e40ca02ac9d4235a2e7070317b2373483755eec629697aefa4d82d48fb1ea190ccc784e1588c043447095e70fdbf6dbfe5ddc27269e6cb44cd9d87da960697cceb5248c785a578f94fe567981222219ab3723ddd16bdb977dc33b50f06f109b0f2c65cf6eb8f85d7f11dadd81c8df5872b161b65db3afe11255c6557ee29e3ea1b7375f5ea90d2ab5aa13b9b84fa1929bb068b936b82906163215931bdfaef84335fe74c014ebb25d2663f54", @generic="316fde614236db60d6a402a2a859e2e40c78d6c581c83f138ae54658cd45ed905c0ef98ebfc21c9beb32f9bb72886a1e1aa601d8aa89a9690c9488bb52be5943b6a1c01471fedff2b605ac7342fa700d80e84ff70c2be70712f1eade0223878d5a60f81e136fa9ddad03aeccc3c221e2197456414111e6f47e3340bb231b3a59bae441a8485f"]}, 0x1434}, 0x1, 0x0, 0x0, 0x24040800}, 0x8000) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x6, 0x2, 0x0, 0x0) pipe2$watch_queue(&(0x7f0000000040), 0x80) 18:39:37 executing program 4: syz_io_uring_setup(0x5b3f, &(0x7f0000000000)={0x0, 0x56ec, 0x400, 0x3, 0x166}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000080), &(0x7f00000000c0)=0x0) socketpair(0x11, 0x80000, 0xffffff01, &(0x7f0000000100)={0xffffffffffffffff}) syz_io_uring_submit(0x0, r0, &(0x7f0000000140)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x2, 0x0, @fd=r1, 0x7d, 0x0, 0x0, 0x10, 0x1, {0x1}}, 0x5) r2 = socket(0xa, 0x1, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$MRT_DEL_MFC(r4, 0x0, 0xcd, &(0x7f0000000200)={@multicast2, @remote, 0x1, "182bb5a80519f201fcbdf1e4de8b4b528e8182b7bc740a621f3b992c6d64c7f4", 0x6a86, 0x81, 0xcae2, 0x4}, 0x3c) r5 = socket$inet_udp(0x2, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000004, 0x10, r5, 0x0) fsetxattr(r5, &(0x7f00000002c0)=ANY=[@ANYBLOB="62747276732e00ec325a9c61813dc7e906572edf8baae437e2277e0c0c6d2d340dea5f2adace4dc5e7f2e863a788152d016c9768518de99cc9072d2e250eb66d9284b3a5902eb8d4a0857945919cb2d1ea021543a5cb678c154901c491"], &(0x7f0000000280)='\x00', 0x1, 0x1) ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(r3, 0x942e, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r2, 0x28, 0x2, 0x0, 0x0) syz_io_uring_setup(0x5b3f, &(0x7f0000000000)={0x0, 0x56ec, 0x400, 0x3, 0x166}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) (async) socketpair(0x11, 0x80000, 0xffffff01, &(0x7f0000000100)) (async) syz_io_uring_submit(0x0, r0, &(0x7f0000000140)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x2, 0x0, @fd=r1, 0x7d, 0x0, 0x0, 0x10, 0x1, {0x1}}, 0x5) (async) socket(0xa, 0x1, 0x0) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) (async) pipe(&(0x7f00000001c0)) (async) setsockopt$MRT_DEL_MFC(r4, 0x0, 0xcd, &(0x7f0000000200)={@multicast2, @remote, 0x1, "182bb5a80519f201fcbdf1e4de8b4b528e8182b7bc740a621f3b992c6d64c7f4", 0x6a86, 0x81, 0xcae2, 0x4}, 0x3c) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000004, 0x10, r5, 0x0) (async) fsetxattr(r5, &(0x7f00000002c0)=ANY=[@ANYBLOB="62747276732e00ec325a9c61813dc7e906572edf8baae437e2277e0c0c6d2d340dea5f2adace4dc5e7f2e863a788152d016c9768518de99cc9072d2e250eb66d9284b3a5902eb8d4a0857945919cb2d1ea021543a5cb678c154901c491"], &(0x7f0000000280)='\x00', 0x1, 0x1) (async) ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(r3, 0x942e, 0x0) (async) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r2, 0x28, 0x2, 0x0, 0x0) (async) 18:39:37 executing program 3: r0 = signalfd(0xffffffffffffffff, 0x0, 0x0) close(r0) (async) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000bc0)={'wg0\x00', 0x0}) sendmsg$WG_CMD_GET_DEVICE(r0, &(0x7f0000000c80)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x34, 0x0, 0x8, 0x70bd28, 0x25dfdbfd, {}, [@WGDEVICE_A_IFINDEX={0x8, 0x1, r1}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x3f}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x61}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e20}]}, 0x34}, 0x1, 0x0, 0x0, 0x840}, 0x51) r2 = socket(0x1, 0x1, 0x3ffffd) setsockopt$MRT_DEL_VIF(r2, 0x0, 0xcb, 0x0, 0x0) r3 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), r2) (async) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000a80), r2) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, &(0x7f0000000b40)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x34, r4, 0x2f6ba04b368b0930, 0x70bd2b, 0x25dfdbff, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xc}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}]}, 0x34}}, 0x40004) (async) sendmsg$WG_CMD_SET_DEVICE(r2, &(0x7f0000000a00)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000009c0)={&(0x7f0000000080)={0x92c, r3, 0x100, 0x70bd29, 0x25dfdbfe, {}, [@WGDEVICE_A_PEERS={0x5f8, 0x8, 0x0, 0x1, [{0x584, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8, 0x3, 0x2}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e21, 0x3, @dev={0xfe, 0x80, '\x00', 0x3b}, 0x1f}}, @WGPEER_A_ALLOWEDIPS={0x1f8, 0x9, 0x0, 0x1, [{0xe8, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010102}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x3}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @local}, {0x5}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x3}}]}, {0x7c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5, 0x3, 0x1}}]}, {0x4c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x2}}]}]}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e20, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xfffffffe}}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ALLOWEDIPS={0x250, 0x9, 0x0, 0x1, [{0xe8, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x1e}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x44}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x3}}]}, {0xc4, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0xa}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5, 0x3, 0x3}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x2}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x5, 0x3, 0x2}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00'}, {0x5, 0x3, 0x2}}]}]}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e23, 0x5, @mcast1, 0xc3e}}, @WGPEER_A_ALLOWEDIPS={0x9c, 0x9, 0x0, 0x1, [{0x58, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x2}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x3}}]}]}, @WGPEER_A_PROTOCOL_VERSION={0x8}]}, {0x70, 0x0, 0x0, 0x1, [@WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0xf30}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e24, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, 0xff}}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e21, 0x100, @loopback, 0x3}}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "1e501917eff2daa4406a99e010f524cd9059625bbcf731e2a638b1de58021cfa"}]}]}, @WGDEVICE_A_IFINDEX={0x8}, @WGDEVICE_A_FLAGS={0x8}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @c}, @WGDEVICE_A_IFINDEX={0x8}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0xa7b}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e21}, @WGDEVICE_A_PEERS={0x2cc, 0x8, 0x0, 0x1, [{0x2c8, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x2c4, 0x9, 0x0, 0x1, [{0xe8, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010100}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010101}, {0x5, 0x3, 0x1}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x2}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x2}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x2}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @local}, {0x5}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x3}}]}, {0x7c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x41}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010101}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010101}, {0x5, 0x3, 0x2}}]}, {0x94, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x38}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}]}]}]}]}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x40}]}, 0x92c}, 0x1, 0x0, 0x0, 0x20004005}, 0x50) 18:39:37 executing program 0: r0 = signalfd(0xffffffffffffffff, 0x0, 0x0) close(r0) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(0x0, r1, 0x7, 0xffffffffffffffff, 0x0) sendmsg$nl_netfilter(r0, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x16d10b71aa4c6cac}, 0xc, &(0x7f0000000280)={&(0x7f0000000080)={0x1f0, 0x11, 0x9, 0x401, 0x70bd28, 0x25dfdbfc, {0x2, 0x0, 0x4}, [@generic="6b0438acbbb075b0b2d75d970d21ffa122b603ece6ee99a74a9c4db1d277958f56b95c59be594d74b6391be21c07119292c5e99bc8001b4aa36a2c4310d95ba435712a5530fba22ef9d52068460a9841024eb54e252a1aaee208264d0d2462d8a9973bce3bf63fa67d4b2305c06f3553fd350849dc8c61b28566490784d3833fbffb693b09494a67", @generic="c38a8678628ccb80536c39f83d051b45fb2a142f2516a38ca4e25da3fb02bb7ef11dc23ddd49f659ee820355c80140d4862debd9e15f2aabc342f42b8f061ba19204fccb848526fd1c79683a66a264dccf61d75e84016b0cf6e9a921d7a6087efe632cb1a410fe3d5e6a18e2340c44614d6df2bcb2320052ac63fd", @generic="951da77c833de914742d05d463cbaced7b8cdf55d125493ee37a6c859f24ec4b468d012d24c2ffc17ad875e3", @typed={0x8, 0x69, 0x0, 0x0, @pid=r1}, @typed={0x4, 0x61}, @generic="0a0bfed0ea86ad3377f3af968b37938fd9b6e10be1213e3da1f9fba0f9a48f01f1419026c6f54c62f1e246f57137ce27f0fcfb31317e97d2e77f77901365c0cb753eee877fa847d64632187c1ae40a76f3eaf92a6344a844d5ae1de2e50c4a02aeab7b708664bdd5d3662381c8523095f47c7e2f82b71f32b7f9125c42b3b02675b1a761bb10f871417d07c7ffc36ca1cd27b85b74b507b15dc022d84610"]}, 0x1f0}, 0x1, 0x0, 0x0, 0x4004010}, 0x40840) r2 = socket(0x9, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00'}) signalfd(0xffffffffffffffff, 0x0, 0x0) (async) close(r0) (async) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) kcmp$KCMP_EPOLL_TFD(0x0, r1, 0x7, 0xffffffffffffffff, 0x0) (async) sendmsg$nl_netfilter(r0, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x16d10b71aa4c6cac}, 0xc, &(0x7f0000000280)={&(0x7f0000000080)={0x1f0, 0x11, 0x9, 0x401, 0x70bd28, 0x25dfdbfc, {0x2, 0x0, 0x4}, [@generic="6b0438acbbb075b0b2d75d970d21ffa122b603ece6ee99a74a9c4db1d277958f56b95c59be594d74b6391be21c07119292c5e99bc8001b4aa36a2c4310d95ba435712a5530fba22ef9d52068460a9841024eb54e252a1aaee208264d0d2462d8a9973bce3bf63fa67d4b2305c06f3553fd350849dc8c61b28566490784d3833fbffb693b09494a67", @generic="c38a8678628ccb80536c39f83d051b45fb2a142f2516a38ca4e25da3fb02bb7ef11dc23ddd49f659ee820355c80140d4862debd9e15f2aabc342f42b8f061ba19204fccb848526fd1c79683a66a264dccf61d75e84016b0cf6e9a921d7a6087efe632cb1a410fe3d5e6a18e2340c44614d6df2bcb2320052ac63fd", @generic="951da77c833de914742d05d463cbaced7b8cdf55d125493ee37a6c859f24ec4b468d012d24c2ffc17ad875e3", @typed={0x8, 0x69, 0x0, 0x0, @pid=r1}, @typed={0x4, 0x61}, @generic="0a0bfed0ea86ad3377f3af968b37938fd9b6e10be1213e3da1f9fba0f9a48f01f1419026c6f54c62f1e246f57137ce27f0fcfb31317e97d2e77f77901365c0cb753eee877fa847d64632187c1ae40a76f3eaf92a6344a844d5ae1de2e50c4a02aeab7b708664bdd5d3662381c8523095f47c7e2f82b71f32b7f9125c42b3b02675b1a761bb10f871417d07c7ffc36ca1cd27b85b74b507b15dc022d84610"]}, 0x1f0}, 0x1, 0x0, 0x0, 0x4004010}, 0x40840) (async) socket(0x9, 0x2, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00'}) (async) 18:39:37 executing program 1: r0 = socket(0xa, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x29, 0x2, 0x0, 0x0) r1 = signalfd(0xffffffffffffffff, 0x0, 0x0) close(r1) (async) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r1, 0x28, 0x2, &(0x7f0000000000)=0x7ff, 0x8) [ 726.335243][T16599] R13: 00007ffe782f632f R14: 00007fb671f7e300 R15: 0000000000022000 [ 726.343145][T16599] [ 726.359506][T16628] FAULT_INJECTION: forcing a failure. [ 726.359506][T16628] name fail_page_alloc, interval 1, probability 0, space 0, times 0 18:39:37 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000004, 0x10, r0, 0x0) pread64(r0, &(0x7f0000000000)=""/9, 0x9, 0xfffffffffffffff9) r1 = socket(0xa, 0x1, 0x0) setsockopt$MRT_DEL_VIF(r1, 0x0, 0xcb, 0x0, 0x0) 18:39:37 executing program 4: syz_io_uring_setup(0x5b3f, &(0x7f0000000000)={0x0, 0x56ec, 0x400, 0x3, 0x166}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000080), &(0x7f00000000c0)=0x0) (async) socketpair(0x11, 0x80000, 0xffffff01, &(0x7f0000000100)={0xffffffffffffffff}) syz_io_uring_submit(0x0, r0, &(0x7f0000000140)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x2, 0x0, @fd=r1, 0x7d, 0x0, 0x0, 0x10, 0x1, {0x1}}, 0x5) r2 = socket(0xa, 0x1, 0x0) (async) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) (async) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$MRT_DEL_MFC(r4, 0x0, 0xcd, &(0x7f0000000200)={@multicast2, @remote, 0x1, "182bb5a80519f201fcbdf1e4de8b4b528e8182b7bc740a621f3b992c6d64c7f4", 0x6a86, 0x81, 0xcae2, 0x4}, 0x3c) r5 = socket$inet_udp(0x2, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000004, 0x10, r5, 0x0) (async) fsetxattr(r5, &(0x7f00000002c0)=ANY=[@ANYBLOB="62747276732e00ec325a9c61813dc7e906572edf8baae437e2277e0c0c6d2d340dea5f2adace4dc5e7f2e863a788152d016c9768518de99cc9072d2e250eb66d9284b3a5902eb8d4a0857945919cb2d1ea021543a5cb678c154901c491"], &(0x7f0000000280)='\x00', 0x1, 0x1) (async) ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(r3, 0x942e, 0x0) (async) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r2, 0x28, 0x2, 0x0, 0x0) 18:39:37 executing program 0: r0 = socket(0xa, 0x1, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000004, 0x10, r1, 0x0) readahead(r1, 0x7f, 0xaa6) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00'}) 18:39:37 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000004, 0x10, r0, 0x0) (async) pread64(r0, &(0x7f0000000000)=""/9, 0x9, 0xfffffffffffffff9) r1 = socket(0xa, 0x1, 0x0) setsockopt$MRT_DEL_VIF(r1, 0x0, 0xcb, 0x0, 0x0) 18:39:37 executing program 0: r0 = socket(0xa, 0x1, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000004, 0x10, r1, 0x0) (async) readahead(r1, 0x7f, 0xaa6) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00'}) [ 726.383283][T16628] CPU: 1 PID: 16628 Comm: syz-executor.2 Not tainted 5.15.74-syzkaller-04383-g7f2e600bf63a #0 [ 726.393362][T16628] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/11/2022 [ 726.403251][T16628] Call Trace: [ 726.406586][T16628] [ 726.409326][T16628] dump_stack_lvl+0x151/0x1b7 [ 726.413845][T16628] ? bfq_pos_tree_add_move+0x43e/0x43e [ 726.419223][T16628] dump_stack+0x15/0x17 [ 726.423389][T16628] should_fail+0x3c0/0x510 [ 726.427728][T16628] should_fail_alloc_page+0x58/0x70 [ 726.432763][T16628] __alloc_pages+0x1de/0x7c0 [ 726.437286][T16628] ? __count_vm_events+0x30/0x30 [ 726.442050][T16628] ? __this_cpu_preempt_check+0x13/0x20 [ 726.447429][T16628] ? __mod_node_page_state+0xac/0xf0 [ 726.452553][T16628] pte_alloc_one+0x73/0x1b0 [ 726.456888][T16628] ? pfn_modify_allowed+0x2e0/0x2e0 [ 726.461921][T16628] __pte_alloc+0x86/0x350 [ 726.466172][T16628] ? free_pgtables+0x210/0x210 [ 726.470951][T16628] ? _raw_spin_lock+0xa3/0x1b0 [ 726.475547][T16628] ? _raw_spin_trylock_bh+0x1d0/0x1d0 [ 726.480764][T16628] ? __kernel_text_address+0x9a/0x110 [ 726.485962][T16628] copy_pte_range+0x1b1f/0x20b0 [ 726.490655][T16628] ? __kunmap_atomic+0x80/0x80 [ 726.495247][T16628] ? __kasan_slab_alloc+0xc4/0xe0 [ 726.500194][T16628] ? __kasan_slab_alloc+0xb2/0xe0 [ 726.505053][T16628] ? kmem_cache_alloc+0x189/0x2f0 [ 726.510022][T16628] ? vm_area_dup+0x26/0x1d0 [ 726.514340][T16628] ? dup_mmap+0x6b8/0xea0 [ 726.518508][T16628] ? dup_mm+0x91/0x330 [ 726.522413][T16628] ? copy_mm+0x108/0x1b0 [ 726.526492][T16628] ? copy_process+0x1295/0x3250 [ 726.531177][T16628] ? kernel_clone+0x22d/0x990 [ 726.535691][T16628] ? __x64_sys_clone+0x289/0x310 [ 726.540596][T16628] ? do_syscall_64+0x44/0xd0 [ 726.545013][T16628] ? entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 726.550921][T16628] copy_page_range+0xc1e/0x1090 [ 726.555691][T16628] ? pfn_valid+0x1e0/0x1e0 [ 726.559947][T16628] dup_mmap+0x99f/0xea0 [ 726.563938][T16628] ? __delayed_free_task+0x20/0x20 [ 726.568880][T16628] ? mm_init+0x807/0x960 [ 726.572958][T16628] dup_mm+0x91/0x330 [ 726.576692][T16628] copy_mm+0x108/0x1b0 [ 726.580599][T16628] copy_process+0x1295/0x3250 [ 726.585111][T16628] ? proc_fail_nth_write+0x213/0x290 [ 726.590232][T16628] ? proc_fail_nth_read+0x220/0x220 [ 726.595267][T16628] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 726.600214][T16628] ? vfs_write+0x9af/0x1050 [ 726.604643][T16628] ? vmacache_update+0xb7/0x120 [ 726.609357][T16628] kernel_clone+0x22d/0x990 [ 726.613753][T16628] ? file_end_write+0x1b0/0x1b0 [ 726.618438][T16628] ? __kasan_check_write+0x14/0x20 [ 726.623476][T16628] ? create_io_thread+0x1e0/0x1e0 [ 726.628431][T16628] ? __mutex_lock_slowpath+0x10/0x10 [ 726.633545][T16628] __x64_sys_clone+0x289/0x310 [ 726.638141][T16628] ? __do_sys_vfork+0x130/0x130 [ 726.642833][T16628] ? debug_smp_processor_id+0x17/0x20 [ 726.648557][T16628] do_syscall_64+0x44/0xd0 [ 726.652809][T16628] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 726.658542][T16628] RIP: 0033:0x7fb67320a5a9 [ 726.662795][T16628] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 18:39:38 executing program 2: syz_clone(0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 67) 18:39:38 executing program 0: r0 = socket(0xa, 0x1, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000004, 0x10, r1, 0x0) readahead(r1, 0x7f, 0xaa6) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00'}) socket(0xa, 0x1, 0x0) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000004, 0x10, r1, 0x0) (async) readahead(r1, 0x7f, 0xaa6) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00'}) (async) 18:39:38 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000004, 0x10, r0, 0x0) pread64(r0, &(0x7f0000000000)=""/9, 0x9, 0xfffffffffffffff9) r1 = socket(0xa, 0x1, 0x0) setsockopt$MRT_DEL_VIF(r1, 0x0, 0xcb, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) (async) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000004, 0x10, r0, 0x0) (async) pread64(r0, &(0x7f0000000000)=""/9, 0x9, 0xfffffffffffffff9) (async) socket(0xa, 0x1, 0x0) (async) setsockopt$MRT_DEL_VIF(r1, 0x0, 0xcb, 0x0, 0x0) (async) 18:39:38 executing program 5: r0 = socket(0xa, 0x1, 0x0) sendmsg$nl_netfilter(r0, &(0x7f0000001500)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000014c0)={&(0x7f0000000080)={0x1434, 0x9, 0x0, 0x101, 0x70bd2d, 0x25dfdbfb, {0x1, 0x0, 0x1}, [@typed={0x50, 0x90, 0x0, 0x0, @binary="ab64e8d960a88f94ca65ac6564db8a86f65674c945348b51dbe5338c529f7bca79c074888c417d03ccb3d1a3b93948ab250864ecdbb3fa93a016f549e1e461ad6c0eaf2c297cf38d4aca14eb"}, @generic, @nested={0xe9, 0x13, 0x0, 0x1, [@typed={0x8, 0xe, 0x0, 0x0, @ipv4=@private=0xa010101}, @generic="f03230085439d1a97d1ff08f2f199184cd579e6d53d03d70c64461ed0abaf41b179c0fbac129ba72e6b8ff8cab44d9f950de0057f13b766ac0370ae2656584da9b7107b3d6d1557b900345c18302da53c8fe0c6432de41fbc28a3e71e2d4effb9f2c2270fd6fcb8d64bc054bf4d030402abd23a7687dd7f63b0024ec9331fe057d6dcdc3fd9c417f6e0f6ca97a9010cd1cd13a5df5a598203c85d33cef4274204fe33704a2c6e95b093964b34537f34274d4bfa27ade2af26b8effd124", @typed={0xc, 0x5d, 0x0, 0x0, @u64}, @typed={0x14, 0x80, 0x0, 0x0, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, @generic="f8e493946fbc52b4797da85e99a22ac26da759eae8c4092d2b14b2666bb92068f5b482efb3477c07c639a8396e8e47d583dec244a3aa26facf21114d884ec1bf7254094e44aa5dcfdb9dd0cdd8f673041d0b9c914213ab034020", @nested={0x100c, 0x8c, 0x0, 0x1, [@typed={0x8, 0x7, 0x0, 0x0, @str='}{^\x00'}, @generic="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"]}, @generic="bba35d2ba0fdbf6816a5d2c31614127245df088aa87f5b5391a6", @typed={0xf9, 0xe, 0x0, 0x0, @binary="d23e3b185474e0c37d7d222c23b80edb0d6b0b24c4873301a720627920b6aa306e1811f53b8574dc0c0b8a70aa3471a7cdc9c5115dd705a97a72854a9dcfc5d4bfda6640f27c1f0d00e818f8ae5cc8b0d8d9b5834fa8b88840a95deaed86ea1821c52613d384488aef1bbe238bc5ba75eacc1eb286c1ce781d97be04466d0e51ebc302f8fb32b9467d31073105967c2e2ae020c88339d28103a6c17421057e32bf9e68b5e6e2868c74c989043ef61d777ad9352095d790ba1da356a9fd21ebed1316d9b2465f9167150687c101c57b453ca2e5f205c1bc91eb7a11bd5848314462ef6426cbaa7722cbfa924cdea526791a0119c582"}, @generic="524872c9a1562b0b3d0d415fb4a73f178e", @generic="d16f766b3e36cacd090e42833872664e6b7b3ce22a97f17044a9e750ec1e9a0de1ba9649e40ca02ac9d4235a2e7070317b2373483755eec629697aefa4d82d48fb1ea190ccc784e1588c043447095e70fdbf6dbfe5ddc27269e6cb44cd9d87da960697cceb5248c785a578f94fe567981222219ab3723ddd16bdb977dc33b50f06f109b0f2c65cf6eb8f85d7f11dadd81c8df5872b161b65db3afe11255c6557ee29e3ea1b7375f5ea90d2ab5aa13b9b84fa1929bb068b936b82906163215931bdfaef84335fe74c014ebb25d2663f54", @generic="316fde614236db60d6a402a2a859e2e40c78d6c581c83f138ae54658cd45ed905c0ef98ebfc21c9beb32f9bb72886a1e1aa601d8aa89a9690c9488bb52be5943b6a1c01471fedff2b605ac7342fa700d80e84ff70c2be70712f1eade0223878d5a60f81e136fa9ddad03aeccc3c221e2197456414111e6f47e3340bb231b3a59bae441a8485f"]}, 0x1434}, 0x1, 0x0, 0x0, 0x24040800}, 0x8000) (async) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x6, 0x2, 0x0, 0x0) (async) pipe2$watch_queue(&(0x7f0000000040), 0x80) 18:39:38 executing program 1: r0 = socket(0xa, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x29, 0x2, 0x0, 0x0) (async) r1 = signalfd(0xffffffffffffffff, 0x0, 0x0) close(r1) (async) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r1, 0x28, 0x2, &(0x7f0000000000)=0x7ff, 0x8) 18:39:38 executing program 4: r0 = socket(0xa, 0x1, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_RECVSEQ(r0, 0x111, 0x2, 0x1, 0x4) r1 = signalfd(0xffffffffffffffff, 0x0, 0x0) close(r1) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) ioctl$F2FS_IOC_RESIZE_FS(r0, 0x4008f510, &(0x7f0000000080)=0x200) connect$packet(r1, &(0x7f0000000040)={0x11, 0x9, r2, 0x1, 0x0, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x22}}, 0x14) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x28, 0x2, 0x0, 0x0) [ 726.682232][T16628] RSP: 002b:00007fb671f7e118 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 726.690479][T16628] RAX: ffffffffffffffda RBX: 00007fb67332af80 RCX: 00007fb67320a5a9 [ 726.698384][T16628] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000010000000 [ 726.706189][T16628] RBP: 00007fb671f7e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 726.714007][T16628] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 726.721816][T16628] R13: 00007ffe782f632f R14: 00007fb671f7e300 R15: 0000000000022000 [ 726.729625][T16628] 18:39:38 executing program 4: r0 = socket(0xa, 0x1, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_RECVSEQ(r0, 0x111, 0x2, 0x1, 0x4) (async) r1 = signalfd(0xffffffffffffffff, 0x0, 0x0) close(r1) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) (async) ioctl$F2FS_IOC_RESIZE_FS(r0, 0x4008f510, &(0x7f0000000080)=0x200) connect$packet(r1, &(0x7f0000000040)={0x11, 0x9, r2, 0x1, 0x0, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x22}}, 0x14) (async) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x28, 0x2, 0x0, 0x0) 18:39:38 executing program 1: r0 = socket(0xa, 0x1, 0x5) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x29, 0x2, 0x0, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000000000)={"9eefa361e0ba0c86a091ac21ee2f0d1b", 0x0, 0x0, {0x7fffffffffffffff, 0x6f1}, {0x100, 0x1000}, 0x5, [0x8001, 0x0, 0x682, 0x3, 0x6, 0x0, 0xa11, 0x7fff, 0x200, 0x1, 0x2, 0x6, 0x7, 0x80000000000, 0x2]}) 18:39:38 executing program 0: r0 = socket(0xa, 0x1, 0x0) r1 = dup3(r0, r0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r1) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00'}) 18:39:38 executing program 4: r0 = socket(0xa, 0x1, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_RECVSEQ(r0, 0x111, 0x2, 0x1, 0x4) (async) r1 = signalfd(0xffffffffffffffff, 0x0, 0x0) close(r1) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) ioctl$F2FS_IOC_RESIZE_FS(r0, 0x4008f510, &(0x7f0000000080)=0x200) (async) connect$packet(r1, &(0x7f0000000040)={0x11, 0x9, r2, 0x1, 0x0, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x22}}, 0x14) (async) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x28, 0x2, 0x0, 0x0) 18:39:38 executing program 0: r0 = socket(0xa, 0x1, 0x0) r1 = dup3(r0, r0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r1) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00'}) [ 726.746908][T16681] FAULT_INJECTION: forcing a failure. [ 726.746908][T16681] name failslab, interval 1, probability 0, space 0, times 0 [ 726.763885][T16681] CPU: 1 PID: 16681 Comm: syz-executor.2 Not tainted 5.15.74-syzkaller-04383-g7f2e600bf63a #0 [ 726.774041][T16681] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/11/2022 [ 726.783933][T16681] Call Trace: [ 726.787142][T16681] [ 726.789920][T16681] dump_stack_lvl+0x151/0x1b7 18:39:38 executing program 4: r0 = socket(0xa, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x28, 0x2, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wg1\x00'}) [ 726.794532][T16681] ? bfq_pos_tree_add_move+0x43e/0x43e [ 726.799819][T16681] dump_stack+0x15/0x17 [ 726.803816][T16681] should_fail+0x3c0/0x510 [ 726.808068][T16681] __should_failslab+0x9f/0xe0 [ 726.812665][T16681] should_failslab+0x9/0x20 [ 726.817001][T16681] kmem_cache_alloc+0x4f/0x2f0 [ 726.821608][T16681] ? vm_area_dup+0x26/0x1d0 [ 726.825943][T16681] vm_area_dup+0x26/0x1d0 [ 726.830108][T16681] dup_mmap+0x6b8/0xea0 [ 726.834103][T16681] ? __delayed_free_task+0x20/0x20 [ 726.839052][T16681] ? mm_init+0x807/0x960 [ 726.843124][T16681] dup_mm+0x91/0x330 [ 726.846859][T16681] copy_mm+0x108/0x1b0 [ 726.850763][T16681] copy_process+0x1295/0x3250 [ 726.855275][T16681] ? proc_fail_nth_write+0x213/0x290 [ 726.860393][T16681] ? proc_fail_nth_read+0x220/0x220 [ 726.865431][T16681] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 726.870472][T16681] ? vfs_write+0x9af/0x1050 [ 726.874813][T16681] ? vmacache_update+0xb7/0x120 [ 726.879498][T16681] kernel_clone+0x22d/0x990 [ 726.883839][T16681] ? file_end_write+0x1b0/0x1b0 [ 726.888528][T16681] ? __kasan_check_write+0x14/0x20 [ 726.893472][T16681] ? create_io_thread+0x1e0/0x1e0 [ 726.898334][T16681] ? __mutex_lock_slowpath+0x10/0x10 [ 726.903454][T16681] __x64_sys_clone+0x289/0x310 [ 726.908054][T16681] ? __do_sys_vfork+0x130/0x130 [ 726.912742][T16681] ? debug_smp_processor_id+0x17/0x20 [ 726.917950][T16681] do_syscall_64+0x44/0xd0 [ 726.922201][T16681] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 726.927929][T16681] RIP: 0033:0x7fb67320a5a9 [ 726.932182][T16681] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 726.951630][T16681] RSP: 002b:00007fb671f7e118 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 726.959870][T16681] RAX: ffffffffffffffda RBX: 00007fb67332af80 RCX: 00007fb67320a5a9 [ 726.967681][T16681] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000010000000 [ 726.975498][T16681] RBP: 00007fb671f7e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 726.983305][T16681] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 18:39:38 executing program 2: syz_clone(0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 68) 18:39:38 executing program 0: r0 = socket(0xa, 0x1, 0x0) r1 = dup3(r0, r0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r1) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00'}) 18:39:38 executing program 4: r0 = socket(0xa, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x28, 0x2, 0x0, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wg1\x00'}) 18:39:38 executing program 5: r0 = socket(0xa, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x6, 0x2, 0x0, 0x0) r1 = signalfd(0xffffffffffffffff, 0x0, 0x0) close(r1) getpeername$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0}, &(0x7f0000000080)=0x14) sendmsg$FOU_CMD_ADD(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, 0x0, 0x400, 0x70bd2c, 0x25dfdbff, {}, [@FOU_ATTR_AF={0x5, 0x2, 0x8}, @FOU_ATTR_IFINDEX={0x8, 0xb, r2}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x2c}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x5) 18:39:38 executing program 1: r0 = socket(0xa, 0x1, 0x5) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x29, 0x2, 0x0, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000000000)={"9eefa361e0ba0c86a091ac21ee2f0d1b", 0x0, 0x0, {0x7fffffffffffffff, 0x6f1}, {0x100, 0x1000}, 0x5, [0x8001, 0x0, 0x682, 0x3, 0x6, 0x0, 0xa11, 0x7fff, 0x200, 0x1, 0x2, 0x6, 0x7, 0x80000000000, 0x2]}) socket(0xa, 0x1, 0x5) (async) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x29, 0x2, 0x0, 0x0) (async) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000000000)={"9eefa361e0ba0c86a091ac21ee2f0d1b", 0x0, 0x0, {0x7fffffffffffffff, 0x6f1}, {0x100, 0x1000}, 0x5, [0x8001, 0x0, 0x682, 0x3, 0x6, 0x0, 0xa11, 0x7fff, 0x200, 0x1, 0x2, 0x6, 0x7, 0x80000000000, 0x2]}) (async) 18:39:38 executing program 3: r0 = socket(0x0, 0x80000, 0x0) setsockopt$MRT_DEL_VIF(r0, 0x0, 0xcb, 0x0, 0x0) setsockopt$MRT_DEL_MFC(r0, 0x0, 0xcd, &(0x7f0000000000)={@initdev={0xac, 0x1e, 0x0, 0x0}, @remote, 0x0, "ee790a88d9207162996f1d2e6d5d836a509d191071da23daa15e660ff42e3c03", 0x7fff, 0x80000001, 0x5, 0xffffffff}, 0x3c) 18:39:38 executing program 5: r0 = socket(0xa, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x6, 0x2, 0x0, 0x0) r1 = signalfd(0xffffffffffffffff, 0x0, 0x0) close(r1) getpeername$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0}, &(0x7f0000000080)=0x14) sendmsg$FOU_CMD_ADD(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, 0x0, 0x400, 0x70bd2c, 0x25dfdbff, {}, [@FOU_ATTR_AF={0x5, 0x2, 0x8}, @FOU_ATTR_IFINDEX={0x8, 0xb, r2}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x2c}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x5) socket(0xa, 0x1, 0x0) (async) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x6, 0x2, 0x0, 0x0) (async) signalfd(0xffffffffffffffff, 0x0, 0x0) (async) close(r1) (async) getpeername$packet(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)=0x14) (async) sendmsg$FOU_CMD_ADD(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, 0x0, 0x400, 0x70bd2c, 0x25dfdbff, {}, [@FOU_ATTR_AF={0x5, 0x2, 0x8}, @FOU_ATTR_IFINDEX={0x8, 0xb, r2}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x2c}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x5) (async) [ 726.991114][T16681] R13: 00007ffe782f632f R14: 00007fb671f7e300 R15: 0000000000022000 [ 726.998933][T16681] 18:39:38 executing program 3: r0 = socket(0x0, 0x80000, 0x0) setsockopt$MRT_DEL_VIF(r0, 0x0, 0xcb, 0x0, 0x0) (async) setsockopt$MRT_DEL_MFC(r0, 0x0, 0xcd, &(0x7f0000000000)={@initdev={0xac, 0x1e, 0x0, 0x0}, @remote, 0x0, "ee790a88d9207162996f1d2e6d5d836a509d191071da23daa15e660ff42e3c03", 0x7fff, 0x80000001, 0x5, 0xffffffff}, 0x3c) 18:39:38 executing program 0: socket(0xa, 0x1, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040), 0x179501, 0x0) write$eventfd(r1, &(0x7f0000000080)=0x2c72, 0x8) r2 = signalfd(0xffffffffffffffff, 0x0, 0x0) close(r2) mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000004, 0x80010, r2, 0x0) fsmount(r1, 0x1, 0x172) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00'}) 18:39:38 executing program 1: r0 = socket(0xa, 0x1, 0x5) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x29, 0x2, 0x0, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000000000)={"9eefa361e0ba0c86a091ac21ee2f0d1b", 0x0, 0x0, {0x7fffffffffffffff, 0x6f1}, {0x100, 0x1000}, 0x5, [0x8001, 0x0, 0x682, 0x3, 0x6, 0x0, 0xa11, 0x7fff, 0x200, 0x1, 0x2, 0x6, 0x7, 0x80000000000, 0x2]}) socket(0xa, 0x1, 0x5) (async) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x29, 0x2, 0x0, 0x0) (async) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000000000)={"9eefa361e0ba0c86a091ac21ee2f0d1b", 0x0, 0x0, {0x7fffffffffffffff, 0x6f1}, {0x100, 0x1000}, 0x5, [0x8001, 0x0, 0x682, 0x3, 0x6, 0x0, 0xa11, 0x7fff, 0x200, 0x1, 0x2, 0x6, 0x7, 0x80000000000, 0x2]}) (async) 18:39:38 executing program 0: socket(0xa, 0x1, 0x0) (async) r0 = socket$inet_udp(0x2, 0x2, 0x0) (async) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040), 0x179501, 0x0) write$eventfd(r1, &(0x7f0000000080)=0x2c72, 0x8) (async) r2 = signalfd(0xffffffffffffffff, 0x0, 0x0) close(r2) mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000004, 0x80010, r2, 0x0) fsmount(r1, 0x1, 0x172) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00'}) 18:39:38 executing program 5: r0 = socket(0xa, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x6, 0x2, 0x0, 0x0) (async) r1 = signalfd(0xffffffffffffffff, 0x0, 0x0) close(r1) (async) getpeername$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0}, &(0x7f0000000080)=0x14) sendmsg$FOU_CMD_ADD(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, 0x0, 0x400, 0x70bd2c, 0x25dfdbff, {}, [@FOU_ATTR_AF={0x5, 0x2, 0x8}, @FOU_ATTR_IFINDEX={0x8, 0xb, r2}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x2c}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x5) [ 727.028149][T16719] FAULT_INJECTION: forcing a failure. [ 727.028149][T16719] name failslab, interval 1, probability 0, space 0, times 0 [ 727.042197][T16719] CPU: 1 PID: 16719 Comm: syz-executor.2 Not tainted 5.15.74-syzkaller-04383-g7f2e600bf63a #0 [ 727.052264][T16719] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/11/2022 [ 727.062175][T16719] Call Trace: [ 727.065282][T16719] [ 727.068058][T16719] dump_stack_lvl+0x151/0x1b7 [ 727.072581][T16719] ? bfq_pos_tree_add_move+0x43e/0x43e [ 727.077877][T16719] dump_stack+0x15/0x17 [ 727.081861][T16719] should_fail+0x3c0/0x510 [ 727.086115][T16719] __should_failslab+0x9f/0xe0 [ 727.090732][T16719] should_failslab+0x9/0x20 [ 727.095052][T16719] kmem_cache_alloc+0x4f/0x2f0 [ 727.099656][T16719] ? vm_area_dup+0x26/0x1d0 [ 727.103990][T16719] vm_area_dup+0x26/0x1d0 [ 727.108157][T16719] dup_mmap+0x6b8/0xea0 [ 727.112153][T16719] ? __delayed_free_task+0x20/0x20 [ 727.117094][T16719] ? mm_init+0x807/0x960 [ 727.121171][T16719] dup_mm+0x91/0x330 [ 727.124913][T16719] copy_mm+0x108/0x1b0 [ 727.128811][T16719] copy_process+0x1295/0x3250 [ 727.133324][T16719] ? proc_fail_nth_write+0x213/0x290 [ 727.138446][T16719] ? proc_fail_nth_read+0x220/0x220 [ 727.143487][T16719] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 727.148425][T16719] ? vfs_write+0x9af/0x1050 [ 727.152765][T16719] kernel_clone+0x22d/0x990 [ 727.157104][T16719] ? file_end_write+0x1b0/0x1b0 [ 727.161791][T16719] ? __kasan_check_write+0x14/0x20 [ 727.166738][T16719] ? create_io_thread+0x1e0/0x1e0 [ 727.171600][T16719] ? __mutex_lock_slowpath+0x10/0x10 [ 727.176808][T16719] __x64_sys_clone+0x289/0x310 [ 727.181408][T16719] ? __do_sys_vfork+0x130/0x130 [ 727.186094][T16719] ? fpregs_restore_userregs+0x1f0/0x3a0 [ 727.191564][T16719] ? switch_fpu_return+0xe/0x10 [ 727.196248][T16719] do_syscall_64+0x44/0xd0 [ 727.200514][T16719] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 727.206238][T16719] RIP: 0033:0x7fb67320a5a9 [ 727.210497][T16719] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 727.230532][T16719] RSP: 002b:00007fb671f7e118 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 727.238776][T16719] RAX: ffffffffffffffda RBX: 00007fb67332af80 RCX: 00007fb67320a5a9 [ 727.246609][T16719] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000010000000 [ 727.254400][T16719] RBP: 00007fb671f7e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 727.262213][T16719] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 727.270023][T16719] R13: 00007ffe782f632f R14: 00007fb671f7e300 R15: 0000000000022000 18:39:38 executing program 2: syz_clone(0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 69) 18:39:38 executing program 0: socket(0xa, 0x1, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040), 0x179501, 0x0) write$eventfd(r1, &(0x7f0000000080)=0x2c72, 0x8) r2 = signalfd(0xffffffffffffffff, 0x0, 0x0) close(r2) mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000004, 0x80010, r2, 0x0) fsmount(r1, 0x1, 0x172) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00'}) socket(0xa, 0x1, 0x0) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040), 0x179501, 0x0) (async) write$eventfd(r1, &(0x7f0000000080)=0x2c72, 0x8) (async) signalfd(0xffffffffffffffff, 0x0, 0x0) (async) close(r2) (async) mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000004, 0x80010, r2, 0x0) (async) fsmount(r1, 0x1, 0x172) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00'}) (async) 18:39:38 executing program 3: r0 = socket(0x0, 0x80000, 0x0) setsockopt$MRT_DEL_VIF(r0, 0x0, 0xcb, 0x0, 0x0) setsockopt$MRT_DEL_MFC(r0, 0x0, 0xcd, &(0x7f0000000000)={@initdev={0xac, 0x1e, 0x0, 0x0}, @remote, 0x0, "ee790a88d9207162996f1d2e6d5d836a509d191071da23daa15e660ff42e3c03", 0x7fff, 0x80000001, 0x5, 0xffffffff}, 0x3c) 18:39:38 executing program 1: r0 = socket(0x33, 0x1, 0x0) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000000)=0x0) r3 = openat$cgroup_devices(0xffffffffffffffff, &(0x7f00000010c0)='devices.allow\x00', 0x2, 0x0) r4 = signalfd(0xffffffffffffffff, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) close(r4) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$F2FS_IOC_RESIZE_FS(0xffffffffffffffff, 0x4008f510, &(0x7f0000001100)=0xaf1) ioctl$AUTOFS_IOC_READY(r3, 0x9360, 0x80000001) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r0, 0x50009417, &(0x7f00000000c0)={{r1}, r2, 0x3a, @inherit={0x60, &(0x7f0000000040)=ANY=[@ANYBLOB="000000000000000003000000e3ff00000800000000000000670d0000000000000c0000000000000008000000000000008b9d177a000000007800000000000000fd000000000000000500000000000000ff0300000000000001f4ffffffffffff"]}, @name="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"}) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x29, 0x2, 0x0, 0x0) 18:39:38 executing program 5: r0 = socket(0x1b, 0x4, 0x7ff) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x6, 0x2, 0x0, 0xffffffffffffff98) 18:39:38 executing program 4: r0 = socket(0xa, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x28, 0x2, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wg1\x00'}) socket(0xa, 0x1, 0x0) (async) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x28, 0x2, 0x0, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wg1\x00'}) (async) 18:39:38 executing program 3: r0 = socket(0xf, 0x5, 0xffff0001) setsockopt$MRT_DEL_VIF(r0, 0x0, 0xcb, 0x0, 0x0) 18:39:38 executing program 1: r0 = socket(0x33, 0x1, 0x0) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) (async) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000000)=0x0) (async) r3 = openat$cgroup_devices(0xffffffffffffffff, &(0x7f00000010c0)='devices.allow\x00', 0x2, 0x0) (async) r4 = signalfd(0xffffffffffffffff, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) (async, rerun: 64) close(r4) (async, rerun: 64) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) (async) ioctl$F2FS_IOC_RESIZE_FS(0xffffffffffffffff, 0x4008f510, &(0x7f0000001100)=0xaf1) ioctl$AUTOFS_IOC_READY(r3, 0x9360, 0x80000001) (async) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r0, 0x50009417, &(0x7f00000000c0)={{r1}, r2, 0x3a, @inherit={0x60, &(0x7f0000000040)=ANY=[@ANYBLOB="000000000000000003000000e3ff00000800000000000000670d0000000000000c0000000000000008000000000000008b9d177a000000007800000000000000fd000000000000000500000000000000ff0300000000000001f4ffffffffffff"]}, @name="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"}) (async) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x29, 0x2, 0x0, 0x0) 18:39:38 executing program 0: r0 = socket(0xe, 0x5, 0x0) r1 = pidfd_open(0x0, 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(r1, 0xc4089434, &(0x7f0000000040)={0x0, 0x6824, 0x0, [0x2, 0x9, 0x0, 0x8000000000000001, 0x8001], [0x0, 0x6, 0x5e6, 0x6, 0xffff, 0x5, 0x6, 0x3, 0x80000000, 0x0, 0x200, 0xfffffffffffffff9, 0x60, 0x6, 0xf3b4, 0x8, 0x8, 0x0, 0x3, 0x4, 0x8, 0x40, 0xd5, 0x9, 0x8ea4, 0x2, 0x5, 0x1, 0x7424, 0x8, 0x3, 0x3, 0x36c, 0x2, 0x2, 0x6bfe, 0x8, 0x0, 0x80, 0xff, 0x1, 0xd53, 0xfff, 0xfffffffffffff3d8, 0x9, 0x8, 0x82, 0x1000, 0x8, 0x6, 0x7, 0x1, 0x80, 0x8000000000000000, 0x7, 0x5, 0x5, 0x5, 0x4, 0x4, 0x5, 0x4163c1d3, 0x5e, 0xffffffffffffff80, 0x9, 0x6e2c5a2f, 0x5, 0x6e, 0xb9, 0x9, 0x1, 0x5, 0x4, 0x3, 0x3ff, 0xffffffffffff7fff, 0x3, 0x7711, 0xb8, 0x6, 0xff, 0x6, 0x0, 0x0, 0x0, 0x2, 0xffffffffffffffe0, 0x2, 0x8, 0x9, 0x1, 0x6db, 0x8, 0x7, 0x2, 0x6, 0x7f9b, 0x24000, 0x1da, 0x783, 0xbcb, 0x8000, 0x1000, 0x401, 0x0, 0x1, 0x0, 0xffff, 0x1, 0x0, 0x1bd, 0x2, 0x10000, 0x9, 0x7, 0x4, 0x6a5f, 0x0, 0x2734, 0x5, 0xfffffffffffffff7]}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00'}) ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(r0, 0x942e, 0x0) 18:39:38 executing program 4: r0 = socket(0xa, 0x4, 0x1) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x28, 0x2, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) signalfd(r1, &(0x7f0000000140)={[0xfffffffffffffffe]}, 0x8) r2 = socket$inet_udp(0x2, 0x2, 0x0) fgetxattr(r2, &(0x7f0000000180)=@random={'trusted.', 'user.incfs.id\x00'}, &(0x7f0000000000)=""/175, 0xaf) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f00000000c0)={'wg0\x00'}) [ 727.277928][T16719] 18:39:38 executing program 3: r0 = socket(0xf, 0x5, 0xffff0001) setsockopt$MRT_DEL_VIF(r0, 0x0, 0xcb, 0x0, 0x0) 18:39:38 executing program 5: r0 = socket(0x1b, 0x4, 0x7ff) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x6, 0x2, 0x0, 0xffffffffffffff98) [ 727.324003][T16777] FAULT_INJECTION: forcing a failure. [ 727.324003][T16777] name failslab, interval 1, probability 0, space 0, times 0 [ 727.344693][T16777] CPU: 0 PID: 16777 Comm: syz-executor.2 Not tainted 5.15.74-syzkaller-04383-g7f2e600bf63a #0 [ 727.354761][T16777] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/11/2022 [ 727.364746][T16777] Call Trace: [ 727.367862][T16777] [ 727.370728][T16777] dump_stack_lvl+0x151/0x1b7 [ 727.375247][T16777] ? bfq_pos_tree_add_move+0x43e/0x43e [ 727.380537][T16777] dump_stack+0x15/0x17 [ 727.384528][T16777] should_fail+0x3c0/0x510 [ 727.388783][T16777] __should_failslab+0x9f/0xe0 [ 727.393384][T16777] should_failslab+0x9/0x20 [ 727.397719][T16777] kmem_cache_alloc+0x4f/0x2f0 [ 727.402322][T16777] ? vm_area_dup+0x26/0x1d0 [ 727.406665][T16777] vm_area_dup+0x26/0x1d0 [ 727.410826][T16777] dup_mmap+0x6b8/0xea0 [ 727.414821][T16777] ? __delayed_free_task+0x20/0x20 [ 727.419765][T16777] ? mm_init+0x807/0x960 [ 727.423848][T16777] dup_mm+0x91/0x330 [ 727.427578][T16777] copy_mm+0x108/0x1b0 [ 727.431483][T16777] copy_process+0x1295/0x3250 [ 727.435998][T16777] ? proc_fail_nth_write+0x213/0x290 [ 727.441205][T16777] ? proc_fail_nth_read+0x220/0x220 [ 727.446238][T16777] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 727.451190][T16777] ? vfs_write+0x9af/0x1050 [ 727.455525][T16777] ? vmacache_update+0xb7/0x120 [ 727.460213][T16777] kernel_clone+0x22d/0x990 [ 727.464556][T16777] ? file_end_write+0x1b0/0x1b0 [ 727.469240][T16777] ? __kasan_check_write+0x14/0x20 [ 