0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cgroup.controllers\x00', 0x100002, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000140)='memory.low\x00', 0x2, 0x0) syz_clone(0x74809480, 0x0, 0x4100, &(0x7f0000000000), 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000400000000000000000000850000006d000000850000000f00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000080)='sys_exit\x00', r0}, 0x10) 12:34:11 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) (async, rerun: 32) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000040000839dda4e00000000850000006d000000850000000f000000955542a59ee96d650059af289202f58e73230253ae38f75dd78bb9eecb5505f3e88b3ece9a0d2e23782344f7c4863da03f1a5e260000e58a5f740f0a00000000000000ab677a6f87f5692873a8170400000bea3d7f32ee1e98c4c4933e689ebf4bdfc0ea72610000"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (rerun: 32) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000080)='sys_exit\x00', r1}, 0x10) (async, rerun: 32) close(r1) (async, rerun: 32) r3 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r4 = syz_clone(0x2200, &(0x7f00000003c0)="11f1c5c6634befa1cd46533dfe08bdd0dc94f1fc346b1d5b3fe770526cc1a14c963b2347baa03e09b29bbe06bae8ca0a4e9d73a7c36303e1d3c51322963d86d001e68ad99b34cf5d016ae5415f15b876adea400c", 0x54, &(0x7f0000000440), &(0x7f0000000480), &(0x7f00000004c0)="9f251d23d67ec51f44e2f1a5e1803673bc3e2b2c33cb0e45d78cc4c93f83689480ea00b6829cf5449b95651104af596751acce78ed4a9954c15f0ecdee016f2325fb794be03a1c5817b42e977a74f6da13d20e729400b5a0c955ec87d1ac0f789d373e97e54eee3448a1c85257204f27829871aa44aed1a8df6077f88c37601a63d17a767da14754e174bef8a8243735b7bfdb3b8343a3a498b328b495501080d8ed1564a2d2f5c283407a72b17694e279794510c8c58a5f187871") perf_event_open(0x0, r4, 0xe, r3, 0x2) (async, rerun: 64) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x20, 0x5d, 0x40, 0x7f, 0x0, 0x5, 0x1000, 0x2, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6, 0x1, @perf_bp={&(0x7f0000000000), 0x6}, 0x824c, 0x1, 0x2, 0x2, 0x20, 0xff, 0x7fff, 0x0, 0x81, 0x0, 0x6}, r4, 0xb, r2, 0x0) (rerun: 64) 12:34:11 executing program 4: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000d00)=ANY=[@ANYBLOB="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"/2435], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xfe, 0x0, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000, 0x0, 0x0, &(0x7f0000000000), 0x0}, 0x48) 12:34:11 executing program 0: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8, 0xc0100, 0x7, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_bp={&(0x7f0000000240), 0x5}, 0x800, 0x8000000000000001, 0x9, 0x5, 0x5, 0x7f, 0x3ff, 0x0, 0x2, 0x0, 0x3}, 0x0, 0x9, 0xffffffffffffffff, 0x8) 12:34:11 executing program 1: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000d00)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400050000000404000001007d60b7030000000000006a0a00fe00010000850000000d000000b7000000000000009500000000000000496cf2827fb43a431ca711fcc9cdfa146ec56175037958e271f60d25b7937f02c8695e5a1b2cdf41dc10d1e8bf076d83923dd29c034055b67dafe6c8dc3d5d78c07fa1f7e4d5b318e2ec0e0700897a74a0091ff110026e6d2ef831ab7ea0c34f17e3ad6ef3bb622003b538dfd8e012e79578e51bc53099e90fbdb2ca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e060e3670ef0e789f93781965f1328d6704902cbe7bc0476619f28d99cd0aa7b73340cc2160a1fe3c184b751c51160fbce841f8a97be6148ba532e6fdd8c346dfebd31a08b32808b80200000000009dd27080e71113610e10d858e8327ef01fb6c86adac12233f9a1fb9c2aec61ce63a3462fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2ed8576a3f7f3deadd7130856f756436303767d2e24f29e5dad9796edb697a6ea0180aabc18cae2ed4b4390af9a9ceafd07ed0030000002cab154ad029a119ca3c972780870014605c83d7d11c3c975d5aec84222fff0d7216fdb0d3a0ec4be3e563112f4b39501aafe234870072858dc06e7c337642d3e5a815212f5e16c1b30c3a2a71bc85018e5ff2c910496f18afc9ffc2cc788bee1b47683db01a46939868d75211bbae0e7313bff5d4c391ddece00fc772dd6b4d4d0a917b239fe12280fc92c88c5b8dcdcc22ee1747794419cae0b4183fb01c73f99857399537f5dc2acb72c7eae993fc9eb22d130665b6341da114f08cd0509d380578673fffffff7f23877a6b24db0e067345560942fa629fbef2461c96a08707671315c302fae29187d4f5c06a960fd37c10223fdae7ed04935c3c90d3add8eebc8619d73415e6adcda2130f5011e48455b588b90dfae158b92e50adab9819cbe12baf5cc9398c88607a08009c2977aab37d9a44cfc1c7b4000000000000fa47742f6c5b9c4b11e7d7262a1457c39495c826b956ba859ac8e3c177b91bd7d5ca1664fe2f3ced8468911806e8916dc15e21644db60c2499d5d16d7d915836ab26c169482008ef069dc42749289f854797f2f900c2a12d8c38a967c1bbe09315c29877a331bcc87dc3addb08141bdee5d278cb51a38a4ebf222d74b2f663ddeef0005b3d96c7aae73835d5a3cda9e90d76c1993e0799d4894ee7f8249dc1e3428d2129369ee1b85afa1a5be5f6eb2eea0d0df414b315f65112412392191fa83ee830548f11e1038debd64cbe359454a3f2239cfe35f81b7aded448859968ff0e90500d0b07c0dd00490f167e6d5c1109681739dc33f75b20428d6474a0a91ee90b8de802c6b538622e6bbcb80f87b415263c401e64ed69a2f75409000000000000001d695c4559b82cabac3cccadc1e14ee039a30266ef6a7158e96f6fe7a104c19af4e03020abf5ff0433d660f20898d2a045d009a0ffb20a77c9af2b80c05184a66d30bbea2ca45a4d6d6d1e6e79aef42355a500587b603306a5af8d867d80a07f10d82eafb03062e95196d5e3b854b1c8c768c0010be959096ea948cfa8e7194123e918914a71ad5a8521fb956dbc60f7d9719b55b3abb6bba3d113a680a8d46fe074c83fbe378a3889e8145b2eaceab05ef932c6e4f8ef0ed0d818a7b76d839cf3c63ebb4380b168c38fa31d6686e0742e49563cfee3a7f0fc18bfa32c418cef875fb49e2989177a1bcd1e30280bc586e79a5dd8076c248e7d6e97b3ce267dd4e27b6ef206660090bb2164474cef378f97ca33fccf363361dcdba10c1547053453d0c9aea76442f6083dc99cd61afaf6be45d7b00d3639f2f10ac2d5c759c3e5468f5874c24411d415b6b085fb73a2c7c3852e0e658ffeb4e863428a792bee94f6cd895424360e0464f9d707ad83532ff181c985f54b39370c06e63055b4d6a36fa98a44e379d28307c9912fb097601f3f88a2ca6fd1f9320cfe7fc8e9f7f15f02e177ce23f43a154b42e26f037e8a01377cbd3f509e6e540c9ba9c2a589ac5d8ad67a65e9a44c576dc24452eaa9d819e2b04bdd1c000000070000000000000000000000005333c6199c12dcd92689192727a7267c47cf897853d160100b39b613faefe16bed1fc105dddd77ab929b837d54aa17eb9fbdc2bdc0e98ae2c3f23a6131e2879f04ff01000030b92dd493be66c2242f8184733b80ba28e824910844df31f3d4bb2f89049c5f6d63d56995747639964217aacfe548bc869098aa8e07e51dbc9e2d4db3c5f79fd355222ec2a00cf7f2ccd6dd6d2dc2a815d8314221a5472f1318a9dfbec5a7596b894367227a8d1d6475f5036f3a4505579caf3262129b14e99040b5d91398e17df85c25ccae973eecc7d187168d5c9cd85ed566cc17587641ed01889c927da38d83314480b15e23138c5b877a72bd4cf74a299df4fbfc8e6ea96939f15d254d9033c5a45706bda78ab60200000000000000000000000000000000000000706f78f0a2ea9667fb237db569da5b951808545a46830970c2dfae01adbda7d29bf1f7abdaf52e0de6f9d715a64b0fc36642e64ebf98762b34338b80e41b704c3eefaf0bb5f7d895de17a10b0a0ea15ccc0d7a830b6eb33b6b61675511d693ef5e3c44bbf71cabc5175d879e7499f8baae2a1a09cf38da73297764fbc0e723e1cc3abb12e3bddbe43b44f4462be3e6f37c47e983da4ca5c96187db5a2a2e1742bc93a65d71871261e97426b3a80f17dd2f7dbbe82d104ede9ba6925afc2ee6cb94f56f1363cad635abf8f983292c49c0ebf5005154c7b58a3a2a2e5a00d2f953a86d2fd92b8661264f781e3fb02d05a28f3f17b64d0258853d45cb5ebde10cd3d82eeed2f3ed925b7cf400304932c5ed0a362b235ce37e1f17700f7d1fecf8be8a2c5d25a9c60657560d05441387ff158a018d19a286c56d0886eb59d509ee89cc2df52881d0c2b2e5c27563ba54e4153c132d0366a966000000000000006bcc2c43087b00a602a2f58cfbfd623e13cb76687afb515ff823db7ab42242053408bbeeeed25d6afe78536243baef4630eb5ded6e7269349649121bdc77fac472935855b7a88fa3190e8209356bff2e38c59baaac6635992c39a1605eb5ebfae8d7df82b0062a8257f850085599106d921eae5857ce2d17a92679e8f401673cbe0f13d30c77728dc26c7620193c4fd7109d108dc5ae6488cf5a2df298eead3fb7c9a74e04e70cd2a22a797a089b726adce70fc0103aa749065ffed0ce25d43a9abbcf63e2bfbd7900387dc9241b0aa13c999596f84abc8278633c4b00"/2435], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xfe, 0x0, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0}, 0x48) 12:34:11 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) (async) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000040000839dda4e00000000850000006d000000850000000f000000955542a59ee96d650059af289202f58e73230253ae38f75dd78bb9eecb5505f3e88b3ece9a0d2e23782344f7c4863da03f1a5e260000e58a5f740f0a00000000000000ab677a6f87f5692873a8170400000bea3d7f32ee1e98c4c4933e689ebf4bdfc0ea72610000"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000080)='sys_exit\x00', r1}, 0x10) (async) close(r1) (async) r3 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r4 = syz_clone(0x2200, &(0x7f00000003c0)="11f1c5c6634befa1cd46533dfe08bdd0dc94f1fc346b1d5b3fe770526cc1a14c963b2347baa03e09b29bbe06bae8ca0a4e9d73a7c36303e1d3c51322963d86d001e68ad99b34cf5d016ae5415f15b876adea400c", 0x54, &(0x7f0000000440), &(0x7f0000000480), &(0x7f00000004c0)="9f251d23d67ec51f44e2f1a5e1803673bc3e2b2c33cb0e45d78cc4c93f83689480ea00b6829cf5449b95651104af596751acce78ed4a9954c15f0ecdee016f2325fb794be03a1c5817b42e977a74f6da13d20e729400b5a0c955ec87d1ac0f789d373e97e54eee3448a1c85257204f27829871aa44aed1a8df6077f88c37601a63d17a767da14754e174bef8a8243735b7bfdb3b8343a3a498b328b495501080d8ed1564a2d2f5c283407a72b17694e279794510c8c58a5f187871") perf_event_open(0x0, r4, 0xe, r3, 0x2) (async) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x20, 0x5d, 0x40, 0x7f, 0x0, 0x5, 0x1000, 0x2, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6, 0x1, @perf_bp={&(0x7f0000000000), 0x6}, 0x824c, 0x1, 0x2, 0x2, 0x20, 0xff, 0x7fff, 0x0, 0x81, 0x0, 0x6}, r4, 0xb, r2, 0x0) 12:34:11 executing program 5: perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x12) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cgroup.controllers\x00', 0x100002, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000140)='memory.low\x00', 0x2, 0x0) syz_clone(0x74809480, 0x0, 0x4100, &(0x7f0000000000), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000400000000000000000000850000006d000000850000000f00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 12:34:11 executing program 0: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8, 0xc0100, 0x7, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_bp={&(0x7f0000000240), 0x5}, 0x800, 0x8000000000000001, 0x9, 0x5, 0x5, 0x7f, 0x3ff, 0x0, 0x2, 0x0, 0x3}, 0x0, 0x9, 0xffffffffffffffff, 0x8) 12:34:11 executing program 4: perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x12) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cgroup.controllers\x00', 0x100002, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000140)='memory.low\x00', 0x2, 0x0) write$cgroup_int(r0, &(0x7f0000000200), 0x12) syz_clone(0x74809480, 0x0, 0x4100, &(0x7f0000000000), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000400000000000000000000850000006d000000850000000f00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 12:34:11 executing program 1: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000d00)=ANY=[@ANYBLOB="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"/2435], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xfe, 0x0, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0}, 0x48) 12:34:11 executing program 0: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc0100, 0x7, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_bp={&(0x7f0000000240), 0x5}, 0x800, 0x8000000000000001, 0x9, 0x5, 0x5, 0x7f, 0x3ff, 0x0, 0x2, 0x0, 0x3}, 0x0, 0x9, 0xffffffffffffffff, 0x8) 12:34:11 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNGETDEVNETNS(r0, 0x54e3, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'\x00', 0x52d35ce30131f272}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) close(r0) 12:34:11 executing program 2: perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x12) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cgroup.controllers\x00', 0x100002, 0x0) syz_clone(0x74809480, 0x0, 0x4100, &(0x7f0000000000), 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000400000000000000000000850000006d000000850000000f00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000080)='sys_exit\x00', r0}, 0x10) 12:34:11 executing program 0: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc0100, 0x7, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_bp={&(0x7f0000000240), 0x5}, 0x800, 0x8000000000000001, 0x9, 0x5, 0x5, 0x7f, 0x3ff, 0x0, 0x2, 0x0, 0x3}, 0x0, 0x9, 0xffffffffffffffff, 0x8) 12:34:11 executing program 1: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000d00)=ANY=[@ANYBLOB="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"/2435], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xfe, 0x0, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000, 0x0, 0x0, &(0x7f0000000000), 0x0}, 0x48) 12:34:11 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNGETDEVNETNS(r0, 0x54e3, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'\x00', 0x52d35ce30131f272}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) close(r0) openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) (async) ioctl$TUNGETDEVNETNS(r0, 0x54e3, 0x0) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'\x00', 0x52d35ce30131f272}) (async) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) (async) close(r0) (async) 12:34:11 executing program 0: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc0100, 0x7, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_bp={&(0x7f0000000240), 0x5}, 0x800, 0x8000000000000001, 0x9, 0x5, 0x5, 0x7f, 0x3ff, 0x0, 0x2, 0x0, 0x3}, 0x0, 0x9, 0xffffffffffffffff, 0x8) 12:34:11 executing program 1: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000d00)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400050000000404000001007d60b7030000000000006a0a00fe00010000850000000d000000b7000000000000009500000000000000496cf2827fb43a431ca711fcc9cdfa146ec56175037958e271f60d25b7937f02c8695e5a1b2cdf41dc10d1e8bf076d83923dd29c034055b67dafe6c8dc3d5d78c07fa1f7e4d5b318e2ec0e0700897a74a0091ff110026e6d2ef831ab7ea0c34f17e3ad6ef3bb622003b538dfd8e012e79578e51bc53099e90fbdb2ca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e060e3670ef0e789f93781965f1328d6704902cbe7bc0476619f28d99cd0aa7b73340cc2160a1fe3c184b751c51160fbce841f8a97be6148ba532e6fdd8c346dfebd31a08b32808b80200000000009dd27080e71113610e10d858e8327ef01fb6c86adac12233f9a1fb9c2aec61ce63a3462fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2ed8576a3f7f3deadd7130856f756436303767d2e24f29e5dad9796edb697a6ea0180aabc18cae2ed4b4390af9a9ceafd07ed0030000002cab154ad029a119ca3c972780870014605c83d7d11c3c975d5aec84222fff0d7216fdb0d3a0ec4be3e563112f4b39501aafe234870072858dc06e7c337642d3e5a815212f5e16c1b30c3a2a71bc85018e5ff2c910496f18afc9ffc2cc788bee1b47683db01a46939868d75211bbae0e7313bff5d4c391ddece00fc772dd6b4d4d0a917b239fe12280fc92c88c5b8dcdcc22ee1747794419cae0b4183fb01c73f99857399537f5dc2acb72c7eae993fc9eb22d130665b6341da114f08cd0509d380578673fffffff7f23877a6b24db0e067345560942fa629fbef2461c96a08707671315c302fae29187d4f5c06a960fd37c10223fdae7ed04935c3c90d3add8eebc8619d73415e6adcda2130f5011e48455b588b90dfae158b92e50adab9819cbe12baf5cc9398c88607a08009c2977aab37d9a44cfc1c7b4000000000000fa47742f6c5b9c4b11e7d7262a1457c39495c826b956ba859ac8e3c177b91bd7d5ca1664fe2f3ced8468911806e8916dc15e21644db60c2499d5d16d7d915836ab26c169482008ef069dc42749289f854797f2f900c2a12d8c38a967c1bbe09315c29877a331bcc87dc3addb08141bdee5d278cb51a38a4ebf222d74b2f663ddeef0005b3d96c7aae73835d5a3cda9e90d76c1993e0799d4894ee7f8249dc1e3428d2129369ee1b85afa1a5be5f6eb2eea0d0df414b315f65112412392191fa83ee830548f11e1038debd64cbe359454a3f2239cfe35f81b7aded448859968ff0e90500d0b07c0dd00490f167e6d5c1109681739dc33f75b20428d6474a0a91ee90b8de802c6b538622e6bbcb80f87b415263c401e64ed69a2f75409000000000000001d695c4559b82cabac3cccadc1e14ee039a30266ef6a7158e96f6fe7a104c19af4e03020abf5ff0433d660f20898d2a045d009a0ffb20a77c9af2b80c05184a66d30bbea2ca45a4d6d6d1e6e79aef42355a500587b603306a5af8d867d80a07f10d82eafb03062e95196d5e3b854b1c8c768c0010be959096ea948cfa8e7194123e918914a71ad5a8521fb956dbc60f7d9719b55b3abb6bba3d113a680a8d46fe074c83fbe378a3889e8145b2eaceab05ef932c6e4f8ef0ed0d818a7b76d839cf3c63ebb4380b168c38fa31d6686e0742e49563cfee3a7f0fc18bfa32c418cef875fb49e2989177a1bcd1e30280bc586e79a5dd8076c248e7d6e97b3ce267dd4e27b6ef206660090bb2164474cef378f97ca33fccf363361dcdba10c1547053453d0c9aea76442f6083dc99cd61afaf6be45d7b00d3639f2f10ac2d5c759c3e5468f5874c24411d415b6b085fb73a2c7c3852e0e658ffeb4e863428a792bee94f6cd895424360e0464f9d707ad83532ff181c985f54b39370c06e63055b4d6a36fa98a44e379d28307c9912fb097601f3f88a2ca6fd1f9320cfe7fc8e9f7f15f02e177ce23f43a154b42e26f037e8a01377cbd3f509e6e540c9ba9c2a589ac5d8ad67a65e9a44c576dc24452eaa9d819e2b04bdd1c000000070000000000000000000000005333c6199c12dcd92689192727a7267c47cf897853d160100b39b613faefe16bed1fc105dddd77ab929b837d54aa17eb9fbdc2bdc0e98ae2c3f23a6131e2879f04ff01000030b92dd493be66c2242f8184733b80ba28e824910844df31f3d4bb2f89049c5f6d63d56995747639964217aacfe548bc869098aa8e07e51dbc9e2d4db3c5f79fd355222ec2a00cf7f2ccd6dd6d2dc2a815d8314221a5472f1318a9dfbec5a7596b894367227a8d1d6475f5036f3a4505579caf3262129b14e99040b5d91398e17df85c25ccae973eecc7d187168d5c9cd85ed566cc17587641ed01889c927da38d83314480b15e23138c5b877a72bd4cf74a299df4fbfc8e6ea96939f15d254d9033c5a45706bda78ab60200000000000000000000000000000000000000706f78f0a2ea9667fb237db569da5b951808545a46830970c2dfae01adbda7d29bf1f7abdaf52e0de6f9d715a64b0fc36642e64ebf98762b34338b80e41b704c3eefaf0bb5f7d895de17a10b0a0ea15ccc0d7a830b6eb33b6b61675511d693ef5e3c44bbf71cabc5175d879e7499f8baae2a1a09cf38da73297764fbc0e723e1cc3abb12e3bddbe43b44f4462be3e6f37c47e983da4ca5c96187db5a2a2e1742bc93a65d71871261e97426b3a80f17dd2f7dbbe82d104ede9ba6925afc2ee6cb94f56f1363cad635abf8f983292c49c0ebf5005154c7b58a3a2a2e5a00d2f953a86d2fd92b8661264f781e3fb02d05a28f3f17b64d0258853d45cb5ebde10cd3d82eeed2f3ed925b7cf400304932c5ed0a362b235ce37e1f17700f7d1fecf8be8a2c5d25a9c60657560d05441387ff158a018d19a286c56d0886eb59d509ee89cc2df52881d0c2b2e5c27563ba54e4153c132d0366a966000000000000006bcc2c43087b00a602a2f58cfbfd623e13cb76687afb515ff823db7ab42242053408bbeeeed25d6afe78536243baef4630eb5ded6e7269349649121bdc77fac472935855b7a88fa3190e8209356bff2e38c59baaac6635992c39a1605eb5ebfae8d7df82b0062a8257f850085599106d921eae5857ce2d17a92679e8f401673cbe0f13d30c77728dc26c7620193c4fd7109d108dc5ae6488cf5a2df298eead3fb7c9a74e04e70cd2a22a797a089b726adce70fc0103aa749065ffed0ce25d43a9abbcf63e2bfbd7900387dc9241b0aa13c999596f84abc8278633c4b00"/2435], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xfe, 0x0, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000, 0x0, 0x0, &(0x7f0000000000), 0x0}, 0x48) 12:34:12 executing program 5: perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x12) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cgroup.controllers\x00', 0x100002, 0x0) syz_clone(0x74809480, 0x0, 0x4100, &(0x7f0000000000), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000400000000000000000000850000006d000000850000000f00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 12:34:12 executing program 0: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8, 0x0, 0x7, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_bp={&(0x7f0000000240), 0x5}, 0x800, 0x8000000000000001, 0x9, 0x5, 0x5, 0x7f, 0x3ff, 0x0, 0x2, 0x0, 0x3}, 0x0, 0x9, 0xffffffffffffffff, 0x8) 12:34:12 executing program 1: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000d00)=ANY=[@ANYBLOB="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"/2435], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xfe, 0x0, &(0x7f0000000100)="b9ff03006044238cb89e14f088a81bff890600004000632f77fbac14142ce934a0a662079f4b4d2f87e5feca6aab845013f2325f1a3901050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014caf28c0adc043084617d7ecf41e9d134589d46e5dfc4ca5780d38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d75a058f6efa6d1f5f7ff4000000000000000000", 0x0, 0xfe, 0x60000000, 0x0, 0x0, &(0x7f0000000000), 0x0}, 0x48) 12:34:12 executing program 4: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000d00)=ANY=[@ANYBLOB="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"/2435], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xfe, 0x0, &(0x7f0000000100)="b9ff03006044238cb89e14f088a81bff890600004000632f77fbac14142ce934a0a662079f4b4d2f87e5feca6aab845013f2325f1a3901050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014caf28c0adc043084617d7ecf41e9d134589d46e5dfc4ca5780d38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d75a058f6efa6d1f5f7ff4000000000000000000", 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0}, 0x48) 12:34:12 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNGETDEVNETNS(r0, 0x54e3, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'\x00', 0x52d35ce30131f272}) (async) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) (async) close(r0) 12:34:12 executing program 0: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_bp={&(0x7f0000000240), 0x5}, 0x800, 0x8000000000000001, 0x9, 0x5, 0x5, 0x7f, 0x3ff, 0x0, 0x2, 0x0, 0x3}, 0x0, 0x9, 0xffffffffffffffff, 0x8) 12:34:12 executing program 2: perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x12) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x74809480, 0x0, 0x4100, &(0x7f0000000000), 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000400000000000000000000850000006d000000850000000f00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000080)='sys_exit\x00', r0}, 0x10) 12:34:12 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'\x00', 0x1}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) close(r0) 12:34:12 executing program 0: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_bp={&(0x7f0000000240), 0x5}, 0x800, 0x8000000000000001, 0x9, 0x5, 0x5, 0x7f, 0x3ff, 0x0, 0x2, 0x0, 0x3}, 0x0, 0x9, 0xffffffffffffffff, 0x8) 12:34:12 executing program 4: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000d00)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400050000000404000001007d60b7030000000000006a0a00fe00010000850000000d000000b7000000000000009500000000000000496cf2827fb43a431ca711fcc9cdfa146ec56175037958e271f60d25b7937f02c8695e5a1b2cdf41dc10d1e8bf076d83923dd29c034055b67dafe6c8dc3d5d78c07fa1f7e4d5b318e2ec0e0700897a74a0091ff110026e6d2ef831ab7ea0c34f17e3ad6ef3bb622003b538dfd8e012e79578e51bc53099e90fbdb2ca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e060e3670ef0e789f93781965f1328d6704902cbe7bc0476619f28d99cd0aa7b73340cc2160a1fe3c184b751c51160fbce841f8a97be6148ba532e6fdd8c346dfebd31a08b32808b80200000000009dd27080e71113610e10d858e8327ef01fb6c86adac12233f9a1fb9c2aec61ce63a3462fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2ed8576a3f7f3deadd7130856f756436303767d2e24f29e5dad9796edb697a6ea0180aabc18cae2ed4b4390af9a9ceafd07ed0030000002cab154ad029a119ca3c972780870014605c83d7d11c3c975d5aec84222fff0d7216fdb0d3a0ec4be3e563112f4b39501aafe234870072858dc06e7c337642d3e5a815212f5e16c1b30c3a2a71bc85018e5ff2c910496f18afc9ffc2cc788bee1b47683db01a46939868d75211bbae0e7313bff5d4c391ddece00fc772dd6b4d4d0a917b239fe12280fc92c88c5b8dcdcc22ee1747794419cae0b4183fb01c73f99857399537f5dc2acb72c7eae993fc9eb22d130665b6341da114f08cd0509d380578673fffffff7f23877a6b24db0e067345560942fa629fbef2461c96a08707671315c302fae29187d4f5c06a960fd37c10223fdae7ed04935c3c90d3add8eebc8619d73415e6adcda2130f5011e48455b588b90dfae158b92e50adab9819cbe12baf5cc9398c88607a08009c2977aab37d9a44cfc1c7b4000000000000fa47742f6c5b9c4b11e7d7262a1457c39495c826b956ba859ac8e3c177b91bd7d5ca1664fe2f3ced8468911806e8916dc15e21644db60c2499d5d16d7d915836ab26c169482008ef069dc42749289f854797f2f900c2a12d8c38a967c1bbe09315c29877a331bcc87dc3addb08141bdee5d278cb51a38a4ebf222d74b2f663ddeef0005b3d96c7aae73835d5a3cda9e90d76c1993e0799d4894ee7f8249dc1e3428d2129369ee1b85afa1a5be5f6eb2eea0d0df414b315f65112412392191fa83ee830548f11e1038debd64cbe359454a3f2239cfe35f81b7aded448859968ff0e90500d0b07c0dd00490f167e6d5c1109681739dc33f75b20428d6474a0a91ee90b8de802c6b538622e6bbcb80f87b415263c401e64ed69a2f75409000000000000001d695c4559b82cabac3cccadc1e14ee039a30266ef6a7158e96f6fe7a104c19af4e03020abf5ff0433d660f20898d2a045d009a0ffb20a77c9af2b80c05184a66d30bbea2ca45a4d6d6d1e6e79aef42355a500587b603306a5af8d867d80a07f10d82eafb03062e95196d5e3b854b1c8c768c0010be959096ea948cfa8e7194123e918914a71ad5a8521fb956dbc60f7d9719b55b3abb6bba3d113a680a8d46fe074c83fbe378a3889e8145b2eaceab05ef932c6e4f8ef0ed0d818a7b76d839cf3c63ebb4380b168c38fa31d6686e0742e49563cfee3a7f0fc18bfa32c418cef875fb49e2989177a1bcd1e30280bc586e79a5dd8076c248e7d6e97b3ce267dd4e27b6ef206660090bb2164474cef378f97ca33fccf363361dcdba10c1547053453d0c9aea76442f6083dc99cd61afaf6be45d7b00d3639f2f10ac2d5c759c3e5468f5874c24411d415b6b085fb73a2c7c3852e0e658ffeb4e863428a792bee94f6cd895424360e0464f9d707ad83532ff181c985f54b39370c06e63055b4d6a36fa98a44e379d28307c9912fb097601f3f88a2ca6fd1f9320cfe7fc8e9f7f15f02e177ce23f43a154b42e26f037e8a01377cbd3f509e6e540c9ba9c2a589ac5d8ad67a65e9a44c576dc24452eaa9d819e2b04bdd1c000000070000000000000000000000005333c6199c12dcd92689192727a7267c47cf897853d160100b39b613faefe16bed1fc105dddd77ab929b837d54aa17eb9fbdc2bdc0e98ae2c3f23a6131e2879f04ff01000030b92dd493be66c2242f8184733b80ba28e824910844df31f3d4bb2f89049c5f6d63d56995747639964217aacfe548bc869098aa8e07e51dbc9e2d4db3c5f79fd355222ec2a00cf7f2ccd6dd6d2dc2a815d8314221a5472f1318a9dfbec5a7596b894367227a8d1d6475f5036f3a4505579caf3262129b14e99040b5d91398e17df85c25ccae973eecc7d187168d5c9cd85ed566cc17587641ed01889c927da38d83314480b15e23138c5b877a72bd4cf74a299df4fbfc8e6ea96939f15d254d9033c5a45706bda78ab60200000000000000000000000000000000000000706f78f0a2ea9667fb237db569da5b951808545a46830970c2dfae01adbda7d29bf1f7abdaf52e0de6f9d715a64b0fc36642e64ebf98762b34338b80e41b704c3eefaf0bb5f7d895de17a10b0a0ea15ccc0d7a830b6eb33b6b61675511d693ef5e3c44bbf71cabc5175d879e7499f8baae2a1a09cf38da73297764fbc0e723e1cc3abb12e3bddbe43b44f4462be3e6f37c47e983da4ca5c96187db5a2a2e1742bc93a65d71871261e97426b3a80f17dd2f7dbbe82d104ede9ba6925afc2ee6cb94f56f1363cad635abf8f983292c49c0ebf5005154c7b58a3a2a2e5a00d2f953a86d2fd92b8661264f781e3fb02d05a28f3f17b64d0258853d45cb5ebde10cd3d82eeed2f3ed925b7cf400304932c5ed0a362b235ce37e1f17700f7d1fecf8be8a2c5d25a9c60657560d05441387ff158a018d19a286c56d0886eb59d509ee89cc2df52881d0c2b2e5c27563ba54e4153c132d0366a966000000000000006bcc2c43087b00a602a2f58cfbfd623e13cb76687afb515ff823db7ab42242053408bbeeeed25d6afe78536243baef4630eb5ded6e7269349649121bdc77fac472935855b7a88fa3190e8209356bff2e38c59baaac6635992c39a1605eb5ebfae8d7df82b0062a8257f850085599106d921eae5857ce2d17a92679e8f401673cbe0f13d30c77728dc26c7620193c4fd7109d108dc5ae6488cf5a2df298eead3fb7c9a74e04e70cd2a22a797a089b726adce70fc0103aa749065ffed0ce25d43a9abbcf63e2bfbd7900387dc9241b0aa13c999596f84abc8278633c4b00"/2435], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xfe, 0x0, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0}, 0x48) 12:34:12 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'\x00', 0x52d35ce30131f272}) ioctl$TUNSETLINK(r0, 0x400454cd, 0xf) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0) write$cgroup_type(r1, &(0x7f0000000080), 0x11ffffce1) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x660c, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'ipvlan1\x00', 0x1000}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) close(r0) 12:34:12 executing program 0: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_bp={&(0x7f0000000240), 0x5}, 0x800, 0x8000000000000001, 0x9, 0x5, 0x5, 0x7f, 0x3ff, 0x0, 0x2, 0x0, 0x3}, 0x0, 0x9, 0xffffffffffffffff, 0x8) 12:34:12 executing program 5: perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x12) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x74809480, 0x0, 0x4100, &(0x7f0000000000), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000400000000000000000000850000006d000000850000000f00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 12:34:12 executing program 4: perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x12) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cgroup.controllers\x00', 0x100002, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000140)='memory.low\x00', 0x2, 0x0) write$cgroup_int(r0, &(0x7f0000000200), 0x12) syz_clone(0x74809480, 0x0, 0x4100, &(0x7f0000000000), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000400000000000000000000850000006d000000850000000f00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 12:34:12 executing program 0: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_bp={&(0x7f0000000240), 0x5}, 0x800, 0x8000000000000001, 0x9, 0x5, 0x5, 0x7f, 0x3ff, 0x0, 0x2, 0x0, 0x3}, 0x0, 0x9, 0xffffffffffffffff, 0x8) 12:34:12 executing program 1: perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x12) r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cgroup.controllers\x00', 0x100002, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000140)='memory.low\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f0000000200), 0x12) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000000080)=0x3) syz_clone(0x74809480, 0x0, 0x4100, &(0x7f0000000000), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000400000000000000000000850000006d000000850000000f00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 12:34:12 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'\x00', 0x52d35ce30131f272}) (async) ioctl$TUNSETLINK(r0, 0x400454cd, 0xf) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0) write$cgroup_type(r1, &(0x7f0000000080), 0x11ffffce1) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x660c, 0x0) (async) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'ipvlan1\x00', 0x1000}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) (async) close(r0) [ 69.472116][ T3328] syz-executor.3 (3328) used greatest stack depth: 22144 bytes left 12:34:12 executing program 0: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_bp={&(0x7f0000000240), 0x5}, 0x800, 0x8000000000000001, 0x9, 0x5, 0x5, 0x7f, 0x3ff, 0x0, 0x2, 0x0, 0x3}, 0x0, 0x9, 0xffffffffffffffff, 0x8) 12:34:14 executing program 2: perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x12) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x74809480, 0x0, 0x4100, &(0x7f0000000000), 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000400000000000000000000850000006d000000850000000f00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000080)='sys_exit\x00', r0}, 0x10) 12:34:14 executing program 0: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_bp={&(0x7f0000000240), 0x5}, 0x800, 0x8000000000000001, 0x9, 0x5, 0x5, 0x7f, 0x3ff, 0x0, 0x2, 0x0, 0x3}, 0x0, 0x9, 0xffffffffffffffff, 0x8) 12:34:14 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'\x00', 0x52d35ce30131f272}) ioctl$TUNSETLINK(r0, 0x400454cd, 0xf) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0) write$cgroup_type(r1, &(0x7f0000000080), 0x11ffffce1) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x660c, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'ipvlan1\x00', 0x1000}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) close(r0) openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'\x00', 0x52d35ce30131f272}) (async) ioctl$TUNSETLINK(r0, 0x400454cd, 0xf) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0) (async) write$cgroup_type(r1, &(0x7f0000000080), 0x11ffffce1) (async) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x660c, 0x0) (async) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'ipvlan1\x00', 0x1000}) (async) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) (async) close(r0) (async) 12:34:14 executing program 4: perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x12) r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cgroup.controllers\x00', 0x100002, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000140)='memory.low\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f0000000200), 0x12) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000000080)=0x3) syz_clone(0x74809480, 0x0, 0x4100, &(0x7f0000000000), 0x0, 0x0) 12:34:14 executing program 5: perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x12) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x74809480, 0x0, 0x4100, &(0x7f0000000000), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000400000000000000000000850000006d000000850000000f00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 12:34:14 executing program 1: perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x12) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x74809480, 0x0, 0x4100, &(0x7f0000000000), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000400000000000000000000850000006d000000850000000f00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 12:34:14 executing program 0: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_bp={&(0x7f0000000240), 0x5}, 0x800, 0x8000000000000001, 0x9, 0x5, 0x5, 0x7f, 0x3ff, 0x0, 0x2, 0x0, 0x3}, 0x0, 0x9, 0xffffffffffffffff, 0x8) 12:34:14 executing program 0: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_bp={&(0x7f0000000240), 0x5}, 0x800, 0x8000000000000001, 0x9, 0x5, 0x5, 0x7f, 0x3ff, 0x0, 0x2, 0x0, 0x3}, 0x0, 0x9, 0xffffffffffffffff, 0x8) 12:34:14 executing program 0: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_bp={&(0x7f0000000240), 0x5}, 0x800, 0x8000000000000001, 0x9, 0x5, 0x5, 0x7f, 0x3ff, 0x0, 0x2, 0x0, 0x3}, 0x0, 0x9, 0xffffffffffffffff, 0x8) 12:34:14 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'\x00', 0x52d35ce30131f272}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0) write$cgroup_type(r1, &(0x7f0000000080), 0x11ffffce1) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x660c, 0x0) ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f0000000080)={0x6, &(0x7f0000000040)=[{0x6, 0x80, 0x8, 0x3e5}, {0x2, 0x4, 0x0, 0x8001}, {0x1000, 0x6, 0x7e, 0x120000}, {0x20, 0x3e, 0x9, 0x4}, {0x8000, 0x6, 0x1, 0x4}, {0x4, 0x3, 0x6, 0x95b}]}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) close(r0) close(0xffffffffffffffff) 12:34:14 executing program 0: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_bp={&(0x7f0000000240), 0x5}, 0x800, 0x8000000000000001, 0x9, 0x5, 0x5, 0x7f, 0x3ff, 0x0, 0x2, 0x0, 0x3}, 0x0, 0x9, 0xffffffffffffffff, 0x8) 12:34:14 executing program 0: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_bp={&(0x7f0000000240), 0x5}, 0x800, 0x8000000000000001, 0x9, 0x5, 0x5, 0x7f, 0x3ff, 0x0, 0x2, 0x0, 0x3}, 0x0, 0x9, 0xffffffffffffffff, 0x8) 12:34:15 executing program 2: perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x12) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x74809480, 0x0, 0x4100, &(0x7f0000000000), 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000400000000000000000000850000006d000000850000000f00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000080)='sys_exit\x00', r0}, 0x10) 12:34:15 executing program 0: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_bp={&(0x7f0000000240), 0x5}, 0x800, 0x8000000000000001, 0x9, 0x5, 0x5, 0x7f, 0x3ff, 0x0, 0x2, 0x0, 0x3}, 0x0, 0x9, 0xffffffffffffffff, 0x8) 12:34:15 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'\x00', 0x52d35ce30131f272}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0) write$cgroup_type(r1, &(0x7f0000000080), 0x11ffffce1) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x660c, 0x0) ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f0000000080)={0x6, &(0x7f0000000040)=[{0x6, 0x80, 0x8, 0x3e5}, {0x2, 0x4, 0x0, 0x8001}, {0x1000, 0x6, 0x7e, 0x120000}, {0x20, 0x3e, 0x9, 0x4}, {0x8000, 0x6, 0x1, 0x4}, {0x4, 0x3, 0x6, 0x95b}]}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) (async) close(r0) close(0xffffffffffffffff) 12:34:15 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'\x00', 0x52d35ce30131f272}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0) write$cgroup_type(r1, &(0x7f0000000080), 0x11ffffce1) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x660c, 0x0) ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f0000000080)={0x6, &(0x7f0000000040)=[{0x6, 0x80, 0x8, 0x3e5}, {0x2, 0x4, 0x0, 0x8001}, {0x1000, 0x6, 0x7e, 0x120000}, {0x20, 0x3e, 0x9, 0x4}, {0x8000, 0x6, 0x1, 0x4}, {0x4, 0x3, 0x6, 0x95b}]}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) close(r0) close(0xffffffffffffffff) 12:34:15 executing program 5: perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x12) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x74809480, 0x0, 0x4100, &(0x7f0000000000), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000400000000000000000000850000006d000000850000000f00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 12:34:15 executing program 1: perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x12) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x74809480, 0x0, 0x4100, &(0x7f0000000000), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000400000000000000000000850000006d000000850000000f00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 12:34:15 executing program 0: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_bp={&(0x7f0000000240), 0x5}, 0x800, 0x8000000000000001, 0x9, 0x5, 0x5, 0x7f, 0x3ff, 0x0, 0x2, 0x0, 0x3}, 0x0, 0x9, 0xffffffffffffffff, 0x8) 12:34:15 executing program 0: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_bp={&(0x7f0000000240), 0x5}, 0x800, 0x8000000000000001, 0x9, 0x5, 0x5, 0x7f, 0x3ff, 0x0, 0x2, 0x0, 0x3}, 0x0, 0x9, 0xffffffffffffffff, 0x8) 12:34:15 executing program 0: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_bp={&(0x7f0000000240), 0x5}, 0x800, 0x8000000000000001, 0x9, 0x5, 0x5, 0x7f, 0x3ff, 0x0, 0x2, 0x0, 0x3}, 0x0, 0x9, 0xffffffffffffffff, 0x8) 12:34:15 executing program 0: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_bp={&(0x7f0000000240), 0x5}, 0x800, 0x8000000000000001, 0x9, 0x5, 0x5, 0x7f, 0x3ff, 0x0, 0x2, 0x0, 0x3}, 0x0, 0x9, 0xffffffffffffffff, 0x8) 12:34:15 executing program 0: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_bp={&(0x7f0000000240), 0x5}, 0x800, 0x8000000000000001, 0x9, 0x5, 0x5, 0x7f, 0x3ff, 0x0, 0x2, 0x0, 0x3}, 0x0, 0x9, 0xffffffffffffffff, 0x8) 12:34:15 executing program 0: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_bp={&(0x7f0000000240), 0x5}, 0x800, 0x8000000000000001, 0x9, 0x5, 0x5, 0x7f, 0x3ff, 0x0, 0x2, 0x0, 0x3}, 0x0, 0x9, 0xffffffffffffffff, 0x8) 12:34:15 executing program 2: perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x12) syz_clone(0x74809480, 0x0, 0x4100, &(0x7f0000000000), 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000400000000000000000000850000006d000000850000000f00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000080)='sys_exit\x00', r0}, 0x10) 12:34:15 executing program 0: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_bp={&(0x7f0000000240), 0x5}, 0x800, 0x8000000000000001, 0x9, 0x5, 0x5, 0x7f, 0x3ff, 0x0, 0x2, 0x0, 0x3}, 0x0, 0x9, 0xffffffffffffffff, 0x8) 12:34:15 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'\x00', 0x52d35ce30131f272}) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0) write$cgroup_type(r1, &(0x7f0000000080), 0x11ffffce1) (async) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x660c, 0x0) (async) ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f0000000080)={0x6, &(0x7f0000000040)=[{0x6, 0x80, 0x8, 0x3e5}, {0x2, 0x4, 0x0, 0x8001}, {0x1000, 0x6, 0x7e, 0x120000}, {0x20, 0x3e, 0x9, 0x4}, {0x8000, 0x6, 0x1, 0x4}, {0x4, 0x3, 0x6, 0x95b}]}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) (async) close(r0) (async) close(0xffffffffffffffff) 12:34:15 executing program 4: perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x12) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x74809480, 0x0, 0x4100, &(0x7f0000000000), 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000400000000000000000000850000006d000000850000000f00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000080)='sys_exit\x00', r0}, 0x10) 12:34:16 executing program 5: perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x12) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cgroup.controllers\x00', 0x100002, 0x0) syz_clone(0x74809480, 0x0, 0x4100, &(0x7f0000000000), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000400000000000000000000850000006d000000850000000f00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 12:34:16 executing program 0: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_bp={&(0x7f0000000240), 0x5}, 0x800, 0x8000000000000001, 0x9, 0x5, 0x5, 0x7f, 0x3ff, 0x0, 0x2, 0x0, 0x3}, 0x0, 0x9, 0xffffffffffffffff, 0x8) 12:34:16 executing program 1: perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x12) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x74809480, 0x0, 0x4100, &(0x7f0000000000), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000400000000000000000000850000006d000000850000000f00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 12:34:16 executing program 2: perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x74809480, 0x0, 0x4100, &(0x7f0000000000), 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000400000000000000000000850000006d000000850000000f00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000080)='sys_exit\x00', r0}, 0x10) 12:34:16 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x80, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'\x00', 0x52d35ce30131f272}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) close(r0) 12:34:16 executing program 4: perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x12) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x74809480, 0x0, 0x4100, &(0x7f0000000000), 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000400000000000000000000850000006d000000850000000f00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000080)='sys_exit\x00', r0}, 0x10) 12:34:16 executing program 0: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_bp={&(0x7f0000000240), 0x5}, 0x800, 0x8000000000000001, 0x9, 0x5, 0x5, 0x7f, 0x3ff, 0x0, 0x2, 0x0, 0x3}, 0x0, 0x9, 0xffffffffffffffff, 0x8) 12:34:16 executing program 0: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_bp={&(0x7f0000000240), 0x5}, 0x800, 0x8000000000000001, 0x9, 0x5, 0x5, 0x7f, 0x3ff, 0x0, 0x2, 0x0, 0x3}, 0x0, 0x9, 0xffffffffffffffff, 0x8) 12:34:16 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x80, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'\x00', 0x52d35ce30131f272}) (async) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) close(r0) 12:34:16 executing program 0: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_bp={&(0x7f0000000240), 0x5}, 0x800, 0x8000000000000001, 0x9, 0x5, 0x5, 0x7f, 0x3ff, 0x0, 0x2, 0x0, 0x3}, 0x0, 0x9, 0xffffffffffffffff, 0x8) 12:34:16 executing program 0: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_bp={&(0x7f0000000240), 0x5}, 0x800, 0x8000000000000001, 0x9, 0x5, 0x5, 0x7f, 0x3ff, 0x0, 0x2, 0x0, 0x3}, 0x0, 0x9, 0xffffffffffffffff, 0x8) 12:34:16 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x80, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'\x00', 0x52d35ce30131f272}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) close(r0) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x80, 0x0) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'\x00', 0x52d35ce30131f272}) (async) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) (async) close(r0) (async) 12:34:16 executing program 5: perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x12) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cgroup.controllers\x00', 0x100002, 0x0) syz_clone(0x74809480, 0x0, 0x4100, &(0x7f0000000000), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000400000000000000000000850000006d000000850000000f00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 12:34:16 executing program 2: syz_clone(0x74809480, 0x0, 0x4100, &(0x7f0000000000), 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000400000000000000000000850000006d000000850000000f00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000080)='sys_exit\x00', r0}, 0x10) 12:34:17 executing program 1: perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x12) r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cgroup.controllers\x00', 0x100002, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000140)='memory.low\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f0000000200), 0x12) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000000080)=0x3) syz_clone(0x74809480, 0x0, 0x4100, &(0x7f0000000000), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000400000000000000000000850000006d000000850000000f00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 12:34:17 executing program 0: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_bp={&(0x7f0000000240), 0x5}, 0x800, 0x8000000000000001, 0x9, 0x5, 0x5, 0x7f, 0x3ff, 0x0, 0x2, 0x0, 0x3}, 0x0, 0x9, 0xffffffffffffffff, 0x8) 12:34:17 executing program 3: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cpuacct.usage_user\x00', 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'\x00', 0x52d35ce30131f272}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) close(r0) 12:34:17 executing program 2: syz_clone(0x0, 0x0, 0x4100, &(0x7f0000000000), 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000400000000000000000000850000006d000000850000000f00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000080)='sys_exit\x00', r0}, 0x10) 12:34:17 executing program 5: perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cgroup.controllers\x00', 0x100002, 0x0) syz_clone(0x74809480, 0x0, 0x4100, &(0x7f0000000000), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000400000000000000000000850000006d000000850000000f00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 12:34:17 executing program 4: perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x12) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cgroup.controllers\x00', 0x100002, 0x0) syz_clone(0x74809480, 0x0, 0x4100, &(0x7f0000000000), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000400000000000000000000850000006d000000850000000f00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 12:34:17 executing program 0: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_bp={&(0x7f0000000240), 0x5}, 0x800, 0x8000000000000001, 0x9, 0x5, 0x5, 0x7f, 0x3ff, 0x0, 0x2, 0x0, 0x3}, 0x0, 0x9, 0xffffffffffffffff, 0x8) 12:34:17 executing program 3: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cpuacct.usage_user\x00', 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'\x00', 0x52d35ce30131f272}) (async) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) (async) close(r0) 12:34:17 executing program 2: syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000400000000000000000000850000006d000000850000000f00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000080)='sys_exit\x00', r0}, 0x10) 12:34:17 executing program 0: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000240), 0x5}, 0x800, 0x8000000000000001, 0x9, 0x5, 0x5, 0x7f, 0x3ff, 0x0, 0x2, 0x0, 0x3}, 0x0, 0x9, 0xffffffffffffffff, 0x8) 12:34:17 executing program 3: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cpuacct.usage_user\x00', 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'\x00', 0x52d35ce30131f272}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) close(r0) 12:34:17 executing program 0: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000240), 0x5}, 0x800, 0x8000000000000001, 0x9, 0x5, 0x5, 0x7f, 0x3ff, 0x0, 0x2, 0x0, 0x3}, 0x0, 0x9, 0xffffffffffffffff, 0x8) 12:34:17 executing program 1: perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x12) r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cgroup.controllers\x00', 0x100002, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000140)='memory.low\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f0000000200), 0x12) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000000080)=0x3) syz_clone(0x74809480, 0x0, 0x4100, &(0x7f0000000000), 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000400000000000000000000850000006d000000850000000f00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000080)='sys_exit\x00', r2}, 0x10) close(r2) 12:34:17 executing program 0: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}, 0x800, 0x8000000000000001, 0x9, 0x5, 0x5, 0x7f, 0x3ff, 0x0, 0x2, 0x0, 0x3}, 0x0, 0x9, 0xffffffffffffffff, 0x8) 12:34:17 executing program 2: syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000080)='sys_exit\x00', r0}, 0x10) 12:34:17 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'\x00', 0x52d35ce30131f272}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/pid_for_children\x00') openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x212000, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0x6, &(0x7f00000000c0)=@raw=[@call={0x85, 0x0, 0x0, 0x9b}, @initr0={0x18, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x400}, @map_idx_val={0x18, 0x8, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe2}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffb}], &(0x7f0000000100)='GPL\x00', 0xfffff156, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0x1, 0x2}, 0x8, 0x10, &(0x7f0000000180)={0x1, 0xb, 0x8}, 0x10}, 0x80) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000400000000000000000000850000006d000000850000000f00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000080)='sys_exit\x00', r1}, 0x10) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000400000000000000000000850000006d000000850000000f00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f00000002c0)='\x00') bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000080)='sys_exit\x00', r3}, 0x10) socketpair(0x11, 0x4, 0x7b37, &(0x7f0000000240)) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000400000000000000000000850000006d000000850000000f00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000080)='sys_exit\x00', r4}, 0x10) close(r4) 12:34:17 executing program 4: perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x12) r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cgroup.controllers\x00', 0x100002, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000140)='memory.low\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f0000000200), 0x12) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000000080)=0x3) syz_clone(0x74809480, 0x0, 0x4100, &(0x7f0000000000), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000400000000000000000000850000006d000000850000000f00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 12:34:17 executing program 5: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cgroup.controllers\x00', 0x100002, 0x0) syz_clone(0x74809480, 0x0, 0x4100, &(0x7f0000000000), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000400000000000000000000850000006d000000850000000f00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 12:34:17 executing program 2: syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000080)='sys_exit\x00', r0}, 0x10) 12:34:17 executing program 0: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x800, 0x8000000000000001, 0x9, 0x5, 0x5, 0x7f, 0x3ff, 0x0, 0x2, 0x0, 0x3}, 0x0, 0x9, 0xffffffffffffffff, 0x8) 12:34:17 executing program 0: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x8000000000000001, 0x9, 0x5, 0x5, 0x7f, 0x3ff, 0x0, 0x2, 0x0, 0x3}, 0x0, 0x9, 0xffffffffffffffff, 0x8) 12:34:17 executing program 2: syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 12:34:17 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'\x00', 0x52d35ce30131f272}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/pid_for_children\x00') openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x212000, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0x6, &(0x7f00000000c0)=@raw=[@call={0x85, 0x0, 0x0, 0x9b}, @initr0={0x18, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x400}, @map_idx_val={0x18, 0x8, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe2}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffb}], &(0x7f0000000100)='GPL\x00', 0xfffff156, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0x1, 0x2}, 0x8, 0x10, &(0x7f0000000180)={0x1, 0xb, 0x8}, 0x10}, 0x80) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000400000000000000000000850000006d000000850000000f00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000080)='sys_exit\x00', r1}, 0x10) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000400000000000000000000850000006d000000850000000f00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f00000002c0)='\x00') bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000080)='sys_exit\x00', r3}, 0x10) socketpair(0x11, 0x4, 0x7b37, &(0x7f0000000240)) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000400000000000000000000850000006d000000850000000f00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000080)='sys_exit\x00', r4}, 0x10) close(r4) openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'\x00', 0x52d35ce30131f272}) (async) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) (async) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/pid_for_children\x00') (async) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x212000, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0x6, &(0x7f00000000c0)=@raw=[@call={0x85, 0x0, 0x0, 0x9b}, @initr0={0x18, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x400}, @map_idx_val={0x18, 0x8, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe2}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffb}], &(0x7f0000000100)='GPL\x00', 0xfffff156, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0x1, 0x2}, 0x8, 0x10, &(0x7f0000000180)={0x1, 0xb, 0x8}, 0x10}, 0x80) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000400000000000000000000850000006d000000850000000f00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000080)='sys_exit\x00', r1}, 0x10) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000400000000000000000000850000006d000000850000000f00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f00000002c0)='\x00') (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000080)='sys_exit\x00', r3}, 0x10) (async) socketpair(0x11, 0x4, 0x7b37, &(0x7f0000000240)) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000400000000000000000000850000006d000000850000000f00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000080)='sys_exit\x00', r4}, 0x10) (async) close(r4) (async) 12:34:17 executing program 0: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x8000000000000001, 0x9, 0x5, 0x5, 0x7f, 0x3ff, 0x0, 0x2, 0x0, 0x3}, 0x0, 0x9, 0xffffffffffffffff, 0x8) 12:34:18 executing program 1: perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x12) r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cgroup.controllers\x00', 0x100002, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000140)='memory.low\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f0000000200), 0x12) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000000080)=0x3) syz_clone(0x74809480, 0x0, 0x4100, &(0x7f0000000000), 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000400000000000000000000850000006d000000850000000f00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000080)='sys_exit\x00', r2}, 0x10) close(r2) 12:34:18 executing program 0: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x8000000000000001, 0x9, 0x5, 0x5, 0x7f, 0x3ff, 0x0, 0x2, 0x0, 0x3}, 0x0, 0x9, 0xffffffffffffffff, 0x8) 12:34:18 executing program 2: syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 12:34:18 executing program 5: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) syz_clone(0x74809480, 0x0, 0x4100, &(0x7f0000000000), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000400000000000000000000850000006d000000850000000f00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 12:34:18 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'\x00', 0x52d35ce30131f272}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/pid_for_children\x00') openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x212000, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0x6, &(0x7f00000000c0)=@raw=[@call={0x85, 0x0, 0x0, 0x9b}, @initr0={0x18, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x400}, @map_idx_val={0x18, 0x8, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe2}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffb}], &(0x7f0000000100)='GPL\x00', 0xfffff156, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0x1, 0x2}, 0x8, 0x10, &(0x7f0000000180)={0x1, 0xb, 0x8}, 0x10}, 0x80) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000400000000000000000000850000006d000000850000000f00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000080)='sys_exit\x00', r1}, 0x10) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000400000000000000000000850000006d000000850000000f00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f00000002c0)='\x00') bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000080)='sys_exit\x00', r3}, 0x10) socketpair(0x11, 0x4, 0x7b37, &(0x7f0000000240)) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000400000000000000000000850000006d000000850000000f00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000080)='sys_exit\x00', r4}, 0x10) close(r4) openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'\x00', 0x52d35ce30131f272}) (async) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) (async) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/pid_for_children\x00') (async) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x212000, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0x6, &(0x7f00000000c0)=@raw=[@call={0x85, 0x0, 0x0, 0x9b}, @initr0={0x18, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x400}, @map_idx_val={0x18, 0x8, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe2}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffb}], &(0x7f0000000100)='GPL\x00', 0xfffff156, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0x1, 0x2}, 0x8, 0x10, &(0x7f0000000180)={0x1, 0xb, 0x8}, 0x10}, 0x80) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000400000000000000000000850000006d000000850000000f00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000080)='sys_exit\x00', r1}, 0x10) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000400000000000000000000850000006d000000850000000f00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f00000002c0)='\x00') (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000080)='sys_exit\x00', r3}, 0x10) (async) socketpair(0x11, 0x4, 0x7b37, &(0x7f0000000240)) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000400000000000000000000850000006d000000850000000f00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000080)='sys_exit\x00', r4}, 0x10) (async) close(r4) (async) 12:34:18 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'\x00', 0x52d35ce30131f272}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/pid_for_children\x00') openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x212000, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0x6, &(0x7f00000000c0)=@raw=[@call={0x85, 0x0, 0x0, 0x9b}, @initr0={0x18, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x400}, @map_idx_val={0x18, 0x8, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe2}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffb}], &(0x7f0000000100)='GPL\x00', 0xfffff156, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0x1, 0x2}, 0x8, 0x10, &(0x7f0000000180)={0x1, 0xb, 0x8}, 0x10}, 0x80) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000400000000000000000000850000006d000000850000000f00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000080)='sys_exit\x00', r1}, 0x10) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000400000000000000000000850000006d000000850000000f00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f00000002c0)='\x00') bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000080)='sys_exit\x00', r3}, 0x10) socketpair(0x11, 0x4, 0x7b37, &(0x7f0000000240)) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000400000000000000000000850000006d000000850000000f00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000080)='sys_exit\x00', r4}, 0x10) close(r4) 12:34:18 executing program 0: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x9, 0x5, 0x5, 0x7f, 0x3ff, 0x0, 0x2, 0x0, 0x3}, 0x0, 0x9, 0xffffffffffffffff, 0x8) 12:34:18 executing program 2: perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x12) r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cgroup.controllers\x00', 0x100002, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000140)='memory.low\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f0000000200), 0x12) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000000080)=0x3) syz_clone(0x74809480, 0x0, 0x4100, &(0x7f0000000000), 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000400000000000000000000850000006d000000850000000f00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000080)='sys_exit\x00', r2}, 0x10) 12:34:18 executing program 0: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x5, 0x5, 0x7f, 0x3ff, 0x0, 0x2, 0x0, 0x3}, 0x0, 0x9, 0xffffffffffffffff, 0x8) 12:34:18 executing program 0: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x5, 0x7f, 0x3ff, 0x0, 0x2, 0x0, 0x3}, 0x0, 0x9, 0xffffffffffffffff, 0x8) 12:34:18 executing program 0: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x3ff, 0x0, 0x2, 0x0, 0x3}, 0x0, 0x9, 0xffffffffffffffff, 0x8) 12:34:18 executing program 0: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x2, 0x0, 0x3}, 0x0, 0x9, 0xffffffffffffffff, 0x8) 12:34:18 executing program 1: perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x12) r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cgroup.controllers\x00', 0x100002, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000140)='memory.low\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f0000000200), 0x12) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000000080)=0x3) syz_clone(0x74809480, 0x0, 0x4100, &(0x7f0000000000), 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000400000000000000000000850000006d000000850000000f00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000080)='sys_exit\x00', r2}, 0x10) close(r2) 12:34:18 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x200000, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0) write$cgroup_type(r2, &(0x7f0000000080), 0x11ffffce1) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'pimreg\x00', 0x8000}) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x660c, 0x0) ioctl$TUNSETNOCSUM(r2, 0x400454c8, 0x1) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x9, [@func_proto={0x0, 0x2, 0x0, 0xd, 0x0, [{0x7}, {}]}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61]}}, &(0x7f00000001c0)=""/179, 0x3d, 0xb3, 0x1}, 0x20) ioctl$TUNSETNOCSUM(r1, 0x400454c8, 0x1) r3 = bpf$ITER_CREATE(0x21, &(0x7f00000000c0)={r2}, 0x8) openat$cgroup_ro(r3, &(0x7f0000000100)='memory.current\x00', 0x0, 0x0) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) close(r0) 12:34:18 executing program 0: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x3}, 0x0, 0x9, 0xffffffffffffffff, 0x8) 12:34:18 executing program 5: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) syz_clone(0x0, 0x0, 0x4100, &(0x7f0000000000), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000400000000000000000000850000006d000000850000000f00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 12:34:18 executing program 4: perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x12) r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cgroup.controllers\x00', 0x100002, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000140)='memory.low\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f0000000200), 0x12) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000000080)=0x3) syz_clone(0x74809480, 0x0, 0x4100, &(0x7f0000000000), 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000400000000000000000000850000006d000000850000000f00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000080)='sys_exit\x00', r2}, 0x10) close(r2) 12:34:18 executing program 2: perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x12) r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cgroup.controllers\x00', 0x100002, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000140)='memory.low\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f0000000200), 0x12) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000000080)=0x3) syz_clone(0x74809480, 0x0, 0x4100, &(0x7f0000000000), 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000400000000000000000000850000006d000000850000000f00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000080)='sys_exit\x00', r2}, 0x10) close(r2) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000000), 0xfd3678f9) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x11, 0xd, &(0x7f0000000540)=@framed={{0x18, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x9}, [@map_fd={0x18, 0x3}, @map_fd={0x18, 0xa, 0x1, 0x0, r1}, @map_val={0x18, 0x6, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x22}, @ldst={0x1, 0x0, 0x2, 0x2, 0x8, 0x2}, @generic={0x7, 0x2, 0x6, 0xfff, 0x2}, @call={0x85, 0x0, 0x0, 0x4b}, @jmp={0x5, 0x0, 0x2, 0x3, 0x6, 0xfffffffffffffffe, 0x1}]}, &(0x7f0000000340)='GPL\x00', 0x3, 0x8d, &(0x7f00000005c0)=""/141, 0x41100, 0xa, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000680)={0x6, 0x1}, 0x8, 0x10, &(0x7f00000006c0)={0x1, 0xe, 0x1, 0x1}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000300)=[r1]}, 0x80) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40086607, &(0x7f0000000040)) 12:34:18 executing program 0: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x9, 0xffffffffffffffff, 0x8) 12:34:19 executing program 5: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000400000000000000000000850000006d000000850000000f00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 12:34:19 executing program 0: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x9, 0xffffffffffffffff, 0x8) 12:34:19 executing program 5: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 12:34:19 executing program 0: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x8) 12:34:19 executing program 5: perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x12) r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cgroup.controllers\x00', 0x100002, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000140)='memory.low\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f0000000200), 0x12) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000000080)=0x3) syz_clone(0x74809480, 0x0, 0x4100, &(0x7f0000000000), 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000400000000000000000000850000006d000000850000000f00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000080)='sys_exit\x00', r2}, 0x10) close(r2) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000000), 0xfd3678f9) 12:34:19 executing program 1: perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x12) r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cgroup.controllers\x00', 0x100002, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000140)='memory.low\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f0000000200), 0x12) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000000080)=0x3) syz_clone(0x74809480, 0x0, 0x4100, &(0x7f0000000000), 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000400000000000000000000850000006d000000850000000f00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000080)='sys_exit\x00', r2}, 0x10) 12:34:19 executing program 0: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 12:34:19 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x200000, 0x0) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0) write$cgroup_type(r2, &(0x7f0000000080), 0x11ffffce1) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'pimreg\x00', 0x8000}) (async, rerun: 32) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x660c, 0x0) (async, rerun: 32) ioctl$TUNSETNOCSUM(r2, 0x400454c8, 0x1) (async, rerun: 32) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x9, [@func_proto={0x0, 0x2, 0x0, 0xd, 0x0, [{0x7}, {}]}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61]}}, &(0x7f00000001c0)=""/179, 0x3d, 0xb3, 0x1}, 0x20) (async, rerun: 32) ioctl$TUNSETNOCSUM(r1, 0x400454c8, 0x1) (async) r3 = bpf$ITER_CREATE(0x21, &(0x7f00000000c0)={r2}, 0x8) openat$cgroup_ro(r3, &(0x7f0000000100)='memory.current\x00', 0x0, 0x0) (async, rerun: 32) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) (async, rerun: 32) close(r0) 12:34:19 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000d00)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400050000000404000001007d60b7030000000000006a0a00fe00010000850000000d000000b7000000000000009500000000000000496cf2827fb43a431ca711fcc9cdfa146ec56175037958e271f60d25b7937f02c8695e5a1b2cdf41dc10d1e8bf076d83923dd29c034055b67dafe6c8dc3d5d78c07fa1f7e4d5b318e2ec0e0700897a74a0091ff110026e6d2ef831ab7ea0c34f17e3ad6ef3bb622003b538dfd8e012e79578e51bc53099e90fbdb2ca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e060e3670ef0e789f93781965f1328d6704902cbe7bc0476619f28d99cd0aa7b73340cc2160a1fe3c184b751c51160fbce841f8a97be6148ba532e6fdd8c346dfebd31a08b32808b80200000000009dd27080e71113610e10d858e8327ef01fb6c86adac12233f9a1fb9c2aec61ce63a3462fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2ed8576a3f7f3deadd7130856f756436303767d2e24f29e5dad9796edb697a6ea0180aabc18cae2ed4b4390af9a9ceafd07ed0030000002cab154ad029a119ca3c972780870014605c83d7d11c3c975d5aec84222fff0d7216fdb0d3a0ec4be3e563112f4b39501aafe234870072858dc06e7c337642d3e5a815212f5e16c1b30c3a2a71bc85018e5ff2c910496f18afc9ffc2cc788bee1b47683db01a46939868d75211bbae0e7313bff5d4c391ddece00fc772dd6b4d4d0a917b239fe12280fc92c88c5b8dcdcc22ee1747794419cae0b4183fb01c73f99857399537f5dc2acb72c7eae993fc9eb22d130665b6341da114f08cd0509d380578673fffffff7f23877a6b24db0e067345560942fa629fbef2461c96a08707671315c302fae29187d4f5c06a960fd37c10223fdae7ed04935c3c90d3add8eebc8619d73415e6adcda2130f5011e48455b588b90dfae158b92e50adab9819cbe12baf5cc9398c88607a08009c2977aab37d9a44cfc1c7b4000000000000fa47742f6c5b9c4b11e7d7262a1457c39495c826b956ba859ac8e3c177b91bd7d5ca1664fe2f3ced8468911806e8916dc15e21644db60c2499d5d16d7d915836ab26c169482008ef069dc42749289f854797f2f900c2a12d8c38a967c1bbe09315c29877a331bcc87dc3addb08141bdee5d278cb51a38a4ebf222d74b2f663ddeef0005b3d96c7aae73835d5a3cda9e90d76c1993e0799d4894ee7f8249dc1e3428d2129369ee1b85afa1a5be5f6eb2eea0d0df414b315f65112412392191fa83ee830548f11e1038debd64cbe359454a3f2239cfe35f81b7aded448859968ff0e90500d0b07c0dd00490f167e6d5c1109681739dc33f75b20428d6474a0a91ee90b8de802c6b538622e6bbcb80f87b415263c401e64ed69a2f75409000000000000001d695c4559b82cabac3cccadc1e14ee039a30266ef6a7158e96f6fe7a104c19af4e03020abf5ff0433d660f20898d2a045d009a0ffb20a77c9af2b80c05184a66d30bbea2ca45a4d6d6d1e6e79aef42355a500587b603306a5af8d867d80a07f10d82eafb03062e95196d5e3b854b1c8c768c0010be959096ea948cfa8e7194123e918914a71ad5a8521fb956dbc60f7d9719b55b3abb6bba3d113a680a8d46fe074c83fbe378a3889e8145b2eaceab05ef932c6e4f8ef0ed0d818a7b76d839cf3c63ebb4380b168c38fa31d6686e0742e49563cfee3a7f0fc18bfa32c418cef875fb49e2989177a1bcd1e30280bc586e79a5dd8076c248e7d6e97b3ce267dd4e27b6ef206660090bb2164474cef378f97ca33fccf363361dcdba10c1547053453d0c9aea76442f6083dc99cd61afaf6be45d7b00d3639f2f10ac2d5c759c3e5468f5874c24411d415b6b085fb73a2c7c3852e0e658ffeb4e863428a792bee94f6cd895424360e0464f9d707ad83532ff181c985f54b39370c06e63055b4d6a36fa98a44e379d28307c9912fb097601f3f88a2ca6fd1f9320cfe7fc8e9f7f15f02e177ce23f43a154b42e26f037e8a01377cbd3f509e6e540c9ba9c2a589ac5d8ad67a65e9a44c576dc24452eaa9d819e2b04bdd1c000000070000000000000000000000005333c6199c12dcd92689192727a7267c47cf897853d160100b39b613faefe16bed1fc105dddd77ab929b837d54aa17eb9fbdc2bdc0e98ae2c3f23a6131e2879f04ff01000030b92dd493be66c2242f8184733b80ba28e824910844df31f3d4bb2f89049c5f6d63d56995747639964217aacfe548bc869098aa8e07e51dbc9e2d4db3c5f79fd355222ec2a00cf7f2ccd6dd6d2dc2a815d8314221a5472f1318a9dfbec5a7596b894367227a8d1d6475f5036f3a4505579caf3262129b14e99040b5d91398e17df85c25ccae973eecc7d187168d5c9cd85ed566cc17587641ed01889c927da38d83314480b15e23138c5b877a72bd4cf74a299df4fbfc8e6ea96939f15d254d9033c5a45706bda78ab60200000000000000000000000000000000000000706f78f0a2ea9667fb237db569da5b951808545a46830970c2dfae01adbda7d29bf1f7abdaf52e0de6f9d715a64b0fc36642e64ebf98762b34338b80e41b704c3eefaf0bb5f7d895de17a10b0a0ea15ccc0d7a830b6eb33b6b61675511d693ef5e3c44bbf71cabc5175d879e7499f8baae2a1a09cf38da73297764fbc0e723e1cc3abb12e3bddbe43b44f4462be3e6f37c47e983da4ca5c96187db5a2a2e1742bc93a65d71871261e97426b3a80f17dd2f7dbbe82d104ede9ba6925afc2ee6cb94f56f1363cad635abf8f983292c49c0ebf5005154c7b58a3a2a2e5a00d2f953a86d2fd92b8661264f781e3fb02d05a28f3f17b64d0258853d45cb5ebde10cd3d82eeed2f3ed925b7cf400304932c5ed0a362b235ce37e1f17700f7d1fecf8be8a2c5d25a9c60657560d05441387ff158a018d19a286c56d0886eb59d509ee89cc2df52881d0c2b2e5c27563ba54e4153c132d0366a966000000000000006bcc2c43087b00a602a2f58cfbfd623e13cb76687afb515ff823db7ab42242053408bbeeeed25d6afe78536243baef4630eb5ded6e7269349649121bdc77fac472935855b7a88fa3190e8209356bff2e38c59baaac6635992c39a1605eb5ebfae8d7df82b0062a8257f850085599106d921eae5857ce2d17a92679e8f401673cbe0f13d30c77728dc26c7620193c4fd7109d108dc5ae6488cf5a2df298eead3fb7c9a74e04e70cd2a22a797a089b726adce70fc0103aa749065ffed0ce25d43a9abbcf63e2bfbd7900387dc9241b0aa13c999596f84abc8278633c4b00"/2435], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x60000000}, 0x48) 12:34:20 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000d00)=ANY=[@ANYBLOB="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"/2435], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x60000000}, 0x48) 12:34:20 executing program 0: perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x12) r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cgroup.controllers\x00', 0x100002, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000140)='memory.low\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f0000000200), 0x12) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000000080)=0x3) syz_clone(0x74809480, 0x0, 0x4100, &(0x7f0000000000), 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000400000000000000000000850000006d000000850000000f00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000080)='sys_exit\x00', r2}, 0x10) close(r2) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000000), 0xfd3678f9) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x11, 0xd, &(0x7f0000000540)=@framed={{0x18, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x9}, [@map_fd={0x18, 0x3}, @map_fd={0x18, 0xa, 0x1, 0x0, r1}, @map_val={0x18, 0x6, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x22}, @ldst={0x1, 0x0, 0x2, 0x2, 0x8, 0x2}, @generic={0x7, 0x2, 0x6, 0xfff, 0x2}, @call={0x85, 0x0, 0x0, 0x4b}, @jmp={0x5, 0x0, 0x2, 0x3, 0x6, 0xfffffffffffffffe, 0x1}]}, &(0x7f0000000340)='GPL\x00', 0x3, 0x8d, &(0x7f00000005c0)=""/141, 0x41100, 0xa, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000680)={0x6, 0x1}, 0x8, 0x10, &(0x7f00000006c0)={0x1, 0xe, 0x1, 0x1}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000300)=[r1]}, 0x80) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40086607, &(0x7f0000000040)) 12:34:20 executing program 5: perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x12) r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cgroup.controllers\x00', 0x100002, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000140)='memory.low\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f0000000200), 0x12) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000000080)=0x3) syz_clone(0x74809480, 0x0, 0x4100, &(0x7f0000000000), 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000400000000000000000000850000006d000000850000000f00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000080)='sys_exit\x00', r2}, 0x10) close(r2) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000000), 0xfd3678f9) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x11, 0xd, &(0x7f0000000540)=@framed={{0x18, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x9}, [@map_fd={0x18, 0x3}, @map_fd={0x18, 0xa, 0x1, 0x0, r1}, @map_val={0x18, 0x6, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x22}, @ldst={0x1, 0x0, 0x2, 0x2, 0x8, 0x2}, @generic={0x7, 0x2, 0x6, 0xfff, 0x2}, @call={0x85, 0x0, 0x0, 0x4b}, @jmp={0x5, 0x0, 0x2, 0x3, 0x6, 0xfffffffffffffffe, 0x1}]}, &(0x7f0000000340)='GPL\x00', 0x3, 0x8d, &(0x7f00000005c0)=""/141, 0x41100, 0xa, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000680)={0x6, 0x1}, 0x8, 0x10, &(0x7f00000006c0)={0x1, 0xe, 0x1, 0x1}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000300)=[r1]}, 0x80) 12:34:20 executing program 4: perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x12) r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cgroup.controllers\x00', 0x100002, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000140)='memory.low\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f0000000200), 0x12) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000000080)=0x3) syz_clone(0x74809480, 0x0, 0x4100, &(0x7f0000000000), 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000400000000000000000000850000006d000000850000000f00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000080)='sys_exit\x00', r2}, 0x10) 12:34:20 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x200000, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0) write$cgroup_type(r2, &(0x7f0000000080), 0x11ffffce1) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'pimreg\x00', 0x8000}) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x660c, 0x0) (async) ioctl$TUNSETNOCSUM(r2, 0x400454c8, 0x1) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x9, [@func_proto={0x0, 0x2, 0x0, 0xd, 0x0, [{0x7}, {}]}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61]}}, &(0x7f00000001c0)=""/179, 0x3d, 0xb3, 0x1}, 0x20) (async) ioctl$TUNSETNOCSUM(r1, 0x400454c8, 0x1) (async) r3 = bpf$ITER_CREATE(0x21, &(0x7f00000000c0)={r2}, 0x8) openat$cgroup_ro(r3, &(0x7f0000000100)='memory.current\x00', 0x0, 0x0) (async) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) (async) close(r0) 12:34:20 executing program 1: perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x12) r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cgroup.controllers\x00', 0x100002, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000140)='memory.low\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f0000000200), 0x12) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000000080)=0x3) syz_clone(0x74809480, 0x0, 0x4100, &(0x7f0000000000), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000400000000000000000000850000006d000000850000000f00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 12:34:20 executing program 2: perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x12) r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cgroup.controllers\x00', 0x100002, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000140)='memory.low\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f0000000200), 0x12) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000000080)=0x3) syz_clone(0x74809480, 0x0, 0x4100, &(0x7f0000000000), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000400000000000000000000850000006d000000850000000f00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) perf_event_open(&(0x7f0000000280)={0x5, 0x80, 0x0, 0x0, 0x7, 0x7, 0x0, 0xfffffffffffffff8, 0xc0100, 0x7, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_bp={&(0x7f0000000240), 0x5}, 0x800, 0x8000000000000001, 0x9, 0x5, 0x5, 0x7f, 0x3ff, 0x0, 0x2, 0x0, 0x3}, 0x0, 0x9, 0xffffffffffffffff, 0x8) 12:34:21 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000005c0)={r1, 0xe0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0xa, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f00000003c0)=[{}, {}], 0x10, 0x10, &(0x7f0000000400), &(0x7f0000000440), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000480)}}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0x6, &(0x7f0000000100)=ANY=[@ANYBLOB="1800001b0000000000000000d509000015998000f0ffffff850000003200000067305000f0ffffff9500000000000000"], &(0x7f0000000140)='GPL\x00', 0x7, 0xe0, &(0x7f00000002c0)=""/224, 0x41100, 0x0, '\x00', r2, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000600)={0x1, 0x4}, 0x8, 0x10, &(0x7f0000000640)={0x2, 0x8, 0x80000001, 0x6}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000680)=[r1]}, 0x80) write$cgroup_type(r1, &(0x7f0000000080), 0x11ffffce1) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x660c, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'\x00', 0x1000}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0) ioctl$TUNSETCARRIER(r3, 0x400454e2, &(0x7f0000000080)=0x1) openat$cgroup_ro(r3, &(0x7f0000000000)='io.stat\x00', 0x0, 0x0) close(r0) 12:34:21 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000005c0)={r1, 0xe0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0xa, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f00000003c0)=[{}, {}], 0x10, 0x10, &(0x7f0000000400), &(0x7f0000000440), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000480)}}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0x6, &(0x7f0000000100)=ANY=[@ANYBLOB="1800001b0000000000000000d509000015998000f0ffffff850000003200000067305000f0ffffff9500000000000000"], &(0x7f0000000140)='GPL\x00', 0x7, 0xe0, &(0x7f00000002c0)=""/224, 0x41100, 0x0, '\x00', r2, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000600)={0x1, 0x4}, 0x8, 0x10, &(0x7f0000000640)={0x2, 0x8, 0x80000001, 0x6}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000680)=[r1]}, 0x80) (async) write$cgroup_type(r1, &(0x7f0000000080), 0x11ffffce1) (async) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x660c, 0x0) (async) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'\x00', 0x1000}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) (async) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0) ioctl$TUNSETCARRIER(r3, 0x400454e2, &(0x7f0000000080)=0x1) openat$cgroup_ro(r3, &(0x7f0000000000)='io.stat\x00', 0x0, 0x0) (async) close(r0) 12:34:21 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000005c0)={r1, 0xe0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0xa, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f00000003c0)=[{}, {}], 0x10, 0x10, &(0x7f0000000400), &(0x7f0000000440), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000480)}}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0x6, &(0x7f0000000100)=ANY=[@ANYBLOB="1800001b0000000000000000d509000015998000f0ffffff850000003200000067305000f0ffffff9500000000000000"], &(0x7f0000000140)='GPL\x00', 0x7, 0xe0, &(0x7f00000002c0)=""/224, 0x41100, 0x0, '\x00', r2, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000600)={0x1, 0x4}, 0x8, 0x10, &(0x7f0000000640)={0x2, 0x8, 0x80000001, 0x6}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000680)=[r1]}, 0x80) (async) write$cgroup_type(r1, &(0x7f0000000080), 0x11ffffce1) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x660c, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'\x00', 0x1000}) (async) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0) ioctl$TUNSETCARRIER(r3, 0x400454e2, &(0x7f0000000080)=0x1) openat$cgroup_ro(r3, &(0x7f0000000000)='io.stat\x00', 0x0, 0x0) (async) close(r0) 12:34:21 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'\x00', 0x52d35ce30131f272}) close(r0) 12:34:21 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'\x00', 0x52d35ce30131f272}) close(r0) 12:34:21 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'\x00', 0x52d35ce30131f272}) close(r0) 12:34:21 executing program 0: perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x12) r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cgroup.controllers\x00', 0x100002, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000140)='memory.low\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f0000000200), 0x12) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000000080)=0x3) syz_clone(0x74809480, 0x0, 0x4100, &(0x7f0000000000), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000400000000000000000000850000006d000000850000000f00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 12:34:21 executing program 1: perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x12) r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cgroup.controllers\x00', 0x100002, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000140)='memory.low\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f0000000200), 0x12) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000000080)=0x3) syz_clone(0x74809480, 0x0, 0x4100, &(0x7f0000000000), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000400000000000000000000850000006d000000850000000f00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 12:34:21 executing program 4: perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x12) r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cgroup.controllers\x00', 0x100002, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000140)='memory.low\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f0000000200), 0x12) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000000080)=0x3) syz_clone(0x74809480, 0x0, 0x4100, &(0x7f0000000000), 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000400000000000000000000850000006d000000850000000f00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000080)='sys_exit\x00', r2}, 0x10) 12:34:21 executing program 5: perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x12) r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cgroup.controllers\x00', 0x100002, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000140)='memory.low\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f0000000200), 0x12) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000000080)=0x3) syz_clone(0x74809480, 0x0, 0x4100, &(0x7f0000000000), 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000400000000000000000000850000006d000000850000000f00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000080)='sys_exit\x00', r2}, 0x10) close(r2) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000000), 0xfd3678f9) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x11, 0xd, &(0x7f0000000540)=@framed={{0x18, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x9}, [@map_fd={0x18, 0x3}, @map_fd={0x18, 0xa, 0x1, 0x0, r1}, @map_val={0x18, 0x6, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x22}, @ldst={0x1, 0x0, 0x2, 0x2, 0x8, 0x2}, @generic={0x7, 0x2, 0x6, 0xfff, 0x2}, @call={0x85, 0x0, 0x0, 0x4b}, @jmp={0x5, 0x0, 0x2, 0x3, 0x6, 0xfffffffffffffffe, 0x1}]}, &(0x7f0000000340)='GPL\x00', 0x3, 0x8d, &(0x7f00000005c0)=""/141, 0x41100, 0xa, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000680)={0x6, 0x1}, 0x8, 0x10, &(0x7f00000006c0)={0x1, 0xe, 0x1, 0x1}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000300)=[r1]}, 0x80) 12:34:21 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0) write$cgroup_type(r1, &(0x7f0000000080), 0x11ffffce1) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x660c, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'bond_slave_1\x00', 0x800}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) close(r0) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x0) 12:34:22 executing program 2: perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x12) r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cgroup.controllers\x00', 0x100002, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000140)='memory.low\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f0000000200), 0x12) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000000080)=0x3) syz_clone(0x74809480, 0x0, 0x4100, &(0x7f0000000000), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000400000000000000000000850000006d000000850000000f00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) perf_event_open(&(0x7f0000000280)={0x5, 0x80, 0x0, 0x0, 0x7, 0x7, 0x0, 0xfffffffffffffff8, 0xc0100, 0x7, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_bp={&(0x7f0000000240), 0x5}, 0x800, 0x8000000000000001, 0x9, 0x5, 0x5, 0x7f, 0x3ff, 0x0, 0x2, 0x0, 0x3}, 0x0, 0x9, 0xffffffffffffffff, 0x8) 12:34:22 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0) write$cgroup_type(r1, &(0x7f0000000080), 0x11ffffce1) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x660c, 0x0) (async, rerun: 64) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'bond_slave_1\x00', 0x800}) (async, rerun: 64) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) close(r0) (async, rerun: 64) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x0) (rerun: 64) 12:34:22 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) (async, rerun: 32) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0) (rerun: 32) write$cgroup_type(r1, &(0x7f0000000080), 0x11ffffce1) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x660c, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'bond_slave_1\x00', 0x800}) (async) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) (async) close(r0) (async) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x0) 12:34:22 executing program 4: perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x12) r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cgroup.controllers\x00', 0x100002, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000140)='memory.low\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f0000000200), 0x12) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000000080)=0x3) syz_clone(0x74809480, 0x0, 0x4100, &(0x7f0000000000), 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000400000000000000000000850000006d000000850000000f00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000080)='sys_exit\x00', r2}, 0x10) 12:34:23 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'\x00', 0x52d35ce30131f272}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x201) close(r0) 12:34:23 executing program 4: perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x12) r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cgroup.controllers\x00', 0x100002, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000140)='memory.low\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f0000000200), 0x12) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000000080)=0x3) syz_clone(0x74809480, 0x0, 0x4100, &(0x7f0000000000), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000400000000000000000000850000006d000000850000000f00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 12:34:23 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'\x00', 0x52d35ce30131f272}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x201) close(r0) openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'\x00', 0x52d35ce30131f272}) (async) ioctl$TUNSETLINK(r0, 0x400454cd, 0x201) (async) close(r0) (async) 12:34:23 executing program 0: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (fail_nth: 1) [ 80.060060][ T3765] FAULT_INJECTION: forcing a failure. [ 80.060060][ T3765] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 80.080974][ T3765] CPU: 0 PID: 3765 Comm: syz-executor.0 Not tainted 5.15.74-syzkaller-04383-g7f2e600bf63a #0 [ 80.090965][ T3765] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/11/2022 [ 80.101117][ T3765] Call Trace: [ 80.104240][ T3765] [ 80.107020][ T3765] dump_stack_lvl+0x151/0x1b7 [ 80.111533][ T3765] ? bfq_pos_tree_add_move+0x43e/0x43e [ 80.116826][ T3765] ? avc_has_perm+0x16d/0x260 [ 80.121341][ T3765] ? __kasan_check_write+0x14/0x20 [ 80.126385][ T3765] dump_stack+0x15/0x17 [ 80.130367][ T3765] should_fail+0x3c0/0x510 [ 80.134620][ T3765] should_fail_usercopy+0x1a/0x20 [ 80.139480][ T3765] _copy_from_user+0x20/0xd0 [ 80.143907][ T3765] perf_copy_attr+0x16f/0x860 [ 80.148418][ T3765] __se_sys_perf_event_open+0x103/0x3cb0 [ 80.153887][ T3765] ? file_end_write+0x1b0/0x1b0 [ 80.158573][ T3765] ? __kasan_check_write+0x14/0x20 [ 80.163519][ T3765] ? mutex_lock+0xb6/0x130 [ 80.167773][ T3765] ? __kasan_check_write+0x14/0x20 [ 80.172719][ T3765] ? mutex_unlock+0xa2/0x110 [ 80.177150][ T3765] ? __mutex_lock_slowpath+0x10/0x10 [ 80.182267][ T3765] ? __x64_sys_perf_event_open+0xd0/0xd0 [ 80.187731][ T3765] ? __ia32_sys_read+0x90/0x90 [ 80.192334][ T3765] __x64_sys_perf_event_open+0xbf/0xd0 [ 80.197625][ T3765] do_syscall_64+0x44/0xd0 [ 80.201879][ T3765] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 80.207605][ T3765] RIP: 0033:0x7efd5d5fe5a9 [ 80.211860][ T3765] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 80.231486][ T3765] RSP: 002b:00007efd5c372168 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 80.239724][ T3765] RAX: ffffffffffffffda RBX: 00007efd5d71ef80 RCX: 00007efd5d5fe5a9 [ 80.247535][ T3765] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000280 12:34:23 executing program 1: perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x12) r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cgroup.controllers\x00', 0x100002, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000140)='memory.low\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f0000000200), 0x12) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000000080)=0x3) syz_clone(0x74809480, 0x0, 0x4100, &(0x7f0000000000), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000400000000000000000000850000006d000000850000000f00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 12:34:23 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'\x00', 0x52d35ce30131f272}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x201) close(r0) openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'\x00', 0x52d35ce30131f272}) (async) ioctl$TUNSETLINK(r0, 0x400454cd, 0x201) (async) close(r0) (async) 12:34:23 executing program 4: perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x12) r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cgroup.controllers\x00', 0x100002, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000140)='memory.low\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f0000000200), 0x12) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000000080)=0x3) syz_clone(0x74809480, 0x0, 0x4100, &(0x7f0000000000), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000400000000000000000000850000006d000000850000000f00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 12:34:23 executing program 0: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (fail_nth: 2) [ 80.255347][ T3765] RBP: 00007efd5c3721d0 R08: 0000000000000000 R09: 0000000000000000 [ 80.263158][ T3765] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000001 [ 80.270974][ T3765] R13: 00007ffceea8d27f R14: 00007efd5c372300 R15: 0000000000022000 [ 80.278783][ T3765] 12:34:23 executing program 2: perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x12) r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cgroup.controllers\x00', 0x100002, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000140)='memory.low\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f0000000200), 0x12) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000000080)=0x3) syz_clone(0x74809480, 0x0, 0x4100, &(0x7f0000000000), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000400000000000000000000850000006d000000850000000f00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) perf_event_open(&(0x7f0000000280)={0x5, 0x80, 0x0, 0x0, 0x7, 0x7, 0x0, 0xfffffffffffffff8, 0xc0100, 0x7, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_bp={&(0x7f0000000240), 0x5}, 0x800, 0x8000000000000001, 0x9, 0x5, 0x5, 0x7f, 0x3ff, 0x0, 0x2, 0x0, 0x3}, 0x0, 0x9, 0xffffffffffffffff, 0x8) 12:34:23 executing program 5: perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x12) r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cgroup.controllers\x00', 0x100002, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000140)='memory.low\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f0000000200), 0x12) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000000080)=0x3) syz_clone(0x74809480, 0x0, 0x4100, &(0x7f0000000000), 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000400000000000000000000850000006d000000850000000f00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000080)='sys_exit\x00', r2}, 0x10) close(r2) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000000), 0xfd3678f9) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x11, 0xd, &(0x7f0000000540)=@framed={{0x18, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x9}, [@map_fd={0x18, 0x3}, @map_fd={0x18, 0xa, 0x1, 0x0, r1}, @map_val={0x18, 0x6, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x22}, @ldst={0x1, 0x0, 0x2, 0x2, 0x8, 0x2}, @generic={0x7, 0x2, 0x6, 0xfff, 0x2}, @call={0x85, 0x0, 0x0, 0x4b}, @jmp={0x5, 0x0, 0x2, 0x3, 0x6, 0xfffffffffffffffe, 0x1}]}, &(0x7f0000000340)='GPL\x00', 0x3, 0x8d, &(0x7f00000005c0)=""/141, 0x41100, 0xa, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000680)={0x6, 0x1}, 0x8, 0x10, &(0x7f00000006c0)={0x1, 0xe, 0x1, 0x1}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000300)=[r1]}, 0x80) [ 80.340643][ T3773] FAULT_INJECTION: forcing a failure. [ 80.340643][ T3773] name fail_usercopy, interval 1, probability 0, space 0, times 0 12:34:23 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'\x00', 0x52d35ce30131f272}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) close(r0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'geneve0\x00', 0x2}) [ 80.562290][ T3773] CPU: 0 PID: 3773 Comm: syz-executor.0 Not tainted 5.15.74-syzkaller-04383-g7f2e600bf63a #0 [ 80.572286][ T3773] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/11/2022 [ 80.582187][ T3773] Call Trace: [ 80.585303][ T3773] [ 80.588081][ T3773] dump_stack_lvl+0x151/0x1b7 [ 80.592594][ T3773] ? bfq_pos_tree_add_move+0x43e/0x43e [ 80.597889][ T3773] ? avc_has_perm_noaudit+0x2ec/0x450 [ 80.603099][ T3773] dump_stack+0x15/0x17 [ 80.607089][ T3773] should_fail+0x3c0/0x510 [ 80.611342][ T3773] should_fail_usercopy+0x1a/0x20 [ 80.616201][ T3773] _copy_to_user+0x20/0x90 [ 80.620455][ T3773] simple_read_from_buffer+0xdd/0x160 [ 80.625664][ T3773] proc_fail_nth_read+0x1af/0x220 [ 80.630523][ T3773] ? proc_fault_inject_write+0x3a0/0x3a0 [ 80.635989][ T3773] ? security_file_permission+0x497/0x5f0 [ 80.641544][ T3773] ? proc_fault_inject_write+0x3a0/0x3a0 [ 80.647013][ T3773] vfs_read+0x299/0xd80 [ 80.651006][ T3773] ? kernel_read+0x1f0/0x1f0 [ 80.655519][ T3773] ? __kasan_check_write+0x14/0x20 [ 80.660464][ T3773] ? mutex_lock+0xb6/0x130 [ 80.664719][ T3773] ? wait_for_completion_killable_timeout+0x10/0x10 [ 80.671142][ T3773] ? __fdget_pos+0x26d/0x310 [ 80.675564][ T3773] ? ksys_read+0x77/0x2c0 [ 80.679735][ T3773] ksys_read+0x198/0x2c0 [ 80.683814][ T3773] ? vfs_write+0x1050/0x1050 [ 80.688245][ T3773] ? debug_smp_processor_id+0x17/0x20 [ 80.693444][ T3773] __x64_sys_read+0x7b/0x90 [ 80.698132][ T3773] do_syscall_64+0x44/0xd0 [ 80.702392][ T3773] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 80.708118][ T3773] RIP: 0033:0x7efd5d5b02ec 12:34:24 executing program 4: perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x12) r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cgroup.controllers\x00', 0x100002, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000140)='memory.low\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f0000000200), 0x12) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000000080)=0x3) syz_clone(0x74809480, 0x0, 0x4100, &(0x7f0000000000), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000400000000000000000000850000006d000000850000000f00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) [ 80.712372][ T3773] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 80.731810][ T3773] RSP: 002b:00007efd5c372160 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 80.740053][ T3773] RAX: ffffffffffffffda RBX: 00007efd5d71ef80 RCX: 00007efd5d5b02ec [ 80.747870][ T3773] RDX: 000000000000000f RSI: 00007efd5c3721e0 RDI: 0000000000000003 [ 80.755676][ T3773] RBP: 00007efd5c3721d0 R08: 0000000000000000 R09: 0000000000000000 [ 80.763483][ T3773] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000001 [ 80.771298][ T3773] R13: 00007ffceea8d27f R14: 00007efd5c372300 R15: 0000000000022000 [ 80.779115][ T3773] 12:34:24 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'\x00', 0x52d35ce30131f272}) (async) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) close(r0) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'geneve0\x00', 0x2}) 12:34:24 executing program 0: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 12:34:24 executing program 0: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 12:34:24 executing program 0: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 12:34:24 executing program 1: perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x12) r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cgroup.controllers\x00', 0x100002, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000140)='memory.low\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f0000000200), 0x12) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000000080)=0x3) syz_clone(0x74809480, 0x0, 0x4100, &(0x7f0000000000), 0x0, 0x0) 12:34:24 executing program 0: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x4, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 12:34:24 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'\x00', 0x52d35ce30131f272}) (async) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) close(r0) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'geneve0\x00', 0x2}) 12:34:24 executing program 0: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x10, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 12:34:25 executing program 2: perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x12) r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cgroup.controllers\x00', 0x100002, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000140)='memory.low\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f0000000200), 0x12) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000000080)=0x3) syz_clone(0x74809480, 0x0, 0x4100, &(0x7f0000000000), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000400000000000000000000850000006d000000850000000f00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 12:34:25 executing program 5: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 12:34:25 executing program 0: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x400001, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 12:34:25 executing program 3: ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000040)) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'\x00', 0x52d35ce30131f272}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) close(r0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f0000000080)=0x7fffffff) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0) write$cgroup_type(r1, &(0x7f0000000080), 0x11ffffce1) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x660c, 0x0) openat$cgroup_ro(r1, &(0x7f00000000c0)='net_prio.prioidx\x00', 0x0, 0x0) 12:34:25 executing program 4: perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x12) r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cgroup.controllers\x00', 0x100002, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000140)='memory.low\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f0000000200), 0x12) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000000080)=0x3) syz_clone(0x74809480, 0x0, 0x4100, &(0x7f0000000000), 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000080)='sys_exit\x00'}, 0x10) 12:34:25 executing program 1: perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x12) r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cgroup.controllers\x00', 0x100002, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000140)='memory.low\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f0000000200), 0x12) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000000080)=0x3) syz_clone(0x74809480, 0x0, 0x4100, &(0x7f0000000000), 0x0, 0x0) 12:34:25 executing program 0: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1004000, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 81.933580][ T3828] FAULT_INJECTION: forcing a failure. [ 81.933580][ T3828] name failslab, interval 1, probability 0, space 0, times 0 12:34:25 executing program 0: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x2000000, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 12:34:25 executing program 0: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x4000000, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 12:34:25 executing program 0: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x10000000, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 82.101096][ T3828] CPU: 1 PID: 3828 Comm: syz-executor.5 Not tainted 5.15.74-syzkaller-04383-g7f2e600bf63a #0 [ 82.111095][ T3828] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/11/2022 [ 82.120988][ T3828] Call Trace: [ 82.124105][ T3828] [ 82.126888][ T3828] dump_stack_lvl+0x151/0x1b7 [ 82.131497][ T3828] ? bfq_pos_tree_add_move+0x43e/0x43e [ 82.136878][ T3828] ? do_handle_mm_fault+0x142f/0x2370 [ 82.142083][ T3828] dump_stack+0x15/0x17 [ 82.146081][ T3828] should_fail+0x3c0/0x510 [ 82.150329][ T3828] __should_failslab+0x9f/0xe0 [ 82.154945][ T3828] should_failslab+0x9/0x20 [ 82.159271][ T3828] kmem_cache_alloc+0x4f/0x2f0 [ 82.163874][ T3828] ? dup_task_struct+0x53/0xa60 [ 82.168553][ T3828] ? __kasan_check_write+0x14/0x20 [ 82.173500][ T3828] dup_task_struct+0x53/0xa60 [ 82.178018][ T3828] ? __kasan_check_write+0x14/0x20 [ 82.182965][ T3828] copy_process+0x579/0x3250 [ 82.187390][ T3828] ? __kasan_check_write+0x14/0x20 [ 82.192333][ T3828] ? proc_fail_nth_write+0x213/0x290 [ 82.197457][ T3828] ? proc_fail_nth_read+0x220/0x220 [ 82.202491][ T3828] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 82.207701][ T3828] ? vfs_write+0x9af/0x1050 [ 82.212050][ T3828] ? __this_cpu_preempt_check+0x13/0x20 [ 82.217427][ T3828] kernel_clone+0x22d/0x990 [ 82.221757][ T3828] ? file_end_write+0x1b0/0x1b0 [ 82.226445][ T3828] ? __kasan_check_write+0x14/0x20 [ 82.231393][ T3828] ? create_io_thread+0x1e0/0x1e0 [ 82.236261][ T3828] ? __mutex_lock_slowpath+0x10/0x10 [ 82.241381][ T3828] __x64_sys_clone+0x289/0x310 [ 82.245973][ T3828] ? __do_sys_vfork+0x130/0x130 [ 82.250660][ T3828] ? debug_smp_processor_id+0x17/0x20 [ 82.255870][ T3828] do_syscall_64+0x44/0xd0 [ 82.260122][ T3828] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 82.265851][ T3828] RIP: 0033:0x7f8e4a2ed5a9 [ 82.270101][ T3828] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 82.289539][ T3828] RSP: 002b:00007f8e49061118 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 12:34:25 executing program 2: syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) [ 82.297787][ T3828] RAX: ffffffffffffffda RBX: 00007f8e4a40df80 RCX: 00007f8e4a2ed5a9 [ 82.305598][ T3828] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 82.313417][ T3828] RBP: 00007f8e490611d0 R08: 0000000000000000 R09: 0000000000000000 [ 82.321216][ T3828] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 82.329035][ T3828] R13: 00007ffc8f79699f R14: 00007f8e49061300 R15: 0000000000022000 [ 82.336845][ T3828] 12:34:25 executing program 0: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0xfeffffff, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 12:34:25 executing program 0: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0xfffffffe, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 82.380581][ T3845] FAULT_INJECTION: forcing a failure. [ 82.380581][ T3845] name failslab, interval 1, probability 0, space 0, times 0 [ 82.434913][ T3845] CPU: 0 PID: 3845 Comm: syz-executor.2 Not tainted 5.15.74-syzkaller-04383-g7f2e600bf63a #0 [ 82.444915][ T3845] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/11/2022 [ 82.454809][ T3845] Call Trace: [ 82.457954][ T3845] [ 82.460793][ T3845] dump_stack_lvl+0x151/0x1b7 [ 82.465301][ T3845] ? bfq_pos_tree_add_move+0x43e/0x43e [ 82.470594][ T3845] ? do_handle_mm_fault+0x142f/0x2370 [ 82.477370][ T3845] dump_stack+0x15/0x17 [ 82.481357][ T3845] should_fail+0x3c0/0x510 [ 82.485623][ T3845] __should_failslab+0x9f/0xe0 [ 82.490229][ T3845] should_failslab+0x9/0x20 [ 82.494548][ T3845] kmem_cache_alloc+0x4f/0x2f0 [ 82.499324][ T3845] ? dup_task_struct+0x53/0xa60 [ 82.504009][ T3845] ? __kasan_check_write+0x14/0x20 [ 82.508958][ T3845] dup_task_struct+0x53/0xa60 [ 82.513469][ T3845] ? __kasan_check_write+0x14/0x20 [ 82.518419][ T3845] copy_process+0x579/0x3250 [ 82.522845][ T3845] ? __kasan_check_write+0x14/0x20 [ 82.527790][ T3845] ? proc_fail_nth_write+0x213/0x290 [ 82.532912][ T3845] ? proc_fail_nth_read+0x220/0x220 [ 82.537944][ T3845] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 82.542898][ T3845] ? vfs_write+0x9af/0x1050 [ 82.547242][ T3845] ? vmacache_update+0xb7/0x120 [ 82.551954][ T3845] kernel_clone+0x22d/0x990 [ 82.556257][ T3845] ? file_end_write+0x1b0/0x1b0 [ 82.561032][ T3845] ? __kasan_check_write+0x14/0x20 [ 82.565977][ T3845] ? create_io_thread+0x1e0/0x1e0 [ 82.570838][ T3845] ? __mutex_lock_slowpath+0x10/0x10 [ 82.575959][ T3845] __x64_sys_clone+0x289/0x310 [ 82.580562][ T3845] ? __do_sys_vfork+0x130/0x130 [ 82.585247][ T3845] ? debug_smp_processor_id+0x17/0x20 [ 82.590610][ T3845] do_syscall_64+0x44/0xd0 [ 82.594858][ T3845] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 82.600588][ T3845] RIP: 0033:0x7f931dc135a9 [ 82.604841][ T3845] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 82.624284][ T3845] RSP: 002b:00007f931c987118 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 12:34:26 executing program 5: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 12:34:26 executing program 0: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x20000300, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 82.632667][ T3845] RAX: ffffffffffffffda RBX: 00007f931dd33f80 RCX: 00007f931dc135a9 [ 82.642318][ T3845] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 82.650130][ T3845] RBP: 00007f931c9871d0 R08: 0000000000000000 R09: 0000000000000000 [ 82.657942][ T3845] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 82.665756][ T3845] R13: 00007fffd2d3bdcf R14: 00007f931c987300 R15: 0000000000022000 [ 82.673567][ T3845] [ 82.680762][ T30] audit: type=1400 audit(1667046866.000:117): avc: denied { remove_name } for pid=164 comm="syslogd" name="messages" dev="tmpfs" ino=2 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 82.716536][ T30] audit: type=1400 audit(1667046866.000:118): avc: denied { rename } for pid=164 comm="syslogd" name="messages" dev="tmpfs" ino=2 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 82.738461][ T3856] FAULT_INJECTION: forcing a failure. [ 82.738461][ T3856] name failslab, interval 1, probability 0, space 0, times 0 [ 82.738483][ T3856] CPU: 0 PID: 3856 Comm: syz-executor.5 Not tainted 5.15.74-syzkaller-04383-g7f2e600bf63a #0 [ 82.738500][ T3856] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/11/2022 [ 82.738508][ T3856] Call Trace: [ 82.738512][ T3856] [ 82.738518][ T3856] dump_stack_lvl+0x151/0x1b7 [ 82.738541][ T3856] ? bfq_pos_tree_add_move+0x43e/0x43e [ 82.738560][ T3856] ? __this_cpu_preempt_check+0x13/0x20 [ 82.738575][ T3856] dump_stack+0x15/0x17 [ 82.795992][ T3856] should_fail+0x3c0/0x510 [ 82.800415][ T3856] __should_failslab+0x9f/0xe0 [ 82.805011][ T3856] should_failslab+0x9/0x20 [ 82.809353][ T3856] kmem_cache_alloc+0x4f/0x2f0 [ 82.813959][ T3856] ? __kasan_check_write+0x14/0x20 [ 82.818908][ T3856] ? prepare_creds+0x30/0x690 [ 82.823415][ T3856] ? _raw_spin_lock_irqsave+0xf8/0x210 [ 82.828708][ T3856] prepare_creds+0x30/0x690 [ 82.833051][ T3856] copy_creds+0xde/0x640 [ 82.837126][ T3856] copy_process+0x775/0x3250 [ 82.841554][ T3856] ? __kasan_check_write+0x14/0x20 [ 82.846594][ T3856] ? proc_fail_nth_write+0x213/0x290 [ 82.851880][ T3856] ? proc_fail_nth_read+0x220/0x220 [ 82.856915][ T3856] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 82.861866][ T3856] ? vfs_write+0x9af/0x1050 [ 82.866199][ T3856] ? vmacache_update+0xb7/0x120 [ 82.870886][ T3856] kernel_clone+0x22d/0x990 [ 82.875234][ T3856] ? file_end_write+0x1b0/0x1b0 [ 82.879921][ T3856] ? __kasan_check_write+0x14/0x20 [ 82.884863][ T3856] ? create_io_thread+0x1e0/0x1e0 [ 82.889832][ T3856] ? __mutex_lock_slowpath+0x10/0x10 [ 82.894951][ T3856] __x64_sys_clone+0x289/0x310 [ 82.899553][ T3856] ? __do_sys_vfork+0x130/0x130 [ 82.904422][ T3856] ? debug_smp_processor_id+0x17/0x20 [ 82.909627][ T3856] do_syscall_64+0x44/0xd0 [ 82.913881][ T3856] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 82.919696][ T3856] RIP: 0033:0x7f8e4a2ed5a9 [ 82.923955][ T3856] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 82.943496][ T3856] RSP: 002b:00007f8e49061118 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 82.951750][ T3856] RAX: ffffffffffffffda RBX: 00007f8e4a40df80 RCX: 00007f8e4a2ed5a9 [ 82.959556][ T3856] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 82.967363][ T3856] RBP: 00007f8e490611d0 R08: 0000000000000000 R09: 0000000000000000 [ 82.975185][ T3856] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 12:34:26 executing program 3: ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000040)) (async) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'\x00', 0x52d35ce30131f272}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) (async) close(r0) (async) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f0000000080)=0x7fffffff) (async, rerun: 64) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0) (rerun: 64) write$cgroup_type(r1, &(0x7f0000000080), 0x11ffffce1) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x660c, 0x0) (async) openat$cgroup_ro(r1, &(0x7f00000000c0)='net_prio.prioidx\x00', 0x0, 0x0) [ 82.982988][ T3856] R13: 00007ffc8f79699f R14: 00007f8e49061300 R15: 0000000000022000 [ 82.990802][ T3856] 12:34:26 executing program 2: syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 12:34:26 executing program 4: perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x12) r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cgroup.controllers\x00', 0x100002, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000140)='memory.low\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f0000000200), 0x12) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000000080)=0x3) syz_clone(0x74809480, 0x0, 0x4100, &(0x7f0000000000), 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000080)='sys_exit\x00'}, 0x10) 12:34:26 executing program 0: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 12:34:26 executing program 5: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 12:34:26 executing program 1: perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x12) r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cgroup.controllers\x00', 0x100002, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000140)='memory.low\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f0000000200), 0x12) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000000080)=0x3) syz_clone(0x74809480, 0x0, 0x4100, &(0x7f0000000000), 0x0, 0x0) 12:34:26 executing program 0: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 83.059859][ T3866] FAULT_INJECTION: forcing a failure. [ 83.059859][ T3866] name failslab, interval 1, probability 0, space 0, times 0 12:34:26 executing program 0: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 12:34:26 executing program 0: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 83.113440][ T3872] FAULT_INJECTION: forcing a failure. [ 83.113440][ T3872] name failslab, interval 1, probability 0, space 0, times 0 [ 83.189627][ T3872] CPU: 1 PID: 3872 Comm: syz-executor.5 Not tainted 5.15.74-syzkaller-04383-g7f2e600bf63a #0 [ 83.199975][ T3872] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/11/2022 [ 83.209871][ T3872] Call Trace: [ 83.212984][ T3872] [ 83.215760][ T3872] dump_stack_lvl+0x151/0x1b7 [ 83.220301][ T3872] ? bfq_pos_tree_add_move+0x43e/0x43e [ 83.225597][ T3872] ? __get_vm_area_node+0x13a/0x380 [ 83.230603][ T3872] ? ____kasan_kmalloc+0xee/0x110 [ 83.235460][ T3872] ? ____kasan_kmalloc+0xdc/0x110 [ 83.240321][ T3872] dump_stack+0x15/0x17 [ 83.244313][ T3872] should_fail+0x3c0/0x510 [ 83.248566][ T3872] __should_failslab+0x9f/0xe0 [ 83.253254][ T3872] should_failslab+0x9/0x20 [ 83.257591][ T3872] kmem_cache_alloc+0x4f/0x2f0 [ 83.262193][ T3872] ? alloc_vmap_area+0x19a/0x1a90 [ 83.267055][ T3872] alloc_vmap_area+0x19a/0x1a90 [ 83.271740][ T3872] ? vm_map_ram+0xa80/0xa80 [ 83.276080][ T3872] ? __kasan_kmalloc+0x9/0x10 [ 83.280591][ T3872] ? __get_vm_area_node+0x13a/0x380 [ 83.285633][ T3872] __get_vm_area_node+0x17b/0x380 [ 83.290487][ T3872] __vmalloc_node_range+0xda/0x800 [ 83.295431][ T3872] ? copy_process+0x579/0x3250 [ 83.300033][ T3872] ? kmem_cache_alloc+0x1c1/0x2f0 [ 83.304893][ T3872] ? dup_task_struct+0x53/0xa60 [ 83.309580][ T3872] dup_task_struct+0x61f/0xa60 [ 83.314180][ T3872] ? copy_process+0x579/0x3250 [ 83.318779][ T3872] ? __kasan_check_write+0x14/0x20 [ 83.323817][ T3872] copy_process+0x579/0x3250 [ 83.328244][ T3872] ? __kasan_check_write+0x14/0x20 [ 83.333187][ T3872] ? proc_fail_nth_write+0x213/0x290 [ 83.338307][ T3872] ? proc_fail_nth_read+0x220/0x220 [ 83.343342][ T3872] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 83.349590][ T3872] ? vfs_write+0x9af/0x1050 [ 83.353929][ T3872] ? vmacache_update+0xb7/0x120 [ 83.358617][ T3872] kernel_clone+0x22d/0x990 [ 83.362957][ T3872] ? file_end_write+0x1b0/0x1b0 [ 83.367644][ T3872] ? __kasan_check_write+0x14/0x20 [ 83.372590][ T3872] ? create_io_thread+0x1e0/0x1e0 [ 83.377453][ T3872] ? __mutex_lock_slowpath+0x10/0x10 [ 83.382571][ T3872] __x64_sys_clone+0x289/0x310 [ 83.387176][ T3872] ? __do_sys_vfork+0x130/0x130 [ 83.391866][ T3872] ? debug_smp_processor_id+0x17/0x20 [ 83.397075][ T3872] do_syscall_64+0x44/0xd0 [ 83.401326][ T3872] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 83.407055][ T3872] RIP: 0033:0x7f8e4a2ed5a9 [ 83.411305][ T3872] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 83.430851][ T3872] RSP: 002b:00007f8e49040118 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 83.439094][ T3872] RAX: ffffffffffffffda RBX: 00007f8e4a40e050 RCX: 00007f8e4a2ed5a9 [ 83.446905][ T3872] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 83.454717][ T3872] RBP: 00007f8e490401d0 R08: 0000000000000000 R09: 0000000000000000 [ 83.462528][ T3872] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 83.470339][ T3872] R13: 00007ffc8f79699f R14: 00007f8e49040300 R15: 0000000000022000 [ 83.478157][ T3872] [ 83.481481][ T3866] CPU: 1 PID: 3866 Comm: syz-executor.2 Not tainted 5.15.74-syzkaller-04383-g7f2e600bf63a #0 [ 83.491457][ T3866] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/11/2022 [ 83.501610][ T3866] Call Trace: [ 83.504732][ T3866] [ 83.507508][ T3866] dump_stack_lvl+0x151/0x1b7 [ 83.509551][ T3872] syz-executor.5: vmalloc error: size 32768, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 83.512023][ T3866] ? bfq_pos_tree_add_move+0x43e/0x43e [ 83.512050][ T3866] ? __this_cpu_preempt_check+0x13/0x20 [ 83.524964][ T3872] ,cpuset= [ 83.530077][ T3866] dump_stack+0x15/0x17 [ 83.530105][ T3866] should_fail+0x3c0/0x510 [ 83.530120][ T3866] __should_failslab+0x9f/0xe0 [ 83.530137][ T3866] should_failslab+0x9/0x20 [ 83.535550][ T3872] syz5 [ 83.538315][ T3866] kmem_cache_alloc+0x4f/0x2f0 [ 83.562623][ T3866] ? __kasan_check_write+0x14/0x20 [ 83.567573][ T3866] ? prepare_creds+0x30/0x690 [ 83.572081][ T3866] ? _raw_spin_lock_irqsave+0xf8/0x210 [ 83.577382][ T3866] prepare_creds+0x30/0x690 [ 83.578229][ T3872] ,mems_allowed=0 [ 83.581740][ T3866] copy_creds+0xde/0x640 [ 83.581769][ T3866] copy_process+0x775/0x3250 [ 83.581786][ T3866] ? __kasan_check_write+0x14/0x20 [ 83.581803][ T3866] ? proc_fail_nth_write+0x213/0x290 [ 83.596577][ T3872] [ 83.598745][ T3866] ? proc_fail_nth_read+0x220/0x220 [ 83.598773][ T3866] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 83.598790][ T3866] ? vfs_write+0x9af/0x1050 [ 83.598809][ T3866] ? vmacache_update+0xb7/0x120 [ 83.625226][ T3866] kernel_clone+0x22d/0x990 [ 83.629558][ T3866] ? file_end_write+0x1b0/0x1b0 [ 83.634247][ T3866] ? __kasan_check_write+0x14/0x20 [ 83.639191][ T3866] ? create_io_thread+0x1e0/0x1e0 [ 83.644051][ T3866] ? __mutex_lock_slowpath+0x10/0x10 [ 83.649174][ T3866] __x64_sys_clone+0x289/0x310 [ 83.653773][ T3866] ? __do_sys_vfork+0x130/0x130 [ 83.658460][ T3866] ? debug_smp_processor_id+0x17/0x20 [ 83.663666][ T3866] do_syscall_64+0x44/0xd0 [ 83.667918][ T3866] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 83.673732][ T3866] RIP: 0033:0x7f931dc135a9 [ 83.677991][ T3866] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 83.697526][ T3866] RSP: 002b:00007f931c987118 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 83.705773][ T3866] RAX: ffffffffffffffda RBX: 00007f931dd33f80 RCX: 00007f931dc135a9 [ 83.713581][ T3866] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 83.721392][ T3866] RBP: 00007f931c9871d0 R08: 0000000000000000 R09: 0000000000000000 [ 83.729205][ T3866] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 12:34:27 executing program 0: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 83.737020][ T3866] R13: 00007fffd2d3bdcf R14: 00007f931c987300 R15: 0000000000022000 [ 83.744834][ T3866] [ 83.776941][ T3872] CPU: 0 PID: 3872 Comm: syz-executor.5 Not tainted 5.15.74-syzkaller-04383-g7f2e600bf63a #0 [ 83.786945][ T3872] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/11/2022 [ 83.796829][ T3872] Call Trace: [ 83.800129][ T3872] [ 83.802901][ T3872] dump_stack_lvl+0x151/0x1b7 [ 83.807412][ T3872] ? bfq_pos_tree_add_move+0x43e/0x43e [ 83.812706][ T3872] ? __rcu_read_unlock+0x7c/0xd0 [ 83.817481][ T3872] dump_stack+0x15/0x17 [ 83.821472][ T3872] warn_alloc+0x242/0x3d0 [ 83.825638][ T3872] ? zone_watermark_ok_safe+0x280/0x280 [ 83.831019][ T3872] ? __get_vm_area_node+0x190/0x380 [ 83.836146][ T3872] __vmalloc_node_range+0x2be/0x800 [ 83.841264][ T3872] ? dup_task_struct+0x53/0xa60 [ 83.845959][ T3872] dup_task_struct+0x61f/0xa60 [ 83.850547][ T3872] ? copy_process+0x579/0x3250 [ 83.855158][ T3872] ? __kasan_check_write+0x14/0x20 [ 83.860095][ T3872] copy_process+0x579/0x3250 [ 83.864521][ T3872] ? __kasan_check_write+0x14/0x20 [ 83.869467][ T3872] ? proc_fail_nth_write+0x213/0x290 [ 83.874587][ T3872] ? proc_fail_nth_read+0x220/0x220 [ 83.879629][ T3872] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 83.884568][ T3872] ? vfs_write+0x9af/0x1050 [ 83.888909][ T3872] ? vmacache_update+0xb7/0x120 [ 83.893605][ T3872] kernel_clone+0x22d/0x990 [ 83.898462][ T3872] ? file_end_write+0x1b0/0x1b0 [ 83.903147][ T3872] ? __kasan_check_write+0x14/0x20 [ 83.908093][ T3872] ? create_io_thread+0x1e0/0x1e0 [ 83.912957][ T3872] ? __mutex_lock_slowpath+0x10/0x10 [ 83.918133][ T3872] __x64_sys_clone+0x289/0x310 [ 83.922850][ T3872] ? __do_sys_vfork+0x130/0x130 [ 83.927539][ T3872] ? debug_smp_processor_id+0x17/0x20 [ 83.932745][ T3872] do_syscall_64+0x44/0xd0 [ 83.936996][ T3872] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 83.942726][ T3872] RIP: 0033:0x7f8e4a2ed5a9 [ 83.946978][ T3872] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 83.966524][ T3872] RSP: 002b:00007f8e49040118 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 83.974753][ T3872] RAX: ffffffffffffffda RBX: 00007f8e4a40e050 RCX: 00007f8e4a2ed5a9 [ 83.982652][ T3872] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 12:34:27 executing program 0: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x10, 0x0, 0x0, 0x0, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 12:34:27 executing program 4: perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x12) r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cgroup.controllers\x00', 0x100002, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000140)='memory.low\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f0000000200), 0x12) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000000080)=0x3) syz_clone(0x74809480, 0x0, 0x4100, &(0x7f0000000000), 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000080)='sys_exit\x00'}, 0x10) 12:34:27 executing program 3: ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000040)) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'\x00', 0x52d35ce30131f272}) (async) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) (async) close(r0) (async) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f0000000080)=0x7fffffff) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0) write$cgroup_type(r1, &(0x7f0000000080), 0x11ffffce1) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x660c, 0x0) (async) openat$cgroup_ro(r1, &(0x7f00000000c0)='net_prio.prioidx\x00', 0x0, 0x0) [ 83.990463][ T3872] RBP: 00007f8e490401d0 R08: 0000000000000000 R09: 0000000000000000 [ 83.998273][ T3872] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 84.006086][ T3872] R13: 00007ffc8f79699f R14: 00007f8e49040300 R15: 0000000000022000 [ 84.013906][ T3872] 12:34:27 executing program 0: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 12:34:27 executing program 2: syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 12:34:27 executing program 0: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x4, 0x0, 0x0, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 84.152704][ T3872] Mem-Info: [ 84.155946][ T3872] active_anon:7873 inactive_anon:31288 isolated_anon:0 [ 84.155946][ T3872] active_file:3282 inactive_file:9898 isolated_file:0 [ 84.155946][ T3872] unevictable:0 dirty:1066 writeback:0 [ 84.155946][ T3872] slab_reclaimable:13790 slab_unreclaimable:69754 [ 84.155946][ T3872] mapped:29462 shmem:8893 pagetables:719 bounce:0 [ 84.155946][ T3872] kernel_misc_reclaimable:0 [ 84.155946][ T3872] free:1530845 free_pcp:24768 free_cma:0 [ 84.187459][ T3895] FAULT_INJECTION: forcing a failure. [ 84.187459][ T3895] name failslab, interval 1, probability 0, space 0, times 0 [ 84.249592][ T3872] Node 0 active_anon:31492kB inactive_anon:125152kB active_file:13128kB inactive_file:40492kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:113848kB dirty:3864kB writeback:0kB shmem:35572kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:4868kB pagetables:2876kB all_unreclaimable? no [ 84.287556][ T3895] CPU: 1 PID: 3895 Comm: syz-executor.2 Not tainted 5.15.74-syzkaller-04383-g7f2e600bf63a #0 [ 84.298146][ T3895] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/11/2022 [ 84.308036][ T3895] Call Trace: [ 84.311163][ T3895] [ 84.313939][ T3895] dump_stack_lvl+0x151/0x1b7 [ 84.318459][ T3895] ? bfq_pos_tree_add_move+0x43e/0x43e [ 84.323857][ T3895] ? __get_vm_area_node+0x13a/0x380 [ 84.328864][ T3895] ? ____kasan_kmalloc+0xee/0x110 [ 84.333723][ T3895] ? ____kasan_kmalloc+0xdc/0x110 [ 84.338583][ T3895] dump_stack+0x15/0x17 [ 84.342579][ T3895] should_fail+0x3c0/0x510 [ 84.346830][ T3895] __should_failslab+0x9f/0xe0 [ 84.351428][ T3895] should_failslab+0x9/0x20 [ 84.355778][ T3895] kmem_cache_alloc+0x4f/0x2f0 [ 84.360365][ T3895] ? alloc_vmap_area+0x19a/0x1a90 [ 84.365226][ T3895] alloc_vmap_area+0x19a/0x1a90 [ 84.369917][ T3895] ? vm_map_ram+0xa80/0xa80 [ 84.374259][ T3895] ? __kasan_kmalloc+0x9/0x10 [ 84.378765][ T3895] ? __get_vm_area_node+0x13a/0x380 [ 84.383801][ T3895] __get_vm_area_node+0x17b/0x380 [ 84.388662][ T3895] __vmalloc_node_range+0xda/0x800 [ 84.393607][ T3895] ? copy_process+0x579/0x3250 [ 84.398209][ T3895] ? kmem_cache_alloc+0x1c1/0x2f0 [ 84.403065][ T3895] ? dup_task_struct+0x53/0xa60 [ 84.407756][ T3895] dup_task_struct+0x61f/0xa60 [ 84.412362][ T3895] ? copy_process+0x579/0x3250 [ 84.416958][ T3895] ? __kasan_check_write+0x14/0x20 [ 84.421904][ T3895] copy_process+0x579/0x3250 [ 84.426336][ T3895] ? __kasan_check_write+0x14/0x20 [ 84.431449][ T3895] ? proc_fail_nth_write+0x213/0x290 [ 84.436567][ T3895] ? proc_fail_nth_read+0x220/0x220 [ 84.441602][ T3895] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 84.446549][ T3895] ? vfs_write+0x9af/0x1050 [ 84.450893][ T3895] ? vmacache_update+0xb7/0x120 [ 84.455664][ T3895] kernel_clone+0x22d/0x990 [ 84.460002][ T3895] ? file_end_write+0x1b0/0x1b0 [ 84.464690][ T3895] ? __kasan_check_write+0x14/0x20 [ 84.469634][ T3895] ? create_io_thread+0x1e0/0x1e0 [ 84.474495][ T3895] ? __mutex_lock_slowpath+0x10/0x10 [ 84.479704][ T3895] __x64_sys_clone+0x289/0x310 [ 84.484313][ T3895] ? __do_sys_vfork+0x130/0x130 [ 84.489078][ T3895] ? debug_smp_processor_id+0x17/0x20 [ 84.494286][ T3895] do_syscall_64+0x44/0xd0 [ 84.498539][ T3895] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 84.504268][ T3895] RIP: 0033:0x7f931dc135a9 [ 84.508558][ T3895] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 84.527963][ T3895] RSP: 002b:00007f931c987118 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 84.536204][ T3895] RAX: ffffffffffffffda RBX: 00007f931dd33f80 RCX: 00007f931dc135a9 [ 84.544014][ T3895] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 84.551912][ T3895] RBP: 00007f931c9871d0 R08: 0000000000000000 R09: 0000000000000000 [ 84.559810][ T3895] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 84.567622][ T3895] R13: 00007fffd2d3bdcf R14: 00007f931c987300 R15: 0000000000022000 [ 84.575437][ T3895] [ 84.578906][ T3872] DMA32 free:2976724kB min:62592kB low:78240kB high:93888kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3145324kB managed:2982428kB mlocked:0kB bounce:0kB free_pcp:5704kB local_pcp:1828kB free_cma:0kB [ 84.607885][ T3872] lowmem_reserve[]: 0 3941 3941 [ 84.612775][ T3872] Normal free:3145912kB min:84860kB low:106072kB high:127284kB reserved_highatomic:0KB active_anon:31492kB inactive_anon:125152kB active_file:13128kB inactive_file:40792kB unevictable:0kB writepending:4656kB present:5242880kB managed:4035848kB mlocked:0kB bounce:0kB free_pcp:93304kB local_pcp:44848kB free_cma:0kB [ 84.645182][ T3872] lowmem_reserve[]: 0 0 0 [ 84.649766][ T3872] DMA32: 3*4kB (M) 1*8kB (M) 2*16kB (M) 3*32kB (M) 3*64kB (M) 3*128kB (M) 3*256kB (M) 3*512kB (M) 4*1024kB (UM) 4*2048kB (UM) 723*4096kB (M) = 2976724kB [ 84.666919][ T3872] Normal: 6175*4kB (UME) 2542*8kB (UME) 1262*16kB (UME) 1174*32kB (UME) 689*64kB (UME) 314*128kB (UME) 224*256kB (UME) 181*512kB (UME) 141*1024kB (UME) 69*2048kB (UM) 616*4096kB (UM) = 3145932kB [ 84.687875][ T3872] 23523 total pagecache pages [ 84.692482][ T3872] 0 pages in swap cache 12:34:28 executing program 5: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 12:34:28 executing program 1: perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x12) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cgroup.controllers\x00', 0x100002, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000140)='memory.low\x00', 0x2, 0x0) write$cgroup_int(r0, &(0x7f0000000200), 0x12) syz_clone(0x74809480, 0x0, 0x4100, &(0x7f0000000000), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000400000000000000000000850000006d000000850000000f00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 12:34:28 executing program 0: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x10, 0x0, 0x0, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 12:34:28 executing program 2: syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 12:34:28 executing program 0: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 84.697527][ T3872] Swap cache stats: add 0, delete 0, find 0/0 [ 84.703546][ T3872] Free swap = 0kB [ 84.707434][ T3872] Total swap = 0kB [ 84.711098][ T3872] 2097051 pages RAM [ 84.714840][ T3872] 0 pages HighMem/MovableOnly [ 84.719673][ T3872] 342482 pages reserved [ 84.723728][ T3872] 0 pages cma reserved [ 84.738236][ T3910] FAULT_INJECTION: forcing a failure. [ 84.738236][ T3910] name failslab, interval 1, probability 0, space 0, times 0 [ 84.803782][ T3910] CPU: 1 PID: 3910 Comm: syz-executor.2 Not tainted 5.15.74-syzkaller-04383-g7f2e600bf63a #0 [ 84.813781][ T3910] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/11/2022 [ 84.823673][ T3910] Call Trace: [ 84.826792][ T3910] [ 84.829571][ T3910] dump_stack_lvl+0x151/0x1b7 [ 84.834092][ T3910] ? bfq_pos_tree_add_move+0x43e/0x43e [ 84.839381][ T3910] dump_stack+0x15/0x17 [ 84.843493][ T3910] should_fail+0x3c0/0x510 [ 84.847745][ T3910] __should_failslab+0x9f/0xe0 12:34:28 executing program 0: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x4, 0x0, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 84.852344][ T3910] should_failslab+0x9/0x20 [ 84.856681][ T3910] kmem_cache_alloc+0x4f/0x2f0 [ 84.861296][ T3910] ? alloc_vmap_area+0x6c3/0x1a90 [ 84.866291][ T3910] alloc_vmap_area+0x6c3/0x1a90 [ 84.870980][ T3910] ? vm_map_ram+0xa80/0xa80 [ 84.875304][ T3910] ? __kasan_kmalloc+0x9/0x10 [ 84.879817][ T3910] ? __get_vm_area_node+0x13a/0x380 [ 84.884847][ T3910] __get_vm_area_node+0x17b/0x380 [ 84.889712][ T3910] __vmalloc_node_range+0xda/0x800 [ 84.894658][ T3910] ? copy_process+0x579/0x3250 [ 84.899258][ T3910] ? kmem_cache_alloc+0x1c1/0x2f0 [ 84.904114][ T3910] ? dup_task_struct+0x53/0xa60 [ 84.908805][ T3910] dup_task_struct+0x61f/0xa60 [ 84.913410][ T3910] ? copy_process+0x579/0x3250 [ 84.918004][ T3910] ? __kasan_check_write+0x14/0x20 [ 84.922951][ T3910] copy_process+0x579/0x3250 [ 84.927381][ T3910] ? __kasan_check_write+0x14/0x20 [ 84.932321][ T3910] ? proc_fail_nth_write+0x213/0x290 [ 84.937449][ T3910] ? proc_fail_nth_read+0x220/0x220 [ 84.942481][ T3910] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 84.947426][ T3910] ? vfs_write+0x9af/0x1050 [ 84.951770][ T3910] ? vmacache_update+0xb7/0x120 [ 84.956457][ T3910] kernel_clone+0x22d/0x990 [ 84.960795][ T3910] ? file_end_write+0x1b0/0x1b0 [ 84.965562][ T3910] ? __kasan_check_write+0x14/0x20 [ 84.970510][ T3910] ? create_io_thread+0x1e0/0x1e0 [ 84.975376][ T3910] ? __mutex_lock_slowpath+0x10/0x10 [ 84.980496][ T3910] __x64_sys_clone+0x289/0x310 [ 84.985115][ T3910] ? __do_sys_vfork+0x130/0x130 [ 84.989805][ T3910] ? debug_smp_processor_id+0x17/0x20 [ 84.995126][ T3910] do_syscall_64+0x44/0xd0 [ 84.999370][ T3910] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 85.005349][ T3910] RIP: 0033:0x7f931dc135a9 [ 85.009611][ T3910] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 85.029051][ T3910] RSP: 002b:00007f931c987118 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 85.037287][ T3910] RAX: ffffffffffffffda RBX: 00007f931dd33f80 RCX: 00007f931dc135a9 [ 85.045097][ T3910] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 12:34:28 executing program 4: perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x12) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cgroup.controllers\x00', 0x100002, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000140)='memory.low\x00', 0x2, 0x0) write$cgroup_int(r0, &(0x7f0000000200), 0x12) syz_clone(0x74809480, 0x0, 0x4100, &(0x7f0000000000), 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000400000000000000000000850000006d000000850000000f00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000080)='sys_exit\x00', r1}, 0x10) 12:34:28 executing program 0: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 85.052911][ T3910] RBP: 00007f931c9871d0 R08: 0000000000000000 R09: 0000000000000000 [ 85.060736][ T3910] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 85.068532][ T3910] R13: 00007fffd2d3bdcf R14: 00007f931c987300 R15: 0000000000022000 [ 85.076450][ T3910] 12:34:28 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'\x00', 0x52d35ce30131f272}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0) write$cgroup_type(r1, &(0x7f0000000080), 0x11ffffce1) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x660c, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'bond_slave_1\x00', 0x400}) 12:34:28 executing program 0: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 12:34:28 executing program 5: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) syz_clone(0x2, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 12:34:28 executing program 1: perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x12) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cgroup.controllers\x00', 0x100002, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000140)='memory.low\x00', 0x2, 0x0) write$cgroup_int(r0, &(0x7f0000000200), 0x12) syz_clone(0x74809480, 0x0, 0x4100, &(0x7f0000000000), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000400000000000000000000850000006d000000850000000f00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 12:34:28 executing program 0: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 12:34:28 executing program 5: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) syz_clone(0x7, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 12:34:28 executing program 0: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 12:34:28 executing program 2: syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 5) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 12:34:28 executing program 5: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) syz_clone(0x8, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 12:34:28 executing program 0: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 85.391710][ T3954] FAULT_INJECTION: forcing a failure. [ 85.391710][ T3954] name failslab, interval 1, probability 0, space 0, times 0 [ 85.409700][ T3954] CPU: 0 PID: 3954 Comm: syz-executor.2 Not tainted 5.15.74-syzkaller-04383-g7f2e600bf63a #0 [ 85.419688][ T3954] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/11/2022 [ 85.429578][ T3954] Call Trace: [ 85.432701][ T3954] [ 85.435490][ T3954] dump_stack_lvl+0x151/0x1b7 [ 85.439991][ T3954] ? bfq_pos_tree_add_move+0x43e/0x43e [ 85.445293][ T3954] dump_stack+0x15/0x17 [ 85.449285][ T3954] should_fail+0x3c0/0x510 [ 85.453531][ T3954] ? alloc_fdtable+0xaf/0x2b0 [ 85.458042][ T3954] __should_failslab+0x9f/0xe0 [ 85.462644][ T3954] should_failslab+0x9/0x20 [ 85.467005][ T3954] kmem_cache_alloc_trace+0x4a/0x310 [ 85.472280][ T3954] ? __kasan_check_write+0x14/0x20 [ 85.477234][ T3954] ? _raw_spin_lock+0xa3/0x1b0 [ 85.481852][ T3954] alloc_fdtable+0xaf/0x2b0 [ 85.486177][ T3954] dup_fd+0x781/0xa40 [ 85.490004][ T3954] ? avc_has_perm+0x16d/0x260 [ 85.494498][ T3954] copy_files+0xe6/0x200 [ 85.498661][ T3954] ? perf_event_attrs+0x30/0x30 [ 85.503354][ T3954] ? dup_task_struct+0xa60/0xa60 [ 85.508135][ T3954] ? security_task_alloc+0x132/0x150 [ 85.513245][ T3954] copy_process+0x11e9/0x3250 [ 85.517757][ T3954] ? proc_fail_nth_write+0x213/0x290 [ 85.522894][ T3954] ? proc_fail_nth_read+0x220/0x220 [ 85.527912][ T3954] ? check_kill_permission+0x37/0x490 [ 85.533125][ T3954] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 85.538068][ T3954] ? group_send_sig_info+0xa4/0x2f0 [ 85.543094][ T3954] ? vmacache_update+0xb7/0x120 [ 85.547792][ T3954] kernel_clone+0x22d/0x990 [ 85.552128][ T3954] ? create_io_thread+0x1e0/0x1e0 [ 85.556988][ T3954] ? __mutex_lock_slowpath+0x10/0x10 [ 85.562104][ T3954] __x64_sys_clone+0x289/0x310 [ 85.566712][ T3954] ? __do_sys_vfork+0x130/0x130 [ 85.571394][ T3954] ? debug_smp_processor_id+0x17/0x20 [ 85.576601][ T3954] do_syscall_64+0x44/0xd0 [ 85.580850][ T3954] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 85.586575][ T3954] RIP: 0033:0x7f931dc135a9 [ 85.590830][ T3954] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 85.610271][ T3954] RSP: 002b:00007f931c987118 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 85.618644][ T3954] RAX: ffffffffffffffda RBX: 00007f931dd33f80 RCX: 00007f931dc135a9 [ 85.626456][ T3954] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 85.634271][ T3954] RBP: 00007f931c9871d0 R08: 0000000000000000 R09: 0000000000000000 [ 85.642076][ T3954] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 85.649885][ T3954] R13: 00007fffd2d3bdcf R14: 00007f931c987300 R15: 0000000000022000 [ 85.657710][ T3954] 12:34:29 executing program 4: perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x12) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cgroup.controllers\x00', 0x100002, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000140)='memory.low\x00', 0x2, 0x0) write$cgroup_int(r0, &(0x7f0000000200), 0x12) syz_clone(0x74809480, 0x0, 0x4100, &(0x7f0000000000), 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000400000000000000000000850000006d000000850000000f00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000080)='sys_exit\x00', r1}, 0x10) 12:34:29 executing program 0: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x400001, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 12:34:29 executing program 5: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) syz_clone(0x9, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 12:34:29 executing program 2: syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 12:34:29 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'\x00', 0x52d35ce30131f272}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0) write$cgroup_type(r1, &(0x7f0000000080), 0x11ffffce1) (async) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x660c, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'bond_slave_1\x00', 0x400}) 12:34:29 executing program 1: perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x12) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cgroup.controllers\x00', 0x100002, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000140)='memory.low\x00', 0x2, 0x0) syz_clone(0x74809480, 0x0, 0x4100, &(0x7f0000000000), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000400000000000000000000850000006d000000850000000f00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 12:34:29 executing program 5: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 12:34:29 executing program 0: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x1004000, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 85.976398][ T3966] FAULT_INJECTION: forcing a failure. [ 85.976398][ T3966] name failslab, interval 1, probability 0, space 0, times 0 [ 86.006332][ T3966] CPU: 1 PID: 3966 Comm: syz-executor.2 Not tainted 5.15.74-syzkaller-04383-g7f2e600bf63a #0 [ 86.016362][ T3966] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/11/2022 12:34:29 executing program 0: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 86.026219][ T3966] Call Trace: [ 86.029349][ T3966] [ 86.032117][ T3966] dump_stack_lvl+0x151/0x1b7 [ 86.036639][ T3966] ? bfq_pos_tree_add_move+0x43e/0x43e [ 86.041927][ T3966] dump_stack+0x15/0x17 [ 86.045912][ T3966] should_fail+0x3c0/0x510 [ 86.050946][ T3966] ? kvmalloc_node+0x82/0x130 [ 86.055461][ T3966] __should_failslab+0x9f/0xe0 [ 86.060058][ T3966] should_failslab+0x9/0x20 [ 86.064399][ T3966] __kmalloc+0x6d/0x350 [ 86.068395][ T3966] ? __kasan_kmalloc+0x9/0x10 [ 86.072903][ T3966] kvmalloc_node+0x82/0x130 [ 86.077244][ T3966] alloc_fdtable+0xea/0x2b0 [ 86.081583][ T3966] dup_fd+0x781/0xa40 [ 86.085399][ T3966] ? avc_has_perm+0x16d/0x260 [ 86.089917][ T3966] copy_files+0xe6/0x200 [ 86.094003][ T3966] ? perf_event_attrs+0x30/0x30 [ 86.098687][ T3966] ? dup_task_struct+0xa60/0xa60 [ 86.103453][ T3966] ? security_task_alloc+0x132/0x150 [ 86.108577][ T3966] copy_process+0x11e9/0x3250 [ 86.113087][ T3966] ? proc_fail_nth_write+0x213/0x290 [ 86.118215][ T3966] ? proc_fail_nth_read+0x220/0x220 [ 86.123244][ T3966] ? check_kill_permission+0x37/0x490 [ 86.128450][ T3966] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 86.133398][ T3966] ? group_send_sig_info+0xa4/0x2f0 [ 86.138428][ T3966] ? vmacache_update+0xb7/0x120 [ 86.143121][ T3966] kernel_clone+0x22d/0x990 [ 86.147457][ T3966] ? create_io_thread+0x1e0/0x1e0 [ 86.152317][ T3966] ? __mutex_lock_slowpath+0x10/0x10 [ 86.157439][ T3966] __x64_sys_clone+0x289/0x310 [ 86.162125][ T3966] ? __do_sys_vfork+0x130/0x130 [ 86.166814][ T3966] ? debug_smp_processor_id+0x17/0x20 [ 86.172049][ T3966] do_syscall_64+0x44/0xd0 [ 86.176357][ T3966] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 86.182088][ T3966] RIP: 0033:0x7f931dc135a9 [ 86.186342][ T3966] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 86.205782][ T3966] RSP: 002b:00007f931c987118 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 86.215414][ T3966] RAX: ffffffffffffffda RBX: 00007f931dd33f80 RCX: 00007f931dc135a9 12:34:29 executing program 0: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 12:34:29 executing program 5: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) syz_clone(0x70, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 12:34:29 executing program 0: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 86.223225][ T3966] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 86.231035][ T3966] RBP: 00007f931c9871d0 R08: 0000000000000000 R09: 0000000000000000 [ 86.238848][ T3966] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 86.246662][ T3966] R13: 00007fffd2d3bdcf R14: 00007f931c987300 R15: 0000000000022000 [ 86.254472][ T3966] 12:34:30 executing program 4: perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x12) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cgroup.controllers\x00', 0x100002, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000140)='memory.low\x00', 0x2, 0x0) write$cgroup_int(r0, &(0x7f0000000200), 0x12) syz_clone(0x74809480, 0x0, 0x4100, &(0x7f0000000000), 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000400000000000000000000850000006d000000850000000f00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000080)='sys_exit\x00', r1}, 0x10) 12:34:30 executing program 0: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0xfeffffff, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 12:34:30 executing program 5: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) syz_clone(0x19b, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 12:34:30 executing program 2: syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 7) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 12:34:30 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'\x00', 0x52d35ce30131f272}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0) write$cgroup_type(r1, &(0x7f0000000080), 0x11ffffce1) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x660c, 0x0) (async) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'bond_slave_1\x00', 0x400}) 12:34:30 executing program 1: perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x12) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cgroup.controllers\x00', 0x100002, 0x0) syz_clone(0x74809480, 0x0, 0x4100, &(0x7f0000000000), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000400000000000000000000850000006d000000850000000f00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 12:34:30 executing program 0: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 12:34:30 executing program 0: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x186a0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 12:34:30 executing program 0: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff000186a0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 12:34:30 executing program 5: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) syz_clone(0x264, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) [ 86.823943][ T3999] FAULT_INJECTION: forcing a failure. [ 86.823943][ T3999] name failslab, interval 1, probability 0, space 0, times 0 12:34:30 executing program 5: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) syz_clone(0x700, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 12:34:30 executing program 0: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 86.930082][ T3999] CPU: 0 PID: 3999 Comm: syz-executor.2 Not tainted 5.15.74-syzkaller-04383-g7f2e600bf63a #0 [ 86.940074][ T3999] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/11/2022 [ 86.949967][ T3999] Call Trace: [ 86.953092][ T3999] [ 86.955871][ T3999] dump_stack_lvl+0x151/0x1b7 [ 86.960381][ T3999] ? bfq_pos_tree_add_move+0x43e/0x43e [ 86.965682][ T3999] dump_stack+0x15/0x17 [ 86.969667][ T3999] should_fail+0x3c0/0x510 [ 86.973920][ T3999] ? __vmalloc_node_range+0x2e3/0x800 [ 86.979126][ T3999] __should_failslab+0x9f/0xe0 [ 86.983728][ T3999] should_failslab+0x9/0x20 [ 86.988061][ T3999] __kmalloc+0x6d/0x350 [ 86.992060][ T3999] __vmalloc_node_range+0x2e3/0x800 [ 86.997091][ T3999] dup_task_struct+0x61f/0xa60 [ 87.001692][ T3999] ? copy_process+0x579/0x3250 [ 87.006287][ T3999] ? __kasan_check_write+0x14/0x20 [ 87.011235][ T3999] copy_process+0x579/0x3250 [ 87.015675][ T3999] ? __kasan_check_write+0x14/0x20 [ 87.020609][ T3999] ? proc_fail_nth_write+0x213/0x290 [ 87.025728][ T3999] ? proc_fail_nth_read+0x220/0x220 [ 87.030767][ T3999] ? check_kill_permission+0x37/0x490 [ 87.036407][ T3999] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 87.041503][ T3999] ? group_send_sig_info+0xa4/0x2f0 [ 87.046530][ T3999] ? vmacache_update+0xb7/0x120 [ 87.051220][ T3999] kernel_clone+0x22d/0x990 [ 87.055557][ T3999] ? create_io_thread+0x1e0/0x1e0 [ 87.060416][ T3999] ? __mutex_lock_slowpath+0x10/0x10 [ 87.065537][ T3999] __x64_sys_clone+0x289/0x310 [ 87.070146][ T3999] ? __do_sys_vfork+0x130/0x130 [ 87.074823][ T3999] ? debug_smp_processor_id+0x17/0x20 [ 87.080050][ T3999] do_syscall_64+0x44/0xd0 [ 87.084281][ T3999] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 87.090014][ T3999] RIP: 0033:0x7f931dc135a9 [ 87.094269][ T3999] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 87.113706][ T3999] RSP: 002b:00007f931c987118 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 87.121955][ T3999] RAX: ffffffffffffffda RBX: 00007f931dd33f80 RCX: 00007f931dc135a9 [ 87.129758][ T3999] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 87.137672][ T3999] RBP: 00007f931c9871d0 R08: 0000000000000000 R09: 0000000000000000 [ 87.145467][ T3999] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 87.153286][ T3999] R13: 00007fffd2d3bdcf R14: 00007f931c987300 R15: 0000000000022000 [ 87.161094][ T3999] 12:34:31 executing program 5: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) syz_clone(0x900, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 12:34:31 executing program 0: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 12:34:31 executing program 2: syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 12:34:31 executing program 1: perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x12) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x74809480, 0x0, 0x4100, &(0x7f0000000000), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000400000000000000000000850000006d000000850000000f00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 12:34:31 executing program 4: perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x12) r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cgroup.controllers\x00', 0x100002, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000140)='memory.low\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000000080)=0x3) syz_clone(0x74809480, 0x0, 0x4100, &(0x7f0000000000), 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000400000000000000000000850000006d000000850000000f00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000080)='sys_exit\x00', r1}, 0x10) 12:34:31 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x400000, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x80200, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'veth1_to_team\x00', 0x2000}) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='blkio.bfq.io_merged\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000100)={'ip6tnl0\x00', 0x4000}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x0) close(r0) 12:34:31 executing program 5: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) syz_clone(0x1100, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 12:34:31 executing program 0: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8, 0x10, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 12:34:31 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x400000, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x80200, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'veth1_to_team\x00', 0x2000}) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='blkio.bfq.io_merged\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000100)={'ip6tnl0\x00', 0x4000}) (async) ioctl$TUNSETLINK(r0, 0x400454cd, 0x0) (async) close(r0) 12:34:31 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x400000, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x80200, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'veth1_to_team\x00', 0x2000}) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='blkio.bfq.io_merged\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000100)={'ip6tnl0\x00', 0x4000}) (async) ioctl$TUNSETLINK(r0, 0x400454cd, 0x0) (async) close(r0) 12:34:31 executing program 0: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8, 0x400001, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 12:34:31 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'\x00', 0x52d35ce30131f272}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) close(r0) 12:34:31 executing program 5: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) syz_clone(0x1f00, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) [ 87.801041][ T4050] FAULT_INJECTION: forcing a failure. [ 87.801041][ T4050] name failslab, interval 1, probability 0, space 0, times 0 12:34:31 executing program 0: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8, 0x1004000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 87.862545][ T4050] CPU: 0 PID: 4050 Comm: syz-executor.2 Not tainted 5.15.74-syzkaller-04383-g7f2e600bf63a #0 [ 87.872546][ T4050] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/11/2022 [ 87.882536][ T4050] Call Trace: [ 87.885661][ T4050] [ 87.888419][ T4050] dump_stack_lvl+0x151/0x1b7 [ 87.892938][ T4050] ? bfq_pos_tree_add_move+0x43e/0x43e [ 87.898575][ T4050] ? _raw_spin_lock+0xa3/0x1b0 [ 87.903175][ T4050] ? dup_fd+0x51f/0xa40 [ 87.907170][ T4050] dump_stack+0x15/0x17 [ 87.911163][ T4050] should_fail+0x3c0/0x510 [ 87.915416][ T4050] __should_failslab+0x9f/0xe0 [ 87.920013][ T4050] should_failslab+0x9/0x20 [ 87.924439][ T4050] kmem_cache_alloc+0x4f/0x2f0 [ 87.929130][ T4050] ? copy_fs_struct+0x4e/0x230 [ 87.933736][ T4050] copy_fs_struct+0x4e/0x230 [ 87.938155][ T4050] copy_fs+0x72/0x140 [ 87.941971][ T4050] copy_process+0x1214/0x3250 [ 87.946485][ T4050] ? proc_fail_nth_write+0x213/0x290 [ 87.951605][ T4050] ? proc_fail_nth_read+0x220/0x220 [ 87.956640][ T4050] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 87.961593][ T4050] ? vfs_write+0x9af/0x1050 [ 87.966009][ T4050] ? vmacache_update+0xb7/0x120 [ 87.970697][ T4050] kernel_clone+0x22d/0x990 [ 87.975039][ T4050] ? file_end_write+0x1b0/0x1b0 [ 87.979724][ T4050] ? __kasan_check_write+0x14/0x20 [ 87.984668][ T4050] ? create_io_thread+0x1e0/0x1e0 [ 87.989536][ T4050] ? __mutex_lock_slowpath+0x10/0x10 [ 87.994655][ T4050] __x64_sys_clone+0x289/0x310 [ 87.999258][ T4050] ? __do_sys_vfork+0x130/0x130 [ 88.003940][ T4050] ? debug_smp_processor_id+0x17/0x20 [ 88.009329][ T4050] do_syscall_64+0x44/0xd0 [ 88.013581][ T4050] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 88.019315][ T4050] RIP: 0033:0x7f931dc135a9 [ 88.023563][ T4050] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 88.043012][ T4050] RSP: 002b:00007f931c987118 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 88.051246][ T4050] RAX: ffffffffffffffda RBX: 00007f931dd33f80 RCX: 00007f931dc135a9 [ 88.059066][ T4050] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 88.067015][ T4050] RBP: 00007f931c9871d0 R08: 0000000000000000 R09: 0000000000000000 [ 88.074991][ T4050] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 88.082820][ T4050] R13: 00007fffd2d3bdcf R14: 00007f931c987300 R15: 0000000000022000 [ 88.090620][ T4050] 12:34:31 executing program 2: syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 9) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 12:34:31 executing program 0: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8, 0x2000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 88.200599][ T4071] FAULT_INJECTION: forcing a failure. [ 88.200599][ T4071] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 88.213687][ T4071] CPU: 0 PID: 4071 Comm: syz-executor.2 Not tainted 5.15.74-syzkaller-04383-g7f2e600bf63a #0 [ 88.223614][ T4071] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/11/2022 [ 88.233508][ T4071] Call Trace: [ 88.236627][ T4071] [ 88.239406][ T4071] dump_stack_lvl+0x151/0x1b7 [ 88.243920][ T4071] ? bfq_pos_tree_add_move+0x43e/0x43e [ 88.249210][ T4071] dump_stack+0x15/0x17 [ 88.253212][ T4071] should_fail+0x3c0/0x510 [ 88.257457][ T4071] should_fail_alloc_page+0x58/0x70 [ 88.262504][ T4071] __alloc_pages+0x1de/0x7c0 [ 88.266916][ T4071] ? __count_vm_events+0x30/0x30 [ 88.271692][ T4071] ? __kasan_kmalloc+0x9/0x10 [ 88.276202][ T4071] ? __kmalloc+0x203/0x350 [ 88.280459][ T4071] ? __vmalloc_node_range+0x2e3/0x800 [ 88.285664][ T4071] __vmalloc_node_range+0x48f/0x800 [ 88.290702][ T4071] dup_task_struct+0x61f/0xa60 [ 88.295296][ T4071] ? copy_process+0x579/0x3250 [ 88.299898][ T4071] ? __kasan_check_write+0x14/0x20 [ 88.304847][ T4071] copy_process+0x579/0x3250 [ 88.309442][ T4071] ? __kasan_check_write+0x14/0x20 [ 88.314390][ T4071] ? proc_fail_nth_write+0x213/0x290 [ 88.319509][ T4071] ? proc_fail_nth_read+0x220/0x220 [ 88.325321][ T4071] ? check_kill_permission+0x37/0x490 [ 88.330528][ T4071] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 88.335476][ T4071] ? group_send_sig_info+0xa4/0x2f0 [ 88.340512][ T4071] ? vmacache_update+0xb7/0x120 [ 88.345198][ T4071] kernel_clone+0x22d/0x990 [ 88.349538][ T4071] ? create_io_thread+0x1e0/0x1e0 [ 88.354397][ T4071] ? __mutex_lock_slowpath+0x10/0x10 [ 88.359518][ T4071] __x64_sys_clone+0x289/0x310 [ 88.364123][ T4071] ? __do_sys_vfork+0x130/0x130 [ 88.368808][ T4071] ? debug_smp_processor_id+0x17/0x20 [ 88.374011][ T4071] do_syscall_64+0x44/0xd0 [ 88.378267][ T4071] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 88.384001][ T4071] RIP: 0033:0x7f931dc135a9 [ 88.388246][ T4071] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 88.407684][ T4071] RSP: 002b:00007f931c987118 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 88.415931][ T4071] RAX: ffffffffffffffda RBX: 00007f931dd33f80 RCX: 00007f931dc135a9 [ 88.423835][ T4071] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 88.431645][ T4071] RBP: 00007f931c9871d0 R08: 0000000000000000 R09: 0000000000000000 [ 88.439635][ T4071] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 12:34:31 executing program 4: perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x12) r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cgroup.controllers\x00', 0x100002, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000140)='memory.low\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000000080)=0x3) syz_clone(0x74809480, 0x0, 0x4100, &(0x7f0000000000), 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000400000000000000000000850000006d000000850000000f00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000080)='sys_exit\x00', r1}, 0x10) 12:34:31 executing program 5: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) syz_clone(0x2000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 12:34:31 executing program 1: perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x12) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x74809480, 0x0, 0x4100, &(0x7f0000000000), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000400000000000000000000850000006d000000850000000f00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 12:34:31 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'\x00', 0x52d35ce30131f272}) (async) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) (async) bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) close(r0) 12:34:31 executing program 0: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8, 0x4000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 12:34:31 executing program 2: syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 12:34:31 executing program 0: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8, 0x10000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 88.447442][ T4071] R13: 00007fffd2d3bdcf R14: 00007f931c987300 R15: 0000000000022000 [ 88.455255][ T4071] [ 88.488863][ T4082] FAULT_INJECTION: forcing a failure. [ 88.488863][ T4082] name fail_page_alloc, interval 1, probability 0, space 0, times 0 12:34:31 executing program 5: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) syz_clone(0x6402, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) [ 88.533961][ T4082] CPU: 1 PID: 4082 Comm: syz-executor.2 Not tainted 5.15.74-syzkaller-04383-g7f2e600bf63a #0 [ 88.543954][ T4082] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/11/2022 [ 88.553848][ T4082] Call Trace: [ 88.556972][ T4082] [ 88.559748][ T4082] dump_stack_lvl+0x151/0x1b7 [ 88.564263][ T4082] ? bfq_pos_tree_add_move+0x43e/0x43e [ 88.569559][ T4082] dump_stack+0x15/0x17 [ 88.573558][ T4082] should_fail+0x3c0/0x510 [ 88.577803][ T4082] should_fail_alloc_page+0x58/0x70 [ 88.582834][ T4082] __alloc_pages+0x1de/0x7c0 [ 88.587274][ T4082] ? __count_vm_events+0x30/0x30 [ 88.592040][ T4082] ? __kasan_kmalloc+0x9/0x10 [ 88.596546][ T4082] ? __kmalloc+0x203/0x350 [ 88.600797][ T4082] ? __vmalloc_node_range+0x2e3/0x800 [ 88.606007][ T4082] __vmalloc_node_range+0x48f/0x800 [ 88.611040][ T4082] dup_task_struct+0x61f/0xa60 [ 88.615638][ T4082] ? copy_process+0x579/0x3250 [ 88.620239][ T4082] ? __kasan_check_write+0x14/0x20 [ 88.625189][ T4082] copy_process+0x579/0x3250 [ 88.629613][ T4082] ? __kasan_check_write+0x14/0x20 [ 88.634562][ T4082] ? proc_fail_nth_write+0x213/0x290 [ 88.639681][ T4082] ? proc_fail_nth_read+0x220/0x220 [ 88.644720][ T4082] ? check_kill_permission+0x37/0x490 [ 88.649922][ T4082] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 88.654873][ T4082] ? group_send_sig_info+0xa4/0x2f0 [ 88.659899][ T4082] ? vmacache_update+0xb7/0x120 [ 88.664587][ T4082] kernel_clone+0x22d/0x990 [ 88.668929][ T4082] ? create_io_thread+0x1e0/0x1e0 [ 88.673786][ T4082] ? __mutex_lock_slowpath+0x10/0x10 [ 88.678908][ T4082] __x64_sys_clone+0x289/0x310 [ 88.683512][ T4082] ? __do_sys_vfork+0x130/0x130 [ 88.688194][ T4082] ? debug_smp_processor_id+0x17/0x20 [ 88.693404][ T4082] do_syscall_64+0x44/0xd0 [ 88.697657][ T4082] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 88.703389][ T4082] RIP: 0033:0x7f931dc135a9 [ 88.707641][ T4082] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 12:34:32 executing program 0: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8, 0x20000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 88.727892][ T4082] RSP: 002b:00007f931c987118 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 88.737790][ T4082] RAX: ffffffffffffffda RBX: 