727.474185][T16777] ? create_io_thread+0x1e0/0x1e0 [ 727.479051][T16777] ? __mutex_lock_slowpath+0x10/0x10 [ 727.484168][T16777] __x64_sys_clone+0x289/0x310 [ 727.488768][T16777] ? __do_sys_vfork+0x130/0x130 [ 727.493457][T16777] ? debug_smp_processor_id+0x17/0x20 [ 727.498661][T16777] do_syscall_64+0x44/0xd0 [ 727.502917][T16777] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 727.508644][T16777] RIP: 0033:0x7fb67320a5a9 [ 727.512900][T16777] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 727.532348][T16777] RSP: 002b:00007fb671f7e118 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 727.540584][T16777] RAX: ffffffffffffffda RBX: 00007fb67332af80 RCX: 00007fb67320a5a9 [ 727.548396][T16777] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000010000000 [ 727.556212][T16777] RBP: 00007fb671f7e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 727.564214][T16777] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 18:39:39 executing program 2: syz_clone(0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 70) 18:39:39 executing program 3: r0 = socket(0xf, 0x5, 0xffff0001) setsockopt$MRT_DEL_VIF(r0, 0x0, 0xcb, 0x0, 0x0) socket(0xf, 0x5, 0xffff0001) (async) setsockopt$MRT_DEL_VIF(r0, 0x0, 0xcb, 0x0, 0x0) (async) 18:39:39 executing program 4: r0 = socket(0xa, 0x4, 0x1) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x28, 0x2, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) signalfd(r1, &(0x7f0000000140)={[0xfffffffffffffffe]}, 0x8) r2 = socket$inet_udp(0x2, 0x2, 0x0) fgetxattr(r2, &(0x7f0000000180)=@random={'trusted.', 'user.incfs.id\x00'}, &(0x7f0000000000)=""/175, 0xaf) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f00000000c0)={'wg0\x00'}) socket(0xa, 0x4, 0x1) (async) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x28, 0x2, 0x0, 0x0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) (async) signalfd(r1, &(0x7f0000000140)={[0xfffffffffffffffe]}, 0x8) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) fgetxattr(r2, &(0x7f0000000180)=@random={'trusted.', 'user.incfs.id\x00'}, &(0x7f0000000000)=""/175, 0xaf) (async) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f00000000c0)={'wg0\x00'}) (async) 18:39:39 executing program 1: r0 = socket(0x33, 0x1, 0x0) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) (async) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000000)=0x0) (async) r3 = openat$cgroup_devices(0xffffffffffffffff, &(0x7f00000010c0)='devices.allow\x00', 0x2, 0x0) (async, rerun: 64) r4 = signalfd(0xffffffffffffffff, 0x0, 0x0) (async, rerun: 64) socket$inet_udplite(0x2, 0x2, 0x88) close(r4) (async) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$F2FS_IOC_RESIZE_FS(0xffffffffffffffff, 0x4008f510, &(0x7f0000001100)=0xaf1) (async) ioctl$AUTOFS_IOC_READY(r3, 0x9360, 0x80000001) (async) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r0, 0x50009417, &(0x7f00000000c0)={{r1}, r2, 0x3a, @inherit={0x60, &(0x7f0000000040)=ANY=[@ANYBLOB="000000000000000003000000e3ff00000800000000000000670d0000000000000c0000000000000008000000000000008b9d177a000000007800000000000000fd000000000000000500000000000000ff0300000000000001f4ffffffffffff"]}, @name="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"}) (async) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x29, 0x2, 0x0, 0x0) 18:39:39 executing program 0: r0 = socket(0xe, 0x5, 0x0) (async) r1 = pidfd_open(0x0, 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(r1, 0xc4089434, &(0x7f0000000040)={0x0, 0x6824, 0x0, [0x2, 0x9, 0x0, 0x8000000000000001, 0x8001], [0x0, 0x6, 0x5e6, 0x6, 0xffff, 0x5, 0x6, 0x3, 0x80000000, 0x0, 0x200, 0xfffffffffffffff9, 0x60, 0x6, 0xf3b4, 0x8, 0x8, 0x0, 0x3, 0x4, 0x8, 0x40, 0xd5, 0x9, 0x8ea4, 0x2, 0x5, 0x1, 0x7424, 0x8, 0x3, 0x3, 0x36c, 0x2, 0x2, 0x6bfe, 0x8, 0x0, 0x80, 0xff, 0x1, 0xd53, 0xfff, 0xfffffffffffff3d8, 0x9, 0x8, 0x82, 0x1000, 0x8, 0x6, 0x7, 0x1, 0x80, 0x8000000000000000, 0x7, 0x5, 0x5, 0x5, 0x4, 0x4, 0x5, 0x4163c1d3, 0x5e, 0xffffffffffffff80, 0x9, 0x6e2c5a2f, 0x5, 0x6e, 0xb9, 0x9, 0x1, 0x5, 0x4, 0x3, 0x3ff, 0xffffffffffff7fff, 0x3, 0x7711, 0xb8, 0x6, 0xff, 0x6, 0x0, 0x0, 0x0, 0x2, 0xffffffffffffffe0, 0x2, 0x8, 0x9, 0x1, 0x6db, 0x8, 0x7, 0x2, 0x6, 0x7f9b, 0x24000, 0x1da, 0x783, 0xbcb, 0x8000, 0x1000, 0x401, 0x0, 0x1, 0x0, 0xffff, 0x1, 0x0, 0x1bd, 0x2, 0x10000, 0x9, 0x7, 0x4, 0x6a5f, 0x0, 0x2734, 0x5, 0xfffffffffffffff7]}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00'}) ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(r0, 0x942e, 0x0) 18:39:39 executing program 5: r0 = socket(0x1b, 0x4, 0x7ff) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x6, 0x2, 0x0, 0xffffffffffffff98) socket(0x1b, 0x4, 0x7ff) (async) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x6, 0x2, 0x0, 0xffffffffffffff98) (async) [ 727.572019][T16777] R13: 00007ffe782f632f R14: 00007fb671f7e300 R15: 0000000000022000 [ 727.579834][T16777] 18:39:39 executing program 0: r0 = socket(0xe, 0x5, 0x0) (async) r1 = pidfd_open(0x0, 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(r1, 0xc4089434, &(0x7f0000000040)={0x0, 0x6824, 0x0, [0x2, 0x9, 0x0, 0x8000000000000001, 0x8001], [0x0, 0x6, 0x5e6, 0x6, 0xffff, 0x5, 0x6, 0x3, 0x80000000, 0x0, 0x200, 0xfffffffffffffff9, 0x60, 0x6, 0xf3b4, 0x8, 0x8, 0x0, 0x3, 0x4, 0x8, 0x40, 0xd5, 0x9, 0x8ea4, 0x2, 0x5, 0x1, 0x7424, 0x8, 0x3, 0x3, 0x36c, 0x2, 0x2, 0x6bfe, 0x8, 0x0, 0x80, 0xff, 0x1, 0xd53, 0xfff, 0xfffffffffffff3d8, 0x9, 0x8, 0x82, 0x1000, 0x8, 0x6, 0x7, 0x1, 0x80, 0x8000000000000000, 0x7, 0x5, 0x5, 0x5, 0x4, 0x4, 0x5, 0x4163c1d3, 0x5e, 0xffffffffffffff80, 0x9, 0x6e2c5a2f, 0x5, 0x6e, 0xb9, 0x9, 0x1, 0x5, 0x4, 0x3, 0x3ff, 0xffffffffffff7fff, 0x3, 0x7711, 0xb8, 0x6, 0xff, 0x6, 0x0, 0x0, 0x0, 0x2, 0xffffffffffffffe0, 0x2, 0x8, 0x9, 0x1, 0x6db, 0x8, 0x7, 0x2, 0x6, 0x7f9b, 0x24000, 0x1da, 0x783, 0xbcb, 0x8000, 0x1000, 0x401, 0x0, 0x1, 0x0, 0xffff, 0x1, 0x0, 0x1bd, 0x2, 0x10000, 0x9, 0x7, 0x4, 0x6a5f, 0x0, 0x2734, 0x5, 0xfffffffffffffff7]}) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00'}) ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(r0, 0x942e, 0x0) 18:39:39 executing program 5: r0 = socket(0xa, 0x1, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000004, 0x10, r1, 0x0) ioctl$FS_IOC_GETFLAGS(r1, 0x80086601, &(0x7f0000000000)) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x6, 0x2, 0x0, 0x0) 18:39:39 executing program 4: r0 = socket(0xa, 0x4, 0x1) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x28, 0x2, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) signalfd(r1, &(0x7f0000000140)={[0xfffffffffffffffe]}, 0x8) r2 = socket$inet_udp(0x2, 0x2, 0x0) fgetxattr(r2, &(0x7f0000000180)=@random={'trusted.', 'user.incfs.id\x00'}, &(0x7f0000000000)=""/175, 0xaf) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f00000000c0)={'wg0\x00'}) socket(0xa, 0x4, 0x1) (async) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x28, 0x2, 0x0, 0x0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) (async) signalfd(r1, &(0x7f0000000140)={[0xfffffffffffffffe]}, 0x8) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) fgetxattr(r2, &(0x7f0000000180)=@random={'trusted.', 'user.incfs.id\x00'}, &(0x7f0000000000)=""/175, 0xaf) (async) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f00000000c0)={'wg0\x00'}) (async) 18:39:39 executing program 3: r0 = socket(0x18, 0x4, 0x81) setsockopt$MRT_DEL_VIF(r0, 0x0, 0xcb, 0x0, 0x0) r1 = signalfd(0xffffffffffffffff, 0x0, 0x0) close(r1) r2 = socket$inet_udp(0x2, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x5, 0x1010, r1, 0x0) r3 = signalfd(0xffffffffffffffff, 0x0, 0x0) close(r3) r4 = socket$inet_udp(0x2, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000004, 0x10, r4, 0x0) ioctl$BTRFS_IOC_QGROUP_CREATE(r4, 0x4010942a, &(0x7f00000000c0)={0x0, 0x8}) r5 = socket$inet_udp(0x2, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000004, 0x10, r5, 0x0) pidfd_getfd(r3, r5, 0x0) close(r2) accept4$unix(r1, &(0x7f0000000000)=@abs, &(0x7f0000000080)=0x6e, 0x0) ioctl$ASHMEM_GET_PIN_STATUS(0xffffffffffffffff, 0x7709, 0x0) [ 727.615913][T16815] FAULT_INJECTION: forcing a failure. [ 727.615913][T16815] name failslab, interval 1, probability 0, space 0, times 0 [ 727.638397][T16815] CPU: 1 PID: 16815 Comm: syz-executor.2 Not tainted 5.15.74-syzkaller-04383-g7f2e600bf63a #0 [ 727.648475][T16815] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/11/2022 [ 727.658366][T16815] Call Trace: [ 727.661494][T16815] 18:39:39 executing program 3: r0 = socket(0x18, 0x4, 0x81) setsockopt$MRT_DEL_VIF(r0, 0x0, 0xcb, 0x0, 0x0) (async) r1 = signalfd(0xffffffffffffffff, 0x0, 0x0) close(r1) r2 = socket$inet_udp(0x2, 0x2, 0x0) (async) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x5, 0x1010, r1, 0x0) r3 = signalfd(0xffffffffffffffff, 0x0, 0x0) close(r3) r4 = socket$inet_udp(0x2, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000004, 0x10, r4, 0x0) (async) ioctl$BTRFS_IOC_QGROUP_CREATE(r4, 0x4010942a, &(0x7f00000000c0)={0x0, 0x8}) (async) r5 = socket$inet_udp(0x2, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000004, 0x10, r5, 0x0) (async) pidfd_getfd(r3, r5, 0x0) close(r2) accept4$unix(r1, &(0x7f0000000000)=@abs, &(0x7f0000000080)=0x6e, 0x0) (async) ioctl$ASHMEM_GET_PIN_STATUS(0xffffffffffffffff, 0x7709, 0x0) 18:39:39 executing program 1: r0 = socket(0x11, 0x5, 0xfffffffc) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x29, 0x2, 0x0, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r0, 0x28, 0x1, &(0x7f0000000000)=0x401, 0x8) r1 = accept4$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0xffffffff, @my=0x0}, 0x10, 0x80000) ftruncate(r1, 0x8000000000000000) r2 = signalfd(0xffffffffffffffff, 0x0, 0x0) close(r2) connect$vsock_stream(r2, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) [ 727.664270][T16815] dump_stack_lvl+0x151/0x1b7 [ 727.668781][T16815] ? bfq_pos_tree_add_move+0x43e/0x43e [ 727.674078][T16815] dump_stack+0x15/0x17 [ 727.678067][T16815] should_fail+0x3c0/0x510 [ 727.682321][T16815] __should_failslab+0x9f/0xe0 [ 727.686951][T16815] should_failslab+0x9/0x20 [ 727.691271][T16815] kmem_cache_alloc+0x4f/0x2f0 [ 727.695860][T16815] ? vm_area_dup+0x26/0x1d0 [ 727.700205][T16815] vm_area_dup+0x26/0x1d0 [ 727.704366][T16815] dup_mmap+0x6b8/0xea0 [ 727.708362][T16815] ? __delayed_free_task+0x20/0x20 [ 727.713303][T16815] ? mm_init+0x807/0x960 [ 727.717383][T16815] dup_mm+0x91/0x330 [ 727.721128][T16815] copy_mm+0x108/0x1b0 [ 727.725024][T16815] copy_process+0x1295/0x3250 [ 727.729542][T16815] ? proc_fail_nth_write+0x213/0x290 [ 727.734655][T16815] ? proc_fail_nth_read+0x220/0x220 [ 727.739689][T16815] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 727.744651][T16815] ? vfs_write+0x9af/0x1050 [ 727.748978][T16815] ? vmacache_update+0xb7/0x120 [ 727.753665][T16815] kernel_clone+0x22d/0x990 [ 727.758002][T16815] ? file_end_write+0x1b0/0x1b0 [ 727.762689][T16815] ? __kasan_check_write+0x14/0x20 [ 727.767642][T16815] ? create_io_thread+0x1e0/0x1e0 [ 727.772496][T16815] ? __mutex_lock_slowpath+0x10/0x10 [ 727.777624][T16815] __x64_sys_clone+0x289/0x310 [ 727.782337][T16815] ? __do_sys_vfork+0x130/0x130 [ 727.787107][T16815] ? debug_smp_processor_id+0x17/0x20 [ 727.792314][T16815] do_syscall_64+0x44/0xd0 [ 727.796568][T16815] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 727.802294][T16815] RIP: 0033:0x7fb67320a5a9 [ 727.806547][T16815] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 727.827031][T16815] RSP: 002b:00007fb671f7e118 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 727.835364][T16815] RAX: ffffffffffffffda RBX: 00007fb67332af80 RCX: 00007fb67320a5a9 [ 727.843173][T16815] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000010000000 [ 727.850987][T16815] RBP: 00007fb671f7e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 727.858794][T16815] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 18:39:39 executing program 2: syz_clone(0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 71) 18:39:39 executing program 3: r0 = socket(0x18, 0x4, 0x81) setsockopt$MRT_DEL_VIF(r0, 0x0, 0xcb, 0x0, 0x0) r1 = signalfd(0xffffffffffffffff, 0x0, 0x0) close(r1) r2 = socket$inet_udp(0x2, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x5, 0x1010, r1, 0x0) r3 = signalfd(0xffffffffffffffff, 0x0, 0x0) close(r3) r4 = socket$inet_udp(0x2, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000004, 0x10, r4, 0x0) ioctl$BTRFS_IOC_QGROUP_CREATE(r4, 0x4010942a, &(0x7f00000000c0)={0x0, 0x8}) r5 = socket$inet_udp(0x2, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000004, 0x10, r5, 0x0) pidfd_getfd(r3, r5, 0x0) close(r2) accept4$unix(r1, &(0x7f0000000000)=@abs, &(0x7f0000000080)=0x6e, 0x0) ioctl$ASHMEM_GET_PIN_STATUS(0xffffffffffffffff, 0x7709, 0x0) socket(0x18, 0x4, 0x81) (async) setsockopt$MRT_DEL_VIF(r0, 0x0, 0xcb, 0x0, 0x0) (async) signalfd(0xffffffffffffffff, 0x0, 0x0) (async) close(r1) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x5, 0x1010, r1, 0x0) (async) signalfd(0xffffffffffffffff, 0x0, 0x0) (async) close(r3) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000004, 0x10, r4, 0x0) (async) ioctl$BTRFS_IOC_QGROUP_CREATE(r4, 0x4010942a, &(0x7f00000000c0)={0x0, 0x8}) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000004, 0x10, r5, 0x0) (async) pidfd_getfd(r3, r5, 0x0) (async) close(r2) (async) accept4$unix(r1, &(0x7f0000000000)=@abs, &(0x7f0000000080)=0x6e, 0x0) (async) ioctl$ASHMEM_GET_PIN_STATUS(0xffffffffffffffff, 0x7709, 0x0) (async) 18:39:39 executing program 1: r0 = socket(0x11, 0x5, 0xfffffffc) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x29, 0x2, 0x0, 0x0) (async) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r0, 0x28, 0x1, &(0x7f0000000000)=0x401, 0x8) r1 = accept4$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0xffffffff, @my=0x0}, 0x10, 0x80000) ftruncate(r1, 0x8000000000000000) (async) r2 = signalfd(0xffffffffffffffff, 0x0, 0x0) close(r2) (async) connect$vsock_stream(r2, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) 18:39:39 executing program 4: r0 = socket(0xa, 0x1, 0x0) fstat(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0}) r2 = socket$inet_udp(0x2, 0x2, 0x0) fstat(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0}) setfsuid(r3) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f00000003c0)={'erspan0\x00', &(0x7f00000002c0)={'syztnl2\x00', 0x0, 0x8, 0x90, 0x1ff, 0x80000001, {{0x2a, 0x4, 0x1, 0x2d, 0xa8, 0x66, 0x0, 0x5, 0x4, 0x0, @remote, @multicast2, {[@lsrr={0x83, 0x1b, 0x65, [@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @multicast2, @dev={0xac, 0x14, 0x14, 0x3f}, @private=0xa010102]}, @noop, @lsrr={0x83, 0x17, 0xad, [@initdev={0xac, 0x1e, 0x0, 0x0}, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x37}, @rand_addr=0x64010102]}, @ssrr={0x89, 0xf, 0xed, [@loopback, @multicast1, @dev={0xac, 0x14, 0x14, 0x1f}]}, @ra={0x94, 0x4}, @lsrr={0x83, 0x1b, 0x86, [@initdev={0xac, 0x1e, 0x0, 0x0}, @remote, @rand_addr=0x64010102, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, @local]}, @ra={0x94, 0x4, 0x1}, @timestamp_addr={0x44, 0x2c, 0xae, 0x1, 0x8, [{@multicast2}, {@loopback, 0x3}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x8}, {@local, 0x7}, {@empty, 0x9}]}]}}}}}) r4 = socket$inet_udp(0x2, 0x2, 0x0) fstat(r4, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) setfsuid(r5) r6 = socket$inet_udp(0x2, 0x2, 0x0) fstat(r6, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0}) setfsuid(r7) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000640)={&(0x7f0000000440)={0x1f0, 0x9, 0x1, 0x301, 0x70bd2d, 0x25dfdbfe, {0x7, 0x0, 0x7}, [@typed={0x14, 0x42, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @multicast2}}, @generic="4e2eedd884ad1fb7f9fa5a39f26b0ed0f2586ffbe300b8e504567fb6aa6d4f0c97e741b69783270aea44a539ae07e1d9cd4f351f6219048c96ecfc64d828765424647bacf23d7d7e", @nested={0x180, 0x62, 0x0, 0x1, [@generic="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", @typed={0x8, 0x51, 0x0, 0x0, @fd=r0}, @typed={0xc, 0x3, 0x0, 0x0, @u64=0x3}, @typed={0xc, 0x6a, 0x0, 0x0, @u64=0x8}, @generic="5135bd157bec8a8c1238f4fd0e7fc3a644cf178302ce177afd199d7dfcc4391a2a1e33e6ef73e33532e14e08430a38a1c96c8c49fa12e1188d345fa02e", @generic="ff808bb69db3272fb4d3e5fa63fcfe9894f4e655", @typed={0xc, 0x4f, 0x0, 0x0, @u64=0x47}]}]}, 0x1f0}, 0x1, 0x0, 0x0, 0x80}, 0x44044) fstat(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r9 = socket$inet_udp(0x2, 0x2, 0x0) fstat(r9, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0}) setfsuid(r10) fstat(r2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) fsetxattr$system_posix_acl(r0, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f00000001c0)=ANY=[@ANYBLOB="02000000010004000000000002000000", @ANYRES32=r1, @ANYBLOB="02000400", @ANYRES32=r3, @ANYBLOB="02000700", @ANYRES32=r10, @ANYBLOB="02000200", @ANYRES32=0xee00, @ANYBLOB="2ecd7281", @ANYRES32=r11, @ANYBLOB="02000600", @ANYRES32=r10, @ANYBLOB="040002000000000008000000", @ANYRES32, @ANYBLOB="08000400", @ANYRES32=r8, @ANYBLOB="10002a20000000002000050000000000"], 0x64, 0x2) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x28, 0x2, 0x0, 0xfffffffffffffc5b) 18:39:39 executing program 0: r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x100) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_HARDIF(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="a9bcccc2c93cc94730000000", @ANYRES16=r1, @ANYBLOB="04002bbd7000fddbdf251000000008003c00ff07000008003200ff7f00000a0009000000000000000000"], 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x4000) r2 = socket(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00'}) 18:39:39 executing program 5: r0 = socket(0xa, 0x1, 0x0) (async) r1 = socket$inet_udp(0x2, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000004, 0x10, r1, 0x0) (async) ioctl$FS_IOC_GETFLAGS(r1, 0x80086601, &(0x7f0000000000)) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x6, 0x2, 0x0, 0x0) 18:39:39 executing program 4: r0 = socket(0xa, 0x1, 0x0) fstat(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0}) r2 = socket$inet_udp(0x2, 0x2, 0x0) fstat(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0}) setfsuid(r3) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f00000003c0)={'erspan0\x00', &(0x7f00000002c0)={'syztnl2\x00', 0x0, 0x8, 0x90, 0x1ff, 0x80000001, {{0x2a, 0x4, 0x1, 0x2d, 0xa8, 0x66, 0x0, 0x5, 0x4, 0x0, @remote, @multicast2, {[@lsrr={0x83, 0x1b, 0x65, [@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @multicast2, @dev={0xac, 0x14, 0x14, 0x3f}, @private=0xa010102]}, @noop, @lsrr={0x83, 0x17, 0xad, [@initdev={0xac, 0x1e, 0x0, 0x0}, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x37}, @rand_addr=0x64010102]}, @ssrr={0x89, 0xf, 0xed, [@loopback, @multicast1, @dev={0xac, 0x14, 0x14, 0x1f}]}, @ra={0x94, 0x4}, @lsrr={0x83, 0x1b, 0x86, [@initdev={0xac, 0x1e, 0x0, 0x0}, @remote, @rand_addr=0x64010102, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, @local]}, @ra={0x94, 0x4, 0x1}, @timestamp_addr={0x44, 0x2c, 0xae, 0x1, 0x8, [{@multicast2}, {@loopback, 0x3}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x8}, {@local, 0x7}, {@empty, 0x9}]}]}}}}}) r4 = socket$inet_udp(0x2, 0x2, 0x0) fstat(r4, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) setfsuid(r5) r6 = socket$inet_udp(0x2, 0x2, 0x0) fstat(r6, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0}) setfsuid(r7) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000640)={&(0x7f0000000440)={0x1f0, 0x9, 0x1, 0x301, 0x70bd2d, 0x25dfdbfe, {0x7, 0x0, 0x7}, [@typed={0x14, 0x42, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @multicast2}}, @generic="4e2eedd884ad1fb7f9fa5a39f26b0ed0f2586ffbe300b8e504567fb6aa6d4f0c97e741b69783270aea44a539ae07e1d9cd4f351f6219048c96ecfc64d828765424647bacf23d7d7e", @nested={0x180, 0x62, 0x0, 0x1, [@generic="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", @typed={0x8, 0x51, 0x0, 0x0, @fd=r0}, @typed={0xc, 0x3, 0x0, 0x0, @u64=0x3}, @typed={0xc, 0x6a, 0x0, 0x0, @u64=0x8}, @generic="5135bd157bec8a8c1238f4fd0e7fc3a644cf178302ce177afd199d7dfcc4391a2a1e33e6ef73e33532e14e08430a38a1c96c8c49fa12e1188d345fa02e", @generic="ff808bb69db3272fb4d3e5fa63fcfe9894f4e655", @typed={0xc, 0x4f, 0x0, 0x0, @u64=0x47}]}]}, 0x1f0}, 0x1, 0x0, 0x0, 0x80}, 0x44044) fstat(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r9 = socket$inet_udp(0x2, 0x2, 0x0) fstat(r9, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0}) setfsuid(r10) fstat(r2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) fsetxattr$system_posix_acl(r0, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f00000001c0)=ANY=[@ANYBLOB="02000000010004000000000002000000", @ANYRES32=r1, @ANYBLOB="02000400", @ANYRES32=r3, @ANYBLOB="02000700", @ANYRES32=r10, @ANYBLOB="02000200", @ANYRES32=0xee00, @ANYBLOB="2ecd7281", @ANYRES32=r11, @ANYBLOB="02000600", @ANYRES32=r10, @ANYBLOB="040002000000000008000000", @ANYRES32, @ANYBLOB="08000400", @ANYRES32=r8, @ANYBLOB="10002a20000000002000050000000000"], 0x64, 0x2) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x28, 0x2, 0x0, 0xfffffffffffffc5b) socket(0xa, 0x1, 0x0) (async) fstat(r0, &(0x7f0000000040)) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) fstat(r2, &(0x7f0000000000)) (async) setfsuid(r3) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f00000003c0)={'erspan0\x00', &(0x7f00000002c0)={'syztnl2\x00', 0x0, 0x8, 0x90, 0x1ff, 0x80000001, {{0x2a, 0x4, 0x1, 0x2d, 0xa8, 0x66, 0x0, 0x5, 0x4, 0x0, @remote, @multicast2, {[@lsrr={0x83, 0x1b, 0x65, [@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @multicast2, @dev={0xac, 0x14, 0x14, 0x3f}, @private=0xa010102]}, @noop, @lsrr={0x83, 0x17, 0xad, [@initdev={0xac, 0x1e, 0x0, 0x0}, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x37}, @rand_addr=0x64010102]}, @ssrr={0x89, 0xf, 0xed, [@loopback, @multicast1, @dev={0xac, 0x14, 0x14, 0x1f}]}, @ra={0x94, 0x4}, @lsrr={0x83, 0x1b, 0x86, [@initdev={0xac, 0x1e, 0x0, 0x0}, @remote, @rand_addr=0x64010102, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, @local]}, @ra={0x94, 0x4, 0x1}, @timestamp_addr={0x44, 0x2c, 0xae, 0x1, 0x8, [{@multicast2}, {@loopback, 0x3}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x8}, {@local, 0x7}, {@empty, 0x9}]}]}}}}}) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) fstat(r4, &(0x7f0000000240)) (async) setfsuid(r5) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) fstat(r6, &(0x7f0000000000)) (async) setfsuid(r7) (async) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000640)={&(0x7f0000000440)={0x1f0, 0x9, 0x1, 0x301, 0x70bd2d, 0x25dfdbfe, {0x7, 0x0, 0x7}, [@typed={0x14, 0x42, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @multicast2}}, @generic="4e2eedd884ad1fb7f9fa5a39f26b0ed0f2586ffbe300b8e504567fb6aa6d4f0c97e741b69783270aea44a539ae07e1d9cd4f351f6219048c96ecfc64d828765424647bacf23d7d7e", @nested={0x180, 0x62, 0x0, 0x1, [@generic="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", @typed={0x8, 0x51, 0x0, 0x0, @fd=r0}, @typed={0xc, 0x3, 0x0, 0x0, @u64=0x3}, @typed={0xc, 0x6a, 0x0, 0x0, @u64=0x8}, @generic="5135bd157bec8a8c1238f4fd0e7fc3a644cf178302ce177afd199d7dfcc4391a2a1e33e6ef73e33532e14e08430a38a1c96c8c49fa12e1188d345fa02e", @generic="ff808bb69db3272fb4d3e5fa63fcfe9894f4e655", @typed={0xc, 0x4f, 0x0, 0x0, @u64=0x47}]}]}, 0x1f0}, 0x1, 0x0, 0x0, 0x80}, 0x44044) (async) fstat(r0, &(0x7f00000000c0)) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) fstat(r9, &(0x7f0000000000)) (async) setfsuid(r10) (async) fstat(r2, &(0x7f0000000140)) (async) fsetxattr$system_posix_acl(r0, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f00000001c0)=ANY=[@ANYBLOB="02000000010004000000000002000000", @ANYRES32=r1, @ANYBLOB="02000400", @ANYRES32=r3, @ANYBLOB="02000700", @ANYRES32=r10, @ANYBLOB="02000200", @ANYRES32=0xee00, @ANYBLOB="2ecd7281", @ANYRES32=r11, @ANYBLOB="02000600", @ANYRES32=r10, @ANYBLOB="040002000000000008000000", @ANYRES32, @ANYBLOB="08000400", @ANYRES32=r8, @ANYBLOB="10002a20000000002000050000000000"], 0x64, 0x2) (async) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x28, 0x2, 0x0, 0xfffffffffffffc5b) (async) 18:39:39 executing program 1: r0 = socket(0x11, 0x5, 0xfffffffc) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x29, 0x2, 0x0, 0x0) (async) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r0, 0x28, 0x1, &(0x7f0000000000)=0x401, 0x8) r1 = accept4$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0xffffffff, @my=0x0}, 0x10, 0x80000) ftruncate(r1, 0x8000000000000000) (async) r2 = signalfd(0xffffffffffffffff, 0x0, 0x0) close(r2) connect$vsock_stream(r2, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) 18:39:39 executing program 0: r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x100) (async) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_HARDIF(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="a9bcccc2c93cc94730000000", @ANYRES16=r1, @ANYBLOB="04002bbd7000fddbdf251000000008003c00ff07000008003200ff7f00000a0009000000000000000000"], 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x4000) (async) r2 = socket(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00'}) 18:39:39 executing program 3: r0 = socket(0xa, 0x80000, 0x2) setsockopt$MRT_DEL_VIF(r0, 0x0, 0xcb, 0x0, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r0, 0x28, 0x1, &(0x7f0000000000)=0xfffffffffffffffc, 0x8) 18:39:39 executing program 5: r0 = socket(0xa, 0x1, 0x0) (async) r1 = socket$inet_udp(0x2, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000004, 0x10, r1, 0x0) (async) ioctl$FS_IOC_GETFLAGS(r1, 0x80086601, &(0x7f0000000000)) (async) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x6, 0x2, 0x0, 0x0) [ 727.866606][T16815] R13: 00007ffe782f632f R14: 00007fb671f7e300 R15: 0000000000022000 [ 727.874435][T16815] 18:39:39 executing program 1: r0 = signalfd(0xffffffffffffffff, 0x0, 0x0) close(r0) r1 = io_uring_setup(0x159e, &(0x7f0000000080)={0x0, 0xa61d, 0x100, 0x2, 0x156, 0x0, r0}) dup3(r1, r0, 0x0) syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), r0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x29, 0x2, 0x0, 0xffffffffffffffc1) [ 727.929005][T16871] FAULT_INJECTION: forcing a failure. [ 727.929005][T16871] name failslab, interval 1, probability 0, space 0, times 0 [ 727.952192][T16871] CPU: 0 PID: 16871 Comm: syz-executor.2 Not tainted 5.15.74-syzkaller-04383-g7f2e600bf63a #0 [ 727.962259][T16871] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/11/2022 [ 727.972159][T16871] Call Trace: [ 727.975277][T16871] [ 727.978065][T16871] dump_stack_lvl+0x151/0x1b7 [ 727.982568][T16871] ? bfq_pos_tree_add_move+0x43e/0x43e [ 727.987862][T16871] dump_stack+0x15/0x17 [ 727.991854][T16871] should_fail+0x3c0/0x510 [ 727.996117][T16871] __should_failslab+0x9f/0xe0 [ 728.000895][T16871] should_failslab+0x9/0x20 [ 728.005241][T16871] kmem_cache_alloc+0x4f/0x2f0 [ 728.009832][T16871] ? vm_area_dup+0x26/0x1d0 [ 728.014177][T16871] vm_area_dup+0x26/0x1d0 [ 728.018340][T16871] dup_mmap+0x6b8/0xea0 [ 728.022505][T16871] ? __delayed_free_task+0x20/0x20 [ 728.027459][T16871] ? mm_init+0x807/0x960 [ 728.031538][T16871] dup_mm+0x91/0x330 [ 728.035361][T16871] copy_mm+0x108/0x1b0 [ 728.039255][T16871] copy_process+0x1295/0x3250 [ 728.043772][T16871] ? proc_fail_nth_write+0x213/0x290 [ 728.048890][T16871] ? proc_fail_nth_read+0x220/0x220 [ 728.054011][T16871] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 728.058957][T16871] ? vfs_write+0x9af/0x1050 [ 728.063298][T16871] ? vmacache_update+0xb7/0x120 [ 728.067985][T16871] kernel_clone+0x22d/0x990 [ 728.072323][T16871] ? file_end_write+0x1b0/0x1b0 [ 728.077011][T16871] ? __kasan_check_write+0x14/0x20 [ 728.081957][T16871] ? create_io_thread+0x1e0/0x1e0 [ 728.086824][T16871] ? __mutex_lock_slowpath+0x10/0x10 [ 728.092027][T16871] __x64_sys_clone+0x289/0x310 [ 728.096637][T16871] ? __do_sys_vfork+0x130/0x130 [ 728.101425][T16871] ? debug_smp_processor_id+0x17/0x20 [ 728.106623][T16871] do_syscall_64+0x44/0xd0 [ 728.110876][T16871] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 728.116611][T16871] RIP: 0033:0x7fb67320a5a9 [ 728.120864][T16871] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 728.140390][T16871] RSP: 002b:00007fb671f7e118 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 728.148629][T16871] RAX: ffffffffffffffda RBX: 00007fb67332af80 RCX: 00007fb67320a5a9 [ 728.156447][T16871] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000010000000 [ 728.164253][T16871] RBP: 00007fb671f7e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 728.172071][T16871] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 18:39:39 executing program 2: syz_clone(0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 72) 18:39:39 executing program 3: r0 = socket(0xa, 0x80000, 0x2) setsockopt$MRT_DEL_VIF(r0, 0x0, 0xcb, 0x0, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r0, 0x28, 0x1, &(0x7f0000000000)=0xfffffffffffffffc, 0x8) socket(0xa, 0x80000, 0x2) (async) setsockopt$MRT_DEL_VIF(r0, 0x0, 0xcb, 0x0, 0x0) (async) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r0, 0x28, 0x1, &(0x7f0000000000)=0xfffffffffffffffc, 0x8) (async) 18:39:39 executing program 0: r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x100) (async) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_HARDIF(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="a9bcccc2c93cc94730000000", @ANYRES16=r1, @ANYBLOB="04002bbd7000fddbdf251000000008003c00ff07000008003200ff7f00000a0009000000000000000000"], 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x4000) (async) r2 = socket(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00'}) 18:39:39 executing program 1: r0 = signalfd(0xffffffffffffffff, 0x0, 0x0) close(r0) (async) r1 = io_uring_setup(0x159e, &(0x7f0000000080)={0x0, 0xa61d, 0x100, 0x2, 0x156, 0x0, r0}) dup3(r1, r0, 0x0) (async, rerun: 32) syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), r0) (rerun: 32) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x29, 0x2, 0x0, 0xffffffffffffffc1) 18:39:39 executing program 4: r0 = socket(0xa, 0x1, 0x0) fstat(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0}) (async) r2 = socket$inet_udp(0x2, 0x2, 0x0) fstat(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0}) setfsuid(r3) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f00000003c0)={'erspan0\x00', &(0x7f00000002c0)={'syztnl2\x00', 0x0, 0x8, 0x90, 0x1ff, 0x80000001, {{0x2a, 0x4, 0x1, 0x2d, 0xa8, 0x66, 0x0, 0x5, 0x4, 0x0, @remote, @multicast2, {[@lsrr={0x83, 0x1b, 0x65, [@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @multicast2, @dev={0xac, 0x14, 0x14, 0x3f}, @private=0xa010102]}, @noop, @lsrr={0x83, 0x17, 0xad, [@initdev={0xac, 0x1e, 0x0, 0x0}, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x37}, @rand_addr=0x64010102]}, @ssrr={0x89, 0xf, 0xed, [@loopback, @multicast1, @dev={0xac, 0x14, 0x14, 0x1f}]}, @ra={0x94, 0x4}, @lsrr={0x83, 0x1b, 0x86, [@initdev={0xac, 0x1e, 0x0, 0x0}, @remote, @rand_addr=0x64010102, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, @local]}, @ra={0x94, 0x4, 0x1}, @timestamp_addr={0x44, 0x2c, 0xae, 0x1, 0x8, [{@multicast2}, {@loopback, 0x3}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x8}, {@local, 0x7}, {@empty, 0x9}]}]}}}}}) (async) r4 = socket$inet_udp(0x2, 0x2, 0x0) fstat(r4, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) setfsuid(r5) (async) r6 = socket$inet_udp(0x2, 0x2, 0x0) fstat(r6, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0}) setfsuid(r7) (async) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000640)={&(0x7f0000000440)={0x1f0, 0x9, 0x1, 0x301, 0x70bd2d, 0x25dfdbfe, {0x7, 0x0, 0x7}, [@typed={0x14, 0x42, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @multicast2}}, @generic="4e2eedd884ad1fb7f9fa5a39f26b0ed0f2586ffbe300b8e504567fb6aa6d4f0c97e741b69783270aea44a539ae07e1d9cd4f351f6219048c96ecfc64d828765424647bacf23d7d7e", @nested={0x180, 0x62, 0x0, 0x1, [@generic="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", @typed={0x8, 0x51, 0x0, 0x0, @fd=r0}, @typed={0xc, 0x3, 0x0, 0x0, @u64=0x3}, @typed={0xc, 0x6a, 0x0, 0x0, @u64=0x8}, @generic="5135bd157bec8a8c1238f4fd0e7fc3a644cf178302ce177afd199d7dfcc4391a2a1e33e6ef73e33532e14e08430a38a1c96c8c49fa12e1188d345fa02e", @generic="ff808bb69db3272fb4d3e5fa63fcfe9894f4e655", @typed={0xc, 0x4f, 0x0, 0x0, @u64=0x47}]}]}, 0x1f0}, 0x1, 0x0, 0x0, 0x80}, 0x44044) (async) fstat(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) r9 = socket$inet_udp(0x2, 0x2, 0x0) fstat(r9, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0}) setfsuid(r10) (async) fstat(r2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) fsetxattr$system_posix_acl(r0, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f00000001c0)=ANY=[@ANYBLOB="02000000010004000000000002000000", @ANYRES32=r1, @ANYBLOB="02000400", @ANYRES32=r3, @ANYBLOB="02000700", @ANYRES32=r10, @ANYBLOB="02000200", @ANYRES32=0xee00, @ANYBLOB="2ecd7281", @ANYRES32=r11, @ANYBLOB="02000600", @ANYRES32=r10, @ANYBLOB="040002000000000008000000", @ANYRES32, @ANYBLOB="08000400", @ANYRES32=r8, @ANYBLOB="10002a20000000002000050000000000"], 0x64, 0x2) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x28, 0x2, 0x0, 0xfffffffffffffc5b) 18:39:39 executing program 5: r0 = socket(0x1e, 0x1, 0x9) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x6, 0x2, 0x0, 0x0) socketpair(0x3, 0x6, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BTRFS_IOC_INO_PATHS(r1, 0xc0389423, &(0x7f00000000c0)={0x8a0, 0x28, [0x7fffffff, 0x7, 0x7, 0x3], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0]}) r2 = signalfd(0xffffffffffffffff, 0x0, 0x0) close(r2) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r2, 0x28, 0x2, &(0x7f0000000000)=0x10000, 0x8) 18:39:39 executing program 4: r0 = socket(0x22, 0x6, 0x800) ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, &(0x7f0000000000)={0x1c, 0x1, {0x5f2c, @struct={0x401, 0xd3a0}, 0x0, 0x3f, 0xb04, 0x4, 0x1000, 0x7, 0x24, @usage=0x131, 0x7, 0x20, [0x400, 0x8000000000000001, 0x1, 0x6, 0x1, 0x7f]}, {0xfffffffffffffffa, @usage=0x2, 0x0, 0xfffffffffffffff9, 0x7, 0x8, 0x6, 0x6, 0x8, @usage=0x1f, 0x379, 0x2, [0x8, 0x870, 0x0, 0x0, 0x6, 0x40]}, {0x6, @usage=0x1, 0x0, 0x1, 0x1f, 0x8000000000000001, 0xf4, 0x80000000, 0x400, @struct={0x5}, 0x9, 0x4, [0x8000, 0xffffffff, 0x3, 0x5, 0x0, 0x6a]}, {0xffffffffffffffff, 0xb9, 0x8}}) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x28, 0x2, 0x0, 0x0) ioctl$SIOCGETSGCNT(r0, 0x89e1, &(0x7f0000000440)={@local, @local}) fcntl$F_GET_FILE_RW_HINT(r0, 0x40d, &(0x7f0000000480)) r1 = signalfd(0xffffffffffffffff, 0x0, 0x0) close(r1) setsockopt$MRT_ASSERT(r1, 0x0, 0xcf, &(0x7f0000000400)=0x1, 0x4) 18:39:39 executing program 3: r0 = socket(0xa, 0x80000, 0x2) setsockopt$MRT_DEL_VIF(r0, 0x0, 0xcb, 0x0, 0x0) (async) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r0, 0x28, 0x1, &(0x7f0000000000)=0xfffffffffffffffc, 0x8) 18:39:39 executing program 0: r0 = socket(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00'}) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$FOU_CMD_GET(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00082dbd7001ffdbdf250300000008000800ffffffff080008007f000001050002000a000000"], 0x2c}, 0x1, 0x0, 0x0, 0x24040844}, 0x8000) r2 = signalfd4(r0, &(0x7f0000000140)={[0x4]}, 0x8, 0x101000) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00'}) 18:39:39 executing program 5: r0 = socket(0x1e, 0x1, 0x9) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x6, 0x2, 0x0, 0x0) socketpair(0x3, 0x6, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BTRFS_IOC_INO_PATHS(r1, 0xc0389423, &(0x7f00000000c0)={0x8a0, 0x28, [0x7fffffff, 0x7, 0x7, 0x3], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0]}) r2 = signalfd(0xffffffffffffffff, 0x0, 0x0) close(r2) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r2, 0x28, 0x2, &(0x7f0000000000)=0x10000, 0x8) socket(0x1e, 0x1, 0x9) (async) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x6, 0x2, 0x0, 0x0) (async) socketpair(0x3, 0x6, 0x0, &(0x7f0000000040)) (async) ioctl$BTRFS_IOC_INO_PATHS(r1, 0xc0389423, &(0x7f00000000c0)={0x8a0, 0x28, [0x7fffffff, 0x7, 0x7, 0x3], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0]}) (async) signalfd(0xffffffffffffffff, 0x0, 0x0) (async) close(r2) (async) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r2, 0x28, 0x2, &(0x7f0000000000)=0x10000, 0x8) (async) 18:39:39 executing program 1: r0 = signalfd(0xffffffffffffffff, 0x0, 0x0) close(r0) r1 = io_uring_setup(0x159e, &(0x7f0000000080)={0x0, 0xa61d, 0x100, 0x2, 0x156, 0x0, r0}) dup3(r1, r0, 0x0) syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), r0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x29, 0x2, 0x0, 0xffffffffffffffc1) signalfd(0xffffffffffffffff, 0x0, 0x0) (async) close(r0) (async) io_uring_setup(0x159e, &(0x7f0000000080)={0x0, 0xa61d, 0x100, 0x2, 0x156, 0x0, r0}) (async) dup3(r1, r0, 0x0) (async) syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), r0) (async) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x29, 0x2, 0x0, 0xffffffffffffffc1) (async) [ 728.179962][T16871] R13: 00007ffe782f632f R14: 00007fb671f7e300 R15: 0000000000022000 [ 728.187864][T16871] 18:39:39 executing program 5: r0 = socket(0x1e, 0x1, 0x9) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x6, 0x2, 0x0, 0x0) (async) socketpair(0x3, 0x6, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BTRFS_IOC_INO_PATHS(r1, 0xc0389423, &(0x7f00000000c0)={0x8a0, 0x28, [0x7fffffff, 0x7, 0x7, 0x3], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0]}) r2 = signalfd(0xffffffffffffffff, 0x0, 0x0) close(r2) (async) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r2, 0x28, 0x2, &(0x7f0000000000)=0x10000, 0x8) [ 728.247715][T16926] FAULT_INJECTION: forcing a failure. [ 728.247715][T16926] name failslab, interval 1, probability 0, space 0, times 0 [ 728.269870][T16926] CPU: 0 PID: 16926 Comm: syz-executor.2 Not tainted 5.15.74-syzkaller-04383-g7f2e600bf63a #0 [ 728.279947][T16926] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/11/2022 [ 728.289834][T16926] Call Trace: [ 728.293058][T16926] [ 728.295820][T16926] dump_stack_lvl+0x151/0x1b7 [ 728.300347][T16926] ? bfq_pos_tree_add_move+0x43e/0x43e [ 728.305638][T16926] ? do_syscall_64+0x44/0xd0 [ 728.310059][T16926] dump_stack+0x15/0x17 [ 728.314054][T16926] should_fail+0x3c0/0x510 [ 728.318301][T16926] __should_failslab+0x9f/0xe0 [ 728.322900][T16926] should_failslab+0x9/0x20 [ 728.327239][T16926] kmem_cache_alloc+0x4f/0x2f0 [ 728.332040][T16926] ? anon_vma_clone+0xa1/0x4f0 [ 728.336640][T16926] anon_vma_clone+0xa1/0x4f0 [ 728.341064][T16926] anon_vma_fork+0x91/0x4f0 [ 728.345537][T16926] ? anon_vma_name+0x4c/0x70 [ 728.349952][T16926] dup_mmap+0x750/0xea0 [ 728.353950][T16926] ? __delayed_free_task+0x20/0x20 [ 728.358889][T16926] ? mm_init+0x807/0x960 [ 728.362972][T16926] dup_mm+0x91/0x330 [ 728.366700][T16926] copy_mm+0x108/0x1b0 [ 728.370606][T16926] copy_process+0x1295/0x3250 [ 728.375122][T16926] ? proc_fail_nth_write+0x213/0x290 [ 728.380241][T16926] ? proc_fail_nth_read+0x220/0x220 [ 728.385278][T16926] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 728.390311][T16926] ? vfs_write+0x9af/0x1050 [ 728.394649][T16926] ? vmacache_update+0xb7/0x120 [ 728.399341][T16926] kernel_clone+0x22d/0x990 [ 728.403676][T16926] ? file_end_write+0x1b0/0x1b0 [ 728.408363][T16926] ? __kasan_check_write+0x14/0x20 [ 728.413313][T16926] ? create_io_thread+0x1e0/0x1e0 [ 728.418172][T16926] ? __mutex_lock_slowpath+0x10/0x10 [ 728.423293][T16926] __x64_sys_clone+0x289/0x310 [ 728.427980][T16926] ? __do_sys_vfork+0x130/0x130 [ 728.432666][T16926] ? debug_smp_processor_id+0x17/0x20 [ 728.437878][T16926] do_syscall_64+0x44/0xd0 [ 728.442132][T16926] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 728.447867][T16926] RIP: 0033:0x7fb67320a5a9 [ 728.452194][T16926] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 728.471641][T16926] RSP: 002b:00007fb671f7e118 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 728.479881][T16926] RAX: ffffffffffffffda RBX: 00007fb67332af80 RCX: 00007fb67320a5a9 [ 728.487693][T16926] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000010000000 18:39:39 executing program 2: syz_clone(0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 73) 18:39:39 executing program 0: r0 = socket(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00'}) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$FOU_CMD_GET(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00082dbd7001ffdbdf250300000008000800ffffffff080008007f000001050002000a000000"], 0x2c}, 0x1, 0x0, 0x0, 0x24040844}, 0x8000) r2 = signalfd4(r0, &(0x7f0000000140)={[0x4]}, 0x8, 0x101000) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00'}) socket(0xa, 0x1, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00'}) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$FOU_CMD_GET(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00082dbd7001ffdbdf250300000008000800ffffffff080008007f000001050002000a000000"], 0x2c}, 0x1, 0x0, 0x0, 0x24040844}, 0x8000) (async) signalfd4(r0, &(0x7f0000000140)={[0x4]}, 0x8, 0x101000) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00'}) (async) 18:39:39 executing program 1: r0 = socket(0x27, 0x1, 0x0) signalfd(r0, &(0x7f0000002640)={[0x101]}, 0x8) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x29, 0x2, 0x0, 0x0) r1 = signalfd(0xffffffffffffffff, 0x0, 0x0) close(r1) sendmsg$nl_netfilter(r1, &(0x7f0000002600)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000025c0)={&(0x7f0000002680)={0x2548, 0x13, 0xc, 0x201, 0x70bd26, 0x25dfdbfe, {0x3, 0x0, 0x7}, [@nested={0x2245, 0x70, 0x0, 0x1, [@typed={0x4, 0x3f, 0x0, 0x0, @binary}, @typed={0x5, 0x69, 0x0, 0x0, @str='\x00'}, @generic="9a8628e868af52b786a43d72d32b5c32194a5d4c6b44671658e1422a698dd914abaac7db733f715a311695714d716a4e477ba51e67b7aa8e6c1a9c4fd03d66f02b68eb73911adfb4f20d8eaf896fa45719bae89ebeaf2b7c4bd8508679190ce605f54ea0fe8dd794499440e89df8b73f5a6b18280c8cea7ebe22ce0d485c20df995ba889ec2db4888d00830f08ce3aa1299d1ab340526b8afd262c7a69cbe2e4ee7695b31cf50da1c0f9b509f797697429a2c73aa870623dccccebecb67242e22ab021d06d", @typed={0x14, 0x20, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @generic="417cc4c1bc0b00e84a815e4ade15cac0b5765c65ce208ca312465e126c80a08119a3552cf41f06a9c3bd97c1034b9c65c5daa3c39b24f3c109211fedfe8149bfa024e40b3cf1b9724b641807b5fe5ff85200abb7e4affcfea7bfe9b29a4d138558dbe1e08d3385745a1ebfd62f3321f071e96d3382c3051b45f368fe73b263215f8552cd22ff6dec755329e96ae446a4e86c2197db2ae2bbf4efc2c7ad171bd303f91803a567135b7fb7f5cfdc92a698459e8610682308b2abfd3ae467863828c24e174c7927b413932a641f603d5128f10cb541a728508ad6291d3868c6533b63b5fb2308e7deb9ed2d", @generic="4d65f657f582ef7a5a06017030f85307799df1e701c10e07bd94073e6ef04e0d07c273983844baa232e4b3d45a089b838bb98d7f221ed54143de2e3233f6b367a790b03d0525ad751ce41650f2dc846d8105d00f1b9c8d7bf6ca652e00336c6dfc176a0d101d075d4cc4", @generic="c7c1bde66794dc4f0563a44c017d4fd3add116764a01dfd76a41d6870404d03991d1d85052bc48159dbb1e44f58a280b8dee275b1b1374170bf60b95d39849a76c7447b7508a0cfec403d905936f94099b6d8f888a5a445e2a2f9917b485c6cdfe7074fbf95d42d30ba0acb7f346189b28a3cfdb175208764125da28b124b7ea431e08fffc01546e588d922da16996bc2e128608c5e112f8fe8f63f184d6712c88d54c925af1e1d5b3a4bd87a362214fc954fb9165caa6708fc19117c56341e0988d68c14714df23366be71c9cb095b9487e3136a8af9a20e2178b4b3a7597a65d997aa15001137ad1f19862d35658331d8ca63eef50fe1b4730a2f7b0662f5fd4d005a8e658e6d2d2da125d350e6863d1a5d787a71c0a39b5d38430f014c3aee61a51b6f863a534035f61dc31c8c268fb941c75b51897ecd939df1106ffab47f88b70701bbb37592347e8c4081ffc61af2273a7afa38bb7b5a8b2d6043a2e7ebb36bba20ee236263fb8631e8c0ea386a42ea496eb6b47af078d63b2d23939819a9c5533fc77d85a44642447152677e1d4ae034ea4e46d760533b774e896595984dc29a1dbc9da2afba4f7774c048e66fb6567f22b9f9067e51cc8c6394f605c3331db33b92819bdbc08e9462a588da600f9cbbaea39219465dd9337a773d9b3f1b04585720c649643ebfe690427a301dac7e7df98a7f795694b4b9f634386518725054330d652bf2a4fee37feefd41faee2d7c71b7f902b8c740df7110a6970ff54319014263f280ef616625e2247ba614ec1e2673569cae1797c45f281bb9eec69152146c4333379542faa7634ffdfb4668887da28cb55608094adab0da5c3236c08db3b8cf2901b5af5b453530edc4fd2ac05a4edbaa168153f67235d4835577d7ef6533480e56a25d2593dfa44c770c2f77046718ee45150f9f8e05fcee3561c6654d8b0e3317ade394be47d9ff4c61365b4fc2028055994bbabfc12d28cd7706061506d739b0892d4bb0c52ea89ff020cf286c29f5be397309a6ae243d1c408f8c8bb3ea77922f70a34a13d3008c577b90b6684046226a7dc834076532bd7275a41d1797cab3a27d3ef02859250a682b76b0ed647e181bb66b39a40cf6cad16a31edbfaa2c6967491aaa7a7c3b1ef308bd940af472240994250d7f5c9a453dcf011e47baf3abc7adb4f9b4bb5d82b93a8057244e07b641b4cdf11a694d4afb90e6fe0c1fa9d2f73decabc14717669fbf3aff746c5a7649f8ae6c81702f4f6a088a4684922be00c9f1702fe5c544c974f2330fea20591e4a37d858e9423d53e032122c7dcab12c3a140217ddc17e06cac316f7646899da2cb53d8513fb5b2a81b67397334767bebcb348baa09876bb7b074bcc981c7a296c44a6f545d48525553609695f1ce4bf07df46c1e1c31880c8569dac28b5acadda6cf3cbfa97b4e4ef1895d441ae00061d1e2988cedd4f913f1985e062e161c702ed0d3e62e1c68181b67094289404e96a02900c28e6d06579d08d57fd8f07a429ab381d815ab46234b6fde5a4458b0d3f0347787bf7a46b3abc88b9db11198608193e92219d3dfe30d6d8dbc5040aca52534bcfe5c542b6868029ee71ed87123d6aefd4258470ca9a8b07d6376fd49e7a01e90910d16442b883f0dad11403377d0ee4f2ea84b2addf9639f8431e9aae4df5ae0c58c8f6a3db670d3af8d22b31c1e7c010bda0e4ea0ea5ffa2e9f483f3d0e1099193ef4b2dd6865a6051d4af7cfd24d7a503d5f0f339725b804c7d87a0fbc582a13a0d44471cc67c7af7436e34b900c0a590c51a34e71c2f4e905a2f8be72550716aee5ec849a315b6fc470895c2c91b3b5a5bb4c0f1a06af254fee9f39bbefa6029ece1c98d733d323383779b1a056c7250faabd85e418bccff77b1feaf5e4d764d8a1f2b1c401d81e9076c32eac343bdcba7cecbc57c8d0235874c415af71bc3257143bfb59ce5ae23a685c63006ed8c9f5273585aa55c24903883fba4e7129697d674a15573ccb61e59b06ee0cbd9dfd3b4254033c9676b8a0cd07d13cca92fa8c3af4555e4087dd8be82b6fa2c0654a02c77b0b14a48cf3595029e0f8ba3d481340adfddbe9d45689059237eb6aa209488e5ebb67befa4820fd5786e6e53bc6a479f64e66d8246a0a69bd2d7d31e6be47760247a2ff2fa45a96fa949bb189d670ecbe4f8fd1393b629345c4024ab636dc618df7ebd3a48fd6405c5490a83bbd4d11630c73d6d020fcf27553842b44034af1137ff96dd9c4f18427f7b61c74e36687a732efceeb481ab248c6aa229470e016f0f44b1145e30ea0e8951134b119a1b380de54b5df0e3974e4f2f67367ea5ebf3c57625310d432790f0c8c01216736fb8ec29e7fd59b398dcada7dd0493f14c39a957535870fca967f071274354d6772060fcbb83437da493d897525fcbcce5c1e01c2ec0ce81e388d50945fceb1ae3e2fe30da39b9bcbca83f08ff5fc959f1fea46be595d4b43c2fd42467bfbaf2f8cb9d6ea755c1b88647528753613e411cf57efa1f66c5643b54e8c785e07633db1a3c8c8869eacd70db309009cbd53e4bf8da89f7a0fd883a1d043d49b63e52b8f4ef66d91d8b1dace103e920b08690c4c450a323bdba7f976f221bbae4ee4d78f62efd7b11d4dfbe4cfc7f3b075713509d62905d4a7e0eb0370bb1bb1394356ccab9b25a6711a53980d0536c4fa66c4fdb2aae4f3db1eecc8bea0d29c75f6a87b48038b3586591bac2aaf5343363101e47172eb5b4fcd065978b0cf453511e117855e974d4427768dc52b3b4e40ffba543e6dc8abdb8cac9e5edd0b316843c10a5767c01dde37407a9b9dbf7d29b3e8d3c3ca38cffcaf240b84c261a96f7a0ce925418379cb32e64aa0f9ffd46926f1739fe67d613dfcd89045b1f30820a02f0624b63039c3e83e7f14e15cdda81a3ab8bcb86d4589e80cf0febbc34de4c09482bd699273d098ee15d9bbbe76a4ac638a3ab6a567da09bf3254f723ddd1ace2f28abbd25695e601a6947f63a26c965ae9d715df075567e4f6795b798d86e66df35955fa3f101a8430c77305c1e805b4e4c4976eca36576abfec9dbd62823778380a3671b524c801522c32dc16afc0e7cbeb417164fa87dd4393e0bbd8369cb8b9276131c6936a8f5f1022e363c62538d20bd07fed3052d85f22d66ffc67f2b34b22931397aa050181815540632bb702fd51b9cad0f200a05f7717aee0d450bf77a6524a1e6b262ceee5f292bae8743d977e9a871a8985c96551c37e3521d0a907836b9eb19908460619cad7efb4ff0c3d07e7a23d11e220cbcfb9411b9f46485a9bca6c08e145b280f17ea1bfd383e08ed97bb2efbf145bdb582037aa25c4392d61252c0173627e346aca3d37c1e37c4ae22ca23eacd99b40330cdd6b059a47fea29fac6db42c75980f89f836d17ba5ebabf8d00a0793cc5474ac1e79b71384f3eb2229478c01257aee8ea8c5db9e83cd323c625d5d1e3f0383d7e11b0b77405aabb2f28ea2f67c9d0b97a121497ba69ed23d45e9b78e7df01a3bd41cb72ce1d46d2176f10793ead56459ab5a632ce075e61796feb696ddb03263f1c669c4225b00ecff512a1dacdafeda6ad511e64530ea81bd99eb617f95afa547d7ccc99bc2f615e7cb3200139e808d01bf34ec24d7654c077a4e35a694d324fc3033860953a4d8057074625cbc697f267adf881a0c24d48a58a80551375363281139d07d05d06cf57e22a56f0cc5580490d12747c903ee866a0e5bf2c3e65dd26de7e0e9a0f112567626eb48b0318fea7575304304b71fe52655b12d6453c2c7ecf775fe53553e6ca092e5b996102322c3262aadcfaa908a03514b437a72025c7a72ce810e791492f8336ec4d372f77a4db1565117707aca57f697ecf5e885153817b76f0fe4dc6c55f43bbf45731ffdcc226c01a66bdbfbad486243c77321cc3d91db64faac67ccbbc6c7e8f9f30e8a918751800d9c7241e9e9075140cbbaa29171caaf7c922c5850f46ab09fb883190dfcf59b979365f3181e1a6f4664f08979b1e837577a88e3b18f4fc727ea238817f746835b1d6fb9077124b1c3d4085ffacb9effc06e7ee2e58ec4f43739f61e10957767eba057777f03fc0ab0d0339d26617a2ecb24a2901f6244621c8ece4d975ce42df198935f785857b7086982ab79bbcd9adecf1318d67c08422ee30582ab70d804c7df182e1bc4fec101b647dd48875f481ef4d6920d75cf7fae44af4a1e6def09733b2b434fd1debef7d040628fe7f95503b71cd87e847c3ffc7fe0bbf6a3bd931af8c4d673f9b09033e19199b4efb75ffcd8951377be6ddd22461be7a7cc15a897271eb529da05cb7cd1d4298618c7bc2bc09f00f4e055946ce86cebfc0d286971a9e8060fdf626adacb8cafc02adeca08c90a670aac08efd390104aec96a25e1d6f01879a485cfff98bdbe9f1ec299194480cc0e3152e0fa0ae3eed71e110cfea422c08ce570e5a93ec71cddada213a6df18822b98f178a9b4de1f2c212965194073c1cde5508e945417afe812d5637c2d9ae13d3dab50410878ffd7af1d5d9cfb3497bb0dbdd4fa5821b16bc7bedede524c48650c1240b8669cae8ae6fcf185bfd7b30a0597883660c270d220f57900a9581917a2b1a8ee087cac5e7c02afe0c139c433e2fb1e083bf47cdb37c9210f85955657969a356b0571454bfdf8d870a8d52a864b2f1e85f34a2966a664d2421abba06e898aed94e645c21dadc79ef2ca68ae7078ccd4b8ce20d94f3a37c284e5e163e0a4b9ea7ddfac958d22c3c8535d4b4b7af6cffd052f56c4decc80b9d0a753bcd4e523156f308167d71436c372e1689f6a9ea767ecb6b40d05f3c808d62069a7d0d39179e1327058fcad075b8cdd3f4a040c3ee6dff8bc75bb4ba49edcc1cfaedac2e1c30d368c992f5c7a0b1552282a584f88c88e818e78ac909f196483e963efa85d014799b902bac23e3c99e4cac439a4ccbe4dbc9f6e14a289e8a3cfe9d9aa2e4cb85123459be6a062d4928ade509f9c1e222e873233481a56b09bd1f2c62bf4671d0d38941e33e8b7169e00087712a682ab51d08345cec0f279c7bd12f601e3432a03cfe7eb0f4497fc05f4cfef9d8b747a6b99ec6ec09d4217d96498f097b73bcc9cb6d9df438a146972113348a37cadbc2997f847e38898c295ddaf82c661d4a22166eed040a027092c4193a6597442dae38c7219c8648ff97f7bd177ed6ff8ed35738473ced879602374a1caa5c6f93e259afd6d5ba99aa8e71d83aff5c49a3b1fe0fd6b3f25718675cdd948535f91e15ccbf52cb7f1f5944f951e375cab3083d2726f6597bd9d9dbe864476495f8d07400fb597b05cd5e41cb266f55c2b1c75732bdccc903d07a2291691b7bffbbce00c68d22eadbc04de012d6c1c8d4bed5f2ba7870ae36677f2abd068aed4e8c861762ee900e6f1c79569ea496d8325e63b11ed7e0d2ccbb177399f711cfc986c7a8bc540ba0b04be98a55e0ee7924f346382e7454bebc24c22d81329cbd292d544089033b4160dab23ee07678adf3db219c29add4345db60096b6b0736cef68059956c8f5476a5726923e7e2012fe461d6c1294e90c78f0282c4e82a41f0ba44b0bc554cd3ad069afe4504d7816e5eb1771dd22f8a901f71ed053368fea6c4c1a06b76a5db37bfdf422ec889ae2e76750011dd32cc40eeb46875b83489d504121d39867f75595fc673bd282d1449dbd86f39b068b144b7b862c15cfc6b019a11fb6e2fa0981734dce464f8c56b79a0beca179901028a28c71a312a", @typed={0x8, 0x8f, 0x0, 0x0, @u32=0x6}, @generic="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"]}, @generic="268ce245048dab67463a453496fbe0af4df2875d9879b4a90303dafbde4d958fd8204b2ddacbed1fab0fa9ecf3af1df98419ff8571fd7eed069124d9ca84bed69ec3380cc231024f1d179cd025cdfaa082837232249a94bff571acd9a4235b6e85fdb16fc5735ebd4ab6370159fbaf160acf28b97bb7c0b3c187a37f43f44f3c250db91aca0b09866b7c046f6d7c4b79ad5225e16731b3f3ada21c85c08ab71165028cf122b3621e1d6af6cd218670f77ea69b4fc88d701af5af21b6b6f2f979d46a1486fac569", @generic="90cb5a98e9efda048f503e504ae569596dc9632355c7292334d2c3f89ffd762709f6102729d476a9dd91dcf254fe08558670bb8145e254e3ce04a5a0f7e95d4e00ad2779a4f0aebcf08b7df826a161e2589f76194c53675d6bed68eb4d0c0aaa8f06cebf25ac0317c1c223d0b2d352a11f6d17cebb8e3b888df65b7fba29efe6d5e9739a673c562a15a123978a484f5d00f86b7074621e3dfb1d2136ecc1de38e165a7919c0cdd2ec5f949c65ceebe50a62abfe4926fcc45b815f04f644d68a53ea742a90cffaa4397c6053d4593726d94421f3860f64472b7efeb6935736cbdd98d90d94c159f37e52aafd9bd2affb4158d7e9b25ebf4", @generic="fd468914013d1c4930d25f3c0fbfcebf55618dc9386f192ecffed082949296f44b20c254a59b9397d6dff0c4b934bfb33c21742d285ba0c436e507fd683d99dadcdd1689ccca2a126e3c6bde8d7f092c0080aac2e24f5af8078d63aa0e3eba0f19d8e27ab7a5db8a80282ae419977eb0ec47d11251a7aa9e0d9708e136b56e892eb230ba1c26a9834fecd1f51086cb12bb6b0e1613b65c686462b3cc3a8e257eda9b4e3010772a8bf6c09310d06d5c9e7188c473a62df545e73cebc68fa0b0de2ffeefc6da62556cab3babdf6d0fba51aa1829a30f4d8a252c43425053", @typed={0xc, 0x73, 0x0, 0x0, @u64=0x7fff}, @generic="cde56eb4e79b13ba765f711a3bd292851dcd5c99d28e58bf0770203e138ddf3a20b62f4c59045fb19f5439fbc7905fc3d05f58c336115bcfbaf13c42560ab8ea7780"]}, 0x2548}, 0x1, 0x0, 0x0, 0x80}, 0xa8d8e8a6a00e4839) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000080)={'ip6gre0\x00', &(0x7f0000000000)={'ip6gre0\x00', 0x0, 0x2f, 0x8, 0x6e, 0x9, 0x20, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @remote, 0x7800, 0xf890, 0x7, 0x8}}) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r0, 0x28, 0x1, &(0x7f00000000c0)=0x20, 0x8) 18:39:39 executing program 3: r0 = socket(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000000)={'wg0\x00'}) close(0xffffffffffffffff) setsockopt$MRT_DEL_VIF(0xffffffffffffffff, 0x0, 0xcb, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000080)={'c', ' *:* ', 'rm\x00'}, 0x9) ioctl$FIBMAP(r1, 0x1, &(0x7f0000000040)) 18:39:39 executing program 5: r0 = socket(0xa, 0x1, 0x20000) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x6, 0x2, 0x0, 0x0) 18:39:39 executing program 4: r0 = socket(0x22, 0x6, 0x800) ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, &(0x7f0000000000)={0x1c, 0x1, {0x5f2c, @struct={0x401, 0xd3a0}, 0x0, 0x3f, 0xb04, 0x4, 0x1000, 0x7, 0x24, @usage=0x131, 0x7, 0x20, [0x400, 0x8000000000000001, 0x1, 0x6, 0x1, 0x7f]}, {0xfffffffffffffffa, @usage=0x2, 0x0, 0xfffffffffffffff9, 0x7, 0x8, 0x6, 0x6, 0x8, @usage=0x1f, 0x379, 0x2, [0x8, 0x870, 0x0, 0x0, 0x6, 0x40]}, {0x6, @usage=0x1, 0x0, 0x1, 0x1f, 0x8000000000000001, 0xf4, 0x80000000, 0x400, @struct={0x5}, 0x9, 0x4, [0x8000, 0xffffffff, 0x3, 0x5, 0x0, 0x6a]}, {0xffffffffffffffff, 0xb9, 0x8}}) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x28, 0x2, 0x0, 0x0) (async, rerun: 32) ioctl$SIOCGETSGCNT(r0, 0x89e1, &(0x7f0000000440)={@local, @local}) (async, rerun: 32) fcntl$F_GET_FILE_RW_HINT(r0, 0x40d, &(0x7f0000000480)) (async) r1 = signalfd(0xffffffffffffffff, 0x0, 0x0) close(r1) (async, rerun: 32) setsockopt$MRT_ASSERT(r1, 0x0, 0xcf, &(0x7f0000000400)=0x1, 0x4) (rerun: 32) 18:39:39 executing program 5: r0 = socket(0xa, 0x1, 0x20000) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x6, 0x2, 0x0, 0x0) socket(0xa, 0x1, 0x20000) (async) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x6, 0x2, 0x0, 0x0) (async) 18:39:39 executing program 4: r0 = socket(0x22, 0x6, 0x800) ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, &(0x7f0000000000)={0x1c, 0x1, {0x5f2c, @struct={0x401, 0xd3a0}, 0x0, 0x3f, 0xb04, 0x4, 0x1000, 0x7, 0x24, @usage=0x131, 0x7, 0x20, [0x400, 0x8000000000000001, 0x1, 0x6, 0x1, 0x7f]}, {0xfffffffffffffffa, @usage=0x2, 0x0, 0xfffffffffffffff9, 0x7, 0x8, 0x6, 0x6, 0x8, @usage=0x1f, 0x379, 0x2, [0x8, 0x870, 0x0, 0x0, 0x6, 0x40]}, {0x6, @usage=0x1, 0x0, 0x1, 0x1f, 0x8000000000000001, 0xf4, 0x80000000, 0x400, @struct={0x5}, 0x9, 0x4, [0x8000, 0xffffffff, 0x3, 0x5, 0x0, 0x6a]}, {0xffffffffffffffff, 0xb9, 0x8}}) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x28, 0x2, 0x0, 0x0) (async) ioctl$SIOCGETSGCNT(r0, 0x89e1, &(0x7f0000000440)={@local, @local}) (async) fcntl$F_GET_FILE_RW_HINT(r0, 0x40d, &(0x7f0000000480)) (async) r1 = signalfd(0xffffffffffffffff, 0x0, 0x0) close(r1) (async) setsockopt$MRT_ASSERT(r1, 0x0, 0xcf, &(0x7f0000000400)=0x1, 0x4) 18:39:39 executing program 3: r0 = socket(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000000)={'wg0\x00'}) (async) close(0xffffffffffffffff) (async) setsockopt$MRT_DEL_VIF(0xffffffffffffffff, 0x0, 0xcb, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000080)={'c', ' *:* ', 'rm\x00'}, 0x9) ioctl$FIBMAP(r1, 0x1, &(0x7f0000000040)) [ 728.495598][T16926] RBP: 00007fb671f7e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 728.503411][T16926] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 728.511214][T16926] R13: 00007ffe782f632f R14: 00007fb671f7e300 R15: 0000000000022000 [ 728.519029][T16926] 18:39:39 executing program 3: r0 = socket(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000000)={'wg0\x00'}) close(0xffffffffffffffff) setsockopt$MRT_DEL_VIF(0xffffffffffffffff, 0x0, 0xcb, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000080)={'c', ' *:* ', 'rm\x00'}, 0x9) ioctl$FIBMAP(r1, 0x1, &(0x7f0000000040)) socket(0xa, 0x1, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000000)={'wg0\x00'}) (async) close(0xffffffffffffffff) (async) setsockopt$MRT_DEL_VIF(0xffffffffffffffff, 0x0, 0xcb, 0x0, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000080)={'c', ' *:* ', 'rm\x00'}, 0x9) (async) ioctl$FIBMAP(r1, 0x1, &(0x7f0000000040)) (async) 18:39:39 executing program 1: r0 = socket(0x27, 0x1, 0x0) signalfd(r0, &(0x7f0000002640)={[0x101]}, 0x8) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x29, 0x2, 0x0, 0x0) r1 = signalfd(0xffffffffffffffff, 0x0, 0x0) close(r1) sendmsg$nl_netfilter(r1, &(0x7f0000002600)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000025c0)={&(0x7f0000002680)={0x2548, 0x13, 0xc, 0x201, 0x70bd26, 0x25dfdbfe, {0x3, 0x0, 0x7}, [@nested={0x2245, 0x70, 0x0, 0x1, [@typed={0x4, 0x3f, 0x0, 0x0, @binary}, @typed={0x5, 0x69, 0x0, 0x0, @str='\x00'}, @generic="9a8628e868af52b786a43d72d32b5c32194a5d4c6b44671658e1422a698dd914abaac7db733f715a311695714d716a4e477ba51e67b7aa8e6c1a9c4fd03d66f02b68eb73911adfb4f20d8eaf896fa45719bae89ebeaf2b7c4bd8508679190ce605f54ea0fe8dd794499440e89df8b73f5a6b18280c8cea7ebe22ce0d485c20df995ba889ec2db4888d00830f08ce3aa1299d1ab340526b8afd262c7a69cbe2e4ee7695b31cf50da1c0f9b509f797697429a2c73aa870623dccccebecb67242e22ab021d06d", @typed={0x14, 0x20, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @generic="417cc4c1bc0b00e84a815e4ade15cac0b5765c65ce208ca312465e126c80a08119a3552cf41f06a9c3bd97c1034b9c65c5daa3c39b24f3c109211fedfe8149bfa024e40b3cf1b9724b641807b5fe5ff85200abb7e4affcfea7bfe9b29a4d138558dbe1e08d3385745a1ebfd62f3321f071e96d3382c3051b45f368fe73b263215f8552cd22ff6dec755329e96ae446a4e86c2197db2ae2bbf4efc2c7ad171bd303f91803a567135b7fb7f5cfdc92a698459e8610682308b2abfd3ae467863828c24e174c7927b413932a641f603d5128f10cb541a728508ad6291d3868c6533b63b5fb2308e7deb9ed2d", @generic="4d65f657f582ef7a5a06017030f85307799df1e701c10e07bd94073e6ef04e0d07c273983844baa232e4b3d45a089b838bb98d7f221ed54143de2e3233f6b367a790b03d0525ad751ce41650f2dc846d8105d00f1b9c8d7bf6ca652e00336c6dfc176a0d101d075d4cc4", @generic="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", @typed={0x8, 0x8f, 0x0, 0x0, @u32=0x6}, @generic="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"]}, @generic="268ce245048dab67463a453496fbe0af4df2875d9879b4a90303dafbde4d958fd8204b2ddacbed1fab0fa9ecf3af1df98419ff8571fd7eed069124d9ca84bed69ec3380cc231024f1d179cd025cdfaa082837232249a94bff571acd9a4235b6e85fdb16fc5735ebd4ab6370159fbaf160acf28b97bb7c0b3c187a37f43f44f3c250db91aca0b09866b7c046f6d7c4b79ad5225e16731b3f3ada21c85c08ab71165028cf122b3621e1d6af6cd218670f77ea69b4fc88d701af5af21b6b6f2f979d46a1486fac569", @generic="90cb5a98e9efda048f503e504ae569596dc9632355c7292334d2c3f89ffd762709f6102729d476a9dd91dcf254fe08558670bb8145e254e3ce04a5a0f7e95d4e00ad2779a4f0aebcf08b7df826a161e2589f76194c53675d6bed68eb4d0c0aaa8f06cebf25ac0317c1c223d0b2d352a11f6d17cebb8e3b888df65b7fba29efe6d5e9739a673c562a15a123978a484f5d00f86b7074621e3dfb1d2136ecc1de38e165a7919c0cdd2ec5f949c65ceebe50a62abfe4926fcc45b815f04f644d68a53ea742a90cffaa4397c6053d4593726d94421f3860f64472b7efeb6935736cbdd98d90d94c159f37e52aafd9bd2affb4158d7e9b25ebf4", @generic="fd468914013d1c4930d25f3c0fbfcebf55618dc9386f192ecffed082949296f44b20c254a59b9397d6dff0c4b934bfb33c21742d285ba0c436e507fd683d99dadcdd1689ccca2a126e3c6bde8d7f092c0080aac2e24f5af8078d63aa0e3eba0f19d8e27ab7a5db8a80282ae419977eb0ec47d11251a7aa9e0d9708e136b56e892eb230ba1c26a9834fecd1f51086cb12bb6b0e1613b65c686462b3cc3a8e257eda9b4e3010772a8bf6c09310d06d5c9e7188c473a62df545e73cebc68fa0b0de2ffeefc6da62556cab3babdf6d0fba51aa1829a30f4d8a252c43425053", @typed={0xc, 0x73, 0x0, 0x0, @u64=0x7fff}, @generic="cde56eb4e79b13ba765f711a3bd292851dcd5c99d28e58bf0770203e138ddf3a20b62f4c59045fb19f5439fbc7905fc3d05f58c336115bcfbaf13c42560ab8ea7780"]}, 0x2548}, 0x1, 0x0, 0x0, 0x80}, 0xa8d8e8a6a00e4839) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000080)={'ip6gre0\x00', &(0x7f0000000000)={'ip6gre0\x00', 0x0, 0x2f, 0x8, 0x6e, 0x9, 0x20, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @remote, 0x7800, 0xf890, 0x7, 0x8}}) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r0, 0x28, 0x1, &(0x7f00000000c0)=0x20, 0x8) socket(0x27, 0x1, 0x0) (async) signalfd(r0, &(0x7f0000002640)={[0x101]}, 0x8) (async) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x29, 0x2, 0x0, 0x0) (async) signalfd(0xffffffffffffffff, 0x0, 0x0) (async) close(r1) (async) sendmsg$nl_netfilter(r1, &(0x7f0000002600)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000025c0)={&(0x7f0000002680)={0x2548, 0x13, 0xc, 0x201, 0x70bd26, 0x25dfdbfe, {0x3, 0x0, 0x7}, [@nested={0x2245, 0x70, 0x0, 0x1, [@typed={0x4, 0x3f, 0x0, 0x0, @binary}, @typed={0x5, 0x69, 0x0, 0x0, @str='\x00'}, @generic="9a8628e868af52b786a43d72d32b5c32194a5d4c6b44671658e1422a698dd914abaac7db733f715a311695714d716a4e477ba51e67b7aa8e6c1a9c4fd03d66f02b68eb73911adfb4f20d8eaf896fa45719bae89ebeaf2b7c4bd8508679190ce605f54ea0fe8dd794499440e89df8b73f5a6b18280c8cea7ebe22ce0d485c20df995ba889ec2db4888d00830f08ce3aa1299d1ab340526b8afd262c7a69cbe2e4ee7695b31cf50da1c0f9b509f797697429a2c73aa870623dccccebecb67242e22ab021d06d", @typed={0x14, 0x20, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @generic="417cc4c1bc0b00e84a815e4ade15cac0b5765c65ce208ca312465e126c80a08119a3552cf41f06a9c3bd97c1034b9c65c5daa3c39b24f3c109211fedfe8149bfa024e40b3cf1b9724b641807b5fe5ff85200abb7e4affcfea7bfe9b29a4d138558dbe1e08d3385745a1ebfd62f3321f071e96d3382c3051b45f368fe73b263215f8552cd22ff6dec755329e96ae446a4e86c2197db2ae2bbf4efc2c7ad171bd303f91803a567135b7fb7f5cfdc92a698459e8610682308b2abfd3ae467863828c24e174c7927b413932a641f603d5128f10cb541a728508ad6291d3868c6533b63b5fb2308e7deb9ed2d", @generic="4d65f657f582ef7a5a06017030f85307799df1e701c10e07bd94073e6ef04e0d07c273983844baa232e4b3d45a089b838bb98d7f221ed54143de2e3233f6b367a790b03d0525ad751ce41650f2dc846d8105d00f1b9c8d7bf6ca652e00336c6dfc176a0d101d075d4cc4", @generic="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", @typed={0x8, 0x8f, 0x0, 0x0, @u32=0x6}, @generic="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"]}, @generic="268ce245048dab67463a453496fbe0af4df2875d9879b4a90303dafbde4d958fd8204b2ddacbed1fab0fa9ecf3af1df98419ff8571fd7eed069124d9ca84bed69ec3380cc231024f1d179cd025cdfaa082837232249a94bff571acd9a4235b6e85fdb16fc5735ebd4ab6370159fbaf160acf28b97bb7c0b3c187a37f43f44f3c250db91aca0b09866b7c046f6d7c4b79ad5225e16731b3f3ada21c85c08ab71165028cf122b3621e1d6af6cd218670f77ea69b4fc88d701af5af21b6b6f2f979d46a1486fac569", @generic="90cb5a98e9efda048f503e504ae569596dc9632355c7292334d2c3f89ffd762709f6102729d476a9dd91dcf254fe08558670bb8145e254e3ce04a5a0f7e95d4e00ad2779a4f0aebcf08b7df826a161e2589f76194c53675d6bed68eb4d0c0aaa8f06cebf25ac0317c1c223d0b2d352a11f6d17cebb8e3b888df65b7fba29efe6d5e9739a673c562a15a123978a484f5d00f86b7074621e3dfb1d2136ecc1de38e165a7919c0cdd2ec5f949c65ceebe50a62abfe4926fcc45b815f04f644d68a53ea742a90cffaa4397c6053d4593726d94421f3860f64472b7efeb6935736cbdd98d90d94c159f37e52aafd9bd2affb4158d7e9b25ebf4", @generic="fd468914013d1c4930d25f3c0fbfcebf55618dc9386f192ecffed082949296f44b20c254a59b9397d6dff0c4b934bfb33c21742d285ba0c436e507fd683d99dadcdd1689ccca2a126e3c6bde8d7f092c0080aac2e24f5af8078d63aa0e3eba0f19d8e27ab7a5db8a80282ae419977eb0ec47d11251a7aa9e0d9708e136b56e892eb230ba1c26a9834fecd1f51086cb12bb6b0e1613b65c686462b3cc3a8e257eda9b4e3010772a8bf6c09310d06d5c9e7188c473a62df545e73cebc68fa0b0de2ffeefc6da62556cab3babdf6d0fba51aa1829a30f4d8a252c43425053", @typed={0xc, 0x73, 0x0, 0x0, @u64=0x7fff}, @generic="cde56eb4e79b13ba765f711a3bd292851dcd5c99d28e58bf0770203e138ddf3a20b62f4c59045fb19f5439fbc7905fc3d05f58c336115bcfbaf13c42560ab8ea7780"]}, 0x2548}, 0x1, 0x0, 0x0, 0x80}, 0xa8d8e8a6a00e4839) (async) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000080)={'ip6gre0\x00', &(0x7f0000000000)={'ip6gre0\x00', 0x0, 0x2f, 0x8, 0x6e, 0x9, 0x20, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @remote, 0x7800, 0xf890, 0x7, 0x8}}) (async) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r0, 0x28, 0x1, &(0x7f00000000c0)=0x20, 0x8) (async) 18:39:39 executing program 0: r0 = socket(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00'}) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$FOU_CMD_GET(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00082dbd7001ffdbdf250300000008000800ffffffff080008007f000001050002000a000000"], 0x2c}, 0x1, 0x0, 0x0, 0x24040844}, 0x8000) (async, rerun: 32) r2 = signalfd4(r0, &(0x7f0000000140)={[0x4]}, 0x8, 0x101000) (rerun: 32) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00'}) [ 728.572629][T16978] FAULT_INJECTION: forcing a failure. [ 728.572629][T16978] name failslab, interval 1, probability 0, space 0, times 0 [ 728.587016][T16978] CPU: 0 PID: 16978 Comm: syz-executor.2 Not tainted 5.15.74-syzkaller-04383-g7f2e600bf63a #0 [ 728.597079][T16978] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/11/2022 [ 728.606970][T16978] Call Trace: [ 728.610092][T16978] [ 728.612871][T16978] dump_stack_lvl+0x151/0x1b7 [ 728.617384][T16978] ? bfq_pos_tree_add_move+0x43e/0x43e [ 728.622677][T16978] ? do_syscall_64+0x44/0xd0 [ 728.627238][T16978] dump_stack+0x15/0x17 [ 728.631211][T16978] should_fail+0x3c0/0x510 [ 728.635466][T16978] __should_failslab+0x9f/0xe0 [ 728.640163][T16978] should_failslab+0x9/0x20 [ 728.644499][T16978] kmem_cache_alloc+0x4f/0x2f0 [ 728.649187][T16978] ? anon_vma_clone+0xa1/0x4f0 [ 728.653778][T16978] anon_vma_clone+0xa1/0x4f0 [ 728.658208][T16978] anon_vma_fork+0x91/0x4f0 [ 728.662566][T16978] ? anon_vma_name+0x4c/0x70 [ 728.666973][T16978] dup_mmap+0x750/0xea0 [ 728.671150][T16978] ? __delayed_free_task+0x20/0x20 [ 728.676084][T16978] ? mm_init+0x807/0x960 [ 728.680161][T16978] dup_mm+0x91/0x330 [ 728.684042][T16978] copy_mm+0x108/0x1b0 [ 728.687889][T16978] copy_process+0x1295/0x3250 [ 728.692495][T16978] ? proc_fail_nth_write+0x213/0x290 [ 728.697609][T16978] ? proc_fail_nth_read+0x220/0x220 [ 728.702732][T16978] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 728.707675][T16978] ? vfs_write+0x9af/0x1050 [ 728.712016][T16978] ? vmacache_update+0xb7/0x120 [ 728.716705][T16978] kernel_clone+0x22d/0x990 [ 728.721052][T16978] ? file_end_write+0x1b0/0x1b0 [ 728.725735][T16978] ? __kasan_check_write+0x14/0x20 [ 728.730680][T16978] ? create_io_thread+0x1e0/0x1e0 [ 728.735539][T16978] ? __mutex_lock_slowpath+0x10/0x10 [ 728.740661][T16978] __x64_sys_clone+0x289/0x310 [ 728.745273][T16978] ? __do_sys_vfork+0x130/0x130 [ 728.749947][T16978] ? debug_smp_processor_id+0x17/0x20 [ 728.755154][T16978] do_syscall_64+0x44/0xd0 [ 728.759409][T16978] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 728.765134][T16978] RIP: 0033:0x7fb67320a5a9 [ 728.769397][T16978] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 728.788918][T16978] RSP: 002b:00007fb671f7e118 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 728.797160][T16978] RAX: ffffffffffffffda RBX: 00007fb67332af80 RCX: 00007fb67320a5a9 [ 728.804970][T16978] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000010000000 [ 728.812789][T16978] RBP: 00007fb671f7e1d0 R08: 0000000000000000 R09: 0000000000000000 18:39:40 executing program 2: syz_clone(0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 74) 18:39:40 executing program 4: openat$pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x18040, 0x0) r0 = signalfd(0xffffffffffffffff, 0x0, 0x0) close(r0) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f00000002c0)={0x38, r1, 0x100, 0x70bd27, 0x25dfdbfe, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x200}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x20}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x48004) r2 = socket(0xa, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r2, 0x28, 0x2, 0x0, 0x0) r3 = syz_genetlink_get_family_id$batadv(&(0x7f00000001c0), r2) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r3, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24000041}, 0xc000) 18:39:40 executing program 5: r0 = socket(0xa, 0x1, 0x20000) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x6, 0x2, 0x0, 0x0) 18:39:40 executing program 0: r0 = socket(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00'}) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r2 = signalfd(0xffffffffffffffff, 0x0, 0x0) close(r2) syz_genetlink_get_family_id$fou(&(0x7f00000000c0), r2) getsockopt$bt_BT_DEFER_SETUP(r1, 0x112, 0x7, &(0x7f0000000040)=0x1, &(0x7f0000000080)=0x4) 18:39:40 executing program 3: r0 = socket(0x2a, 0x1, 0x0) r1 = syz_io_uring_setup(0x32c0, &(0x7f0000000000)={0x0, 0xbb89, 0x100, 0x1, 0x22b}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) fcntl$getown(r1, 0x9) setsockopt$MRT_DEL_VIF(r0, 0x0, 0xcb, 0x0, 0x0) 18:39:40 executing program 1: r0 = socket(0x27, 0x1, 0x0) signalfd(r0, &(0x7f0000002640)={[0x101]}, 0x8) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x29, 0x2, 0x0, 0x0) r1 = signalfd(0xffffffffffffffff, 0x0, 0x0) close(r1) sendmsg$nl_netfilter(r1, &(0x7f0000002600)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000025c0)={&(0x7f0000002680)={0x2548, 0x13, 0xc, 0x201, 0x70bd26, 0x25dfdbfe, {0x3, 0x0, 0x7}, [@nested={0x2245, 0x70, 0x0, 0x1, [@typed={0x4, 0x3f, 0x0, 0x0, @binary}, @typed={0x5, 0x69, 0x0, 0x0, @str='\x00'}, @generic="9a8628e868af52b786a43d72d32b5c32194a5d4c6b44671658e1422a698dd914abaac7db733f715a311695714d716a4e477ba51e67b7aa8e6c1a9c4fd03d66f02b68eb73911adfb4f20d8eaf896fa45719bae89ebeaf2b7c4bd8508679190ce605f54ea0fe8dd794499440e89df8b73f5a6b18280c8cea7ebe22ce0d485c20df995ba889ec2db4888d00830f08ce3aa1299d1ab340526b8afd262c7a69cbe2e4ee7695b31cf50da1c0f9b509f797697429a2c73aa870623dccccebecb67242e22ab021d06d", @typed={0x14, 0x20, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @generic="417cc4c1bc0b00e84a815e4ade15cac0b5765c65ce208ca312465e126c80a08119a3552cf41f06a9c3bd97c1034b9c65c5daa3c39b24f3c109211fedfe8149bfa024e40b3cf1b9724b641807b5fe5ff85200abb7e4affcfea7bfe9b29a4d138558dbe1e08d3385745a1ebfd62f3321f071e96d3382c3051b45f368fe73b263215f8552cd22ff6dec755329e96ae446a4e86c2197db2ae2bbf4efc2c7ad171bd303f91803a567135b7fb7f5cfdc92a698459e8610682308b2abfd3ae467863828c24e174c7927b413932a641f603d5128f10cb541a728508ad6291d3868c6533b63b5fb2308e7deb9ed2d", @generic="4d65f657f582ef7a5a06017030f85307799df1e701c10e07bd94073e6ef04e0d07c273983844baa232e4b3d45a089b838bb98d7f221ed54143de2e3233f6b367a790b03d0525ad751ce41650f2dc846d8105d00f1b9c8d7bf6ca652e00336c6dfc176a0d101d075d4cc4", @generic="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", @typed={0x8, 0x8f, 0x0, 0x0, @u32=0x6}, @generic="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"]}, @generic="268ce245048dab67463a453496fbe0af4df2875d9879b4a90303dafbde4d958fd8204b2ddacbed1fab0fa9ecf3af1df98419ff8571fd7eed069124d9ca84bed69ec3380cc231024f1d179cd025cdfaa082837232249a94bff571acd9a4235b6e85fdb16fc5735ebd4ab6370159fbaf160acf28b97bb7c0b3c187a37f43f44f3c250db91aca0b09866b7c046f6d7c4b79ad5225e16731b3f3ada21c85c08ab71165028cf122b3621e1d6af6cd218670f77ea69b4fc88d701af5af21b6b6f2f979d46a1486fac569", @generic="90cb5a98e9efda048f503e504ae569596dc9632355c7292334d2c3f89ffd762709f6102729d476a9dd91dcf254fe08558670bb8145e254e3ce04a5a0f7e95d4e00ad2779a4f0aebcf08b7df826a161e2589f76194c53675d6bed68eb4d0c0aaa8f06cebf25ac0317c1c223d0b2d352a11f6d17cebb8e3b888df65b7fba29efe6d5e9739a673c562a15a123978a484f5d00f86b7074621e3dfb1d2136ecc1de38e165a7919c0cdd2ec5f949c65ceebe50a62abfe4926fcc45b815f04f644d68a53ea742a90cffaa4397c6053d4593726d94421f3860f64472b7efeb6935736cbdd98d90d94c159f37e52aafd9bd2affb4158d7e9b25ebf4", @generic="fd468914013d1c4930d25f3c0fbfcebf55618dc9386f192ecffed082949296f44b20c254a59b9397d6dff0c4b934bfb33c21742d285ba0c436e507fd683d99dadcdd1689ccca2a126e3c6bde8d7f092c0080aac2e24f5af8078d63aa0e3eba0f19d8e27ab7a5db8a80282ae419977eb0ec47d11251a7aa9e0d9708e136b56e892eb230ba1c26a9834fecd1f51086cb12bb6b0e1613b65c686462b3cc3a8e257eda9b4e3010772a8bf6c09310d06d5c9e7188c473a62df545e73cebc68fa0b0de2ffeefc6da62556cab3babdf6d0fba51aa1829a30f4d8a252c43425053", @typed={0xc, 0x73, 0x0, 0x0, @u64=0x7fff}, @generic="cde56eb4e79b13ba765f711a3bd292851dcd5c99d28e58bf0770203e138ddf3a20b62f4c59045fb19f5439fbc7905fc3d05f58c336115bcfbaf13c42560ab8ea7780"]}, 0x2548}, 0x1, 0x0, 0x0, 0x80}, 0xa8d8e8a6a00e4839) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000080)={'ip6gre0\x00', &(0x7f0000000000)={'ip6gre0\x00', 0x0, 0x2f, 0x8, 0x6e, 0x9, 0x20, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @remote, 0x7800, 0xf890, 0x7, 0x8}}) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r0, 0x28, 0x1, &(0x7f00000000c0)=0x20, 0x8) socket(0x27, 0x1, 0x0) (async) signalfd(r0, &(0x7f0000002640)={[0x101]}, 0x8) (async) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x29, 0x2, 0x0, 0x0) (async) signalfd(0xffffffffffffffff, 0x0, 0x0) (async) close(r1) (async) sendmsg$nl_netfilter(r1, &(0x7f0000002600)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000025c0)={&(0x7f0000002680)={0x2548, 0x13, 0xc, 0x201, 0x70bd26, 0x25dfdbfe, {0x3, 0x0, 0x7}, [@nested={0x2245, 0x70, 0x0, 0x1, [@typed={0x4, 0x3f, 0x0, 0x0, @binary}, @typed={0x5, 0x69, 0x0, 0x0, @str='\x00'}, @generic="9a8628e868af52b786a43d72d32b5c32194a5d4c6b44671658e1422a698dd914abaac7db733f715a311695714d716a4e477ba51e67b7aa8e6c1a9c4fd03d66f02b68eb73911adfb4f20d8eaf896fa45719bae89ebeaf2b7c4bd8508679190ce605f54ea0fe8dd794499440e89df8b73f5a6b18280c8cea7ebe22ce0d485c20df995ba889ec2db4888d00830f08ce3aa1299d1ab340526b8afd262c7a69cbe2e4ee7695b31cf50da1c0f9b509f797697429a2c73aa870623dccccebecb67242e22ab021d06d", @typed={0x14, 0x20, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @generic="417cc4c1bc0b00e84a815e4ade15cac0b5765c65ce208ca312465e126c80a08119a3552cf41f06a9c3bd97c1034b9c65c5daa3c39b24f3c109211fedfe8149bfa024e40b3cf1b9724b641807b5fe5ff85200abb7e4affcfea7bfe9b29a4d138558dbe1e08d3385745a1ebfd62f3321f071e96d3382c3051b45f368fe73b263215f8552cd22ff6dec755329e96ae446a4e86c2197db2ae2bbf4efc2c7ad171bd303f91803a567135b7fb7f5cfdc92a698459e8610682308b2abfd3ae467863828c24e174c7927b413932a641f603d5128f10cb541a728508ad6291d3868c6533b63b5fb2308e7deb9ed2d", @generic="4d65f657f582ef7a5a06017030f85307799df1e701c10e07bd94073e6ef04e0d07c273983844baa232e4b3d45a089b838bb98d7f221ed54143de2e3233f6b367a790b03d0525ad751ce41650f2dc846d8105d00f1b9c8d7bf6ca652e00336c6dfc176a0d101d075d4cc4", @generic="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", @typed={0x8, 0x8f, 0x0, 0x0, @u32=0x6}, @generic="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"]}, @generic="268ce245048dab67463a453496fbe0af4df2875d9879b4a90303dafbde4d958fd8204b2ddacbed1fab0fa9ecf3af1df98419ff8571fd7eed069124d9ca84bed69ec3380cc231024f1d179cd025cdfaa082837232249a94bff571acd9a4235b6e85fdb16fc5735ebd4ab6370159fbaf160acf28b97bb7c0b3c187a37f43f44f3c250db91aca0b09866b7c046f6d7c4b79ad5225e16731b3f3ada21c85c08ab71165028cf122b3621e1d6af6cd218670f77ea69b4fc88d701af5af21b6b6f2f979d46a1486fac569", @generic="90cb5a98e9efda048f503e504ae569596dc9632355c7292334d2c3f89ffd762709f6102729d476a9dd91dcf254fe08558670bb8145e254e3ce04a5a0f7e95d4e00ad2779a4f0aebcf08b7df826a161e2589f76194c53675d6bed68eb4d0c0aaa8f06cebf25ac0317c1c223d0b2d352a11f6d17cebb8e3b888df65b7fba29efe6d5e9739a673c562a15a123978a484f5d00f86b7074621e3dfb1d2136ecc1de38e165a7919c0cdd2ec5f949c65ceebe50a62abfe4926fcc45b815f04f644d68a53ea742a90cffaa4397c6053d4593726d94421f3860f64472b7efeb6935736cbdd98d90d94c159f37e52aafd9bd2affb4158d7e9b25ebf4", @generic="fd468914013d1c4930d25f3c0fbfcebf55618dc9386f192ecffed082949296f44b20c254a59b9397d6dff0c4b934bfb33c21742d285ba0c436e507fd683d99dadcdd1689ccca2a126e3c6bde8d7f092c0080aac2e24f5af8078d63aa0e3eba0f19d8e27ab7a5db8a80282ae419977eb0ec47d11251a7aa9e0d9708e136b56e892eb230ba1c26a9834fecd1f51086cb12bb6b0e1613b65c686462b3cc3a8e257eda9b4e3010772a8bf6c09310d06d5c9e7188c473a62df545e73cebc68fa0b0de2ffeefc6da62556cab3babdf6d0fba51aa1829a30f4d8a252c43425053", @typed={0xc, 0x73, 0x0, 0x0, @u64=0x7fff}, @generic="cde56eb4e79b13ba765f711a3bd292851dcd5c99d28e58bf0770203e138ddf3a20b62f4c59045fb19f5439fbc7905fc3d05f58c336115bcfbaf13c42560ab8ea7780"]}, 0x2548}, 0x1, 0x0, 0x0, 0x80}, 0xa8d8e8a6a00e4839) (async) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000080)={'ip6gre0\x00', &(0x7f0000000000)={'ip6gre0\x00', 0x0, 0x2f, 0x8, 0x6e, 0x9, 0x20, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @remote, 0x7800, 0xf890, 0x7, 0x8}}) (async) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r0, 0x28, 0x1, &(0x7f00000000c0)=0x20, 0x8) (async) 18:39:40 executing program 3: r0 = socket(0x2a, 0x1, 0x0) (async) r1 = syz_io_uring_setup(0x32c0, &(0x7f0000000000)={0x0, 0xbb89, 0x100, 0x1, 0x22b}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) fcntl$getown(r1, 0x9) setsockopt$MRT_DEL_VIF(r0, 0x0, 0xcb, 0x0, 0x0) 18:39:40 executing program 4: openat$pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x18040, 0x0) (async) r0 = signalfd(0xffffffffffffffff, 0x0, 0x0) close(r0) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f00000002c0)={0x38, r1, 0x100, 0x70bd27, 0x25dfdbfe, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x200}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x20}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x48004) (async) r2 = socket(0xa, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r2, 0x28, 0x2, 0x0, 0x0) r3 = syz_genetlink_get_family_id$batadv(&(0x7f00000001c0), r2) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r3, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24000041}, 0xc000) 18:39:40 executing program 1: socket(0xa, 0x1, 0x0) 18:39:40 executing program 5: r0 = socket(0xa, 0x1, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_FADVISE={0x18, 0x1e, 0x0, @fd_index=0x6, 0xfffffffffffffa61, 0x0, 0x5, 0x0, 0x1}, 0x401) dup3(0xffffffffffffffff, r0, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x6, 0x2, 0x0, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x84009422, &(0x7f0000000040)={0x0, 0x0, {}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) 18:39:40 executing program 0: r0 = socket(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00'}) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r2 = signalfd(0xffffffffffffffff, 0x0, 0x0) close(r2) (async) syz_genetlink_get_family_id$fou(&(0x7f00000000c0), r2) (async) getsockopt$bt_BT_DEFER_SETUP(r1, 0x112, 0x7, &(0x7f0000000040)=0x1, &(0x7f0000000080)=0x4) [ 728.820604][T16978] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 728.828407][T16978] R13: 00007ffe782f632f R14: 00007fb671f7e300 R15: 0000000000022000 [ 728.836314][T16978] 18:39:40 executing program 5: r0 = socket(0xa, 0x1, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_FADVISE={0x18, 0x1e, 0x0, @fd_index=0x6, 0xfffffffffffffa61, 0x0, 0x5, 0x0, 0x1}, 0x401) (async) dup3(0xffffffffffffffff, r0, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x6, 0x2, 0x0, 0x0) (async) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x84009422, &(0x7f0000000040)={0x0, 0x0, {}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) [ 728.906407][T17031] FAULT_INJECTION: forcing a failure. [ 728.906407][T17031] name failslab, interval 1, probability 0, space 0, times 0 [ 728.927764][T17031] CPU: 0 PID: 17031 Comm: syz-executor.2 Not tainted 5.15.74-syzkaller-04383-g7f2e600bf63a #0 [ 728.937925][T17031] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/11/2022 [ 728.947821][T17031] Call Trace: [ 728.950940][T17031] [ 728.953714][T17031] dump_stack_lvl+0x151/0x1b7 [ 728.958230][T17031] ? bfq_pos_tree_add_move+0x43e/0x43e [ 728.963617][T17031] dump_stack+0x15/0x17 [ 728.967697][T17031] should_fail+0x3c0/0x510 [ 728.972154][T17031] __should_failslab+0x9f/0xe0 [ 728.976749][T17031] should_failslab+0x9/0x20 [ 728.981170][T17031] kmem_cache_alloc+0x4f/0x2f0 [ 728.985775][T17031] ? anon_vma_clone+0xa1/0x4f0 [ 728.990723][T17031] anon_vma_clone+0xa1/0x4f0 [ 728.995237][T17031] anon_vma_fork+0x91/0x4f0 [ 728.999576][T17031] ? anon_vma_name+0x43/0x70 [ 729.004000][T17031] dup_mmap+0x750/0xea0 [ 729.007995][T17031] ? __delayed_free_task+0x20/0x20 [ 729.013053][T17031] ? mm_init+0x807/0x960 [ 729.017129][T17031] dup_mm+0x91/0x330 [ 729.020874][T17031] copy_mm+0x108/0x1b0 [ 729.024863][T17031] copy_process+0x1295/0x3250 [ 729.029551][T17031] ? proc_fail_nth_write+0x213/0x290 [ 729.034671][T17031] ? proc_fail_nth_read+0x220/0x220 [ 729.039709][T17031] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 729.044659][T17031] ? vfs_write+0x9af/0x1050 [ 729.048992][T17031] ? vmacache_update+0xb7/0x120 [ 729.053686][T17031] kernel_clone+0x22d/0x990 [ 729.058040][T17031] ? file_end_write+0x1b0/0x1b0 [ 729.062706][T17031] ? __kasan_check_write+0x14/0x20 [ 729.067653][T17031] ? create_io_thread+0x1e0/0x1e0 [ 729.072512][T17031] ? __mutex_lock_slowpath+0x10/0x10 [ 729.077648][T17031] __x64_sys_clone+0x289/0x310 [ 729.082236][T17031] ? __do_sys_vfork+0x130/0x130 [ 729.086922][T17031] ? debug_smp_processor_id+0x17/0x20 [ 729.092128][T17031] do_syscall_64+0x44/0xd0 [ 729.096467][T17031] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 729.102281][T17031] RIP: 0033:0x7fb67320a5a9 [ 729.106539][T17031] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 729.126152][T17031] RSP: 002b:00007fb671f7e118 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 729.134408][T17031] RAX: ffffffffffffffda RBX: 00007fb67332af80 RCX: 00007fb67320a5a9 [ 729.142477][T17031] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000010000000 18:39:40 executing program 2: syz_clone(0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 75) 18:39:40 executing program 3: r0 = socket(0x2a, 0x1, 0x0) r1 = syz_io_uring_setup(0x32c0, &(0x7f0000000000)={0x0, 0xbb89, 0x100, 0x1, 0x22b}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) fcntl$getown(r1, 0x9) setsockopt$MRT_DEL_VIF(r0, 0x0, 0xcb, 0x0, 0x0) socket(0x2a, 0x1, 0x0) (async) syz_io_uring_setup(0x32c0, &(0x7f0000000000)={0x0, 0xbb89, 0x100, 0x1, 0x22b}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) (async) fcntl$getown(r1, 0x9) (async) setsockopt$MRT_DEL_VIF(r0, 0x0, 0xcb, 0x0, 0x0) (async) 18:39:40 executing program 4: openat$pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x18040, 0x0) r0 = signalfd(0xffffffffffffffff, 0x0, 0x0) close(r0) (async) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f00000002c0)={0x38, r1, 0x100, 0x70bd27, 0x25dfdbfe, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x200}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x20}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x48004) r2 = socket(0xa, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r2, 0x28, 0x2, 0x0, 0x0) (async) r3 = syz_genetlink_get_family_id$batadv(&(0x7f00000001c0), r2) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r3, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24000041}, 0xc000) 18:39:40 executing program 5: r0 = socket(0xa, 0x1, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_FADVISE={0x18, 0x1e, 0x0, @fd_index=0x6, 0xfffffffffffffa61, 0x0, 0x5, 0x0, 0x1}, 0x401) dup3(0xffffffffffffffff, r0, 0x0) (async) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x6, 0x2, 0x0, 0x0) (async) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x84009422, &(0x7f0000000040)={0x0, 0x0, {}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) 18:39:40 executing program 1: socket(0xa, 0x1, 0x0) 18:39:40 executing program 0: r0 = socket(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00'}) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r2 = signalfd(0xffffffffffffffff, 0x0, 0x0) close(r2) syz_genetlink_get_family_id$fou(&(0x7f00000000c0), r2) getsockopt$bt_BT_DEFER_SETUP(r1, 0x112, 0x7, &(0x7f0000000040)=0x1, &(0x7f0000000080)=0x4) socket(0xa, 0x1, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00'}) (async) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) (async) signalfd(0xffffffffffffffff, 0x0, 0x0) (async) close(r2) (async) syz_genetlink_get_family_id$fou(&(0x7f00000000c0), r2) (async) getsockopt$bt_BT_DEFER_SETUP(r1, 0x112, 0x7, &(0x7f0000000040)=0x1, &(0x7f0000000080)=0x4) (async) 18:39:40 executing program 5: r0 = socket(0xa, 0x5, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x6, 0x2, 0x0, 0x0) 18:39:40 