00007f931dd33f80 RCX: 00007f931dc135a9 [ 88.745587][ T4082] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 88.753401][ T4082] RBP: 00007f931c9871d0 R08: 0000000000000000 R09: 0000000000000000 [ 88.761208][ T4082] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 88.769023][ T4082] R13: 00007fffd2d3bdcf R14: 00007f931c987300 R15: 0000000000022000 [ 88.776837][ T4082] 12:34:32 executing program 0: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8, 0xfeffffff, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 12:34:32 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'\x00', 0x52d35ce30131f272}) (async) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) close(r0) 12:34:32 executing program 0: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8, 0xfffffffe, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 12:34:32 executing program 4: perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x12) r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cgroup.controllers\x00', 0x100002, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000140)='memory.low\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000000080)=0x3) syz_clone(0x74809480, 0x0, 0x4100, &(0x7f0000000000), 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000400000000000000000000850000006d000000850000000f00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000080)='sys_exit\x00', r1}, 0x10) 12:34:32 executing program 2: syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 11) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 12:34:32 executing program 0: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8, 0x200000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 12:34:32 executing program 5: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) syz_clone(0x7000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 12:34:32 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.dequeue\x00', 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0) write$cgroup_type(r1, &(0x7f0000000080), 0x11ffffce1) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x660c, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'ip_vti0\x00', 0x52d35ce30131f271}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) close(r0) 12:34:32 executing program 1: perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x12) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x74809480, 0x0, 0x4100, &(0x7f0000000000), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000400000000000000000000850000006d000000850000000f00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 12:34:32 executing program 0: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8, 0x1000001000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 89.269006][ T4115] FAULT_INJECTION: forcing a failure. [ 89.269006][ T4115] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 89.306359][ T4115] CPU: 0 PID: 4115 Comm: syz-executor.2 Not tainted 5.15.74-syzkaller-04383-g7f2e600bf63a #0 [ 89.316556][ T4115] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/11/2022 [ 89.326449][ T4115] Call Trace: [ 89.329571][ T4115] [ 89.332349][ T4115] dump_stack_lvl+0x151/0x1b7 [ 89.336916][ T4115] ? bfq_pos_tree_add_move+0x43e/0x43e [ 89.342156][ T4115] dump_stack+0x15/0x17 [ 89.346150][ T4115] should_fail+0x3c0/0x510 [ 89.350401][ T4115] should_fail_alloc_page+0x58/0x70 [ 89.355441][ T4115] __alloc_pages+0x1de/0x7c0 [ 89.359871][ T4115] ? __count_vm_events+0x30/0x30 [ 89.364638][ T4115] ? __kasan_kmalloc+0x9/0x10 [ 89.369150][ T4115] ? __kmalloc+0x203/0x350 [ 89.373400][ T4115] ? __vmalloc_node_range+0x2e3/0x800 [ 89.378607][ T4115] __vmalloc_node_range+0x48f/0x800 [ 89.383646][ T4115] dup_task_struct+0x61f/0xa60 [ 89.388240][ T4115] ? copy_process+0x579/0x3250 [ 89.392842][ T4115] ? __kasan_check_write+0x14/0x20 [ 89.397788][ T4115] copy_process+0x579/0x3250 [ 89.402216][ T4115] ? __kasan_check_write+0x14/0x20 [ 89.407164][ T4115] ? proc_fail_nth_write+0x213/0x290 [ 89.412283][ T4115] ? proc_fail_nth_read+0x220/0x220 [ 89.417407][ T4115] ? check_kill_permission+0x37/0x490 [ 89.422610][ T4115] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 89.427557][ T4115] ? group_send_sig_info+0xa4/0x2f0 [ 89.432591][ T4115] ? vmacache_update+0xb7/0x120 [ 89.437301][ T4115] kernel_clone+0x22d/0x990 [ 89.441628][ T4115] ? create_io_thread+0x1e0/0x1e0 [ 89.446479][ T4115] ? __mutex_lock_slowpath+0x10/0x10 [ 89.451599][ T4115] __x64_sys_clone+0x289/0x310 [ 89.456199][ T4115] ? __do_sys_vfork+0x130/0x130 [ 89.460887][ T4115] ? debug_smp_processor_id+0x17/0x20 [ 89.466096][ T4115] do_syscall_64+0x44/0xd0 [ 89.470353][ T4115] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 89.476216][ T4115] RIP: 0033:0x7f931dc135a9 [ 89.480443][ T4115] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 89.499878][ T4115] RSP: 002b:00007f931c987118 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 89.508130][ T4115] RAX: ffffffffffffffda RBX: 00007f931dd33f80 RCX: 00007f931dc135a9 12:34:32 executing program 0: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8, 0x2000000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 12:34:32 executing program 5: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) syz_clone(0x9b01, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) [ 89.515935][ T4115] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 89.523762][ T4115] RBP: 00007f931c9871d0 R08: 0000000000000000 R09: 0000000000000000 [ 89.531556][ T4115] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 89.539455][ T4115] R13: 00007fffd2d3bdcf R14: 00007f931c987300 R15: 0000000000022000 [ 89.547277][ T4115] 12:34:32 executing program 5: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) syz_clone(0x10fff, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 12:34:32 executing program 0: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8, 0x10000010000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 12:34:33 executing program 5: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) syz_clone(0x20010, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 12:34:33 executing program 0: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8, 0x40000100000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 12:34:33 executing program 1: perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x12) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x74809480, 0x0, 0x4100, &(0x7f0000000000), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000400000000000000000000850000006d000000850000000f00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 12:34:33 executing program 5: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) syz_clone(0x20200, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 12:34:33 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.dequeue\x00', 0x0, 0x0) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0) write$cgroup_type(r1, &(0x7f0000000080), 0x11ffffce1) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x660c, 0x0) (async) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'ip_vti0\x00', 0x52d35ce30131f271}) (async) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) (async) close(r0) 12:34:33 executing program 4: perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x12) r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cgroup.controllers\x00', 0x100002, 0x0) write$cgroup_int(r1, &(0x7f0000000200), 0x12) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000000080)=0x3) syz_clone(0x74809480, 0x0, 0x4100, &(0x7f0000000000), 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000400000000000000000000850000006d000000850000000f00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000080)='sys_exit\x00', r2}, 0x10) 12:34:33 executing program 2: syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 12) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 12:34:33 executing program 0: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8, 0x400000000000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 12:34:33 executing program 5: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) syz_clone(0x80000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 12:34:33 executing program 0: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8, 0x1000000000000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 90.018738][ T4151] FAULT_INJECTION: forcing a failure. [ 90.018738][ T4151] name failslab, interval 1, probability 0, space 0, times 0 [ 90.066413][ T4151] CPU: 1 PID: 4151 Comm: syz-executor.2 Not tainted 5.15.74-syzkaller-04383-g7f2e600bf63a #0 [ 90.076401][ T4151] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/11/2022 [ 90.086301][ T4151] Call Trace: [ 90.089427][ T4151] [ 90.092202][ T4151] dump_stack_lvl+0x151/0x1b7 [ 90.096713][ T4151] ? bfq_pos_tree_add_move+0x43e/0x43e [ 90.102017][ T4151] dump_stack+0x15/0x17 [ 90.105999][ T4151] should_fail+0x3c0/0x510 [ 90.110257][ T4151] ? mm_init+0x392/0x960 [ 90.114329][ T4151] __should_failslab+0x9f/0xe0 [ 90.118934][ T4151] should_failslab+0x9/0x20 [ 90.123328][ T4151] kmem_cache_alloc_trace+0x4a/0x310 [ 90.128479][ T4151] mm_init+0x392/0x960 [ 90.132388][ T4151] dup_mm+0x7d/0x330 [ 90.136115][ T4151] copy_mm+0x108/0x1b0 [ 90.140032][ T4151] copy_process+0x1295/0x3250 [ 90.144541][ T4151] ? proc_fail_nth_write+0x213/0x290 [ 90.149656][ T4151] ? proc_fail_nth_read+0x220/0x220 [ 90.154692][ T4151] ? check_kill_permission+0x37/0x490 [ 90.159896][ T4151] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 90.164840][ T4151] ? group_send_sig_info+0xa4/0x2f0 [ 90.169877][ T4151] ? vmacache_update+0xb7/0x120 [ 90.174570][ T4151] kernel_clone+0x22d/0x990 [ 90.178993][ T4151] ? create_io_thread+0x1e0/0x1e0 [ 90.183850][ T4151] ? __mutex_lock_slowpath+0x10/0x10 [ 90.189058][ T4151] __x64_sys_clone+0x289/0x310 [ 90.193661][ T4151] ? __do_sys_vfork+0x130/0x130 [ 90.198350][ T4151] ? debug_smp_processor_id+0x17/0x20 [ 90.203550][ T4151] do_syscall_64+0x44/0xd0 [ 90.207803][ T4151] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 90.213533][ T4151] RIP: 0033:0x7f931dc135a9 [ 90.217791][ T4151] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 90.237228][ T4151] RSP: 002b:00007f931c987118 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 90.245473][ T4151] RAX: ffffffffffffffda RBX: 00007f931dd33f80 RCX: 00007f931dc135a9 [ 90.253292][ T4151] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 12:34:33 executing program 5: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) syz_clone(0x101000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 12:34:33 executing program 0: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8, 0xfeffffff00000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 12:34:33 executing program 5: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) syz_clone(0x700000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 12:34:33 executing program 0: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 90.261094][ T4151] RBP: 00007f931c9871d0 R08: 0000000000000000 R09: 0000000000000000 [ 90.268910][ T4151] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 90.276714][ T4151] R13: 00007fffd2d3bdcf R14: 00007f931c987300 R15: 0000000000022000 [ 90.284527][ T4151] 12:34:33 executing program 1: perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x12) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x74809480, 0x0, 0x4100, &(0x7f0000000000), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000400000000000000000000850000006d000000850000000f00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 12:34:33 executing program 5: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) syz_clone(0xf0ff1f, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 12:34:33 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.dequeue\x00', 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0) write$cgroup_type(r1, &(0x7f0000000080), 0x11ffffce1) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x660c, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'ip_vti0\x00', 0x52d35ce30131f271}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) close(r0) openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) (async) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.dequeue\x00', 0x0, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0) (async) write$cgroup_type(r1, &(0x7f0000000080), 0x11ffffce1) (async) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x660c, 0x0) (async) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'ip_vti0\x00', 0x52d35ce30131f271}) (async) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) (async) close(r0) (async) 12:34:34 executing program 4: perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x12) r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cgroup.controllers\x00', 0x100002, 0x0) write$cgroup_int(r1, &(0x7f0000000200), 0x12) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000000080)=0x3) syz_clone(0x74809480, 0x0, 0x4100, &(0x7f0000000000), 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000400000000000000000000850000006d000000850000000f00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000080)='sys_exit\x00', r2}, 0x10) 12:34:34 executing program 0: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 12:34:34 executing program 5: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) syz_clone(0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 12:34:34 executing program 2: syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 13) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 12:34:34 executing program 0: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8, 0x0, 0x10, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 12:34:34 executing program 5: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) syz_clone(0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 12:34:34 executing program 0: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8, 0x0, 0x400001, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 12:34:34 executing program 1: perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x12) syz_clone(0x74809480, 0x0, 0x4100, &(0x7f0000000000), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000400000000000000000000850000006d000000850000000f00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 12:34:34 executing program 0: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8, 0x0, 0x1004000, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 90.746486][ T4190] FAULT_INJECTION: forcing a failure. [ 90.746486][ T4190] name fail_page_alloc, interval 1, probability 0, space 0, times 0 12:34:34 executing program 5: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) syz_clone(0x7000000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 12:34:34 executing program 0: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8, 0x0, 0x2000000, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 12:34:34 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000040)={r0}, 0x8) ioctl$TUNSETLINK(r1, 0x400454cd, 0x2a) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'\x00', 0x52d35ce30131f272}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) close(r0) [ 90.853985][ T4190] CPU: 1 PID: 4190 Comm: syz-executor.2 Not tainted 5.15.74-syzkaller-04383-g7f2e600bf63a #0 [ 90.863995][ T4190] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/11/2022 [ 90.873890][ T4190] Call Trace: [ 90.877015][ T4190] [ 90.879792][ T4190] dump_stack_lvl+0x151/0x1b7 [ 90.884304][ T4190] ? bfq_pos_tree_add_move+0x43e/0x43e [ 90.889599][ T4190] dump_stack+0x15/0x17 [ 90.893586][ T4190] should_fail+0x3c0/0x510 [ 90.897850][ T4190] should_fail_alloc_page+0x58/0x70 [ 90.902875][ T4190] __alloc_pages+0x1de/0x7c0 [ 90.907303][ T4190] ? __count_vm_events+0x30/0x30 [ 90.912130][ T4190] ? __kasan_kmalloc+0x9/0x10 [ 90.916589][ T4190] ? __kmalloc+0x203/0x350 [ 90.920839][ T4190] ? __vmalloc_node_range+0x2e3/0x800 [ 90.926827][ T4190] __vmalloc_node_range+0x48f/0x800 [ 90.931863][ T4190] dup_task_struct+0x61f/0xa60 [ 90.936471][ T4190] ? copy_process+0x579/0x3250 [ 90.941075][ T4190] ? __kasan_check_write+0x14/0x20 [ 90.946009][ T4190] copy_process+0x579/0x3250 [ 90.950443][ T4190] ? __kasan_check_write+0x14/0x20 [ 90.955380][ T4190] ? proc_fail_nth_write+0x213/0x290 [ 90.960504][ T4190] ? proc_fail_nth_read+0x220/0x220 [ 90.965534][ T4190] ? check_kill_permission+0x37/0x490 [ 90.970742][ T4190] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 90.975777][ T4190] ? group_send_sig_info+0xa4/0x2f0 [ 90.980811][ T4190] ? vmacache_update+0xb7/0x120 [ 90.985585][ T4190] kernel_clone+0x22d/0x990 [ 90.990019][ T4190] ? create_io_thread+0x1e0/0x1e0 [ 90.994871][ T4190] ? __mutex_lock_slowpath+0x10/0x10 [ 91.000008][ T4190] __x64_sys_clone+0x289/0x310 [ 91.004593][ T4190] ? __do_sys_vfork+0x130/0x130 [ 91.009289][ T4190] ? debug_smp_processor_id+0x17/0x20 [ 91.014490][ T4190] do_syscall_64+0x44/0xd0 [ 91.018741][ T4190] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 91.024468][ T4190] RIP: 0033:0x7f931dc135a9 [ 91.028722][ T4190] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 91.048162][ T4190] RSP: 002b:00007f931c987118 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 91.056410][ T4190] RAX: ffffffffffffffda RBX: 00007f931dd33f80 RCX: 00007f931dc135a9 [ 91.064214][ T4190] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 91.072806][ T4190] RBP: 00007f931c9871d0 R08: 0000000000000000 R09: 0000000000000000 [ 91.080618][ T4190] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 91.088429][ T4190] R13: 00007fffd2d3bdcf R14: 00007f931c987300 R15: 0000000000022000 [ 91.096244][ T4190] 12:34:34 executing program 4: perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x12) r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cgroup.controllers\x00', 0x100002, 0x0) write$cgroup_int(r1, &(0x7f0000000200), 0x12) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000000080)=0x3) syz_clone(0x74809480, 0x0, 0x4100, &(0x7f0000000000), 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000400000000000000000000850000006d000000850000000f00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000080)='sys_exit\x00', r2}, 0x10) 12:34:34 executing program 5: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) syz_clone(0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 12:34:34 executing program 0: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8, 0x0, 0x4000000, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 12:34:34 executing program 1: perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x74809480, 0x0, 0x4100, &(0x7f0000000000), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000400000000000000000000850000006d000000850000000f00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 12:34:34 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000040)={r0}, 0x8) ioctl$TUNSETLINK(r1, 0x400454cd, 0x2a) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'\x00', 0x52d35ce30131f272}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) close(r0) openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) (async) bpf$ITER_CREATE(0x21, &(0x7f0000000040)={r0}, 0x8) (async) ioctl$TUNSETLINK(r1, 0x400454cd, 0x2a) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'\x00', 0x52d35ce30131f272}) (async) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) (async) close(r0) (async) 12:34:34 executing program 2: syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 14) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 12:34:34 executing program 0: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8, 0x0, 0x10000000, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 12:34:34 executing program 0: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8, 0x0, 0x20000000, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 12:34:34 executing program 5: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) syz_clone(0x9000000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 12:34:34 executing program 0: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8, 0x0, 0xfeffffff, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 12:34:34 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000040)={r0}, 0x8) ioctl$TUNSETLINK(r1, 0x400454cd, 0x2a) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'\x00', 0x52d35ce30131f272}) (async) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) (async) close(r0) 12:34:34 executing program 0: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8, 0x0, 0xfffffffe, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 91.576568][ T4237] FAULT_INJECTION: forcing a failure. [ 91.576568][ T4237] name failslab, interval 1, probability 0, space 0, times 0 [ 91.609569][ T4237] CPU: 0 PID: 4237 Comm: syz-executor.2 Not tainted 5.15.74-syzkaller-04383-g7f2e600bf63a #0 [ 91.619558][ T4237] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/11/2022 [ 91.629456][ T4237] Call Trace: [ 91.632572][ T4237] [ 91.635348][ T4237] dump_stack_lvl+0x151/0x1b7 [ 91.639861][ T4237] ? bfq_pos_tree_add_move+0x43e/0x43e [ 91.645159][ T4237] dump_stack+0x15/0x17 [ 91.649147][ T4237] should_fail+0x3c0/0x510 [ 91.653410][ T4237] __should_failslab+0x9f/0xe0 [ 91.658002][ T4237] should_failslab+0x9/0x20 [ 91.662344][ T4237] kmem_cache_alloc+0x4f/0x2f0 [ 91.666941][ T4237] ? vm_area_dup+0x26/0x1d0 [ 91.671280][ T4237] vm_area_dup+0x26/0x1d0 [ 91.675445][ T4237] dup_mmap+0x6b8/0xea0 [ 91.679446][ T4237] ? __delayed_free_task+0x20/0x20 [ 91.684474][ T4237] ? mm_init+0x807/0x960 [ 91.688552][ T4237] dup_mm+0x91/0x330 [ 91.692284][ T4237] copy_mm+0x108/0x1b0 [ 91.696195][ T4237] copy_process+0x1295/0x3250 [ 91.700706][ T4237] ? proc_fail_nth_read+0x220/0x220 [ 91.705736][ T4237] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 91.710685][ T4237] ? vfs_write+0x9af/0x1050 [ 91.715039][ T4237] ? vmacache_update+0xb7/0x120 [ 91.719719][ T4237] kernel_clone+0x22d/0x990 [ 91.724049][ T4237] ? make_kuid+0x700/0x700 [ 91.728348][ T4237] ? trace_raw_output_bpf_trace_printk+0xd0/0xd0 [ 91.734467][ T4237] ? create_io_thread+0x1e0/0x1e0 [ 91.739330][ T4237] __x64_sys_clone+0x289/0x310 [ 91.743927][ T4237] ? __do_sys_vfork+0x130/0x130 [ 91.748614][ T4237] ? debug_smp_processor_id+0x17/0x20 [ 91.753818][ T4237] do_syscall_64+0x44/0xd0 [ 91.758073][ T4237] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 91.763800][ T4237] RIP: 0033:0x7f931dc135a9 [ 91.768052][ T4237] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 91.787491][ T4237] RSP: 002b:00007f931c987118 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 91.795738][ T4237] RAX: ffffffffffffffda RBX: 00007f931dd33f80 RCX: 00007f931dc135a9 [ 91.803648][ T4237] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 91.811448][ T4237] RBP: 00007f931c9871d0 R08: 0000000000000000 R09: 0000000000000000 [ 91.819258][ T4237] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 91.827072][ T4237] R13: 00007fffd2d3bdcf R14: 00007f931c987300 R15: 0000000000022000 [ 91.834887][ T4237] 12:34:35 executing program 4: perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x12) r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000140)='memory.low\x00', 0x2, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x12) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000000080)=0x3) syz_clone(0x74809480, 0x0, 0x4100, &(0x7f0000000000), 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000400000000000000000000850000006d000000850000000f00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000080)='sys_exit\x00', r1}, 0x10) 12:34:35 executing program 1: syz_clone(0x74809480, 0x0, 0x4100, &(0x7f0000000000), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000400000000000000000000850000006d000000850000000f00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 12:34:35 executing program 5: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) syz_clone(0x10000200, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 12:34:35 executing program 0: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8, 0x0, 0x200000000, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 12:34:35 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'\x00', 0x52d35ce30131f272}) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) openat$cgroup_ro(r1, &(0x7f0000000080)='hugetlb.1GB.usage_in_bytes\x00', 0x0, 0x0) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) close(r0) 12:34:35 executing program 2: syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 15) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 12:34:35 executing program 0: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8, 0x0, 0x1000001000, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 12:34:35 executing program 5: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) syz_clone(0x11000000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 12:34:35 executing program 0: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8, 0x0, 0x2000000000, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 12:34:35 executing program 5: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) syz_clone(0x1f000000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) [ 92.051093][ T4276] FAULT_INJECTION: forcing a failure. [ 92.051093][ T4276] name failslab, interval 1, probability 0, space 0, times 0 [ 92.091120][ T4276] CPU: 1 PID: 4276 Comm: syz-executor.2 Not tainted 5.15.74-syzkaller-04383-g7f2e600bf63a #0 [ 92.101380][ T4276] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/11/2022 [ 92.111354][ T4276] Call Trace: [ 92.114473][ T4276] [ 92.117252][ T4276] dump_stack_lvl+0x151/0x1b7 [ 92.121767][ T4276] ? bfq_pos_tree_add_move+0x43e/0x43e [ 92.127060][ T4276] dump_stack+0x15/0x17 [ 92.131051][ T4276] should_fail+0x3c0/0x510 [ 92.135301][ T4276] __should_failslab+0x9f/0xe0 [ 92.139900][ T4276] should_failslab+0x9/0x20 [ 92.144327][ T4276] kmem_cache_alloc+0x4f/0x2f0 [ 92.148928][ T4276] ? vm_area_dup+0x26/0x1d0 [ 92.153265][ T4276] ? __kasan_check_read+0x11/0x20 [ 92.158125][ T4276] vm_area_dup+0x26/0x1d0 [ 92.162293][ T4276] dup_mmap+0x6b8/0xea0 [ 92.166292][ T4276] ? __delayed_free_task+0x20/0x20 [ 92.171235][ T4276] ? mm_init+0x807/0x960 [ 92.175311][ T4276] dup_mm+0x91/0x330 [ 92.179042][ T4276] copy_mm+0x108/0x1b0 [ 92.182953][ T4276] copy_process+0x1295/0x3250 [ 92.187642][ T4276] ? proc_fail_nth_write+0x213/0x290 [ 92.192756][ T4276] ? proc_fail_nth_read+0x220/0x220 [ 92.197795][ T4276] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 92.202737][ T4276] ? vfs_write+0x9af/0x1050 [ 92.207077][ T4276] ? vmacache_update+0xb7/0x120 [ 92.211764][ T4276] kernel_clone+0x22d/0x990 [ 92.216193][ T4276] ? file_end_write+0x1b0/0x1b0 [ 92.220878][ T4276] ? __kasan_check_write+0x14/0x20 [ 92.225825][ T4276] ? create_io_thread+0x1e0/0x1e0 [ 92.230685][ T4276] ? __mutex_lock_slowpath+0x10/0x10 [ 92.235893][ T4276] __x64_sys_clone+0x289/0x310 [ 92.240490][ T4276] ? __do_sys_vfork+0x130/0x130 [ 92.245179][ T4276] ? debug_smp_processor_id+0x17/0x20 [ 92.250389][ T4276] do_syscall_64+0x44/0xd0 [ 92.254638][ T4276] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 92.260368][ T4276] RIP: 0033:0x7f931dc135a9 [ 92.264622][ T4276] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 92.284147][ T4276] RSP: 002b:00007f931c987118 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 92.292393][ T4276] RAX: ffffffffffffffda RBX: 00007f931dd33f80 RCX: 00007f931dc135a9 12:34:35 executing program 0: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8, 0x0, 0x10000010000000, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 12:34:35 executing program 0: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8, 0x0, 0x40000100000000, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 92.300205][ T4276] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 92.308113][ T4276] RBP: 00007f931c9871d0 R08: 0000000000000000 R09: 0000000000000000 [ 92.315923][ T4276] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 92.323731][ T4276] R13: 00007fffd2d3bdcf R14: 00007f931c987300 R15: 0000000000022000 [ 92.331545][ T4276] 12:34:35 executing program 4: perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x12) r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000140)='memory.low\x00', 0x2, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x12) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000000080)=0x3) syz_clone(0x74809480, 0x0, 0x4100, &(0x7f0000000000), 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000400000000000000000000850000006d000000850000000f00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000080)='sys_exit\x00', r1}, 0x10) 12:34:35 executing program 0: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8, 0x0, 0x400000000000000, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 12:34:35 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'\x00', 0x52d35ce30131f272}) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) openat$cgroup_ro(r1, &(0x7f0000000080)='hugetlb.1GB.usage_in_bytes\x00', 0x0, 0x0) (async, rerun: 32) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) (async, rerun: 32) close(r0) 12:34:35 executing program 5: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) syz_clone(0x1ffff000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 12:34:35 executing program 2: syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 16) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 12:34:35 executing program 1: syz_clone(0x74809480, 0x0, 0x4100, &(0x7f0000000000), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000400000000000000000000850000006d000000850000000f00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 12:34:35 executing program 0: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8, 0x0, 0x1000000000000000, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 12:34:35 executing program 5: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) syz_clone(0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) [ 92.597034][ T4303] FAULT_INJECTION: forcing a failure. [ 92.597034][ T4303] name failslab, interval 1, probability 0, space 0, times 0 [ 92.612421][ T4303] CPU: 1 PID: 4303 Comm: syz-executor.2 Not tainted 5.15.74-syzkaller-04383-g7f2e600bf63a #0 [ 92.622413][ T4303] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/11/2022 [ 92.632313][ T4303] Call Trace: [ 92.635424][ T4303] [ 92.638209][ T4303] dump_stack_lvl+0x151/0x1b7 [ 92.642717][ T4303] ? bfq_pos_tree_add_move+0x43e/0x43e [ 92.648030][ T4303] dump_stack+0x15/0x17 [ 92.652002][ T4303] should_fail+0x3c0/0x510 [ 92.656250][ T4303] ? security_prepare_creds+0x50/0x160 [ 92.661552][ T4303] __should_failslab+0x9f/0xe0 [ 92.666146][ T4303] should_failslab+0x9/0x20 [ 92.670490][ T4303] __kmalloc+0x6d/0x350 [ 92.674480][ T4303] security_prepare_creds+0x50/0x160 [ 92.679598][ T4303] prepare_creds+0x471/0x690 [ 92.684025][ T4303] copy_creds+0xde/0x640 [ 92.688106][ T4303] copy_process+0x775/0x3250 [ 92.692533][ T4303] ? __kasan_check_write+0x14/0x20 [ 92.697478][ T4303] ? proc_fail_nth_write+0x213/0x290 [ 92.702601][ T4303] ? proc_fail_nth_read+0x220/0x220 [ 92.707634][ T4303] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 92.712576][ T4303] ? vfs_write+0x9af/0x1050 [ 92.716924][ T4303] ? vmacache_update+0xb7/0x120 [ 92.721606][ T4303] kernel_clone+0x22d/0x990 [ 92.725944][ T4303] ? file_end_write+0x1b0/0x1b0 [ 92.730631][ T4303] ? __kasan_check_write+0x14/0x20 [ 92.735576][ T4303] ? create_io_thread+0x1e0/0x1e0 [ 92.740434][ T4303] ? __mutex_lock_slowpath+0x10/0x10 [ 92.745556][ T4303] __x64_sys_clone+0x289/0x310 [ 92.750158][ T4303] ? __do_sys_vfork+0x130/0x130 [ 92.754843][ T4303] ? debug_smp_processor_id+0x17/0x20 [ 92.760051][ T4303] do_syscall_64+0x44/0xd0 [ 92.764391][ T4303] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 92.770117][ T4303] RIP: 0033:0x7f931dc135a9 [ 92.774371][ T4303] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 12:34:36 executing program 5: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) syz_clone(0x64020000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 12:34:36 executing program 0: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8, 0x0, 0xfeffffff00000000, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 12:34:36 executing program 0: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 92.793898][ T4303] RSP: 002b:00007f931c987118 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 92.802150][ T4303] RAX: ffffffffffffffda RBX: 00007f931dd33f80 RCX: 00007f931dc135a9 [ 92.809996][ T4303] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 92.817863][ T4303] RBP: 00007f931c9871d0 R08: 0000000000000000 R09: 0000000000000000 [ 92.825689][ T4303] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 92.833476][ T4303] R13: 00007fffd2d3bdcf R14: 00007f931c987300 R15: 0000000000022000 [ 92.841290][ T4303] 12:34:36 executing program 0: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 12:34:36 executing program 4: perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x12) r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000140)='memory.low\x00', 0x2, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x12) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000000080)=0x3) syz_clone(0x74809480, 0x0, 0x4100, &(0x7f0000000000), 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000400000000000000000000850000006d000000850000000f00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000080)='sys_exit\x00', r1}, 0x10) 12:34:36 executing program 1: syz_clone(0x74809480, 0x0, 0x4100, &(0x7f0000000000), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000400000000000000000000850000006d000000850000000f00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 12:34:36 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'\x00', 0x52d35ce30131f272}) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) openat$cgroup_ro(r1, &(0x7f0000000080)='hugetlb.1GB.usage_in_bytes\x00', 0x0, 0x0) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) close(r0) openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'\x00', 0x52d35ce30131f272}) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) (async) openat$cgroup_ro(r1, &(0x7f0000000080)='hugetlb.1GB.usage_in_bytes\x00', 0x0, 0x0) (async) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) (async) close(r0) (async) 12:34:36 executing program 2: syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 17) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 12:34:36 executing program 0: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 12:34:36 executing program 5: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) syz_clone(0x9b010000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 12:34:36 executing program 5: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) syz_clone(0xf5ffffff, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 12:34:36 executing program 0: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 93.067884][ T4338] FAULT_INJECTION: forcing a failure. [ 93.067884][ T4338] name failslab, interval 1, probability 0, space 0, times 0 [ 93.096667][ T4338] CPU: 0 PID: 4338 Comm: syz-executor.2 Not tainted 5.15.74-syzkaller-04383-g7f2e600bf63a #0 [ 93.106745][ T4338] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/11/2022 [ 93.116640][ T4338] Call Trace: [ 93.119764][ T4338] [ 93.122544][ T4338] dump_stack_lvl+0x151/0x1b7 [ 93.127054][ T4338] ? bfq_pos_tree_add_move+0x43e/0x43e [ 93.132351][ T4338] dump_stack+0x15/0x17 [ 93.136343][ T4338] should_fail+0x3c0/0x510 [ 93.140591][ T4338] ? security_prepare_creds+0x50/0x160 [ 93.145890][ T4338] __should_failslab+0x9f/0xe0 [ 93.150487][ T4338] should_failslab+0x9/0x20 [ 93.154828][ T4338] __kmalloc+0x6d/0x350 [ 93.158825][ T4338] security_prepare_creds+0x50/0x160 [ 93.163941][ T4338] prepare_creds+0x471/0x690 12:34:36 executing program 5: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) syz_clone(0xfbffffff, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) [ 93.168368][ T4338] copy_creds+0xde/0x640 [ 93.172452][ T4338] copy_process+0x775/0x3250 [ 93.176874][ T4338] ? __kasan_check_write+0x14/0x20 [ 93.181823][ T4338] ? proc_fail_nth_write+0x213/0x290 [ 93.186938][ T4338] ? proc_fail_nth_read+0x220/0x220 [ 93.191978][ T4338] ? check_kill_permission+0x37/0x490 [ 93.197181][ T4338] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 93.202123][ T4338] ? group_send_sig_info+0xa4/0x2f0 [ 93.207157][ T4338] ? vmacache_update+0xb7/0x120 [ 93.211843][ T4338] kernel_clone+0x22d/0x990 [ 93.216185][ T4338] ? create_io_thread+0x1e0/0x1e0 [ 93.221044][ T4338] ? __mutex_lock_slowpath+0x10/0x10 [ 93.226166][ T4338] __x64_sys_clone+0x289/0x310 [ 93.230766][ T4338] ? __do_sys_vfork+0x130/0x130 [ 93.235451][ T4338] ? debug_smp_processor_id+0x17/0x20 [ 93.240658][ T4338] do_syscall_64+0x44/0xd0 [ 93.244913][ T4338] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 93.250640][ T4338] RIP: 0033:0x7f931dc135a9 [ 93.254894][ T4338] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 93.274334][ T4338] RSP: 002b:00007f931c987118 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 93.282577][ T4338] RAX: ffffffffffffffda RBX: 00007f931dd33f80 RCX: 00007f931dc135a9 [ 93.290389][ T4338] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 93.298200][ T4338] RBP: 00007f931c9871d0 R08: 0000000000000000 R09: 0000000000000000 [ 93.306010][ T4338] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 12:34:36 executing program 2: syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 12:34:36 executing program 0: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400001, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 12:34:36 executing program 5: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) syz_clone(0xff0f0100, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) [ 93.313826][ T4338] R13: 00007fffd2d3bdcf R14: 00007f931c987300 R15: 0000000000022000 [ 93.321636][ T4338] [ 93.384636][ T4362] FAULT_INJECTION: forcing a failure. [ 93.384636][ T4362] name failslab, interval 1, probability 0, space 0, times 0 [ 93.397642][ T4362] CPU: 1 PID: 4362 Comm: syz-executor.2 Not tainted 5.15.74-syzkaller-04383-g7f2e600bf63a #0 [ 93.407631][ T4362] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/11/2022 [ 93.417520][ T4362] Call Trace: [ 93.420640][ T4362] [ 93.423414][ T4362] dump_stack_lvl+0x151/0x1b7 [ 93.427928][ T4362] ? bfq_pos_tree_add_move+0x43e/0x43e [ 93.433224][ T4362] dump_stack+0x15/0x17 [ 93.437305][ T4362] should_fail+0x3c0/0x510 [ 93.441554][ T4362] ? alloc_fdtable+0xaf/0x2b0 [ 93.446066][ T4362] __should_failslab+0x9f/0xe0 [ 93.450665][ T4362] should_failslab+0x9/0x20 [ 93.455006][ T4362] kmem_cache_alloc_trace+0x4a/0x310 [ 93.460121][ T4362] ? __kasan_check_write+0x14/0x20 [ 93.465069][ T4362] ? _raw_spin_lock+0xa3/0x1b0 [ 93.469670][ T4362] alloc_fdtable+0xaf/0x2b0 [ 93.474031][ T4362] dup_fd+0x781/0xa40 [ 93.477838][ T4362] ? avc_has_perm+0x16d/0x260 [ 93.482349][ T4362] copy_files+0xe6/0x200 [ 93.486419][ T4362] ? perf_event_attrs+0x30/0x30 [ 93.491107][ T4362] ? dup_task_struct+0xa60/0xa60 [ 93.495882][ T4362] ? security_task_alloc+0x132/0x150 [ 93.501003][ T4362] copy_process+0x11e9/0x3250 [ 93.505516][ T4362] ? proc_fail_nth_write+0x213/0x290 [ 93.510723][ T4362] ? proc_fail_nth_read+0x220/0x220 [ 93.515759][ T4362] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 93.520701][ T4362] ? vfs_write+0x9af/0x1050 [ 93.525041][ T4362] ? vmacache_update+0xb7/0x120 [ 93.529734][ T4362] kernel_clone+0x22d/0x990 [ 93.534070][ T4362] ? file_end_write+0x1b0/0x1b0 [ 93.538755][ T4362] ? __kasan_check_write+0x14/0x20 [ 93.543702][ T4362] ? create_io_thread+0x1e0/0x1e0 [ 93.548564][ T4362] ? __mutex_lock_slowpath+0x10/0x10 [ 93.553686][ T4362] __x64_sys_clone+0x289/0x310 [ 93.558299][ T4362] ? __do_sys_vfork+0x130/0x130 [ 93.562975][ T4362] ? debug_smp_processor_id+0x17/0x20 [ 93.568191][ T4362] do_syscall_64+0x44/0xd0 [ 93.572431][ T4362] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 93.578179][ T4362] RIP: 0033:0x7f931dc135a9 [ 93.582413][ T4362] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 93.601856][ T4362] RSP: 002b:00007f931c987118 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 93.610097][ T4362] RAX: ffffffffffffffda RBX: 00007f931dd33f80 RCX: 00007f931dc135a9 [ 93.618005][ T4362] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 93.625816][ T4362] RBP: 00007f931c9871d0 R08: 0000000000000000 R09: 0000000000000000 [ 93.633624][ T4362] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 93.641437][ T4362] R13: 00007fffd2d3bdcf R14: 00007f931c987300 R15: 0000000000022000 [ 93.649250][ T4362] 12:34:37 executing program 4: perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x12) r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cgroup.controllers\x00', 0x100002, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000140)='memory.low\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f0000000200), 0x12) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000000080)=0x3) syz_clone(0x74809480, 0x0, 0x4100, &(0x7f0000000000), 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000400000000000000000000850000006d000000850000000f00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000080)='sys_exit\x00', r2}, 0x10) 12:34:37 executing program 5: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) syz_clone(0xfffffff5, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 12:34:37 executing program 0: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1004000, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 12:34:37 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x103080, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'\x00', 0x52d35ce30131f272}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) close(r0) 12:34:37 executing program 1: perf_event_open(0x0, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x74809480, 0x0, 0x4100, &(0x7f0000000000), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000400000000000000000000850000006d000000850000000f00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 12:34:37 executing program 2: syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 19) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 12:34:37 executing program 0: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 12:34:37 executing program 5: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) syz_clone(0xfffffffb, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 12:34:37 executing program 0: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 12:34:37 executing program 5: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) syz_clone(0x1b0d51f000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) [ 93.774387][ T4371] FAULT_INJECTION: forcing a failure. [ 93.774387][ T4371] name failslab, interval 1, probability 0, space 0, times 0 12:34:37 executing program 0: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 93.860641][ T4371] CPU: 1 PID: 4371 Comm: syz-executor.2 Not tainted 5.15.74-syzkaller-04383-g7f2e600bf63a #0 [ 93.870634][ T4371] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/11/2022 [ 93.880530][ T4371] Call Trace: [ 93.883646][ T4371] [ 93.886424][ T4371] dump_stack_lvl+0x151/0x1b7 [ 93.891111][ T4371] ? bfq_pos_tree_add_move+0x43e/0x43e [ 93.896405][ T4371] dump_stack+0x15/0x17 [ 93.900483][ T4371] should_fail+0x3c0/0x510 [ 93.905090][ T4371] ? alloc_fdtable+0xaf/0x2b0 [ 93.909597][ T4371] __should_failslab+0x9f/0xe0 [ 93.914198][ T4371] should_failslab+0x9/0x20 [ 93.918538][ T4371] kmem_cache_alloc_trace+0x4a/0x310 [ 93.923656][ T4371] ? __kasan_check_write+0x14/0x20 [ 93.928604][ T4371] ? _raw_spin_lock+0xa3/0x1b0 [ 93.933202][ T4371] alloc_fdtable+0xaf/0x2b0 [ 93.937546][ T4371] dup_fd+0x781/0xa40 [ 93.941369][ T4371] ? avc_has_perm+0x16d/0x260 [ 93.945883][ T4371] copy_files+0xe6/0x200 [ 93.949957][ T4371] ? perf_event_attrs+0x30/0x30 [ 93.954642][ T4371] ? dup_task_struct+0xa60/0xa60 [ 93.959415][ T4371] ? security_task_alloc+0x132/0x150 [ 93.964535][ T4371] copy_process+0x11e9/0x3250 [ 93.969052][ T4371] ? proc_fail_nth_write+0x213/0x290 [ 93.974180][ T4371] ? proc_fail_nth_read+0x220/0x220 [ 93.979217][ T4371] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 93.984150][ T4371] ? vfs_write+0x9af/0x1050 [ 93.988488][ T4371] ? vmacache_update+0xb7/0x120 [ 93.993178][ T4371] kernel_clone+0x22d/0x990 [ 93.997527][ T4371] ? file_end_write+0x1b0/0x1b0 [ 94.002202][ T4371] ? __kasan_check_write+0x14/0x20 [ 94.007149][ T4371] ? create_io_thread+0x1e0/0x1e0 [ 94.012009][ T4371] ? __mutex_lock_slowpath+0x10/0x10 [ 94.017157][ T4371] __x64_sys_clone+0x289/0x310 [ 94.021735][ T4371] ? __do_sys_vfork+0x130/0x130 [ 94.026418][ T4371] ? debug_smp_processor_id+0x17/0x20 [ 94.031634][ T4371] do_syscall_64+0x44/0xd0 [ 94.035881][ T4371] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 94.041606][ T4371] RIP: 0033:0x7f931dc135a9 [ 94.045868][ T4371] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 94.065300][ T4371] RSP: 002b:00007f931c987118 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 94.073543][ T4371] RAX: ffffffffffffffda RBX: 00007f931dd33f80 RCX: 00007f931dc135a9 [ 94.081410][ T4371] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 94.089175][ T4371] RBP: 00007f931c9871d0 R08: 0000000000000000 R09: 0000000000000000 [ 94.096980][ T4371] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 12:34:37 executing program 0: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 94.104788][ T4371] R13: 00007fffd2d3bdcf R14: 00007f931c987300 R15: 0000000000022000 [ 94.112603][ T4371] 12:34:37 executing program 0: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 12:34:37 executing program 5: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) syz_clone(0x2a38f36b5000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 12:34:37 executing program 2: syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 12:34:37 executing program 1: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_clone(0x74809480, 0x0, 0x4100, &(0x7f0000000000), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000400000000000000000000850000006d000000850000000f00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 12:34:37 executing program 4: perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x12) r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cgroup.controllers\x00', 0x100002, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000140)='memory.low\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f0000000200), 0x12) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000000080)=0x3) syz_clone(0x74809480, 0x0, 0x4100, &(0x7f0000000000), 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000400000000000000000000850000006d000000850000000f00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000080)='sys_exit\x00', r2}, 0x10) 12:34:37 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x103080, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'\x00', 0x52d35ce30131f272}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) (async) close(r0) 12:34:37 executing program 0: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400001, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 12:34:37 executing program 5: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) syz_clone(0x553a2664a000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 12:34:37 executing program 0: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1004000, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 12:34:37 executing program 5: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) syz_clone(0x2001000000000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) [ 94.253117][ T4404] FAULT_INJECTION: forcing a failure. [ 94.253117][ T4404] name failslab, interval 1, probability 0, space 0, times 0 12:34:37 executing program 0: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 94.296263][ T4404] CPU: 0 PID: 4404 Comm: syz-executor.2 Not tainted 5.15.74-syzkaller-04383-g7f2e600bf63a #0 [ 94.306253][ T4404] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/11/2022 [ 94.316236][ T4404] Call Trace: [ 94.319457][ T4404] [ 94.322224][ T4404] dump_stack_lvl+0x151/0x1b7 [ 94.326733][ T4404] ? bfq_pos_tree_add_move+0x43e/0x43e [ 94.332028][ T4404] dump_stack+0x15/0x17 [ 94.336017][ T4404] should_fail+0x3c0/0x510 [ 94.340270][ T4404] ? kvmalloc_node+0x82/0x130 [ 94.344783][ T4404] __should_failslab+0x9f/0xe0 [ 94.349382][ T4404] should_failslab+0x9/0x20 [ 94.353723][ T4404] __kmalloc+0x6d/0x350 [ 94.357715][ T4404] ? __kasan_kmalloc+0x9/0x10 [ 94.362228][ T4404] kvmalloc_node+0x82/0x130 [ 94.366570][ T4404] alloc_fdtable+0xea/0x2b0 [ 94.370912][ T4404] dup_fd+0x781/0xa40 [ 94.374726][ T4404] ? avc_has_perm+0x16d/0x260 [ 94.379240][ T4404] copy_files+0xe6/0x200 [ 94.383318][ T4404] ? perf_event_attrs+0x30/0x30 [ 94.388003][ T4404] ? dup_task_struct+0xa60/0xa60 [ 94.392787][ T4404] ? security_task_alloc+0x132/0x150 [ 94.397900][ T4404] copy_process+0x11e9/0x3250 [ 94.402415][ T4404] ? proc_fail_nth_write+0x213/0x290 [ 94.407534][ T4404] ? proc_fail_nth_read+0x220/0x220 [ 94.412565][ T4404] ? check_kill_permission+0x37/0x490 [ 94.417774][ T4404] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 94.422720][ T4404] ? group_send_sig_info+0xa4/0x2f0 [ 94.427755][ T4404] ? vmacache_update+0xb7/0x120 [ 94.432551][ T4404] kernel_clone+0x22d/0x990 [ 94.436961][ T4404] ? create_io_thread+0x1e0/0x1e0 [ 94.441829][ T4404] ? __mutex_lock_slowpath+0x10/0x10 [ 94.446937][ T4404] __x64_sys_clone+0x289/0x310 [ 94.451621][ T4404] ? __do_sys_vfork+0x130/0x130 [ 94.456309][ T4404] ? debug_smp_processor_id+0x17/0x20 [ 94.461518][ T4404] do_syscall_64+0x44/0xd0 [ 94.465771][ T4404] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 94.471496][ T4404] RIP: 0033:0x7f931dc135a9 [ 94.475754][ T4404] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 12:34:37 executing program 0: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 12:34:37 executing program 5: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) syz_clone(0x2020000000000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) [ 94.495198][ T4404] RSP: 002b:00007f931c987118 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 94.503436][ T4404] RAX: ffffffffffffffda RBX: 00007f931dd33f80 RCX: 00007f931dc135a9 [ 94.511507][ T4404] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 94.519927][ T4404] RBP: 00007f931c9871d0 R08: 0000000000000000 R09: 0000000000000000 [ 94.527738][ T4404] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 94.535551][ T4404] R13: 00007fffd2d3bdcf R14: 00007f931c987300 R15: 0000000000022000 [ 94.544070][ T4404] 12:34:37 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x103080, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'\x00', 0x52d35ce30131f272}) (async) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) (async) close(r0) 12:34:37 executing program 2: syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 21) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 12:34:37 executing program 1: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_clone(0x0, 0x0, 0x4100, &(0x7f0000000000), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000400000000000000000000850000006d000000850000000f00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) [ 94.616148][ T4435] FAULT_INJECTION: forcing a failure. [ 94.616148][ T4435] name failslab, interval 1, probability 0, space 0, times 0 [ 94.673545][ T4435] CPU: 0 PID: 4435 Comm: syz-executor.2 Not tainted 5.15.74-syzkaller-04383-g7f2e600bf63a #0 [ 94.683552][ T4435] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/11/2022 [ 94.693450][ T4435] Call Trace: [ 94.696570][ T4435] [ 94.699349][ T4435] dump_stack_lvl+0x151/0x1b7 [ 94.703865][ T4435] ? bfq_pos_tree_add_move+0x43e/0x43e [ 94.709163][ T4435] dump_stack+0x15/0x17 [ 94.713151][ T4435] should_fail+0x3c0/0x510 [ 94.717404][ T4435] __should_failslab+0x9f/0xe0 [ 94.722001][ T4435] should_failslab+0x9/0x20 [ 94.726340][ T4435] kmem_cache_alloc+0x4f/0x2f0 [ 94.730942][ T4435] ? anon_vma_clone+0xa1/0x4f0 [ 94.735541][ T4435] anon_vma_clone+0xa1/0x4f0 [ 94.739976][ T4435] anon_vma_fork+0x91/0x4f0 [ 94.744303][ T4435] ? anon_vma_name+0x4c/0x70 [ 94.748732][ T4435] dup_mmap+0x750/0xea0 [ 94.752725][ T4435] ? __delayed_free_task+0x20/0x20 [ 94.757673][ T4435] ? mm_init+0x807/0x960 [ 94.761774][ T4435] dup_mm+0x91/0x330 [ 94.765482][ T4435] copy_mm+0x108/0x1b0 [ 94.769387][ T4435] copy_process+0x1295/0x3250 [ 94.773905][ T4435] ? proc_fail_nth_read+0x220/0x220 [ 94.778937][ T4435] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 94.783883][ T4435] ? vfs_write+0x9af/0x1050 [ 94.788222][ T4435] ? vmacache_update+0xb7/0x120 [ 94.792911][ T4435] kernel_clone+0x22d/0x990 [ 94.797249][ T4435] ? make_kuid+0x700/0x700 [ 94.801525][ T4435] ? trace_raw_output_bpf_trace_printk+0xd0/0xd0 [ 94.807663][ T4435] ? create_io_thread+0x1e0/0x1e0 [ 94.812528][ T4435] __x64_sys_clone+0x289/0x310 [ 94.817161][ T4435] ? __do_sys_vfork+0x130/0x130 [ 94.821811][ T4435] ? debug_smp_processor_id+0x17/0x20 [ 94.827017][ T4435] do_syscall_64+0x44/0xd0 [ 94.831270][ T4435] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 94.836997][ T4435] RIP: 0033:0x7f931dc135a9 [ 94.841250][ T4435] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 94.860820][ T4435] RSP: 002b:00007f931c987118 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 12:34:38 executing program 5: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) syz_clone(0x8000000000000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 12:34:38 executing program 0: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 12:34:38 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x151820, 0x0) ioctl$TUNSETLINK(r0, 0x400454cd, 0x305) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'\x00', 0x52d35ce30131f272}) perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0x80, 0xe, 0xe0, 0x9, 0x0, 0x200, 0x40000, 0x2, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x7, 0x2, @perf_config_ext={0xffffffff, 0x2}, 0x482b0, 0x1, 0x5, 0x8, 0x56ba, 0x1, 0x6, 0x0, 0x4228, 0x0, 0x10001}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0) write$cgroup_type(r1, &(0x7f0000000080), 0x11ffffce1) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x660c, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f00000001c0)='sys_exit\x00') openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNGETVNETLE(r1, 0x800454dd, &(0x7f0000000280)) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) close(r0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18007e2b9e189a33965422de730000048546da21"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000080)='sys_exit\x00', r2}, 0x10) close(r2) 12:34:38 executing program 4: perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x12) r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cgroup.controllers\x00', 0x100002, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000140)='memory.low\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f0000000200), 0x12) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000000080)=0x3) syz_clone(0x74809480, 0x0, 0x4100, &(0x7f0000000000), 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000400000000000000000000850000006d000000850000000f00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000080)='sys_exit\x00', r2}, 0x10) 12:34:38 executing program 1: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000400000000000000000000850000006d000000850000000f00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 12:34:38 executing program 0: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfeffffff, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 12:34:38 executing program 5: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) syz_clone(0x10100000000000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 12:34:38 executing program 2: syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 22) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) [ 94.869060][ T4435] RAX: ffffffffffffffda RBX: 00007f931dd33f80 RCX: 00007f931dc135a9 [ 94.876869][ T4435] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 94.884683][ T4435] RBP: 00007f931c9871d0 R08: 0000000000000000 R09: 0000000000000000 [ 94.892493][ T4435] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 94.900304][ T4435] R13: 00007fffd2d3bdcf R14: 00007f931c987300 R15: 0000000000022000 [ 94.908122][ T4435] 12:34:38 executing program 5: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) syz_clone(0x506bf3382a0000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 12:34:38 executing program 0: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 12:34:38 executing program 1: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000400000000000000000000850000006d000000850000000f00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 12:34:38 executing program 0: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 12:34:38 executing program 5: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) syz_clone(0x70000000000000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) [ 94.979075][ T4459] FAULT_INJECTION: forcing a failure. [ 94.979075][ T4459] name failslab, interval 1, probability 0, space 0, times 0 [ 95.039574][ T4459] CPU: 0 PID: 4459 Comm: syz-executor.2 Not tainted 5.15.74-syzkaller-04383-g7f2e600bf63a #0 [ 95.049561][ T4459] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/11/2022 [ 95.059560][ T4459] Call Trace: [ 95.062675][ T4459] [ 95.065445][ T4459] dump_stack_lvl+0x151/0x1b7 [ 95.069959][ T4459] ? bfq_pos_tree_add_move+0x43e/0x43e [ 95.075253][ T4459] dump_stack+0x15/0x17 [ 95.079240][ T4459] should_fail+0x3c0/0x510 [ 95.083495][ T4459] __should_failslab+0x9f/0xe0 [ 95.088094][ T4459] should_failslab+0x9/0x20 [ 95.092431][ T4459] kmem_cache_alloc+0x4f/0x2f0 [ 95.097033][ T4459] ? copy_sighand+0x54/0x250 [ 95.101462][ T4459] ? _raw_spin_unlock+0x4d/0x70 [ 95.106149][ T4459] copy_sighand+0x54/0x250 [ 95.110397][ T4459] copy_process+0x123f/0x3250 [ 95.114911][ T4459] ? proc_fail_nth_write+0x213/0x290 [ 95.120033][ T4459] ? proc_fail_nth_read+0x220/0x220 [ 95.125068][ T4459] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 95.130010][ T4459] ? vfs_write+0x9af/0x1050 [ 95.134351][ T4459] ? vmacache_update+0xb7/0x120 [ 95.139063][ T4459] kernel_clone+0x22d/0x990 [ 95.143381][ T4459] ? file_end_write+0x1b0/0x1b0 [ 95.148065][ T4459] ? __kasan_check_write+0x14/0x20 [ 95.153014][ T4459] ? create_io_thread+0x1e0/0x1e0 [ 95.157872][ T4459] ? __mutex_lock_slowpath+0x10/0x10 [ 95.162995][ T4459] __x64_sys_clone+0x289/0x310 [ 95.167606][ T4459] ? __do_sys_vfork+0x130/0x130 [ 95.172281][ T4459] ? debug_smp_processor_id+0x17/0x20 [ 95.177579][ T4459] do_syscall_64+0x44/0xd0 [ 95.181839][ T4459] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 95.187558][ T4459] RIP: 0033:0x7f931dc135a9 [ 95.191814][ T4459] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 95.211340][ T4459] RSP: 002b:00007f931c987118 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 95.219581][ T4459] RAX: ffffffffffffffda RBX: 00007f931dd33f80 RCX: 00007f931dc135a9 [ 95.227489][ T4459] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 12:34:38 executing program 0: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 95.235290][ T4459] RBP: 00007f931c9871d0 R08: 0000000000000000 R09: 0000000000000000 [ 95.243108][ T4459] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 95.250913][ T4459] R13: 00007fffd2d3bdcf R14: 00007f931c987300 R15: 0000000000022000 [ 95.258726][ T4459] 12:34:38 executing program 0: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 12:34:38 executing program 4: perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x12) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cgroup.controllers\x00', 0x100002, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000140)='memory.low\x00', 0x2, 0x0) write$cgroup_int(r0, &(0x7f0000000200), 0x12) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f0000000080)=0x3) syz_clone(0x74809480, 0x0, 0x4100, &(0x7f0000000000), 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000400000000000000000000850000006d000000850000000f00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000080)='sys_exit\x00', r1}, 0x10) 12:34:38 executing program 5: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) syz_clone(0xa064263a550000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 12:34:38 executing program 1: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000400000000000000000000850000006d000000850000000f00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 12:34:38 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x151820, 0x0) ioctl$TUNSETLINK(r0, 0x400454cd, 0x305) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'\x00', 0x52d35ce30131f272}) (async) perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0x80, 0xe, 0xe0, 0x9, 0x0, 0x200, 0x40000, 0x2, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x7, 0x2, @perf_config_ext={0xffffffff, 0x2}, 0x482b0, 0x1, 0x5, 0x8, 0x56ba, 0x1, 0x6, 0x0, 0x4228, 0x0, 0x10001}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0) write$cgroup_type(r1, &(0x7f0000000080), 0x11ffffce1) (async) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x660c, 0x0) (async) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f00000001c0)='sys_exit\x00') (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async) ioctl$TUNGETVNETLE(r1, 0x800454dd, &(0x7f0000000280)) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) (async) close(r0) (async) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18007e2b9e189a33965422de730000048546da21"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000080)='sys_exit\x00', r2}, 0x10) (async) close(r2) 12:34:38 executing program 2: syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 23) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 12:34:38 executing program 0: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 12:34:38 executing program 1: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 12:34:38 executing program 5: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) syz_clone(0xf0510d1b000000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 12:34:38 executing program 0: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400001, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 12:34:38 executing program 0: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1004000, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 12:34:38 executing program 1: perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x12) r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000140)='memory.low\x00', 0x2, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x12) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000000080)=0x3) syz_clone(0x74809480, 0x0, 0x4100, &(0x7f0000000000), 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000400000000000000000000850000006d000000850000000f00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000080)='sys_exit\x00', r1}, 0x10) 12:34:38 executing program 5: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) syz_clone(0xf0ff1f00000000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) [ 95.559991][ T4505] FAULT_INJECTION: forcing a failure. [ 95.559991][ T4505] name failslab, interval 1, probability 0, space 0, times 0 [ 95.612999][ T4505] CPU: 1 PID: 4505 Comm: syz-executor.2 Not tainted 5.15.74-syzkaller-04383-g7f2e600bf63a #0 [ 95.622994][ T4505] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/11/2022 [ 95.632888][ T4505] Call Trace: [ 95.636009][ T4505] [ 95.638787][ T4505] dump_stack_lvl+0x151/0x1b7 [ 95.643345][ T4505] ? bfq_pos_tree_add_move+0x43e/0x43e [ 95.648610][ T4505] dump_stack+0x15/0x17 [ 95.652588][ T4505] should_fail+0x3c0/0x510 [ 95.656844][ T4505] __should_failslab+0x9f/0xe0 [ 95.661438][ T4505] should_failslab+0x9/0x20 [ 95.665782][ T4505] kmem_cache_alloc+0x4f/0x2f0 [ 95.670392][ T4505] ? copy_sighand+0x54/0x250 [ 95.674803][ T4505] ? _raw_spin_unlock+0x4d/0x70 [ 95.679490][ T4505] copy_sighand+0x54/0x250 [ 95.683832][ T4505] copy_process+0x123f/0x3250 [ 95.688352][ T4505] ? proc_fail_nth_write+0x213/0x290 [ 95.693471][ T4505] ? proc_fail_nth_read+0x220/0x220 [ 95.698494][ T4505] ? check_kill_permission+0x37/0x490 [ 95.703704][ T4505] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 95.708649][ T4505] ? group_send_sig_info+0xa4/0x2f0 [ 95.713684][ T4505] ? vmacache_update+0xb7/0x120 [ 95.718461][ T4505] kernel_clone+0x22d/0x990 [ 95.722806][ T4505] ? create_io_thread+0x1e0/0x1e0 [ 95.727657][ T4505] ? __mutex_lock_slowpath+0x10/0x10 [ 95.732957][ T4505] __x64_sys_clone+0x289/0x310 [ 95.737561][ T4505] ? __do_sys_vfork+0x130/0x130 [ 95.742244][ T4505] ? debug_smp_processor_id+0x17/0x20 [ 95.747452][ T4505] do_syscall_64+0x44/0xd0 [ 95.751706][ T4505] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 95.757433][ T4505] RIP: 0033:0x7f931dc135a9 [ 95.761687][ T4505] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 95.781233][ T4505] RSP: 002b:00007f931c987118 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 95.789477][ T4505] RAX: ffffffffffffffda RBX: 00007f931dd33f80 RCX: 00007f931dc135a9 [ 95.797725][ T4505] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 95.805537][ T4505] RBP: 00007f931c9871d0 R08: 0000000000000000 R09: 0000000000000000 [ 95.813356][ T4505] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 95.821158][ T4505] R13: 00007fffd2d3bdcf R14: 00007f931c987300 R15: 0000000000022000 [ 95.828974][ T4505] 12:34:39 executing program 4: perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x12) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cgroup.controllers\x00', 0x100002, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000140)='memory.low\x00', 0x2, 0x0) write$cgroup_int(r0, &(0x7f0000000200), 0x12) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f0000000080)=0x3) syz_clone(0x74809480, 0x0, 0x4100, &(0x7f0000000000), 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000400000000000000000000850000006d000000850000000f00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000080)='sys_exit\x00', r1}, 0x10) 12:34:39 executing program 5: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) syz_clone(0x100000000000000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 12:34:39 executing program 0: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 12:34:39 executing program 2: syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 24) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 12:34:39 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x151820, 0x0) ioctl$TUNSETLINK(r0, 0x400454cd, 0x305) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'\x00', 0x52d35ce30131f272}) (async) perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0x80, 0xe, 0xe0, 0x9, 0x0, 0x200, 0x40000, 0x2, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x7, 0x2, @perf_config_ext={0xffffffff, 0x2}, 0x482b0, 0x1, 0x5, 0x8, 0x56ba, 0x1, 0x6, 0x0, 0x4228, 0x0, 0x10001}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0) write$cgroup_type(r1, &(0x7f0000000080), 0x11ffffce1) (async) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x660c, 0x0) (async) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f00000001c0)='sys_exit\x00') (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async) ioctl$TUNGETVNETLE(r1, 0x800454dd, &(0x7f0000000280)) (async) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) (async) close(r0) (async) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18007e2b9e189a33965422de730000048546da21"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000080)='sys_exit\x00', r2}, 0x10) close(r2) 12:34:39 executing program 0: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 12:34:39 executing program 5: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) syz_clone(0x200000000000000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 12:34:39 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'\x00', 0x52d35ce30131f272}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x108) close(r0) 12:34:39 executing program 0: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 96.136524][ T4521] FAULT_INJECTION: forcing a failure. [ 96.136524][ T4521] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 96.185769][ T4521] CPU: 1 PID: 4521 Comm: syz-executor.2 Not tainted 5.15.74-syzkaller-04383-g7f2e600bf63a #0 [ 96.195848][ T4521] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/11/2022 [ 96.205751][ T4521] Call Trace: [ 96.208868][ T4521] [ 96.211652][ T4521] dump_stack_lvl+0x151/0x1b7 [ 96.216158][ T4521] ? bfq_pos_tree_add_move+0x43e/0x43e [ 96.221458][ T4521] ? stack_trace_save+0x1f0/0x1f0 [ 96.226313][ T4521] ? __kernel_text_address+0x9a/0x110 [ 96.231523][ T4521] dump_stack+0x15/0x17 [ 96.235510][ T4521] should_fail+0x3c0/0x510 [ 96.239771][ T4521] should_fail_alloc_page+0x58/0x70 [ 96.244807][ T4521] __alloc_pages+0x1de/0x7c0 [ 96.249224][ T4521] ? stack_trace_save+0x12d/0x1f0 [ 96.254096][ T4521] ? stack_trace_snprint+0x100/0x100 [ 96.259204][ T4521] ? __count_vm_events+0x30/0x30 [ 96.263976][ T4521] ? __kasan_slab_alloc+0xc4/0xe0 [ 96.268841][ T4521] ? __kasan_slab_alloc+0xb2/0xe0 [ 96.273694][ T4521] ? kmem_cache_alloc+0x189/0x2f0 [ 96.278561][ T4521] ? anon_vma_fork+0x1b9/0x4f0 12:34:39 executing program 5: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) syz_clone(0x700000000000000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) [ 96.283164][ T4521] get_zeroed_page+0x19/0x40 [ 96.287591][ T4521] __pud_alloc+0x8b/0x260 [ 96.291751][ T4521] ? do_handle_mm_fault+0x2370/0x2370 [ 96.296960][ T4521] copy_page_range+0xd9e/0x1090 [ 96.301657][ T4521] ? pfn_valid+0x1e0/0x1e0 [ 96.305902][ T4521] dup_mmap+0x99f/0xea0 [ 96.309892][ T4521] ? __delayed_free_task+0x20/0x20 [ 96.314833][ T4521] ? mm_init+0x807/0x960 [ 96.318913][ T4521] dup_mm+0x91/0x330 [ 96.322649][ T4521] copy_mm+0x108/0x1b0 [ 96.326553][ T4521] copy_process+0x1295/0x3250 [ 96.331069][ T4521] ? proc_fail_nth_read+0x220/0x220 [ 96.336104][ T4521] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 96.341046][ T4521] ? vfs_write+0x9af/0x1050 [ 96.345395][ T4521] ? vmacache_update+0xb7/0x120 [ 96.350075][ T4521] kernel_clone+0x22d/0x990 [ 96.354411][ T4521] ? make_kuid+0x700/0x700 [ 96.358666][ T4521] ? trace_raw_output_bpf_trace_printk+0xd0/0xd0 [ 96.365001][ T4521] ? create_io_thread+0x1e0/0x1e0 [ 96.369862][ T4521] __x64_sys_clone+0x289/0x310 [ 96.374465][ T4521] ? __do_sys_vfork+0x130/0x130 [ 96.379156][ T4521] ? debug_smp_processor_id+0x17/0x20 [ 96.384703][ T4521] do_syscall_64+0x44/0xd0 [ 96.388959][ T4521] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 96.394681][ T4521] RIP: 0033:0x7f931dc135a9 [ 96.398934][ T4521] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 96.418383][ T4521] RSP: 002b:00007f931c987118 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 96.426622][ T4521] RAX: ffffffffffffffda RBX: 00007f931dd33f80 RCX: 00007f931dc135a9 [ 96.434436][ T4521] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 96.442242][ T4521] RBP: 00007f931c9871d0 R08: 0000000000000000 R09: 0000000000000000 [ 96.450057][ T4521] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 96.457866][ T4521] R13: 00007fffd2d3bdcf R14: 00007f931c987300 R15: 0000000000022000 [ 96.465677][ T4521] 12:34:39 executing program 1: perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x12) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cgroup.controllers\x00', 0x100002, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000140)='memory.low\x00', 0x2, 0x0) write$cgroup_int(r0, &(0x7f0000000200), 0x12) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f0000000080)=0x3) syz_clone(0x74809480, 0x0, 0x4100, &(0x7f0000000000), 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000400000000000000000000850000006d000000850000000f00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000080)='sys_exit\x00', r1}, 0x10) 12:34:39 executing program 5: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) syz_clone(0x800000000000000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 12:34:39 executing program 0: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfeffffff, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 12:34:39 executing program 4: perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x12) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cgroup.controllers\x00', 0x100002, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000140)='memory.low\x00', 0x2, 0x0) write$cgroup_int(r0, &(0x7f0000000200), 0x12) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f0000000080)=0x3) syz_clone(0x74809480, 0x0, 0x4100, &(0x7f0000000000), 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000400000000000000000000850000006d000000850000000f00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000080)='sys_exit\x00', r1}, 0x10) 12:34:39 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'\x00', 0x52d35ce30131f272}) (async) ioctl$TUNSETLINK(r0, 0x400454cd, 0x108) close(r0) 12:34:39 executing program 2: syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 25) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 12:34:39 executing program 0: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 12:34:39 executing program 0: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 12:34:39 executing program 5: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) syz_clone(0x900000000000000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 12:34:39 executing program 0: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 96.574125][ T4566] FAULT_INJECTION: forcing a failure. [ 96.574125][ T4566] name fail_page_alloc, interval 1, probability 0, space 0, times 0 12:34:39 executing program 5: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) syz_clone(0x1100000000000000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 12:34:39 executing program 0: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x10}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 96.655087][ T4566] CPU: 1 PID: 4566 Comm: syz-executor.2 Not tainted 5.15.74-syzkaller-04383-g7f2e600bf63a #0 [ 96.665099][ T4566] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/11/2022 [ 96.675166][ T4566] Call Trace: [ 96.678297][ T4566] [ 96.681069][ T4566] dump_stack_lvl+0x151/0x1b7 [ 96.685582][ T4566] ? bfq_pos_tree_add_move+0x43e/0x43e [ 96.690885][ T4566] ? __kasan_check_write+0x14/0x20 [ 96.695823][ T4566] ? __set_page_owner+0x2ee/0x310 [ 96.700685][ T4566] dump_stack+0x15/0x17 [ 96.704674][ T4566] should_fail+0x3c0/0x510 [ 96.708931][ T4566] should_fail_alloc_page+0x58/0x70 [ 96.713969][ T4566] __alloc_pages+0x1de/0x7c0 [ 96.718393][ T4566] ? __count_vm_events+0x30/0x30 [ 96.723165][ T4566] ? __count_vm_events+0x30/0x30 [ 96.727935][ T4566] ? __kasan_check_write+0x14/0x20 [ 96.732883][ T4566] ? _raw_spin_lock+0xa3/0x1b0 [ 96.737489][ T4566] __pmd_alloc+0xb1/0x550 [ 96.741652][ T4566] ? kmem_cache_alloc+0x189/0x2f0 [ 96.746505][ T4566] ? anon_vma_fork+0x1b9/0x4f0 [ 96.751108][ T4566] ? __pud_alloc+0x260/0x260 12:34:40 executing program 1: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) syz_clone(0x1ffff000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 12:34:40 executing program 0: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x400001}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 12:34:40 executing program 0: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1004000}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 96.755534][ T4566] ? __pud_alloc+0x218/0x260 [ 96.759964][ T4566] ? do_handle_mm_fault+0x2370/0x2370 [ 96.765175][ T4566] copy_page_range+0xd04/0x1090 [ 96.769861][ T4566] ? pfn_valid+0x1e0/0x1e0 [ 96.774111][ T4566] dup_mmap+0x99f/0xea0 [ 96.778109][ T4566] ? __delayed_free_task+0x20/0x20 [ 96.783136][ T4566] ? mm_init+0x807/0x960 [ 96.787238][ T4566] dup_mm+0x91/0x330 [ 96.790946][ T4566] copy_mm+0x108/0x1b0 [ 96.794858][ T4566] copy_process+0x1295/0x3250 [ 96.799379][ T4566] ? proc_fail_nth_write+0x213/0x290 [ 96.804495][ T4566] ? proc_fail_nth_read+0x220/0x220 [ 96.809522][ T4566] ? check_kill_permission+0x37/0x490 [ 96.814724][ T4566] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 96.819684][ T4566] ? group_send_sig_info+0xa4/0x2f0 [ 96.824718][ T4566] ? vmacache_update+0xb7/0x120 [ 96.829409][ T4566] kernel_clone+0x22d/0x990 [ 96.833735][ T4566] ? create_io_thread+0x1e0/0x1e0 [ 96.838596][ T4566] ? __mutex_lock_slowpath+0x10/0x10 [ 96.843729][ T4566] __x64_sys_clone+0x289/0x310 [ 96.848313][ T4566] ? __do_sys_vfork+0x130/0x130 [ 96.853002][ T4566] ? debug_smp_processor_id+0x17/0x20 [ 96.858207][ T4566] do_syscall_64+0x44/0xd0 [ 96.862458][ T4566] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 96.868210][ T4566] RIP: 0033:0x7f931dc135a9 [ 96.872495][ T4566] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 96.891974][ T4566] RSP: 002b:00007f931c987118 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 96.900214][ T4566] RAX: ffffffffffffffda RBX: 00007f931dd33f80 RCX: 00007f931dc135a9 [ 96.908031][ T4566] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 96.915836][ T4566] RBP: 00007f931c9871d0 R08: 0000000000000000 R09: 0000000000000000 [ 96.923645][ T4566] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 96.931458][ T4566] R13: 00007fffd2d3bdcf R14: 00007f931c987300 R15: 0000000000022000 [ 96.939275][ T4566] 12:34:40 executing program 4: perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cgroup.controllers\x00', 0x100002, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000140)='memory.low\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f0000000200), 0x12) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000000080)=0x3) syz_clone(0x74809480, 0x0, 0x4100, &(0x7f0000000000), 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000400000000000000000000850000006d000000850000000f00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000080)='sys_exit\x00', r2}, 0x10) 12:34:40 executing program 0: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2000000}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 12:34:40 executing program 1: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) syz_clone(0x1ffff000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 12:34:40 executing program 5: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) syz_clone(0x1f00000000000000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 12:34:40 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'\x00', 0x52d35ce30131f272}) (async) ioctl$TUNSETLINK(r0, 0x400454cd, 0x108) (async) close(r0) 12:34:40 executing program 2: syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 26) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 12:34:40 executing program 0: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4000000}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 12:34:40 executing program 0: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x10000000}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 12:34:40 executing program 1: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) syz_clone(0x1ffff000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 12:34:40 executing program 5: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) syz_clone(0x2000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 12:34:40 executing program 1: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) syz_clone(0x1ffff000, 0x0, 0x0, 0x0, 0x0, 0x0) 12:34:40 executing program 1: syz_clone(0x1ffff000, 0x0, 0x0, 0x0, 0x0, 0x0) [ 97.041736][ T4604] FAULT_INJECTION: forcing a failure. [ 97.041736][ T4604] name failslab, interval 1, probability 0, space 0, times 0 [ 97.102323][ T4604] CPU: 1 PID: 4604 Comm: syz-executor.2 Not tainted 5.15.74-syzkaller-04383-g7f2e600bf63a #0 [ 97.112310][ T4604] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/11/2022 [ 97.122204][ T4604] Call Trace: [ 97.125417][ T4604] [ 97.128199][ T4604] dump_stack_lvl+0x151/0x1b7 [ 97.132710][ T4604] ? bfq_pos_tree_add_move+0x43e/0x43e [ 97.138000][ T4604] dump_stack+0x15/0x17 [ 97.142001][ T4604] should_fail+0x3c0/0x510 [ 97.146246][ T4604] ? mm_init+0x392/0x960 [ 97.150326][ T4604] __should_failslab+0x9f/0xe0 [ 97.154932][ T4604] should_failslab+0x9/0x20 [ 97.159259][ T4604] kmem_cache_alloc_trace+0x4a/0x310 [ 97.164385][ T4604] mm_init+0x392/0x960 [ 97.168285][ T4604] dup_mm+0x7d/0x330 [ 97.172027][ T4604] copy_mm+0x108/0x1b0 [ 97.175929][ T4604] copy_process+0x1295/0x3250 [ 97.180438][ T4604] ? proc_fail_nth_write+0x213/0x290 [ 97.185653][ T4604] ? proc_fail_nth_read+0x220/0x220 [ 97.192721][ T4604] ? check_kill_permission+0x37/0x490 [ 97.197998][ T4604] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 97.202971][ T4604] ? group_send_sig_info+0xa4/0x2f0 [ 97.207998][ T4604] ? vmacache_update+0xb7/0x120 [ 97.212683][ T4604] kernel_clone+0x22d/0x990 [ 97.217027][ T4604] ? create_io_thread+0x1e0/0x1e0 [ 97.221887][ T4604] ? __mutex_lock_slowpath+0x10/0x10 [ 97.227005][ T4604] __x64_sys_clone+0x289/0x310 [ 97.231606][ T4604] ? __do_sys_vfork+0x130/0x130 [ 97.236291][ T4604] ? debug_smp_processor_id+0x17/0x20 [ 97.241507][ T4604] do_syscall_64+0x44/0xd0 [ 97.245752][ T4604] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 97.251478][ T4604] RIP: 0033:0x7f931dc135a9 [ 97.255732][ T4604] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 97.275186][ T4604] RSP: 002b:00007f931c987118 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 97.283595][ T4604] RAX: ffffffffffffffda RBX: 00007f931dd33f80 RCX: 00007f931dc135a9 [ 97.291409][ T4604] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 97.299474][ T4604] RBP: 00007f931c9871d0 R08: 0000000000000000 R09: 0000000000000000 [ 97.307285][ T4604] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 97.315094][ T4604] R13: 00007fffd2d3bdcf R14: 00007f931c987300 R15: 0000000000022000 [ 97.322912][ T4604] 12:34:40 executing program 4: perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cgroup.controllers\x00', 0x100002, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000140)='memory.low\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f0000000200), 0x12) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000000080)=0x3) syz_clone(0x74809480, 0x0, 0x4100, &(0x7f0000000000), 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000400000000000000000000850000006d000000850000000f00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000080)='sys_exit\x00', r2}, 0x10) 12:34:40 executing program 0: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x20000000}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 12:34:40 executing program 5: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) syz_clone(0x6402000000000000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 12:34:40 executing program 1: syz_clone(0x1ffff000, 0x0, 0x0, 0x0, 0x0, 0x0) 12:34:40 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x210080, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'\x00', 0x52d35ce30131f272}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) close(r0) 12:34:40 executing program 2: syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 27) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 12:34:40 executing program 1: syz_clone(0x1ffff000, 0x0, 0x0, 0x0, 0x0, 0x0) 12:34:40 executing program 5: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) syz_clone(0x9b01000000000000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) [ 97.510976][ T4636] FAULT_INJECTION: forcing a failure. [ 97.510976][ T4636] name failslab, interval 1, probability 0, space 0, times 0 [ 97.530057][ T4636] CPU: 0 PID: 4636 Comm: syz-executor.2 Not tainted 5.15.74-syzkaller-04383-g7f2e600bf63a #0 [ 97.540048][ T4636] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/11/2022 [ 97.549932][ T4636] Call Trace: [ 97.553144][ T4636] [ 97.555921][ T4636] dump_stack_lvl+0x151/0x1b7 [ 97.560435][ T4636] ? bfq_pos_tree_add_move+0x43e/0x43e [ 97.565732][ T4636] dump_stack+0x15/0x17 [ 97.569720][ T4636] should_fail+0x3c0/0x510 [ 97.573975][ T4636] __should_failslab+0x9f/0xe0 [ 97.578660][ T4636] should_failslab+0x9/0x20 [ 97.582998][ T4636] kmem_cache_alloc+0x4f/0x2f0 [ 97.587599][ T4636] ? vm_area_dup+0x26/0x1d0 [ 97.591938][ T4636] vm_area_dup+0x26/0x1d0 [ 97.596106][ T4636] dup_mmap+0x6b8/0xea0 [ 97.600098][ T4636] ? __delayed_free_task+0x20/0x20 [ 97.605043][ T4636] ? mm_init+0x807/0x960 [ 97.609135][ T4636] dup_mm+0x91/0x330 [ 97.612856][ T4636] copy_mm+0x108/0x1b0 [ 97.616762][ T4636] copy_process+0x1295/0x3250 [ 97.621274][ T4636] ? proc_fail_nth_write+0x213/0x290 [ 97.626396][ T4636] ? proc_fail_nth_read+0x220/0x220 [ 97.631528][ T4636] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 97.636484][ T4636] ? vfs_write+0x9af/0x1050 [ 97.640860][ T4636] ? vmacache_update+0xb7/0x120 [ 97.645497][ T4636] kernel_clone+0x22d/0x990 [ 97.649854][ T4636] ? file_end_write+0x1b0/0x1b0 [ 97.654524][ T4636] ? __kasan_check_write+0x14/0x20 [ 97.659479][ T4636] ? create_io_thread+0x1e0/0x1e0 [ 97.664515][ T4636] ? __mutex_lock_slowpath+0x10/0x10 [ 97.669712][ T4636] __x64_sys_clone+0x289/0x310 [ 97.674312][ T4636] ? __do_sys_vfork+0x130/0x130 [ 97.679006][ T4636] ? debug_smp_processor_id+0x17/0x20 [ 97.684222][ T4636] do_syscall_64+0x44/0xd0 [ 97.688458][ T4636] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 97.694364][ T4636] RIP: 0033:0x7f931dc135a9 [ 97.698742][ T4636] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 97.718365][ T4636] RSP: 002b:00007f931c987118 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 97.726704][ T4636] RAX: ffffffffffffffda RBX: 00007f931dd33f80 RCX: 00007f931dc135a9 [ 97.734497][ T4636] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 97.742308][ T4636] RBP: 00007f931c9871d0 R08: 0000000000000000 R09: 0000000000000000 [ 97.750116][ T4636] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 12:34:40 executing program 0: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xfeffffff}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 12:34:41 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x210080, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'\x00', 0x52d35ce30131f272}) (async) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) (async) close(r0) 12:34:41 executing program 2: syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 12:34:41 executing program 1: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) [ 97.757936][ T4636] R13: 00007fffd2d3bdcf R14: 00007f931c987300 R15: 0000000000022000 [ 97.765745][ T4636] [ 97.808143][ T4654] FAULT_INJECTION: forcing a failure. [ 97.808143][ T4654] name failslab, interval 1, probability 0, space 0, times 0 [ 97.824647][ T4654] CPU: 1 PID: 4654 Comm: syz-executor.2 Not tainted 5.15.74-syzkaller-04383-g7f2e600bf63a #0 [ 97.834632][ T4654] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/11/2022 [ 97.844533][ T4654] Call Trace: [ 97.847645][ T4654] [ 97.850423][ T4654] dump_stack_lvl+0x151/0x1b7 [ 97.855068][ T4654] ? bfq_pos_tree_add_move+0x43e/0x43e [ 97.860362][ T4654] ? dump_stack+0x9/0x17 [ 97.864521][ T4654] dump_stack+0x15/0x17 [ 97.868603][ T4654] should_fail+0x3c0/0x510 [ 97.873290][ T4654] __should_failslab+0x9f/0xe0 [ 97.877887][ T4654] should_failslab+0x9/0x20 [ 97.882228][ T4654] kmem_cache_alloc+0x4f/0x2f0 [ 97.886824][ T4654] ? vm_area_dup+0x26/0x1d0 [ 97.891171][ T4654] ? __kasan_check_read+0x11/0x20 [ 97.896111][ T4654] vm_area_dup+0x26/0x1d0 [ 97.900277][ T4654] dup_mmap+0x6b8/0xea0 [ 97.904364][ T4654] ? __delayed_free_task+0x20/0x20 [ 97.909323][ T4654] ? mm_init+0x807/0x960 [ 97.913392][ T4654] dup_mm+0x91/0x330 [ 97.917127][ T4654] copy_mm+0x108/0x1b0 [ 97.921035][ T4654] copy_process+0x1295/0x3250 [ 97.925577][ T4654] ? proc_fail_nth_write+0x213/0x290 [ 97.930662][ T4654] ? proc_fail_nth_read+0x220/0x220 [ 97.935698][ T4654] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 97.940642][ T4654] ? vfs_write+0x9af/0x1050 [ 97.944981][ T4654] ? vmacache_update+0xb7/0x120 [ 97.949678][ T4654] kernel_clone+0x22d/0x990 [ 97.954015][ T4654] ? file_end_write+0x1b0/0x1b0 [ 97.958696][ T4654] ? __kasan_check_write+0x14/0x20 [ 97.963644][ T4654] ? create_io_thread+0x1e0/0x1e0 [ 97.968509][ T4654] ? __mutex_lock_slowpath+0x10/0x10 [ 97.973627][ T4654] __x64_sys_clone+0x289/0x310 [ 97.978315][ T4654] ? __do_sys_vfork+0x130/0x130 [ 97.983186][ T4654] ? debug_smp_processor_id+0x17/0x20 [ 97.988386][ T4654] do_syscall_64+0x44/0xd0 [ 97.992641][ T4654] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 97.999768][ T4654] RIP: 0033:0x7f931dc135a9 [ 98.004186][ T4654] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 98.024682][ T4654] RSP: 002b:00007f931c987118 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 98.032911][ T4654] RAX: ffffffffffffffda RBX: 00007f931dd33f80 RCX: 00007f931dc135a9 [ 98.040722][ T4654] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 98.048539][ T4654] RBP: 00007f931c9871d0 R08: 0000000000000000 R09: 0000000000000000 [ 98.056349][ T4654] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 98.064159][ T4654] R13: 00007fffd2d3bdcf R14: 00007f931c987300 R15: 0000000000022000 [ 98.072058][ T4654] 12:34:41 executing program 4: perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cgroup.controllers\x00', 0x100002, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000140)='memory.low\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f0000000200), 0x12) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000000080)=0x3) syz_clone(0x74809480, 0x0, 0x4100, &(0x7f0000000000), 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000400000000000000000000850000006d000000850000000f00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000080)='sys_exit\x00', r2}, 0x10) 12:34:41 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x210080, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'\x00', 0x52d35ce30131f272}) (async) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) (async) close(r0) 12:34:41 executing program 0: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xfffffffe}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 12:34:41 executing program 5: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) syz_clone(0xf5ffffff00000000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 12:34:41 executing program 1: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 12:34:41 executing program 2: syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 29) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 12:34:41 executing program 0: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x200000000}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 12:34:41 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0) write$cgroup_type(r1, &(0x7f0000000080), 0x11ffffce1) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x660c, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'macsec0\x00', 0x1000}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0) write$cgroup_type(r2, &(0x7f0000000080), 0x11ffffce1) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x660c, 0x0) ioctl$TUNATTACHFILTER(r2, 0x401054d5, &(0x7f00000000c0)={0x9, &(0x7f0000000040)=[{0x6, 0x7, 0x7f, 0x8}, {0x200, 0x0, 0x5, 0x2edae07f}, {0xd221, 0x1, 0x3, 0x1ff}, {0x81, 0x2, 0x8e, 0x6}, {0x0, 0x40, 0x1, 0x20}, {0x4, 0x1f, 0x40, 0x5}, {0x3, 0x0, 0x4, 0x5d3b}, {0x7f5, 0xe1, 0x0, 0x3}, {0x1000, 0xeb, 0x2, 0xb}]}) close(r0) [ 98.250832][ T4673] FAULT_INJECTION: forcing a failure. [ 98.250832][ T4673] name failslab, interval 1, probability 0, space 0, times 0 [ 98.275707][ T4673] CPU: 1 PID: 4673 Comm: syz-executor.2 Not tainted 5.15.74-syzkaller-04383-g7f2e600bf63a #0 [ 98.285787][ T4673] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/11/2022 [ 98.295684][ T4673] Call Trace: [ 98.298795][ T4673] [ 98.301572][ T4673] dump_stack_lvl+0x151/0x1b7 [ 98.306082][ T4673] ? bfq_pos_tree_add_move+0x43e/0x43e [ 98.311380][ T4673] dump_stack+0x15/0x17 [ 98.315373][ T4673] should_fail+0x3c0/0x510 [ 98.319625][ T4673] __should_failslab+0x9f/0xe0 [ 98.324225][ T4673] should_failslab+0x9/0x20 [ 98.328560][ T4673] kmem_cache_alloc+0x4f/0x2f0 [ 98.333161][ T4673] ? vm_area_dup+0x26/0x1d0 [ 98.337500][ T4673] ? __kasan_check_read+0x11/0x20 [ 98.342363][ T4673] vm_area_dup+0x26/0x1d0 [ 98.346529][ T4673] dup_mmap+0x6b8/0xea0 [ 98.350521][ T4673] ? __delayed_free_task+0x20/0x20 [ 98.355466][ T4673] ? mm_init+0x807/0x960 [ 98.359546][ T4673] dup_mm+0x91/0x330 [ 98.363281][ T4673] copy_mm+0x108/0x1b0 [ 98.367184][ T4673] copy_process+0x1295/0x3250 [ 98.371700][ T4673] ? proc_fail_nth_write+0x213/0x290 [ 98.376828][ T4673] ? proc_fail_nth_read+0x220/0x220 [ 98.381852][ T4673] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 98.386799][ T4673] ? vfs_write+0x9af/0x1050 [ 98.391139][ T4673] ? vmacache_update+0xb7/0x120 [ 98.395824][ T4673] kernel_clone+0x22d/0x990 [ 98.400164][ T4673] ? file_end_write+0x1b0/0x1b0 [ 98.404864][ T4673] ? __kasan_check_write+0x14/0x20 [ 98.409811][ T4673] ? create_io_thread+0x1e0/0x1e0 [ 98.414757][ T4673] ? __mutex_lock_slowpath+0x10/0x10 [ 98.419875][ T4673] __x64_sys_clone+0x289/0x310 [ 98.424477][ T4673] ? __do_sys_vfork+0x130/0x130 [ 98.429165][ T4673] ? debug_smp_processor_id+0x17/0x20 [ 98.434370][ T4673] do_syscall_64+0x44/0xd0 [ 98.438623][ T4673] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 98.444438][ T4673] RIP: 0033:0x7f931dc135a9 [ 98.448698][ T4673] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 98.468136][ T4673] RSP: 002b:00007f931c987118 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 98.476384][ T4673] RAX: ffffffffffffffda RBX: 00007f931dd33f80 RCX: 00007f931dc135a9 [ 98.484197][ T4673] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 98.491997][ T4673] RBP: 00007f931c9871d0 R08: 0000000000000000 R09: 0000000000000000 12:34:41 executing program 5: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) syz_clone(0xfbffffff00000000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 12:34:41 executing program 1: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 12:34:41 executing program 0: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1000001000}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 98.499807][ T4673] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 98.507705][ T4673] R13: 00007fffd2d3bdcf R14: 00007f931c987300 R15: 0000000000022000 [ 98.515524][ T4673] 12:34:41 executing program 0: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2000000000}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 12:34:42 executing program 4: write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x12) r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cgroup.controllers\x00', 0x100002, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000140)='memory.low\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f0000000200), 0x12) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000000080)=0x3) syz_clone(0x74809480, 0x0, 0x4100, &(0x7f0000000000), 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000400000000000000000000850000006d000000850000000f00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000080)='sys_exit\x00', r2}, 0x10) 12:34:42 executing program 1: perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x12) r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cgroup.controllers\x00', 0x100002, 0x0) write$cgroup_int(r1, &(0x7f0000000200), 0x12) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000000080)=0x3) syz_clone(0x74809480, 0x0, 0x4100, &(0x7f0000000000), 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000400000000000000000000850000006d000000850000000f00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000080)='sys_exit\x00', r2}, 0x10) 12:34:42 executing program 5: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) syz_clone(0xff0f010000000000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 12:34:42 executing program 0: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x10000010000000}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 12:34:42 executing program 2: syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 30) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 12:34:42 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0) write$cgroup_type(r1, &(0x7f0000000080), 0x11ffffce1) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x660c, 0x0) (async) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'macsec0\x00', 0x1000}) (async) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0) write$cgroup_type(r2, &(0x7f0000000080), 0x11ffffce1) (async) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x660c, 0x0) (async) ioctl$TUNATTACHFILTER(r2, 0x401054d5, &(0x7f00000000c0)={0x9, &(0x7f0000000040)=[{0x6, 0x7, 0x7f, 0x8}, {0x200, 0x0, 0x5, 0x2edae07f}, {0xd221, 0x1, 0x3, 0x1ff}, {0x81, 0x2, 0x8e, 0x6}, {0x0, 0x40, 0x1, 0x20}, {0x4, 0x1f, 0x40, 0x5}, {0x3, 0x0, 0x4, 0x5d3b}, {0x7f5, 0xe1, 0x0, 0x3}, {0x1000, 0xeb, 0x2, 0xb}]}) (async) close(r0) 12:34:42 executing program 5: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) syz_clone(0xffffffff00000000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 12:34:42 executing program 0: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x40000100000000}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 98.937448][ T4706] FAULT_INJECTION: forcing a failure. [ 98.937448][ T4706] name failslab, interval 1, probability 0, space 0, times 0 12:34:42 executing program 5: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) syz_clone(0x0, 0x0, 0x2, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 12:34:42 executing program 0: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x400000000000000}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 99.028561][ T4706] CPU: 0 PID: 4706 Comm: syz-executor.2 Not tainted 5.15.74-syzkaller-04383-g7f2e600bf63a #0 [ 99.038648][ T4706] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/11/2022 [ 99.048540][ T4706] Call Trace: [ 99.051663][ T4706] [ 99.054441][ T4706] dump_stack_lvl+0x151/0x1b7 [ 99.058953][ T4706] ? bfq_pos_tree_add_move+0x43e/0x43e [ 99.064334][ T4706] dump_stack+0x15/0x17 [ 99.068329][ T4706] should_fail+0x3c0/0x510 [ 99.072576][ T4706] __should_failslab+0x9f/0xe0 [ 99.077174][ T4706] should_failslab+0x9/0x20 [ 99.081521][ T4706] kmem_cache_alloc+0x4f/0x2f0 [ 99.086113][ T4706] ? vm_area_dup+0x26/0x1d0 [ 99.090456][ T4706] vm_area_dup+0x26/0x1d0 [ 99.094622][ T4706] dup_mmap+0x6b8/0xea0 [ 99.098617][ T4706] ? __delayed_free_task+0x20/0x20 [ 99.103562][ T4706] ? mm_init+0x807/0x960 [ 99.107638][ T4706] dup_mm+0x91/0x330 [ 99.111371][ T4706] copy_mm+0x108/0x1b0 [ 99.115279][ T4706] copy_process+0x1295/0x3250 [ 99.119796][ T4706] ? proc_fail_nth_write+0x213/0x290 [ 99.124918][ T4706] ? proc_fail_nth_read+0x220/0x220 [ 99.129945][ T4706] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 99.134893][ T4706] ? vfs_write+0x9af/0x1050 [ 99.139231][ T4706] ? vmacache_update+0xb7/0x120 [ 99.143918][ T4706] kernel_clone+0x22d/0x990 [ 99.148262][ T4706] ? file_end_write+0x1b0/0x1b0 [ 99.152944][ T4706] ? __kasan_check_write+0x14/0x20 [ 99.157892][ T4706] ? create_io_thread+0x1e0/0x1e0 [ 99.162751][ T4706] ? __mutex_lock_slowpath+0x10/0x10 [ 99.167873][ T4706] __x64_sys_clone+0x289/0x310 [ 99.172472][ T4706] ? __do_sys_vfork+0x130/0x130 [ 99.177161][ T4706] ? debug_smp_processor_id+0x17/0x20 [ 99.182368][ T4706] do_syscall_64+0x44/0xd0 [ 99.186675][ T4706] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 99.192351][ T4706] RIP: 0033:0x7f931dc135a9 [ 99.196601][ T4706] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 99.216043][ T4706] RSP: 002b:00007f931c987118 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 12:34:42 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) (async, rerun: 64) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0) (rerun: 64) write$cgroup_type(r1, &(0x7f0000000080), 0x11ffffce1) (async) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x660c, 0x0) (async, rerun: 64) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'macsec0\x00', 0x1000}) (async, rerun: 64) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) (async, rerun: 64) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0) (rerun: 64) write$cgroup_type(r2, &(0x7f0000000080), 0x11ffffce1) (async) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x660c, 0x0) ioctl$TUNATTACHFILTER(r2, 0x401054d5, &(0x7f00000000c0)={0x9, &(0x7f0000000040)=[{0x6, 0x7, 0x7f, 0x8}, {0x200, 0x0, 0x5, 0x2edae07f}, {0xd221, 0x1, 0x3, 0x1ff}, {0x81, 0x2, 0x8e, 0x6}, {0x0, 0x40, 0x1, 0x20}, {0x4, 0x1f, 0x40, 0x5}, {0x3, 0x0, 0x4, 0x5d3b}, {0x7f5, 0xe1, 0x0, 0x3}, {0x1000, 0xeb, 0x2, 0xb}]}) close(r0) 12:34:42 executing program 0: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1000000000000000}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 99.224284][ T4706] RAX: ffffffffffffffda RBX: 00007f931dd33f80 RCX: 00007f931dc135a9 [ 99.232099][ T4706] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 99.239908][ T4706] RBP: 00007f931c9871d0 R08: 0000000000000000 R09: 0000000000000000 [ 99.247720][ T4706] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 99.255530][ T4706] R13: 00007fffd2d3bdcf R14: 00007f931c987300 R15: 0000000000022000 [ 99.263344][ T4706] 12:34:43 executing program 4: write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x12) r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cgroup.controllers\x00', 0x100002, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000140)='memory.low\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f0000000200), 0x12) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000000080)=0x3) syz_clone(0x74809480, 0x0, 0x4100, &(0x7f0000000000), 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000400000000000000000000850000006d000000850000000f00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000080)='sys_exit\x00', r2}, 0x10) 12:34:43 executing program 1: perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x12) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x74809480, 0x0, 0x4100, &(0x7f0000000000), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000400000000000000000000850000006d000000850000000f00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 12:34:43 executing program 0: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xfeffffff00000000}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 12:34:43 executing program 5: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) syz_clone(0x0, 0x0, 0x7, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 12:34:43 executing program 2: syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 31) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 12:34:43 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'vxcan1\x00', 0x2}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'\x00', 0x52d35ce30131f272}) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f00000000c0)=0x1) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) close(r0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0) write$cgroup_type(r1, &(0x7f0000000080), 0x11ffffce1) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x3, [@typedef={0x3, 0x0, 0x0, 0x8, 0x3}, @const={0x3, 0x0, 0x0, 0xa, 0xb}, @var={0xb, 0x0, 0x0, 0xe, 0x3}]}, {0x0, [0x30]}}, &(0x7f00000002c0)=""/90, 0x43, 0x5a, 0x1}, 0x20) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x660c, 0x0) ioctl$TUNSETPERSIST(r1, 0x400454cb, 0x0) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000040), 0x10) close(r2) 12:34:43 executing program 0: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 12:34:43 executing program 5: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) syz_clone(0x0, 0x0, 0x8, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 12:34:43 executing program 0: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 12:34:43 executing program 5: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) syz_clone(0x0, 0x0, 0x9, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 12:34:43 executing program 0: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 12:34:43 executing program 5: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) syz_clone(0x0, 0x0, 0x11, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) [ 99.919904][ T4769] FAULT_INJECTION: forcing a failure. [ 99.919904][ T4769] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 99.976254][ T4769] CPU: 0 PID: 4769 Comm: syz-executor.2 Not tainted 5.15.74-syzkaller-04383-g7f2e600bf63a #0 [ 99.986247][ T4769] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/11/2022 [ 99.996148][ T4769] Call Trace: [ 99.999287][ T4769] [ 100.002042][ T4769] dump_stack_lvl+0x151/0x1b7 [ 100.006651][ T4769] ? bfq_pos_tree_add_move+0x43e/0x43e [ 100.011937][ T4769] ? stack_trace_save+0x12d/0x1f0 [ 100.016803][ T4769] ? stack_trace_snprint+0x100/0x100 [ 100.021929][ T4769] dump_stack+0x15/0x17 [ 100.025910][ T4769] should_fail+0x3c0/0x510 [ 100.030171][ T4769] should_fail_alloc_page+0x58/0x70 [ 100.035292][ T4769] __alloc_pages+0x1de/0x7c0 [ 100.039715][ T4769] ? vm_area_dup+0x26/0x1d0 [ 100.044055][ T4769] ? copy_mm+0x108/0x1b0 [ 100.048135][ T4769] ? __count_vm_events+0x30/0x30 [ 100.052916][ T4769] ? memset+0x35/0x40 [ 100.056728][ T4769] ? copy_page_range+0xed3/0x1090 [ 100.061589][ T4769] allocate_slab+0x62/0x580 [ 100.065930][ T4769] ___slab_alloc+0x2e2/0x6f0 [ 100.070352][ T4769] ? vm_area_dup+0x26/0x1d0 [ 100.074695][ T4769] ? vm_area_dup+0x26/0x1d0 [ 100.079040][ T4769] __slab_alloc+0x4a/0x90 [ 100.083202][ T4769] kmem_cache_alloc+0x205/0x2f0 [ 100.087885][ T4769] ? vm_area_dup+0x26/0x1d0 [ 100.092228][ T4769] vm_area_dup+0x26/0x1d0 [ 100.096392][ T4769] dup_mmap+0x6b8/0xea0 [ 100.100383][ T4769] ? __delayed_free_task+0x20/0x20 [ 100.105430][ T4769] ? mm_init+0x807/0x960 [ 100.109496][ T4769] dup_mm+0x91/0x330 [ 100.113236][ T4769] copy_mm+0x108/0x1b0 [ 100.117133][ T4769] copy_process+0x1295/0x3250 [ 100.121648][ T4769] ? proc_fail_nth_read+0x220/0x220 [ 100.126694][ T4769] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 100.131714][ T4769] ? vfs_write+0x9af/0x1050 [ 100.136054][ T4769] ? vmacache_update+0xb7/0x120 [ 100.140744][ T4769] kernel_clone+0x22d/0x990 [ 100.145092][ T4769] ? make_kuid+0x700/0x700 [ 100.149334][ T4769] ? trace_raw_output_bpf_trace_printk+0xd0/0xd0 [ 100.155495][ T4769] ? create_io_thread+0x1e0/0x1e0 [ 100.160358][ T4769] __x64_sys_clone+0x289/0x310 [ 100.165062][ T4769] ? __do_sys_vfork+0x130/0x130 [ 100.169759][ T4769] ? debug_smp_processor_id+0x17/0x20 [ 100.174952][ T4769] do_syscall_64+0x44/0xd0 [ 100.179202][ T4769] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 100.184932][ T4769] RIP: 0033:0x7f931dc135a9 [ 100.189186][ T4769] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 100.208623][ T4769] RSP: 002b:00007f931c987118 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 100.216864][ T4769] RAX: ffffffffffffffda RBX: 00007f931dd33f80 RCX: 00007f931dc135a9 [ 100.224678][ T4769] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 100.232486][ T4769] RBP: 00007f931c9871d0 R08: 0000000000000000 R09: 0000000000000000 [ 100.240303][ T4769] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 100.248114][ T4769] R13: 00007fffd2d3bdcf R14: 00007f931c987300 R15: 0000000000022000 [ 100.256013][ T4769] 12:34:43 executing program 4: write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x12) r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cgroup.controllers\x00', 0x100002, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000140)='memory.low\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f0000000200), 0x12) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000000080)=0x3) syz_clone(0x74809480, 0x0, 0x4100, &(0x7f0000000000), 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000400000000000000000000850000006d000000850000000f00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000080)='sys_exit\x00', r2}, 0x10) 12:34:43 executing program 