executing program 1: socket(0xa, 0x1, 0x0) socket(0xa, 0x1, 0x0) (async) 18:39:40 executing program 4: r0 = socket(0xa, 0x1, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3in6={0x18, 0x1, {0x0, r1, 0x1, 0x2, 0x1, 0xffffffff, {0xa, 0x4e24, 0x8, @dev={0xfe, 0x80, '\x00', 0xa}, 0x85}}}, 0x3a) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x28, 0x2, 0x0, 0x0) [ 729.150281][T17031] RBP: 00007fb671f7e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 729.158180][T17031] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 729.166001][T17031] R13: 00007ffe782f632f R14: 00007fb671f7e300 R15: 0000000000022000 [ 729.173808][T17031] 18:39:40 executing program 5: r0 = socket(0xa, 0x5, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x6, 0x2, 0x0, 0x0) 18:39:40 executing program 1: r0 = socket(0xa, 0x1, 0x0) signalfd4(r0, &(0x7f0000000000)={[0x200]}, 0x8, 0x80c00) r1 = fsmount(0xffffffffffffffff, 0x1, 0x2) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r1, 0x29, 0x2, 0x0, 0xfffffffffffffd6d) 18:39:40 executing program 0: r0 = socket(0xa, 0x1, 0x0) sendto$unix(r0, &(0x7f0000000040)="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", 0x1000, 0x1, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00'}) [ 729.211593][T17063] FAULT_INJECTION: forcing a failure. [ 729.211593][T17063] name failslab, interval 1, probability 0, space 0, times 0 [ 729.247447][T17063] CPU: 1 PID: 17063 Comm: syz-executor.2 Not tainted 5.15.74-syzkaller-04383-g7f2e600bf63a #0 [ 729.257521][T17063] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/11/2022 [ 729.267501][T17063] Call Trace: [ 729.270708][T17063] [ 729.273488][T17063] dump_stack_lvl+0x151/0x1b7 [ 729.278001][T17063] ? bfq_pos_tree_add_move+0x43e/0x43e [ 729.283299][T17063] dump_stack+0x15/0x17 [ 729.287287][T17063] should_fail+0x3c0/0x510 [ 729.291738][T17063] __should_failslab+0x9f/0xe0 [ 729.296503][T17063] should_failslab+0x9/0x20 [ 729.301114][T17063] kmem_cache_alloc+0x4f/0x2f0 [ 729.305799][T17063] ? anon_vma_clone+0xa1/0x4f0 [ 729.310402][T17063] anon_vma_clone+0xa1/0x4f0 [ 729.314825][T17063] anon_vma_fork+0x91/0x4f0 [ 729.319255][T17063] ? anon_vma_name+0x43/0x70 [ 729.323675][T17063] dup_mmap+0x750/0xea0 [ 729.327661][T17063] ? __delayed_free_task+0x20/0x20 [ 729.332611][T17063] ? mm_init+0x807/0x960 [ 729.336687][T17063] dup_mm+0x91/0x330 [ 729.340504][T17063] copy_mm+0x108/0x1b0 [ 729.344412][T17063] copy_process+0x1295/0x3250 [ 729.349138][T17063] ? proc_fail_nth_write+0x213/0x290 [ 729.354238][T17063] ? proc_fail_nth_read+0x220/0x220 [ 729.359369][T17063] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 729.364323][T17063] ? vfs_write+0x9af/0x1050 [ 729.368648][T17063] ? vmacache_update+0xb7/0x120 [ 729.373419][T17063] kernel_clone+0x22d/0x990 [ 729.377761][T17063] ? file_end_write+0x1b0/0x1b0 [ 729.382446][T17063] ? __kasan_check_write+0x14/0x20 [ 729.387481][T17063] ? create_io_thread+0x1e0/0x1e0 [ 729.392348][T17063] ? __mutex_lock_slowpath+0x10/0x10 [ 729.397460][T17063] __x64_sys_clone+0x289/0x310 [ 729.402072][T17063] ? __do_sys_vfork+0x130/0x130 [ 729.406758][T17063] ? debug_smp_processor_id+0x17/0x20 [ 729.412044][T17063] do_syscall_64+0x44/0xd0 [ 729.416296][T17063] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 729.422130][T17063] RIP: 0033:0x7fb67320a5a9 [ 729.426377][T17063] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 729.445900][T17063] RSP: 002b:00007fb671f7e118 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 729.454135][T17063] RAX: ffffffffffffffda RBX: 00007fb67332af80 RCX: 00007fb67320a5a9 18:39:40 executing program 2: syz_clone(0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 76) 18:39:40 executing program 1: r0 = socket(0xa, 0x1, 0x0) signalfd4(r0, &(0x7f0000000000)={[0x200]}, 0x8, 0x80c00) r1 = fsmount(0xffffffffffffffff, 0x1, 0x2) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r1, 0x29, 0x2, 0x0, 0xfffffffffffffd6d) socket(0xa, 0x1, 0x0) (async) signalfd4(r0, &(0x7f0000000000)={[0x200]}, 0x8, 0x80c00) (async) fsmount(0xffffffffffffffff, 0x1, 0x2) (async) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r1, 0x29, 0x2, 0x0, 0xfffffffffffffd6d) (async) 18:39:40 executing program 3: r0 = socket(0xa, 0x1, 0x0) fsopen(&(0x7f0000000040)='bdev\x00', 0x0) pread64(0xffffffffffffffff, &(0x7f0000000840)=""/233, 0xe9, 0x7fffffff) setsockopt$MRT_DEL_VIF(r0, 0x0, 0xcb, 0x0, 0x0) ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, &(0x7f0000000000)={0x0, 0x9, 0x5}) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000800), 0x490101, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000004, 0x10, r3, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x30, r2, 0x10000000) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000009c0)={'tunl0\x00', &(0x7f0000000980)=ANY=[@ANYRES64, @ANYRES32=0x0, @ANYRES16=r2, @ANYRES16=r3]}) ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, &(0x7f0000000400)={0x8, 0x5, {0x9c, @usage, 0x0, 0xffffffffffffffff, 0x9, 0x200, 0xffffffffffffff77, 0x7b, 0x489, @usage=0x6, 0x3c0dde9a, 0x6, [0x7, 0x80000001, 0x8, 0x7, 0x55, 0xb16e]}, {0x1, @usage=0x80000000, r1, 0x9, 0x80, 0x0, 0x2, 0x352, 0x10, @usage=0x200, 0x3, 0xfffffff7, [0x9, 0xffffffffffff0000, 0x4, 0x6, 0x7, 0x4]}, {0x7e, @usage=0x7, 0x0, 0x8, 0x2, 0x1e3c85b9, 0xc523, 0x80000001, 0x39, @struct={0x0, 0x8}, 0x80, 0x2, [0x8000000000000000, 0x7fff80000000000, 0x7f, 0x10dddc3, 0x0, 0xae]}, {0x3, 0x3ff, 0x5}}) 18:39:40 executing program 5: r0 = socket(0xa, 0x5, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x6, 0x2, 0x0, 0x0) 18:39:40 executing program 4: r0 = socket(0xa, 0x1, 0x0) (async) r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3in6={0x18, 0x1, {0x0, r1, 0x1, 0x2, 0x1, 0xffffffff, {0xa, 0x4e24, 0x8, @dev={0xfe, 0x80, '\x00', 0xa}, 0x85}}}, 0x3a) (async) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x28, 0x2, 0x0, 0x0) 18:39:40 executing program 0: r0 = socket(0xa, 0x1, 0x0) sendto$unix(r0, &(0x7f0000000040)="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", 0x1000, 0x1, 0x0, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00'}) 18:39:40 executing program 0: r0 = socket(0xa, 0x1, 0x0) sendto$unix(r0, &(0x7f0000000040)="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", 0x1000, 0x1, 0x0, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00'}) [ 729.462041][T17063] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000010000000 [ 729.469935][T17063] RBP: 00007fb671f7e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 729.477837][T17063] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 729.486000][T17063] R13: 00007ffe782f632f R14: 00007fb671f7e300 R15: 0000000000022000 [ 729.494598][T17063] 18:39:40 executing program 5: r0 = socket(0xa, 0x1, 0x0) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r0, 0x4018f50b, &(0x7f0000000000)={0x1, 0x400, 0x3}) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x6, 0x2, 0x0, 0x0) 18:39:40 executing program 4: r0 = socket(0xa, 0x1, 0x0) (async) r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3in6={0x18, 0x1, {0x0, r1, 0x1, 0x2, 0x1, 0xffffffff, {0xa, 0x4e24, 0x8, @dev={0xfe, 0x80, '\x00', 0xa}, 0x85}}}, 0x3a) (async) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x28, 0x2, 0x0, 0x0) 18:39:40 executing program 1: r0 = socket(0xa, 0x1, 0x0) signalfd4(r0, &(0x7f0000000000)={[0x200]}, 0x8, 0x80c00) r1 = fsmount(0xffffffffffffffff, 0x1, 0x2) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r1, 0x29, 0x2, 0x0, 0xfffffffffffffd6d) socket(0xa, 0x1, 0x0) (async) signalfd4(r0, &(0x7f0000000000)={[0x200]}, 0x8, 0x80c00) (async) fsmount(0xffffffffffffffff, 0x1, 0x2) (async) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r1, 0x29, 0x2, 0x0, 0xfffffffffffffd6d) (async) [ 729.530988][T17091] FAULT_INJECTION: forcing a failure. [ 729.530988][T17091] name failslab, interval 1, probability 0, space 0, times 0 [ 729.559250][T17091] CPU: 1 PID: 17091 Comm: syz-executor.2 Not tainted 5.15.74-syzkaller-04383-g7f2e600bf63a #0 [ 729.569331][T17091] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/11/2022 18:39:40 executing program 4: r0 = socket(0xa, 0x1, 0x0) setsockopt$MRT_DEL_VIF(r0, 0x0, 0xcb, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x2, 0x80, @vifc_lcl_ifindex, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000080)) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x28, 0x2, 0x0, 0x0) 18:39:40 executing program 3: r0 = socket(0xa, 0x1, 0x0) fsopen(&(0x7f0000000040)='bdev\x00', 0x0) (async) pread64(0xffffffffffffffff, &(0x7f0000000840)=""/233, 0xe9, 0x7fffffff) (async) setsockopt$MRT_DEL_VIF(r0, 0x0, 0xcb, 0x0, 0x0) (async) ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, &(0x7f0000000000)={0x0, 0x9, 0x5}) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000800), 0x490101, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000004, 0x10, r3, 0x0) (async) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x30, r2, 0x10000000) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000009c0)={'tunl0\x00', &(0x7f0000000980)=ANY=[@ANYRES64, @ANYRES32=0x0, @ANYRES16=r2, @ANYRES16=r3]}) (async) ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, &(0x7f0000000400)={0x8, 0x5, {0x9c, @usage, 0x0, 0xffffffffffffffff, 0x9, 0x200, 0xffffffffffffff77, 0x7b, 0x489, @usage=0x6, 0x3c0dde9a, 0x6, [0x7, 0x80000001, 0x8, 0x7, 0x55, 0xb16e]}, {0x1, @usage=0x80000000, r1, 0x9, 0x80, 0x0, 0x2, 0x352, 0x10, @usage=0x200, 0x3, 0xfffffff7, [0x9, 0xffffffffffff0000, 0x4, 0x6, 0x7, 0x4]}, {0x7e, @usage=0x7, 0x0, 0x8, 0x2, 0x1e3c85b9, 0xc523, 0x80000001, 0x39, @struct={0x0, 0x8}, 0x80, 0x2, [0x8000000000000000, 0x7fff80000000000, 0x7f, 0x10dddc3, 0x0, 0xae]}, {0x3, 0x3ff, 0x5}}) [ 729.579485][T17091] Call Trace: [ 729.582611][T17091] [ 729.585386][T17091] dump_stack_lvl+0x151/0x1b7 [ 729.589910][T17091] ? bfq_pos_tree_add_move+0x43e/0x43e [ 729.595195][T17091] ? vma_interval_tree_augment_rotate+0x210/0x210 [ 729.601527][T17091] dump_stack+0x15/0x17 [ 729.605519][T17091] should_fail+0x3c0/0x510 [ 729.609950][T17091] __should_failslab+0x9f/0xe0 [ 729.614543][T17091] should_failslab+0x9/0x20 [ 729.618883][T17091] kmem_cache_alloc+0x4f/0x2f0 [ 729.623485][T17091] ? anon_vma_fork+0xf7/0x4f0 [ 729.627998][T17091] anon_vma_fork+0xf7/0x4f0 [ 729.632338][T17091] ? anon_vma_name+0x43/0x70 [ 729.636852][T17091] dup_mmap+0x750/0xea0 [ 729.640846][T17091] ? __delayed_free_task+0x20/0x20 [ 729.645791][T17091] ? mm_init+0x807/0x960 [ 729.649868][T17091] dup_mm+0x91/0x330 [ 729.653606][T17091] copy_mm+0x108/0x1b0 [ 729.657510][T17091] copy_process+0x1295/0x3250 [ 729.662021][T17091] ? proc_fail_nth_write+0x213/0x290 [ 729.667226][T17091] ? proc_fail_nth_read+0x220/0x220 [ 729.672265][T17091] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 729.677383][T17091] ? vfs_write+0x9af/0x1050 [ 729.681722][T17091] ? vmacache_update+0xb7/0x120 [ 729.686409][T17091] kernel_clone+0x22d/0x990 [ 729.690754][T17091] ? file_end_write+0x1b0/0x1b0 [ 729.695442][T17091] ? __kasan_check_write+0x14/0x20 [ 729.700385][T17091] ? create_io_thread+0x1e0/0x1e0 [ 729.705244][T17091] ? __mutex_lock_slowpath+0x10/0x10 [ 729.710452][T17091] __x64_sys_clone+0x289/0x310 [ 729.715063][T17091] ? __do_sys_vfork+0x130/0x130 [ 729.719740][T17091] ? debug_smp_processor_id+0x17/0x20 [ 729.724944][T17091] do_syscall_64+0x44/0xd0 [ 729.729201][T17091] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 729.734930][T17091] RIP: 0033:0x7fb67320a5a9 [ 729.739182][T17091] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 729.758796][T17091] RSP: 002b:00007fb671f7e118 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 729.767911][T17091] RAX: ffffffffffffffda RBX: 00007fb67332af80 RCX: 00007fb67320a5a9 [ 729.775718][T17091] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000010000000 [ 729.783530][T17091] RBP: 00007fb671f7e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 729.791345][T17091] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 729.799157][T17091] R13: 00007ffe782f632f R14: 00007fb671f7e300 R15: 0000000000022000 [ 729.807146][T17091] [ 729.810323][T17091] ================================================================== [ 729.818204][T17091] BUG: KASAN: use-after-free in vm_area_free+0x7e/0x230 [ 729.825008][T17091] Write of size 4 at addr ffff888113421870 by task syz-executor.2/17091 [ 729.833131][T17091] [ 729.835295][T17091] CPU: 0 PID: 17091 Comm: syz-executor.2 Not tainted 5.15.74-syzkaller-04383-g7f2e600bf63a #0 [ 729.845368][T17091] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/11/2022 [ 729.855484][T17091] Call Trace: [ 729.858607][T17091] [ 729.861388][T17091] dump_stack_lvl+0x151/0x1b7 [ 729.865896][T17091] ? bfq_pos_tree_add_move+0x43e/0x43e [ 729.871195][T17091] ? panic+0x727/0x727 [ 729.875099][T17091] ? slab_free_freelist_hook+0xc9/0x1a0 [ 729.880480][T17091] print_address_description+0x87/0x3d0 [ 729.885866][T17091] kasan_report+0x1a6/0x1f0 [ 729.890210][T17091] ? vm_area_free+0x7e/0x230 [ 729.894745][T17091] ? vm_area_free+0x7e/0x230 [ 729.899180][T17091] kasan_check_range+0x2aa/0x2e0 [ 729.903944][T17091] __kasan_check_write+0x14/0x20 [ 729.908719][T17091] vm_area_free+0x7e/0x230 [ 729.912971][T17091] dup_mmap+0xbcd/0xea0 [ 729.916964][T17091] ? __delayed_free_task+0x20/0x20 [ 729.921925][T17091] ? mm_init+0x807/0x960 [ 729.925990][T17091] dup_mm+0x91/0x330 [ 729.929721][T17091] copy_mm+0x108/0x1b0 [ 729.933633][T17091] copy_process+0x1295/0x3250 [ 729.938151][T17091] ? proc_fail_nth_write+0x213/0x290 [ 729.943262][T17091] ? proc_fail_nth_read+0x220/0x220 [ 729.948296][T17091] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 729.953245][T17091] ? vfs_write+0x9af/0x1050 [ 729.957583][T17091] ? vmacache_update+0xb7/0x120 [ 729.962357][T17091] kernel_clone+0x22d/0x990 [ 729.966696][T17091] ? file_end_write+0x1b0/0x1b0 [ 729.971469][T17091] ? __kasan_check_write+0x14/0x20 [ 729.976419][T17091] ? create_io_thread+0x1e0/0x1e0 [ 729.981368][T17091] ? __mutex_lock_slowpath+0x10/0x10 [ 729.986666][T17091] __x64_sys_clone+0x289/0x310 [ 729.991264][T17091] ? __do_sys_vfork+0x130/0x130 [ 729.995948][T17091] ? debug_smp_processor_id+0x17/0x20 [ 730.001156][T17091] do_syscall_64+0x44/0xd0 [ 730.005406][T17091] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 730.011195][T17091] RIP: 0033:0x7fb67320a5a9 [ 730.015388][T17091] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 730.034829][T17091] RSP: 002b:00007fb671f7e118 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 730.043077][T17091] RAX: ffffffffffffffda RBX: 00007fb67332af80 RCX: 00007fb67320a5a9 [ 730.050890][T17091] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000010000000 [ 730.058696][T17091] RBP: 00007fb671f7e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 730.066508][T17091] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 730.074328][T17091] R13: 00007ffe782f632f R14: 00007fb671f7e300 R15: 0000000000022000 [ 730.082134][T17091] [ 730.085017][T17091] [ 730.087175][T17091] Allocated by task 17063: [ 730.091419][T17091] __kasan_slab_alloc+0xb2/0xe0 [ 730.096116][T17091] kmem_cache_alloc+0x189/0x2f0 [ 730.100796][T17091] vm_area_dup+0x26/0x1d0 [ 730.105163][T17091] dup_mmap+0x6b8/0xea0 [ 730.109156][T17091] dup_mm+0x91/0x330 [ 730.112905][T17091] copy_mm+0x108/0x1b0 [ 730.116791][T17091] copy_process+0x1295/0x3250 [ 730.121307][T17091] kernel_clone+0x22d/0x990 [ 730.125654][T17091] __x64_sys_clone+0x289/0x310 [ 730.130251][T17091] do_syscall_64+0x44/0xd0 [ 730.134508][T17091] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 730.140228][T17091] [ 730.142398][T17091] Freed by task 17074: [ 730.146419][T17091] kasan_set_track+0x4c/0x70 [ 730.150841][T17091] kasan_set_free_info+0x23/0x40 [ 730.155613][T17091] ____kasan_slab_free+0x126/0x160 [ 730.160568][T17091] __kasan_slab_free+0x11/0x20 [ 730.165169][T17091] slab_free_freelist_hook+0xc9/0x1a0 [ 730.170406][T17091] kmem_cache_free+0x11a/0x2e0 [ 730.174994][T17091] vm_area_free+0x1ae/0x230 [ 730.179317][T17091] exit_mmap+0x5dd/0x7a0 [ 730.183481][T17091] __mmput+0x95/0x300 [ 730.187491][T17091] mmput+0x50/0x60 [ 730.191040][T17091] exit_mm+0x50d/0x760 [ 730.195001][T17091] do_exit+0x63c/0x24d0 [ 730.198937][T17091] __ia32_sys_exit+0x0/0x40 [ 730.203372][T17091] do_syscall_64+0x44/0xd0 [ 730.207982][T17091] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 730.213710][T17091] [ 730.215871][T17091] The buggy address belongs to the object at ffff888113421818 [ 730.215871][T17091] which belongs to the cache vm_area_struct of size 232 [ 730.230885][T17091] The buggy address is located 88 bytes inside of [ 730.230885][T17091] 232-byte region [ffff888113421818, ffff888113421900) [ 730.243905][T17091] The buggy address belongs to the page: [ 730.249372][T17091] page:ffffea00044d0840 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x113421 [ 730.259437][T17091] flags: 0x4000000000000200(slab|zone=1) [ 730.264910][T17091] raw: 4000000000000200 dead000000000100 dead000000000122 ffff888100274000 [ 730.273328][T17091] raw: 0000000000000000 00000000000d000d 00000001ffffffff 0000000000000000 [ 730.281743][T17091] page dumped because: kasan: bad access detected [ 730.287995][T17091] page_owner tracks the page as allocated [ 730.293547][T17091] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x112cc0(GFP_USER|__GFP_NOWARN|__GFP_NORETRY), pid 4232, ts 154821922287, free_ts 154813367301 [ 730.309517][T17091] post_alloc_hook+0x1ab/0x1b0 [ 730.314213][T17091] get_page_from_freelist+0x38b/0x400 [ 730.319502][T17091] __alloc_pages+0x3a8/0x7c0 [ 730.323928][T17091] allocate_slab+0x62/0x580 [ 730.328271][T17091] ___slab_alloc+0x2e2/0x6f0 [ 730.332689][T17091] __slab_alloc+0x4a/0x90 [ 730.336856][T17091] kmem_cache_alloc+0x205/0x2f0 [ 730.341632][T17091] vm_area_dup+0x26/0x1d0 [ 730.345959][T17091] dup_mmap+0x6b8/0xea0 [ 730.349952][T17091] dup_mm+0x91/0x330 [ 730.353681][T17091] copy_mm+0x108/0x1b0 [ 730.357589][T17091] copy_process+0x1295/0x3250 [ 730.362108][T17091] kernel_clone+0x22d/0x990 [ 730.366444][T17091] __x64_sys_clone+0x289/0x310 [ 730.371126][T17091] do_syscall_64+0x44/0xd0 [ 730.375384][T17091] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 730.381199][T17091] page last free stack trace: [ 730.385712][T17091] free_pcp_prepare+0x448/0x450 [ 730.390402][T17091] free_unref_page_list+0x16a/0xad0 [ 730.395602][T17091] release_pages+0xf3e/0xf90 [ 730.400029][T17091] free_pages_and_swap_cache+0x97/0xb0 [ 730.405412][T17091] tlb_flush_mmu+0x860/0xa00 [ 730.409840][T17091] tlb_finish_mmu+0xd2/0x1f0 [ 730.414274][T17091] exit_mmap+0x46e/0x7a0 [ 730.418344][T17091] __mmput+0x95/0x300 [ 730.422163][T17091] mmput+0x50/0x60 [ 730.425815][T17091] exit_mm+0x50d/0x760 [ 730.429718][T17091] do_exit+0x63c/0x24d0 [ 730.433712][T17091] do_group_exit+0x13a/0x300 [ 730.438140][T17091] get_signal+0x77e/0x1600 [ 730.442391][T17091] arch_do_signal_or_restart+0x9f/0x670 [ 730.447967][T17091] exit_to_user_mode_loop+0xd4/0x110 [ 730.453070][T17091] syscall_exit_to_user_mode+0x79/0xc0 [ 730.458457][T17091] [ 730.460626][T17091] Memory state around the buggy address: [ 730.466186][T17091] ffff888113421700: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 730.474084][T17091] ffff888113421780: fb fb fb fb fb fb fb fb fb fb fb fc fc fc fc fc 18:39:41 executing program 2: syz_clone(0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 77) 18:39:41 executing program 4: r0 = socket(0xa, 0x1, 0x0) setsockopt$MRT_DEL_VIF(r0, 0x0, 0xcb, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x2, 0x80, @vifc_lcl_ifindex, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000080)) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x28, 0x2, 0x0, 0x0) 18:39:41 executing program 5: r0 = socket(0xa, 0x1, 0x0) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r0, 0x4018f50b, &(0x7f0000000000)={0x1, 0x400, 0x3}) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x6, 0x2, 0x0, 0x0) 18:39:41 executing program 1: r0 = socket(0x10, 0x1, 0x1000200) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x29, 0x2, 0x0, 0x0) 18:39:41 executing program 3: r0 = socket(0xa, 0x1, 0x0) fsopen(&(0x7f0000000040)='bdev\x00', 0x0) (async) pread64(0xffffffffffffffff, &(0x7f0000000840)=""/233, 0xe9, 0x7fffffff) (async) setsockopt$MRT_DEL_VIF(r0, 0x0, 0xcb, 0x0, 0x0) ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, &(0x7f0000000000)={0x0, 0x9, 0x5}) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000800), 0x490101, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000004, 0x10, r3, 0x0) (async) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x30, r2, 0x10000000) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000009c0)={'tunl0\x00', &(0x7f0000000980)=ANY=[@ANYRES64, @ANYRES32=0x0, @ANYRES16=r2, @ANYRES16=r3]}) ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, &(0x7f0000000400)={0x8, 0x5, {0x9c, @usage, 0x0, 0xffffffffffffffff, 0x9, 0x200, 0xffffffffffffff77, 0x7b, 0x489, @usage=0x6, 0x3c0dde9a, 0x6, [0x7, 0x80000001, 0x8, 0x7, 0x55, 0xb16e]}, {0x1, @usage=0x80000000, r1, 0x9, 0x80, 0x0, 0x2, 0x352, 0x10, @usage=0x200, 0x3, 0xfffffff7, [0x9, 0xffffffffffff0000, 0x4, 0x6, 0x7, 0x4]}, {0x7e, @usage=0x7, 0x0, 0x8, 0x2, 0x1e3c85b9, 0xc523, 0x80000001, 0x39, @struct={0x0, 0x8}, 0x80, 0x2, [0x8000000000000000, 0x7fff80000000000, 0x7f, 0x10dddc3, 0x0, 0xae]}, {0x3, 0x3ff, 0x5}}) 18:39:41 executing program 0: socket(0xa, 0x1, 0x0) 18:39:41 executing program 0: socket(0xa, 0x1, 0x0) 18:39:41 executing program 5: r0 = socket(0xa, 0x1, 0x0) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r0, 0x4018f50b, &(0x7f0000000000)={0x1, 0x400, 0x3}) (async) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x6, 0x2, 0x0, 0x0) 18:39:41 executing program 4: r0 = socket(0xa, 0x1, 0x0) setsockopt$MRT_DEL_VIF(r0, 0x0, 0xcb, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x2, 0x80, @vifc_lcl_ifindex, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000080)) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x28, 0x2, 0x0, 0x0) socket(0xa, 0x1, 0x0) (async) setsockopt$MRT_DEL_VIF(r0, 0x0, 0xcb, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x2, 0x80, @vifc_lcl_ifindex, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000080)) (async) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x28, 0x2, 0x0, 0x0) (async) 18:39:41 executing program 3: r0 = socket(0x2, 0x3, 0x7) r1 = syz_genetlink_get_family_id$fou(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$FOU_CMD_GET(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x6c, r1, 0x10, 0x70bd2d, 0x25dfdbfc, {}, [@FOU_ATTR_LOCAL_V6={0x14, 0x7, @dev={0xfe, 0x80, '\x00', 0x16}}, @FOU_ATTR_PEER_V6={0x14, 0x9, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_IFINDEX={0x8}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @dev={0xfe, 0x80, '\x00', 0x10}}, @FOU_ATTR_IFINDEX={0x8}, @FOU_ATTR_TYPE={0x5, 0x4, 0x5}]}, 0x6c}, 0x1, 0x0, 0x0, 0x10}, 0xc000) r2 = socket(0x28, 0x1, 0x0) setsockopt$MRT_DEL_VIF(r2, 0x0, 0xcb, 0x0, 0x0) r3 = syz_open_dev$vcsn(&(0x7f0000000000), 0x80, 0x4100) r4 = signalfd(0xffffffffffffffff, 0x0, 0x0) close(r4) setsockopt$MRT_DEL_VIF(r4, 0x0, 0xcb, &(0x7f0000000040)={0x8000, 0x1, 0x1, 0x20000005, @vifc_lcl_addr=@initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast}, 0x10) ioctl$ASHMEM_GET_SIZE(r3, 0x7704, 0x0) [ 730.481986][T17091] >ffff888113421800: fc fc fc fa fb fb fb fb fb fb fb fb fb fb fb fb [ 730.489888][T17091] ^ [ 730.497460][T17091] ffff888113421880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 730.505335][T17091] ffff888113421900: fc fc fc fc fc fc fc fc fa fb fb fb fb fb fb fb [ 730.513224][T17091] ================================================================== [ 730.521124][T17091] Disabling lock debugging due to kernel taint 18:39:41 executing program 1: r0 = socket(0x10, 0x1, 0x1000200) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x29, 0x2, 0x0, 0x0) socket(0x10, 0x1, 0x1000200) (async) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x29, 0x2, 0x0, 0x0) (async) 18:39:41 executing program 5: r0 = socket(0xa, 0x4, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000004, 0x10, r1, 0x0) ioctl$FIBMAP(r1, 0x1, &(0x7f0000000000)) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x6, 0x2, 0x0, 0x0) [ 730.592342][T17143] FAULT_INJECTION: forcing a failure. [ 730.592342][T17143] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 730.605678][T17143] CPU: 1 PID: 17143 Comm: syz-executor.2 Tainted: G B 5.15.74-syzkaller-04383-g7f2e600bf63a #0 [ 730.617313][T17143] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/11/2022 [ 730.627368][T17143] Call Trace: [ 730.630492][T17143] [ 730.633278][T17143] dump_stack_lvl+0x151/0x1b7 [ 730.637868][T17143] ? bfq_pos_tree_add_move+0x43e/0x43e [ 730.643170][T17143] dump_stack+0x15/0x17 [ 730.647156][T17143] should_fail+0x3c0/0x510 [ 730.652018][T17143] should_fail_alloc_page+0x58/0x70 [ 730.657136][T17143] __alloc_pages+0x1de/0x7c0 [ 730.661565][T17143] ? __count_vm_events+0x30/0x30 [ 730.666337][T17143] pte_alloc_one+0x73/0x1b0 [ 730.670679][T17143] ? pfn_modify_allowed+0x2e0/0x2e0 [ 730.675709][T17143] __pte_alloc+0x86/0x350 [ 730.679876][T17143] ? free_pgtables+0x210/0x210 [ 730.684508][T17143] ? _raw_spin_lock+0xa3/0x1b0 [ 730.689076][T17143] ? _raw_spin_trylock_bh+0x1d0/0x1d0 [ 730.694290][T17143] ? unwind_get_return_address+0x4c/0x90 [ 730.699752][T17143] copy_pte_range+0x1b1f/0x20b0 [ 730.704529][T17143] ? stack_trace_save+0x12d/0x1f0 [ 730.709471][T17143] ? anon_vma_clone+0xa1/0x4f0 [ 730.714073][T17143] ? __kunmap_atomic+0x80/0x80 [ 730.718670][T17143] ? dup_mmap+0x750/0xea0 [ 730.722836][T17143] ? copy_mm+0x108/0x1b0 [ 730.726916][T17143] ? copy_process+0x1295/0x3250 [ 730.731603][T17143] ? kernel_clone+0x22d/0x990 [ 730.736117][T17143] ? __x64_sys_clone+0x289/0x310 [ 730.740891][T17143] ? do_syscall_64+0x44/0xd0 [ 730.745316][T17143] ? entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 730.751236][T17143] copy_page_range+0xc1e/0x1090 [ 730.755913][T17143] ? pfn_valid+0x1e0/0x1e0 [ 730.760161][T17143] dup_mmap+0x99f/0xea0 [ 730.764152][T17143] ? __delayed_free_task+0x20/0x20 [ 730.769104][T17143] ? mm_init+0x807/0x960 [ 730.773191][T17143] dup_mm+0x91/0x330 [ 730.776935][T17143] copy_mm+0x108/0x1b0 [ 730.780817][T17143] copy_process+0x1295/0x3250 [ 730.785339][T17143] ? proc_fail_nth_write+0x213/0x290 [ 730.790464][T17143] ? proc_fail_nth_read+0x220/0x220 [ 730.795485][T17143] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 730.800431][T17143] ? vfs_write+0x9af/0x1050 [ 730.804774][T17143] ? vmacache_update+0xb7/0x120 [ 730.809460][T17143] kernel_clone+0x22d/0x990 [ 730.813803][T17143] ? file_end_write+0x1b0/0x1b0 [ 730.818483][T17143] ? __kasan_check_write+0x14/0x20 [ 730.823431][T17143] ? create_io_thread+0x1e0/0x1e0 [ 730.828400][T17143] ? __mutex_lock_slowpath+0x10/0x10 [ 730.833520][T17143] __x64_sys_clone+0x289/0x310 [ 730.838120][T17143] ? __do_sys_vfork+0x130/0x130 [ 730.842807][T17143] ? debug_smp_processor_id+0x17/0x20 [ 730.848108][T17143] do_syscall_64+0x44/0xd0 [ 730.852355][T17143] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 730.858260][T17143] RIP: 0033:0x7fb67320a5a9 [ 730.862513][T17143] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 730.882132][T17143] RSP: 002b:00007fb671f7e118 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 18:39:42 executing program 2: syz_clone(0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 78) 18:39:42 executing program 4: socket(0x5, 0x1, 0x3) r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x16, 0x105000) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000040)={0x2000, 0x720a, 0x5, 0x1, 0x7f, 0x101}) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) signalfd(r1, &(0x7f00000000c0)={[0x7]}, 0x8) epoll_create(0x806) r2 = socket$inet_udp(0x2, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000002, 0x4010, r2, 0x0) fcntl$F_GET_FILE_RW_HINT(r2, 0x40d, &(0x7f0000000080)) 18:39:42 executing program 3: r0 = socket(0x2, 0x3, 0x7) r1 = syz_genetlink_get_family_id$fou(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$FOU_CMD_GET(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x6c, r1, 0x10, 0x70bd2d, 0x25dfdbfc, {}, [@FOU_ATTR_LOCAL_V6={0x14, 0x7, @dev={0xfe, 0x80, '\x00', 0x16}}, @FOU_ATTR_PEER_V6={0x14, 0x9, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_IFINDEX={0x8}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @dev={0xfe, 0x80, '\x00', 0x10}}, @FOU_ATTR_IFINDEX={0x8}, @FOU_ATTR_TYPE={0x5, 0x4, 0x5}]}, 0x6c}, 0x1, 0x0, 0x0, 0x10}, 0xc000) (async) r2 = socket(0x28, 0x1, 0x0) setsockopt$MRT_DEL_VIF(r2, 0x0, 0xcb, 0x0, 0x0) (async) r3 = syz_open_dev$vcsn(&(0x7f0000000000), 0x80, 0x4100) r4 = signalfd(0xffffffffffffffff, 0x0, 0x0) close(r4) setsockopt$MRT_DEL_VIF(r4, 0x0, 0xcb, &(0x7f0000000040)={0x8000, 0x1, 0x1, 0x20000005, @vifc_lcl_addr=@initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast}, 0x10) ioctl$ASHMEM_GET_SIZE(r3, 0x7704, 0x0) 18:39:42 executing program 0: socket(0xa, 0x1, 0x0) socket(0xa, 0x1, 0x0) (async) 18:39:42 executing program 5: r0 = socket(0xa, 0x4, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000004, 0x10, r1, 0x0) ioctl$FIBMAP(r1, 0x1, &(0x7f0000000000)) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x6, 0x2, 0x0, 0x0) socket(0xa, 0x4, 0x0) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000004, 0x10, r1, 0x0) (async) ioctl$FIBMAP(r1, 0x1, &(0x7f0000000000)) (async) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x6, 0x2, 0x0, 0x0) (async) 18:39:42 executing program 1: r0 = socket(0x10, 0x1, 0x1000200) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x29, 0x2, 0x0, 0x0) socket(0x10, 0x1, 0x1000200) (async) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x29, 0x2, 0x0, 0x0) (async) 18:39:42 executing program 3: r0 = socket(0x2, 0x3, 0x7) r1 = syz_genetlink_get_family_id$fou(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$FOU_CMD_GET(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x6c, r1, 0x10, 0x70bd2d, 0x25dfdbfc, {}, [@FOU_ATTR_LOCAL_V6={0x14, 0x7, @dev={0xfe, 0x80, '\x00', 0x16}}, @FOU_ATTR_PEER_V6={0x14, 0x9, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_IFINDEX={0x8}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @dev={0xfe, 0x80, '\x00', 0x10}}, @FOU_ATTR_IFINDEX={0x8}, @FOU_ATTR_TYPE={0x5, 0x4, 0x5}]}, 0x6c}, 0x1, 0x0, 0x0, 0x10}, 0xc000) r2 = socket(0x28, 0x1, 0x0) setsockopt$MRT_DEL_VIF(r2, 0x0, 0xcb, 0x0, 0x0) r3 = syz_open_dev$vcsn(&(0x7f0000000000), 0x80, 0x4100) r4 = signalfd(0xffffffffffffffff, 0x0, 0x0) close(r4) setsockopt$MRT_DEL_VIF(r4, 0x0, 0xcb, &(0x7f0000000040)={0x8000, 0x1, 0x1, 0x20000005, @vifc_lcl_addr=@initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast}, 0x10) ioctl$ASHMEM_GET_SIZE(r3, 0x7704, 0x0) socket(0x2, 0x3, 0x7) (async) syz_genetlink_get_family_id$fou(&(0x7f00000000c0), 0xffffffffffffffff) (async) sendmsg$FOU_CMD_GET(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x6c, r1, 0x10, 0x70bd2d, 0x25dfdbfc, {}, [@FOU_ATTR_LOCAL_V6={0x14, 0x7, @dev={0xfe, 0x80, '\x00', 0x16}}, @FOU_ATTR_PEER_V6={0x14, 0x9, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_IFINDEX={0x8}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @dev={0xfe, 0x80, '\x00', 0x10}}, @FOU_ATTR_IFINDEX={0x8}, @FOU_ATTR_TYPE={0x5, 0x4, 0x5}]}, 0x6c}, 0x1, 0x0, 0x0, 0x10}, 0xc000) (async) socket(0x28, 0x1, 0x0) (async) setsockopt$MRT_DEL_VIF(r2, 0x0, 0xcb, 0x0, 0x0) (async) syz_open_dev$vcsn(&(0x7f0000000000), 0x80, 0x4100) (async) signalfd(0xffffffffffffffff, 0x0, 0x0) (async) close(r4) (async) setsockopt$MRT_DEL_VIF(r4, 0x0, 0xcb, &(0x7f0000000040)={0x8000, 0x1, 0x1, 0x20000005, @vifc_lcl_addr=@initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast}, 0x10) (async) ioctl$ASHMEM_GET_SIZE(r3, 0x7704, 0x0) (async) 18:39:42 executing program 4: socket(0x5, 0x1, 0x3) (async) r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x16, 0x105000) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000040)={0x2000, 0x720a, 0x5, 0x1, 0x7f, 0x101}) (async) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) signalfd(r1, &(0x7f00000000c0)={[0x7]}, 0x8) epoll_create(0x806) (async) r2 = socket$inet_udp(0x2, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000002, 0x4010, r2, 0x0) (async) fcntl$F_GET_FILE_RW_HINT(r2, 0x40d, &(0x7f0000000080)) 18:39:42 executing program 0: r0 = socket(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00'}) r1 = signalfd(0xffffffffffffffff, 0x0, 0x0) close(r1) connect$vsock_stream(r0, &(0x7f00000000c0)={0x28, 0x0, 0x0, @host}, 0x10) setsockopt$MRT_ADD_MFC(r1, 0x0, 0xcc, &(0x7f0000000080)={@loopback, @local, 0x0, "ab31b5034f27788202ab96060e3d49cef845724e3aabb84c8d89c33d26cceca2", 0x6, 0x3, 0x5, 0x1}, 0x3c) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040), 0x101000, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000004, 0x10, r3, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x40010, r4, 0x0) pidfd_getfd(r2, r3, 0x0) 18:39:42 executing program 1: r0 = socket(0xa, 0x1, 0x9) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x29, 0x2, 0x0, 0x0) [ 730.890372][T17143] RAX: ffffffffffffffda RBX: 00007fb67332af80 RCX: 00007fb67320a5a9 [ 730.898182][T17143] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000010000000 [ 730.906015][T17143] RBP: 00007fb671f7e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 730.913819][T17143] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 730.921622][T17143] R13: 00007ffe782f632f R14: 00007fb671f7e300 R15: 0000000000022000 [ 730.929431][T17143] 18:39:42 executing program 5: r0 = socket(0xa, 0x4, 0x0) (async) r1 = socket$inet_udp(0x2, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000004, 0x10, r1, 0x0) ioctl$FIBMAP(r1, 0x1, &(0x7f0000000000)) (async) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x6, 0x2, 0x0, 0x0) 18:39:42 executing program 0: r0 = socket(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00'}) r1 = signalfd(0xffffffffffffffff, 0x0, 0x0) close(r1) (async) connect$vsock_stream(r0, &(0x7f00000000c0)={0x28, 0x0, 0x0, @host}, 0x10) setsockopt$MRT_ADD_MFC(r1, 0x0, 0xcc, &(0x7f0000000080)={@loopback, @local, 0x0, "ab31b5034f27788202ab96060e3d49cef845724e3aabb84c8d89c33d26cceca2", 0x6, 0x3, 0x5, 0x1}, 0x3c) (async) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040), 0x101000, 0x0) (async) r3 = socket$inet_udp(0x2, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000004, 0x10, r3, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x40010, r4, 0x0) pidfd_getfd(r2, r3, 0x0) [ 730.987363][T17167] FAULT_INJECTION: forcing a failure. [ 730.987363][T17167] name failslab, interval 1, probability 0, space 0, times 0 [ 731.006245][T17167] CPU: 0 PID: 17167 Comm: syz-executor.2 Tainted: G B 5.15.74-syzkaller-04383-g7f2e600bf63a #0 [ 731.017804][T17167] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/11/2022 [ 731.027686][T17167] Call Trace: [ 731.030804][T17167] [ 731.033590][T17167] dump_stack_lvl+0x151/0x1b7 [ 731.038099][T17167] ? bfq_pos_tree_add_move+0x43e/0x43e [ 731.043392][T17167] dump_stack+0x15/0x17 [ 731.047388][T17167] should_fail+0x3c0/0x510 [ 731.051726][T17167] __should_failslab+0x9f/0xe0 [ 731.056330][T17167] should_failslab+0x9/0x20 [ 731.060662][T17167] kmem_cache_alloc+0x4f/0x2f0 [ 731.065264][T17167] ? anon_vma_fork+0x1b9/0x4f0 [ 731.069864][T17167] anon_vma_fork+0x1b9/0x4f0 [ 731.074289][T17167] dup_mmap+0x750/0xea0 [ 731.078287][T17167] ? __delayed_free_task+0x20/0x20 [ 731.083229][T17167] ? mm_init+0x807/0x960 [ 731.087313][T17167] dup_mm+0x91/0x330 [ 731.091136][T17167] copy_mm+0x108/0x1b0 [ 731.095038][T17167] copy_process+0x1295/0x3250 [ 731.099547][T17167] ? proc_fail_nth_write+0x213/0x290 [ 731.104673][T17167] ? proc_fail_nth_read+0x220/0x220 [ 731.109791][T17167] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 731.114737][T17167] ? vfs_write+0x9af/0x1050 [ 731.119074][T17167] ? vmacache_update+0xb7/0x120 [ 731.123765][T17167] kernel_clone+0x22d/0x990 [ 731.128200][T17167] ? file_end_write+0x1b0/0x1b0 [ 731.132880][T17167] ? __kasan_check_write+0x14/0x20 [ 731.137827][T17167] ? create_io_thread+0x1e0/0x1e0 [ 731.142685][T17167] ? __mutex_lock_slowpath+0x10/0x10 [ 731.147813][T17167] __x64_sys_clone+0x289/0x310 [ 731.152580][T17167] ? __do_sys_vfork+0x130/0x130 [ 731.157271][T17167] ? debug_smp_processor_id+0x17/0x20 [ 731.162485][T17167] do_syscall_64+0x44/0xd0 [ 731.166733][T17167] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 731.172454][T17167] RIP: 0033:0x7fb67320a5a9 [ 731.176805][T17167] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 731.196249][T17167] RSP: 002b:00007fb671f7e118 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 731.204643][T17167] RAX: ffffffffffffffda RBX: 00007fb67332af80 RCX: 00007fb67320a5a9 [ 731.212454][T17167] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000010000000 [ 731.220267][T17167] RBP: 00007fb671f7e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 731.228074][T17167] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 18:39:42 executing program 2: syz_clone(0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 79) 18:39:42 executing program 1: r0 = socket(0xa, 0x1, 0x9) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x29, 0x2, 0x0, 0x0) socket(0xa, 0x1, 0x9) (async) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x29, 0x2, 0x0, 0x0) (async) 18:39:42 executing program 4: socket(0x5, 0x1, 0x3) r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x16, 0x105000) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000040)={0x2000, 0x720a, 0x5, 0x1, 0x7f, 0x101}) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) signalfd(r1, &(0x7f00000000c0)={[0x7]}, 0x8) epoll_create(0x806) r2 = socket$inet_udp(0x2, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000002, 0x4010, r2, 0x0) fcntl$F_GET_FILE_RW_HINT(r2, 0x40d, &(0x7f0000000080)) socket(0x5, 0x1, 0x3) (async) syz_open_dev$vcsn(&(0x7f0000000000), 0x16, 0x105000) (async) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000040)={0x2000, 0x720a, 0x5, 0x1, 0x7f, 0x101}) (async) socket$inet6_udplite(0xa, 0x2, 0x88) (async) signalfd(r1, &(0x7f00000000c0)={[0x7]}, 0x8) (async) epoll_create(0x806) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000002, 0x4010, r2, 0x0) (async) fcntl$F_GET_FILE_RW_HINT(r2, 0x40d, &(0x7f0000000080)) (async) 18:39:42 executing program 5: r0 = socket(0xa, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x6, 0x2, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001280)=@IORING_OP_WRITEV={0x2, 0x10, 0x0, @fd=r0, 0x100, &(0x7f0000001240)=[{&(0x7f0000000000)="06d5c9b78f4e9d827b17656beb5374cad216c31927a33f9895d1fa7386a89e2df94a55bc8b20aef2b6cc5c6da49b951e2218235b74cdaeb13efcd638063c9d5dcca334ccff887222ab5a201eb79f167181a127e8b2a6515cad6a1af21e9ec2c941b6192c707d917541bf8489715a01feaa7ff6907b3b43994b52a37079436fd09b17a9e1d7e2c4d796328631e466ec6d1dc8bb067bec52812baede87a6cd69d0192c3ba6b3d2edb87ba0a887ece4ecbdf0cab7d9e3243b0601f37e94171b66313e4e6f05e54c1ac01b9dfaa441df7c25cbf2894de3b73ac8fa27e592ac4225ee387f0374aaea063345db949a9f80b35366f53b83d7171256", 0xf8}, {&(0x7f0000000100)="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", 0x1000}, {&(0x7f0000001100)="810635647d598e7774a145d0f9df0296666cd6c5b2d12be294443211b6b4f62fabffb7583410ab1c37573b1dc55b3440d6ad0c3b71557f3a9e6f8b8db0f80c377ed80aafa21806321ff6ee7a2d9f19c6ab156702fc0a9f8e442671efa7b1768b97e90ead57544bc6318358d9c3443c96b9de3631907ae003fa1dae1bbd5b836b1f732c00fa38", 0x86}, {&(0x7f00000011c0)="b4388e26141e23ef437a1c6d6b00a0fd42f9f07f18d71ad9f7ccac65e6817f6e2b2132a158a2cf0906de50af4e9226a116508752212cfe5fa7bd9de31c146f96dc663cb5470e05e98c0b72013e3604b20e9579e3cc7c22fb6b59f7f586ec274293401aff26ef1bce0d63a52471b8246f58066f", 0x73}], 0x4, 0x2, 0x0, {0x2}}, 0x6e1) 18:39:42 executing program 3: r0 = socket(0xa, 0x1, 0x0) pipe(&(0x7f0000000000)) setsockopt$MRT_DEL_VIF(r0, 0x0, 0xcb, 0x0, 0x0) 18:39:42 executing program 0: r0 = socket(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00'}) r1 = signalfd(0xffffffffffffffff, 0x0, 0x0) close(r1) (async, rerun: 64) connect$vsock_stream(r0, &(0x7f00000000c0)={0x28, 0x0, 0x0, @host}, 0x10) (async, rerun: 64) setsockopt$MRT_ADD_MFC(r1, 0x0, 0xcc, &(0x7f0000000080)={@loopback, @local, 0x0, "ab31b5034f27788202ab96060e3d49cef845724e3aabb84c8d89c33d26cceca2", 0x6, 0x3, 0x5, 0x1}, 0x3c) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040), 0x101000, 0x0) (async, rerun: 64) r3 = socket$inet_udp(0x2, 0x2, 0x0) (rerun: 64) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000004, 0x10, r3, 0x0) (async) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x40010, r4, 0x0) (async) pidfd_getfd(r2, r3, 0x0) [ 731.235885][T17167] R13: 00007ffe782f632f R14: 00007fb671f7e300 R15: 0000000000022000 [ 731.243710][T17167] [ 731.276639][T17194] FAULT_INJECTION: forcing a failure. 