1: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) syz_clone(0x20200, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 12:34:43 executing program 0: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x400001}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 12:34:43 executing program 5: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) syz_clone(0x0, 0x0, 0x70, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 12:34:43 executing program 2: syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 32) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 12:34:43 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'vxcan1\x00', 0x2}) (async, rerun: 64) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'\x00', 0x52d35ce30131f272}) (async, rerun: 64) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f00000000c0)=0x1) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) (async) close(r0) (async, rerun: 64) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0) (rerun: 64) write$cgroup_type(r1, &(0x7f0000000080), 0x11ffffce1) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x3, [@typedef={0x3, 0x0, 0x0, 0x8, 0x3}, @const={0x3, 0x0, 0x0, 0xa, 0xb}, @var={0xb, 0x0, 0x0, 0xe, 0x3}]}, {0x0, [0x30]}}, &(0x7f00000002c0)=""/90, 0x43, 0x5a, 0x1}, 0x20) (async) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x660c, 0x0) (async) ioctl$TUNSETPERSIST(r1, 0x400454cb, 0x0) (async) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000040), 0x10) close(r2) 12:34:43 executing program 0: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1004000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 12:34:43 executing program 5: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) syz_clone(0x0, 0x0, 0x19b, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 12:34:43 executing program 0: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 12:34:43 executing program 5: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) syz_clone(0x0, 0x0, 0x264, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 12:34:43 executing program 1: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) syz_clone(0x20200, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 12:34:44 executing program 0: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 100.629093][ T4795] FAULT_INJECTION: forcing a failure. [ 100.629093][ T4795] name failslab, interval 1, probability 0, space 0, times 0 [ 100.707691][ T4795] CPU: 1 PID: 4795 Comm: syz-executor.2 Not tainted 5.15.74-syzkaller-04383-g7f2e600bf63a #0 [ 100.717685][ T4795] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/11/2022 [ 100.727579][ T4795] Call Trace: [ 100.730701][ T4795] [ 100.733479][ T4795] dump_stack_lvl+0x151/0x1b7 [ 100.737991][ T4795] ? bfq_pos_tree_add_move+0x43e/0x43e [ 100.743281][ T4795] ? do_syscall_64+0x44/0xd0 [ 100.747720][ T4795] dump_stack+0x15/0x17 [ 100.751707][ T4795] should_fail+0x3c0/0x510 [ 100.755960][ T4795] __should_failslab+0x9f/0xe0 [ 100.760557][ T4795] should_failslab+0x9/0x20 [ 100.764896][ T4795] kmem_cache_alloc+0x4f/0x2f0 [ 100.769497][ T4795] ? anon_vma_clone+0xa1/0x4f0 [ 100.774097][ T4795] anon_vma_clone+0xa1/0x4f0 [ 100.778613][ T4795] anon_vma_fork+0x91/0x4f0 [ 100.783043][ T4795] ? anon_vma_name+0x4c/0x70 [ 100.787468][ T4795] dup_mmap+0x750/0xea0 [ 100.791456][ T4795] ? __delayed_free_task+0x20/0x20 [ 100.796403][ T4795] ? mm_init+0x807/0x960 [ 100.800481][ T4795] dup_mm+0x91/0x330 [ 100.804215][ T4795] copy_mm+0x108/0x1b0 [ 100.808125][ T4795] copy_process+0x1295/0x3250 [ 100.812633][ T4795] ? proc_fail_nth_write+0x213/0x290 [ 100.817761][ T4795] ? proc_fail_nth_read+0x220/0x220 [ 100.822799][ T4795] ? check_kill_permission+0x37/0x490 [ 100.827997][ T4795] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 100.832962][ T4795] ? group_send_sig_info+0xa4/0x2f0 [ 100.837977][ T4795] ? vmacache_update+0xb7/0x120 [ 100.842747][ T4795] kernel_clone+0x22d/0x990 [ 100.847086][ T4795] ? create_io_thread+0x1e0/0x1e0 [ 100.851949][ T4795] ? __mutex_lock_slowpath+0x10/0x10 [ 100.857076][ T4795] __x64_sys_clone+0x289/0x310 [ 100.861668][ T4795] ? __do_sys_vfork+0x130/0x130 [ 100.866353][ T4795] ? debug_smp_processor_id+0x17/0x20 [ 100.871651][ T4795] do_syscall_64+0x44/0xd0 [ 100.875990][ T4795] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 100.881714][ T4795] RIP: 0033:0x7f931dc135a9 [ 100.885970][ T4795] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 100.905410][ T4795] RSP: 002b:00007f931c987118 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 100.913655][ T4795] RAX: ffffffffffffffda RBX: 00007f931dd33f80 RCX: 00007f931dc135a9 [ 100.921575][ T4795] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 100.929364][ T4795] RBP: 00007f931c9871d0 R08: 0000000000000000 R09: 0000000000000000 [ 100.937170][ T4795] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 100.944978][ T4795] R13: 00007fffd2d3bdcf R14: 00007f931c987300 R15: 0000000000022000 [ 100.952796][ T4795] 12:34:44 executing program 4: perf_event_open(0x0, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x12) r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cgroup.controllers\x00', 0x100002, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000140)='memory.low\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f0000000200), 0x12) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000000080)=0x3) syz_clone(0x74809480, 0x0, 0x4100, &(0x7f0000000000), 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000400000000000000000000850000006d000000850000000f00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000080)='sys_exit\x00', r2}, 0x10) 12:34:44 executing program 5: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) syz_clone(0x0, 0x0, 0x700, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 12:34:44 executing program 0: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 12:34:44 executing program 1: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) syz_clone(0x20200, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 12:34:44 executing program 2: syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 33) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 12:34:44 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'vxcan1\x00', 0x2}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'\x00', 0x52d35ce30131f272}) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f00000000c0)=0x1) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) close(r0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0) write$cgroup_type(r1, &(0x7f0000000080), 0x11ffffce1) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x3, [@typedef={0x3, 0x0, 0x0, 0x8, 0x3}, @const={0x3, 0x0, 0x0, 0xa, 0xb}, @var={0xb, 0x0, 0x0, 0xe, 0x3}]}, {0x0, [0x30]}}, &(0x7f00000002c0)=""/90, 0x43, 0x5a, 0x1}, 0x20) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x660c, 0x0) ioctl$TUNSETPERSIST(r1, 0x400454cb, 0x0) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000040), 0x10) close(r2) openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'vxcan1\x00', 0x2}) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'\x00', 0x52d35ce30131f272}) (async) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f00000000c0)=0x1) (async) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) (async) close(r0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0) (async) write$cgroup_type(r1, &(0x7f0000000080), 0x11ffffce1) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x3, [@typedef={0x3, 0x0, 0x0, 0x8, 0x3}, @const={0x3, 0x0, 0x0, 0xa, 0xb}, @var={0xb, 0x0, 0x0, 0xe, 0x3}]}, {0x0, [0x30]}}, &(0x7f00000002c0)=""/90, 0x43, 0x5a, 0x1}, 0x20) (async) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x660c, 0x0) (async) ioctl$TUNSETPERSIST(r1, 0x400454cb, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000040), 0x10) (async) close(r2) (async) 12:34:44 executing program 5: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) syz_clone(0x0, 0x0, 0x900, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 12:34:44 executing program 0: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x20000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 12:34:44 executing program 1: perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x12) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x74809480, 0x0, 0x4100, &(0x7f0000000000), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000400000000000000000000850000006d000000850000000f00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 12:34:44 executing program 0: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xfeffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 101.135832][ T4819] FAULT_INJECTION: forcing a failure. [ 101.135832][ T4819] name failslab, interval 1, probability 0, space 0, times 0 [ 101.200348][ T4819] CPU: 1 PID: 4819 Comm: syz-executor.2 Not tainted 5.15.74-syzkaller-04383-g7f2e600bf63a #0 [ 101.210426][ T4819] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/11/2022 [ 101.220325][ T4819] Call Trace: [ 101.223444][ T4819] [ 101.226220][ T4819] dump_stack_lvl+0x151/0x1b7 [ 101.230739][ T4819] ? bfq_pos_tree_add_move+0x43e/0x43e [ 101.236027][ T4819] ? do_syscall_64+0x44/0xd0 [ 101.240453][ T4819] dump_stack+0x15/0x17 [ 101.244443][ T4819] should_fail+0x3c0/0x510 [ 101.248696][ T4819] __should_failslab+0x9f/0xe0 [ 101.253294][ T4819] should_failslab+0x9/0x20 [ 101.257636][ T4819] kmem_cache_alloc+0x4f/0x2f0 [ 101.262417][ T4819] ? anon_vma_clone+0xa1/0x4f0 [ 101.267008][ T4819] anon_vma_clone+0xa1/0x4f0 [ 101.271440][ T4819] anon_vma_fork+0x91/0x4f0 [ 101.275784][ T4819] ? anon_vma_name+0x4c/0x70 [ 101.280200][ T4819] dup_mmap+0x750/0xea0 [ 101.284192][ T4819] ? __delayed_free_task+0x20/0x20 [ 101.289232][ T4819] ? mm_init+0x807/0x960 [ 101.293310][ T4819] dup_mm+0x91/0x330 [ 101.297043][ T4819] copy_mm+0x108/0x1b0 [ 101.301004][ T4819] copy_process+0x1295/0x3250 [ 101.305458][ T4819] ? proc_fail_nth_write+0x213/0x290 [ 101.310576][ T4819] ? proc_fail_nth_read+0x220/0x220 [ 101.315610][ T4819] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 101.320563][ T4819] ? vfs_write+0x9af/0x1050 [ 101.324901][ T4819] ? vmacache_update+0xb7/0x120 [ 101.329583][ T4819] kernel_clone+0x22d/0x990 [ 101.333925][ T4819] ? file_end_write+0x1b0/0x1b0 [ 101.338615][ T4819] ? __kasan_check_write+0x14/0x20 [ 101.343557][ T4819] ? create_io_thread+0x1e0/0x1e0 [ 101.348416][ T4819] ? __mutex_lock_slowpath+0x10/0x10 [ 101.353537][ T4819] __x64_sys_clone+0x289/0x310 [ 101.358146][ T4819] ? __do_sys_vfork+0x130/0x130 [ 101.362823][ T4819] ? debug_smp_processor_id+0x17/0x20 [ 101.368033][ T4819] do_syscall_64+0x44/0xd0 [ 101.372286][ T4819] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 101.378029][ T4819] RIP: 0033:0x7f931dc135a9 [ 101.382271][ T4819] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 101.401706][ T4819] RSP: 002b:00007f931c987118 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 101.410124][ T4819] RAX: ffffffffffffffda RBX: 00007f931dd33f80 RCX: 00007f931dc135a9 [ 101.417936][ T4819] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 101.425745][ T4819] RBP: 00007f931c9871d0 R08: 0000000000000000 R09: 0000000000000000 [ 101.433560][ T4819] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 101.441367][ T4819] R13: 00007fffd2d3bdcf R14: 00007f931c987300 R15: 0000000000022000 12:34:44 executing program 5: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) syz_clone(0x0, 0x0, 0x1100, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 12:34:44 executing program 0: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xfffffffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 101.450457][ T4819] 12:34:45 executing program 4: perf_event_open(0x0, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x12) r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cgroup.controllers\x00', 0x100002, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000140)='memory.low\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f0000000200), 0x12) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000000080)=0x3) syz_clone(0x74809480, 0x0, 0x4100, &(0x7f0000000000), 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000400000000000000000000850000006d000000850000000f00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000080)='sys_exit\x00', r2}, 0x10) 12:34:45 executing program 2: syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 34) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 12:34:45 executing program 0: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x200000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 12:34:45 executing program 5: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) syz_clone(0x0, 0x0, 0x1f00, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 12:34:45 executing program 3: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'\x00', 0x52d35ce30131f272}) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x4b0402, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'nr0\x00', 0x4000}) socketpair(0x8, 0x6, 0x5, &(0x7f0000000180)) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0) write$cgroup_type(r1, &(0x7f0000000080), 0x11ffffce1) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x660c, 0x0) ioctl$TUNSETVNETLE(r1, 0x400454dc, &(0x7f00000000c0)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0) write$cgroup_type(r3, &(0x7f0000000080), 0x11ffffce1) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x660c, 0x0) ioctl$TUNSETNOCSUM(r3, 0x400454c8, 0x1) write$cgroup_type(r2, &(0x7f0000000080), 0x11ffffce1) perf_event_open(&(0x7f0000000240)={0x3, 0x80, 0x2, 0x80, 0x4e, 0x8, 0x0, 0x1, 0xc905, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x5, 0x2, @perf_config_ext={0x100, 0x3976}, 0x880, 0x4, 0x25, 0x4, 0x7fffffff, 0x4, 0x1000, 0x0, 0xac, 0x0, 0x1}, 0x0, 0x6, r3, 0x8) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x660c, 0x0) ioctl$TUNSETQUEUE(r2, 0x400454d9, &(0x7f00000001c0)={'veth0_macvtap\x00', 0x600}) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x118) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x64800, 0x0) 12:34:45 executing program 1: perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x12) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cgroup.controllers\x00', 0x100002, 0x0) syz_clone(0x74809480, 0x0, 0x4100, &(0x7f0000000000), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000400000000000000000000850000006d000000850000000f00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 12:34:45 executing program 0: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1000001000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 12:34:45 executing program 5: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) syz_clone(0x0, 0x0, 0x2000, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 12:34:45 executing program 0: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 101.818831][ T30] audit: type=1400 audit(1667046885.140:119): avc: denied { create } for pid=4854 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 101.839280][ T4857] FAULT_INJECTION: forcing a failure. [ 101.839280][ T4857] name failslab, interval 1, probability 0, space 0, times 0 [ 101.930762][ T4857] CPU: 1 PID: 4857 Comm: syz-executor.2 Not tainted 5.15.74-syzkaller-04383-g7f2e600bf63a #0 [ 101.940757][ T4857] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/11/2022 [ 101.950916][ T4857] Call Trace: [ 101.954035][ T4857] [ 101.956812][ T4857] dump_stack_lvl+0x151/0x1b7 [ 101.961323][ T4857] ? bfq_pos_tree_add_move+0x43e/0x43e [ 101.966619][ T4857] dump_stack+0x15/0x17 [ 101.970608][ T4857] should_fail+0x3c0/0x510 [ 101.974949][ T4857] __should_failslab+0x9f/0xe0 [ 101.979547][ T4857] should_failslab+0x9/0x20 [ 101.983911][ T4857] kmem_cache_alloc+0x4f/0x2f0 [ 101.988487][ T4857] ? anon_vma_clone+0xa1/0x4f0 [ 101.993096][ T4857] anon_vma_clone+0xa1/0x4f0 [ 101.997515][ T4857] anon_vma_fork+0x91/0x4f0 [ 102.001854][ T4857] ? anon_vma_name+0x4c/0x70 [ 102.006279][ T4857] dup_mmap+0x750/0xea0 [ 102.010360][ T4857] ? __delayed_free_task+0x20/0x20 [ 102.015318][ T4857] ? mm_init+0x807/0x960 [ 102.019387][ T4857] dup_mm+0x91/0x330 [ 102.023119][ T4857] copy_mm+0x108/0x1b0 [ 102.027026][ T4857] copy_process+0x1295/0x3250 [ 102.031537][ T4857] ? proc_fail_nth_write+0x213/0x290 [ 102.036657][ T4857] ? proc_fail_nth_read+0x220/0x220 [ 102.041692][ T4857] ? check_kill_permission+0x37/0x490 [ 102.047009][ T4857] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 102.051940][ T4857] ? group_send_sig_info+0xa4/0x2f0 [ 102.056972][ T4857] ? vmacache_update+0xb7/0x120 [ 102.061661][ T4857] kernel_clone+0x22d/0x990 [ 102.066000][ T4857] ? create_io_thread+0x1e0/0x1e0 [ 102.070865][ T4857] ? __mutex_lock_slowpath+0x10/0x10 [ 102.075982][ T4857] __x64_sys_clone+0x289/0x310 [ 102.080580][ T4857] ? __do_sys_vfork+0x130/0x130 [ 102.085343][ T4857] ? debug_smp_processor_id+0x17/0x20 [ 102.090475][ T4857] do_syscall_64+0x44/0xd0 [ 102.094737][ T4857] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 102.100631][ T4857] RIP: 0033:0x7f931dc135a9 [ 102.104884][ T4857] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 12:34:45 executing program 0: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10000010000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 12:34:45 executing program 0: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x40000100000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 102.124323][ T4857] RSP: 002b:00007f931c987118 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 102.132652][ T4857] RAX: ffffffffffffffda RBX: 00007f931dd33f80 RCX: 00007f931dc135a9 [ 102.140464][ T4857] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 102.148276][ T4857] RBP: 00007f931c9871d0 R08: 0000000000000000 R09: 0000000000000000 [ 102.156087][ T4857] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 102.163920][ T4857] R13: 00007fffd2d3bdcf R14: 00007f931c987300 R15: 0000000000022000 [ 102.171713][ T4857] 12:34:45 executing program 5: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) syz_clone(0x0, 0x0, 0x6402, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 12:34:46 executing program 4: perf_event_open(0x0, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x12) r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cgroup.controllers\x00', 0x100002, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000140)='memory.low\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f0000000200), 0x12) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000000080)=0x3) syz_clone(0x74809480, 0x0, 0x4100, &(0x7f0000000000), 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000400000000000000000000850000006d000000850000000f00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000080)='sys_exit\x00', r2}, 0x10) 12:34:46 executing program 0: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x400000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 12:34:46 executing program 5: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) syz_clone(0x0, 0x0, 0x7000, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 12:34:46 executing program 2: syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 35) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 12:34:46 executing program 3: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'\x00', 0x52d35ce30131f272}) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x4b0402, 0x0) (async) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'nr0\x00', 0x4000}) (async) socketpair(0x8, 0x6, 0x5, &(0x7f0000000180)) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0) write$cgroup_type(r1, &(0x7f0000000080), 0x11ffffce1) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x660c, 0x0) (async) ioctl$TUNSETVNETLE(r1, 0x400454dc, &(0x7f00000000c0)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0) write$cgroup_type(r3, &(0x7f0000000080), 0x11ffffce1) (async) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x660c, 0x0) ioctl$TUNSETNOCSUM(r3, 0x400454c8, 0x1) write$cgroup_type(r2, &(0x7f0000000080), 0x11ffffce1) perf_event_open(&(0x7f0000000240)={0x3, 0x80, 0x2, 0x80, 0x4e, 0x8, 0x0, 0x1, 0xc905, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x5, 0x2, @perf_config_ext={0x100, 0x3976}, 0x880, 0x4, 0x25, 0x4, 0x7fffffff, 0x4, 0x1000, 0x0, 0xac, 0x0, 0x1}, 0x0, 0x6, r3, 0x8) (async) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x660c, 0x0) ioctl$TUNSETQUEUE(r2, 0x400454d9, &(0x7f00000001c0)={'veth0_macvtap\x00', 0x600}) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x118) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x64800, 0x0) [ 102.719342][ T4898] FAULT_INJECTION: forcing a failure. [ 102.719342][ T4898] name failslab, interval 1, probability 0, space 0, times 0 [ 102.731981][ T4898] CPU: 1 PID: 4898 Comm: syz-executor.2 Not tainted 5.15.74-syzkaller-04383-g7f2e600bf63a #0 [ 102.741947][ T4898] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/11/2022 [ 102.751840][ T4898] Call Trace: [ 102.754976][ T4898] [ 102.757751][ T4898] dump_stack_lvl+0x151/0x1b7 [ 102.762257][ T4898] ? bfq_pos_tree_add_move+0x43e/0x43e [ 102.767556][ T4898] dump_stack+0x15/0x17 [ 102.771540][ T4898] should_fail+0x3c0/0x510 [ 102.775803][ T4898] __should_failslab+0x9f/0xe0 [ 102.780404][ T4898] should_failslab+0x9/0x20 [ 102.784736][ T4898] kmem_cache_alloc+0x4f/0x2f0 [ 102.789333][ T4898] ? anon_vma_clone+0xa1/0x4f0 [ 102.793936][ T4898] anon_vma_clone+0xa1/0x4f0 [ 102.798364][ T4898] anon_vma_fork+0x91/0x4f0 [ 102.802704][ T4898] ? anon_vma_name+0x4c/0x70 [ 102.807213][ T4898] dup_mmap+0x750/0xea0 [ 102.811294][ T4898] ? __delayed_free_task+0x20/0x20 [ 102.816240][ T4898] ? mm_init+0x807/0x960 [ 102.820320][ T4898] dup_mm+0x91/0x330 [ 102.824052][ T4898] copy_mm+0x108/0x1b0 [ 102.827955][ T4898] copy_process+0x1295/0x3250 [ 102.832474][ T4898] ? proc_fail_nth_write+0x213/0x290 [ 102.837592][ T4898] ? proc_fail_nth_read+0x220/0x220 [ 102.842621][ T4898] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 102.847573][ T4898] ? vfs_write+0x9af/0x1050 [ 102.851912][ T4898] ? vmacache_update+0xb7/0x120 [ 102.856597][ T4898] kernel_clone+0x22d/0x990 [ 102.860941][ T4898] ? file_end_write+0x1b0/0x1b0 [ 102.865623][ T4898] ? __kasan_check_write+0x14/0x20 [ 102.870579][ T4898] ? create_io_thread+0x1e0/0x1e0 [ 102.875432][ T4898] ? __mutex_lock_slowpath+0x10/0x10 [ 102.880640][ T4898] __x64_sys_clone+0x289/0x310 [ 102.885240][ T4898] ? __do_sys_vfork+0x130/0x130 [ 102.889927][ T4898] ? debug_smp_processor_id+0x17/0x20 [ 102.895146][ T4898] do_syscall_64+0x44/0xd0 [ 102.899386][ T4898] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 102.905199][ T4898] RIP: 0033:0x7f931dc135a9 [ 102.909461][ T4898] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 102.928897][ T4898] RSP: 002b:00007f931c987118 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 102.937139][ T4898] RAX: ffffffffffffffda RBX: 00007f931dd33f80 RCX: 00007f931dc135a9 [ 102.944950][ T4898] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 102.952856][ T4898] RBP: 00007f931c9871d0 R08: 0000000000000000 R09: 0000000000000000 [ 102.960745][ T4898] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 102.968556][ T4898] R13: 00007fffd2d3bdcf R14: 00007f931c987300 R15: 0000000000022000 [ 102.976525][ T4898] 12:34:46 executing program 0: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1000000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 12:34:46 executing program 1: perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x12) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cgroup.controllers\x00', 0x100002, 0x0) syz_clone(0x74809480, 0x0, 0x4100, &(0x7f0000000000), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000400000000000000000000850000006d000000850000000f00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 12:34:46 executing program 5: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) syz_clone(0x0, 0x0, 0x9b01, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 12:34:46 executing program 2: syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 36) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 12:34:46 executing program 5: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) syz_clone(0x0, 0x0, 0x10fff, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 12:34:46 executing program 0: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xfeffffff00000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 12:34:46 executing program 0: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 103.220031][ T4913] FAULT_INJECTION: forcing a failure. [ 103.220031][ T4913] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 103.264491][ T4913] CPU: 0 PID: 4913 Comm: syz-executor.2 Not tainted 5.15.74-syzkaller-04383-g7f2e600bf63a #0 [ 103.274480][ T4913] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/11/2022 [ 103.284377][ T4913] Call Trace: [ 103.287502][ T4913] [ 103.290363][ T4913] dump_stack_lvl+0x151/0x1b7 [ 103.294876][ T4913] ? bfq_pos_tree_add_move+0x43e/0x43e [ 103.300171][ T4913] dump_stack+0x15/0x17 [ 103.304161][ T4913] should_fail+0x3c0/0x510 [ 103.308419][ T4913] should_fail_alloc_page+0x58/0x70 [ 103.313450][ T4913] __alloc_pages+0x1de/0x7c0 [ 103.317878][ T4913] ? __count_vm_events+0x30/0x30 [ 103.322657][ T4913] ? __this_cpu_preempt_check+0x13/0x20 [ 103.328031][ T4913] ? __mod_node_page_state+0xac/0xf0 [ 103.333154][ T4913] pte_alloc_one+0x73/0x1b0 [ 103.337510][ T4913] ? pfn_modify_allowed+0x2e0/0x2e0 [ 103.342523][ T4913] __pte_alloc+0x86/0x350 [ 103.346711][ T4913] ? free_pgtables+0x210/0x210 [ 103.351288][ T4913] ? _raw_spin_lock+0xa3/0x1b0 [ 103.355891][ T4913] ? _raw_spin_trylock_bh+0x1d0/0x1d0 [ 103.361101][ T4913] ? __kernel_text_address+0x9a/0x110 [ 103.366312][ T4913] copy_pte_range+0x1b1f/0x20b0 [ 103.370995][ T4913] ? __kunmap_atomic+0x80/0x80 [ 103.375589][ T4913] ? __kasan_slab_alloc+0xc4/0xe0 [ 103.380450][ T4913] ? __kasan_slab_alloc+0xb2/0xe0 [ 103.385311][ T4913] ? kmem_cache_alloc+0x189/0x2f0 [ 103.390172][ T4913] ? vm_area_dup+0x26/0x1d0 [ 103.394512][ T4913] ? dup_mmap+0x6b8/0xea0 [ 103.398675][ T4913] ? dup_mm+0x91/0x330 [ 103.402582][ T4913] ? copy_mm+0x108/0x1b0 [ 103.406662][ T4913] ? copy_process+0x1295/0x3250 [ 103.411348][ T4913] ? kernel_clone+0x22d/0x990 [ 103.415869][ T4913] ? __x64_sys_clone+0x289/0x310 [ 103.420636][ T4913] ? do_syscall_64+0x44/0xd0 [ 103.425058][ T4913] ? entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 103.430964][ T4913] copy_page_range+0xc1e/0x1090 [ 103.435660][ T4913] ? pfn_valid+0x1e0/0x1e0 [ 103.439907][ T4913] dup_mmap+0x99f/0xea0 [ 103.443900][ T4913] ? __delayed_free_task+0x20/0x20 [ 103.448842][ T4913] ? mm_init+0x807/0x960 [ 103.452921][ T4913] dup_mm+0x91/0x330 [ 103.456659][ T4913] copy_mm+0x108/0x1b0 [ 103.460558][ T4913] copy_process+0x1295/0x3250 [ 103.465073][ T4913] ? proc_fail_nth_write+0x213/0x290 [ 103.470204][ T4913] ? proc_fail_nth_read+0x220/0x220 [ 103.475232][ T4913] ? check_kill_permission+0x37/0x490 [ 103.480435][ T4913] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 103.485392][ T4913] ? group_send_sig_info+0xa4/0x2f0 [ 103.490415][ T4913] ? vmacache_update+0xb7/0x120 [ 103.495104][ T4913] kernel_clone+0x22d/0x990 [ 103.499446][ T4913] ? create_io_thread+0x1e0/0x1e0 [ 103.504303][ T4913] ? __mutex_lock_slowpath+0x10/0x10 [ 103.509423][ T4913] __x64_sys_clone+0x289/0x310 [ 103.514027][ T4913] ? __do_sys_vfork+0x130/0x130 [ 103.518738][ T4913] ? debug_smp_processor_id+0x17/0x20 [ 103.523916][ T4913] do_syscall_64+0x44/0xd0 [ 103.528166][ T4913] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 103.533899][ T4913] RIP: 0033:0x7f931dc135a9 [ 103.538149][ T4913] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 103.557587][ T4913] RSP: 002b:00007f931c987118 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 103.565839][ T4913] RAX: ffffffffffffffda RBX: 00007f931dd33f80 RCX: 00007f931dc135a9 [ 103.573642][ T4913] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 103.581453][ T4913] RBP: 00007f931c9871d0 R08: 0000000000000000 R09: 0000000000000000 [ 103.589265][ T4913] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 103.597078][ T4913] R13: 00007fffd2d3bdcf R14: 00007f931c987300 R15: 0000000000022000 [ 103.604891][ T4913] 12:34:47 executing program 4: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x12) r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cgroup.controllers\x00', 0x100002, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000140)='memory.low\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f0000000200), 0x12) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000000080)=0x3) syz_clone(0x74809480, 0x0, 0x4100, &(0x7f0000000000), 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000400000000000000000000850000006d000000850000000f00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000080)='sys_exit\x00', r2}, 0x10) 12:34:47 executing program 0: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 12:34:47 executing program 5: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) syz_clone(0x0, 0x0, 0x20010, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 12:34:47 executing program 3: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'\x00', 0x52d35ce30131f272}) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x4b0402, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'nr0\x00', 0x4000}) socketpair(0x8, 0x6, 0x5, &(0x7f0000000180)) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0) write$cgroup_type(r1, &(0x7f0000000080), 0x11ffffce1) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x660c, 0x0) ioctl$TUNSETVNETLE(r1, 0x400454dc, &(0x7f00000000c0)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0) write$cgroup_type(r3, &(0x7f0000000080), 0x11ffffce1) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x660c, 0x0) ioctl$TUNSETNOCSUM(r3, 0x400454c8, 0x1) write$cgroup_type(r2, &(0x7f0000000080), 0x11ffffce1) perf_event_open(&(0x7f0000000240)={0x3, 0x80, 0x2, 0x80, 0x4e, 0x8, 0x0, 0x1, 0xc905, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x5, 0x2, @perf_config_ext={0x100, 0x3976}, 0x880, 0x4, 0x25, 0x4, 0x7fffffff, 0x4, 0x1000, 0x0, 0xac, 0x0, 0x1}, 0x0, 0x6, r3, 0x8) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x660c, 0x0) ioctl$TUNSETQUEUE(r2, 0x400454d9, &(0x7f00000001c0)={'veth0_macvtap\x00', 0x600}) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x118) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x64800, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'\x00', 0x52d35ce30131f272}) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x4b0402, 0x0) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'nr0\x00', 0x4000}) (async) socketpair(0x8, 0x6, 0x5, &(0x7f0000000180)) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0) (async) write$cgroup_type(r1, &(0x7f0000000080), 0x11ffffce1) (async) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x660c, 0x0) (async) ioctl$TUNSETVNETLE(r1, 0x400454dc, &(0x7f00000000c0)) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0) (async) write$cgroup_type(r3, &(0x7f0000000080), 0x11ffffce1) (async) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x660c, 0x0) (async) ioctl$TUNSETNOCSUM(r3, 0x400454c8, 0x1) (async) write$cgroup_type(r2, &(0x7f0000000080), 0x11ffffce1) (async) perf_event_open(&(0x7f0000000240)={0x3, 0x80, 0x2, 0x80, 0x4e, 0x8, 0x0, 0x1, 0xc905, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x5, 0x2, @perf_config_ext={0x100, 0x3976}, 0x880, 0x4, 0x25, 0x4, 0x7fffffff, 0x4, 0x1000, 0x0, 0xac, 0x0, 0x1}, 0x0, 0x6, r3, 0x8) (async) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x660c, 0x0) (async) ioctl$TUNSETQUEUE(r2, 0x400454d9, &(0x7f00000001c0)={'veth0_macvtap\x00', 0x600}) (async) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x118) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x64800, 0x0) (async) 12:34:47 executing program 2: syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 37) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) [ 103.807947][ T4936] FAULT_INJECTION: forcing a failure. [ 103.807947][ T4936] name failslab, interval 1, probability 0, space 0, times 0 [ 103.900453][ T4936] CPU: 1 PID: 4936 Comm: syz-executor.2 Not tainted 5.15.74-syzkaller-04383-g7f2e600bf63a #0 [ 103.910547][ T4936] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/11/2022 [ 103.920436][ T4936] Call Trace: [ 103.923560][ T4936] [ 103.926337][ T4936] dump_stack_lvl+0x151/0x1b7 [ 103.930858][ T4936] ? bfq_pos_tree_add_move+0x43e/0x43e [ 103.936242][ T4936] dump_stack+0x15/0x17 [ 103.940312][ T4936] should_fail+0x3c0/0x510 [ 103.944565][ T4936] __should_failslab+0x9f/0xe0 [ 103.949164][ T4936] should_failslab+0x9/0x20 [ 103.953513][ T4936] kmem_cache_alloc+0x4f/0x2f0 [ 103.958105][ T4936] ? vm_area_dup+0x26/0x1d0 [ 103.962442][ T4936] vm_area_dup+0x26/0x1d0 [ 103.966608][ T4936] dup_mmap+0x6b8/0xea0 [ 103.970603][ T4936] ? __delayed_free_task+0x20/0x20 [ 103.975549][ T4936] ? mm_init+0x807/0x960 [ 103.979639][ T4936] dup_mm+0x91/0x330 [ 103.983362][ T4936] copy_mm+0x108/0x1b0 [ 103.987264][ T4936] copy_process+0x1295/0x3250 [ 103.991784][ T4936] ? proc_fail_nth_write+0x213/0x290 [ 103.996916][ T4936] ? proc_fail_nth_read+0x220/0x220 [ 104.001936][ T4936] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 104.006881][ T4936] ? vfs_write+0x9af/0x1050 [ 104.011227][ T4936] ? vmacache_update+0xb7/0x120 [ 104.015907][ T4936] kernel_clone+0x22d/0x990 [ 104.020250][ T4936] ? file_end_write+0x1b0/0x1b0 [ 104.024931][ T4936] ? __kasan_check_write+0x14/0x20 [ 104.029880][ T4936] ? create_io_thread+0x1e0/0x1e0 [ 104.034739][ T4936] ? __mutex_lock_slowpath+0x10/0x10 [ 104.039863][ T4936] __x64_sys_clone+0x289/0x310 [ 104.044556][ T4936] ? __do_sys_vfork+0x130/0x130 [ 104.049239][ T4936] ? debug_smp_processor_id+0x17/0x20 [ 104.054446][ T4936] do_syscall_64+0x44/0xd0 [ 104.058697][ T4936] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 104.064423][ T4936] RIP: 0033:0x7f931dc135a9 [ 104.068679][ T4936] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 104.088309][ T4936] RSP: 002b:00007f931c987118 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 12:34:47 executing program 1: perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x12) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cgroup.controllers\x00', 0x100002, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000140)='memory.low\x00', 0x2, 0x0) syz_clone(0x74809480, 0x0, 0x4100, &(0x7f0000000000), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000400000000000000000000850000006d000000850000000f00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 12:34:47 executing program 0: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x10}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 12:34:47 executing program 5: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) syz_clone(0x0, 0x0, 0x20200, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 12:34:47 executing program 0: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400001}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 12:34:47 executing program 5: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) syz_clone(0x0, 0x0, 0x80000, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 12:34:47 executing program 0: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x1004000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 12:34:47 executing program 0: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 104.096548][ T4936] RAX: ffffffffffffffda RBX: 00007f931dd33f80 RCX: 00007f931dc135a9 [ 104.104365][ T4936] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 104.112178][ T4936] RBP: 00007f931c9871d0 R08: 0000000000000000 R09: 0000000000000000 [ 104.119984][ T4936] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 104.127799][ T4936] R13: 00007fffd2d3bdcf R14: 00007f931c987300 R15: 0000000000022000 [ 104.136648][ T4936] [ 104.141545][ T30] audit: type=1400 audit(1667046887.460:120): avc: denied { unlink } for pid=164 comm="syslogd" name="messages.0" dev="tmpfs" ino=2 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 12:34:47 executing program 4: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x12) r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cgroup.controllers\x00', 0x100002, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000140)='memory.low\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f0000000200), 0x12) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000000080)=0x3) syz_clone(0x74809480, 0x0, 0x4100, &(0x7f0000000000), 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000400000000000000000000850000006d000000850000000f00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000080)='sys_exit\x00', r2}, 0x10) 12:34:47 executing program 0: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x4000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 12:34:47 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'veth1_to_team\x00', 0x52d35ce30131f272}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) close(r0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000b40)={'veth1\x00', 0x100}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0) write$cgroup_type(r1, &(0x7f0000000080), 0x11ffffce1) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x660c, 0x0) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000b80)={'netpci0\x00'}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0) write$cgroup_type(r2, &(0x7f0000000080), 0x11ffffce1) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x660c, 0x0) recvmsg$unix(r2, &(0x7f0000000240)={&(0x7f0000000040)=@abs, 0x6e, &(0x7f0000000200)=[{&(0x7f00000000c0)=""/13, 0xd}, {&(0x7f0000000100)=""/232, 0xe8}, {&(0x7f00000002c0)=""/234, 0xea}], 0x3, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="0000000038000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="28000000000000000100000001000000", @ANYRES32=0xffffffffffffffff, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="1c00000000000000010000000200000082b2c4a317ba85a384118899fab68380b3c87c53fcfb7e546c2c7992fbc7817287c46e6e8a522ed7005955956ace91c880628ec59067a7eb5126fc5264327afe3571", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32, @ANYBLOB="0000000018000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYBLOB="18000000000000000100000001000000", @ANYRES32, @ANYRES32], 0x120}, 0x10000) recvmsg$unix(r3, &(0x7f0000000b00)={&(0x7f0000000500)=@abs, 0x6e, &(0x7f0000000a80)=[{&(0x7f0000000580)=""/139, 0x8b}, {&(0x7f0000000640)=""/68, 0x44}, {&(0x7f00000006c0)=""/106, 0x6a}, {&(0x7f0000000740)=""/194, 0xc2}, {&(0x7f0000000840)=""/239, 0xef}, {&(0x7f0000000940)=""/133, 0x85}, {&(0x7f0000000a00)=""/85, 0x55}], 0x7}, 0x20000341) openat$cgroup_ro(r1, &(0x7f00000003c0)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) 12:34:47 executing program 5: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) syz_clone(0x0, 0x0, 0x101000, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 12:34:47 executing program 2: syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 38) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) [ 104.679392][ T4989] FAULT_INJECTION: forcing a failure. [ 104.679392][ T4989] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 104.714796][ T4989] CPU: 0 PID: 4989 Comm: syz-executor.2 Not tainted 5.15.74-syzkaller-04383-g7f2e600bf63a #0 [ 104.724783][ T4989] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/11/2022 [ 104.734679][ T4989] Call Trace: [ 104.737806][ T4989] [ 104.740581][ T4989] dump_stack_lvl+0x151/0x1b7 [ 104.745093][ T4989] ? bfq_pos_tree_add_move+0x43e/0x43e [ 104.750392][ T4989] dump_stack+0x15/0x17 [ 104.754381][ T4989] should_fail+0x3c0/0x510 [ 104.758635][ T4989] should_fail_alloc_page+0x58/0x70 [ 104.763668][ T4989] __alloc_pages+0x1de/0x7c0 [ 104.768097][ T4989] ? __count_vm_events+0x30/0x30 [ 104.772869][ T4989] ? __this_cpu_preempt_check+0x13/0x20 [ 104.778250][ T4989] ? __mod_node_page_state+0xac/0xf0 [ 104.783370][ T4989] pte_alloc_one+0x73/0x1b0 [ 104.787718][ T4989] ? pfn_modify_allowed+0x2e0/0x2e0 [ 104.792749][ T4989] __pte_alloc+0x86/0x350 [ 104.796907][ T4989] ? free_pgtables+0x210/0x210 [ 104.801509][ T4989] ? _raw_spin_lock+0xa3/0x1b0 [ 104.806106][ T4989] ? _raw_spin_trylock_bh+0x1d0/0x1d0 [ 104.811313][ T4989] ? __kernel_text_address+0x9a/0x110 [ 104.816528][ T4989] copy_pte_range+0x1b1f/0x20b0 [ 104.821216][ T4989] ? __kunmap_atomic+0x80/0x80 [ 104.825806][ T4989] ? __kasan_slab_alloc+0xc4/0xe0 [ 104.830846][ T4989] ? __kasan_slab_alloc+0xb2/0xe0 [ 104.835701][ T4989] ? kmem_cache_alloc+0x189/0x2f0 [ 104.840570][ T4989] ? vm_area_dup+0x26/0x1d0 [ 104.844914][ T4989] ? dup_mmap+0x6b8/0xea0 [ 104.849066][ T4989] ? dup_mm+0x91/0x330 [ 104.852967][ T4989] ? copy_mm+0x108/0x1b0 [ 104.857059][ T4989] ? copy_process+0x1295/0x3250 [ 104.861739][ T4989] ? kernel_clone+0x22d/0x990 [ 104.866251][ T4989] ? __x64_sys_clone+0x289/0x310 [ 104.871021][ T4989] ? do_syscall_64+0x44/0xd0 [ 104.875543][ T4989] ? entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 104.881456][ T4989] copy_page_range+0xc1e/0x1090 [ 104.886134][ T4989] ? pfn_valid+0x1e0/0x1e0 [ 104.890382][ T4989] dup_mmap+0x99f/0xea0 [ 104.894381][ T4989] ? __delayed_free_task+0x20/0x20 [ 104.899315][ T4989] ? mm_init+0x807/0x960 [ 104.903394][ T4989] dup_mm+0x91/0x330 [ 104.907128][ T4989] copy_mm+0x108/0x1b0 [ 104.911037][ T4989] copy_process+0x1295/0x3250 [ 104.915548][ T4989] ? proc_fail_nth_write+0x213/0x290 [ 104.920682][ T4989] ? proc_fail_nth_read+0x220/0x220 [ 104.925709][ T4989] ? check_kill_permission+0x37/0x490 [ 104.930921][ T4989] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 104.935858][ T4989] ? group_send_sig_info+0xa4/0x2f0 [ 104.940930][ T4989] ? vmacache_update+0xb7/0x120 [ 104.945576][ T4989] kernel_clone+0x22d/0x990 [ 104.949914][ T4989] ? create_io_thread+0x1e0/0x1e0 [ 104.954863][ T4989] ? __mutex_lock_slowpath+0x10/0x10 [ 104.959995][ T4989] __x64_sys_clone+0x289/0x310 [ 104.964598][ T4989] ? __do_sys_vfork+0x130/0x130 [ 104.969283][ T4989] ? debug_smp_processor_id+0x17/0x20 [ 104.974481][ T4989] do_syscall_64+0x44/0xd0 [ 104.978735][ T4989] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 104.984458][ T4989] RIP: 0033:0x7f931dc135a9 [ 104.988718][ T4989] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 105.008252][ T4989] RSP: 002b:00007f931c987118 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 105.016489][ T4989] RAX: ffffffffffffffda RBX: 00007f931dd33f80 RCX: 00007f931dc135a9 12:34:48 executing program 1: perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x12) r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cgroup.controllers\x00', 0x100002, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000140)='memory.low\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f0000000200), 0x12) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000000080)=0x3) syz_clone(0x74809480, 0x0, 0x4100, &(0x7f0000000000), 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000080)='sys_exit\x00'}, 0x10) 12:34:48 executing program 0: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x10000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 12:34:48 executing program 5: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) syz_clone(0x0, 0x0, 0x700000, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 12:34:48 executing program 0: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x20000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 105.024388][ T4989] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 105.032211][ T4989] RBP: 00007f931c9871d0 R08: 0000000000000000 R09: 0000000000000000 [ 105.040015][ T4989] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 105.047908][ T4989] R13: 00007fffd2d3bdcf R14: 00007f931c987300 R15: 0000000000022000 [ 105.055727][ T4989] 12:34:48 executing program 5: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) syz_clone(0x0, 0x0, 0xf0ff1f, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 12:34:48 executing program 0: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xfeffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 12:34:48 executing program 0: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xfffffffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 12:34:48 executing program 4: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x12) r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cgroup.controllers\x00', 0x100002, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000140)='memory.low\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f0000000200), 0x12) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000000080)=0x3) syz_clone(0x74809480, 0x0, 0x4100, &(0x7f0000000000), 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000400000000000000000000850000006d000000850000000f00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000080)='sys_exit\x00', r2}, 0x10) 12:34:48 executing program 0: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x200000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 12:34:48 executing program 5: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) syz_clone(0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 12:34:48 executing program 2: syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 39) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 12:34:48 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'veth1_to_team\x00', 0x52d35ce30131f272}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) (async) close(r0) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000b40)={'veth1\x00', 0x100}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0) write$cgroup_type(r1, &(0x7f0000000080), 0x11ffffce1) (async) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x660c, 0x0) (async) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000b80)={'netpci0\x00'}) (async, rerun: 64) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0) (rerun: 64) write$cgroup_type(r2, &(0x7f0000000080), 0x11ffffce1) (async) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x660c, 0x0) (async) recvmsg$unix(r2, &(0x7f0000000240)={&(0x7f0000000040)=@abs, 0x6e, &(0x7f0000000200)=[{&(0x7f00000000c0)=""/13, 0xd}, {&(0x7f0000000100)=""/232, 0xe8}, {&(0x7f00000002c0)=""/234, 0xea}], 0x3, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="0000000038000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="28000000000000000100000001000000", @ANYRES32=0xffffffffffffffff, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="1c00000000000000010000000200000082b2c4a317ba85a384118899fab68380b3c87c53fcfb7e546c2c7992fbc7817287c46e6e8a522ed7005955956ace91c880628ec59067a7eb5126fc5264327afe3571", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32, @ANYBLOB="0000000018000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYBLOB="18000000000000000100000001000000", @ANYRES32, @ANYRES32], 0x120}, 0x10000) (async, rerun: 64) recvmsg$unix(r3, &(0x7f0000000b00)={&(0x7f0000000500)=@abs, 0x6e, &(0x7f0000000a80)=[{&(0x7f0000000580)=""/139, 0x8b}, {&(0x7f0000000640)=""/68, 0x44}, {&(0x7f00000006c0)=""/106, 0x6a}, {&(0x7f0000000740)=""/194, 0xc2}, {&(0x7f0000000840)=""/239, 0xef}, {&(0x7f0000000940)=""/133, 0x85}, {&(0x7f0000000a00)=""/85, 0x55}], 0x7}, 0x20000341) (rerun: 64) openat$cgroup_ro(r1, &(0x7f00000003c0)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) [ 105.631758][ T5018] FAULT_INJECTION: forcing a failure. [ 105.631758][ T5018] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 105.696275][ T5018] CPU: 0 PID: 5018 Comm: syz-executor.2 Not tainted 5.15.74-syzkaller-04383-g7f2e600bf63a #0 [ 105.706270][ T5018] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/11/2022 [ 105.716175][ T5018] Call Trace: [ 105.719290][ T5018] [ 105.722063][ T5018] dump_stack_lvl+0x151/0x1b7 [ 105.726580][ T5018] ? bfq_pos_tree_add_move+0x43e/0x43e [ 105.731872][ T5018] ? stack_trace_save+0x1f0/0x1f0 [ 105.736734][ T5018] ? __kernel_text_address+0x9a/0x110 [ 105.741941][ T5018] dump_stack+0x15/0x17 [ 105.745931][ T5018] should_fail+0x3c0/0x510 [ 105.750191][ T5018] should_fail_alloc_page+0x58/0x70 [ 105.755220][ T5018] __alloc_pages+0x1de/0x7c0 [ 105.759644][ T5018] ? stack_trace_save+0x12d/0x1f0 [ 105.764601][ T5018] ? stack_trace_snprint+0x100/0x100 [ 105.769718][ T5018] ? __count_vm_events+0x30/0x30 [ 105.774585][ T5018] ? __kasan_slab_alloc+0xc4/0xe0 [ 105.779436][ T5018] ? __kasan_slab_alloc+0xb2/0xe0 [ 105.784297][ T5018] ? kmem_cache_alloc+0x189/0x2f0 [ 105.789151][ T5018] ? anon_vma_fork+0x1b9/0x4f0 [ 105.793754][ T5018] get_zeroed_page+0x19/0x40 [ 105.798182][ T5018] __pud_alloc+0x8b/0x260 [ 105.802436][ T5018] ? do_handle_mm_fault+0x2370/0x2370 [ 105.807647][ T5018] copy_page_range+0xd9e/0x1090 [ 105.812330][ T5018] ? pfn_valid+0x1e0/0x1e0 [ 105.816590][ T5018] dup_mmap+0x99f/0xea0 [ 105.820759][ T5018] ? __delayed_free_task+0x20/0x20 [ 105.825702][ T5018] ? mm_init+0x807/0x960 [ 105.829867][ T5018] dup_mm+0x91/0x330 [ 105.833781][ T5018] copy_mm+0x108/0x1b0 [ 105.837678][ T5018] copy_process+0x1295/0x3250 [ 105.842194][ T5018] ? proc_fail_nth_write+0x213/0x290 [ 105.847317][ T5018] ? proc_fail_nth_read+0x220/0x220 [ 105.852361][ T5018] ? check_kill_permission+0x37/0x490 [ 105.857557][ T5018] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 105.862501][ T5018] ? group_send_sig_info+0xa4/0x2f0 [ 105.867596][ T5018] ? vmacache_update+0xb7/0x120 [ 105.872233][ T5018] kernel_clone+0x22d/0x990 [ 105.876561][ T5018] ? create_io_thread+0x1e0/0x1e0 [ 105.881419][ T5018] ? __mutex_lock_slowpath+0x10/0x10 [ 105.886541][ T5018] __x64_sys_clone+0x289/0x310 [ 105.891141][ T5018] ? __do_sys_vfork+0x130/0x130 [ 105.895827][ T5018] ? debug_smp_processor_id+0x17/0x20 [ 105.901119][ T5018] do_syscall_64+0x44/0xd0 [ 105.905374][ T5018] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 105.911100][ T5018] RIP: 0033:0x7f931dc135a9 [ 105.915352][ T5018] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 105.934795][ T5018] RSP: 002b:00007f931c987118 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 12:34:49 executing program 1: perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x12) r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cgroup.controllers\x00', 0x100002, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000140)='memory.low\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f0000000200), 0x12) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000000080)=0x3) syz_clone(0x74809480, 0x0, 0x4100, &(0x7f0000000000), 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000080)='sys_exit\x00'}, 0x10) 12:34:49 executing program 0: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x1000001000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 12:34:49 executing program 5: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) syz_clone(0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) [ 105.943038][ T5018] RAX: ffffffffffffffda RBX: 00007f931dd33f80 RCX: 00007f931dc135a9 [ 105.950856][ T5018] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 105.958659][ T5018] RBP: 00007f931c9871d0 R08: 0000000000000000 R09: 0000000000000000 [ 105.966474][ T5018] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 105.974284][ T5018] R13: 00007fffd2d3bdcf R14: 00007f931c987300 R15: 0000000000022000 [ 105.982105][ T5018] 12:34:49 executing program 0: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 12:34:49 executing program 0: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x10000010000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 12:34:49 executing program 0: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x40000100000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 12:34:49 executing program 5: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) syz_clone(0x0, 0x0, 0x7000000, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 12:34:49 executing program 4: perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x12) r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cgroup.controllers\x00', 0x100002, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000140)='memory.low\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f0000000200), 0x12) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000000080)=0x3) syz_clone(0x74809480, 0x0, 0x4100, &(0x7f0000000000), 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000400000000000000000000850000006d000000850000000f00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000080)='sys_exit\x00', r2}, 0x10) 12:34:49 executing program 0: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 12:34:49 executing program 5: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) syz_clone(0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 12:34:49 executing program 2: syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 40) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 12:34:49 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'veth1_to_team\x00', 0x52d35ce30131f272}) (async) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) (async) close(r0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000b40)={'veth1\x00', 0x100}) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0) write$cgroup_type(r1, &(0x7f0000000080), 0x11ffffce1) (async) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x660c, 0x0) (async) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000b80)={'netpci0\x00'}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0) write$cgroup_type(r2, &(0x7f0000000080), 0x11ffffce1) (async) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x660c, 0x0) recvmsg$unix(r2, &(0x7f0000000240)={&(0x7f0000000040)=@abs, 0x6e, &(0x7f0000000200)=[{&(0x7f00000000c0)=""/13, 0xd}, {&(0x7f0000000100)=""/232, 0xe8}, {&(0x7f00000002c0)=""/234, 0xea}], 0x3, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="0000000038000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="28000000000000000100000001000000", @ANYRES32=0xffffffffffffffff, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="1c00000000000000010000000200000082b2c4a317ba85a384118899fab68380b3c87c53fcfb7e546c2c7992fbc7817287c46e6e8a522ed7005955956ace91c880628ec59067a7eb5126fc5264327afe3571", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32, @ANYBLOB="0000000018000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYBLOB="18000000000000000100000001000000", @ANYRES32, @ANYRES32], 0x120}, 0x10000) (async) recvmsg$unix(r3, &(0x7f0000000b00)={&(0x7f0000000500)=@abs, 0x6e, &(0x7f0000000a80)=[{&(0x7f0000000580)=""/139, 0x8b}, {&(0x7f0000000640)=""/68, 0x44}, {&(0x7f00000006c0)=""/106, 0x6a}, {&(0x7f0000000740)=""/194, 0xc2}, {&(0x7f0000000840)=""/239, 0xef}, {&(0x7f0000000940)=""/133, 0x85}, {&(0x7f0000000a00)=""/85, 0x55}], 0x7}, 0x20000341) openat$cgroup_ro(r1, &(0x7f00000003c0)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) [ 106.513532][ T5057] FAULT_INJECTION: forcing a failure. [ 106.513532][ T5057] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 106.536291][ T5057] CPU: 0 PID: 5057 Comm: syz-executor.2 Not tainted 5.15.74-syzkaller-04383-g7f2e600bf63a #0 [ 106.546272][ T5057] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/11/2022 [ 106.556165][ T5057] Call Trace: [ 106.559291][ T5057] [ 106.562072][ T5057] dump_stack_lvl+0x151/0x1b7 [ 106.566578][ T5057] ? bfq_pos_tree_add_move+0x43e/0x43e [ 106.571958][ T5057] dump_stack+0x15/0x17 [ 106.575952][ T5057] should_fail+0x3c0/0x510 [ 106.580202][ T5057] should_fail_alloc_page+0x58/0x70 [ 106.585238][ T5057] __alloc_pages+0x1de/0x7c0 [ 106.589662][ T5057] ? __count_vm_events+0x30/0x30 [ 106.594439][ T5057] ? dup_mm+0x91/0x330 [ 106.598343][ T5057] ? copy_mm+0x108/0x1b0 [ 106.602432][ T5057] ? copy_process+0x1295/0x3250 [ 106.607107][ T5057] ? kernel_clone+0x22d/0x990 [ 106.611619][ T5057] ? __x64_sys_clone+0x289/0x310 [ 106.616395][ T5057] pte_alloc_one+0x73/0x1b0 [ 106.620733][ T5057] ? pfn_modify_allowed+0x2e0/0x2e0 [ 106.625769][ T5057] ? __kasan_check_write+0x14/0x20 [ 106.630800][ T5057] ? __set_page_owner+0x2ee/0x310 [ 106.635750][ T5057] __pte_alloc+0x86/0x350 [ 106.639915][ T5057] ? post_alloc_hook+0x1ab/0x1b0 [ 106.644776][ T5057] ? free_pgtables+0x210/0x210 [ 106.649726][ T5057] ? get_page_from_freelist+0x38b/0x400 [ 106.655105][ T5057] copy_pte_range+0x1b1f/0x20b0 [ 106.659800][ T5057] ? __kunmap_atomic+0x80/0x80 [ 106.664390][ T5057] ? __pud_alloc+0x260/0x260 [ 106.668821][ T5057] ? __pud_alloc+0x218/0x260 [ 106.673243][ T5057] ? do_handle_mm_fault+0x2370/0x2370 [ 106.678452][ T5057] copy_page_range+0xc1e/0x1090 [ 106.683141][ T5057] ? pfn_valid+0x1e0/0x1e0 [ 106.687393][ T5057] dup_mmap+0x99f/0xea0 [ 106.691388][ T5057] ? __delayed_free_task+0x20/0x20 [ 106.696331][ T5057] ? mm_init+0x807/0x960 [ 106.700410][ T5057] dup_mm+0x91/0x330 [ 106.704144][ T5057] copy_mm+0x108/0x1b0 [ 106.708047][ T5057] copy_process+0x1295/0x3250 [ 106.712562][ T5057] ? proc_fail_nth_write+0x213/0x290 [ 106.717680][ T5057] ? proc_fail_nth_read+0x220/0x220 [ 106.722813][ T5057] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 106.727750][ T5057] ? vfs_write+0x9af/0x1050 [ 106.732086][ T5057] ? vmacache_update+0xb7/0x120 [ 106.736775][ T5057] kernel_clone+0x22d/0x990 [ 106.741117][ T5057] ? file_end_write+0x1b0/0x1b0 [ 106.745800][ T5057] ? __kasan_check_write+0x14/0x20 [ 106.750761][ T5057] ? create_io_thread+0x1e0/0x1e0 [ 106.755634][ T5057] ? __mutex_lock_slowpath+0x10/0x10 [ 106.760731][ T5057] __x64_sys_clone+0x289/0x310 [ 106.765852][ T5057] ? __do_sys_vfork+0x130/0x130 [ 106.770552][ T5057] ? debug_smp_processor_id+0x17/0x20 [ 106.775748][ T5057] do_syscall_64+0x44/0xd0 [ 106.779996][ T5057] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 106.785723][ T5057] RIP: 0033:0x7f931dc135a9 [ 106.789988][ T5057] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 106.809420][ T5057] RSP: 002b:00007f931c987118 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 106.817667][ T5057] RAX: ffffffffffffffda RBX: 00007f931dd33f80 RCX: 00007f931dc135a9 [ 106.825477][ T5057] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 106.833298][ T5057] RBP: 00007f931c9871d0 R08: 0000000000000000 R09: 0000000000000000 [ 106.841097][ T5057] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 106.848912][ T5057] R13: 00007fffd2d3bdcf R14: 00007f931c987300 R15: 0000000000022000 [ 106.856825][ T5057] 12:34:51 executing program 1: perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x12) r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cgroup.controllers\x00', 0x100002, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000140)='memory.low\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f0000000200), 0x12) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000000080)=0x3) syz_clone(0x74809480, 0x0, 0x4100, &(0x7f0000000000), 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000400000000000000000000850000006d000000850000000f00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000080)='sys_exit\x00', r2}, 0x10) 12:34:51 executing program 0: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x1000000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 12:34:51 executing program 5: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) syz_clone(0x0, 0x0, 0x9000000, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 12:34:51 executing program 2: syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 41) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 12:34:51 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'\x00', 0x52d35ce30131f272}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) 12:34:51 executing program 4: perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x12) r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cgroup.controllers\x00', 0x100002, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000140)='memory.low\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f0000000200), 0x12) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000000080)=0x3) syz_clone(0x74809480, 0x0, 0x4100, &(0x7f0000000000), 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000400000000000000000000850000006d000000850000000f00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000080)='sys_exit\x00', r2}, 0x10) 12:34:51 executing program 0: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xfeffffff00000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 107.714535][ T5079] FAULT_INJECTION: forcing a failure. [ 107.714535][ T5079] name failslab, interval 1, probability 0, space 0, times 0 [ 107.750467][ T5079] CPU: 1 PID: 5079 Comm: syz-executor.2 Not tainted 5.15.74-syzkaller-04383-g7f2e600bf63a #0 [ 107.760457][ T5079] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/11/2022 [ 107.770351][ T5079] Call Trace: [ 107.773506][ T5079] [ 107.776339][ T5079] dump_stack_lvl+0x151/0x1b7 [ 107.780855][ T5079] ? bfq_pos_tree_add_move+0x43e/0x43e [ 107.786149][ T5079] dump_stack+0x15/0x17 [ 107.790138][ T5079] should_fail+0x3c0/0x510 [ 107.794397][ T5079] __should_failslab+0x9f/0xe0 [ 107.799090][ T5079] should_failslab+0x9/0x20 [ 107.803420][ T5079] kmem_cache_alloc+0x4f/0x2f0 [ 107.808026][ T5079] ? vm_area_dup+0x26/0x1d0 [ 107.812357][ T5079] vm_area_dup+0x26/0x1d0 [ 107.816544][ T5079] dup_mmap+0x6b8/0xea0 [ 107.820515][ T5079] ? __delayed_free_task+0x20/0x20 [ 107.825472][ T5079] ? mm_init+0x807/0x960 [ 107.829543][ T5079] dup_mm+0x91/0x330 [ 107.833276][ T5079] copy_mm+0x108/0x1b0 [ 107.837184][ T5079] copy_process+0x1295/0x3250 [ 107.841694][ T5079] ? proc_fail_nth_write+0x213/0x290 [ 107.846902][ T5079] ? proc_fail_nth_read+0x220/0x220 [ 107.851937][ T5079] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 107.856880][ T5079] ? vfs_write+0x9af/0x1050 [ 107.861223][ T5079] ? vmacache_update+0xb7/0x120 [ 107.865909][ T5079] kernel_clone+0x22d/0x990 [ 107.870244][ T5079] ? file_end_write+0x1b0/0x1b0 [ 107.874957][ T5079] ? __kasan_check_write+0x14/0x20 [ 107.879980][ T5079] ? create_io_thread+0x1e0/0x1e0 [ 107.884929][ T5079] ? __mutex_lock_slowpath+0x10/0x10 [ 107.890048][ T5079] __x64_sys_clone+0x289/0x310 [ 107.894736][ T5079] ? __do_sys_vfork+0x130/0x130 [ 107.899427][ T5079] ? debug_smp_processor_id+0x17/0x20 [ 107.904713][ T5079] do_syscall_64+0x44/0xd0 [ 107.908970][ T5079] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 107.914695][ T5079] RIP: 0033:0x7f931dc135a9 [ 107.918951][ T5079] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 107.938392][ T5079] RSP: 002b:00007f931c987118 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 107.946639][ T5079] RAX: ffffffffffffffda RBX: 00007f931dd33f80 RCX: 00007f931dc135a9 [ 107.954456][ T5079] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 12:34:51 executing program 5: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) syz_clone(0x0, 0x0, 0x10000200, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 12:34:51 executing program 0: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 12:34:51 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'\x00', 0x52d35ce30131f272}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) [ 107.962343][ T5079] RBP: 00007f931c9871d0 R08: 0000000000000000 R09: 0000000000000000 [ 107.970157][ T5079] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 107.977966][ T5079] R13: 00007fffd2d3bdcf R14: 00007f931c987300 R15: 0000000000022000 [ 107.985784][ T5079] 12:34:51 executing program 0: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 12:34:51 executing program 2: syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 42) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) [ 108.070973][ T5101] FAULT_INJECTION: forcing a failure. [ 108.070973][ T5101] name failslab, interval 1, probability 0, space 0, times 0 [ 108.099722][ T5101] CPU: 1 PID: 5101 Comm: syz-executor.2 Not tainted 5.15.74-syzkaller-04383-g7f2e600bf63a #0 [ 108.109805][ T5101] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/11/2022 [ 108.119784][ T5101] Call Trace: [ 108.122996][ T5101] [ 108.125770][ T5101] dump_stack_lvl+0x151/0x1b7 [ 108.130286][ T5101] ? bfq_pos_tree_add_move+0x43e/0x43e [ 108.135584][ T5101] ? do_syscall_64+0x44/0xd0 [ 108.140009][ T5101] dump_stack+0x15/0x17 [ 108.144012][ T5101] should_fail+0x3c0/0x510 [ 108.148341][ T5101] __should_failslab+0x9f/0xe0 [ 108.152947][ T5101] should_failslab+0x9/0x20 [ 108.157277][ T5101] kmem_cache_alloc+0x4f/0x2f0 [ 108.161876][ T5101] ? anon_vma_clone+0xa1/0x4f0 [ 108.166480][ T5101] anon_vma_clone+0xa1/0x4f0 [ 108.170900][ T5101] anon_vma_fork+0x91/0x4f0 [ 108.175246][ T5101] ? anon_vma_name+0x4c/0x70 [ 108.179665][ T5101] dup_mmap+0x750/0xea0 [ 108.183658][ T5101] ? __delayed_free_task+0x20/0x20 [ 108.188606][ T5101] ? mm_init+0x807/0x960 [ 108.192682][ T5101] dup_mm+0x91/0x330 [ 108.196414][ T5101] copy_mm+0x108/0x1b0 [ 108.200320][ T5101] copy_process+0x1295/0x3250 [ 108.204835][ T5101] ? proc_fail_nth_read+0x220/0x220 [ 108.209871][ T5101] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 108.214817][ T5101] ? vfs_write+0x9af/0x1050 [ 108.219154][ T5101] ? vmacache_update+0xb7/0x120 [ 108.223843][ T5101] kernel_clone+0x22d/0x990 [ 108.228185][ T5101] ? make_kuid+0x700/0x700 [ 108.232435][ T5101] ? trace_raw_output_bpf_trace_printk+0xd0/0xd0 [ 108.238770][ T5101] ? create_io_thread+0x1e0/0x1e0 [ 108.243637][ T5101] __x64_sys_clone+0x289/0x310 [ 108.248236][ T5101] ? __do_sys_vfork+0x130/0x130 [ 108.253203][ T5101] ? debug_smp_processor_id+0x17/0x20 [ 108.258388][ T5101] do_syscall_64+0x44/0xd0 [ 108.262647][ T5101] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 108.268369][ T5101] RIP: 0033:0x7f931dc135a9 [ 108.272618][ T5101] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 108.292066][ T5101] RSP: 002b:00007f931c987118 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 108.300302][ T5101] RAX: ffffffffffffffda RBX: 00007f931dd33f80 RCX: 00007f931dc135a9 [ 108.308113][ T5101] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 108.315928][ T5101] RBP: 00007f931c9871d0 R08: 0000000000000000 R09: 0000000000000000 [ 108.323825][ T5101] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 108.331634][ T5101] R13: 00007fffd2d3bdcf R14: 00007f931c987300 R15: 0000000000022000 [ 108.339536][ T5101] 12:34:51 executing program 1: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) syz_clone(0x1ffff000, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 1) 12:34:51 executing program 5: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) syz_clone(0x0, 0x0, 0x11000000, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 12:34:51 executing program 0: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 12:34:51 executing program 2: syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 43) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 12:34:51 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'\x00', 0x52d35ce30131f272}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'\x00', 0x52d35ce30131f272}) (async) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) (async) 12:34:51 executing program 4: perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x12) r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cgroup.controllers\x00', 0x100002, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000140)='memory.low\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f0000000200), 0x12) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000000080)=0x3) syz_clone(0x74809480, 0x0, 0x4100, &(0x7f0000000000), 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000400000000000000000000850000006d000000850000000f00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000080)='sys_exit\x00', r2}, 0x10) 12:34:51 executing program 0: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x10}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 12:34:51 executing program 5: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) syz_clone(0x0, 0x0, 0x1f000000, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) [ 108.565247][ T5111] FAULT_INJECTION: forcing a failure. [ 108.565247][ T5111] name failslab, interval 1, probability 0, space 0, times 0 [ 108.626826][ T5111] CPU: 1 PID: 5111 Comm: syz-executor.2 Not tainted 5.15.74-syzkaller-04383-g7f2e600bf63a #0 [ 108.636933][ T5111] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/11/2022 [ 108.646914][ T5111] Call Trace: [ 108.650036][ T5111] [ 108.652813][ T5111] dump_stack_lvl+0x151/0x1b7 [ 108.657332][ T5111] ? bfq_pos_tree_add_move+0x43e/0x43e [ 108.662621][ T5111] ? do_syscall_64+0x44/0xd0 [ 108.667050][ T5111] dump_stack+0x15/0x17 [ 108.671039][ T5111] should_fail+0x3c0/0x510 [ 108.675293][ T5111] __should_failslab+0x9f/0xe0 [ 108.679891][ T5111] should_failslab+0x9/0x20 [ 108.684232][ T5111] kmem_cache_alloc+0x4f/0x2f0 [ 108.688830][ T5111] ? anon_vma_clone+0xa1/0x4f0 [ 108.693518][ T5111] anon_vma_clone+0xa1/0x4f0 [ 108.697947][ T5111] anon_vma_fork+0x91/0x4f0 [ 108.702284][ T5111] ? anon_vma_name+0x4c/0x70 [ 108.706712][ T5111] dup_mmap+0x750/0xea0 [ 108.710702][ T5111] ? __delayed_free_task+0x20/0x20 [ 108.715745][ T5111] ? mm_init+0x807/0x960 [ 108.719816][ T5111] dup_mm+0x91/0x330 [ 108.723634][ T5111] copy_mm+0x108/0x1b0 [ 108.727547][ T5111] copy_process+0x1295/0x3250 [ 108.732065][ T5111] ? proc_fail_nth_write+0x213/0x290 [ 108.737356][ T5111] ? proc_fail_nth_read+0x220/0x220 [ 108.742387][ T5111] ? check_kill_permission+0x37/0x490 [ 108.747597][ T5111] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 108.752544][ T5111] ? group_send_sig_info+0xa4/0x2f0 [ 108.757590][ T5111] ? vmacache_update+0xb7/0x120 [ 108.762262][ T5111] kernel_clone+0x22d/0x990 [ 108.766606][ T5111] ? create_io_thread+0x1e0/0x1e0 [ 108.771463][ T5111] ? __mutex_lock_slowpath+0x10/0x10 [ 108.776604][ T5111] __x64_sys_clone+0x289/0x310 [ 108.781184][ T5111] ? __do_sys_vfork+0x130/0x130 [ 108.785879][ T5111] ? debug_smp_processor_id+0x17/0x20 [ 108.791081][ T5111] do_syscall_64+0x44/0xd0 [ 108.795335][ T5111] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 108.801057][ T5111] RIP: 0033:0x7f931dc135a9 [ 108.805315][ T5111] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 12:34:52 executing program 0: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x400001}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 12:34:52 executing program 5: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) syz_clone(0x0, 0x0, 0x1ffff000, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) [ 108.824845][ T5111] RSP: 002b:00007f931c987118 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 108.833084][ T5111] RAX: ffffffffffffffda RBX: 00007f931dd33f80 RCX: 00007f931dc135a9 [ 108.840980][ T5111] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 108.848801][ T5111] RBP: 00007f931c9871d0 R08: 0000000000000000 R09: 0000000000000000 [ 108.856691][ T5111] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 108.864506][ T5111] R13: 00007fffd2d3bdcf R14: 00007f931c987300 R15: 0000000000022000 [ 108.872326][ T5111] 12:34:52 executing program 0: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x1004000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 12:34:52 executing program 5: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) syz_clone(0x0, 0x0, 0x20000000, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) [ 108.894611][ T5128] FAULT_INJECTION: forcing a failure. [ 108.894611][ T5128] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 108.962994][ T5128] CPU: 0 PID: 5128 Comm: syz-executor.1 Not tainted 5.15.74-syzkaller-04383-g7f2e600bf63a #0 [ 108.973065][ T5128] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/11/2022 [ 108.982967][ T5128] Call Trace: [ 108.986087][ T5128] [ 108.989405][ T5128] dump_stack_lvl+0x151/0x1b7 [ 108.993915][ T5128] ? bfq_pos_tree_add_move+0x43e/0x43e [ 108.999213][ T5128] dump_stack+0x15/0x17 [ 109.003200][ T5128] should_fail+0x3c0/0x510 [ 109.007463][ T5128] should_fail_usercopy+0x1a/0x20 [ 109.012402][ T5128] _copy_to_user+0x20/0x90 [ 109.016652][ T5128] simple_read_from_buffer+0xdd/0x160 [ 109.021860][ T5128] proc_fail_nth_read+0x1af/0x220 [ 109.026717][ T5128] ? proc_fault_inject_write+0x3a0/0x3a0 [ 109.032187][ T5128] ? security_file_permission+0x497/0x5f0 [ 109.037741][ T5128] ? proc_fault_inject_write+0x3a0/0x3a0 [ 109.043209][ T5128] vfs_read+0x299/0xd80 [ 109.047202][ T5128] ? memset+0x35/0x40 [ 109.051021][ T5128] ? kernel_read+0x1f0/0x1f0 [ 109.055446][ T5128] ? __kasan_check_write+0x14/0x20 [ 109.060395][ T5128] ? mutex_lock+0xb6/0x130 [ 109.064646][ T5128] ? wait_for_completion_killable_timeout+0x10/0x10 [ 109.071915][ T5128] ? __fdget_pos+0x26d/0x310 [ 109.076330][ T5128] ? ksys_read+0x77/0x2c0 [ 109.080596][ T5128] ksys_read+0x198/0x2c0 [ 109.084665][ T5128] ? bpf_trace_run1+0x1c0/0x1c0 [ 109.089350][ T5128] ? vfs_write+0x1050/0x1050 [ 109.093777][ T5128] ? debug_smp_processor_id+0x17/0x20 [ 109.098984][ T5128] __x64_sys_read+0x7b/0x90 [ 109.103412][ T5128] do_syscall_64+0x44/0xd0 [ 109.107662][ T5128] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 109.113391][ T5128] RIP: 0033:0x7f45db3ca2ec [ 109.117647][ T5128] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 109.137091][ T5128] RSP: 002b:00007f45da18c160 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 109.145336][ T5128] RAX: ffffffffffffffda RBX: 00007f45db538f80 RCX: 00007f45db3ca2ec [ 109.153230][ T5128] RDX: 000000000000000f RSI: 00007f45da18c1e0 RDI: 0000000000000003 [ 109.161039][ T5128] RBP: 00007f45da18c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 109.168856][ T5128] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 109.176664][ T5128] R13: 00007ffc40ec3b7f R14: 00007f45da18c300 R15: 0000000000022000 [ 109.184568][ T5128] 12:34:52 executing program 1: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) syz_clone(0x1ffff000, 0x0, 0x0, 0x0, 0x0, 0x0) 12:34:52 executing program 0: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 12:34:52 executing program 5: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) syz_clone(0x0, 0x0, 0x64020000, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 12:34:52 executing program 2: syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 44) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 12:34:52 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'vlan0\x00', 0x52d35ce30131f272}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) close(r0) [ 109.332762][ T5144] FAULT_INJECTION: forcing a failure. [ 109.332762][ T5144] name failslab, interval 1, probability 0, space 0, times 0 [ 109.424015][ T5144] CPU: 1 PID: 5144 Comm: syz-executor.2 Not tainted 5.15.74-syzkaller-04383-g7f2e600bf63a #0 [ 109.434012][ T5144] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/11/2022 [ 109.443901][ T5144] Call Trace: [ 109.447026][ T5144] [ 109.449804][ T5144] dump_stack_lvl+0x151/0x1b7 [ 109.454318][ T5144] ? bfq_pos_tree_add_move+0x43e/0x43e [ 109.459610][ T5144] ? vma_interval_tree_augment_rotate+0x210/0x210 [ 109.465861][ T5144] dump_stack+0x15/0x17 [ 109.469852][ T5144] should_fail+0x3c0/0x510 [ 109.474107][ T5144] __should_failslab+0x9f/0xe0 [ 109.478876][ T5144] should_failslab+0x9/0x20 [ 109.483223][ T5144] kmem_cache_alloc+0x4f/0x2f0 [ 109.487818][ T5144] ? anon_vma_fork+0xf7/0x4f0 [ 109.492330][ T5144] anon_vma_fork+0xf7/0x4f0 [ 109.496668][ T5144] ? anon_vma_name+0x4c/0x70 [ 109.501098][ T5144] dup_mmap+0x750/0xea0 [ 109.505099][ T5144] ? __delayed_free_task+0x20/0x20 [ 109.510036][ T5144] ? mm_init+0x807/0x960 [ 109.514984][ T5144] dup_mm+0x91/0x330 [ 109.518714][ T5144] copy_mm+0x108/0x1b0 [ 109.522625][ T5144] copy_process+0x1295/0x3250 [ 109.527135][ T5144] ? proc_fail_nth_read+0x220/0x220 [ 109.532437][ T5144] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 109.537548][ T5144] ? vfs_write+0x9af/0x1050 [ 109.541893][ T5144] ? vmacache_update+0xb7/0x120 [ 109.546577][ T5144] kernel_clone+0x22d/0x990 [ 109.550915][ T5144] ? make_kuid+0x700/0x700 [ 109.555178][ T5144] ? trace_raw_output_bpf_trace_printk+0xd0/0xd0 [ 109.561327][ T5144] ? create_io_thread+0x1e0/0x1e0 [ 109.566200][ T5144] __x64_sys_clone+0x289/0x310 [ 109.570789][ T5144] ? __do_sys_vfork+0x130/0x130 [ 109.575480][ T5144] ? debug_smp_processor_id+0x17/0x20 [ 109.580714][ T5144] do_syscall_64+0x44/0xd0 [ 109.584938][ T5144] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 109.590662][ T5144] RIP: 0033:0x7f931dc135a9 [ 109.594920][ T5144] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 109.614445][ T5144] RSP: 002b:00007f931c987118 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 12:34:53 executing program 4: perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x12) r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cgroup.controllers\x00', 0x100002, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000140)='memory.low\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f0000000200), 0x12) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000000080)=0x3) syz_clone(0x74809480, 0x0, 0x4100, &(0x7f0000000000), 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000400000000000000000000850000006d000000850000000f00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000080)='sys_exit\x00', r2}, 0x10) 12:34:53 executing program 0: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x4000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 12:34:53 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'vlan0\x00', 0x52d35ce30131f272}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) close(r0) openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'vlan0\x00', 0x52d35ce30131f272}) (async) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) (async) close(r0) (async) 12:34:53 executing program 1: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) syz_clone(0x1ffff000, 0x0, 0xfeffffff, 0x0, 0x0, 0x0) 12:34:53 executing program 0: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x10000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 109.622793][ T5144] RAX: ffffffffffffffda RBX: 00007f931dd33f80 RCX: 00007f931dc135a9 [ 109.630587][ T5144] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 109.638574][ T5144] RBP: 00007f931c9871d0 R08: 0000000000000000 R09: 0000000000000000 [ 109.646385][ T5144] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 109.654194][ T5144] R13: 00007fffd2d3bdcf R14: 00007f931c987300 R15: 0000000000022000 [ 109.662007][ T5144] 12:34:53 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'vlan0\x00', 0x52d35ce30131f272}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) close(r0) 12:34:53 executing program 2: syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 45) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 12:34:53 executing program 1: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) syz_clone(0x1ffff000, 0x0, 0xfffffffe, 0x0, 0x0, 0x0) 12:34:53 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'gretap0\x00', 0x52d35ce30131f272}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) close(r0) 12:34:53 executing program 5: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) syz_clone(0x0, 0x0, 0x9b010000, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 12:34:53 executing program 0: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xfeffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 12:34:53 executing program 1: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) syz_clone(0x1ffff000, 0x0, 0xfeffffff00000000, 0x0, 0x0, 0x0) [ 109.745079][ T5167] FAULT_INJECTION: forcing a failure. [ 109.745079][ T5167] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 109.808865][ T5167] CPU: 0 PID: 5167 Comm: syz-executor.2 Not tainted 5.15.74-syzkaller-04383-g7f2e600bf63a #0 [ 109.818939][ T5167] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/11/2022 [ 109.828838][ T5167] Call Trace: [ 109.831962][ T5167] [ 109.834735][ T5167] dump_stack_lvl+0x151/0x1b7 [ 109.839250][ T5167] ? bfq_pos_tree_add_move+0x43e/0x43e [ 109.844549][ T5167] ? stack_trace_save+0x1f0/0x1f0 [ 109.849405][ T5167] ? __kernel_text_address+0x9a/0x110 [ 109.854699][ T5167] dump_stack+0x15/0x17 [ 109.858875][ T5167] should_fail+0x3c0/0x510 [ 109.863131][ T5167] should_fail_alloc_page+0x58/0x70 [ 109.868157][ T5167] __alloc_pages+0x1de/0x7c0 [ 109.872578][ T5167] ? stack_trace_save+0x12d/0x1f0 [ 109.877527][ T5167] ? stack_trace_snprint+0x100/0x100 [ 109.882644][ T5167] ? __count_vm_events+0x30/0x30 [ 109.887420][ T5167] ? __kasan_slab_alloc+0xc4/0xe0 [ 109.892285][ T5167] ? __kasan_slab_alloc+0xb2/0xe0 [ 109.897141][ T5167] ? kmem_cache_alloc+0x189/0x2f0 [ 109.901999][ T5167] ? anon_vma_fork+0x1b9/0x4f0 [ 109.906608][ T5167] get_zeroed_page+0x19/0x40 [ 109.911032][ T5167] __pud_alloc+0x8b/0x260 [ 109.915194][ T5167] ? do_handle_mm_fault+0x2370/0x2370 [ 109.920498][ T5167] copy_page_range+0xd9e/0x1090 [ 109.925187][ T5167] ? pfn_valid+0x1e0/0x1e0 [ 109.929439][ T5167] dup_mmap+0x99f/0xea0 [ 109.933430][ T5167] ? __delayed_free_task+0x20/0x20 [ 109.938386][ T5167] ? mm_init+0x807/0x960 [ 109.942455][ T5167] dup_mm+0x91/0x330 [ 109.946196][ T5167] copy_mm+0x108/0x1b0 [ 109.950271][ T5167] copy_process+0x1295/0x3250 [ 109.954780][ T5167] ? proc_fail_nth_write+0x213/0x290 [ 109.959902][ T5167] ? proc_fail_nth_read+0x220/0x220 [ 109.964945][ T5167] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 109.969879][ T5167] ? vfs_write+0x9af/0x1050 [ 109.974217][ T5167] ? vmacache_update+0xb7/0x120 [ 109.978906][ T5167] kernel_clone+0x22d/0x990 [ 109.983284][ T5167] ? file_end_write+0x1b0/0x1b0 [ 109.987935][ T5167] ? __kasan_check_write+0x14/0x20 [ 109.992874][ T5167] ? create_io_thread+0x1e0/0x1e0 [ 109.998007][ T5167] ? __mutex_lock_slowpath+0x10/0x10 [ 110.003120][ T5167] __x64_sys_clone+0x289/0x310 [ 110.007810][ T5167] ? __do_sys_vfork+0x130/0x130 [ 110.012502][ T5167] ? debug_smp_processor_id+0x17/0x20 [ 110.017706][ T5167] do_syscall_64+0x44/0xd0 [ 110.022214][ T5167] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 110.027943][ T5167] RIP: 0033:0x7f931dc135a9 [ 110.032198][ T5167] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 110.051641][ T5167] RSP: 002b:00007f931c987118 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 110.059889][ T5167] RAX: ffffffffffffffda RBX: 00007f931dd33f80 RCX: 00007f931dc135a9 [ 110.067693][ T5167] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 110.075587][ T5167] RBP: 00007f931c9871d0 R08: 0000000000000000 R09: 0000000000000000 [ 110.083398][ T5167] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 110.091211][ T5167] R13: 00007fffd2d3bdcf R14: 00007f931c987300 R15: 0000000000022000 [ 110.099117][ T5167] 12:34:53 executing program 4: perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x12) r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cgroup.controllers\x00', 0x100002, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000140)='memory.low\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f0000000200), 0x12) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000000080)=0x3) syz_clone(0x74809480, 0x0, 0x4100, &(0x7f0000000000), 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000400000000000000000000850000006d000000850000000f00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000080)='sys_exit\x00', r2}, 0x10) 12:34:53 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'gretap0\x00', 0x52d35ce30131f272}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) close(r0) openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'gretap0\x00', 0x52d35ce30131f272}) (async) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) (async) close(r0) (async) 12:34:53 executing program 1: bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f00000001c0)={0x1, &(0x7f0000000000)="7364007d7c8388b02c9a6bbee1d4153b221edaf5e9c055ee794cf8d942a8c7988762bfdcdd08da1e11a319c9b85cce2f3a7b8625d04fe4a7bce1248acf5f164026168943ba24ecbe0e8e8e28b2b36360b1645b7b8ee9d5732b367c83a292870fedd6d85985aaebd5032372d800b5bb95f8fc011d3eb641eaea1e69d8d05f22185713daa5f00b920fc14e1f44db182c10529c59e4bae5314e292391bfedc6d4082633931e50a2f4b93f30ffc2d42945b76beba5f75e3f99f0eba0ca2f72c4ebd31125c9f2eb0c69940bf7", &(0x7f0000000100)=""/154, 0x4}, 0x20) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) syz_clone(0x0, 0x0, 0x41, 0x0, 0x0, 0x0) 12:34:53 executing program 5: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) syz_clone(0x0, 0x0, 0xf5ffffff, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 12:34:53 executing program 0: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xfffffffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 12:34:53 executing program 2: syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 46) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 12:34:53 executing program 0: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 12:34:53 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'gretap0\x00', 0x52d35ce30131f272}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) (async) close(r0) 12:34:53 executing program 5: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) syz_clone(0x0, 0x0, 0xfbffffff, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) [ 110.201855][ T5189] FAULT_INJECTION: forcing a failure. [ 110.201855][ T5189] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 110.250813][ T5189] CPU: 1 PID: 5189 Comm: syz-executor.2 Not tainted 5.15.74-syzkaller-04383-g7f2e600bf63a #0 [ 110.260819][ T5189] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/11/2022 [ 110.270701][ T5189] Call Trace: [ 110.273907][ T5189] [ 110.276693][ T5189] dump_stack_lvl+0x151/0x1b7 [ 110.281383][ T5189] ? bfq_pos_tree_add_move+0x43e/0x43e [ 110.286930][ T5189] dump_stack+0x15/0x17 [ 110.291009][ T5189] should_fail+0x3c0/0x510 [ 110.295281][ T5189] should_fail_alloc_page+0x58/0x70 12:34:53 executing program 1: bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f00000001c0)={0x1, &(0x7f0000000000)="7364007d7c8388b02c9a6bbee1d4153b221edaf5e9c055ee794cf8d942a8c7988762bfdcdd08da1e11a319c9b85cce2f3a7b8625d04fe4a7bce1248acf5f164026168943ba24ecbe0e8e8e28b2b36360b1645b7b8ee9d5732b367c83a292870fedd6d85985aaebd5032372d800b5bb95f8fc011d3eb641eaea1e69d8d05f22185713daa5f00b920fc14e1f44db182c10529c59e4bae5314e292391bfedc6d4082633931e50a2f4b93f30ffc2d42945b76beba5f75e3f99f0eba0ca2f72c4ebd31125c9f2eb0c69940bf7", &(0x7f0000000100)=""/154, 0x4}, 0x20) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) syz_clone(0x0, 0x0, 0x41, 0x0, 0x0, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f00000001c0)={0x1, &(0x7f0000000000)="7364007d7c8388b02c9a6bbee1d4153b221edaf5e9c055ee794cf8d942a8c7988762bfdcdd08da1e11a319c9b85cce2f3a7b8625d04fe4a7bce1248acf5f164026168943ba24ecbe0e8e8e28b2b36360b1645b7b8ee9d5732b367c83a292870fedd6d85985aaebd5032372d800b5bb95f8fc011d3eb641eaea1e69d8d05f22185713daa5f00b920fc14e1f44db182c10529c59e4bae5314e292391bfedc6d4082633931e50a2f4b93f30ffc2d42945b76beba5f75e3f99f0eba0ca2f72c4ebd31125c9f2eb0c69940bf7", &(0x7f0000000100)=""/154, 0x4}, 0x20) (async) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) (async) syz_clone(0x0, 0x0, 0x41, 0x0, 0x0, 0x0) (async) 12:34:53 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x50401, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0) write$cgroup_type(r1, &(0x7f0000000080), 0x11ffffce1) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x660c, 0x0) ioctl$TUNSETVNETLE(r1, 0x400454dc, &(0x7f00000000c0)=0x1) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'\x00', 0x52d35ce30131f272}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000080)=0x7) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f0000000040)=0x1) close(r0) r2 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x2200, &(0x7f00000003c0)="11f1c5c6634befa1cd46533dfe08bdd0dc94f1fc346b1d5b3fe770526cc1a14c963b2347baa03e09b29bbe06bae8ca0a4e9d73a7c36303e1d3c51322963d86d001e68ad99b34cf5d016ae5415f15b876adea400c", 0x54, &(0x7f0000000440), &(0x7f0000000480), &(0x7f00000004c0)="9f251d23d67ec51f44e2f1a5e1803673bc3e2b2c33cb0e45d78cc4c93f83689480ea00b6829cf5449b95651104af596751acce78ed4a9954c15f0ecdee016f2325fb794be03a1c5817b42e977a74f6da13d20e729400b5a0c955ec87d1ac0f789d373e97e54eee3448a1c85257204f27829871aa44aed1a8df6077f88c37601a63d17a767da14754e174bef8a8243735b7bfdb3b8343a3a498b328b495501080d8ed1564a2d2f5c283407a72b17694e279794510c8c58a5f187871") perf_event_open(0x0, r3, 0xe, r2, 0x2) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0) write$cgroup_type(r4, &(0x7f0000000080), 0x11ffffce1) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x660c, 0x0) perf_event_open(&(0x7f0000000240)={0x0, 0x80, 0x0, 0x61, 0x0, 0x32, 0x0, 0x0, 0x8, 0x8, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x80000001, 0x0, @perf_bp={&(0x7f0000000180), 0xb}, 0x4140, 0x80000000, 0x0, 0x8, 0x20, 0x3, 0x101, 0x0, 0x4, 0x0, 0x8001}, r3, 0x0, r4, 0x8) openat$cgroup_ro(r1, &(0x7f0000000140)='cgroup.events\x00', 0x0, 0x0) close(r0) [ 110.300305][ T5189] __alloc_pages+0x1de/0x7c0 [ 110.304721][ T5189] ? __count_vm_events+0x30/0x30 [ 110.309492][ T5189] ? __this_cpu_preempt_check+0x13/0x20 [ 110.314891][ T5189] ? __mod_node_page_state+0xac/0xf0 [ 110.319998][ T5189] pte_alloc_one+0x73/0x1b0 [ 110.324432][ T5189] ? pfn_modify_allowed+0x2e0/0x2e0 [ 110.329451][ T5189] __pte_alloc+0x86/0x350 [ 110.333618][ T5189] ? free_pgtables+0x210/0x210 [ 110.338217][ T5189] ? _raw_spin_lock+0xa3/0x1b0 [ 110.342814][ T5189] ? _raw_spin_trylock_bh+0x1d0/0x1d0 [ 110.348022][ T5189] ? __kernel_text_address+0x9a/0x110 [ 110.353237][ T5189] copy_pte_range+0x1b1f/0x20b0 [ 110.358009][ T5189] ? __kunmap_atomic+0x80/0x80 [ 110.362604][ T5189] ? __kasan_slab_alloc+0xc4/0xe0 [ 110.367462][ T5189] ? __kasan_slab_alloc+0xb2/0xe0 [ 110.372330][ T5189] ? kmem_cache_alloc+0x189/0x2f0 [ 110.377190][ T5189] ? vm_area_dup+0x26/0x1d0 [ 110.381522][ T5189] ? dup_mmap+0x6b8/0xea0 [ 110.385691][ T5189] ? dup_mm+0x91/0x330 [ 110.389601][ T5189] ? copy_mm+0x108/0x1b0 [ 110.393674][ T5189] ? copy_process+0x1295/0x3250 [ 110.398361][ T5189] ? kernel_clone+0x22d/0x990 [ 110.402874][ T5189] ? __x64_sys_clone+0x289/0x310 [ 110.407650][ T5189] ? do_syscall_64+0x44/0xd0 [ 110.412083][ T5189] ? entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 110.417981][ T5189] copy_page_range+0xc1e/0x1090 [ 110.422680][ T5189] ? pfn_valid+0x1e0/0x1e0 [ 110.426922][ T5189] dup_mmap+0x99f/0xea0 [ 110.430919][ T5189] ? __delayed_free_task+0x20/0x20 [ 110.436030][ T5189] ? mm_init+0x807/0x960 [ 110.440108][ T5189] dup_mm+0x91/0x330 [ 110.443842][ T5189] copy_mm+0x108/0x1b0 [ 110.447744][ T5189] copy_process+0x1295/0x3250 [ 110.452262][ T5189] ? proc_fail_nth_write+0x213/0x290 [ 110.457378][ T5189] ? proc_fail_nth_read+0x220/0x220 [ 110.462411][ T5189] ? check_kill_permission+0x37/0x490 [ 110.467621][ T5189] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 110.472577][ T5189] ? group_send_sig_info+0xa4/0x2f0 [ 110.477600][ T5189] ? vmacache_update+0xb7/0x120 [ 110.482291][ T5189] kernel_clone+0x22d/0x990 [ 110.486714][ T5189] ? create_io_thread+0x1e0/0x1e0 [ 110.491576][ T5189] ? __mutex_lock_slowpath+0x10/0x10 [ 110.496698][ T5189] __x64_sys_clone+0x289/0x310 [ 110.501299][ T5189] ? __do_sys_vfork+0x130/0x130 [ 110.505984][ T5189] ? debug_smp_processor_id+0x17/0x20 [ 110.511191][ T5189] do_syscall_64+0x44/0xd0 [ 110.515480][ T5189] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 110.521190][ T5189] RIP: 0033:0x7f931dc135a9 [ 110.525425][ T5189] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 12:34:53 executing program 0: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 110.545038][ T5189] RSP: 002b:00007f931c987118 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 110.553281][ T5189] RAX: ffffffffffffffda RBX: 00007f931dd33f80 RCX: 00007f931dc135a9 [ 110.561091][ T5189] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 110.568904][ T5189] RBP: 00007f931c9871d0 R08: 0000000000000000 R09: 0000000000000000 [ 110.576718][ T5189] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 110.584527][ T5189] R13: 00007fffd2d3bdcf R14: 00007f931c987300 R15: 0000000000022000 [ 110.592341][ T5189] 12:34:54 executing program 4: perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x12) r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cgroup.controllers\x00', 0x100002, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000140)='memory.low\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f0000000200), 0x12) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000000080)=0x3) syz_clone(0x74809480, 0x0, 0x4100, &(0x7f0000000000), 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000400000000000000000000850000006d000000850000000f00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000080)='sys_exit\x00', r2}, 0x10) 12:34:54 executing program 5: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) syz_clone(0x0, 0x0, 0xff0f0100, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 12:34:54 executing program 0: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 12:34:54 executing program 1: bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f00000001c0)={0x1, &(0x7f0000000000)="7364007d7c8388b02c9a6bbee1d4153b221edaf5e9c055ee794cf8d942a8c7988762bfdcdd08da1e11a319c9b85cce2f3a7b8625d04fe4a7bce1248acf5f164026168943ba24ecbe0e8e8e28b2b36360b1645b7b8ee9d5732b367c83a292870fedd6d85985aaebd5032372d800b5bb95f8fc011d3eb641eaea1e69d8d05f22185713daa5f00b920fc14e1f44db182c10529c59e4bae5314e292391bfedc6d4082633931e50a2f4b93f30ffc2d42945b76beba5f75e3f99f0eba0ca2f72c4ebd31125c9f2eb0c69940bf7", &(0x7f0000000100)=""/154, 0x4}, 0x20) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) syz_clone(0x0, 0x0, 0x41, 0x0, 0x0, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f00000001c0)={0x1, &(0x7f0000000000)="7364007d7c8388b02c9a6bbee1d4153b221edaf5e9c055ee794cf8d942a8c7988762bfdcdd08da1e11a319c9b85cce2f3a7b8625d04fe4a7bce1248acf5f164026168943ba24ecbe0e8e8e28b2b36360b1645b7b8ee9d5732b367c83a292870fedd6d85985aaebd5032372d800b5bb95f8fc011d3eb641eaea1e69d8d05f22185713daa5f00b920fc14e1f44db182c10529c59e4bae5314e292391bfedc6d4082633931e50a2f4b93f30ffc2d42945b76beba5f75e3f99f0eba0ca2f72c4ebd31125c9f2eb0c69940bf7", &(0x7f0000000100)=""/154, 0x4}, 0x20) (async) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) (async) syz_clone(0x0, 0x0, 0x41, 0x0, 0x0, 0x0) (async) 12:34:54 executing program 2: syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 47) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 12:34:54 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x50401, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0) write$cgroup_type(r1, &(0x7f0000000080), 0x11ffffce1) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x660c, 0x0) ioctl$TUNSETVNETLE(r1, 0x400454dc, &(0x7f00000000c0)=0x1) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'\x00', 0x52d35ce30131f272}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000080)=0x7) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f0000000040)=0x1) close(r0) r2 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x2200, &(0x7f00000003c0)="11f1c5c6634befa1cd46533dfe08bdd0dc94f1fc346b1d5b3fe770526cc1a14c963b2347baa03e09b29bbe06bae8ca0a4e9d73a7c36303e1d3c51322963d86d001e68ad99b34cf5d016ae5415f15b876adea400c", 0x54, &(0x7f0000000440), &(0x7f0000000480), &(0x7f00000004c0)="9f251d23d67ec51f44e2f1a5e1803673bc3e2b2c33cb0e45d78cc4c93f83689480ea00b6829cf5449b95651104af596751acce78ed4a9954c15f0ecdee016f2325fb794be03a1c5817b42e977a74f6da13d20e729400b5a0c955ec87d1ac0f789d373e97e54eee3448a1c85257204f27829871aa44aed1a8df6077f88c37601a63d17a767da14754e174bef8a8243735b7bfdb3b8343a3a498b328b495501080d8ed1564a2d2f5c283407a72b17694e279794510c8c58a5f187871") perf_event_open(0x0, r3, 0xe, r2, 0x2) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0) write$cgroup_type(r4, &(0x7f0000000080), 0x11ffffce1) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x660c, 0x0) perf_event_open(&(0x7f0000000240)={0x0, 0x80, 0x0, 0x61, 0x0, 0x32, 0x0, 0x0, 0x8, 0x8, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x80000001, 0x0, @perf_bp={&(0x7f0000000180), 0xb}, 0x4140, 0x80000000, 0x0, 0x8, 0x20, 0x3, 0x101, 0x0, 0x4, 0x0, 0x8001}, r3, 0x0, r4, 0x8) openat$cgroup_ro(r1, &(0x7f0000000140)='cgroup.events\x00', 0x0, 0x0) close(r0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x50401, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0) (async) write$cgroup_type(r1, &(0x7f0000000080), 0x11ffffce1) (async) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x660c, 0x0) (async) ioctl$TUNSETVNETLE(r1, 0x400454dc, &(0x7f00000000c0)=0x1) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'\x00', 0x52d35ce30131f272}) (async) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) (async) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000080)=0x7) (async) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f0000000040)=0x1) (async) close(r0) (async) perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) syz_clone(0x2200, &(0x7f00000003c0)="11f1c5c6634befa1cd46533dfe08bdd0dc94f1fc346b1d5b3fe770526cc1a14c963b2347baa03e09b29bbe06bae8ca0a4e9d73a7c36303e1d3c51322963d86d001e68ad99b34cf5d016ae5415f15b876adea400c", 0x54, &(0x7f0000000440), &(0x7f0000000480), &(0x7f00000004c0)="9f251d23d67ec51f44e2f1a5e1803673bc3e2b2c33cb0e45d78cc4c93f83689480ea00b6829cf5449b95651104af596751acce78ed4a9954c15f0ecdee016f2325fb794be03a1c5817b42e977a74f6da13d20e729400b5a0c955ec87d1ac0f789d373e97e54eee3448a1c85257204f27829871aa44aed1a8df6077f88c37601a63d17a767da14754e174bef8a8243735b7bfdb3b8343a3a498b328b495501080d8ed1564a2d2f5c283407a72b17694e279794510c8c58a5f187871") (async) perf_event_open(0x0, r3, 0xe, r2, 0x2) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0) (async) write$cgroup_type(r4, &(0x7f0000000080), 0x11ffffce1) (async) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x660c, 0x0) (async) perf_event_open(&(0x7f0000000240)={0x0, 0x80, 0x0, 0x61, 0x0, 0x32, 0x0, 0x0, 0x8, 0x8, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x80000001, 0x0, @perf_bp={&(0x7f0000000180), 0xb}, 0x4140, 0x80000000, 0x0, 0x8, 0x20, 0x3, 0x101, 0x0, 0x4, 0x0, 0x8001}, r3, 0x0, r4, 0x8) (async) openat$cgroup_ro(r1, &(0x7f0000000140)='cgroup.events\x00', 0x0, 0x0) (async) close(r0) (async) 12:34:54 executing program 0: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x10}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 12:34:54 executing program 5: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) syz_clone(0x0, 0x0, 0xfffffff5, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 12:34:54 executing program 0: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x400001}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 12:34:54 executing program 1: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) syz_clone(0x1ffff000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x800000, &(0x7f0000000040)="629025a68b1d80c95738ba0751590983ddf9253d022059df6d918c6c38d4341bcecfc73d5d3ff13d70323cba826ffb89", 0x30, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000100)="b20316eee934085beb797f2d8cb547317fb986d59bc75367fb5f89d2cfb9c4a32642a5ab6eb234871c11609ede82ff0ca244e1f326f9cf5fc095de6cd70eee118767f981343a6802ace40b69e3cb5dd16f5be7975b1599ec78ee0739779ac608f701794c4867ec57547de086be0588bed8b8467a4c6f8e5d9bf567fb43fcbfa98db9b8b556333578b586719913ae5654b6d49fcb61907fc50aeab485c0a440bc4e6a5115816ca608d4a160d8edd11debc8e9fc73e6c5a96197c8aed926ace5") openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.io_wait_time_recursive\x00', 0x0, 0x0) syz_clone(0x0, &(0x7f00000001c0)="da62e697108bdd3a0a25940adef800757c56efc8501c0b0065dcdb6a27379d7f6e1372f81e81be8b0ba9440c726948788aad1caa788522aeecaab753ed1f1822187a67fb9fc0ea87463b7918265fdd7fab0839cfe1ac54f2937d9c68a31d7e64c7b87a1a919f8f9e84b15afc1fa474207bbb8ada2ab4e8fbbddf569d8efb106492a75ed2b843491e0b04997e42d3fb95ad9df049907eea75bf0dc9fc4c295363b406849c7c2237f6cfeafa73674153b9e044b07394dbdcb9524c254af393f1691882b3009378d8228e279258910c994b3e03bae8637722be103ca8ab", 0xdc, &(0x7f00000002c0), &(0x7f0000000300), &(0x7f0000000340)="7a8a710a788ee2d46f327b10fad5f3f63d7312a5071afb36bbefee1903b453d084eb7e6a9d7bbde66813c1a769347fcfc56e4f2b1b83fbdea57281c6b6a91b20f71e95434d7ab7bdc00a6ca8e748a8453133ec7e102ed5e9d3ace11dd456b16f26deb9e598646c3f9adb") 12:34:54 executing program 5: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) syz_clone(0x0, 0x0, 0xfffffffb, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 12:34:54 executing program 0: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x1004000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 111.339049][ T5275] FAULT_INJECTION: forcing a failure. [ 111.339049][ T5275] name failslab, interval 1, probability 0, space 0, times 0 [ 111.386207][ T5275] CPU: 1 PID: 5275 Comm: syz-executor.2 Not tainted 5.15.74-syzkaller-04383-g7f2e600bf63a #0 [ 111.396193][ T5275] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/11/2022 [ 111.406090][ T5275] Call Trace: [ 111.409216][ T5275] [ 111.411992][ T5275] dump_stack_lvl+0x151/0x1b7 [ 111.416502][ T5275] ? bfq_pos_tree_add_move+0x43e/0x43e [ 111.421810][ T5275] dump_stack+0x15/0x17 [ 111.425788][ T5275] should_fail+0x3c0/0x510 [ 111.430043][ T5275] __should_failslab+0x9f/0xe0 [ 111.434644][ T5275] should_failslab+0x9/0x20 [ 111.438983][ T5275] kmem_cache_alloc+0x4f/0x2f0 [ 111.443581][ T5275] ? vm_area_dup+0x26/0x1d0 [ 111.447926][ T5275] vm_area_dup+0x26/0x1d0 [ 111.452087][ T5275] dup_mmap+0x6b8/0xea0 [ 111.456083][ T5275] ? __delayed_free_task+0x20/0x20 [ 111.461033][ T5275] ? mm_init+0x807/0x960 [ 111.465105][ T5275] dup_mm+0x91/0x330 [ 111.468859][ T5275] copy_mm+0x108/0x1b0 [ 111.472743][ T5275] copy_process+0x1295/0x3250 [ 111.477258][ T5275] ? proc_fail_nth_read+0x220/0x220 [ 111.482294][ T5275] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 111.487242][ T5275] ? vfs_write+0x9af/0x1050 [ 111.491575][ T5275] ? vmacache_update+0xb7/0x120 [ 111.496267][ T5275] kernel_clone+0x22d/0x990 [ 111.500603][ T5275] ? make_kuid+0x700/0x700 [ 111.504861][ T5275] ? trace_raw_output_bpf_trace_printk+0xd0/0xd0 [ 111.511017][ T5275] ? create_io_thread+0x1e0/0x1e0 [ 111.515882][ T5275] __x64_sys_clone+0x289/0x310 [ 111.520481][ T5275] ? __do_sys_vfork+0x130/0x130 [ 111.525167][ T5275] ? debug_smp_processor_id+0x17/0x20 [ 111.530375][ T5275] do_syscall_64+0x44/0xd0 [ 111.534624][ T5275] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 111.540351][ T5275] RIP: 0033:0x7f931dc135a9 [ 111.544605][ T5275] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 111.564048][ T5275] RSP: 002b:00007f931c987118 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 111.572293][ T5275] RAX: ffffffffffffffda RBX: 00007f931dd33f80 RCX: 00007f931dc135a9 12:34:54 executing program 4: perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x12) r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cgroup.controllers\x00', 0x100002, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000140)='memory.low\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f0000000200), 0x12) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000000080)=0x3) syz_clone(0x74809480, 0x0, 0x4100, &(0x7f0000000000), 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000400000000000000000000850000006d000000850000000f00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000080)='sys_exit\x00', r2}, 0x10) 12:34:54 executing program 0: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x2000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 12:34:54 executing program 1: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) syz_clone(0x1ffff000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x800000, &(0x7f0000000040)="629025a68b1d80c95738ba0751590983ddf9253d022059df6d918c6c38d4341bcecfc73d5d3ff13d70323cba826ffb89", 0x30, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000100)="b20316eee934085beb797f2d8cb547317fb986d59bc75367fb5f89d2cfb9c4a32642a5ab6eb234871c11609ede82ff0ca244e1f326f9cf5fc095de6cd70eee118767f981343a6802ace40b69e3cb5dd16f5be7975b1599ec78ee0739779ac608f701794c4867ec57547de086be0588bed8b8467a4c6f8e5d9bf567fb43fcbfa98db9b8b556333578b586719913ae5654b6d49fcb61907fc50aeab485c0a440bc4e6a5115816ca608d4a160d8edd11debc8e9fc73e6c5a96197c8aed926ace5") openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.io_wait_time_recursive\x00', 0x0, 0x0) syz_clone(0x0, &(0x7f00000001c0)="da62e697108bdd3a0a25940adef800757c56efc8501c0b0065dcdb6a27379d7f6e1372f81e81be8b0ba9440c726948788aad1caa788522aeecaab753ed1f1822187a67fb9fc0ea87463b7918265fdd7fab0839cfe1ac54f2937d9c68a31d7e64c7b87a1a919f8f9e84b15afc1fa474207bbb8ada2ab4e8fbbddf569d8efb106492a75ed2b843491e0b04997e42d3fb95ad9df049907eea75bf0dc9fc4c295363b406849c7c2237f6cfeafa73674153b9e044b07394dbdcb9524c254af393f1691882b3009378d8228e279258910c994b3e03bae8637722be103ca8ab", 0xdc, &(0x7f00000002c0), &(0x7f0000000300), &(0x7f0000000340)="7a8a710a788ee2d46f327b10fad5f3f63d7312a5071afb36bbefee1903b453d084eb7e6a9d7bbde66813c1a769347fcfc56e4f2b1b83fbdea57281c6b6a91b20f71e95434d7ab7bdc00a6ca8e748a8453133ec7e102ed5e9d3ace11dd456b16f26deb9e598646c3f9adb") openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) (async) syz_clone(0x1ffff000, 0x0, 0x0, 0x0, 0x0, 0x0) (async) syz_clone(0x800000, &(0x7f0000000040)="629025a68b1d80c95738ba0751590983ddf9253d022059df6d918c6c38d4341bcecfc73d5d3ff13d70323cba826ffb89", 0x30, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000100)="b20316eee934085beb797f2d8cb547317fb986d59bc75367fb5f89d2cfb9c4a32642a5ab6eb234871c11609ede82ff0ca244e1f326f9cf5fc095de6cd70eee118767f981343a6802ace40b69e3cb5dd16f5be7975b1599ec78ee0739779ac608f701794c4867ec57547de086be0588bed8b8467a4c6f8e5d9bf567fb43fcbfa98db9b8b556333578b586719913ae5654b6d49fcb61907fc50aeab485c0a440bc4e6a5115816ca608d4a160d8edd11debc8e9fc73e6c5a96197c8aed926ace5") (async) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.io_wait_time_recursive\x00', 0x0, 0x0) (async) syz_clone(0x0, &(0x7f00000001c0)="da62e697108bdd3a0a25940adef800757c56efc8501c0b0065dcdb6a27379d7f6e1372f81e81be8b0ba9440c726948788aad1caa788522aeecaab753ed1f1822187a67fb9fc0ea87463b7918265fdd7fab0839cfe1ac54f2937d9c68a31d7e64c7b87a1a919f8f9e84b15afc1fa474207bbb8ada2ab4e8fbbddf569d8efb106492a75ed2b843491e0b04997e42d3fb95ad9df049907eea75bf0dc9fc4c295363b406849c7c2237f6cfeafa73674153b9e044b07394dbdcb9524c254af393f1691882b3009378d8228e279258910c994b3e03bae8637722be103ca8ab", 0xdc, &(0x7f00000002c0), &(0x7f0000000300), &(0x7f0000000340)="7a8a710a788ee2d46f327b10fad5f3f63d7312a5071afb36bbefee1903b453d084eb7e6a9d7bbde66813c1a769347fcfc56e4f2b1b83fbdea57281c6b6a91b20f71e95434d7ab7bdc00a6ca8e748a8453133ec7e102ed5e9d3ace11dd456b16f26deb9e598646c3f9adb") (async) 12:34:54 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x50401, 0x0) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0) write$cgroup_type(r1, &(0x7f0000000080), 0x11ffffce1) (async) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x660c, 0x0) ioctl$TUNSETVNETLE(r1, 0x400454dc, &(0x7f00000000c0)=0x1) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'\x00', 0x52d35ce30131f272}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) (async) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000080)=0x7) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f0000000040)=0x1) (async) close(r0) (async) r2 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x2200, &(0x7f00000003c0)="11f1c5c6634befa1cd46533dfe08bdd0dc94f1fc346b1d5b3fe770526cc1a14c963b2347baa03e09b29bbe06bae8ca0a4e9d73a7c36303e1d3c51322963d86d001e68ad99b34cf5d016ae5415f15b876adea400c", 0x54, &(0x7f0000000440), &(0x7f0000000480), &(0x7f00000004c0)="9f251d23d67ec51f44e2f1a5e1803673bc3e2b2c33cb0e45d78cc4c93f83689480ea00b6829cf5449b95651104af596751acce78ed4a9954c15f0ecdee016f2325fb794be03a1c5817b42e977a74f6da13d20e729400b5a0c955ec87d1ac0f789d373e97e54eee3448a1c85257204f27829871aa44aed1a8df6077f88c37601a63d17a767da14754e174bef8a8243735b7bfdb3b8343a3a498b328b495501080d8ed1564a2d2f5c283407a72b17694e279794510c8c58a5f187871") perf_event_open(0x0, r3, 0xe, r2, 0x2) (async) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0) write$cgroup_type(r4, &(0x7f0000000080), 0x11ffffce1) (async) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x660c, 0x0) (async) perf_event_open(&(0x7f0000000240)={0x0, 0x80, 0x0, 0x61, 0x0, 0x32, 0x0, 0x0, 0x8, 0x8, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x80000001, 