18:39:42 executing program 0: r0 = socket(0x25, 0x800, 0x0) socket(0x26, 0x0, 0x4) setsockopt$MRT_TABLE(r0, 0x0, 0xcf, &(0x7f0000000040)=0xff, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00'}) ioctl$VFAT_IOCTL_READDIR_BOTH(r0, 0x82307201, &(0x7f0000000080)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, 0x0, 0x400, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000001}, 0x4000040) 18:39:42 executing program 3: r0 = socket(0xa, 0x1, 0x0) pipe(&(0x7f0000000000)) (async) setsockopt$MRT_DEL_VIF(r0, 0x0, 0xcb, 0x0, 0x0) 18:39:42 executing program 4: ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000040)={0x0, 0x7fffffff, 0x1, [0x80, 0x1, 0x9, 0x7], [0x6, 0x101, 0x3ff, 0xa23e, 0x40, 0x4, 0x8, 0x183, 0x8, 0x4, 0x6, 0x6, 0x81, 0x9, 0x4, 0x2, 0x7, 0x3, 0x5, 0xc9, 0x0, 0x7fffffff, 0x730c, 0x1f, 0x1, 0x1f, 0x8001, 0xc0b5, 0x7fff, 0x3, 0x42b, 0x3, 0x8, 0x9, 0xaefa, 0x80000000, 0x1f, 0x2, 0x2, 0x5, 0x0, 0x27364537, 0x2, 0x1, 0x4, 0x81, 0x4, 0x7, 0xffffffffffff0001, 0x9, 0x80000001, 0xffffffffffff8000, 0x2, 0x9, 0x101, 0x7, 0xde, 0x7, 0x8d, 0x200, 0x7, 0x5, 0xf1, 0x10000, 0x2, 0xe000000000000000, 0x2, 0x8000, 0xbcaa, 0x9, 0x357, 0x4, 0xe1f, 0xfffffffffffffffb, 0x8000000000000001, 0x6, 0xc4b7, 0x8001, 0x4, 0x5, 0x8, 0x6, 0x7fffffffffffffff, 0x3, 0x300000000, 0x3f, 0x1ff, 0x2, 0x7fff, 0x5, 0x4, 0x1a1, 0xf13c, 0x9, 0x0, 0xbd, 0x80, 0x610, 0x9, 0x1, 0x5, 0xcf3e, 0x0, 0x7, 0x6560000, 0x2, 0x101, 0xfffffffffffffffb, 0x36f4e604, 0x0, 0x9, 0x8, 0x8, 0x5, 0xffffffffffff8001, 0x5, 0x0, 0x3, 0xffffffffffff8001, 0x0, 0x6]}) r0 = socket(0x15, 0x80000, 0xfffffffd) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x28, 0x2, 0x0, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r0, 0x28, 0x1, &(0x7f0000000000)=0x7f, 0x8) 18:39:42 executing program 5: r0 = socket(0xa, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x6, 0x2, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001280)=@IORING_OP_WRITEV={0x2, 0x10, 0x0, @fd=r0, 0x100, &(0x7f0000001240)=[{&(0x7f0000000000)="06d5c9b78f4e9d827b17656beb5374cad216c31927a33f9895d1fa7386a89e2df94a55bc8b20aef2b6cc5c6da49b951e2218235b74cdaeb13efcd638063c9d5dcca334ccff887222ab5a201eb79f167181a127e8b2a6515cad6a1af21e9ec2c941b6192c707d917541bf8489715a01feaa7ff6907b3b43994b52a37079436fd09b17a9e1d7e2c4d796328631e466ec6d1dc8bb067bec52812baede87a6cd69d0192c3ba6b3d2edb87ba0a887ece4ecbdf0cab7d9e3243b0601f37e94171b66313e4e6f05e54c1ac01b9dfaa441df7c25cbf2894de3b73ac8fa27e592ac4225ee387f0374aaea063345db949a9f80b35366f53b83d7171256", 0xf8}, {&(0x7f0000000100)="4f9c940c318eec5a4ddb97c77e5c8915a9ce75e930f20b06e5f1cdcb5f8e2af7ea92822d8f38ff0aeca151751a0f798b0d659fc2818f9e371fc51de853369971101f2998d5f3a73a91ecf067f8ca3e41b1186952dfa7306ce37b3c3e2670cc3a89ffae7a929a6b008223be9159b13980e1669d48412d4ac542d19bbcc1423d151df5f9e39c35c8aeffaccd64428cd87fff9f1fa17c6410ee2610620fba006d01d81d481d951e23314ab81475b4f387ef102b0e727f167ef887883dd2059b47a28dfb0a9ccfb12214c1d459f108a847a1b669a97cf8a889efc63fb0c253c051f2b877e4336febce69cd8fcdc3e58d4ea5cd9af3f7666b58bbccef1557e44e1545acf1f081468912cf52488913fcfe975ed97ede131aeffb082beb99f477fa27d4c70c32279069da88505b31335b4540f20ffd4a1a7dc3930ae385befe4f1ce26f7d04cbab55ccff3d125d5f04f739d8c33f7eb1d281d94cbdd0948fe1598d2a06aae4f16259b570e7fc3118beba3dd53826dc74794ca95d8528256256262aacad078a04cb418b83065163808e738e9eabbab98a1805b5582323cd5a7fa33f6310853c3d7d6e1f99dceeae8384ba15218cb97834ba9f36460be3f10971231f0e7a0daeeed8b3352fab69041ab313c51fd113e8fd09474ea7b28ffc18f23c5b4cb81bfad87a180f516ac7a8038858864683d71f64525038a6d5e5b9e24fee946bd64b9b04c31192a6ff6f9fdccdd285f69c3190ddae721141ebb376838f15f07c2c76f4e40f52695e01ed77065a1015f4cb16a78858f383f3276c0896f92e832ad29f51223853fcc707b4ce8bf2442ab07c0efeb71e114a088214296fb6716c8a2860d48be2606d339999675b0e3ee2a2d3d51fcd215464bc55d9cafc774de435c0caa80903b14cb34a27799b7d66a0b6b913a64c865ae0c3a2cc6f4bd3c40cffafcbe351600cadefea1013355349e2801428ef8e1c249e8c7c582aeca9f48750ab8c67f2c6540a36c82fa28262225ca0efe0abf62f06fdfb717d05c0dbf651da3dc60dcb9a3e0ffca75e5d615a7f14da4c573a9c54de28fe787b29b7be89c6871fa1203cf9707469f18df92e974375837b025a0d83d9908b2e88ac71e2681a2884983c2dac60942503bf0c678c385c9233951f71dcb7db5824409e39591a6107ad43fbdaf843c1edc0b73acb7c867d28f76d934989a4acb894f6ca267040596f5c6dff80fea8241a5aca9d3d6cb409cb63a63ee7a5d25b765e85335cd30865b76ae007475e8b2fed0cb10afe58bc8dd745bd15c386c7455697cfe677ea99480f34bede51a1535a1dd5ff2b74430d9ccf3f2d7cb5d339586bbf7ea0f58ee074e92af91a51e8d2948688ad70e9a6e7cabf768800e03f70b2905eee92f9a98dcf0aa779e57737bb89044dd5fd93346994fd95f65125d04f96332075b9dc0499e224608894b80a747805ec26feae72d4aa524198d5dadb2fb7804de2976a52b651f09129f033c0b9093bf532a26085a788eb3c6c964574fa0746b5ffd8ffa4e78414ad2d6e9a89ec09461fcd442691df61e5dfcca84d2b30ea97d2799a89b910f154749271565a1c4aab2833d397f9f637f6a1ed4badf20fea0fcdd04e2d525d313541588a4e390f305d64d58b8d6ce8fd30cd1168603ae17e57591447042cdce7607696e04d16838f4c0b655bd8bc154ac51d3275fc63ec5bdd31ff6fe1e5af97c43013b95f16406cf20427daaf33708348be4ac73ba64c8eea5f52a9e7368a1d8a891e9104928c23fcb8d8890f5f4944891d4ec56bd1177e2bd0bc20d157406944c87948b1317e3f804434aa0d26e61af74d4f17b1dca900f45d1713a8a2fa2456dea88b9c2ee6667faff065fa8dae5740d03d202039beb57bb8faf37d56d782c6b24938308484f7afa51261337fb8c2d16ce8c9c279b2eb81c1498503af58678186ff09a1bd9f9adb25cba832cc2f946d56cf9ff530eaa77933d4a4b500131ebb8edd1af70d8635edcfda38da66afef64ca61c967051567559d020fe5a8cef0aa74c8eb60a3fcce3f0e93e0c38aaa04decd09e069f2c23c2343d58ccc191585a6331cb273a48707b5a7ce3ddc96ef7afb6a6ffb5f3172b7ca773783aeb79928ee28c69125c6d5399a9b6a5102a4c46262489ee118ccd7e3bacc9e5074a9a8587847fca067bf2c35542bfb3063dff410a872452f1bea8ae9feffe52938ee9acf45f067a1ff83712f88a1cd00b98f6cb99adedf88cb0ce077c56d41e90e885cb9febab6b457dbc2c20350b68e27e7ebd417bc046f097f1bb817245fef65cd62dd225900a0d436f1b8d8a8c0f7f8d75aaaa8195bdae5d1751fe7bebc36fae81e1f2696460360af3a259dabd5352a5d89ff5a2824238ff215cdeaeda7dadcc1eac39d9238fb53530f5b8722e229a1c40ab4d0771c1517918d93a1b8a91d9ad47cfe79713f603a853d6e6457166d85c2500c26947ec9a5838e97d586f6fc8f39c724bb53f5bd346e62cf1ba003c5ef97b5c9f5ff9126cb07452c93afe36e7dde8b24d8f929ecf89c5b24ee2027760c89f36e75aabdf803541b0966549bdd161377b940bc2ba5455c577ced25da945da971e38e8fb8a3474b115b8fdb4bb53644acf742b86fe41b572fdd2f9ef7514958cce6d64c8022866f5aee92bf7188e568502f9d9005b5a087be9cfd4ccf6c154ce8592b7171b27d7d36e516efbb6899f2fbb08951a5f808cc38f4cfd723b7c4a93f5ef063b6663d1e64b5de979f538b01df4fb2a36155a714e9c572fc4edb599583bc2f855cfb74053f911cd0a7e5d9f92c8b3ad081bed3b62b69b86d60dbeaca68e95449113491242db6a139fccb6e99e00c9b04ae76d72bb87c66afbfd0623e282cef1d1c5cc349d6b76d1eafe86dbe88603ebdebf1cac7d6843b2790a6f928e36af2e2d993debbd97f67c4acf38f220f9aa2925d319d8b5bd1b135917873058d7223afb78ad6b71322f425a9884cf6d15f0b5421dd6a1c85acf7fa2c4e59fba60f40e19a88b1f23ae9a9cdee6bfaf2b0442dd3ece7e1b2a4af1a8ef0d467da78f9a2e2c020a02b70bd9be276085ab01c2d4a93127036eeadbf87e4ef74f806ab958e68d97004e943fe6210c1324021623e18a6180e42ffe067059525c73a76d5f70cb6136ad4c2cd01ead2ebb4a8bb73a6153026303265be1739ddc79fbc33a3d4a596aa669048d6132775a35bc408ea8e809b4d71e3cb4aca62776e2628f8983a35c0273e68ecf8a2690e899b924d02c6be271870b0d2a55dd94f4850ad777258d75ad30283575a773ce4442a7a76275ddb324313191c293ed77e3231b5e02e352e205c02b42c223057a73121b13b2a49c5196decf838862fc2f8ea992001c0c75f9c7bece5af49195cda69aa2ce5207f0869ce92250c172909d144faf5ee6026efeacbf03bfcbc0b03b66c07e7de93b9b5cd87057df7a85ee37577d3b2cc93aabd02365abc474a3d9ad29926b9a5feee4efe4df5c833c7739c59610a8a0c07398b99c89f7e9dee7327761d0b2f8aa67288126cb3f2935eca4eb93f000090159e1786e2a3ae694bd406f4466191b8e42c254a8eb332c83da5eb4b2c67040466daf237028a8f4881296202cafa2708484bde9615cf5252b16b9eb8e9e3311509324b1b238d76ef63c12e81352149d903ad285818a6b9aec013e49dbf2ef5e3607ba7ec66d43846d2ca77d349a0ca96ecc93add97332e6ca889e01677945fda671966e2763035cff0f34e71e15857a862fe844b8e45b4bb348440ed8162d20f501262e2fcad4dfe8c7feeb6c5d41d048902b84d1b697c97ce6d40952edf0c7550b7696c585ebc90199c838cfec3ca842c9fffdee0a17641f44138c720f32160b53fcfe987fee8021d70408bc55cfd3b51340c7880aa52234c0901184b84e6a883485548320cdf6251faadc4c19ab11cbd5f322af718925c28d2b8f6693e683c4e7395ffbb939c76c79fb6ac7d6c8967427f810a46458970b087be88c90471fdff5401f101e9911f549b3e8a6c919ea4bc1f62724b55f334079d9ff620f155ecaea943d2bfa8ee90c2e88888f88336df71e017f45e4aa082113441e6fa729863d02289611bff20270f12976ab20ae262a026407f532703db2cc94397c18ed0c9003958574e119c0f3371688418fbd9fa6d2c45a5f515c9773c63fd21e77bb44b3ab723144fd0959fc8251472b6df1b36be16d0d658519743c0dc956e251ec58a4b8c3b7acbc550c05b511ca1714dd941dfbda89e7bac0aff2c27428586ba4b5d61411fd869bca70e2e50bf6d1f336379613916dd4daf0487c135702497736644c77b626985b360dc9ac3a5521c22e4672b9c71e2f583c764e963f818b7087990a0ce1849a9c5e278e3d8fddc94f98e177087666ea5f37df0eaa2557d8b6d21b443d3a64515fabe3e090d91e558b2aa3a19d4f4d286f2712b35ad33b4f0fd879db96418197eee9321ab74360be0227be0afafb89e306d52d293aeca804de31fec94ec41640cc916679c5b4a78b90b68d376299271fe08c05d22180e27b30ddf39761418ab7a2d5c9b41b43747c1b211a1147494ba487e3d3e28a83c8c0616ba825025f946078e2087370f4d76c67dc62789d0d7cabf7f8185449b3e9d04445d2954419fa54bc9aa977e1bdd0759a3bfd4601a8e3b41e554757b6ee6ed4d2ca9b430cba56f3b0a401e2444c16ee861f893e3c659430afcf5551ed28ac6463e8299a6fa85f8e0dd86e5d52aefbd74b443cbc5ad4699f4fce82f81e5f049617aa21260c5d0997a8456ceea976617183c89df1475fe9d5da856e711c203fb24c0eff8adaed3af66236838cbeb5ab1217964ca1d3a6e5e5e085e43a869fd001051207a35b1a0b988c28da66dd1383612ec88dc0bf75e8db9fffe1e043c526b6a0ff8167cbafc5119ed988245aaa007abeaec511a8d0877f61bb06ed0839a31ba5a16e2c39ed6b0ba68a54c50bf12ee96e9785ba891a44c6e0a694d517aa60f049646c761e12726dc5b8fb5f6ac205699dd3eca5599e795bb1440e7fb7c3cc5830eeefa8b842fde0cd7841c9a8fe19ccd696368cb01a2fec0d34e01fab9b2e78daeec431f1f4024095bbc50a63a73fc131f8062574f9801a5ebdcb20c17b07578bf12a40ce585af569b0a177f4153107dc4f4044b77a21d497e0c17045abcfd8b7e80515b76df8350be85f0aab614201d08271a941f90c8322d87529cc30312b99b090598368418244180411ca64592fa9e6990029c1f46ac06b27748c34fc4a333a0ccafb23c7487783e072b9621aa1d144911ea708d82438b18cd30795f91053388a6b532a78665893c5be3078f7a54353bc5927c3d071d0c3a38fb1a405fd2b6d50d47eaf5b116847206a99bf25f1b6d6abdf0f353252e9cb9b1cd05d4d4637816b4de6e4562c318b0829b33c3fe7795b0036e203e775d4916adc4d71be7b287ebb38dc448a98ce15a8510482f796454d67513f7e9ffa48ae000ebe4d778407048d5a4f7f5e4cb50825bceea1f0918389372bf9b20c795aa108586652ea13c267824cff1e6de28899c305bc5c9a55f83116417b4bae9804613a3c3357c5a5fa0a2ce151a1870a6b8125c7c8b8178c7fc66cfb2dfcf78140c7002270cf0a60c9cb1ca56d23699cb02d59d0faeda67002d13b442ae509a1cde5f4fc92f91456a0c0cf6bfbe20f3a5acc3e4b98a2a810a69fda5e12391068ec3cde5c5e0079fcc74af71763236c5c9abb2a80a3351524c5b92e104a677aeb014a37742fb065c6e1384e778ed456c12c61fff5c6e0c80be50c93142e6e53c", 0x1000}, {&(0x7f0000001100)="810635647d598e7774a145d0f9df0296666cd6c5b2d12be294443211b6b4f62fabffb7583410ab1c37573b1dc55b3440d6ad0c3b71557f3a9e6f8b8db0f80c377ed80aafa21806321ff6ee7a2d9f19c6ab156702fc0a9f8e442671efa7b1768b97e90ead57544bc6318358d9c3443c96b9de3631907ae003fa1dae1bbd5b836b1f732c00fa38", 0x86}, {&(0x7f00000011c0)="b4388e26141e23ef437a1c6d6b00a0fd42f9f07f18d71ad9f7ccac65e6817f6e2b2132a158a2cf0906de50af4e9226a116508752212cfe5fa7bd9de31c146f96dc663cb5470e05e98c0b72013e3604b20e9579e3cc7c22fb6b59f7f586ec274293401aff26ef1bce0d63a52471b8246f58066f", 0x73}], 0x4, 0x2, 0x0, {0x2}}, 0x6e1) 18:39:42 executing program 1: r0 = socket(0xa, 0x1, 0x9) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x29, 0x2, 0x0, 0x0) socket(0xa, 0x1, 0x9) (async) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x29, 0x2, 0x0, 0x0) (async) 18:39:42 executing program 3: r0 = socket(0xa, 0x1, 0x0) pipe(&(0x7f0000000000)) (async) setsockopt$MRT_DEL_VIF(r0, 0x0, 0xcb, 0x0, 0x0) [ 731.276639][T17194] name failslab, interval 1, probability 0, space 0, times 0 [ 731.298072][T17194] CPU: 0 PID: 17194 Comm: syz-executor.2 Tainted: G B 5.15.74-syzkaller-04383-g7f2e600bf63a #0 [ 731.309619][T17194] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/11/2022 [ 731.319709][T17194] Call Trace: [ 731.322831][T17194] [ 731.325706][T17194] dump_stack_lvl+0x151/0x1b7 [ 731.330384][T17194] ? bfq_pos_tree_add_move+0x43e/0x43e [ 731.335868][T17194] ? do_syscall_64+0x44/0xd0 [ 731.340405][T17194] dump_stack+0x15/0x17 [ 731.344442][T17194] should_fail+0x3c0/0x510 [ 731.348692][T17194] __should_failslab+0x9f/0xe0 [ 731.353378][T17194] should_failslab+0x9/0x20 [ 731.357808][T17194] kmem_cache_alloc+0x4f/0x2f0 [ 731.362409][T17194] ? anon_vma_clone+0xa1/0x4f0 [ 731.367008][T17194] anon_vma_clone+0xa1/0x4f0 [ 731.371444][T17194] anon_vma_fork+0x91/0x4f0 [ 731.375773][T17194] ? anon_vma_name+0x4c/0x70 [ 731.380391][T17194] dup_mmap+0x750/0xea0 [ 731.384380][T17194] ? __delayed_free_task+0x20/0x20 [ 731.389332][T17194] ? mm_init+0x807/0x960 [ 731.393464][T17194] dup_mm+0x91/0x330 [ 731.397139][T17194] copy_mm+0x108/0x1b0 [ 731.401048][T17194] copy_process+0x1295/0x3250 [ 731.405558][T17194] ? proc_fail_nth_write+0x213/0x290 [ 731.410684][T17194] ? proc_fail_nth_read+0x220/0x220 [ 731.415798][T17194] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 731.420844][T17194] ? vfs_write+0x9af/0x1050 [ 731.425195][T17194] ? vmacache_update+0xb7/0x120 [ 731.429864][T17194] kernel_clone+0x22d/0x990 [ 731.434204][T17194] ? file_end_write+0x1b0/0x1b0 [ 731.438891][T17194] ? __kasan_check_write+0x14/0x20 [ 731.443844][T17194] ? create_io_thread+0x1e0/0x1e0 [ 731.448706][T17194] ? __mutex_lock_slowpath+0x10/0x10 [ 731.453825][T17194] __x64_sys_clone+0x289/0x310 [ 731.458423][T17194] ? __do_sys_vfork+0x130/0x130 [ 731.463116][T17194] ? debug_smp_processor_id+0x17/0x20 [ 731.468589][T17194] do_syscall_64+0x44/0xd0 [ 731.472983][T17194] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 731.478800][T17194] RIP: 0033:0x7fb67320a5a9 [ 731.483052][T17194] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 731.502692][T17194] RSP: 002b:00007fb671f7e118 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 731.511025][T17194] RAX: ffffffffffffffda RBX: 00007fb67332af80 RCX: 00007fb67320a5a9 [ 731.518924][T17194] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000010000000 [ 731.526746][T17194] RBP: 00007fb671f7e1d0 R08: 0000000000000000 R09: 0000000000000000 18:39:42 executing program 2: syz_clone(0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 80) 18:39:42 executing program 3: r0 = socket(0x9, 0x2, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000000)={0x8, 0x200, 0x7, 0x10001, 0x6, 0xfbff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000004, 0x10, r1, 0x0) ioctl$FS_IOC_SETFSLABEL(r1, 0x41009432, &(0x7f0000000080)="eaebd430e26d8e94d846cc61ad90aca55ed88ad33a50074822a87beaf139f8ef1ecd95b38525133b2251871a930386d0fe1b17adc85633b8703727a25b80dfc07e0e89c3b62ac3c63419f9e01b1c2ecb39edfdfd30cc3edb7e05bb6fca47e7b5a3fb71746f6ab56e657f8f8a6b3c6454c38a89329c08bd0c67cbbcccf98d26c25ab659a100580186cb6f01b712ca53830af2536dbcf47134473f8c5b77ff3ba032158bb2c166fd82a2316b07cae740e741f47d917c1d14a37df5a1fdfafaa07cb53697eb986df75aad4a34546b998040bb7d3a66d6204247672c993d4d9e2da476e63c06c25182da0dc1dbe5636fc724ff22bbd54e92a8af002d971eba3dca72") open_tree(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x80000) setsockopt$MRT_DEL_VIF(r0, 0x0, 0xcb, 0x0, 0x0) 18:39:42 executing program 1: r0 = socket(0xa, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x29, 0x2, 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000004, 0x10, r1, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3in6={0x18, 0x1, {0x0, r1, 0x2, 0x0, 0x0, 0x4, {0xa, 0x4e23, 0x8, @empty, 0x7}}}, 0x3a) 18:39:42 executing program 0: r0 = socket(0x25, 0x800, 0x0) socket(0x26, 0x0, 0x4) (async) setsockopt$MRT_TABLE(r0, 0x0, 0xcf, &(0x7f0000000040)=0xff, 0x4) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00'}) (async) ioctl$VFAT_IOCTL_READDIR_BOTH(r0, 0x82307201, &(0x7f0000000080)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, 0x0, 0x400, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000001}, 0x4000040) 18:39:42 executing program 4: ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000040)={0x0, 0x7fffffff, 0x1, [0x80, 0x1, 0x9, 0x7], [0x6, 0x101, 0x3ff, 0xa23e, 0x40, 0x4, 0x8, 0x183, 0x8, 0x4, 0x6, 0x6, 0x81, 0x9, 0x4, 0x2, 0x7, 0x3, 0x5, 0xc9, 0x0, 0x7fffffff, 0x730c, 0x1f, 0x1, 0x1f, 0x8001, 0xc0b5, 0x7fff, 0x3, 0x42b, 0x3, 0x8, 0x9, 0xaefa, 0x80000000, 0x1f, 0x2, 0x2, 0x5, 0x0, 0x27364537, 0x2, 0x1, 0x4, 0x81, 0x4, 0x7, 0xffffffffffff0001, 0x9, 0x80000001, 0xffffffffffff8000, 0x2, 0x9, 0x101, 0x7, 0xde, 0x7, 0x8d, 0x200, 0x7, 0x5, 0xf1, 0x10000, 0x2, 0xe000000000000000, 0x2, 0x8000, 0xbcaa, 0x9, 0x357, 0x4, 0xe1f, 0xfffffffffffffffb, 0x8000000000000001, 0x6, 0xc4b7, 0x8001, 0x4, 0x5, 0x8, 0x6, 0x7fffffffffffffff, 0x3, 0x300000000, 0x3f, 0x1ff, 0x2, 0x7fff, 0x5, 0x4, 0x1a1, 0xf13c, 0x9, 0x0, 0xbd, 0x80, 0x610, 0x9, 0x1, 0x5, 0xcf3e, 0x0, 0x7, 0x6560000, 0x2, 0x101, 0xfffffffffffffffb, 0x36f4e604, 0x0, 0x9, 0x8, 0x8, 0x5, 0xffffffffffff8001, 0x5, 0x0, 0x3, 0xffffffffffff8001, 0x0, 0x6]}) r0 = socket(0x15, 0x80000, 0xfffffffd) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x28, 0x2, 0x0, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r0, 0x28, 0x1, &(0x7f0000000000)=0x7f, 0x8) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000040)={0x0, 0x7fffffff, 0x1, [0x80, 0x1, 0x9, 0x7], [0x6, 0x101, 0x3ff, 0xa23e, 0x40, 0x4, 0x8, 0x183, 0x8, 0x4, 0x6, 0x6, 0x81, 0x9, 0x4, 0x2, 0x7, 0x3, 0x5, 0xc9, 0x0, 0x7fffffff, 0x730c, 0x1f, 0x1, 0x1f, 0x8001, 0xc0b5, 0x7fff, 0x3, 0x42b, 0x3, 0x8, 0x9, 0xaefa, 0x80000000, 0x1f, 0x2, 0x2, 0x5, 0x0, 0x27364537, 0x2, 0x1, 0x4, 0x81, 0x4, 0x7, 0xffffffffffff0001, 0x9, 0x80000001, 0xffffffffffff8000, 0x2, 0x9, 0x101, 0x7, 0xde, 0x7, 0x8d, 0x200, 0x7, 0x5, 0xf1, 0x10000, 0x2, 0xe000000000000000, 0x2, 0x8000, 0xbcaa, 0x9, 0x357, 0x4, 0xe1f, 0xfffffffffffffffb, 0x8000000000000001, 0x6, 0xc4b7, 0x8001, 0x4, 0x5, 0x8, 0x6, 0x7fffffffffffffff, 0x3, 0x300000000, 0x3f, 0x1ff, 0x2, 0x7fff, 0x5, 0x4, 0x1a1, 0xf13c, 0x9, 0x0, 0xbd, 0x80, 0x610, 0x9, 0x1, 0x5, 0xcf3e, 0x0, 0x7, 0x6560000, 0x2, 0x101, 0xfffffffffffffffb, 0x36f4e604, 0x0, 0x9, 0x8, 0x8, 0x5, 0xffffffffffff8001, 0x5, 0x0, 0x3, 0xffffffffffff8001, 0x0, 0x6]}) (async) socket(0x15, 0x80000, 0xfffffffd) (async) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x28, 0x2, 0x0, 0x0) (async) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r0, 0x28, 0x1, &(0x7f0000000000)=0x7f, 0x8) (async) 18:39:42 executing program 5: r0 = socket(0xa, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x6, 0x2, 0x0, 0x0) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001280)=@IORING_OP_WRITEV={0x2, 0x10, 0x0, @fd=r0, 0x100, &(0x7f0000001240)=[{&(0x7f0000000000)="06d5c9b78f4e9d827b17656beb5374cad216c31927a33f9895d1fa7386a89e2df94a55bc8b20aef2b6cc5c6da49b951e2218235b74cdaeb13efcd638063c9d5dcca334ccff887222ab5a201eb79f167181a127e8b2a6515cad6a1af21e9ec2c941b6192c707d917541bf8489715a01feaa7ff6907b3b43994b52a37079436fd09b17a9e1d7e2c4d796328631e466ec6d1dc8bb067bec52812baede87a6cd69d0192c3ba6b3d2edb87ba0a887ece4ecbdf0cab7d9e3243b0601f37e94171b66313e4e6f05e54c1ac01b9dfaa441df7c25cbf2894de3b73ac8fa27e592ac4225ee387f0374aaea063345db949a9f80b35366f53b83d7171256", 0xf8}, {&(0x7f0000000100)="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", 0x1000}, {&(0x7f0000001100)="810635647d598e7774a145d0f9df0296666cd6c5b2d12be294443211b6b4f62fabffb7583410ab1c37573b1dc55b3440d6ad0c3b71557f3a9e6f8b8db0f80c377ed80aafa21806321ff6ee7a2d9f19c6ab156702fc0a9f8e442671efa7b1768b97e90ead57544bc6318358d9c3443c96b9de3631907ae003fa1dae1bbd5b836b1f732c00fa38", 0x86}, {&(0x7f00000011c0)="b4388e26141e23ef437a1c6d6b00a0fd42f9f07f18d71ad9f7ccac65e6817f6e2b2132a158a2cf0906de50af4e9226a116508752212cfe5fa7bd9de31c146f96dc663cb5470e05e98c0b72013e3604b20e9579e3cc7c22fb6b59f7f586ec274293401aff26ef1bce0d63a52471b8246f58066f", 0x73}], 0x4, 0x2, 0x0, {0x2}}, 0x6e1) 18:39:42 executing program 4: ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000040)={0x0, 0x7fffffff, 0x1, [0x80, 0x1, 0x9, 0x7], [0x6, 0x101, 0x3ff, 0xa23e, 0x40, 0x4, 0x8, 0x183, 0x8, 0x4, 0x6, 0x6, 0x81, 0x9, 0x4, 0x2, 0x7, 0x3, 0x5, 0xc9, 0x0, 0x7fffffff, 0x730c, 0x1f, 0x1, 0x1f, 0x8001, 0xc0b5, 0x7fff, 0x3, 0x42b, 0x3, 0x8, 0x9, 0xaefa, 0x80000000, 0x1f, 0x2, 0x2, 0x5, 0x0, 0x27364537, 0x2, 0x1, 0x4, 0x81, 0x4, 0x7, 0xffffffffffff0001, 0x9, 0x80000001, 0xffffffffffff8000, 0x2, 0x9, 0x101, 0x7, 0xde, 0x7, 0x8d, 0x200, 0x7, 0x5, 0xf1, 0x10000, 0x2, 0xe000000000000000, 0x2, 0x8000, 0xbcaa, 0x9, 0x357, 0x4, 0xe1f, 0xfffffffffffffffb, 0x8000000000000001, 0x6, 0xc4b7, 0x8001, 0x4, 0x5, 0x8, 0x6, 0x7fffffffffffffff, 0x3, 0x300000000, 0x3f, 0x1ff, 0x2, 0x7fff, 0x5, 0x4, 0x1a1, 0xf13c, 0x9, 0x0, 0xbd, 0x80, 0x610, 0x9, 0x1, 0x5, 0xcf3e, 0x0, 0x7, 0x6560000, 0x2, 0x101, 0xfffffffffffffffb, 0x36f4e604, 0x0, 0x9, 0x8, 0x8, 0x5, 0xffffffffffff8001, 0x5, 0x0, 0x3, 0xffffffffffff8001, 0x0, 0x6]}) (async) r0 = socket(0x15, 0x80000, 0xfffffffd) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x28, 0x2, 0x0, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r0, 0x28, 0x1, &(0x7f0000000000)=0x7f, 0x8) 18:39:42 executing program 5: r0 = signalfd(0xffffffffffffffff, 0x0, 0x0) close(r0) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ORIGINATORS(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c237580bc0fe791dae9944cf8000000530c26a1a5429086eda2c187cfdb5a661fbe02991a419f0da7888adfe6a396f872d813bb6938b42a3a9fcbf91ebce43da1a14652d6d49f33c227087e733d830f0ac9f6f4c3ec28c282c95f656761b7c284a1c607fba56b3893a46e4bc28f4006f65627a98c70e96b82ffc214bad4e4cda887bf19831672f7bdfcbb30580e57f6673a74c8645dbbddd1c851e8125419728934cc0da22b3a7c7bb009dac9241ba02c765a809891e13a90591670ae15e90a9840c9db1587fec84a21e39b7f066199e6ee38bb90d224e71bb9ba7074ef72574330a0658e52fb516e344780c60888d0bf18", @ANYRES16=r1, @ANYBLOB="00022abd7000fddbdf25080000000500370001000000"], 0x1c}, 0x1, 0x0, 0x0, 0x20004000}, 0xba4f47fdcc00246d) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_MKDIRAT={0x25, 0x2e, 0x0, r0, 0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x1}, 0x3) r2 = socket(0xa, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r2, 0x6, 0x2, 0x0, 0x0) r3 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000), 0x402080, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x8010, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000004, 0x10, r4, 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(r4, 0x942e, 0x0) ftruncate(r3, 0x8000) 18:39:42 executing program 0: r0 = socket(0x25, 0x800, 0x0) socket(0x26, 0x0, 0x4) setsockopt$MRT_TABLE(r0, 0x0, 0xcf, &(0x7f0000000040)=0xff, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00'}) ioctl$VFAT_IOCTL_READDIR_BOTH(r0, 0x82307201, &(0x7f0000000080)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, 0x0, 0x400, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000001}, 0x4000040) socket(0x25, 0x800, 0x0) (async) socket(0x26, 0x0, 0x4) (async) setsockopt$MRT_TABLE(r0, 0x0, 0xcf, &(0x7f0000000040)=0xff, 0x4) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00'}) (async) ioctl$VFAT_IOCTL_READDIR_BOTH(r0, 0x82307201, &(0x7f0000000080)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) (async) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, 0x0, 0x400, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000001}, 0x4000040) (async) 18:39:42 executing program 1: r0 = socket(0xa, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x29, 0x2, 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000004, 0x10, r1, 0x0) (async, rerun: 32) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3in6={0x18, 0x1, {0x0, r1, 0x2, 0x0, 0x0, 0x4, {0xa, 0x4e23, 0x8, @empty, 0x7}}}, 0x3a) (rerun: 32) [ 731.534555][T17194] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 731.542351][T17194] R13: 00007ffe782f632f R14: 00007fb671f7e300 R15: 0000000000022000 [ 731.550266][T17194] 18:39:43 executing program 3: r0 = socket(0x9, 0x2, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000000)={0x8, 0x200, 0x7, 0x10001, 0x6, 0xfbff}) (async) r1 = socket$inet_udp(0x2, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000004, 0x10, r1, 0x0) ioctl$FS_IOC_SETFSLABEL(r1, 0x41009432, &(0x7f0000000080)="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") (async) open_tree(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x80000) (async) setsockopt$MRT_DEL_VIF(r0, 0x0, 0xcb, 0x0, 0x0) 18:39:43 executing program 3: r0 = socket(0x9, 0x2, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000000)={0x8, 0x200, 0x7, 0x10001, 0x6, 0xfbff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000004, 0x10, r1, 0x0) ioctl$FS_IOC_SETFSLABEL(r1, 0x41009432, &(0x7f0000000080)="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") open_tree(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x80000) (async) setsockopt$MRT_DEL_VIF(r0, 0x0, 0xcb, 0x0, 0x0) [ 731.598648][T17255] FAULT_INJECTION: forcing a failure. [ 731.598648][T17255] name failslab, interval 1, probability 0, space 0, times 0 [ 731.618761][T17255] CPU: 1 PID: 17255 Comm: syz-executor.2 Tainted: G B 5.15.74-syzkaller-04383-g7f2e600bf63a #0 [ 731.630398][T17255] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/11/2022 [ 731.640296][T17255] Call Trace: [ 731.643418][T17255] [ 731.646204][T17255] dump_stack_lvl+0x151/0x1b7 [ 731.650707][T17255] ? bfq_pos_tree_add_move+0x43e/0x43e [ 731.656000][T17255] dump_stack+0x15/0x17 [ 731.659988][T17255] should_fail+0x3c0/0x510 [ 731.664243][T17255] __should_failslab+0x9f/0xe0 [ 731.668843][T17255] should_failslab+0x9/0x20 [ 731.673187][T17255] kmem_cache_alloc+0x4f/0x2f0 [ 731.677784][T17255] ? anon_vma_clone+0xa1/0x4f0 [ 731.682379][T17255] anon_vma_clone+0xa1/0x4f0 [ 731.686806][T17255] anon_vma_fork+0x91/0x4f0 [ 731.691147][T17255] ? anon_vma_name+0x4c/0x70 [ 731.695578][T17255] dup_mmap+0x750/0xea0 [ 731.699568][T17255] ? __delayed_free_task+0x20/0x20 [ 731.704514][T17255] ? mm_init+0x807/0x960 [ 731.708595][T17255] dup_mm+0x91/0x330 [ 731.712412][T17255] copy_mm+0x108/0x1b0 [ 731.716319][T17255] copy_process+0x1295/0x3250 [ 731.720942][T17255] ? proc_fail_nth_write+0x213/0x290 [ 731.726323][T17255] ? proc_fail_nth_read+0x220/0x220 [ 731.731445][T17255] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 731.736388][T17255] ? vfs_write+0x9af/0x1050 [ 731.740730][T17255] ? vmacache_update+0xb7/0x120 [ 731.745418][T17255] kernel_clone+0x22d/0x990 [ 731.749757][T17255] ? file_end_write+0x1b0/0x1b0 [ 731.754452][T17255] ? __kasan_check_write+0x14/0x20 [ 731.759389][T17255] ? create_io_thread+0x1e0/0x1e0 [ 731.764350][T17255] ? __mutex_lock_slowpath+0x10/0x10 [ 731.769459][T17255] __x64_sys_clone+0x289/0x310 [ 731.774166][T17255] ? __do_sys_vfork+0x130/0x130 [ 731.778848][T17255] ? debug_smp_processor_id+0x17/0x20 [ 731.784043][T17255] do_syscall_64+0x44/0xd0 [ 731.788296][T17255] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 731.794313][T17255] RIP: 0033:0x7fb67320a5a9 [ 731.798664][T17255] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 731.818092][T17255] RSP: 002b:00007fb671f7e118 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 731.826424][T17255] RAX: ffffffffffffffda RBX: 00007fb67332af80 RCX: 00007fb67320a5a9 [ 731.834239][T17255] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000010000000 18:39:43 executing program 2: syz_clone(0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 81) 18:39:43 executing program 4: r0 = socket(0xa, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x28, 0x2, 0x0, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x6, 0x4) 18:39:43 executing program 0: r0 = socket(0xa, 0x1, 0x0) ioctl$BTRFS_IOC_INO_PATHS(0xffffffffffffffff, 0xc0389423, &(0x7f0000000080)={0xb362, 0x30, [0x100000001, 0x2, 0x9, 0x8d12], &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00'}) 18:39:43 executing program 5: r0 = signalfd(0xffffffffffffffff, 0x0, 0x0) close(r0) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ORIGINATORS(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c237580bc0fe791dae9944cf8000000530c26a1a5429086eda2c187cfdb5a661fbe02991a419f0da7888adfe6a396f872d813bb6938b42a3a9fcbf91ebce43da1a14652d6d49f33c227087e733d830f0ac9f6f4c3ec28c282c95f656761b7c284a1c607fba56b3893a46e4bc28f4006f65627a98c70e96b82ffc214bad4e4cda887bf19831672f7bdfcbb30580e57f6673a74c8645dbbddd1c851e8125419728934cc0da22b3a7c7bb009dac9241ba02c765a809891e13a90591670ae15e90a9840c9db1587fec84a21e39b7f066199e6ee38bb90d224e71bb9ba7074ef72574330a0658e52fb516e344780c60888d0bf18", @ANYRES16=r1, @ANYBLOB="00022abd7000fddbdf25080000000500370001000000"], 0x1c}, 0x1, 0x0, 0x0, 0x20004000}, 0xba4f47fdcc00246d) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_MKDIRAT={0x25, 0x2e, 0x0, r0, 0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x1}, 0x3) r2 = socket(0xa, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r2, 0x6, 0x2, 0x0, 0x0) r3 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000), 0x402080, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x8010, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000004, 0x10, r4, 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(r4, 0x942e, 0x0) ftruncate(r3, 0x8000) signalfd(0xffffffffffffffff, 0x0, 0x0) (async) close(r0) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) (async) sendmsg$BATADV_CMD_GET_ORIGINATORS(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c237580bc0fe791dae9944cf8000000530c26a1a5429086eda2c187cfdb5a661fbe02991a419f0da7888adfe6a396f872d813bb6938b42a3a9fcbf91ebce43da1a14652d6d49f33c227087e733d830f0ac9f6f4c3ec28c282c95f656761b7c284a1c607fba56b3893a46e4bc28f4006f65627a98c70e96b82ffc214bad4e4cda887bf19831672f7bdfcbb30580e57f6673a74c8645dbbddd1c851e8125419728934cc0da22b3a7c7bb009dac9241ba02c765a809891e13a90591670ae15e90a9840c9db1587fec84a21e39b7f066199e6ee38bb90d224e71bb9ba7074ef72574330a0658e52fb516e344780c60888d0bf18", @ANYRES16=r1, @ANYBLOB="00022abd7000fddbdf25080000000500370001000000"], 0x1c}, 0x1, 0x0, 0x0, 0x20004000}, 0xba4f47fdcc00246d) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_MKDIRAT={0x25, 0x2e, 0x0, r0, 0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x1}, 0x3) (async) socket(0xa, 0x1, 0x0) (async) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r2, 0x6, 0x2, 0x0, 0x0) (async) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000), 0x402080, 0x0) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x8010, 0xffffffffffffffff, 0x0) (async) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000004, 0x10, r4, 0x0) (async) ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(r4, 0x942e, 0x0) (async) ftruncate(r3, 0x8000) (async) 18:39:43 executing program 3: r0 = signalfd(0xffffffffffffffff, 0x0, 0x0) close(r0) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x3c, r1, 0x4, 0x70bd2c, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x9}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x7f}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40044}, 0x368c5c958a5562d3) r2 = socket(0xa, 0x1, 0x0) r3 = accept4$vsock_stream(r2, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10, 0x80000) ioctl$ifreq_SIOCGIFINDEX_wireguard(r3, 0x8933, &(0x7f0000000040)={'wg0\x00'}) r4 = signalfd(r0, &(0x7f0000000280)={[0xbd9]}, 0x8) fcntl$setflags(r4, 0x2, 0x0) fremovexattr(r2, &(0x7f00000001c0)=@known='security.apparmor\x00') setsockopt$MRT_DEL_VIF(r2, 0x0, 0xcb, 0x0, 0x0) r5 = pidfd_getfd(r0, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$fou(&(0x7f0000000240), r3) sendmsg$FOU_CMD_GET(r5, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x22240010}, 0xc, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x24044040) 18:39:43 executing program 1: r0 = socket(0xa, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x29, 0x2, 0x0, 0x0) (async) r1 = socket$inet_udp(0x2, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000004, 0x10, r1, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3in6={0x18, 0x1, {0x0, r1, 0x2, 0x0, 0x0, 0x4, {0xa, 0x4e23, 0x8, @empty, 0x7}}}, 0x3a) 18:39:43 executing program 3: r0 = signalfd(0xffffffffffffffff, 0x0, 0x0) close(r0) (async) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x3c, r1, 0x4, 0x70bd2c, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x9}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x7f}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40044}, 0x368c5c958a5562d3) (async, rerun: 64) r2 = socket(0xa, 0x1, 0x0) (rerun: 64) r3 = accept4$vsock_stream(r2, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10, 0x80000) ioctl$ifreq_SIOCGIFINDEX_wireguard(r3, 0x8933, &(0x7f0000000040)={'wg0\x00'}) r4 = signalfd(r0, &(0x7f0000000280)={[0xbd9]}, 0x8) fcntl$setflags(r4, 0x2, 0x0) (async) fremovexattr(r2, &(0x7f00000001c0)=@known='security.apparmor\x00') (async, rerun: 64) setsockopt$MRT_DEL_VIF(r2, 0x0, 0xcb, 0x0, 0x0) (async, rerun: 64) r5 = pidfd_getfd(r0, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$fou(&(0x7f0000000240), r3) (async) sendmsg$FOU_CMD_GET(r5, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x22240010}, 0xc, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x24044040) [ 731.842175][T17255] RBP: 00007fb671f7e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 731.849945][T17255] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 731.857757][T17255] R13: 00007ffe782f632f R14: 00007fb671f7e300 R15: 0000000000022000 [ 731.865582][T17255] 18:39:43 executing program 0: r0 = socket(0xa, 0x1, 0x0) ioctl$BTRFS_IOC_INO_PATHS(0xffffffffffffffff, 0xc0389423, &(0x7f0000000080)={0xb362, 0x30, [0x100000001, 0x2, 0x9, 0x8d12], &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00'}) 18:39:43 executing program 1: r0 = socket(0xa, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x29, 0x2, 0x0, 0x0) r1 = signalfd(0xffffffffffffffff, 0x0, 0x0) close(r1) r2 = syz_genetlink_get_family_id$fou(&(0x7f0000000040), r0) sendmsg$FOU_CMD_ADD(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r2, 0x2, 0x70bd28, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x84}, 0x20000000) 18:39:43 executing program 4: r0 = socket(0xa, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x28, 0x2, 0x0, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x6, 0x4) 18:39:43 executing program 5: r0 = signalfd(0xffffffffffffffff, 0x0, 0x0) close(r0) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ORIGINATORS(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c237580bc0fe791dae9944cf8000000530c26a1a5429086eda2c187cfdb5a661fbe02991a419f0da7888adfe6a396f872d813bb6938b42a3a9fcbf91ebce43da1a14652d6d49f33c227087e733d830f0ac9f6f4c3ec28c282c95f656761b7c284a1c607fba56b3893a46e4bc28f4006f65627a98c70e96b82ffc214bad4e4cda887bf19831672f7bdfcbb30580e57f6673a74c8645dbbddd1c851e8125419728934cc0da22b3a7c7bb009dac9241ba02c765a809891e13a90591670ae15e90a9840c9db1587fec84a21e39b7f066199e6ee38bb90d224e71bb9ba7074ef72574330a0658e52fb516e344780c60888d0bf18", @ANYRES16=r1, @ANYBLOB="00022abd7000fddbdf25080000000500370001000000"], 0x1c}, 0x1, 0x0, 0x0, 0x20004000}, 0xba4f47fdcc00246d) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_MKDIRAT={0x25, 0x2e, 0x0, r0, 0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x1}, 0x3) r2 = socket(0xa, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r2, 0x6, 0x2, 0x0, 0x0) r3 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000), 0x402080, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x8010, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000004, 0x10, r4, 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(r4, 0x942e, 0x0) ftruncate(r3, 0x8000) signalfd(0xffffffffffffffff, 0x0, 0x0) (async) close(r0) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) (async) sendmsg$BATADV_CMD_GET_ORIGINATORS(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c237580bc0fe791dae9944cf8000000530c26a1a5429086eda2c187cfdb5a661fbe02991a419f0da7888adfe6a396f872d813bb6938b42a3a9fcbf91ebce43da1a14652d6d49f33c227087e733d830f0ac9f6f4c3ec28c282c95f656761b7c284a1c607fba56b3893a46e4bc28f4006f65627a98c70e96b82ffc214bad4e4cda887bf19831672f7bdfcbb30580e57f6673a74c8645dbbddd1c851e8125419728934cc0da22b3a7c7bb009dac9241ba02c765a809891e13a90591670ae15e90a9840c9db1587fec84a21e39b7f066199e6ee38bb90d224e71bb9ba7074ef72574330a0658e52fb516e344780c60888d0bf18", @ANYRES16=r1, @ANYBLOB="00022abd7000fddbdf25080000000500370001000000"], 0x1c}, 0x1, 0x0, 0x0, 0x20004000}, 0xba4f47fdcc00246d) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_MKDIRAT={0x25, 0x2e, 0x0, r0, 0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x1}, 0x3) (async) socket(0xa, 0x1, 0x0) (async) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r2, 0x6, 0x2, 0x0, 0x0) (async) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000), 0x402080, 0x0) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x8010, 0xffffffffffffffff, 0x0) (async) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000004, 0x10, r4, 0x0) (async) ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(r4, 0x942e, 0x0) (async) ftruncate(r3, 0x8000) (async) 18:39:43 executing program 4: r0 = socket(0xa, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x28, 0x2, 0x0, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x6, 0x4) [ 731.895905][T17276] FAULT_INJECTION: forcing a failure. [ 731.895905][T17276] name failslab, interval 1, probability 0, space 0, times 0 [ 731.921927][T17276] CPU: 0 PID: 17276 Comm: syz-executor.2 Tainted: G B 5.15.74-syzkaller-04383-g7f2e600bf63a #0 [ 731.933398][T17276] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/11/2022 [ 731.943290][T17276] Call Trace: [ 731.946412][T17276] [ 731.949192][T17276] dump_stack_lvl+0x151/0x1b7 [ 731.953704][T17276] ? bfq_pos_tree_add_move+0x43e/0x43e [ 731.959004][T17276] dump_stack+0x15/0x17 [ 731.963006][T17276] should_fail+0x3c0/0x510 [ 731.967245][T17276] __should_failslab+0x9f/0xe0 [ 731.971842][T17276] should_failslab+0x9/0x20 [ 731.976180][T17276] kmem_cache_alloc+0x4f/0x2f0 [ 731.980777][T17276] ? anon_vma_clone+0xa1/0x4f0 [ 731.985378][T17276] anon_vma_clone+0xa1/0x4f0 [ 731.989811][T17276] anon_vma_fork+0x91/0x4f0 [ 731.994147][T17276] ? anon_vma_name+0x43/0x70 [ 731.998570][T17276] dup_mmap+0x750/0xea0 [ 732.002563][T17276] ? __delayed_free_task+0x20/0x20 [ 732.007511][T17276] ? mm_init+0x807/0x960 [ 732.011593][T17276] dup_mm+0x91/0x330 [ 732.015322][T17276] copy_mm+0x108/0x1b0 [ 732.019230][T17276] copy_process+0x1295/0x3250 [ 732.023744][T17276] ? proc_fail_nth_write+0x213/0x290 [ 732.028883][T17276] ? proc_fail_nth_read+0x220/0x220 [ 732.033903][T17276] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 732.038849][T17276] ? vfs_write+0x9af/0x1050 [ 732.043189][T17276] ? vmacache_update+0xb7/0x120 [ 732.047889][T17276] kernel_clone+0x22d/0x990 [ 732.052215][T17276] ? file_end_write+0x1b0/0x1b0 [ 732.056899][T17276] ? __kasan_check_write+0x14/0x20 [ 732.061850][T17276] ? create_io_thread+0x1e0/0x1e0 [ 732.066711][T17276] ? __mutex_lock_slowpath+0x10/0x10 [ 732.071832][T17276] __x64_sys_clone+0x289/0x310 [ 732.076431][T17276] ? __do_sys_vfork+0x130/0x130 [ 732.081123][T17276] ? debug_smp_processor_id+0x17/0x20 [ 732.086424][T17276] do_syscall_64+0x44/0xd0 [ 732.090677][T17276] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 732.096402][T17276] RIP: 0033:0x7fb67320a5a9 [ 732.100655][T17276] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 732.120195][T17276] RSP: 002b:00007fb671f7e118 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 732.128438][T17276] RAX: ffffffffffffffda RBX: 00007fb67332af80 RCX: 00007fb67320a5a9 [ 732.136357][T17276] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000010000000 18:39:43 executing program 2: syz_clone(0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 82) 18:39:43 executing program 4: r0 = socket(0xa, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x28, 0x2, 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x6, &(0x7f0000000000)=[{0x0, 0x1f, 0x1f, 0x3}, {0x8, 0x63, 0x8, 0x5d83f0f7}, {0x2, 0xff, 0x1, 0x9}, {0x0, 0x43, 0x5, 0x6}, {0xd1a7, 0xff, 0xc0, 0x9384}, {0x3, 0x6, 0xff, 0x5}]}) ioctl$BTRFS_IOC_QGROUP_CREATE(r1, 0x4010942a, &(0x7f0000000080)={0x1}) 18:39:43 executing program 1: r0 = socket(0xa, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x29, 0x2, 0x0, 0x0) r1 = signalfd(0xffffffffffffffff, 0x0, 0x0) close(r1) (async) r2 = syz_genetlink_get_family_id$fou(&(0x7f0000000040), r0) sendmsg$FOU_CMD_ADD(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r2, 0x2, 0x70bd28, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x84}, 0x20000000) 18:39:43 executing program 5: r0 = socket(0xb, 0x1, 0x9) r1 = signalfd(r0, &(0x7f0000000000)={[0x40]}, 0x8) ioctl$PPPIOCGL2TPSTATS(r1, 0x80487436, &(0x7f0000000040)="6293233ba777374d634a864c6fa58fb671855d0410bf4c064e8679f4482340d79e7ece606d494b86da494433432d243d5b92eb134c20cdc48df43c38d73cf1608309cda08e7e90e5c4e2f3ea743d32b9c7c404ededfe6e7bdb78eb120b660577f1474ce654967a8d00c0490fd89de4cafc454de02c9953e1045351a0bc1dbbe40aa723563783c36c1a5d30ccb9c9e6349de9ae861810572d443f20a4ed0a914539af893bf85a7d10035756f992d8ef51128213336a4356dfea89f175bfc6a6ee4e541a7b612036cd9a355a9fc7656830eb59ad3d40ebf3be22") setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x6, 0x2, 0x0, 0x0) 18:39:43 executing program 3: r0 = signalfd(0xffffffffffffffff, 0x0, 0x0) close(r0) (async) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x3c, r1, 0x4, 0x70bd2c, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x9}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x7f}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40044}, 0x368c5c958a5562d3) (async, rerun: 64) r2 = socket(0xa, 0x1, 0x0) (rerun: 64) r3 = accept4$vsock_stream(r2, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10, 0x80000) ioctl$ifreq_SIOCGIFINDEX_wireguard(r3, 0x8933, &(0x7f0000000040)={'wg0\x00'}) (async) r4 = signalfd(r0, &(0x7f0000000280)={[0xbd9]}, 0x8) fcntl$setflags(r4, 0x2, 0x0) fremovexattr(r2, &(0x7f00000001c0)=@known='security.apparmor\x00') setsockopt$MRT_DEL_VIF(r2, 0x0, 0xcb, 0x0, 0x0) r5 = pidfd_getfd(r0, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$fou(&(0x7f0000000240), r3) (async) sendmsg$FOU_CMD_GET(r5, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x22240010}, 0xc, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x24044040) 18:39:43 executing program 0: r0 = socket(0xa, 0x1, 0x0) ioctl$BTRFS_IOC_INO_PATHS(0xffffffffffffffff, 0xc0389423, &(0x7f0000000080)={0xb362, 0x30, [0x100000001, 0x2, 0x9, 0x8d12], &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00'}) socket(0xa, 0x1, 0x0) (async) ioctl$BTRFS_IOC_INO_PATHS(0xffffffffffffffff, 0xc0389423, &(0x7f0000000080)={0xb362, 0x30, [0x100000001, 0x2, 0x9, 0x8d12], &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00'}) (async) [ 732.144169][T17276] RBP: 00007fb671f7e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 732.151976][T17276] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 732.159788][T17276] R13: 00007ffe782f632f R14: 00007fb671f7e300 R15: 0000000000022000 [ 732.167689][T17276] 18:39:43 executing program 0: r0 = signalfd(0xffffffffffffffff, 0x0, 0x0) close(r0) ioctl$ASHMEM_SET_PROT_MASK(r0, 0x40087705, &(0x7f0000000080)={0x0, 0x8}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00'}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00'}) 18:39:43 executing program 0: r0 = signalfd(0xffffffffffffffff, 0x0, 0x0) close(r0) (async) ioctl$ASHMEM_SET_PROT_MASK(r0, 0x40087705, &(0x7f0000000080)={0x0, 0x8}) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00'}) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00'}) 18:39:43 executing program 5: r0 = socket(0xb, 0x1, 0x9) r1 = signalfd(r0, &(0x7f0000000000)={[0x40]}, 0x8) ioctl$PPPIOCGL2TPSTATS(r1, 0x80487436, &(0x7f0000000040)="6293233ba777374d634a864c6fa58fb671855d0410bf4c064e8679f4482340d79e7ece606d494b86da494433432d243d5b92eb134c20cdc48df43c38d73cf1608309cda08e7e90e5c4e2f3ea743d32b9c7c404ededfe6e7bdb78eb120b660577f1474ce654967a8d00c0490fd89de4cafc454de02c9953e1045351a0bc1dbbe40aa723563783c36c1a5d30ccb9c9e6349de9ae861810572d443f20a4ed0a914539af893bf85a7d10035756f992d8ef51128213336a4356dfea89f175bfc6a6ee4e541a7b612036cd9a355a9fc7656830eb59ad3d40ebf3be22") setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x6, 0x2, 0x0, 0x0) 18:39:43 executing program 3: r0 = socket(0xa, 0x1, 0x0) r1 = signalfd(0xffffffffffffffff, 0x0, 0x0) close(r1) accept4$vsock_stream(r1, &(0x7f0000000000)={0x28, 0x0, 0x2710, @hyper}, 0x10, 0x0) setsockopt$MRT_DEL_VIF(r0, 0x0, 0xcb, 0x0, 0x0) [ 732.197276][T17341] FAULT_INJECTION: forcing a failure. [ 732.197276][T17341] name failslab, interval 1, probability 0, space 0, times 0 [ 732.214639][T17341] CPU: 0 PID: 17341 Comm: syz-executor.2 Tainted: G B 5.15.74-syzkaller-04383-g7f2e600bf63a #0 [ 732.226107][T17341] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/11/2022 [ 732.236005][T17341] Call Trace: [ 732.239213][T17341] [ 732.242012][T17341] dump_stack_lvl+0x151/0x1b7 18:39:43 executing program 4: r0 = socket(0xa, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x28, 0x2, 0x0, 0x0) (async) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x6, &(0x7f0000000000)=[{0x0, 0x1f, 0x1f, 0x3}, {0x8, 0x63, 0x8, 0x5d83f0f7}, {0x2, 0xff, 0x1, 0x9}, {0x0, 0x43, 0x5, 0x6}, {0xd1a7, 0xff, 0xc0, 0x9384}, {0x3, 0x6, 0xff, 0x5}]}) ioctl$BTRFS_IOC_QGROUP_CREATE(r1, 0x4010942a, &(0x7f0000000080)={0x1}) 18:39:43 executing program 1: r0 = socket(0xa, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x29, 0x2, 0x0, 0x0) r1 = signalfd(0xffffffffffffffff, 0x0, 0x0) close(r1) r2 = syz_genetlink_get_family_id$fou(&(0x7f0000000040), r0) sendmsg$FOU_CMD_ADD(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r2, 0x2, 0x70bd28, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x84}, 0x20000000) socket(0xa, 0x1, 0x0) (async) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x29, 0x2, 0x0, 0x0) (async) signalfd(0xffffffffffffffff, 0x0, 0x0) (async) close(r1) (async) syz_genetlink_get_family_id$fou(&(0x7f0000000040), r0) (async) sendmsg$FOU_CMD_ADD(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r2, 0x2, 0x70bd28, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x84}, 0x20000000) (async) [ 732.246593][T17341] ? bfq_pos_tree_add_move+0x43e/0x43e [ 732.251971][T17341] dump_stack+0x15/0x17 [ 732.256058][T17341] should_fail+0x3c0/0x510 [ 732.260308][T17341] __should_failslab+0x9f/0xe0 [ 732.264903][T17341] should_failslab+0x9/0x20 [ 732.269244][T17341] kmem_cache_alloc+0x4f/0x2f0 [ 732.273846][T17341] ? anon_vma_clone+0xa1/0x4f0 [ 732.278448][T17341] anon_vma_clone+0xa1/0x4f0 [ 732.282873][T17341] anon_vma_fork+0x91/0x4f0 [ 732.287211][T17341] ? anon_vma_name+0x4c/0x70 [ 732.291634][T17341] dup_mmap+0x750/0xea0 [ 732.295626][T17341] ? __delayed_free_task+0x20/0x20 [ 732.300581][T17341] ? mm_init+0x807/0x960 [ 732.304653][T17341] dup_mm+0x91/0x330 [ 732.308386][T17341] copy_mm+0x108/0x1b0 [ 732.312290][T17341] copy_process+0x1295/0x3250 [ 732.316805][T17341] ? proc_fail_nth_write+0x213/0x290 [ 732.321925][T17341] ? proc_fail_nth_read+0x220/0x220 [ 732.326958][T17341] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 732.331910][T17341] ? vfs_write+0x9af/0x1050 [ 732.336244][T17341] ? vmacache_update+0xb7/0x120 [ 732.341018][T17341] kernel_clone+0x22d/0x990 [ 732.345355][T17341] ? file_end_write+0x1b0/0x1b0 [ 732.350042][T17341] ? __kasan_check_write+0x14/0x20 [ 732.355077][T17341] ? create_io_thread+0x1e0/0x1e0 [ 732.359938][T17341] ? __mutex_lock_slowpath+0x10/0x10 [ 732.365236][T17341] __x64_sys_clone+0x289/0x310 [ 732.370447][T17341] ? __do_sys_vfork+0x130/0x130 [ 732.375130][T17341] ? debug_smp_processor_id+0x17/0x20 [ 732.380345][T17341] do_syscall_64+0x44/0xd0 [ 732.384616][T17341] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 732.390319][T17341] RIP: 0033:0x7fb67320a5a9 [ 732.394571][T17341] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 732.414187][T17341] RSP: 002b:00007fb671f7e118 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 732.422430][T17341] RAX: ffffffffffffffda RBX: 00007fb67332af80 RCX: 00007fb67320a5a9 [ 732.430247][T17341] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000010000000 [ 732.438057][T17341] RBP: 00007fb671f7e1d0 R08: 0000000000000000 R09: 0000000000000000 18:39:43 executing program 2: syz_clone(0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 83) 18:39:43 executing program 0: r0 = signalfd(0xffffffffffffffff, 0x0, 0x0) close(r0) ioctl$ASHMEM_SET_PROT_MASK(r0, 0x40087705, &(0x7f0000000080)={0x0, 0x8}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00'}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00'}) signalfd(0xffffffffffffffff, 0x0, 0x0) (async) close(r0) (async) ioctl$ASHMEM_SET_PROT_MASK(r0, 0x40087705, &(0x7f0000000080)={0x0, 0x8}) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00'}) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00'}) (async) 18:39:43 executing program 5: r0 = socket(0xb, 0x1, 0x9) r1 = signalfd(r0, &(0x7f0000000000)={[0x40]}, 0x8) ioctl$PPPIOCGL2TPSTATS(r1, 0x80487436, &(0x7f0000000040)="6293233ba777374d634a864c6fa58fb671855d0410bf4c064e8679f4482340d79e7ece606d494b86da494433432d243d5b92eb134c20cdc48df43c38d73cf1608309cda08e7e90e5c4e2f3ea743d32b9c7c404ededfe6e7bdb78eb120b660577f1474ce654967a8d00c0490fd89de4cafc454de02c9953e1045351a0bc1dbbe40aa723563783c36c1a5d30ccb9c9e6349de9ae861810572d443f20a4ed0a914539af893bf85a7d10035756f992d8ef51128213336a4356dfea89f175bfc6a6ee4e541a7b612036cd9a355a9fc7656830eb59ad3d40ebf3be22") (async) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x6, 0x2, 0x0, 0x0) 18:39:43 executing program 1: r0 = socket(0xa, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x29, 0x2, 0x0, 0x0) r1 = accept4$bt_l2cap(r0, &(0x7f0000000000), &(0x7f0000000040)=0xe, 0x800) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f0000000080)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct}}) 18:39:43 executing program 4: r0 = socket(0xa, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x28, 0x2, 0x0, 0x0) (async) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x6, &(0x7f0000000000)=[{0x0, 0x1f, 0x1f, 0x3}, {0x8, 0x63, 0x8, 0x5d83f0f7}, {0x2, 0xff, 0x1, 0x9}, {0x0, 0x43, 0x5, 0x6}, {0xd1a7, 0xff, 0xc0, 0x9384}, {0x3, 0x6, 0xff, 0x5}]}) ioctl$BTRFS_IOC_QGROUP_CREATE(r1, 0x4010942a, &(0x7f0000000080)={0x1}) 18:39:43 executing program 3: r0 = socket(0xa, 0x1, 0x0) (async) r1 = signalfd(0xffffffffffffffff, 0x0, 0x0) close(r1) accept4$vsock_stream(r1, &(0x7f0000000000)={0x28, 0x0, 0x2710, @hyper}, 0x10, 0x0) (async) setsockopt$MRT_DEL_VIF(r0, 0x0, 0xcb, 0x0, 0x0) 18:39:43 executing program 1: r0 = socket(0xa, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x29, 0x2, 0x0, 0x0) (async) r1 = accept4$bt_l2cap(r0, &(0x7f0000000000), &(0x7f0000000040)=0xe, 0x800) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f0000000080)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct}}) 18:39:43 executing program 5: r0 = socket(0xa, 0x1, 0x0) r1 = signalfd4(r0, &(0x7f0000000280)={[0x7]}, 0x8, 0x80800) ioctl$BTRFS_IOC_START_SYNC(r1, 0x80089418, &(0x7f00000002c0)) r2 = signalfd(0xffffffffffffffff, 0x0, 0x0) r3 = signalfd(0xffffffffffffffff, 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000300), 0x901000, 0x0) close(r3) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r3, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000080)={&(0x7f00000001c0)={0x44, 0x0, 0x2, 0x70bd29, 0x8, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x8}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x100}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x20}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x80000000}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x8884) close(r2) sendmsg$FOU_CMD_ADD(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="f016daafbc58000000", @ANYRES16=0x0, @ANYBLOB="080025bd7000fbdbdf250100000014000700fc02000000000000000000000000000108000800ffffffff040005001400090000000000000000000000ffff0000000006000a004e200000060001004e230000"], 0x58}, 0x1, 0x0, 0x0, 0x5}, 0x20000000) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x6, 0x2, 0x0, 0x0) 18:39:43 executing program 3: r0 = socket(0xa, 0x1, 0x0) r1 = signalfd(0xffffffffffffffff, 0x0, 0x0) close(r1) accept4$vsock_stream(r1, &(0x7f0000000000)={0x28, 0x0, 0x2710, @hyper}, 0x10, 0x0) setsockopt$MRT_DEL_VIF(r0, 0x0, 0xcb, 0x0, 0x0) socket(0xa, 0x1, 0x0) (async) signalfd(0xffffffffffffffff, 0x0, 0x0) (async) close(r1) (async) accept4$vsock_stream(r1, &(0x7f0000000000)={0x28, 0x0, 0x2710, @hyper}, 0x10, 0x0) (async) setsockopt$MRT_DEL_VIF(r0, 0x0, 0xcb, 0x0, 0x0) (async) [ 732.445872][T17341] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 732.453678][T17341] R13: 00007ffe782f632f R14: 00007fb671f7e300 R15: 0000000000022000 [ 732.461496][T17341] 18:39:43 executing program 0: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x54, 0x0, 0x10, 0x70bd2b, 0x25dfdbfb, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x3}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x2}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xfffffffe}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x25}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x5}]}, 0x54}, 0x1, 0x0, 0x0, 0x4}, 0x40) r2 = socket$inet_udp(0x2, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000004, 0x10, r2, 0x0) io_uring_setup(0x1b0, &(0x7f0000000080)={0x0, 0x1496, 0x100, 0x2, 0x248}) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f0000000040)={'wg0\x00'}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00'}) 18:39:43 executing program 4: r0 = socket(0xa, 0x1, 0x0) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f0000000000)="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") r1 = signalfd(0xffffffffffffffff, 0x0, 0x0) close(r1) pidfd_getfd(r1, r0, 0x0) r2 = syz_genetlink_get_family_id$fou(&(0x7f0000000140), r0) r3 = signalfd(0xffffffffffffffff, 0x0, 0x0) close(r3) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000280), r0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r3, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x58, r4, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xffff}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x20}}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x63}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x1ff}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x2}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xffffffff}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x8001}, 0x4) sendmsg$FOU_CMD_GET(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x28, r2, 0x1, 0x70bd27, 0x25dfdbfd, {}, [@FOU_ATTR_LOCAL_V6={0x14, 0x7, @dev={0xfe, 0x80, '\x00', 0x2a}}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000080}, 0x810) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x28, 0x2, 0x0, 0x0) 18:39:43 executing program 4: r0 = socket(0xa, 0x1, 0x0) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f0000000000)="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") (async) r1 = signalfd(0xffffffffffffffff, 0x0, 0x0) close(r1) (async) pidfd_getfd(r1, r0, 0x0) (async) r2 = syz_genetlink_get_family_id$fou(&(0x7f0000000140), r0) r3 = signalfd(0xffffffffffffffff, 0x0, 0x0) close(r3) (async) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000280), r0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r3, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x58, r4, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xffff}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x20}}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x63}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x1ff}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x2}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xffffffff}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x8001}, 0x4) (async) sendmsg$FOU_CMD_GET(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x28, r2, 0x1, 0x70bd27, 0x25dfdbfd, {}, [@FOU_ATTR_LOCAL_V6={0x14, 0x7, @dev={0xfe, 0x80, '\x00', 0x2a}}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000080}, 0x810) (async) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x28, 0x2, 0x0, 0x0) [ 732.515944][T17383] FAULT_INJECTION: forcing a failure. [ 732.515944][T17383] name failslab, interval 1, probability 0, space 0, times 0 [ 732.536481][T17383] CPU: 0 PID: 17383 Comm: syz-executor.2 Tainted: G B 5.15.74-syzkaller-04383-g7f2e600bf63a #0 [ 732.547954][T17383] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/11/2022 [ 732.558140][T17383] Call Trace: [ 732.561260][T17383] [ 732.564049][T17383] dump_stack_lvl+0x151/0x1b7 [ 732.568638][T17383] ? bfq_pos_tree_add_move+0x43e/0x43e [ 732.574148][T17383] dump_stack+0x15/0x17 [ 732.578095][T17383] should_fail+0x3c0/0x510 [ 732.582356][T17383] __should_failslab+0x9f/0xe0 [ 732.586950][T17383] should_failslab+0x9/0x20 [ 732.591319][T17383] kmem_cache_alloc+0x4f/0x2f0 [ 732.595890][T17383] ? anon_vma_clone+0xa1/0x4f0 [ 732.600666][T17383] anon_vma_clone+0xa1/0x4f0 [ 732.605101][T17383] anon_vma_fork+0x91/0x4f0 [ 732.609431][T17383] ? anon_vma_name+0x4c/0x70 [ 732.613941][T17383] dup_mmap+0x750/0xea0 [ 732.618026][T17383] ? __delayed_free_task+0x20/0x20 [ 732.623070][T17383] ? mm_init+0x807/0x960 [ 732.627147][T17383] dup_mm+0x91/0x330 [ 732.630985][T17383] copy_mm+0x108/0x1b0 [ 732.634885][T17383] copy_process+0x1295/0x3250 [ 732.639402][T17383] ? proc_fail_nth_write+0x213/0x290 [ 732.644630][T17383] ? proc_fail_nth_read+0x220/0x220 [ 732.651722][T17383] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 732.656834][T17383] ? vfs_write+0x9af/0x1050 [ 732.661170][T17383] ? vmacache_update+0xb7/0x120 [ 732.665857][T17383] kernel_clone+0x22d/0x990 [ 732.670199][T17383] ? file_end_write+0x1b0/0x1b0 [ 732.674885][T17383] ? __kasan_check_write+0x14/0x20 [ 732.679837][T17383] ? create_io_thread+0x1e0/0x1e0 [ 732.684737][T17383] ? __mutex_lock_slowpath+0x10/0x10 [ 732.689825][T17383] __x64_sys_clone+0x289/0x310 [ 732.694414][T17383] ? __do_sys_vfork+0x130/0x130 [ 732.699104][T17383] ? debug_smp_processor_id+0x17/0x20 [ 732.704327][T17383] do_syscall_64+0x44/0xd0 [ 732.708562][T17383] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 732.714290][T17383] RIP: 0033:0x7fb67320a5a9 [ 732.718631][T17383] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 732.738085][T17383] RSP: 002b:00007fb671f7e118 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 732.746321][T17383] RAX: ffffffffffffffda RBX: 00007fb67332af80 RCX: 00007fb67320a5a9 [ 732.754140][T17383] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000010000000 18:39:44 executing program 2: syz_clone(0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 84) 18:39:44 executing program 3: r0 = socket(0x25, 0x80000, 0x38) setsockopt$MRT_DEL_VIF(r0, 0x0, 0xcb, 0x0, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(0xffffffffffffffff, 0x28, 0x2, &(0x7f0000000000)=0x8000000000000001, 0x8) 18:39:44 executing program 1: r0 = socket(0xa, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x29, 0x2, 0x0, 0x0) r1 = accept4$bt_l2cap(r0, &(0x7f0000000000), &(0x7f0000000040)=0xe, 0x800) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f0000000080)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct}}) socket(0xa, 0x1, 0x0) (async) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x29, 0x2, 0x0, 0x0) (async) accept4$bt_l2cap(r0, &(0x7f0000000000), &(0x7f0000000040)=0xe, 0x800) (async) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f0000000080)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct}}) (async) 18:39:44 executing program 0: r0 = socket(0xa, 0x1, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x54, 0x0, 0x10, 0x70bd2b, 0x25dfdbfb, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x3}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x2}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xfffffffe}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x25}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x5}]}, 0x54}, 0x1, 0x0, 0x0, 0x4}, 0x40) (async) r2 = socket$inet_udp(0x2, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000004, 0x10, r2, 0x0) io_uring_setup(0x1b0, &(0x7f0000000080)={0x0, 0x1496, 0x100, 0x2, 0x248}) (async, rerun: 64) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f0000000040)={'wg0\x00'}) (rerun: 64) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00'}) 18:39:44 executing program 5: r0 = socket(0xa, 0x1, 0x0) r1 = signalfd4(r0, &(0x7f0000000280)={[0x7]}, 0x8, 0x80800) ioctl$BTRFS_IOC_START_SYNC(r1, 0x80089418, &(0x7f00000002c0)) (async) r2 = signalfd(0xffffffffffffffff, 0x0, 0x0) (async) r3 = signalfd(0xffffffffffffffff, 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000300), 0x901000, 0x0) (async) close(r3) (async) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r3, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000080)={&(0x7f00000001c0)={0x44, 0x0, 0x2, 0x70bd29, 0x8, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x8}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x100}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x20}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x80000000}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x8884) close(r2) sendmsg$FOU_CMD_ADD(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="f016daafbc58000000", @ANYRES16=0x0, @ANYBLOB="080025bd7000fbdbdf250100000014000700fc02000000000000000000000000000108000800ffffffff040005001400090000000000000000000000ffff0000000006000a004e200000060001004e230000"], 0x58}, 0x1, 0x0, 0x0, 0x5}, 0x20000000) (async) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x6, 0x2, 0x0, 0x0) 18:39:44 executing program 4: r0 = socket(0xa, 0x1, 0x0) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f0000000000)="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") r1 = signalfd(0xffffffffffffffff, 0x0, 0x0) close(r1) pidfd_getfd(r1, r0, 0x0) (async) r2 = syz_genetlink_get_family_id$fou(&(0x7f0000000140), r0) (async) r3 = signalfd(0xffffffffffffffff, 0x0, 0x0) close(r3) (async) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000280), r0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r3, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x58, r4, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xffff}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x20}}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x63}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x1ff}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x2}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xffffffff}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x8001}, 0x4) sendmsg$FOU_CMD_GET(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x28, r2, 0x1, 0x70bd27, 0x25dfdbfd, {}, [@FOU_ATTR_LOCAL_V6={0x14, 0x7, @dev={0xfe, 0x80, '\x00', 0x2a}}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000080}, 0x810) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x28, 0x2, 0x0, 0x0) 18:39:44 executing program 3: r0 = socket(0x25, 0x80000, 0x38) setsockopt$MRT_DEL_VIF(r0, 0x0, 0xcb, 0x0, 0x0) (async) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(0xffffffffffffffff, 0x28, 0x2, &(0x7f0000000000)=0x8000000000000001, 0x8) 18:39:44 executing program 0: r0 = socket(0xa, 0x1, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x54, 0x0, 0x10, 0x70bd2b, 0x25dfdbfb, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x3}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x2}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xfffffffe}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x25}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x5}]}, 0x54}, 0x1, 0x0, 0x0, 0x4}, 0x40) (async) r2 = socket$inet_udp(0x2, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000004, 0x10, r2, 0x0) (async) io_uring_setup(0x1b0, &(0x7f0000000080)={0x0, 0x1496, 0x100, 0x2, 0x248}) (async) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f0000000040)={'wg0\x00'}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00'}) [ 732.762028][T17383] RBP: 00007fb671f7e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 732.769847][T17383] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 732.777649][T17383] R13: 00007ffe782f632f R14: 00007fb671f7e300 R15: 0000000000022000 [ 732.785463][T17383] 18:39:44 executing program 1: r0 = socket(0xa, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x29, 0x2, 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000004, 0x10, r1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00'}) 18:39:44 executing program 3: r0 = socket(0x25, 0x80000, 0x38) setsockopt$MRT_DEL_VIF(r0, 0x0, 0xcb, 0x0, 0x0) (async) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(0xffffffffffffffff, 0x28, 0x2, &(0x7f0000000000)=0x8000000000000001, 0x8) 18:39:44 executing program 5: r0 = socket(0xa, 0x1, 0x0) r1 = signalfd4(r0, &(0x7f0000000280)={[0x7]}, 0x8, 0x80800) ioctl$BTRFS_IOC_START_SYNC(r1, 0x80089418, &(0x7f00000002c0)) (async) r2 = signalfd(0xffffffffffffffff, 0x0, 0x0) r3 = signalfd(0xffffffffffffffff, 0x0, 0x0) (async) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000300), 0x901000, 0x0) close(r3) (async) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r3, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000080)={&(0x7f00000001c0)={0x44, 0x0, 0x2, 0x70bd29, 0x8, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x8}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x100}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x20}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x80000000}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x8884) (async) close(r2) sendmsg$FOU_CMD_ADD(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="f016daafbc58000000", @ANYRES16=0x0, @ANYBLOB="080025bd7000fbdbdf250100000014000700fc02000000000000000000000000000108000800ffffffff040005001400090000000000000000000000ffff0000000006000a004e200000060001004e230000"], 0x58}, 0x1, 0x0, 0x0, 0x5}, 0x20000000) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x6, 0x2, 0x0, 0x0) 18:39:44 executing program 0: socketpair(0x15, 0x2, 0x8, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="080027bd7000fddbdf250c00000005003500f90000000500380001000000050033000300000008000600", @ANYRES32=0x0, @ANYBLOB="020c72"], 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x4010) r1 = socket(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00'}) socketpair(0x2a, 0x2, 0x3, &(0x7f0000000180)) [ 732.815043][T17413] FAULT_INJECTION: forcing a failure. [ 732.815043][T17413] name failslab, interval 1, probability 0, space 0, times 0 [ 732.833905][T17413] CPU: 0 PID: 17413 Comm: syz-executor.2 Tainted: G B 5.15.74-syzkaller-04383-g7f2e600bf63a #0 [ 732.845362][T17413] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/11/2022 [ 732.855432][T17413] Call Trace: [ 732.858557][T17413] [ 732.861330][T17413] dump_stack_lvl+0x151/0x1b7 [ 732.865844][T17413] ? bfq_pos_tree_add_move+0x43e/0x43e [ 732.871142][T17413] dump_stack+0x15/0x17 [ 732.875226][T17413] should_fail+0x3c0/0x510 [ 732.879576][T17413] __should_failslab+0x9f/0xe0 [ 732.884247][T17413] should_failslab+0x9/0x20 [ 732.888597][T17413] kmem_cache_alloc+0x4f/0x2f0 [ 732.893184][T17413] ? anon_vma_fork+0x1b9/0x4f0 [ 732.897782][T17413] anon_vma_fork+0x1b9/0x4f0 [ 732.902219][T17413] dup_mmap+0x750/0xea0 [ 732.906208][T17413] ? __delayed_free_task+0x20/0x20 [ 732.911148][T17413] ? mm_init+0x807/0x960 [ 732.915229][T17413] dup_mm+0x91/0x330 [ 732.919063][T17413] copy_mm+0x108/0x1b0 [ 732.922972][T17413] copy_process+0x1295/0x3250 [ 732.927573][T17413] ? proc_fail_nth_write+0x213/0x290 [ 732.932693][T17413] ? proc_fail_nth_read+0x220/0x220 [ 732.937727][T17413] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 732.942678][T17413] ? vfs_write+0x9af/0x1050 [ 732.947036][T17413] ? vmacache_update+0xb7/0x120 [ 732.951699][T17413] kernel_clone+0x22d/0x990 [ 732.956039][T17413] ? file_end_write+0x1b0/0x1b0 [ 732.960817][T17413] ? __kasan_check_write+0x14/0x20 [ 732.965761][T17413] ? create_io_thread+0x1e0/0x1e0 [ 732.970622][T17413] ? __mutex_lock_slowpath+0x10/0x10 [ 732.975747][T17413] __x64_sys_clone+0x289/0x310 [ 732.980346][T17413] ? __do_sys_vfork+0x130/0x130 [ 732.985032][T17413] ? debug_smp_processor_id+0x17/0x20 [ 732.990326][T17413] do_syscall_64+0x44/0xd0 [ 732.994765][T17413] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 733.000581][T17413] RIP: 0033:0x7fb67320a5a9 [ 733.004828][T17413] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 733.024274][T17413] RSP: 002b:00007fb671f7e118 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 733.032512][T17413] RAX: ffffffffffffffda RBX: 00007fb67332af80 RCX: 00007fb67320a5a9 [ 733.040326][T17413] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000010000000 [ 733.048139][T17413] RBP: 00007fb671f7e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 733.055950][T17413] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 733.064030][T17413] R13: 00007ffe782f632f R14: 00007fb671f7e300 R15: 0000000000022000 [ 733.072022][T17413] [ 733.075160][T17413] ------------[ cut here ]------------ [ 733.080601][T17413] refcount_t: underflow; use-after-free. [ 733.086199][T17413] WARNING: CPU: 0 PID: 17413 at lib/refcount.c:28 refcount_warn_saturate+0x165/0x1b0 [ 733.095742][T17413] Modules linked in: [ 733.099441][T17413] CPU: 0 PID: 17413 Comm: syz-executor.2 Tainted: G B 5.15.74-syzkaller-04383-g7f2e600bf63a #0 [ 733.110983][T17413] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/11/2022 [ 733.120827][T17413] RIP: 0010:refcount_warn_saturate+0x165/0x1b0 [ 733.126832][T17413] Code: c7 40 5b 87 85 31 c0 e8 d9 5e e0 fe 0f 0b eb 83 e8 30 f1 0e ff c6 05 7e 76 9f 04 01 48 c7 c7 a0 5b 87 85 31 c0 e8 bb 5e e0 fe <0f> 0b e9 62 ff ff ff e8 0f f1 0e ff c6 05 5e 76 9f 04 01 48 c7 c7 [ 733.146496][T17413] RSP: 0018:ffffc90006aff900 EFLAGS: 00010246 [ 733.152342][T17413] RAX: f05577b00a385d00 RBX: 0000000000000003 RCX: 0000000000040000 [ 733.160263][T17413] RDX: ffffc9000342d000 RSI: 0000000000015f5c RDI: 0000000000015f5d [ 733.168073][T17413] RBP: ffffc90006aff910 R08: ffffffff815838e9 R09: fffff52000d5fe59 [ 733.176327][T17413] R10: fffff52000d5fe59 R11: 1ffff92000d5fe58 R12: ffff8881266258b8 [ 733.184212][T17413] R13: 1ffff11024cc4b17 R14: 0000000000000003 R15: ffff888126a02871 [ 733.192010][T17413] FS: 00007fb671f7e700(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 733.200810][T17413] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 733.207319][T17413] CR2: 00005555565073b8 CR3: 0000000117347000 CR4: 00000000003506b0 [ 733.215208][T17413] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 733.223012][T17413] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 733.230835][T17413] Call Trace: [ 733.234029][T17413] [ 733.236803][T17413] vm_area_free+0x208/0x230 [ 733.241133][T17413] dup_mmap+0xbcd/0xea0 [ 733.245151][T17413] ? __delayed_free_task+0x20/0x20 [ 733.250075][T17413] ? mm_init+0x807/0x960 [ 733.254257][T17413] dup_mm+0x91/0x330 [ 733.257927][T17413] copy_mm+0x108/0x1b0 [ 733.261794][T17413] copy_process+0x1295/0x3250 [ 733.266368][T17413] ? proc_fail_nth_write+0x213/0x290 [ 733.271427][T17413] ? proc_fail_nth_read+0x220/0x220 [ 733.276574][T17413] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 733.281404][T17413] ? vfs_write+0x9af/0x1050 [ 733.285768][T17413] ? vmacache_update+0xb7/0x120 [ 733.290447][T17413] kernel_clone+0x22d/0x990 [ 733.294808][T17413] ? file_end_write+0x1b0/0x1b0 [ 733.299463][T17413] ? __kasan_check_write+0x14/0x20 [ 733.304466][T17413] ? create_io_thread+0x1e0/0x1e0 [ 733.309358][T17413] ? __mutex_lock_slowpath+0x10/0x10 [ 733.314525][T17413] __x64_sys_clone+0x289/0x310 [ 733.319080][T17413] ? __do_sys_vfork+0x130/0x130 [ 733.323762][T17413] ? debug_smp_processor_id+0x17/0x20 [ 733.329030][T17413] do_syscall_64+0x44/0xd0 [ 733.333331][T17413] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 733.339122][T17413] RIP: 0033:0x7fb67320a5a9 [ 733.343389][T17413] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 733.362856][T17413] RSP: 002b:00007fb671f7e118 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 733.371105][T17413] RAX: ffffffffffffffda RBX: 00007fb67332af80 RCX: 00007fb67320a5a9 [ 733.379012][T17413] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000010000000 [ 733.386915][T17413] RBP: 00007fb671f7e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 733.394711][T17413] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 733.402588][T17413] R13: 00007ffe782f632f R14: 00007fb671f7e300 R15: 0000000000022000 [ 733.410610][T17413] 18:39:44 executing program 2: syz_clone(0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 85) 18:39:44 executing program 1: r0 = socket(0xa, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x29, 0x2, 0x0, 0x0) (async, rerun: 64) r1 = socket$inet_udp(0x2, 0x2, 0x0) (rerun: 64) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000004, 0x10, r1, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00'}) 18:39:44 executing program 4: r0 = socket(0xa, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x28, 0x2, 0x0, 0x0) r1 = signalfd(0xffffffffffffffff, 0x0, 0x0) close(r1) setsockopt$pppl2tp_PPPOL2TP_SO_SENDSEQ(r1, 0x111, 0x3, 0x1, 0x4) 18:39:44 executing program 0: socketpair(0x15, 0x2, 0x8, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="080027bd7000fddbdf250c00000005003500f90000000500380001000000050033000300000008000600", @ANYRES32=0x0, @ANYBLOB="020c72"], 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x4010) r1 = socket(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00'}) (async) socketpair(0x2a, 0x2, 0x3, &(0x7f0000000180)) 18:39:44 executing program 3: r0 = socket(0xa, 0x1, 0x0) fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f0000000000)=']\x00', 0x0, r0) setsockopt$MRT_DEL_VIF(r0, 0x0, 0xcb, 0x0, 0x0) 18:39:44 executing program 5: r0 = socket(0xa, 0x1, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f00000000c0)={'gretap0\x00', &(0x7f0000000040)={'ip_vti0\x00', 0x0, 0x20, 0x40, 0xd43d, 0x40, {{0xc, 0x4, 0x1, 0xb, 0x30, 0x67, 0x0, 0x5e, 0x2f, 0x0, @broadcast, @multicast1, {[@generic={0x94, 0x5, "baa915"}, @timestamp={0x44, 0x8, 0x71, 0x0, 0x6, [0x5]}, @ra={0x94, 0x4}, @generic={0x86, 0x6, "bca031c1"}, @end, @noop]}}}}}) r2 = dup(r0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000000200)={'gre0\x00', &(0x7f0000000100)={'tunl0\x00', r1, 0x1, 0x0, 0xfffffbff, 0x0, {{0x32, 0x4, 0x2, 0x9, 0xc8, 0x6, 0x0, 0xc0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, {[@end, @end, @timestamp_addr={0x44, 0x44, 0x7e, 0x1, 0xd, [{@remote, 0x1}, {@multicast2, 0x7}, {@private=0xa010102, 0x7f}, {@loopback, 0xc6e}, {@remote, 0x1000}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x1}, {@broadcast, 0x8001}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x81}]}, @cipso={0x86, 0x58, 0x0, [{0x0, 0xe, "4e5b12f31250ca94b2e30839"}, {0x7, 0x5, "25718a"}, {0x6, 0x8, "78ed308e42b7"}, {0x2, 0x12, "2f473386bd36a40de35c8b865fa7d143"}, {0x1, 0x9, "5176387896fb12"}, {0x6, 0xc, "292cfb8338b2ebe792ce"}, {0x7, 0x10, "d5a404c63522ba7771772f1f4f63"}]}, @timestamp={0x44, 0x14, 0xab, 0x0, 0x8, [0x9, 0x4, 0xffffcd23, 0x7fffffff]}]}}}}}) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000000000)={0x1, 0x0, 0x9, 0x5, @vifc_lcl_ifindex=r1, @private=0xa010100}, 0x10) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x6, 0x2, 0x0, 0x0) 18:39:44 executing program 5: r0 = socket(0xa, 0x1, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f00000000c0)={'gretap0\x00', &(0x7f0000000040)={'ip_vti0\x00', 0x0, 0x20, 0x40, 0xd43d, 0x40, {{0xc, 0x4, 0x1, 0xb, 0x30, 0x67, 0x0, 0x5e, 0x2f, 0x0, @broadcast, @multicast1, {[@generic={0x94, 0x5, "baa915"}, @timestamp={0x44, 0x8, 0x71, 0x0, 0x6, [0x5]}, @ra={0x94, 0x4}, @generic={0x86, 0x6, "bca031c1"}, @end, @noop]}}}}}) r2 = dup(r0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000000200)={'gre0\x00', &(0x7f0000000100)={'tunl0\x00', r1, 0x1, 0x0, 0xfffffbff, 0x0, {{0x32, 0x4, 0x2, 0x9, 0xc8, 0x6, 0x0, 0xc0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, {[@end, @end, @timestamp_addr={0x44, 0x44, 0x7e, 0x1, 0xd, [{@remote, 0x1}, {@multicast2, 0x7}, {@private=0xa010102, 0x7f}, {@loopback, 0xc6e}, {@remote, 0x1000}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x1}, {@broadcast, 0x8001}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x81}]}, @cipso={0x86, 0x58, 0x0, [{0x0, 0xe, "4e5b12f31250ca94b2e30839"}, {0x7, 0x5, "25718a"}, {0x6, 0x8, "78ed308e42b7"}, {0x2, 0x12, "2f473386bd36a40de35c8b865fa7d143"}, {0x1, 0x9, "5176387896fb12"}, {0x6, 0xc, "292cfb8338b2ebe792ce"}, {0x7, 0x10, "d5a404c63522ba7771772f1f4f63"}]}, @timestamp={0x44, 0x14, 0xab, 0x0, 0x8, [0x9, 0x4, 0xffffcd23, 0x7fffffff]}]}}}}}) (async) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000000000)={0x1, 0x0, 0x9, 0x5, @vifc_lcl_ifindex=r1, @private=0xa010100}, 0x10) (async) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x6, 0x2, 0x0, 0x0) 18:39:44 executing program 4: r0 = socket(0xa, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x28, 0x2, 0x0, 0x0) (async) r1 = signalfd(0xffffffffffffffff, 0x0, 0x0) close(r1) (async) setsockopt$pppl2tp_PPPOL2TP_SO_SENDSEQ(r1, 0x111, 0x3, 0x1, 0x4) [ 733.413435][T17413] ---[ end trace e08c3b8514c0492f ]--- 18:39:44 executing program 0: socketpair(0x15, 0x2, 0x8, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="080027bd7000fddbdf250c00000005003500f90000000500380001000000050033000300000008000600", @ANYRES32=0x0, @ANYBLOB="020c72"], 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x4010) (async) r1 = socket(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00'}) socketpair(0x2a, 0x2, 0x3, &(0x7f0000000180)) 18:39:44 executing program 4: r0 = socket(0xa, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x28, 0x2, 0x0, 0x0) r1 = signalfd(0xffffffffffffffff, 0x0, 0x0) close(r1) setsockopt$pppl2tp_PPPOL2TP_SO_SENDSEQ(r1, 0x111, 0x3, 0x1, 0x4) 18:39:44 executing program 3: r0 = socket(0xa, 0x1, 0x0) fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f0000000000)=']\x00', 0x0, r0) (async, rerun: 32) setsockopt$MRT_DEL_VIF(r0, 0x0, 0xcb, 0x0, 0x0) (rerun: 32) 18:39:44 executing program 0: r0 = open_tree(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x100) ioctl$ASHMEM_PURGE_ALL_CACHES(r0, 0x770a, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00'}) [ 733.464498][T17454] FAULT_INJECTION: forcing a failure. [ 733.464498][T17454] name failslab, interval 1, probability 0, space 0, times 0 [ 733.502325][T17454] CPU: 1 PID: 17454 Comm: syz-executor.2 Tainted: G B W 5.15.74-syzkaller-04383-g7f2e600bf63a #0 [ 733.513794][T17454] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/11/2022 [ 733.523682][T17454] Call Trace: [ 733.526800][T17454] [ 733.529581][T17454] dump_stack_lvl+0x151/0x1b7 [ 733.534104][T17454] ? bfq_pos_tree_add_move+0x43e/0x43e [ 733.539474][T17454] dump_stack+0x15/0x17 [ 733.543464][T17454] should_fail+0x3c0/0x510 [ 733.547718][T17454] __should_failslab+0x9f/0xe0 [ 733.552416][T17454] should_failslab+0x9/0x20 [ 733.556745][T17454] kmem_cache_alloc+0x4f/0x2f0 [ 733.561346][T17454] ? vm_area_dup+0x26/0x1d0 [ 733.565684][T17454] ? __kasan_check_read+0x11/0x20 [ 733.570544][T17454] vm_area_dup+0x26/0x1d0 [ 733.574711][T17454] dup_mmap+0x6b8/0xea0 [ 733.578790][T17454] ? __delayed_free_task+0x20/0x20 [ 733.583746][T17454] ? mm_init+0x807/0x960 [ 733.587827][T17454] dup_mm+0x91/0x330 [ 733.591554][T17454] copy_mm+0x108/0x1b0 [ 733.595459][T17454] copy_process+0x1295/0x3250 [ 733.599970][T17454] ? proc_fail_nth_write+0x213/0x290 [ 733.605263][T17454] ? proc_fail_nth_read+0x220/0x220 [ 733.610298][T17454] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 733.615243][T17454] ? vfs_write+0x9af/0x1050 [ 733.619582][T17454] ? vmacache_update+0xb7/0x120 [ 733.624270][T17454] kernel_clone+0x22d/0x990 [ 733.628609][T17454] ? file_end_write+0x1b0/0x1b0 [ 733.633295][T17454] ? __kasan_check_write+0x14/0x20 [ 733.638246][T17454] ? create_io_thread+0x1e0/0x1e0 [ 733.643107][T17454] ? __mutex_lock_slowpath+0x10/0x10 [ 733.648228][T17454] __x64_sys_clone+0x289/0x310 [ 733.652829][T17454] ? __do_sys_vfork+0x130/0x130 [ 733.657516][T17454] ? debug_smp_processor_id+0x17/0x20 [ 733.662721][T17454] do_syscall_64+0x44/0xd0 [ 733.666986][T17454] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 733.672939][T17454] RIP: 0033:0x7fb67320a5a9 [ 733.677135][T17454] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 733.696792][T17454] RSP: 002b:00007fb671f7e118 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 733.705030][T17454] RAX: ffffffffffffffda RBX: 00007fb67332af80 RCX: 00007fb67320a5a9 18:39:45 executing program 2: syz_clone(0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 86) 18:39:45 executing program 5: r0 = socket(0xa, 0x1, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f00000000c0)={'gretap0\x00', &(0x7f0000000040)={'ip_vti0\x00', 0x0, 0x20, 0x40, 0xd43d, 0x40, {{0xc, 0x4, 0x1, 0xb, 0x30, 0x67, 0x0, 0x5e, 0x2f, 0x0, @broadcast, @multicast1, {[@generic={0x94, 0x5, "baa915"}, @timestamp={0x44, 0x8, 0x71, 0x0, 0x6, [0x5]}, @ra={0x94, 0x4}, @generic={0x86, 0x6, "bca031c1"}, @end, @noop]}}}}}) r2 = dup(r0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000000200)={'gre0\x00', &(0x7f0000000100)={'tunl0\x00', r1, 0x1, 0x0, 0xfffffbff, 0x0, {{0x32, 0x4, 0x2, 0x9, 0xc8, 0x6, 0x0, 0xc0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, {[@end, @end, @timestamp_addr={0x44, 0x44, 0x7e, 0x1, 0xd, [{@remote, 0x1}, {@multicast2, 0x7}, {@private=0xa010102, 0x7f}, {@loopback, 0xc6e}, {@remote, 0x1000}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x1}, {@broadcast, 0x8001}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x81}]}, @cipso={0x86, 0x58, 0x0, [{0x0, 0xe, "4e5b12f31250ca94b2e30839"}, {0x7, 0x5, "25718a"}, {0x6, 0x8, "78ed308e42b7"}, {0x2, 0x12, "2f473386bd36a40de35c8b865fa7d143"}, {0x1, 0x9, "5176387896fb12"}, {0x6, 0xc, "292cfb8338b2ebe792ce"}, {0x7, 0x10, "d5a404c63522ba7771772f1f4f63"}]}, @timestamp={0x44, 0x14, 0xab, 0x0, 0x8, [0x9, 0x4, 0xffffcd23, 0x7fffffff]}]}}}}}) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000000000)={0x1, 0x0, 0x9, 0x5, @vifc_lcl_ifindex=r1, @private=0xa010100}, 0x10) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x6, 0x2, 0x0, 0x0) socket(0xa, 0x1, 0x0) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f00000000c0)={'gretap0\x00', &(0x7f0000000040)={'ip_vti0\x00', 0x0, 0x20, 0x40, 0xd43d, 0x40, {{0xc, 0x4, 0x1, 0xb, 0x30, 0x67, 0x0, 0x5e, 0x2f, 0x0, @broadcast, @multicast1, {[@generic={0x94, 0x5, "baa915"}, @timestamp={0x44, 0x8, 0x71, 0x0, 0x6, [0x5]}, @ra={0x94, 0x4}, @generic={0x86, 0x6, "bca031c1"}, @end, @noop]}}}}}) (async) dup(r0) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000000200)={'gre0\x00', &(0x7f0000000100)={'tunl0\x00', r1, 0x1, 0x0, 0xfffffbff, 0x0, {{0x32, 0x4, 0x2, 0x9, 0xc8, 0x6, 0x0, 0xc0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, {[@end, @end, @timestamp_addr={0x44, 0x44, 0x7e, 0x1, 0xd, [{@remote, 0x1}, {@multicast2, 0x7}, {@private=0xa010102, 0x7f}, {@loopback, 0xc6e}, {@remote, 0x1000}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x1}, {@broadcast, 0x8001}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x81}]}, @cipso={0x86, 0x58, 0x0, [{0x0, 0xe, "4e5b12f31250ca94b2e30839"}, {0x7, 0x5, "25718a"}, {0x6, 0x8, "78ed308e42b7"}, {0x2, 0x12, "2f473386bd36a40de35c8b865fa7d143"}, {0x1, 0x9, "5176387896fb12"}, {0x6, 0xc, "292cfb8338b2ebe792ce"}, {0x7, 0x10, "d5a404c63522ba7771772f1f4f63"}]}, @timestamp={0x44, 0x14, 0xab, 0x0, 0x8, [0x9, 0x4, 0xffffcd23, 0x7fffffff]}]}}}}}) (async) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000000000)={0x1, 0x0, 0x9, 0x5, @vifc_lcl_ifindex=r1, @private=0xa010100}, 0x10) (async) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x6, 0x2, 0x0, 0x0) (async) 18:39:45 executing program 4: r0 = signalfd(0xffffffffffffffff, 0x0, 0x0) close(r0) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r1, 0x1, 0x70bd28, 0x25dfdbfd, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x586}]}, 0x24}, 0x1, 0x0, 0x0, 0x8010}, 0x40044) getpgrp(0xffffffffffffffff) r2 = socket(0xa, 0x1, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x5, &(0x7f0000000000)=[{0x7, 0x1f, 0x81}, {0x8, 0x4, 0x4, 0x8}, {0x9, 0x4, 0x65, 0x5}, {0x80, 0xf8, 0x3, 0x4}, {0xc6, 0x0, 0x7, 0x570}]}) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r2, 0x28, 0x2, 0x0, 0x0) 18:39:45 executing program 1: r0 = socket(0xa, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x29, 0x2, 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000004, 0x10, r1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00'}) socket(0xa, 0x1, 0x0) (async) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x29, 0x2, 0x0, 0x0) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000004, 0x10, r1, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00'}) (async) 18:39:45 executing program 3: r0 = socket(0xa, 0x1, 0x0) fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f0000000000)=']\x00', 0x0, r0) (async) setsockopt$MRT_DEL_VIF(r0, 0x0, 0xcb, 0x0, 0x0) 18:39:45 executing program 0: r0 = open_tree(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x100) ioctl$ASHMEM_PURGE_ALL_CACHES(r0, 0x770a, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00'}) [ 733.712843][T17454] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000010000000 [ 733.720652][T17454] RBP: 00007fb671f7e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 733.728464][T17454] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 733.736273][T17454] R13: 00007ffe782f632f R14: 00007fb671f7e300 R15: 0000000000022000 [ 733.744089][T17454] 18:39:45 executing program 1: r0 = socket(0xa, 0x1, 0x0) r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) setsockopt$bt_BT_VOICE(r1, 0x112, 0xb, &(0x7f0000000000)=0x60, 0x2) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x29, 0x2, 0x0, 0x0) r2 = signalfd(0xffffffffffffffff, 0x0, 0x0) close(r2) setsockopt$bt_BT_VOICE(r2, 0x112, 0xb, &(0x7f0000000040), 0x2) r3 = socket$inet_udp(0x2, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000004, 0x10, r3, 0x0) fstat(r3, &(0x7f0000000080)) 18:39:45 executing program 4: r0 = signalfd(0xffffffffffffffff, 0x0, 0x0) close(r0) (async) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r1, 0x1, 0x70bd28, 0x25dfdbfd, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x586}]}, 0x24}, 0x1, 0x0, 0x0, 0x8010}, 0x40044) (async) getpgrp(0xffffffffffffffff) (async) r2 = socket(0xa, 0x1, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x5, &(0x7f0000000000)=[{0x7, 0x1f, 0x81}, {0x8, 0x4, 0x4, 0x8}, {0x9, 0x4, 0x65, 0x5}, {0x80, 0xf8, 0x3, 0x4}, {0xc6, 0x0, 0x7, 0x570}]}) (async) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r2, 0x28, 0x2, 0x0, 0x0) 18:39:45 executing program 5: r0 = socket(0xa, 0x1, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000004, 0x10, r1, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(r1, 0x0, 0x485, 0x0, 0x0) r2 = signalfd(0xffffffffffffffff, 0x0, 0x0) close(r2) ioctl$SIOCGETSGCNT(r2, 0x89e1, &(0x7f0000000000)={@broadcast, @multicast2}) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x6, 0x2, 0x0, 0x0) 18:39:45 executing program 5: r0 = socket(0xa, 0x1, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000004, 0x10, r1, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(r1, 0x0, 0x485, 0x0, 0x0) r2 = signalfd(0xffffffffffffffff, 0x0, 0x0) close(r2) ioctl$SIOCGETSGCNT(r2, 0x89e1, &(0x7f0000000000)={@broadcast, @multicast2}) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x6, 0x2, 0x0, 0x0) socket(0xa, 0x1, 0x0) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000004, 0x10, r1, 0x0) (async) setsockopt$IP_VS_SO_SET_FLUSH(r1, 0x0, 0x485, 0x0, 0x0) (async) signalfd(0xffffffffffffffff, 0x0, 0x0) (async) close(r2) (async) ioctl$SIOCGETSGCNT(r2, 0x89e1, &(0x7f0000000000)={@broadcast, @multicast2}) (async) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x6, 0x2, 0x0, 0x0) (async) 18:39:45 executing program 5: r0 = socket(0xa, 0x1, 0x0) (async) r1 = socket$inet_udp(0x2, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000004, 0x10, r1, 0x0) (async) setsockopt$IP_VS_SO_SET_FLUSH(r1, 0x0, 0x485, 0x0, 0x0) r2 = signalfd(0xffffffffffffffff, 0x0, 0x0) close(r2) (async) ioctl$SIOCGETSGCNT(r2, 0x89e1, &(0x7f0000000000)={@broadcast, @multicast2}) (async) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x6, 0x2, 0x0, 0x0) [ 733.772218][T17485] FAULT_INJECTION: forcing a failure. [ 733.772218][T17485] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 733.795567][T17485] CPU: 1 PID: 17485 Comm: syz-executor.2 Tainted: G B W 5.15.74-syzkaller-04383-g7f2e600bf63a #0 [ 733.807043][T17485] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/11/2022 [ 733.816940][T17485] Call Trace: 18:39:45 executing program 5: r0 = socket(0xa, 0x1, 0x0) socketpair(0x22, 0x2, 0x400, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) accept4$bt_l2cap(r1, &(0x7f0000000080)={0x1f, 0x0, @none}, &(0x7f00000000c0)=0xe, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x6, 0x2, 0x0, 0x0) ioctl$F2FS_IOC_RESIZE_FS(r0, 0x4008f510, &(0x7f0000000000)=0x40) socketpair(0x6, 0x2, 0x9, &(0x7f0000000100)) [ 733.820057][T17485] [ 733.822832][T17485] dump_stack_lvl+0x151/0x1b7 [ 733.827346][T17485] ? bfq_pos_tree_add_move+0x43e/0x43e [ 733.832818][T17485] ? is_bpf_text_address+0x1a2/0x1c0 [ 733.837934][T17485] ? is_module_text_address+0xe1/0x140 [ 733.843231][T17485] dump_stack+0x15/0x17 [ 733.847220][T17485] should_fail+0x3c0/0x510 [ 733.851469][T17485] should_fail_alloc_page+0x58/0x70 [ 733.856505][T17485] __alloc_pages+0x1de/0x7c0 [ 733.860930][T17485] ? __count_vm_events+0x30/0x30 [ 733.865704][T17485] ? __stack_depot_save+0x34/0x4b0 [ 733.870651][T17485] ? anon_vma_clone+0xa1/0x4f0 [ 733.875251][T17485] __pmd_alloc+0xb1/0x550 [ 733.879504][T17485] ? __kasan_slab_alloc+0xb2/0xe0 [ 733.884516][T17485] ? kmem_cache_alloc+0x189/0x2f0 [ 733.889473][T17485] ? anon_vma_fork+0x1b9/0x4f0 [ 733.894073][T17485] ? dup_mmap+0x750/0xea0 [ 733.898247][T17485] ? dup_mm+0x91/0x330 [ 733.902234][T17485] ? copy_mm+0x108/0x1b0 [ 733.906316][T17485] ? kernel_clone+0x22d/0x990 [ 733.910911][T17485] ? __pud_alloc+0x260/0x260 [ 733.915353][T17485] copy_page_range+0xd04/0x1090 [ 733.920111][T17485] ? pfn_valid+0x1e0/0x1e0 [ 733.924454][T17485] dup_mmap+0x99f/0xea0 [ 733.928446][T17485] ? __delayed_free_task+0x20/0x20 [ 733.933392][T17485] ? mm_init+0x807/0x960 [ 733.937554][T17485] dup_mm+0x91/0x330 [ 733.941289][T17485] copy_mm+0x108/0x1b0 [ 733.945204][T17485] copy_process+0x1295/0x3250 [ 733.949709][T17485] ? proc_fail_nth_write+0x213/0x290 [ 733.954834][T17485] ? proc_fail_nth_read+0x220/0x220 [ 733.959864][T17485] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 733.964812][T17485] ? vfs_write+0x9af/0x1050 [ 733.969150][T17485] ? vmacache_update+0xb7/0x120 [ 733.973923][T17485] kernel_clone+0x22d/0x990 [ 733.978266][T17485] ? file_end_write+0x1b0/0x1b0 [ 733.982975][T17485] ? __kasan_check_write+0x14/0x20 [ 733.987897][T17485] ? create_io_thread+0x1e0/0x1e0 [ 733.992765][T17485] ? __mutex_lock_slowpath+0x10/0x10 [ 733.997879][T17485] __x64_sys_clone+0x289/0x310 [ 734.002480][T17485] ? __do_sys_vfork+0x130/0x130 [ 734.007174][T17485] ? debug_smp_processor_id+0x17/0x20 [ 734.012462][T17485] do_syscall_64+0x44/0xd0 [ 734.016827][T17485] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 734.022822][T17485] RIP: 0033:0x7fb67320a5a9 [ 734.027073][T17485] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 734.046508][T17485] RSP: 002b:00007fb671f7e118 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 734.054759][T17485] RAX: ffffffffffffffda RBX: 00007fb67332af80 RCX: 00007fb67320a5a9 [ 734.062566][T17485] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000010000000 18:39:45 executing program 2: syz_clone(0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 87) 18:39:45 executing program 4: r0 = signalfd(0xffffffffffffffff, 0x0, 0x0) close(r0) (async, rerun: 32) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) (rerun: 32) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r1, 0x1, 0x70bd28, 0x25dfdbfd, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x586}]}, 0x24}, 0x1, 0x0, 0x0, 0x8010}, 0x40044) (async) getpgrp(0xffffffffffffffff) r2 = socket(0xa, 0x1, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x5, &(0x7f0000000000)=[{0x7, 0x1f, 0x81}, {0x8, 0x4, 0x4, 0x8}, {0x9, 0x4, 0x65, 0x5}, {0x80, 0xf8, 0x3, 0x4}, {0xc6, 0x0, 0x7, 0x570}]}) (async) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r2, 0x28, 0x2, 0x0, 0x0) 18:39:45 executing program 5: r0 = socket(0xa, 0x1, 0x0) (async) socketpair(0x22, 0x2, 0x400, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) accept4$bt_l2cap(r1, &(0x7f0000000080)={0x1f, 0x0, @none}, &(0x7f00000000c0)=0xe, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x6, 0x2, 0x0, 0x0) (async) ioctl$F2FS_IOC_RESIZE_FS(r0, 0x4008f510, &(0x7f0000000000)=0x40) socketpair(0x6, 0x2, 0x9, &(0x7f0000000100)) 18:39:45 executing program 0: r0 = open_tree(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x100) ioctl$ASHMEM_PURGE_ALL_CACHES(r0, 0x770a, 0x0) (async) r1 = socket(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00'}) 18:39:45 executing program 1: r0 = socket(0xa, 0x1, 0x0) r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) setsockopt$bt_BT_VOICE(r1, 0x112, 0xb, &(0x7f0000000000)=0x60, 0x2) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x29, 0x2, 0x0, 0x0) r2 = signalfd(0xffffffffffffffff, 0x0, 0x0) close(r2) setsockopt$bt_BT_VOICE(r2, 0x112, 0xb, &(0x7f0000000040), 0x2) r3 = socket$inet_udp(0x2, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000004, 0x10, r3, 0x0) fstat(r3, &(0x7f0000000080)) socket(0xa, 0x1, 0x0) (async) pidfd_getfd(0xffffffffffffffff, r0, 0x0) (async) setsockopt$bt_BT_VOICE(r1, 0x112, 0xb, &(0x7f0000000000)=0x60, 0x2) (async) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x29, 0x2, 0x0, 0x0) (async) signalfd(0xffffffffffffffff, 0x0, 0x0) (async) close(r2) (async) setsockopt$bt_BT_VOICE(r2, 0x112, 0xb, &(0x7f0000000040), 0x2) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000004, 0x10, r3, 0x0) (async) fstat(r3, &(0x7f0000000080)) (async) 18:39:45 executing program 3: r0 = socket(0xa, 0x1, 0x0) r1 = signalfd(0xffffffffffffffff, 0x0, 0x0) close(r1) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100), r0) sendmsg$BATADV_CMD_GET_VLAN(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, r2, 0x400, 0x70bd28, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8}]}, 0xfffffffffffffc42}, 0x1, 0x0, 0x0, 0x24040055}, 0xa841) setsockopt$MRT_DEL_VIF(r0, 0x0, 0xcb, 0x0, 0x0) 18:39:45 executing program 3: r0 = socket(0xa, 0x1, 0x0) (async) r1 = signalfd(0xffffffffffffffff, 0x0, 0x0) close(r1) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100), r0) sendmsg$BATADV_CMD_GET_VLAN(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, r2, 0x400, 0x70bd28, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8}]}, 0xfffffffffffffc42}, 0x1, 0x0, 0x0, 0x24040055}, 0xa841) (async) setsockopt$MRT_DEL_VIF(r0, 0x0, 0xcb, 0x0, 0x0) 18:39:45 executing program 0: getpeername$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000080)=0x14) accept4$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000100)=0x14, 0x800) r0 = socket(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00'}) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000140)={0xfff, 0x400, 0x4, 0x5, 0x4, 0x2}) [ 734.070381][T17485] RBP: 00007fb671f7e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 734.078191][T17485] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 734.085999][T17485] R13: 00007ffe782f632f R14: 00007fb671f7e300 R15: 0000000000022000 [ 734.093902][T17485] 18:39:45 executing program 5: r0 = socket(0xa, 0x1, 0x0) (async) socketpair(0x22, 0x2, 0x400, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) accept4$bt_l2cap(r1, &(0x7f0000000080)={0x1f, 0x0, @none}, &(0x7f00000000c0)=0xe, 0x0) (async) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x6, 0x2, 0x0, 0x0) (async) ioctl$F2FS_IOC_RESIZE_FS(r0, 0x4008f510, &(0x7f0000000000)=0x40) (async) socketpair(0x6, 0x2, 0x9, &(0x7f0000000100)) 18:39:45 executing program 1: r0 = socket(0xa, 0x1, 0x0) r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) setsockopt$bt_BT_VOICE(r1, 0x112, 0xb, &(0x7f0000000000)=0x60, 0x2) (async) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x29, 0x2, 0x0, 0x0) (async) r2 = signalfd(0xffffffffffffffff, 0x0, 0x0) close(r2) (async) setsockopt$bt_BT_VOICE(r2, 0x112, 0xb, &(0x7f0000000040), 0x2) (async) r3 = socket$inet_udp(0x2, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000004, 0x10, r3, 0x0) (async) fstat(r3, &(0x7f0000000080)) 18:39:45 executing program 0: getpeername$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000080)=0x14) accept4$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000100)=0x14, 0x800) r0 = socket(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00'}) (async) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000140)={0xfff, 0x400, 0x4, 0x5, 0x4, 0x2}) 18:39:45 executing program 5: r0 = socket(0xa, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x6, 0x2, 0x0, 0x0) ioctl$int_in(r0, 0x5421, &(0x7f0000000040)=0x7fff) syz_genetlink_get_family_id$wireguard(&(0x7f0000000000), r0) [ 734.130279][T17532] FAULT_INJECTION: forcing a failure. [ 734.130279][T17532] name failslab, interval 1, probability 0, space 0, times 0 [ 734.143502][T17532] CPU: 1 PID: 17532 Comm: syz-executor.2 Tainted: G B W 5.15.74-syzkaller-04383-g7f2e600bf63a #0 [ 734.155224][T17532] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/11/2022 [ 734.165125][T17532] Call Trace: [ 734.168331][T17532] [ 734.171107][T17532] dump_stack_lvl+0x151/0x1b7 [ 734.175622][T17532] ? bfq_pos_tree_add_move+0x43e/0x43e [ 734.180917][T17532] ? do_syscall_64+0x44/0xd0 [ 734.185436][T17532] dump_stack+0x15/0x17 [ 734.189437][T17532] should_fail+0x3c0/0x510 [ 734.193857][T17532] __should_failslab+0x9f/0xe0 [ 734.198455][T17532] should_failslab+0x9/0x20 [ 734.202788][T17532] kmem_cache_alloc+0x4f/0x2f0 [ 734.207393][T17532] ? anon_vma_clone+0xa1/0x4f0 [ 734.212070][T17532] anon_vma_clone+0xa1/0x4f0 [ 734.216499][T17532] anon_vma_fork+0x91/0x4f0 [ 734.220837][T17532] ? anon_vma_name+0x4c/0x70 [ 734.225263][T17532] dup_mmap+0x750/0xea0 [ 734.229260][T17532] ? __delayed_free_task+0x20/0x20 [ 734.234208][T17532] ? mm_init+0x807/0x960 [ 734.238288][T17532] dup_mm+0x91/0x330 [ 734.242023][T17532] copy_mm+0x108/0x1b0 [ 734.246012][T17532] copy_process+0x1295/0x3250 [ 734.250532][T17532] ? proc_fail_nth_write+0x213/0x290 [ 734.255820][T17532] ? proc_fail_nth_read+0x220/0x220 [ 734.260877][T17532] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 734.265801][T17532] ? vfs_write+0x9af/0x1050 [ 734.270141][T17532] ? vmacache_update+0xb7/0x120 [ 734.274828][T17532] kernel_clone+0x22d/0x990 [ 734.279166][T17532] ? file_end_write+0x1b0/0x1b0 [ 734.284387][T17532] ? __kasan_check_write+0x14/0x20 [ 734.289329][T17532] ? create_io_thread+0x1e0/0x1e0 [ 734.294185][T17532] ? __mutex_lock_slowpath+0x10/0x10 [ 734.299305][T17532] __x64_sys_clone+0x289/0x310 [ 734.303915][T17532] ? __do_sys_vfork+0x130/0x130 [ 734.308592][T17532] ? debug_smp_processor_id+0x17/0x20 [ 734.313805][T17532] do_syscall_64+0x44/0xd0 [ 734.318054][T17532] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 734.323779][T17532] RIP: 0033:0x7fb67320a5a9 [ 734.328044][T17532] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 734.347649][T17532] RSP: 002b:00007fb671f7e118 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 734.356184][T17532] RAX: ffffffffffffffda RBX: 00007fb67332af80 RCX: 00007fb67320a5a9 [ 734.364079][T17532] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000010000000 [ 734.371890][T17532] RBP: 00007fb671f7e1d0 R08: 0000000000000000 R09: 0000000000000000 18:39:45 executing program 2: syz_clone(0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 88) 18:39:45 executing program 1: r0 = socket(0x15, 0x1, 0x4) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x29, 0x2, 0x0, 0x0) sendmsg$nl_netfilter(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x1, 0x2, 0x905, 0x70bd2b, 0x25dfdbfd, {0x2}, [@typed={0x4, 0x6e}, @typed={0x4, 0x2a}]}, 0x1c}}, 0x24000010) 18:39:45 executing program 5: r0 = socket(0xa, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x6, 0x2, 0x0, 0x0) ioctl$int_in(r0, 0x5421, &(0x7f0000000040)=0x7fff) syz_genetlink_get_family_id$wireguard(&(0x7f0000000000), r0) socket(0xa, 0x1, 0x0) (async) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x6, 0x2, 0x0, 0x0) (async) ioctl$int_in(r0, 0x5421, &(0x7f0000000040)=0x7fff) (async) syz_genetlink_get_family_id$wireguard(&(0x7f0000000000), r0) (async) 18:39:45 executing program 0: getpeername$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000080)=0x14) (async, rerun: 64) accept4$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000100)=0x14, 0x800) (async, rerun: 64) r0 = socket(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00'}) (async, rerun: 64) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000140)={0xfff, 0x400, 0x4, 0x5, 0x4, 0x2}) (rerun: 64) 18:39:45 executing program 4: r0 = socket(0x9, 0x1, 0x3) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x28, 0x2, 0x0, 0x0) 18:39:45 executing program 3: r0 = socket(0xa, 0x1, 0x0) (async) r1 = signalfd(0xffffffffffffffff, 0x0, 0x0) close(r1) (async) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100), r0) sendmsg$BATADV_CMD_GET_VLAN(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, r2, 0x400, 0x70bd28, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8}]}, 0xfffffffffffffc42}, 0x1, 0x0, 0x0, 0x24040055}, 0xa841) setsockopt$MRT_DEL_VIF(r0, 0x0, 0xcb, 0x0, 0x0) 18:39:45 executing program 5: r0 = socket(0xa, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x6, 0x2, 0x0, 0x0) ioctl$int_in(r0, 0x5421, &(0x7f0000000040)=0x7fff) syz_genetlink_get_family_id$wireguard(&(0x7f0000000000), r0) socket(0xa, 0x1, 0x0) (async) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x6, 0x2, 0x0, 0x0) (async) ioctl$int_in(r0, 0x5421, &(0x7f0000000040)=0x7fff) (async) syz_genetlink_get_family_id$wireguard(&(0x7f0000000000), r0) (async) 18:39:45 executing program 4: r0 = socket(0x9, 0x1, 0x3) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x28, 0x2, 0x0, 0x0) 18:39:45 executing program 1: r0 = socket(0x15, 0x1, 0x4) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x29, 0x2, 0x0, 0x0) (async) sendmsg$nl_netfilter(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x1, 0x2, 0x905, 0x70bd2b, 0x25dfdbfd, {0x2}, [@typed={0x4, 0x6e}, @typed={0x4, 0x2a}]}, 0x1c}}, 0x24000010) 18:39:45 executing program 0: r0 = socket(0xa, 0x1, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000004, 0x10, r1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00'}) fgetxattr(r0, &(0x7f0000000040)=@random={'osx.', '\'}\x00'}, &(0x7f0000000080)=""/201, 0xc9) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00'}) [ 734.379704][T17532] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 734.387512][T17532] R13: 00007ffe782f632f R14: 00007fb671f7e300 R15: 0000000000022000 [ 734.395326][T17532] 18:39:45 executing program 3: r0 = socket(0xa, 0x1, 0x0) setsockopt$MRT_DEL_VIF(r0, 0x0, 0xcb, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000100)={'sit0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x8000, 0x20, 0x4, 0x7, {{0x2a, 0x4, 0x3, 0x1, 0xa8, 0x66, 0x0, 0x1, 0x2, 0x0, @local, @local, {[@timestamp={0x44, 0x14, 0x25, 0x0, 0x6, [0x3, 0x5, 0xa2d, 0x857f]}, @rr={0x7, 0xf, 0xb8, [@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, @dev={0xac, 0x14, 0x14, 0x24}]}, @timestamp={0x44, 0x10, 0xb8, 0x0, 0x4, [0x6, 0x4, 0x7]}, @lsrr={0x83, 0x1b, 0x2e, [@dev={0xac, 0x14, 0x14, 0x38}, @multicast2, @empty, @loopback, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @end, @end, @timestamp_prespec={0x44, 0x1c, 0x77, 0x3, 0x5, [{@dev={0xac, 0x14, 0x14, 0x34}, 0x3}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x2}, {@rand_addr=0x64010100, 0x9}]}, @end, @rr={0x7, 0x27, 0x17, [@private=0xa010101, @private=0xa010102, @broadcast, @broadcast, @dev={0xac, 0x14, 0x14, 0x1e}, @local, @broadcast, @broadcast, @dev={0xac, 0x14, 0x14, 0x36}]}]}}}}}) 18:39:45 executing program 4: r0 = socket(0x9, 0x1, 0x3) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x28, 0x2, 0x0, 0x0) socket(0x9, 0x1, 0x3) (async) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x28, 0x2, 0x0, 0x0) (async) [ 734.454489][T17583] FAULT_INJECTION: forcing a failure. [ 734.454489][T17583] name failslab, interval 1, probability 0, space 0, times 0 [ 734.468079][T17583] CPU: 1 PID: 17583 Comm: syz-executor.2 Tainted: G B W 5.15.74-syzkaller-04383-g7f2e600bf63a #0 [ 734.479709][T17583] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/11/2022 [ 734.489673][T17583] Call Trace: [ 734.492799][T17583] [ 734.495671][T17583] dump_stack_lvl+0x151/0x1b7 [ 734.500177][T17583] ? bfq_pos_tree_add_move+0x43e/0x43e [ 734.505470][T17583] dump_stack+0x15/0x17 [ 734.509464][T17583] should_fail+0x3c0/0x510 [ 734.513823][T17583] __should_failslab+0x9f/0xe0 [ 734.518420][T17583] should_failslab+0x9/0x20 [ 734.522759][T17583] kmem_cache_alloc+0x4f/0x2f0 [ 734.527358][T17583] ? vm_area_dup+0x26/0x1d0 [ 734.531696][T17583] vm_area_dup+0x26/0x1d0 [ 734.535867][T17583] dup_mmap+0x6b8/0xea0 [ 734.539856][T17583] ? __delayed_free_task+0x20/0x20 [ 734.544803][T17583] ? mm_init+0x807/0x960 [ 734.548887][T17583] dup_mm+0x91/0x330 [ 734.552706][T17583] copy_mm+0x108/0x1b0 [ 734.556609][T17583] copy_process+0x1295/0x3250 [ 734.561132][T17583] ? proc_fail_nth_write+0x213/0x290 [ 734.566241][T17583] ? proc_fail_nth_read+0x220/0x220 [ 734.571283][T17583] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 734.576222][T17583] ? vfs_write+0x9af/0x1050 [ 734.580565][T17583] ? vmacache_update+0xb7/0x120 [ 734.585250][T17583] kernel_clone+0x22d/0x990 [ 734.589590][T17583] ? file_end_write+0x1b0/0x1b0 [ 734.594286][T17583] ? __kasan_check_write+0x14/0x20 [ 734.599312][T17583] ? create_io_thread+0x1e0/0x1e0 [ 734.604173][T17583] ? __mutex_lock_slowpath+0x10/0x10 [ 734.609326][T17583] __x64_sys_clone+0x289/0x310 [ 734.613902][T17583] ? __do_sys_vfork+0x130/0x130 [ 734.618577][T17583] ? debug_smp_processor_id+0x17/0x20 [ 734.623785][T17583] do_syscall_64+0x44/0xd0 [ 734.628038][T17583] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 734.633767][T17583] RIP: 0033:0x7fb67320a5a9 [ 734.638020][T17583] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 734.657643][T17583] RSP: 002b:00007fb671f7e118 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 734.665983][T17583] RAX: ffffffffffffffda RBX: 00007fb67332af80 RCX: 00007fb67320a5a9 [ 734.673974][T17583] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000010000000 [ 734.681872][T17583] RBP: 00007fb671f7e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 734.689679][T17583] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 734.697491][T17583] R13: 00007ffe782f632f R14: 00007fb671f7e300 R15: 0000000000022000 18:39:46 executing program 2: syz_clone(0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 89) 18:39:46 executing program 5: r0 = socket(0x1a, 0x1, 0x0) r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) sendmsg$nl_netfilter(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x10, 0x6, 0x3, 0x70bd25, 0x25dfdbff, {0x7, 0x0, 0x1}, [@typed={0x8, 0x96, 0x0, 0x0, @u32=0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4800) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x6, 0x2, 0x0, 0x0) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f0000000100)="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") ioctl$BTRFS_IOC_WAIT_SYNC(r0, 0x40089416, &(0x7f0000000200)) fsmount(0xffffffffffffffff, 0x0, 0xb) 18:39:46 executing program 1: r0 = socket(0x15, 0x1, 0x4) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x29, 0x2, 0x0, 0x0) sendmsg$nl_netfilter(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x1, 0x2, 0x905, 0x70bd2b, 0x25dfdbfd, {0x2}, [@typed={0x4, 0x6e}, @typed={0x4, 0x2a}]}, 0x1c}}, 0x24000010) 18:39:46 executing program 0: r0 = socket(0xa, 0x1, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000004, 0x10, r1, 0x0) (async, rerun: 32) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00'}) (async, rerun: 32) fgetxattr(r0, &(0x7f0000000040)=@random={'osx.', '\'}\x00'}, &(0x7f0000000080)=""/201, 0xc9) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00'}) 18:39:46 executing program 3: r0 = socket(0xa, 0x1, 0x0) setsockopt$MRT_DEL_VIF(r0, 0x0, 0xcb, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000100)={'sit0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x8000, 0x20, 0x4, 0x7, {{0x2a, 0x4, 0x3, 0x1, 0xa8, 0x66, 0x0, 0x1, 0x2, 0x0, @local, @local, {[@timestamp={0x44, 0x14, 0x25, 0x0, 0x6, [0x3, 0x5, 0xa2d, 0x857f]}, @rr={0x7, 0xf, 0xb8, [@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, @dev={0xac, 0x14, 0x14, 0x24}]}, @timestamp={0x44, 0x10, 0xb8, 0x0, 0x4, [0x6, 0x4, 0x7]}, @lsrr={0x83, 0x1b, 0x2e, [@dev={0xac, 0x14, 0x14, 0x38}, @multicast2, @empty, @loopback, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @end, @end, @timestamp_prespec={0x44, 0x1c, 0x77, 0x3, 0x5, [{@dev={0xac, 0x14, 0x14, 0x34}, 0x3}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x2}, {@rand_addr=0x64010100, 0x9}]}, @end, @rr={0x7, 0x27, 0x17, [@private=0xa010101, @private=0xa010102, @broadcast, @broadcast, @dev={0xac, 0x14, 0x14, 0x1e}, @local, @broadcast, @broadcast, @dev={0xac, 0x14, 0x14, 0x36}]}]}}}}}) socket(0xa, 0x1, 0x0) (async) setsockopt$MRT_DEL_VIF(r0, 0x0, 0xcb, 0x0, 0x0) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000100)={'sit0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x8000, 0x20, 0x4, 0x7, {{0x2a, 0x4, 0x3, 0x1, 0xa8, 0x66, 0x0, 0x1, 0x2, 0x0, @local, @local, {[@timestamp={0x44, 0x14, 0x25, 0x0, 0x6, [0x3, 0x5, 0xa2d, 0x857f]}, @rr={0x7, 0xf, 0xb8, [@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, @dev={0xac, 0x14, 0x14, 0x24}]}, @timestamp={0x44, 0x10, 0xb8, 0x0, 0x4, [0x6, 0x4, 0x7]}, @lsrr={0x83, 0x1b, 0x2e, [@dev={0xac, 0x14, 0x14, 0x38}, @multicast2, @empty, @loopback, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @end, @end, @timestamp_prespec={0x44, 0x1c, 0x77, 0x3, 0x5, [{@dev={0xac, 0x14, 0x14, 0x34}, 0x3}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x2}, {@rand_addr=0x64010100, 0x9}]}, @end, @rr={0x7, 0x27, 0x17, [@private=0xa010101, @private=0xa010102, @broadcast, @broadcast, @dev={0xac, 0x14, 0x14, 0x1e}, @local, @broadcast, @broadcast, @dev={0xac, 0x14, 0x14, 0x36}]}]}}}}}) (async) 18:39:46 executing program 4: r0 = socket(0xa, 0x1, 0x0) fstat(r0, &(0x7f0000000000)) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x28, 0x2, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) 18:39:46 executing program 0: r0 = socket(0xa, 0x1, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000004, 0x10, r1, 0x0) (async, rerun: 64) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00'}) (async, rerun: 64) fgetxattr(r0, &(0x7f0000000040)=@random={'osx.', '\'}\x00'}, &(0x7f0000000080)=""/201, 0xc9) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00'}) 18:39:46 executing program 3: r0 = socket(0xa, 0x1, 0x0) setsockopt$MRT_DEL_VIF(r0, 0x0, 0xcb, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000100)={'sit0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x8000, 0x20, 0x4, 0x7, {{0x2a, 0x4, 0x3, 0x1, 0xa8, 0x66, 0x0, 0x1, 0x2, 0x0, @local, @local, {[@timestamp={0x44, 0x14, 0x25, 0x0, 0x6, [0x3, 0x5, 0xa2d, 0x857f]}, @rr={0x7, 0xf, 0xb8, [@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, @dev={0xac, 0x14, 0x14, 0x24}]}, @timestamp={0x44, 0x10, 0xb8, 0x0, 0x4, [0x6, 0x4, 0x7]}, @lsrr={0x83, 0x1b, 0x2e, [@dev={0xac, 0x14, 0x14, 0x38}, @multicast2, @empty, @loopback, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @end, @end, @timestamp_prespec={0x44, 0x1c, 0x77, 0x3, 0x5, [{@dev={0xac, 0x14, 0x14, 0x34}, 0x3}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x2}, {@rand_addr=0x64010100, 0x9}]}, @end, @rr={0x7, 0x27, 0x17, [@private=0xa010101, @private=0xa010102, @broadcast, @broadcast, @dev={0xac, 0x14, 0x14, 0x1e}, @local, @broadcast, @broadcast, @dev={0xac, 0x14, 0x14, 0x36}]}]}}}}}) socket(0xa, 0x1, 0x0) (async) setsockopt$MRT_DEL_VIF(r0, 0x0, 0xcb, 0x0, 0x0) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000100)={'sit0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x8000, 0x20, 0x4, 0x7, {{0x2a, 0x4, 0x3, 0x1, 0xa8, 0x66, 0x0, 0x1, 0x2, 0x0, @local, @local, {[@timestamp={0x44, 0x14, 0x25, 0x0, 0x6, [0x3, 0x5, 0xa2d, 0x857f]}, @rr={0x7, 0xf, 0xb8, [@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, @dev={0xac, 0x14, 0x14, 0x24}]}, @timestamp={0x44, 0x10, 0xb8, 0x0, 0x4, [0x6, 0x4, 0x7]}, @lsrr={0x83, 0x1b, 0x2e, [@dev={0xac, 0x14, 0x14, 0x38}, @multicast2, @empty, @loopback, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @end, @end, @timestamp_prespec={0x44, 0x1c, 0x77, 0x3, 0x5, [{@dev={0xac, 0x14, 0x14, 0x34}, 0x3}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x2}, {@rand_addr=0x64010100, 0x9}]}, @end, @rr={0x7, 0x27, 0x17, [@private=0xa010101, @private=0xa010102, @broadcast, @broadcast, @dev={0xac, 0x14, 0x14, 0x1e}, @local, @broadcast, @broadcast, @dev={0xac, 0x14, 0x14, 0x36}]}]}}}}}) (async) [ 734.705309][T17583] 18:39:46 executing program 5: r0 = socket(0x1a, 0x1, 0x0) r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) sendmsg$nl_netfilter(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x10, 0x6, 0x3, 0x70bd25, 0x25dfdbff, {0x7, 0x0, 0x1}, [@typed={0x8, 0x96, 0x0, 0x0, @u32=0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4800) (async) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x6, 0x2, 0x0, 0x0) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f0000000100)="102187e571a003889015c0c7481e081b4d2c3b4c3248738e4a178e61fe9c4a5a5e36aaac939d7b997451ff7fb6d437d2893e57e2ced1dcb40b39858429ec7fc75a4215ed88d55f28904118eaad22b106b769aab47630a3547b4f1aa3c1f005e89c527f26b5cc69a59a18b4a37e59cb2cb73e23f1a3f56d85a53cf3b35558bd83c5a297d34f6a34200c5fb6e1b48dea73c4d01049c1fefd988eda5d275c804788cdff3f2b88e26bcb9d45d4067eea418bda1cb8d8e5b9b944afa701a90b426e1e136233c72f710df3f4f2adb609334ae8199d8a0648eee9540c861e9a85788e395e57bd584729fe02a81d09ff26a79067a27e84a7edbd0395bc5f85b8e9549bf9") (async) ioctl$BTRFS_IOC_WAIT_SYNC(r0, 0x40089416, &(0x7f0000000200)) (async) fsmount(0xffffffffffffffff, 0x0, 0xb) 18:39:46 executing program 4: r0 = socket(0xa, 0x1, 0x0) fstat(r0, &(0x7f0000000000)) (async) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x28, 0x2, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) 18:39:46 executing program 1: r0 = socket(0xa, 0x1, 0x0) fcntl$getown(r0, 0x9) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x29, 0x2, 0x0, 0x0) socketpair(0x16, 0x1, 0x2, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = open$dir(&(0x7f0000000040)='./file0\x00', 0x301200, 0x2a) r3 = socket$inet_udp(0x2, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000004, 0x10, r3, 0x0) eventfd2(0x4, 0x800) accept$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000100)=0x14) fcntl$F_SET_FILE_RW_HINT(r2, 0x40e, &(0x7f0000000140)) 18:39:46 executing program 5: r0 = socket(0x1a, 0x1, 0x0) r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) sendmsg$nl_netfilter(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x10, 0x6, 0x3, 0x70bd25, 0x25dfdbff, {0x7, 0x0, 0x1}, [@typed={0x8, 0x96, 0x0, 0x0, @u32=0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4800) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x6, 0x2, 0x0, 0x0) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f0000000100)="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") ioctl$BTRFS_IOC_WAIT_SYNC(r0, 0x40089416, &(0x7f0000000200)) fsmount(0xffffffffffffffff, 0x0, 0xb) socket(0x1a, 0x1, 0x0) (async) pidfd_getfd(0xffffffffffffffff, r0, 0x0) (async) sendmsg$nl_netfilter(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x10, 0x6, 0x3, 0x70bd25, 0x25dfdbff, {0x7, 0x0, 0x1}, [@typed={0x8, 0x96, 0x0, 0x0, @u32=0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4800) (async) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x6, 0x2, 0x0, 0x0) (async) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f0000000100)="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") (async) ioctl$BTRFS_IOC_WAIT_SYNC(r0, 0x40089416, &(0x7f0000000200)) (async) fsmount(0xffffffffffffffff, 0x0, 0xb) (async) [ 734.737656][T17605] FAULT_INJECTION: forcing a failure. [ 734.737656][T17605] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 734.763253][T17605] CPU: 0 PID: 17605 Comm: syz-executor.2 Tainted: G B W 5.15.74-syzkaller-04383-g7f2e600bf63a #0 [ 734.774721][T17605] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/11/2022 [ 734.784617][T17605] Call Trace: [ 734.787743][T17605] [ 734.790785][T17605] dump_stack_lvl+0x151/0x1b7 [ 734.795295][T17605] ? bfq_pos_tree_add_move+0x43e/0x43e [ 734.800596][T17605] ? is_bpf_text_address+0x1a2/0x1c0 [ 734.805892][T17605] ? is_module_text_address+0xe1/0x140 [ 734.811176][T17605] dump_stack+0x15/0x17 [ 734.815168][T17605] should_fail+0x3c0/0x510 [ 734.819420][T17605] should_fail_alloc_page+0x58/0x70 [ 734.824453][T17605] __alloc_pages+0x1de/0x7c0 [ 734.828885][T17605] ? __count_vm_events+0x30/0x30 [ 734.833653][T17605] ? __kernel_text_address+0x9a/0x110 [ 734.838872][T17605] wp_page_copy+0x20d/0x1920 [ 734.843289][T17605] ? cpumask_next+0x8a/0xb0 [ 734.847819][T17605] ? __kasan_check_write+0x14/0x20 [ 734.852762][T17605] ? _raw_spin_trylock+0xe2/0x1e0 [ 734.857616][T17605] ? insert_page_into_pte_locked+0x3b0/0x3b0 [ 734.863441][T17605] ? __pte_map_lock+0x594/0x660 [ 734.868125][T17605] ? vm_normal_page+0x97/0x1f0 [ 734.872717][T17605] do_wp_page+0x7a4/0xb40 [ 734.876885][T17605] handle_pte_fault+0x547/0x11d0 [ 734.881657][T17605] ? update_load_avg+0x415/0x8e0 [ 734.886432][T17605] ? cgroup_rstat_updated+0xe5/0x380 [ 734.891645][T17605] ? fault_around_bytes_set+0xc0/0xc0 [ 734.896855][T17605] ? do_handle_mm_fault+0x142f/0x2370 [ 734.902079][T17605] ? memcpy+0x56/0x70 [ 734.905878][T17605] do_handle_mm_fault+0x2073/0x2370 [ 734.910916][T17605] ? numa_migrate_prep+0xe0/0xe0 [ 734.915796][T17605] ? activate_task+0x1ad/0x480 [ 734.920379][T17605] ? _raw_spin_unlock_irqrestore+0x5c/0x80 [ 734.926192][T17605] ? wake_up_new_task+0x65f/0x9f0 [ 734.931050][T17605] ? _raw_spin_trylock_bh+0x1d0/0x1d0 [ 734.936453][T17605] ? to_ratio+0x30/0x30 [ 734.940425][T17605] ? do_user_addr_fault+0xad2/0x1220 [ 734.945550][T17605] ? access_error+0x251/0x270 [ 734.950060][T17605] do_user_addr_fault+0xb5d/0x1220 [ 734.955102][T17605] ? do_kern_addr_fault+0x80/0x80 [ 734.959956][T17605] ? switch_fpu_return+0xe/0x10 [ 734.964638][T17605] exc_page_fault+0x68/0x1a0 [ 734.969064][T17605] asm_exc_page_fault+0x27/0x30 [ 734.973750][T17605] RIP: 0033:0x7fb6731a9de0 [ 734.978019][T17605] Code: c0 75 27 69 3d dd a5 ca 00 b8 0b 00 00 e8 38 07 06 00 31 f6 bf 3c 00 00 00 31 c0 e8 ba 07 06 00 eb fe 0f 1f 84 00 00 00 00 00 <64> c7 04 25 b4 ff ff ff 00 00 00 00 48 83 c4 38 c3 66 66 2e 0f 1f [ 734.997799][T17605] RSP: 002b:00007fb671f7e120 EFLAGS: 00010202 [ 735.003698][T17605] RAX: 0000000000002fab RBX: 00007fb67332af80 RCX: 00007fb67320a5a9 [ 735.011507][T17605] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000010000000 [ 735.019319][T17605] RBP: 00007fb671f7e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 735.027217][T17605] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 18:39:46 executing program 2: syz_clone(0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 90) 18:39:46 executing program 1: r0 = socket(0xa, 0x1, 0x0) fcntl$getown(r0, 0x9) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x29, 0x2, 0x0, 0x0) socketpair(0x16, 0x1, 0x2, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = open$dir(&(0x7f0000000040)='./file0\x00', 0x301200, 0x2a) r3 = socket$inet_udp(0x2, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000004, 0x10, r3, 0x0) eventfd2(0x4, 0x800) accept$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000100)=0x14) fcntl$F_SET_FILE_RW_HINT(r2, 0x40e, &(0x7f0000000140)) socket(0xa, 0x1, 0x0) (async) fcntl$getown(r0, 0x9) (async) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) (async) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x29, 0x2, 0x0, 0x0) (async) socketpair(0x16, 0x1, 0x2, &(0x7f0000000000)) (async) open$dir(&(0x7f0000000040)='./file0\x00', 0x301200, 0x2a) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000004, 0x10, r3, 0x0) (async) eventfd2(0x4, 0x800) (async) accept$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000100)=0x14) (async) fcntl$F_SET_FILE_RW_HINT(r2, 0x40e, &(0x7f0000000140)) (async) 18:39:46 executing program 5: r0 = socket(0xa, 0x1, 0x0) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="02032dbd7000fddbdf250d00000008e42a00f40100000800d0000600000005002d00010000e07ce63b00aaaaaaaaaabb0000"], 0x38}}, 0x1000) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x6, 0x2, 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000540)={0x5, &(0x7f0000000500)=[{0x8000, 0x0, 0x81}, {}, {0x2, 0x2, 0x40}, {}, {}]}) fcntl$F_SET_FILE_RW_HINT(r1, 0x40e, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000000100)) 18:39:46 executing program 3: r0 = socket(0xa, 0x1, 0x0) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(0x0, r3, 0x7, 0xffffffffffffffff, 0x0) r4 = getpgrp(r1) kcmp$KCMP_EPOLL_TFD(r4, r2, 0x7, r0, &(0x7f0000000080)={0xffffffffffffffff, r0, 0x8}) r5 = signalfd(0xffffffffffffffff, 0x0, 0x0) close(r5) getsockopt$bt_BT_DEFER_SETUP(r5, 0x112, 0x7, &(0x7f0000000000), &(0x7f0000000040)=0x4) setsockopt$MRT_DEL_VIF(r0, 0x0, 0xcb, 0x0, 0x0) 18:39:46 executing program 4: r0 = socket(0xa, 0x1, 0x0) fstat(r0, &(0x7f0000000000)) (async) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x28, 0x2, 0x0, 0x0) (async) socket$inet_udp(0x2, 0x2, 0x0) 18:39:46 executing program 0: r0 = socket(0x21, 0x1, 0x6) r1 = socket$inet_udp(0x2, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000004, 0x10, r1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00'}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00'}) 18:39:46 executing program 4: r0 = socket(0xf, 0xa, 0xfffd) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x28, 0x2, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000040)={0x0, 0x2, r0, 0x3}) getsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, &(0x7f0000000000), 0x2) 18:39:46 executing program 5: r0 = socket(0xa, 0x1, 0x0) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="02032dbd7000fddbdf250d00000008e42a00f40100000800d0000600000005002d00010000e07ce63b00aaaaaaaaaabb0000"], 0x38}}, 0x1000) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x6, 0x2, 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000540)={0x5, &(0x7f0000000500)=[{0x8000, 0x0, 0x81}, {}, {0x2, 0x2, 0x40}, {}, {}]}) fcntl$F_SET_FILE_RW_HINT(r1, 0x40e, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000000100)) socket(0xa, 0x1, 0x0) (async) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="02032dbd7000fddbdf250d00000008e42a00f40100000800d0000600000005002d00010000e07ce63b00aaaaaaaaaabb0000"], 0x38}}, 0x1000) (async) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x6, 0x2, 0x0, 0x0) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000540)={0x5, &(0x7f0000000500)=[{0x8000, 0x0, 0x81}, {}, {0x2, 0x2, 0x40}, {}, {}]}) (async) fcntl$F_SET_FILE_RW_HINT(r1, 0x40e, 0x0) (async) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000000100)) (async) 18:39:46 executing program 0: r0 = socket(0x21, 0x1, 0x6) r1 = socket$inet_udp(0x2, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000004, 0x10, r1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00'}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00'}) socket(0x21, 0x1, 0x6) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000004, 0x10, r1, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00'}) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00'}) (async) 18:39:46 executing program 4: r0 = socket(0xf, 0xa, 0xfffd) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x28, 0x2, 0x0, 0x0) (async) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000040)={0x0, 0x2, r0, 0x3}) (async) getsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, &(0x7f0000000000), 0x2) [ 735.035028][T17605] R13: 00007ffe782f632f R14: 00007fb671f7e300 R15: 0000000000022000 [ 735.042955][T17605] [ 735.051907][T17605] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF 18:39:46 executing program 1: r0 = socket(0xa, 0x1, 0x0) fcntl$getown(r0, 0x9) (async, rerun: 64) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) (rerun: 64) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x29, 0x2, 0x0, 0x0) (async) socketpair(0x16, 0x1, 0x2, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r2 = open$dir(&(0x7f0000000040)='./file0\x00', 0x301200, 0x2a) r3 = socket$inet_udp(0x2, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000004, 0x10, r3, 0x0) eventfd2(0x4, 0x800) (async) accept$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000100)=0x14) fcntl$F_SET_FILE_RW_HINT(r2, 0x40e, &(0x7f0000000140)) 18:39:46 executing program 5: r0 = socket(0xa, 0x1, 0x0) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="02032dbd7000fddbdf250d00000008e42a00f40100000800d0000600000005002d00010000e07ce63b00aaaaaaaaaabb0000"], 0x38}}, 0x1000) (async, rerun: 64) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x6, 0x2, 0x0, 0x0) (async, rerun: 64) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000540)={0x5, &(0x7f0000000500)=[{0x8000, 0x0, 0x81}, {}, {0x2, 0x2, 0x40}, {}, {}]}) fcntl$F_SET_FILE_RW_HINT(r1, 0x40e, 0x0) (async) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000000100)) [ 735.108018][T17649] FAULT_INJECTION: forcing a failure. [ 735.108018][T17649] name failslab, interval 1, probability 0, space 0, times 0 [ 735.132607][T17649] CPU: 0 PID: 17649 Comm: syz-executor.2 Tainted: G B W 5.15.74-syzkaller-04383-g7f2e600bf63a #0 [ 735.144152][T17649] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/11/2022 [ 735.154047][T17649] Call Trace: [ 735.157178][T17649] [ 735.159963][T17649] dump_stack_lvl+0x151/0x1b7 [ 735.164463][T17649] ? bfq_pos_tree_add_move+0x43e/0x43e [ 735.169759][T17649] ? vma_interval_tree_augment_rotate+0x210/0x210 [ 735.176003][T17649] dump_stack+0x15/0x17 [ 735.180105][T17649] should_fail+0x3c0/0x510 [ 735.184351][T17649] __should_failslab+0x9f/0xe0 [ 735.189038][T17649] should_failslab+0x9/0x20 [ 735.193464][T17649] kmem_cache_alloc+0x4f/0x2f0 [ 735.198154][T17649] ? anon_vma_fork+0xf7/0x4f0 [ 735.202751][T17649] anon_vma_fork+0xf7/0x4f0 [ 735.207182][T17649] ? anon_vma_name+0x4c/0x70 [ 735.211617][T17649] dup_mmap+0x750/0xea0 [ 735.215604][T17649] ? __delayed_free_task+0x20/0x20 [ 735.220550][T17649] ? mm_init+0x807/0x960 [ 735.224629][T17649] dup_mm+0x91/0x330 [ 735.228360][T17649] copy_mm+0x108/0x1b0 [ 735.232267][T17649] copy_process+0x1295/0x3250 [ 735.236783][T17649] ? proc_fail_nth_write+0x213/0x290 [ 735.241901][T17649] ? proc_fail_nth_read+0x220/0x220 [ 735.246955][T17649] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 735.251886][T17649] ? vfs_write+0x9af/0x1050 [ 735.256225][T17649] ? vmacache_update+0xb7/0x120 [ 735.260920][T17649] kernel_clone+0x22d/0x990 [ 735.265251][T17649] ? file_end_write+0x1b0/0x1b0 [ 735.269944][T17649] ? __kasan_check_write+0x14/0x20 [ 735.275057][T17649] ? create_io_thread+0x1e0/0x1e0 [ 735.279964][T17649] ? __mutex_lock_slowpath+0x10/0x10 [ 735.285057][T17649] __x64_sys_clone+0x289/0x310 [ 735.289647][T17649] ? __do_sys_vfork+0x130/0x130 [ 735.294327][T17649] ? debug_smp_processor_id+0x17/0x20 [ 735.299540][T17649] do_syscall_64+0x44/0xd0 [ 735.303857][T17649] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 735.309790][T17649] RIP: 0033:0x7fb67320a5a9 [ 735.314035][T17649] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 735.333469][T17649] RSP: 002b:00007fb671f7e118 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 735.341992][T17649] RAX: ffffffffffffffda RBX: 00007fb67332af80 RCX: 00007fb67320a5a9 [ 735.349799][T17649] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000010000000 18:39:46 executing program 2: syz_clone(0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 91) 18:39:46 executing program 0: r0 = socket(0x21, 0x1, 0x6) r1 = socket$inet_udp(0x2, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000004, 0x10, r1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00'}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00'}) socket(0x21, 0x1, 0x6) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000004, 0x10, r1, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00'}) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00'}) (async) 18:39:46 executing program 3: r0 = socket(0xa, 0x1, 0x0) (async) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(0x0, r3, 0x7, 0xffffffffffffffff, 0x0) (async) r4 = getpgrp(r1) kcmp$KCMP_EPOLL_TFD(r4, r2, 0x7, r0, &(0x7f0000000080)={0xffffffffffffffff, r0, 0x8}) (async) r5 = signalfd(0xffffffffffffffff, 0x0, 0x0) close(r5) (async) getsockopt$bt_BT_DEFER_SETUP(r5, 0x112, 0x7, &(0x7f0000000000), &(0x7f0000000040)=0x4) (async) setsockopt$MRT_DEL_VIF(r0, 0x0, 0xcb, 0x0, 0x0) 18:39:46 executing program 5: r0 = socket(0xa, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x6, 0x2, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)) 18:39:46 executing program 4: r0 = socket(0xf, 0xa, 0xfffd) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x28, 0x2, 0x0, 0x0) (async, rerun: 32) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000040)={0x0, 0x2, r0, 0x3}) (async, rerun: 32) getsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, &(0x7f0000000000), 0x2) 18:39:46 executing program 1: r0 = socket(0xa, 0x1, 0x0) r1 = signalfd(0xffffffffffffffff, 0x0, 0x0) close(r1) r2 = signalfd(r1, &(0x7f00000001c0)={[0x2]}, 0x8) r3 = accept$unix(r2, &(0x7f0000000000)=@abs, &(0x7f0000000200)=0x6e) ioctl$FS_IOC_SETFSLABEL(r3, 0x41009432, &(0x7f00000000c0)="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") setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x29, 0x2, 0x0, 0x0) socketpair(0x8, 0x80000, 0xe4, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r4, 0x80489439, &(0x7f0000000240)) fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, &(0x7f00000002c0)=0x3) [ 735.357625][T17649] RBP: 00007fb671f7e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 735.365413][T17649] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 735.373221][T17649] R13: 00007ffe782f632f R14: 00007fb671f7e300 R15: 0000000000022000 [ 735.381039][T17649] 18:39:46 executing program 1: r0 = socket(0xa, 0x1, 0x0) (async) r1 = signalfd(0xffffffffffffffff, 0x0, 0x0) close(r1) r2 = signalfd(r1, &(0x7f00000001c0)={[0x2]}, 0x8) r3 = accept$unix(r2, &(0x7f0000000000)=@abs, &(0x7f0000000200)=0x6e) ioctl$FS_IOC_SETFSLABEL(r3, 0x41009432, &(0x7f00000000c0)="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") (async) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x29, 0x2, 0x0, 0x0) (async) socketpair(0x8, 0x80000, 0xe4, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r4, 0x80489439, &(0x7f0000000240)) (async, rerun: 64) fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, &(0x7f00000002c0)=0x3) (rerun: 64) 18:39:46 executing program 5: r0 = socket(0xa, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x6, 0x2, 0x0, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)) 18:39:46 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000000c0)={0xfffffffffffffffe, 0x32}, 0x1, 0x0, 0x0, 0x4004}, 0x40) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000004, 0x10, r0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000004, 0x10, r1, 0x0) ioctl$BTRFS_IOC_START_SYNC(r1, 0x80089418, &(0x7f0000000040)) ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(r0, 0x942e, 0x0) r2 = socket(0xb, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00'}) 18:39:46 executing program 4: r0 = socket(0xa, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x28, 0x2, 0x0, 0x0) r1 = signalfd(0xffffffffffffffff, 0x0, 0x0) close(r1) sendmsg$BATADV_CMD_TP_METER_CANCEL(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x44, 0x0, 0x1, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x8}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xff}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x1ff}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000010}, 0x24000084) r2 = signalfd4(r0, &(0x7f0000000240)={[0x4]}, 0x8, 0xc00) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000002c0)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r2, &(0x7f0000000380)={&(0x7f0000000280), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x3c, 0x0, 0x300, 0x70bd27, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x10000}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4008081}, 0x40040) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), r1) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r1, &(0x7f00000004c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x24, r4, 0x100, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x97}, @BATADV_ATTR_BONDING_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x4800}, 0x40080) sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f00000003c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1ffd}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x8, 0x0, 0x400, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x7}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x0, 0x3b, 0xd3}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x0) [ 735.407954][T17682] FAULT_INJECTION: forcing a failure. [ 735.407954][T17682] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 735.422890][T17682] CPU: 0 PID: 17682 Comm: syz-executor.2 Tainted: G B W 5.15.74-syzkaller-04383-g7f2e600bf63a #0 [ 735.434351][T17682] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/11/2022 [ 735.444244][T17682] Call Trace: [ 735.447370][T17682] [ 735.450149][T17682] dump_stack_lvl+0x151/0x1b7 18:39:46 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000000c0)={0xfffffffffffffffe, 0x32}, 0x1, 0x0, 0x0, 0x4004}, 0x40) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000004, 0x10, r0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000004, 0x10, r1, 0x0) ioctl$BTRFS_IOC_START_SYNC(r1, 0x80089418, &(0x7f0000000040)) ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(r0, 0x942e, 0x0) r2 = socket(0xb, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00'}) socket$inet_udp(0x2, 0x2, 0x0) (async) sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000000c0)={0xfffffffffffffffe, 0x32}, 0x1, 0x0, 0x0, 0x4004}, 0x40) (async) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000004, 0x10, r0, 0x0) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000004, 0x10, r1, 0x0) (async) ioctl$BTRFS_IOC_START_SYNC(r1, 0x80089418, &(0x7f0000000040)) (async) ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(r0, 0x942e, 0x0) (async) socket(0xb, 0x1, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00'}) (async) 18:39:46 executing program 4: r0 = socket(0xa, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x28, 0x2, 0x0, 0x0) r1 = signalfd(0xffffffffffffffff, 0x0, 0x0) close(r1) sendmsg$BATADV_CMD_TP_METER_CANCEL(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x44, 0x0, 0x1, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x8}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xff}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x1ff}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000010}, 0x24000084) r2 = signalfd4(r0, &(0x7f0000000240)={[0x4]}, 0x8, 0xc00) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000002c0)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r2, &(0x7f0000000380)={&(0x7f0000000280), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x3c, 0x0, 0x300, 0x70bd27, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x10000}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4008081}, 0x40040) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), r1) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r1, &(0x7f00000004c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x24, r4, 0x100, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x97}, @BATADV_ATTR_BONDING_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x4800}, 0x40080) sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f00000003c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1ffd}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x8, 0x0, 0x400, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x7}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x0, 0x3b, 0xd3}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x0) socket(0xa, 0x1, 0x0) (async) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x28, 0x2, 0x0, 0x0) (async) signalfd(0xffffffffffffffff, 0x0, 0x0) (async) close(r1) (async) sendmsg$BATADV_CMD_TP_METER_CANCEL(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x44, 0x0, 0x1, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x8}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xff}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x1ff}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000010}, 0x24000084) (async) signalfd4(r0, &(0x7f0000000240)={[0x4]}, 0x8, 0xc00) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000002c0)) (async) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r2, &(0x7f0000000380)={&(0x7f0000000280), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x3c, 0x0, 0x300, 0x70bd27, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x10000}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4008081}, 0x40040) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000400), r1) (async) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r1, &(0x7f00000004c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x24, r4, 0x100, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x97}, @BATADV_ATTR_BONDING_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x4800}, 0x40080) (async) sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f00000003c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1ffd}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x8, 0x0, 0x400, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x7}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x0, 0x3b, 0xd3}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (async) [ 735.454839][T17682] ? bfq_pos_tree_add_move+0x43e/0x43e [ 735.460128][T17682] dump_stack+0x15/0x17 [ 735.464119][T17682] should_fail+0x3c0/0x510 [ 735.468374][T17682] should_fail_alloc_page+0x58/0x70 [ 735.473406][T17682] __alloc_pages+0x1de/0x7c0 [ 735.477834][T17682] ? __count_vm_events+0x30/0x30 [ 735.482644][T17682] pte_alloc_one+0x73/0x1b0 [ 735.486960][T17682] ? pfn_modify_allowed+0x2e0/0x2e0 [ 735.491991][T17682] __pte_alloc+0x86/0x350 [ 735.496145][T17682] ? free_pgtables+0x210/0x210 [ 735.500748][T17682] ? _raw_spin_lock+0xa3/0x1b0 [ 735.505527][T17682] ? _raw_spin_trylock_bh+0x1d0/0x1d0 [ 735.510727][T17682] ? unwind_get_return_address+0x4c/0x90 [ 735.516201][T17682] copy_pte_range+0x1b1f/0x20b0 [ 735.520884][T17682] ? stack_trace_save+0x12d/0x1f0 [ 735.525746][T17682] ? anon_vma_clone+0xa1/0x4f0 [ 735.530343][T17682] ? __kunmap_atomic+0x80/0x80 [ 735.534936][T17682] ? dup_mmap+0x750/0xea0 [ 735.539288][T17682] ? copy_mm+0x108/0x1b0 [ 735.543363][T17682] ? copy_process+0x1295/0x3250 [ 735.548054][T17682] ? kernel_clone+0x22d/0x990 [ 735.552760][T17682] ? __x64_sys_clone+0x289/0x310 [ 735.557538][T17682] ? do_syscall_64+0x44/0xd0 [ 735.561949][T17682] ? entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 735.567848][T17682] copy_page_range+0xc1e/0x1090 [ 735.572545][T17682] ? pfn_valid+0x1e0/0x1e0 [ 735.577896][T17682] dup_mmap+0x99f/0xea0 [ 735.581892][T17682] ? __delayed_free_task+0x20/0x20 [ 735.586839][T17682] ? mm_init+0x807/0x960 [ 735.590924][T17682] dup_mm+0x91/0x330 [ 735.594658][T17682] copy_mm+0x108/0x1b0 [ 735.598570][T17682] copy_process+0x1295/0x3250 [ 735.603078][T17682] ? proc_fail_nth_write+0x213/0x290 [ 735.608188][T17682] ? proc_fail_nth_read+0x220/0x220 [ 735.613397][T17682] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 735.618518][T17682] ? vfs_write+0x9af/0x1050 [ 735.622941][T17682] ? vmacache_update+0xb7/0x120 [ 735.627827][T17682] kernel_clone+0x22d/0x990 [ 735.632174][T17682] ? file_end_write+0x1b0/0x1b0 [ 735.636953][T17682] ? __kasan_check_write+0x14/0x20 [ 735.641880][T17682] ? create_io_thread+0x1e0/0x1e0 [ 735.646789][T17682] ? __mutex_lock_slowpath+0x10/0x10 [ 735.651986][T17682] __x64_sys_clone+0x289/0x310 [ 735.656548][T17682] ? __do_sys_vfork+0x130/0x130 [ 735.661233][T17682] ? debug_smp_processor_id+0x17/0x20 [ 735.666452][T17682] do_syscall_64+0x44/0xd0 [ 735.670699][T17682] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 735.676430][T17682] RIP: 0033:0x7fb67320a5a9 [ 735.680679][T17682] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 735.700499][T17682] RSP: 002b:00007fb671f7e118 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 18:39:47 executing program 2: syz_clone(0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 92) 18:39:47 executing program 1: r0 = socket(0xa, 0x1, 0x0) (async) r1 = signalfd(0xffffffffffffffff, 0x0, 0x0) close(r1) (async) r2 = signalfd(r1, &(0x7f00000001c0)={[0x2]}, 0x8) r3 = accept$unix(r2, &(0x7f0000000000)=@abs, &(0x7f0000000200)=0x6e) ioctl$FS_IOC_SETFSLABEL(r3, 0x41009432, &(0x7f00000000c0)="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") (async) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x29, 0x2, 0x0, 0x0) socketpair(0x8, 0x80000, 0xe4, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r4, 0x80489439, &(0x7f0000000240)) fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, &(0x7f00000002c0)=0x3) 18:39:47 executing program 3: r0 = socket(0xa, 0x1, 0x0) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(0x0, r3, 0x7, 0xffffffffffffffff, 0x0) r4 = getpgrp(r1) kcmp$KCMP_EPOLL_TFD(r4, r2, 0x7, r0, &(0x7f0000000080)={0xffffffffffffffff, r0, 0x8}) r5 = signalfd(0xffffffffffffffff, 0x0, 0x0) close(r5) getsockopt$bt_BT_DEFER_SETUP(r5, 0x112, 0x7, &(0x7f0000000000), &(0x7f0000000040)=0x4) setsockopt$MRT_DEL_VIF(r0, 0x0, 0xcb, 0x0, 0x0) socket(0xa, 0x1, 0x0) (async) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) kcmp$KCMP_EPOLL_TFD(0x0, r3, 0x7, 0xffffffffffffffff, 0x0) (async) getpgrp(r1) (async) kcmp$KCMP_EPOLL_TFD(r4, r2, 0x7, r0, &(0x7f0000000080)={0xffffffffffffffff, r0, 0x8}) (async) signalfd(0xffffffffffffffff, 0x0, 0x0) (async) close(r5) (async) getsockopt$bt_BT_DEFER_SETUP(r5, 0x112, 0x7, &(0x7f0000000000), &(0x7f0000000040)=0x4) (async) setsockopt$MRT_DEL_VIF(r0, 0x0, 0xcb, 0x0, 0x0) (async) 18:39:47 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000000c0)={0xfffffffffffffffe, 0x32}, 0x1, 0x0, 0x0, 0x4004}, 0x40) (async) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000004, 0x10, r0, 0x0) (async) r1 = socket$inet_udp(0x2, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000004, 0x10, r1, 0x0) ioctl$BTRFS_IOC_START_SYNC(r1, 0x80089418, &(0x7f0000000040)) (async) ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(r0, 0x942e, 0x0) (async) r2 = socket(0xb, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00'}) 18:39:47 executing program 5: r0 = socket(0xa, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x6, 0x2, 0x0, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)) 18:39:47 executing program 4: r0 = socket(0xa, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x28, 0x2, 0x0, 0x0) (async) r1 = signalfd(0xffffffffffffffff, 0x0, 0x0) close(r1) (async) sendmsg$BATADV_CMD_TP_METER_CANCEL(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x44, 0x0, 0x1, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x8}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xff}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x1ff}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000010}, 0x24000084) (async) r2 = signalfd4(r0, &(0x7f0000000240)={[0x4]}, 0x8, 0xc00) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000002c0)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r2, &(0x7f0000000380)={&(0x7f0000000280), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x3c, 0x0, 0x300, 0x70bd27, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x10000}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4008081}, 0x40040) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), r1) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r1, &(0x7f00000004c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x24, r4, 0x100, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x97}, @BATADV_ATTR_BONDING_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x4800}, 0x40080) (async) sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f00000003c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1ffd}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x8, 0x0, 0x400, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x7}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x0, 0x3b, 0xd3}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x0) [ 735.708738][T17682] RAX: ffffffffffffffda RBX: 00007fb67332af80 RCX: 00007fb67320a5a9 [ 735.716754][T17682] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000010000000 [ 735.724601][T17682] RBP: 00007fb671f7e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 735.733417][T17682] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 735.741225][T17682] R13: 00007ffe782f632f R14: 00007fb671f7e300 R15: 0000000000022000 [ 735.749039][T17682] 18:39:47 executing program 1: r0 = socket(0xa, 0x1, 0x0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="01002bbd7000fcdbdf250b00000005002a000000000008000600", @ANYRES32=0x0, @ANYBLOB="08003aaaaaaaaaaaaa0000"], 0x38}}, 0x10) r1 = signalfd(0xffffffffffffffff, 0x0, 0x0) close(r1) getsockopt$MRT(r1, 0x0, 0xce, &(0x7f00000001c0), &(0x7f0000000200)=0x4) pipe(&(0x7f0000000100)) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x29, 0x2, 0x0, 0x0) accept$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000180)=0x14) 18:39:47 executing program 4: r0 = socket(0xa, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x28, 0x2, 0x0, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) dup3(r1, r0, 0x80000) 18:39:47 executing program 0: r0 = socket(0xa, 0x1, 0x0) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f0000000040)="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") r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x401, 0x0) setsockopt$MRT_INIT(r1, 0x0, 0xc8, &(0x7f0000000140), 0x4) pipe2$watch_queue(&(0x7f0000000300), 0x80) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00'}) r2 = signalfd(0xffffffffffffffff, 0x0, 0x0) close(r2) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r2, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x4c, 0x0, 0x200, 0x70bd28, 0x25dfdbfc, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xfffffffa}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_GW_MODE, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x2d}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_ISOLATION_MASK={0xbcec6f66c5230b37, 0x2c, 0x96e4}]}, 0x4c}, 0x1, 0x0, 0x0, 0x48080}, 0x4000001) 18:39:47 executing program 5: r0 = socket(0xa, 0xa, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x6, 0x2, 0x0, 0x0) r1 = accept$unix(r0, &(0x7f0000000000), &(0x7f0000000080)=0x6e) ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(r1, 0x942e, 0x0) ftruncate(r0, 0x694c938e) 18:39:47 executing program 4: r0 = socket(0xa, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x28, 0x2, 0x0, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) dup3(r1, r0, 0x80000) socket(0xa, 0x1, 0x0) (async) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x28, 0x2, 0x0, 0x0) (async) socket$inet6_udplite(0xa, 0x2, 0x88) (async) dup3(r1, r0, 0x80000) (async) [ 735.778350][T17740] FAULT_INJECTION: forcing a failure. [ 735.778350][T17740] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 735.795002][T17740] CPU: 0 PID: 17740 Comm: syz-executor.2 Tainted: G B W 5.15.74-syzkaller-04383-g7f2e600bf63a #0 [ 735.806464][T17740] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/11/2022 [ 735.816525][T17740] Call Trace: [ 735.819651][T17740] [ 735.822429][T17740] dump_stack_lvl+0x151/0x1b7 18:39:47 executing program 3: r0 = socket(0xa, 0x1, 0x0) setsockopt$MRT_DEL_VIF(r0, 0x0, 0xcb, 0x0, 0x0) r1 = signalfd(0xffffffffffffffff, 0x0, 0x0) close(r1) sendmsg$FOU_CMD_ADD(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x50, 0x0, 0x200, 0x70bd2c, 0x25dfdbfb, {}, [@FOU_ATTR_LOCAL_V4={0x8, 0x6, @multicast2}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_PEER_V4={0x8, 0x8, @loopback}, @FOU_ATTR_AF={0x5, 0x2, 0x2}, @FOU_ATTR_IFINDEX={0x8}, @FOU_ATTR_PEER_V4={0x8, 0x8, @multicast2}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x2f}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @local}]}, 0x50}, 0x1, 0x0, 0x0, 0x4004000}, 0x4000001) [ 735.826941][T17740] ? bfq_pos_tree_add_move+0x43e/0x43e [ 735.832238][T17740] ? vsnprintf+0x1fa/0x1ce0 [ 735.836665][T17740] dump_stack+0x15/0x17 [ 735.840744][T17740] should_fail+0x3c0/0x510 [ 735.845084][T17740] should_fail_usercopy+0x1a/0x20 [ 735.850029][T17740] _copy_from_user+0x20/0xd0 [ 735.854469][T17740] kstrtouint_from_user+0xd7/0x2b0 [ 735.859403][T17740] ? kstrtol_from_user+0x310/0x310 [ 735.864346][T17740] ? snprintf+0xd6/0x120 [ 735.868428][T17740] ? __kasan_check_read+0x11/0x20 [ 735.873288][T17740] ? _copy_to_user+0x78/0x90 [ 735.877716][T17740] proc_fail_nth_write+0xa5/0x290 [ 735.882583][T17740] ? proc_fail_nth_read+0x220/0x220 [ 735.887604][T17740] ? security_file_permission+0xf3/0x5f0 [ 735.893250][T17740] ? proc_fail_nth_read+0x220/0x220 [ 735.898277][T17740] vfs_write+0x3fd/0x1050 [ 735.902453][T17740] ? __kasan_check_read+0x11/0x20 [ 735.907315][T17740] ? file_end_write+0x1b0/0x1b0 [ 735.912080][T17740] ? __kasan_check_write+0x14/0x20 [ 735.917034][T17740] ? mutex_lock+0xb6/0x130 [ 735.921284][T17740] ? wait_for_completion_killable_timeout+0x10/0x10 [ 735.927706][T17740] ? __fdget_pos+0x26d/0x310 [ 735.932131][T17740] ? ksys_write+0x77/0x2c0 [ 735.936394][T17740] ksys_write+0x198/0x2c0 [ 735.940561][T17740] ? __ia32_sys_read+0x90/0x90 [ 735.945148][T17740] ? debug_smp_processor_id+0x17/0x20 [ 735.950453][T17740] __x64_sys_write+0x7b/0x90 [ 735.954870][T17740] do_syscall_64+0x44/0xd0 [ 735.959133][T17740] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 735.964856][T17740] RIP: 0033:0x7fb6731bc24f [ 735.969280][T17740] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 fd ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 cc fd ff ff 48 [ 735.988724][T17740] RSP: 002b:00007fb671f7e160 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 735.996971][T17740] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fb6731bc24f [ 736.004786][T17740] RDX: 0000000000000001 RSI: 00007fb671f7e1e0 RDI: 0000000000000003 [ 736.012592][T17740] RBP: 00007fb671f7e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 736.020401][T17740] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 18:39:47 executing program 2: syz_clone(0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0) 18:39:47 executing program 4: r0 = socket(0xa, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x28, 0x2, 0x0, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) dup3(r1, r0, 0x80000) 18:39:47 executing program 3: r0 = socket(0xa, 0x1, 0x0) setsockopt$MRT_DEL_VIF(r0, 0x0, 0xcb, 0x0, 0x0) (async) r1 = signalfd(0xffffffffffffffff, 0x0, 0x0) close(r1) (async) sendmsg$FOU_CMD_ADD(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x50, 0x0, 0x200, 0x70bd2c, 0x25dfdbfb, {}, [@FOU_ATTR_LOCAL_V4={0x8, 0x6, @multicast2}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_PEER_V4={0x8, 0x8, @loopback}, @FOU_ATTR_AF={0x5, 0x2, 0x2}, @FOU_ATTR_IFINDEX={0x8}, @FOU_ATTR_PEER_V4={0x8, 0x8, @multicast2}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x2f}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @local}]}, 0x50}, 0x1, 0x0, 0x0, 0x4004000}, 0x4000001) 18:39:47 executing program 1: r0 = socket(0xa, 0x1, 0x0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="01002bbd7000fcdbdf250b00000005002a000000000008000600", @ANYRES32=0x0, @ANYBLOB="08003aaaaaaaaaaaaa0000"], 0x38}}, 0x10) r1 = signalfd(0xffffffffffffffff, 0x0, 0x0) close(r1) getsockopt$MRT(r1, 0x0, 0xce, &(0x7f00000001c0), &(0x7f0000000200)=0x4) pipe(&(0x7f0000000100)) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x29, 0x2, 0x0, 0x0) accept$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000180)=0x14) socket(0xa, 0x1, 0x0) (async) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="01002bbd7000fcdbdf250b00000005002a000000000008000600", @ANYRES32=0x0, @ANYBLOB="08003aaaaaaaaaaaaa0000"], 0x38}}, 0x10) (async) signalfd(0xffffffffffffffff, 0x0, 0x0) (async) close(r1) (async) getsockopt$MRT(r1, 0x0, 0xce, &(0x7f00000001c0), &(0x7f0000000200)=0x4) (async) pipe(&(0x7f0000000100)) (async) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x29, 0x2, 0x0, 0x0) (async) accept$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000180)=0x14) (async) 18:39:47 executing program 0: r0 = socket(0xa, 0x1, 0x0) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f0000000040)="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") r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x401, 0x0) setsockopt$MRT_INIT(r1, 0x0, 0xc8, &(0x7f0000000140), 0x4) (async) pipe2$watch_queue(&(0x7f0000000300), 0x80) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00'}) (async) r2 = signalfd(0xffffffffffffffff, 0x0, 0x0) close(r2) (async) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r2, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x4c, 0x0, 0x200, 0x70bd28, 0x25dfdbfc, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xfffffffa}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_GW_MODE, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x2d}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_ISOLATION_MASK={0xbcec6f66c5230b37, 0x2c, 0x96e4}]}, 0x4c}, 0x1, 0x0, 0x0, 0x48080}, 0x4000001) 18:39:47 executing program 5: r0 = socket(0xa, 0xa, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x6, 0x2, 0x0, 0x0) r1 = accept$unix(r0, &(0x7f0000000000), &(0x7f0000000080)=0x6e) ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(r1, 0x942e, 0x0) (async) ftruncate(r0, 0x694c938e) 18:39:47 executing program 4: r0 = socket(0xa, 0x1, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) getsockopt$bt_BT_SECURITY(r1, 0x112, 0x4, 0x0, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x28, 0x2, 0x0, 0x0) 18:39:47 executing program 1: r0 = socket(0xa, 0x1, 0x0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="01002bbd7000fcdbdf250b00000005002a000000000008000600", @ANYRES32=0x0, @ANYBLOB="08003aaaaaaaaaaaaa0000"], 0x38}}, 0x10) (async) r1 = signalfd(0xffffffffffffffff, 0x0, 0x0) close(r1) (async) getsockopt$MRT(r1, 0x0, 0xce, &(0x7f00000001c0), &(0x7f0000000200)=0x4) (async) pipe(&(0x7f0000000100)) (async) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x29, 0x2, 0x0, 0x0) (async) accept$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000180)=0x14) 18:39:47 executing program 0: r0 = socket(0xa, 0x1, 0x0) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f0000000040)="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") r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x401, 0x0) setsockopt$MRT_INIT(r1, 0x0, 0xc8, &(0x7f0000000140), 0x4) pipe2$watch_queue(&(0x7f0000000300), 0x80) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00'}) r2 = signalfd(0xffffffffffffffff, 0x0, 0x0) close(r2) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r2, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x4c, 0x0, 0x200, 0x70bd28, 0x25dfdbfc, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xfffffffa}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_GW_MODE, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x2d}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_ISOLATION_MASK={0xbcec6f66c5230b37, 0x2c, 0x96e4}]}, 0x4c}, 0x1, 0x0, 0x0, 0x48080}, 0x4000001) socket(0xa, 0x1, 0x0) (async) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f0000000040)="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") (async) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x401, 0x0) (async) setsockopt$MRT_INIT(r1, 0x0, 0xc8, &(0x7f0000000140), 0x4) (async) pipe2$watch_queue(&(0x7f0000000300), 0x80) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00'}) (async) signalfd(0xffffffffffffffff, 0x0, 0x0) (async) close(r2) (async) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r2, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x4c, 0x0, 0x200, 0x70bd28, 0x25dfdbfc, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xfffffffa}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_GW_MODE, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x2d}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_ISOLATION_MASK={0xbcec6f66c5230b37, 0x2c, 0x96e4}]}, 0x4c}, 0x1, 0x0, 0x0, 0x48080}, 0x4000001) (async) 18:39:47 executing program 5: r0 = socket(0xa, 0xa, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x6, 0x2, 0x0, 0x0) r1 = accept$unix(r0, &(0x7f0000000000), &(0x7f0000000080)=0x6e) ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(r1, 0x942e, 0x0) ftruncate(r0, 0x694c938e) socket(0xa, 0xa, 0x0) (async) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x6, 0x2, 0x0, 0x0) (async) accept$unix(r0, &(0x7f0000000000), &(0x7f0000000080)=0x6e) (async) ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(r1, 0x942e, 0x0) (async) ftruncate(r0, 0x694c938e) (async) 18:39:47 executing program 4: r0 = socket(0xa, 0x1, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) getsockopt$bt_BT_SECURITY(r1, 0x112, 0x4, 0x0, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x28, 0x2, 0x0, 0x0) socket(0xa, 0x1, 0x0) (async) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) (async) getsockopt$bt_BT_SECURITY(r1, 0x112, 0x4, 0x0, 0x0) (async) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x28, 0x2, 0x0, 0x0) (async) 18:39:47 executing program 3: r0 = socket(0xa, 0x1, 0x0) setsockopt$MRT_DEL_VIF(r0, 0x0, 0xcb, 0x0, 0x0) r1 = signalfd(0xffffffffffffffff, 0x0, 0x0) close(r1) sendmsg$FOU_CMD_ADD(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x50, 0x0, 0x200, 0x70bd2c, 0x25dfdbfb, {}, [@FOU_ATTR_LOCAL_V4={0x8, 0x6, @multicast2}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_PEER_V4={0x8, 0x8, @loopback}, @FOU_ATTR_AF={0x5, 0x2, 0x2}, @FOU_ATTR_IFINDEX={0x8}, @FOU_ATTR_PEER_V4={0x8, 0x8, @multicast2}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x2f}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @local}]}, 0x50}, 0x1, 0x0, 0x0, 0x4004000}, 0x4000001) socket(0xa, 0x1, 0x0) (async) setsockopt$MRT_DEL_VIF(r0, 0x0, 0xcb, 0x0, 0x0) (async) signalfd(0xffffffffffffffff, 0x0, 0x0) (async) close(r1) (async) sendmsg$FOU_CMD_ADD(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x50, 0x0, 0x200, 0x70bd2c, 0x25dfdbfb, {}, [@FOU_ATTR_LOCAL_V4={0x8, 0x6, @multicast2}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_PEER_V4={0x8, 0x8, @loopback}, @FOU_ATTR_AF={0x5, 0x2, 0x2}, @FOU_ATTR_IFINDEX={0x8}, @FOU_ATTR_PEER_V4={0x8, 0x8, @multicast2}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x2f}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @local}]}, 0x50}, 0x1, 0x0, 0x0, 0x4004000}, 0x4000001) (async) [ 736.028213][T17740] R13: 00007ffe782f632f R14: 00007fb671f7e300 R15: 0000000000022000 [ 736.036025][T17740] 18:39:47 executing program 2: syz_clone(0x10000002, 0x0, 0x0, 0x0, 0x0, 0x0) 18:39:47 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r0, 0x80489439, &(0x7f0000000080)) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(0xffffffffffffffff, 0x29, 0x2, 0x0, 0x5a) fgetxattr(0xffffffffffffffff, &(0x7f0000000000)=@random={'security.', ']}\x00'}, &(0x7f0000000100)=""/134, 0x86) 18:39:47 executing program 3: r0 = socket(0xa, 0x1, 0x0) ioctl$BTRFS_IOC_WAIT_SYNC(r0, 0x40089416, &(0x7f0000000000)) setsockopt$MRT_DEL_VIF(r0, 0x0, 0xcb, 0x0, 0x0) 18:39:47 executing program 0: r0 = socket(0xa, 0x6, 0x1f) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00'}) r1 = signalfd(r0, &(0x7f0000000040)={[0xff]}, 0x8) r2 = socket$packet(0x11, 0x3, 0x300) connect$pppl2tp(r1, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, r2, {0x2, 0x4e22, @broadcast}, 0x4, 0x1, 0x0, 0x2}}, 0x2e) 18:39:47 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) dup(r0) r1 = socket(0xa, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r1, 0x6, 0x2, 0x0, 0x0) 18:39:47 executing program 4: r0 = socket(0xa, 0x1, 0x0) (async) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) getsockopt$bt_BT_SECURITY(r1, 0x112, 0x4, 0x0, 0x0) (async) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x28, 0x2, 0x0, 0x0) 18:39:47 executing program 4: r0 = socket(0x10, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x28, 0x2, 0x0, 0x0) socket(0x28, 0x800, 0x2) 18:39:47 executing program 2: syz_clone(0x10000004, 0x0, 0x0, 0x0, 0x0, 0x0) 18:39:47 executing program 0: r0 = socket(0xa, 0x6, 0x1f) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00'}) r1 = signalfd(r0, &(0x7f0000000040)={[0xff]}, 0x8) r2 = socket$packet(0x11, 0x3, 0x300) connect$pppl2tp(r1, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, r2, {0x2, 0x4e22, @broadcast}, 0x4, 0x1, 0x0, 0x2}}, 0x2e) socket(0xa, 0x6, 0x1f) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00'}) (async) signalfd(r0, &(0x7f0000000040)={[0xff]}, 0x8) (async) socket$packet(0x11, 0x3, 0x300) (async) connect$pppl2tp(r1, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, r2, {0x2, 0x4e22, @broadcast}, 0x4, 0x1, 0x0, 0x2}}, 0x2e) (async) 18:39:47 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) dup(r0) r1 = socket(0xa, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r1, 0x6, 0x2, 0x0, 0x0) 18:39:47 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r0, 0x80489439, &(0x7f0000000080)) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(0xffffffffffffffff, 0x29, 0x2, 0x0, 0x5a) fgetxattr(0xffffffffffffffff, &(0x7f0000000000)=@random={'security.', ']}\x00'}, &(0x7f0000000100)=""/134, 0x86) socket$packet(0x11, 0x3, 0x300) (async) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r0, 0x80489439, &(0x7f0000000080)) (async) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(0xffffffffffffffff, 0x29, 0x2, 0x0, 0x5a) (async) fgetxattr(0xffffffffffffffff, &(0x7f0000000000)=@random={'security.', ']}\x00'}, &(0x7f0000000100)=""/134, 0x86) (async) 18:39:47 executing program 3: r0 = socket(0xa, 0x1, 0x0) ioctl$BTRFS_IOC_WAIT_SYNC(r0, 0x40089416, &(0x7f0000000000)) (async) setsockopt$MRT_DEL_VIF(r0, 0x0, 0xcb, 0x0, 0x0) 18:39:47 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) dup(r0) r1 = socket(0xa, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r1, 0x6, 0x2, 0x0, 0x0) 18:39:47 executing program 2: syz_clone(0x10000007, 0x0, 0x0, 0x0, 0x0, 0x0) 18:39:47 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r0, 0x80489439, &(0x7f0000000080)) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(0xffffffffffffffff, 0x29, 0x2, 0x0, 0x5a) fgetxattr(0xffffffffffffffff, &(0x7f0000000000)=@random={'security.', ']}\x00'}, &(0x7f0000000100)=""/134, 0x86) 18:39:47 executing program 0: r0 = socket(0xa, 0x6, 0x1f) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00'}) (async, rerun: 64) r1 = signalfd(r0, &(0x7f0000000040)={[0xff]}, 0x8) (async, rerun: 64) r2 = socket$packet(0x11, 0x3, 0x300) connect$pppl2tp(r1, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, r2, {0x2, 0x4e22, @broadcast}, 0x4, 0x1, 0x0, 0x2}}, 0x2e) 18:39:47 executing program 5: r0 = socket(0xa, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x6, 0x2, 0x0, 0x0) socket$inet(0x2, 0x800, 0x6) r1 = socket$inet_udp(0x2, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000004, 0x10, r1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f00000000c0)={'syztnl2\x00', &(0x7f0000000040)={'tunl0\x00', r2, 0x1, 0x8, 0x9, 0x8, {{0xf, 0x4, 0x1, 0x3, 0x3c, 0x66, 0x0, 0x0, 0x2d, 0x0, @local, @broadcast, {[@noop, @timestamp_prespec={0x44, 0x24, 0xe, 0x3, 0x7, [{@dev={0xac, 0x14, 0x14, 0x1b}, 0x5}, {@local, 0x3}, {@loopback, 0x1ff}, {@private=0xa010101, 0x10001}]}]}}}}}) 18:39:47 executing program 4: r0 = socket(0x10, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x28, 0x2, 0x0, 0x0) socket(0x28, 0x800, 0x2) socket(0x10, 0x1, 0x0) (async) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x28, 0x2, 0x0, 0x0) (async) socket(0x28, 0x800, 0x2) (async) 18:39:47 executing program 3: r0 = socket(0xa, 0x1, 0x0) ioctl$BTRFS_IOC_WAIT_SYNC(r0, 0x40089416, &(0x7f0000000000)) (async) setsockopt$MRT_DEL_VIF(r0, 0x0, 0xcb, 0x0, 0x0) 18:39:47 executing program 0: r0 = signalfd(0xffffffffffffffff, 0x0, 0x0) close(r0) ioctl$ASHMEM_GET_PIN_STATUS(r0, 0x7709, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00'}) 18:39:47 executing program 1: r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000140), 0xf4483, 0x0) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f0000000040)="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") pidfd_open(0x0, 0x0) r1 = socket(0x2c, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r1, 0x29, 0x2, 0x0, 0x0) r2 = syz_genetlink_get_family_id$fou(&(0x7f0000000180), r1) sendmsg$FOU_CMD_GET(r1, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x40, r2, 0x100, 0x70bd2a, 0x25dfdbff, {}, [@FOU_ATTR_PORT={0x6, 0x1, 0x4e22}, @FOU_ATTR_IPPROTO={0x5}, @FOU_ATTR_PEER_V4={0x8, 0x8, @multicast1}, @FOU_ATTR_PEER_V6={0x14, 0x9, @empty}]}, 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x84) [ 736.192662][T17867] BUG: unable to handle page fault for address: ffffed1800000009 [ 736.200214][T17867] #PF: supervisor read access in kernel mode [ 736.206031][T17867] #PF: error_code(0x0000) - not-present page [ 736.211838][T17867] PGD 23fff2067 P4D 23fff2067 PUD 0 [ 736.216968][T17867] Oops: 0000 [#1] PREEMPT SMP KASAN [ 736.222000][T17867] CPU: 0 PID: 17867 Comm: syz-executor.2 Tainted: G B W 5.15.74-syzkaller-04383-g7f2e600bf63a #0 [ 736.233697][T17867] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/11/2022 [ 736.243683][T17867] RIP: 0010:__rb_insert_augmented+0x67/0x670 [ 736.249494][T17867] Code: 8b 3e 4d 85 ff 75 1c e9 01 06 00 00 0f 1f 80 00 00 00 00 4d 89 3c 24 4d 89 e6 4d 85 ff 0f 84 e7 05 00 00 4c 89 fb 48 c1 eb 03 <42> 80 3c 2b 00 74 08 4c 89 ff e8 da e4 2c ff 4d 8b 27 41 f6 c4 01 [ 736.268943][T17867] RSP: 0018:ffffc900085cf8a0 EFLAGS: 00010a06 [ 736.274838][T17867] RAX: 1ffff11025f87d0e RBX: 1ffff11800000009 RCX: dffffc0000000000 [ 736.282648][T17867] RDX: ffffffff81a6fa00 RSI: ffff888109639aa8 RDI: ffff888131c5f3d0 [ 736.290554][T17867] RBP: ffffc900085cf908 R08: dffffc0000000000 R09: ffff888131c5f3d8 [ 736.298362][T17867] R10: ffffed102638be7d R11: 1ffff1102638be7b R12: ffff888126a02870 [ 736.306171][T17867] R13: dffffc0000000000 R14: ffff888126a02870 R15: ffff88c000000048 [ 736.313983][T17867] FS: 00007fb671f7e700(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 736.322750][T17867] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 736.329169][T17867] CR2: ffffed1800000009 CR3: 0000000111ad0000 CR4: 00000000003506b0 [ 736.336983][T17867] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 736.344789][T17867] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 736.352603][T17867] Call Trace: [ 736.355725][T17867] [ 736.358506][T17867] ? anon_vma_interval_tree_iter_next+0x3b0/0x3b0 [ 736.364754][T17867] vma_interval_tree_insert_after+0x2cd/0x2e0 [ 736.370664][T17867] dup_mmap+0x8bd/0xea0 [ 736.374657][T17867] ? __delayed_free_task+0x20/0x20 [ 736.379596][T17867] ? mm_init+0x807/0x960 [ 736.383675][T17867] dup_mm+0x91/0x330 [ 736.387410][T17867] copy_mm+0x108/0x1b0 [ 736.391313][T17867] copy_process+0x1295/0x3250 [ 736.395833][T17867] ? ioctl_has_perm+0x1d8/0x560 [ 736.400512][T17867] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 736.405461][T17867] ? has_cap_mac_admin+0xb0/0xb0 [ 736.410296][T17867] ? do_user_addr_fault+0xad2/0x1220 [ 736.415353][T17867] kernel_clone+0x22d/0x990 [ 736.419695][T17867] ? create_io_thread+0x1e0/0x1e0 [ 736.424554][T17867] ? __kasan_check_write+0x14/0x20 [ 736.429498][T17867] ? _raw_spin_lock_irqsave+0xf8/0x210 [ 736.434798][T17867] __x64_sys_clone+0x289/0x310 [ 736.439414][T17867] ? __do_sys_vfork+0x130/0x130 [ 736.444087][T17867] ? debug_smp_processor_id+0x17/0x20 [ 736.449399][T17867] do_syscall_64+0x44/0xd0 [ 736.453703][T17867] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 736.459375][T17867] RIP: 0033:0x7fb67320a5a9 [ 736.463633][T17867] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 736.483619][T17867] RSP: 002b:00007fb671f7e118 EFLAGS: 00000202 ORIG_RAX: 0000000000000038 [ 736.491947][T17867] RAX: ffffffffffffffda RBX: 00007fb67332af80 RCX: 00007fb67320a5a9 [ 736.499755][T17867] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000010000007 [ 736.507566][T17867] RBP: 00007fb6732657b0 R08: 0000000000000000 R09: 0000000000000000 [ 736.515377][T17867] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 736.523189][T17867] R13: 00007ffe782f632f R14: 00007fb671f7e300 R15: 0000000000022000 [ 736.531007][T17867] [ 736.534044][T17867] Modules linked in: [ 736.537776][T17867] CR2: ffffed1800000009 [ 736.541767][T17867] ---[ end trace e08c3b8514c04930 ]--- [ 736.547060][T17867] RIP: 0010:__rb_insert_augmented+0x67/0x670 [ 736.552885][T17867] Code: 8b 3e 4d 85 ff 75 1c e9 01 06 00 00 0f 1f 80 00 00 00 00 4d 89 3c 24 4d 89 e6 4d 85 ff 0f 84 e7 05 00 00 4c 89 fb 48 c1 eb 03 <42> 80 3c 2b 00 74 08 4c 89 ff e8 da e4 2c ff 4d 8b 27 41 f6 c4 01 [ 736.572320][T17867] RSP: 0018:ffffc900085cf8a0 EFLAGS: 00010a06 [ 736.578227][T17867] RAX: 1ffff11025f87d0e RBX: 1ffff11800000009 RCX: dffffc0000000000 [ 736.586117][T17867] RDX: ffffffff81a6fa00 RSI: ffff888109639aa8 RDI: ffff888131c5f3d0 [ 736.593929][T17867] RBP: ffffc900085cf908 R08: dffffc0000000000 R09: ffff888131c5f3d8 [ 736.601740][T17867] R10: ffffed102638be7d R11: 1ffff1102638be7b R12: ffff888126a02870 [ 736.609552][T17867] R13: dffffc0000000000 R14: ffff888126a02870 R15: ffff88c000000048 [ 736.617365][T17867] FS: 00007fb671f7e700(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 736.626132][T17867] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 736.632580][T17867] CR2: ffffed1800000009 CR3: 0000000111ad0000 CR4: 00000000003506b0 [ 736.640369][T17867] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 736.648173][T17867] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 736.655989][T17867] Kernel panic - not syncing: Fatal exception [ 736.662138][T17867] Kernel Offset: disabled [ 736.666367][T17867] Rebooting in 86400 seconds..