0x0, @perf_bp={&(0x7f0000000180), 0xb}, 0x4140, 0x80000000, 0x0, 0x8, 0x20, 0x3, 0x101, 0x0, 0x4, 0x0, 0x8001}, r3, 0x0, r4, 0x8) (async) openat$cgroup_ro(r1, &(0x7f0000000140)='cgroup.events\x00', 0x0, 0x0) (async) close(r0) 12:34:54 executing program 2: syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 12:34:54 executing program 5: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) syz_clone(0x0, 0x0, 0x1b0d51f000, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) [ 111.580106][ T5275] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 111.588261][ T5275] RBP: 00007f931c9871d0 R08: 0000000000000000 R09: 0000000000000000 [ 111.596159][ T5275] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 111.603970][ T5275] R13: 00007fffd2d3bdcf R14: 00007f931c987300 R15: 0000000000022000 [ 111.611819][ T5275] 12:34:55 executing program 0: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 12:34:55 executing program 0: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x10000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 12:34:55 executing program 0: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0xfeffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 12:34:55 executing program 0: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0xfffffffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 111.703545][ T5297] FAULT_INJECTION: forcing a failure. [ 111.703545][ T5297] name fail_page_alloc, interval 1, probability 0, space 0, times 0 12:34:55 executing program 1: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) (async) syz_clone(0x1ffff000, 0x0, 0x0, 0x0, 0x0, 0x0) (async) syz_clone(0x800000, &(0x7f0000000040)="629025a68b1d80c95738ba0751590983ddf9253d022059df6d918c6c38d4341bcecfc73d5d3ff13d70323cba826ffb89", 0x30, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000100)="b20316eee934085beb797f2d8cb547317fb986d59bc75367fb5f89d2cfb9c4a32642a5ab6eb234871c11609ede82ff0ca244e1f326f9cf5fc095de6cd70eee118767f981343a6802ace40b69e3cb5dd16f5be7975b1599ec78ee0739779ac608f701794c4867ec57547de086be0588bed8b8467a4c6f8e5d9bf567fb43fcbfa98db9b8b556333578b586719913ae5654b6d49fcb61907fc50aeab485c0a440bc4e6a5115816ca608d4a160d8edd11debc8e9fc73e6c5a96197c8aed926ace5") (async) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.io_wait_time_recursive\x00', 0x0, 0x0) syz_clone(0x0, &(0x7f00000001c0)="da62e697108bdd3a0a25940adef800757c56efc8501c0b0065dcdb6a27379d7f6e1372f81e81be8b0ba9440c726948788aad1caa788522aeecaab753ed1f1822187a67fb9fc0ea87463b7918265fdd7fab0839cfe1ac54f2937d9c68a31d7e64c7b87a1a919f8f9e84b15afc1fa474207bbb8ada2ab4e8fbbddf569d8efb106492a75ed2b843491e0b04997e42d3fb95ad9df049907eea75bf0dc9fc4c295363b406849c7c2237f6cfeafa73674153b9e044b07394dbdcb9524c254af393f1691882b3009378d8228e279258910c994b3e03bae8637722be103ca8ab", 0xdc, &(0x7f00000002c0), &(0x7f0000000300), &(0x7f0000000340)="7a8a710a788ee2d46f327b10fad5f3f63d7312a5071afb36bbefee1903b453d084eb7e6a9d7bbde66813c1a769347fcfc56e4f2b1b83fbdea57281c6b6a91b20f71e95434d7ab7bdc00a6ca8e748a8453133ec7e102ed5e9d3ace11dd456b16f26deb9e598646c3f9adb") 12:34:55 executing program 0: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 111.812769][ T5297] CPU: 1 PID: 5297 Comm: syz-executor.2 Not tainted 5.15.74-syzkaller-04383-g7f2e600bf63a #0 [ 111.822762][ T5297] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/11/2022 [ 111.832830][ T5297] Call Trace: [ 111.835953][ T5297] [ 111.838728][ T5297] dump_stack_lvl+0x151/0x1b7 [ 111.843244][ T5297] ? bfq_pos_tree_add_move+0x43e/0x43e [ 111.848536][ T5297] dump_stack+0x15/0x17 [ 111.852531][ T5297] should_fail+0x3c0/0x510 [ 111.856782][ T5297] should_fail_alloc_page+0x58/0x70 [ 111.861821][ T5297] __alloc_pages+0x1de/0x7c0 [ 111.866246][ T5297] ? __count_vm_events+0x30/0x30 [ 111.871016][ T5297] ? __this_cpu_preempt_check+0x13/0x20 [ 111.876396][ T5297] ? __mod_node_page_state+0xac/0xf0 [ 111.881518][ T5297] pte_alloc_one+0x73/0x1b0 [ 111.885857][ T5297] ? pfn_modify_allowed+0x2e0/0x2e0 [ 111.890895][ T5297] __pte_alloc+0x86/0x350 [ 111.895056][ T5297] ? free_pgtables+0x210/0x210 [ 111.899656][ T5297] ? _raw_spin_lock+0xa3/0x1b0 [ 111.904257][ T5297] ? _raw_spin_trylock_bh+0x1d0/0x1d0 12:34:55 executing program 4: perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x12) r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cgroup.controllers\x00', 0x100002, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000140)='memory.low\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f0000000200), 0x12) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000000080)=0x3) syz_clone(0x74809480, 0x0, 0x4100, &(0x7f0000000000), 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000400000000000000000000850000006d000000850000000f00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000080)='sys_exit\x00', r2}, 0x10) 12:34:55 executing program 0: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 12:34:55 executing program 5: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) syz_clone(0x0, 0x0, 0x2a38f36b5000, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) [ 111.909463][ T5297] ? __kernel_text_address+0x9a/0x110 [ 111.914674][ T5297] copy_pte_range+0x1b1f/0x20b0 [ 111.919408][ T5297] ? __kunmap_atomic+0x80/0x80 [ 111.923957][ T5297] ? __kasan_slab_alloc+0xc4/0xe0 [ 111.928817][ T5297] ? __kasan_slab_alloc+0xb2/0xe0 [ 111.933674][ T5297] ? kmem_cache_alloc+0x189/0x2f0 [ 111.938536][ T5297] ? vm_area_dup+0x26/0x1d0 [ 111.942879][ T5297] ? dup_mmap+0x6b8/0xea0 [ 111.947041][ T5297] ? dup_mm+0x91/0x330 [ 111.950948][ T5297] ? copy_mm+0x108/0x1b0 [ 111.955030][ T5297] ? copy_process+0x1295/0x3250 [ 111.959713][ T5297] ? kernel_clone+0x22d/0x990 [ 111.964227][ T5297] ? __x64_sys_clone+0x289/0x310 [ 111.969003][ T5297] ? do_syscall_64+0x44/0xd0 [ 111.973430][ T5297] ? entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 111.979333][ T5297] copy_page_range+0xc1e/0x1090 [ 111.984020][ T5297] ? pfn_valid+0x1e0/0x1e0 [ 111.988278][ T5297] dup_mmap+0x99f/0xea0 [ 111.992262][ T5297] ? __delayed_free_task+0x20/0x20 [ 111.997819][ T5297] ? mm_init+0x807/0x960 [ 112.001899][ T5297] dup_mm+0x91/0x330 [ 112.005626][ T5297] copy_mm+0x108/0x1b0 [ 112.009545][ T5297] copy_process+0x1295/0x3250 [ 112.014046][ T5297] ? proc_fail_nth_write+0x213/0x290 [ 112.019170][ T5297] ? proc_fail_nth_read+0x220/0x220 [ 112.024203][ T5297] ? check_kill_permission+0x37/0x490 [ 112.029410][ T5297] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 112.034356][ T5297] ? group_send_sig_info+0xa4/0x2f0 [ 112.039388][ T5297] ? vmacache_update+0xb7/0x120 [ 112.044079][ T5297] kernel_clone+0x22d/0x990 [ 112.048418][ T5297] ? create_io_thread+0x1e0/0x1e0 [ 112.053284][ T5297] ? __mutex_lock_slowpath+0x10/0x10 [ 112.058397][ T5297] __x64_sys_clone+0x289/0x310 [ 112.062998][ T5297] ? __do_sys_vfork+0x130/0x130 [ 112.067687][ T5297] ? debug_smp_processor_id+0x17/0x20 [ 112.072899][ T5297] do_syscall_64+0x44/0xd0 [ 112.077144][ T5297] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 112.082960][ T5297] RIP: 0033:0x7f931dc135a9 [ 112.087218][ T5297] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 112.106840][ T5297] RSP: 002b:00007f931c987118 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 112.115169][ T5297] RAX: ffffffffffffffda RBX: 00007f931dd33f80 RCX: 00007f931dc135a9 [ 112.122979][ T5297] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 112.130790][ T5297] RBP: 00007f931c9871d0 R08: 0000000000000000 R09: 0000000000000000 [ 112.138598][ T5297] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 112.146409][ T5297] R13: 00007fffd2d3bdcf R14: 00007f931c987300 R15: 0000000000022000 [ 112.154308][ T5297] 12:34:55 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.throttle.io_service_bytes_recursive\x00', 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0) write$cgroup_type(r1, &(0x7f0000000080), 0x11ffffce1) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x660c, 0x0) openat$cgroup_ro(r1, &(0x7f0000001300)='blkio.bfq.io_queued\x00', 0x0, 0x0) recvmsg(r0, &(0x7f00000012c0)={&(0x7f0000000080)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private0}}, 0x80, &(0x7f0000000240), 0x0, &(0x7f0000001380)=""/4110, 0x100e}, 0x40) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0) write$cgroup_type(r3, &(0x7f0000000080), 0x11ffffce1) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x660c, 0x0) ioctl$TUNSETVNETBE(r3, 0x400454de, &(0x7f0000001340)=0x1) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'\x00', 0x52d35ce30131f272}) ioctl$TUNSETLINK(r2, 0x400454cd, 0x334) 12:34:55 executing program 2: syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 49) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 12:34:55 executing program 5: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) syz_clone(0x0, 0x0, 0x553a2664a000, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 12:34:55 executing program 0: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 12:34:55 executing program 1: gettid() r0 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x2200, &(0x7f00000003c0)="11f1c5c6634befa1cd46533dfe08bdd0dc94f1fc346b1d5b3fe770526cc1a14c963b2347baa03e09b29bbe06bae8ca0a4e9d73a7c36303e1d3c51322963d86d001e68ad99b34cf5d016ae5415f15b876adea400c", 0x54, &(0x7f0000000440), &(0x7f0000000480), &(0x7f00000004c0)="9f251d23d67ec51f44e2f1a5e1803673bc3e2b2c33cb0e45d78cc4c93f83689480ea00b6829cf5449b95651104af596751acce78ed4a9954c15f0ecdee016f2325fb794be03a1c5817b42e977a74f6da13d20e729400b5a0c955ec87d1ac0f789d373e97e54eee3448a1c85257204f27829871aa44aed1a8df6077f88c37601a63d17a767da14754e174bef8a8243735b7bfdb3b8343a3a498b328b495501080d8ed1564a2d2f5c283407a72b17694e279794510c8c58a5f187871") perf_event_open(0x0, r1, 0xe, r0, 0x2) syz_open_procfs$namespace(r1, &(0x7f0000000000)='ns/pid_for_children\x00') openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) syz_clone(0x1ffff000, 0x0, 0x0, 0x0, 0x0, 0x0) 12:34:55 executing program 0: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x400001}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 12:34:55 executing program 5: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) syz_clone(0x0, 0x0, 0x2001000000000, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 12:34:55 executing program 5: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) syz_clone(0x0, 0x0, 0x2020000000000, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 12:34:55 executing program 0: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x1004000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 112.333081][ T5344] FAULT_INJECTION: forcing a failure. [ 112.333081][ T5344] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 112.396208][ T5344] CPU: 0 PID: 5344 Comm: syz-executor.2 Not tainted 5.15.74-syzkaller-04383-g7f2e600bf63a #0 [ 112.406295][ T5344] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/11/2022 [ 112.416200][ T5344] Call Trace: [ 112.419308][ T5344] [ 112.422090][ T5344] dump_stack_lvl+0x151/0x1b7 [ 112.426607][ T5344] ? bfq_pos_tree_add_move+0x43e/0x43e [ 112.431899][ T5344] dump_stack+0x15/0x17 [ 112.435884][ T5344] should_fail+0x3c0/0x510 [ 112.440144][ T5344] should_fail_alloc_page+0x58/0x70 [ 112.445176][ T5344] __alloc_pages+0x1de/0x7c0 [ 112.449599][ T5344] ? __count_vm_events+0x30/0x30 [ 112.454373][ T5344] ? __this_cpu_preempt_check+0x13/0x20 [ 112.459757][ T5344] ? __mod_node_page_state+0xac/0xf0 [ 112.464880][ T5344] pte_alloc_one+0x73/0x1b0 [ 112.469219][ T5344] ? pfn_modify_allowed+0x2e0/0x2e0 [ 112.474252][ T5344] __pte_alloc+0x86/0x350 [ 112.478413][ T5344] ? free_pgtables+0x210/0x210 [ 112.483024][ T5344] ? _raw_spin_lock+0xa3/0x1b0 [ 112.487613][ T5344] ? _raw_spin_trylock_bh+0x1d0/0x1d0 [ 112.492907][ T5344] ? __kernel_text_address+0x9a/0x110 [ 112.498117][ T5344] copy_pte_range+0x1b1f/0x20b0 [ 112.502804][ T5344] ? __kunmap_atomic+0x80/0x80 [ 112.507401][ T5344] ? __kasan_slab_alloc+0xc4/0xe0 [ 112.512261][ T5344] ? __kasan_slab_alloc+0xb2/0xe0 [ 112.517125][ T5344] ? kmem_cache_alloc+0x189/0x2f0 [ 112.521985][ T5344] ? vm_area_dup+0x26/0x1d0 [ 112.526323][ T5344] ? dup_mmap+0x6b8/0xea0 [ 112.530490][ T5344] ? dup_mm+0x91/0x330 [ 112.534392][ T5344] ? copy_mm+0x108/0x1b0 [ 112.538493][ T5344] ? copy_process+0x1295/0x3250 [ 112.543160][ T5344] ? kernel_clone+0x22d/0x990 [ 112.547672][ T5344] ? __x64_sys_clone+0x289/0x310 [ 112.552446][ T5344] ? do_syscall_64+0x44/0xd0 [ 112.556874][ T5344] ? entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 112.562778][ T5344] copy_page_range+0xc1e/0x1090 [ 112.567465][ T5344] ? pfn_valid+0x1e0/0x1e0 [ 112.571729][ T5344] dup_mmap+0x99f/0xea0 [ 112.575709][ T5344] ? __delayed_free_task+0x20/0x20 [ 112.580749][ T5344] ? mm_init+0x807/0x960 [ 112.584829][ T5344] dup_mm+0x91/0x330 [ 112.588550][ T5344] copy_mm+0x108/0x1b0 [ 112.592456][ T5344] copy_process+0x1295/0x3250 [ 112.596972][ T5344] ? proc_fail_nth_read+0x220/0x220 [ 112.602092][ T5344] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 112.607124][ T5344] ? vfs_write+0x9af/0x1050 [ 112.611464][ T5344] ? vmacache_update+0xb7/0x120 [ 112.616152][ T5344] kernel_clone+0x22d/0x990 [ 112.620489][ T5344] ? make_kuid+0x700/0x700 [ 112.624742][ T5344] ? trace_raw_output_bpf_trace_printk+0xd0/0xd0 [ 112.630903][ T5344] ? create_io_thread+0x1e0/0x1e0 [ 112.635773][ T5344] __x64_sys_clone+0x289/0x310 [ 112.640365][ T5344] ? __do_sys_vfork+0x130/0x130 [ 112.645056][ T5344] ? debug_smp_processor_id+0x17/0x20 [ 112.650260][ T5344] do_syscall_64+0x44/0xd0 [ 112.654514][ T5344] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 112.660237][ T5344] RIP: 0033:0x7f931dc135a9 [ 112.664493][ T5344] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 112.683948][ T5344] RSP: 002b:00007f931c987118 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 112.692173][ T5344] RAX: ffffffffffffffda RBX: 00007f931dd33f80 RCX: 00007f931dc135a9 [ 112.699989][ T5344] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 112.707801][ T5344] RBP: 00007f931c9871d0 R08: 0000000000000000 R09: 0000000000000000 [ 112.715610][ T5344] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 112.723448][ T5344] R13: 00007fffd2d3bdcf R14: 00007f931c987300 R15: 0000000000022000 [ 112.731238][ T5344] 12:34:56 executing program 4: perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x12) r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cgroup.controllers\x00', 0x100002, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000140)='memory.low\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f0000000200), 0x12) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000000080)=0x3) syz_clone(0x74809480, 0x0, 0x4100, &(0x7f0000000000), 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000400000000000000000000850000006d000000850000000f00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000080)='sys_exit\x00', r2}, 0x10) 12:34:56 executing program 0: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x2000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 12:34:56 executing program 1: gettid() (async, rerun: 32) r0 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (rerun: 32) r1 = syz_clone(0x2200, &(0x7f00000003c0)="11f1c5c6634befa1cd46533dfe08bdd0dc94f1fc346b1d5b3fe770526cc1a14c963b2347baa03e09b29bbe06bae8ca0a4e9d73a7c36303e1d3c51322963d86d001e68ad99b34cf5d016ae5415f15b876adea400c", 0x54, &(0x7f0000000440), &(0x7f0000000480), &(0x7f00000004c0)="9f251d23d67ec51f44e2f1a5e1803673bc3e2b2c33cb0e45d78cc4c93f83689480ea00b6829cf5449b95651104af596751acce78ed4a9954c15f0ecdee016f2325fb794be03a1c5817b42e977a74f6da13d20e729400b5a0c955ec87d1ac0f789d373e97e54eee3448a1c85257204f27829871aa44aed1a8df6077f88c37601a63d17a767da14754e174bef8a8243735b7bfdb3b8343a3a498b328b495501080d8ed1564a2d2f5c283407a72b17694e279794510c8c58a5f187871") perf_event_open(0x0, r1, 0xe, r0, 0x2) (async) syz_open_procfs$namespace(r1, &(0x7f0000000000)='ns/pid_for_children\x00') (async, rerun: 32) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) (async, rerun: 32) syz_clone(0x1ffff000, 0x0, 0x0, 0x0, 0x0, 0x0) 12:34:56 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.throttle.io_service_bytes_recursive\x00', 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0) write$cgroup_type(r1, &(0x7f0000000080), 0x11ffffce1) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x660c, 0x0) openat$cgroup_ro(r1, &(0x7f0000001300)='blkio.bfq.io_queued\x00', 0x0, 0x0) recvmsg(r0, &(0x7f00000012c0)={&(0x7f0000000080)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private0}}, 0x80, &(0x7f0000000240), 0x0, &(0x7f0000001380)=""/4110, 0x100e}, 0x40) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0) write$cgroup_type(r3, &(0x7f0000000080), 0x11ffffce1) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x660c, 0x0) ioctl$TUNSETVNETBE(r3, 0x400454de, &(0x7f0000001340)=0x1) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'\x00', 0x52d35ce30131f272}) ioctl$TUNSETLINK(r2, 0x400454cd, 0x334) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.throttle.io_service_bytes_recursive\x00', 0x0, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0) (async) write$cgroup_type(r1, &(0x7f0000000080), 0x11ffffce1) (async) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x660c, 0x0) (async) openat$cgroup_ro(r1, &(0x7f0000001300)='blkio.bfq.io_queued\x00', 0x0, 0x0) (async) recvmsg(r0, &(0x7f00000012c0)={&(0x7f0000000080)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private0}}, 0x80, &(0x7f0000000240), 0x0, &(0x7f0000001380)=""/4110, 0x100e}, 0x40) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0) (async) write$cgroup_type(r3, &(0x7f0000000080), 0x11ffffce1) (async) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x660c, 0x0) (async) ioctl$TUNSETVNETBE(r3, 0x400454de, &(0x7f0000001340)=0x1) (async) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'\x00', 0x52d35ce30131f272}) (async) ioctl$TUNSETLINK(r2, 0x400454cd, 0x334) (async) 12:34:56 executing program 5: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) syz_clone(0x0, 0x0, 0x8000000000000, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 12:34:56 executing program 0: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 12:34:56 executing program 1: gettid() (async) r0 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r1 = syz_clone(0x2200, &(0x7f00000003c0)="11f1c5c6634befa1cd46533dfe08bdd0dc94f1fc346b1d5b3fe770526cc1a14c963b2347baa03e09b29bbe06bae8ca0a4e9d73a7c36303e1d3c51322963d86d001e68ad99b34cf5d016ae5415f15b876adea400c", 0x54, &(0x7f0000000440), &(0x7f0000000480), &(0x7f00000004c0)="9f251d23d67ec51f44e2f1a5e1803673bc3e2b2c33cb0e45d78cc4c93f83689480ea00b6829cf5449b95651104af596751acce78ed4a9954c15f0ecdee016f2325fb794be03a1c5817b42e977a74f6da13d20e729400b5a0c955ec87d1ac0f789d373e97e54eee3448a1c85257204f27829871aa44aed1a8df6077f88c37601a63d17a767da14754e174bef8a8243735b7bfdb3b8343a3a498b328b495501080d8ed1564a2d2f5c283407a72b17694e279794510c8c58a5f187871") perf_event_open(0x0, r1, 0xe, r0, 0x2) (async) syz_open_procfs$namespace(r1, &(0x7f0000000000)='ns/pid_for_children\x00') (async) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) (async) syz_clone(0x1ffff000, 0x0, 0x0, 0x0, 0x0, 0x0) 12:34:56 executing program 2: syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 12:34:56 executing program 4: perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x12) r0 = perf_event_open(&(0x7f0000000180)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cgroup.controllers\x00', 0x100002, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000140)='memory.low\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f0000000200), 0x12) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000000080)=0x3) syz_clone(0x74809480, 0x0, 0x4100, &(0x7f0000000000), 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000400000000000000000000850000006d000000850000000f00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000080)='sys_exit\x00', r2}, 0x10) 12:34:56 executing program 0: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x10000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 12:34:56 executing program 5: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) syz_clone(0x0, 0x0, 0x10100000000000, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 12:34:56 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000000)={r0}, 0x8) openat$cgroup_ro(r1, &(0x7f0000000040)='memory.swap.current\x00', 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r2, 0x1, 0x33, &(0x7f00000000c0), 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) recvmsg$unix(r3, &(0x7f0000000280)={&(0x7f00000002c0)=@abs, 0x6e, &(0x7f00000001c0)=[{&(0x7f0000000140)=""/105, 0x69}], 0x1, &(0x7f0000000200)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x70}, 0x40000120) syz_clone(0x1ffff000, 0x0, 0x0, 0x0, 0x0, 0x0) 12:34:56 executing program 0: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x20000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 113.076496][ T5386] FAULT_INJECTION: forcing a failure. [ 113.076496][ T5386] name failslab, interval 1, probability 0, space 0, times 0 [ 113.129441][ T5386] CPU: 0 PID: 5386 Comm: syz-executor.2 Not tainted 5.15.74-syzkaller-04383-g7f2e600bf63a #0 [ 113.139427][ T5386] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/11/2022 [ 113.149328][ T5386] Call Trace: [ 113.152446][ T5386] [ 113.155227][ T5386] dump_stack_lvl+0x151/0x1b7 [ 113.159735][ T5386] ? bfq_pos_tree_add_move+0x43e/0x43e [ 113.165032][ T5386] dump_stack+0x15/0x17 [ 113.169027][ T5386] should_fail+0x3c0/0x510 [ 113.173273][ T5386] __should_failslab+0x9f/0xe0 [ 113.177871][ T5386] should_failslab+0x9/0x20 [ 113.182210][ T5386] kmem_cache_alloc+0x4f/0x2f0 [ 113.186812][ T5386] ? vm_area_dup+0x26/0x1d0 [ 113.191153][ T5386] vm_area_dup+0x26/0x1d0 [ 113.195323][ T5386] dup_mmap+0x6b8/0xea0 [ 113.199329][ T5386] ? __delayed_free_task+0x20/0x20 [ 113.204278][ T5386] ? mm_init+0x807/0x960 [ 113.208336][ T5386] dup_mm+0x91/0x330 [ 113.212075][ T5386] copy_mm+0x108/0x1b0 [ 113.215974][ T5386] copy_process+0x1295/0x3250 [ 113.220512][ T5386] ? proc_fail_nth_write+0x213/0x290 [ 113.225608][ T5386] ? proc_fail_nth_read+0x220/0x220 [ 113.230646][ T5386] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 113.235589][ T5386] ? vfs_write+0x9af/0x1050 [ 113.239930][ T5386] ? vmacache_update+0xb7/0x120 [ 113.244614][ T5386] kernel_clone+0x22d/0x990 [ 113.248953][ T5386] ? file_end_write+0x1b0/0x1b0 [ 113.253643][ T5386] ? __kasan_check_write+0x14/0x20 [ 113.258586][ T5386] ? create_io_thread+0x1e0/0x1e0 [ 113.263445][ T5386] ? __mutex_lock_slowpath+0x10/0x10 [ 113.268577][ T5386] __x64_sys_clone+0x289/0x310 [ 113.273167][ T5386] ? __do_sys_vfork+0x130/0x130 [ 113.277856][ T5386] ? debug_smp_processor_id+0x17/0x20 [ 113.283061][ T5386] do_syscall_64+0x44/0xd0 [ 113.287313][ T5386] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 113.293045][ T5386] RIP: 0033:0x7f931dc135a9 [ 113.297299][ T5386] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 113.316738][ T5386] RSP: 002b:00007f931c987118 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 12:34:56 executing program 5: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) syz_clone(0x0, 0x0, 0x506bf3382a0000, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 12:34:56 executing program 0: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0xfeffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 113.324986][ T5386] RAX: ffffffffffffffda RBX: 00007f931dd33f80 RCX: 00007f931dc135a9 [ 113.332791][ T5386] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 113.340603][ T5386] RBP: 00007f931c9871d0 R08: 0000000000000000 R09: 0000000000000000 [ 113.348417][ T5386] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 113.356227][ T5386] R13: 00007fffd2d3bdcf R14: 00007f931c987300 R15: 0000000000022000 [ 113.364041][ T5386] 12:34:56 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.throttle.io_service_bytes_recursive\x00', 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0) write$cgroup_type(r1, &(0x7f0000000080), 0x11ffffce1) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x660c, 0x0) openat$cgroup_ro(r1, &(0x7f0000001300)='blkio.bfq.io_queued\x00', 0x0, 0x0) recvmsg(r0, &(0x7f00000012c0)={&(0x7f0000000080)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private0}}, 0x80, &(0x7f0000000240), 0x0, &(0x7f0000001380)=""/4110, 0x100e}, 0x40) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0) write$cgroup_type(r3, &(0x7f0000000080), 0x11ffffce1) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x660c, 0x0) ioctl$TUNSETVNETBE(r3, 0x400454de, &(0x7f0000001340)=0x1) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'\x00', 0x52d35ce30131f272}) ioctl$TUNSETLINK(r2, 0x400454cd, 0x334) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.throttle.io_service_bytes_recursive\x00', 0x0, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0) (async) write$cgroup_type(r1, &(0x7f0000000080), 0x11ffffce1) (async) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x660c, 0x0) (async) openat$cgroup_ro(r1, &(0x7f0000001300)='blkio.bfq.io_queued\x00', 0x0, 0x0) (async) recvmsg(r0, &(0x7f00000012c0)={&(0x7f0000000080)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private0}}, 0x80, &(0x7f0000000240), 0x0, &(0x7f0000001380)=""/4110, 0x100e}, 0x40) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0) (async) write$cgroup_type(r3, &(0x7f0000000080), 0x11ffffce1) (async) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x660c, 0x0) (async) ioctl$TUNSETVNETBE(r3, 0x400454de, &(0x7f0000001340)=0x1) (async) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'\x00', 0x52d35ce30131f272}) (async) ioctl$TUNSETLINK(r2, 0x400454cd, 0x334) (async) 12:34:56 executing program 5: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) syz_clone(0x0, 0x0, 0x70000000000000, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 12:34:56 executing program 0: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 12:34:56 executing program 2: syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 51) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 12:34:56 executing program 4: perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x12) r0 = perf_event_open(&(0x7f0000000180)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cgroup.controllers\x00', 0x100002, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000140)='memory.low\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f0000000200), 0x12) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000000080)=0x3) syz_clone(0x74809480, 0x0, 0x4100, &(0x7f0000000000), 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000400000000000000000000850000006d000000850000000f00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000080)='sys_exit\x00', r2}, 0x10) 12:34:56 executing program 5: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) syz_clone(0x0, 0x0, 0xa064263a550000, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 12:34:57 executing program 0: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x200000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 12:34:57 executing program 0: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x1000001000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 113.652329][ T5423] FAULT_INJECTION: forcing a failure. [ 113.652329][ T5423] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 113.686377][ T5423] CPU: 1 PID: 5423 Comm: syz-executor.2 Not tainted 5.15.74-syzkaller-04383-g7f2e600bf63a #0 [ 113.696382][ T5423] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/11/2022 [ 113.706263][ T5423] Call Trace: [ 113.709387][ T5423] [ 113.712166][ T5423] dump_stack_lvl+0x151/0x1b7 [ 113.716680][ T5423] ? bfq_pos_tree_add_move+0x43e/0x43e [ 113.721977][ T5423] dump_stack+0x15/0x17 [ 113.725965][ T5423] should_fail+0x3c0/0x510 [ 113.730227][ T5423] should_fail_alloc_page+0x58/0x70 [ 113.735252][ T5423] __alloc_pages+0x1de/0x7c0 [ 113.739688][ T5423] ? __count_vm_events+0x30/0x30 [ 113.744459][ T5423] ? __this_cpu_preempt_check+0x13/0x20 [ 113.749831][ T5423] ? __mod_node_page_state+0xac/0xf0 [ 113.755047][ T5423] pte_alloc_one+0x73/0x1b0 [ 113.759376][ T5423] ? pfn_modify_allowed+0x2e0/0x2e0 [ 113.764496][ T5423] __pte_alloc+0x86/0x350 [ 113.768664][ T5423] ? free_pgtables+0x210/0x210 [ 113.773264][ T5423] ? _raw_spin_lock+0xa3/0x1b0 [ 113.777865][ T5423] ? _raw_spin_trylock_bh+0x1d0/0x1d0 [ 113.783067][ T5423] ? __kernel_text_address+0x9a/0x110 [ 113.788274][ T5423] copy_pte_range+0x1b1f/0x20b0 [ 113.792990][ T5423] ? __kunmap_atomic+0x80/0x80 [ 113.797562][ T5423] ? __kasan_slab_alloc+0xc4/0xe0 [ 113.802420][ T5423] ? __kasan_slab_alloc+0xb2/0xe0 [ 113.807286][ T5423] ? kmem_cache_alloc+0x189/0x2f0 [ 113.812159][ T5423] ? vm_area_dup+0x26/0x1d0 [ 113.816479][ T5423] ? dup_mmap+0x6b8/0xea0 [ 113.820736][ T5423] ? dup_mm+0x91/0x330 [ 113.824642][ T5423] ? copy_mm+0x108/0x1b0 [ 113.828720][ T5423] ? copy_process+0x1295/0x3250 [ 113.833405][ T5423] ? kernel_clone+0x22d/0x990 [ 113.837919][ T5423] ? __x64_sys_clone+0x289/0x310 [ 113.842705][ T5423] ? do_syscall_64+0x44/0xd0 [ 113.847118][ T5423] ? entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 113.853023][ T5423] copy_page_range+0xc1e/0x1090 [ 113.857720][ T5423] ? pfn_valid+0x1e0/0x1e0 [ 113.862101][ T5423] dup_mmap+0x99f/0xea0 [ 113.866051][ T5423] ? __delayed_free_task+0x20/0x20 [ 113.871008][ T5423] ? mm_init+0x807/0x960 [ 113.875185][ T5423] dup_mm+0x91/0x330 [ 113.878893][ T5423] copy_mm+0x108/0x1b0 [ 113.882801][ T5423] copy_process+0x1295/0x3250 [ 113.887314][ T5423] ? proc_fail_nth_write+0x213/0x290 [ 113.892441][ T5423] ? proc_fail_nth_read+0x220/0x220 [ 113.897563][ T5423] ? check_kill_permission+0x37/0x490 [ 113.902762][ T5423] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 113.907709][ T5423] ? group_send_sig_info+0xa4/0x2f0 [ 113.912831][ T5423] ? vmacache_update+0xb7/0x120 [ 113.917518][ T5423] kernel_clone+0x22d/0x990 [ 113.921859][ T5423] ? create_io_thread+0x1e0/0x1e0 [ 113.926726][ T5423] ? __mutex_lock_slowpath+0x10/0x10 [ 113.931840][ T5423] __x64_sys_clone+0x289/0x310 [ 113.936439][ T5423] ? __do_sys_vfork+0x130/0x130 [ 113.941133][ T5423] ? debug_smp_processor_id+0x17/0x20 [ 113.946334][ T5423] do_syscall_64+0x44/0xd0 [ 113.950586][ T5423] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 113.956413][ T5423] RIP: 0033:0x7f931dc135a9 [ 113.960652][ T5423] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 113.980197][ T5423] RSP: 002b:00007f931c987118 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 113.988442][ T5423] RAX: ffffffffffffffda RBX: 00007f931dd33f80 RCX: 00007f931dc135a9 12:34:57 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000000)={r0}, 0x8) openat$cgroup_ro(r1, &(0x7f0000000040)='memory.swap.current\x00', 0x0, 0x0) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r2, 0x1, 0x33, &(0x7f00000000c0), 0x4) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) recvmsg$unix(r3, &(0x7f0000000280)={&(0x7f00000002c0)=@abs, 0x6e, &(0x7f00000001c0)=[{&(0x7f0000000140)=""/105, 0x69}], 0x1, &(0x7f0000000200)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x70}, 0x40000120) (async) syz_clone(0x1ffff000, 0x0, 0x0, 0x0, 0x0, 0x0) 12:34:57 executing program 5: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) syz_clone(0x0, 0x0, 0xf0510d1b000000, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 12:34:57 executing program 0: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x2000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 12:34:57 executing program 2: syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 52) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) [ 113.996252][ T5423] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 114.004058][ T5423] RBP: 00007f931c9871d0 R08: 0000000000000000 R09: 0000000000000000 [ 114.011873][ T5423] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 114.019861][ T5423] R13: 00007fffd2d3bdcf R14: 00007f931c987300 R15: 0000000000022000 [ 114.027671][ T5423] [ 114.079979][ T5446] FAULT_INJECTION: forcing a failure. [ 114.079979][ T5446] name failslab, interval 1, probability 0, space 0, times 0 [ 114.115718][ T5446] CPU: 0 PID: 5446 Comm: syz-executor.2 Not tainted 5.15.74-syzkaller-04383-g7f2e600bf63a #0 [ 114.126750][ T5446] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/11/2022 [ 114.136733][ T5446] Call Trace: [ 114.139865][ T5446] [ 114.142637][ T5446] dump_stack_lvl+0x151/0x1b7 [ 114.147155][ T5446] ? bfq_pos_tree_add_move+0x43e/0x43e [ 114.152441][ T5446] dump_stack+0x15/0x17 [ 114.156432][ T5446] should_fail+0x3c0/0x510 [ 114.160691][ T5446] __should_failslab+0x9f/0xe0 [ 114.165467][ T5446] should_failslab+0x9/0x20 [ 114.169888][ T5446] kmem_cache_alloc+0x4f/0x2f0 [ 114.174666][ T5446] ? vm_area_dup+0x26/0x1d0 [ 114.178999][ T5446] vm_area_dup+0x26/0x1d0 [ 114.183165][ T5446] dup_mmap+0x6b8/0xea0 [ 114.187158][ T5446] ? __delayed_free_task+0x20/0x20 [ 114.192104][ T5446] ? mm_init+0x807/0x960 [ 114.196183][ T5446] dup_mm+0x91/0x330 [ 114.199914][ T5446] copy_mm+0x108/0x1b0 [ 114.203823][ T5446] copy_process+0x1295/0x3250 [ 114.208335][ T5446] ? proc_fail_nth_write+0x213/0x290 [ 114.213451][ T5446] ? proc_fail_nth_read+0x220/0x220 [ 114.218496][ T5446] ? check_kill_permission+0x37/0x490 [ 114.223699][ T5446] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 114.228641][ T5446] ? group_send_sig_info+0xa4/0x2f0 [ 114.233677][ T5446] ? vmacache_update+0xb7/0x120 [ 114.238366][ T5446] kernel_clone+0x22d/0x990 [ 114.242704][ T5446] ? create_io_thread+0x1e0/0x1e0 [ 114.247563][ T5446] ? __mutex_lock_slowpath+0x10/0x10 [ 114.252685][ T5446] __x64_sys_clone+0x289/0x310 [ 114.257281][ T5446] ? __do_sys_vfork+0x130/0x130 [ 114.261971][ T5446] ? debug_smp_processor_id+0x17/0x20 [ 114.267179][ T5446] do_syscall_64+0x44/0xd0 [ 114.271426][ T5446] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 114.277155][ T5446] RIP: 0033:0x7f931dc135a9 [ 114.281414][ T5446] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 114.300854][ T5446] RSP: 002b:00007f931c987118 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 114.309096][ T5446] RAX: ffffffffffffffda RBX: 00007f931dd33f80 RCX: 00007f931dc135a9 [ 114.317343][ T5446] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 114.325152][ T5446] RBP: 00007f931c9871d0 R08: 0000000000000000 R09: 0000000000000000 [ 114.332964][ T5446] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 114.340778][ T5446] R13: 00007fffd2d3bdcf R14: 00007f931c987300 R15: 0000000000022000 [ 114.348593][ T5446] 12:34:57 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'\x00', 0x52d35ce30131f272}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) close(r0) write$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000080)='FROZEN\x00', 0x7) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r2, &(0x7f0000000cc0)={0x0, 0x0, 0x0}, 0x0) sendmsg(r1, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)}, 0x50090) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'ip6gretap0\x00', 0x20}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'bridge_slave_0\x00', 0x1000}) r3 = bpf$ITER_CREATE(0x21, &(0x7f0000000100), 0x4d) openat$cgroup_int(r3, &(0x7f00000000c0)='cpuset.memory_migrate\x00', 0x2, 0x0) ioctl$TUNSETLINK(r3, 0x400454cd, 0x310) 12:34:57 executing program 0: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x10000010000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 12:34:57 executing program 5: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) syz_clone(0x0, 0x0, 0xf0ff1f00000000, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 12:34:57 executing program 4: perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x12) r0 = perf_event_open(&(0x7f0000000180)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cgroup.controllers\x00', 0x100002, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000140)='memory.low\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f0000000200), 0x12) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000000080)=0x3) syz_clone(0x74809480, 0x0, 0x4100, &(0x7f0000000000), 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000400000000000000000000850000006d000000850000000f00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000080)='sys_exit\x00', r2}, 0x10) 12:34:57 executing program 2: syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 53) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 12:34:57 executing program 0: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x40000100000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 12:34:57 executing program 5: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) syz_clone(0x0, 0x0, 0x100000000000000, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 12:34:57 executing program 0: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x400000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 114.477718][ T5471] FAULT_INJECTION: forcing a failure. [ 114.477718][ T5471] name failslab, interval 1, probability 0, space 0, times 0 [ 114.537228][ T5471] CPU: 0 PID: 5471 Comm: syz-executor.2 Not tainted 5.15.74-syzkaller-04383-g7f2e600bf63a #0 [ 114.547224][ T5471] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/11/2022 [ 114.557119][ T5471] Call Trace: [ 114.560238][ T5471] [ 114.563016][ T5471] dump_stack_lvl+0x151/0x1b7 [ 114.567532][ T5471] ? bfq_pos_tree_add_move+0x43e/0x43e [ 114.572829][ T5471] dump_stack+0x15/0x17 [ 114.576818][ T5471] should_fail+0x3c0/0x510 [ 114.581166][ T5471] __should_failslab+0x9f/0xe0 [ 114.585777][ T5471] should_failslab+0x9/0x20 [ 114.590102][ T5471] kmem_cache_alloc+0x4f/0x2f0 [ 114.594712][ T5471] ? vm_area_dup+0x26/0x1d0 [ 114.599045][ T5471] vm_area_dup+0x26/0x1d0 [ 114.603210][ T5471] dup_mmap+0x6b8/0xea0 [ 114.607202][ T5471] ? __delayed_free_task+0x20/0x20 [ 114.612153][ T5471] ? mm_init+0x807/0x960 [ 114.616228][ T5471] dup_mm+0x91/0x330 [ 114.619964][ T5471] copy_mm+0x108/0x1b0 [ 114.623865][ T5471] copy_process+0x1295/0x3250 [ 114.628379][ T5471] ? proc_fail_nth_write+0x213/0x290 [ 114.633585][ T5471] ? proc_fail_nth_read+0x220/0x220 [ 114.638623][ T5471] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 114.643570][ T5471] ? vfs_write+0x9af/0x1050 [ 114.647905][ T5471] ? vmacache_update+0xb7/0x120 [ 114.652594][ T5471] kernel_clone+0x22d/0x990 [ 114.656931][ T5471] ? file_end_write+0x1b0/0x1b0 [ 114.661616][ T5471] ? __kasan_check_write+0x14/0x20 [ 114.666569][ T5471] ? create_io_thread+0x1e0/0x1e0 [ 114.671427][ T5471] ? __mutex_lock_slowpath+0x10/0x10 [ 114.676546][ T5471] __x64_sys_clone+0x289/0x310 [ 114.681157][ T5471] ? __do_sys_vfork+0x130/0x130 [ 114.685836][ T5471] ? debug_smp_processor_id+0x17/0x20 [ 114.691041][ T5471] do_syscall_64+0x44/0xd0 [ 114.695296][ T5471] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 114.701023][ T5471] RIP: 0033:0x7f931dc135a9 [ 114.705282][ T5471] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 114.724717][ T5471] RSP: 002b:00007f931c987118 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 114.733074][ T5471] RAX: ffffffffffffffda RBX: 00007f931dd33f80 RCX: 00007f931dc135a9 [ 114.740861][ T5471] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 114.748671][ T5471] RBP: 00007f931c9871d0 R08: 0000000000000000 R09: 0000000000000000 [ 114.756495][ T5471] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 114.764296][ T5471] R13: 00007fffd2d3bdcf R14: 00007f931c987300 R15: 0000000000022000 [ 114.772256][ T5471] 12:34:58 executing program 5: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) syz_clone(0x0, 0x0, 0x200000000000000, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 12:34:58 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000000)={r0}, 0x8) openat$cgroup_ro(r1, &(0x7f0000000040)='memory.swap.current\x00', 0x0, 0x0) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r2, 0x1, 0x33, &(0x7f00000000c0), 0x4) (async, rerun: 64) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) (rerun: 64) recvmsg$unix(r3, &(0x7f0000000280)={&(0x7f00000002c0)=@abs, 0x6e, &(0x7f00000001c0)=[{&(0x7f0000000140)=""/105, 0x69}], 0x1, &(0x7f0000000200)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x70}, 0x40000120) (async) syz_clone(0x1ffff000, 0x0, 0x0, 0x0, 0x0, 0x0) 12:34:58 executing program 0: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 12:34:58 executing program 2: syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 54) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 12:34:58 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'\x00', 0x52d35ce30131f272}) (async) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) close(r0) (async) write$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000080)='FROZEN\x00', 0x7) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r2, &(0x7f0000000cc0)={0x0, 0x0, 0x0}, 0x0) (async) sendmsg(r1, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)}, 0x50090) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'ip6gretap0\x00', 0x20}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'bridge_slave_0\x00', 0x1000}) (async) r3 = bpf$ITER_CREATE(0x21, &(0x7f0000000100), 0x4d) openat$cgroup_int(r3, &(0x7f00000000c0)='cpuset.memory_migrate\x00', 0x2, 0x0) (async) ioctl$TUNSETLINK(r3, 0x400454cd, 0x310) 12:34:58 executing program 4: perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x12) r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cgroup.controllers\x00', 0x100002, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000140)='memory.low\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f0000000200), 0x12) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000000080)=0x3) syz_clone(0x74809480, 0x0, 0x4100, &(0x7f0000000000), 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000400000000000000000000850000006d000000850000000f00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000080)='sys_exit\x00', r2}, 0x10) 12:34:58 executing program 0: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0xfeffffff00000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 12:34:58 executing program 5: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) syz_clone(0x0, 0x0, 0x700000000000000, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 12:34:58 executing program 0: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 114.937810][ T5484] FAULT_INJECTION: forcing a failure. [ 114.937810][ T5484] name failslab, interval 1, probability 0, space 0, times 0 [ 114.965153][ T5484] CPU: 1 PID: 5484 Comm: syz-executor.2 Not tainted 5.15.74-syzkaller-04383-g7f2e600bf63a #0 [ 114.975143][ T5484] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/11/2022 12:34:58 executing program 0: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 12:34:58 executing program 0: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 12:34:58 executing program 5: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) syz_clone(0x0, 0x0, 0x800000000000000, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) [ 114.985132][ T5484] Call Trace: [ 114.988290][ T5484] [ 114.991024][ T5484] dump_stack_lvl+0x151/0x1b7 [ 114.995537][ T5484] ? bfq_pos_tree_add_move+0x43e/0x43e [ 115.000834][ T5484] dump_stack+0x15/0x17 [ 115.004945][ T5484] should_fail+0x3c0/0x510 [ 115.009282][ T5484] __should_failslab+0x9f/0xe0 [ 115.013883][ T5484] should_failslab+0x9/0x20 [ 115.018221][ T5484] kmem_cache_alloc+0x4f/0x2f0 [ 115.022818][ T5484] ? vm_area_dup+0x26/0x1d0 [ 115.027350][ T5484] vm_area_dup+0x26/0x1d0 [ 115.031502][ T5484] dup_mmap+0x6b8/0xea0 12:34:58 executing program 0: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 115.035583][ T5484] ? __delayed_free_task+0x20/0x20 [ 115.040525][ T5484] ? mm_init+0x807/0x960 [ 115.044606][ T5484] dup_mm+0x91/0x330 [ 115.048338][ T5484] copy_mm+0x108/0x1b0 [ 115.052240][ T5484] copy_process+0x1295/0x3250 [ 115.056758][ T5484] ? proc_fail_nth_write+0x213/0x290 [ 115.061877][ T5484] ? proc_fail_nth_read+0x220/0x220 [ 115.066914][ T5484] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 115.071860][ T5484] ? vfs_write+0x9af/0x1050 [ 115.076195][ T5484] ? vmacache_update+0xb7/0x120 [ 115.080981][ T5484] kernel_clone+0x22d/0x990 [ 115.085307][ T5484] ? file_end_write+0x1b0/0x1b0 [ 115.089994][ T5484] ? __kasan_check_write+0x14/0x20 [ 115.094943][ T5484] ? create_io_thread+0x1e0/0x1e0 [ 115.099802][ T5484] ? __mutex_lock_slowpath+0x10/0x10 [ 115.104954][ T5484] __x64_sys_clone+0x289/0x310 [ 115.109530][ T5484] ? __do_sys_vfork+0x130/0x130 [ 115.114210][ T5484] ? debug_smp_processor_id+0x17/0x20 [ 115.119419][ T5484] do_syscall_64+0x44/0xd0 [ 115.123673][ T5484] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 115.129396][ T5484] RIP: 0033:0x7f931dc135a9 [ 115.133738][ T5484] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 115.153182][ T5484] RSP: 002b:00007f931c987118 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 115.161515][ T5484] RAX: ffffffffffffffda RBX: 00007f931dd33f80 RCX: 00007f931dc135a9 [ 115.169411][ T5484] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 115.177228][ T5484] RBP: 00007f931c9871d0 R08: 0000000000000000 R09: 0000000000000000 [ 115.185036][ T5484] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 115.192845][ T5484] R13: 00007fffd2d3bdcf R14: 00007f931c987300 R15: 0000000000022000 [ 115.200654][ T5484] 12:34:59 executing program 2: syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 55) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 12:34:59 executing program 0: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400001}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 12:34:59 executing program 5: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) syz_clone(0x0, 0x0, 0x900000000000000, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 12:34:59 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'\x00', 0x52d35ce30131f272}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) close(r0) write$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000080)='FROZEN\x00', 0x7) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r2, &(0x7f0000000cc0)={0x0, 0x0, 0x0}, 0x0) sendmsg(r1, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)}, 0x50090) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'ip6gretap0\x00', 0x20}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'bridge_slave_0\x00', 0x1000}) r3 = bpf$ITER_CREATE(0x21, &(0x7f0000000100), 0x4d) openat$cgroup_int(r3, &(0x7f00000000c0)='cpuset.memory_migrate\x00', 0x2, 0x0) ioctl$TUNSETLINK(r3, 0x400454cd, 0x310) openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'\x00', 0x52d35ce30131f272}) (async) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) (async) close(r0) (async) write$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000080)='FROZEN\x00', 0x7) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) (async) recvmsg(r2, &(0x7f0000000cc0)={0x0, 0x0, 0x0}, 0x0) (async) sendmsg(r1, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)}, 0x50090) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'ip6gretap0\x00', 0x20}) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'bridge_slave_0\x00', 0x1000}) (async) bpf$ITER_CREATE(0x21, &(0x7f0000000100), 0x4d) (async) openat$cgroup_int(r3, &(0x7f00000000c0)='cpuset.memory_migrate\x00', 0x2, 0x0) (async) ioctl$TUNSETLINK(r3, 0x400454cd, 0x310) (async) 12:34:59 executing program 4: perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x12) r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cgroup.controllers\x00', 0x100002, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000140)='memory.low\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f0000000200), 0x12) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000000080)=0x3) syz_clone(0x74809480, 0x0, 0x4100, &(0x7f0000000000), 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000400000000000000000000850000006d000000850000000f00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000080)='sys_exit\x00', r2}, 0x10) [ 115.818142][ T5521] FAULT_INJECTION: forcing a failure. [ 115.818142][ T5521] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 115.848052][ T5521] CPU: 0 PID: 5521 Comm: syz-executor.2 Not tainted 5.15.74-syzkaller-04383-g7f2e600bf63a #0 [ 115.858047][ T5521] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/11/2022 12:34:59 executing program 0: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1004000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 12:34:59 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) syz_clone(0x1ffff000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x100, &(0x7f0000000000)="4de0a16245cac3232f9c55859f5abbdf9652a7f3a5dcbe65be90635b8c65fd7de961f867dabc6df62c7226027b905562f08d40d6216b444a846622283ab588a1602e89ac6e929160d641fd74a89ebe81ae1d997a", 0x54, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000100)="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") bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000001280)={0x0, 0x0}, 0x8) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000540)=r1, 0x4) r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000001300)={0xffffffffffffffff, 0x9}, 0xc) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001340)=@base={0x1a, 0xce0, 0xffffffff, 0x8001, 0x2, r0, 0x1, '\x00', 0x0, r0, 0x4, 0x2, 0x3}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001400)={0xf, 0xf, &(0x7f0000001100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x4}, [@btf_id={0x18, 0x0, 0x3, 0x0, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @ldst={0x0, 0x3, 0x2, 0x7, 0x9, 0x100, 0xfffffffffffffff1}, @map_idx_val={0x18, 0x2, 0x6, 0x0, 0xa, 0x0, 0x0, 0x0, 0x1}, @initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2}, @exit, @call={0x85, 0x0, 0x0, 0x93}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x1}]}, &(0x7f0000001180)='GPL\x00', 0x0, 0xa6, &(0x7f00000011c0)=""/166, 0x40f00, 0x0, '\x00', 0x0, 0x17, 0xffffffffffffffff, 0x8, &(0x7f0000001280)={0x2, 0x3}, 0x8, 0x10, &(0x7f00000012c0)={0x0, 0xa, 0x5, 0xf93}, 0x10, r1, 0xffffffffffffffff, 0x0, &(0x7f00000013c0)=[r0, r2, r0, r0, r3]}, 0x80) [ 115.867943][ T5521] Call Trace: [ 115.871062][ T5521] [ 115.873843][ T5521] dump_stack_lvl+0x151/0x1b7 [ 115.878356][ T5521] ? bfq_pos_tree_add_move+0x43e/0x43e [ 115.883650][ T5521] dump_stack+0x15/0x17 [ 115.887726][ T5521] should_fail+0x3c0/0x510 [ 115.891983][ T5521] should_fail_alloc_page+0x58/0x70 [ 115.897022][ T5521] __alloc_pages+0x1de/0x7c0 [ 115.901528][ T5521] ? __count_vm_events+0x30/0x30 [ 115.906302][ T5521] ? __this_cpu_preempt_check+0x13/0x20 [ 115.911682][ T5521] ? __mod_node_page_state+0xac/0xf0 [ 115.916803][ T5521] pte_alloc_one+0x73/0x1b0 [ 115.921141][ T5521] ? pfn_modify_allowed+0x2e0/0x2e0 [ 115.926180][ T5521] __pte_alloc+0x86/0x350 [ 115.930344][ T5521] ? free_pgtables+0x210/0x210 [ 115.934943][ T5521] ? _raw_spin_lock+0xa3/0x1b0 [ 115.939542][ T5521] ? _raw_spin_trylock_bh+0x1d0/0x1d0 [ 115.944752][ T5521] ? __kernel_text_address+0x9a/0x110 [ 115.949958][ T5521] copy_pte_range+0x1b1f/0x20b0 [ 115.954655][ T5521] ? __kunmap_atomic+0x80/0x80 [ 115.959253][ T5521] ? __kasan_slab_alloc+0xc4/0xe0 12:34:59 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) syz_clone(0x1ffff000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x100, &(0x7f0000000000)="4de0a16245cac3232f9c55859f5abbdf9652a7f3a5dcbe65be90635b8c65fd7de961f867dabc6df62c7226027b905562f08d40d6216b444a846622283ab588a1602e89ac6e929160d641fd74a89ebe81ae1d997a", 0x54, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000100)="d9429f87cfa1f133cc98d696ff807083771731a5654ee649a2840076bbc85b2d4e45225e7e205d7bf1316c9bf287b90235b5994fca7e73111a00ca5c1be93c0e3208d3a71e282c64d01a1976dd651e35b89ff1863e51cf711acbb7621b42af87304103acf6dff8137813c0590f875786e9fffd7cc43d48e941a9551977116b895a5914835c9c002ae28e91c57b4731d9e2708ed614d39092b660e5f0acf963fa56a21d2018f22674f8286d561ea268c7bfce0ae82b914db1268863b30529f717676f5e88cff70467529c804c5738736e291109aa0785008d019d961979e3e172f3e81c020607aac7cea5b6e3a4331ba10d1734bd353737fb97705a54eb6225aad70c5c26f7c7fae3fc605d3b5ca2386a0658f913d83191cf8bda79d22fb510a93185c453146c6052bd9d43abbb246dcf46147667d855b1999c9b82dd1c0ea79a148b890f20e3aaa52e8a1f2fd83b96fbf08a60498b41ee7522e55ed5b3ea5ce55e6780c09ec3f04805ed5dd71c35a1a3c7447598ea0245db8f71fd629d4bc590ab55d463083dd292b196cd98d15d1ce574f845a46f16429ccbff6c842469eeda187b26be1aa119f71e20c4755af3661b67a7c9d13cd917ca0d9a2874a4aacee5f6d19bae23732cffe8e37c479343a0a8d6f02833f96d680fc39c03072d45ab54c1088143a78feb37ab04a4484a400b52426d52037f30064a303c4d1123f44693920aa9a7bc8a84189cfab624170f92c2005cacb7e2d65e4c8af0063af9c161c9ce61e55e10551af3c7f3b5363f25e282d0340054a9775ced9393beaef005a8d3f26e4f2cf07ab5e022490a156e7ce4e897893427cea191c83ea97746e2c7276f3d90112feb7c74ba0df87b5d56246dd3fd900ce60e850c93cd0663199f7762efe8e9a2f3b9487e360cfb0cf0e9574efa4544a49ee17b4fec927cf3e8820e6c4eee48a063cc9c7b12b7e4754ae9439ea77a0a02640fea1234c2d583e0b80a7a965c6a54bfb034ec8fddcdf337fcfb31b7e4f44d5fec6c5d6da93dfcf459fecdfb01eb7484d0fa984b9e55627e4f5e1e8dc54fde96173721a29791f55142ad3b62f4608e6bf6a5a4fe739d926bb48bbb06619df3d439093baaa0ffadbc4e0e26f9315fe47caee73db0e80b3c5d726d308adad70cece410e31b905d0c2f192197d56aec36075b533e2a93497663e20ca7b6ea262b856328754d517c9df6789427bcf5f4b02befc8848d289be4d3e91b322ec836a3ea607c4b009587caab1366cd9f58c1e421526fd8c93010b21f3d0c47a8045f517b496ae11ad28fd829fe91f26386ce54c4828c217e77b1abcc2418095cd94e922ba5bb119df816ba29354528fd0ffacaa0270033182120ada01559ad42dad2023fc2f60f7c00db309183c18cdd0cb958569dbefe0e0376d6ce5275e341f44690e49b1297634a0bd987e83d383709eb0ef937302f3fc35b064f45a8c9a209be32ca440d70b2999b1236168271b2d7fd4c16476509248d1d4740ffefb7fdea5993dee917f6014dec1369a21dc1f2935c1bb47bcf488e2035a5576f2573da42bdf0b537619d6f67e05b9a58289f3ac094cee80fe741114707a1b4050a562819a1ac92024d150f7e2fd5de954ae4018fad95b33f7b6f13f34bbd0ad0f5e89dd359158d99af5c6b5defbfa324e6e03916538b42f5fe4b0464dca447a6e37a8aecbbf6226513545f28eef88e934b8847eceb7e7da819751e957474104da219258e1ce0d9263494011f853a4c187749962c7dc6bc87402d1c770dcb1ae9d1bbd121b0583ad1edab918af75f58dcbec4d28994aa5c8016254e48c055c2ca87e4b3410b501ee34a65f115463cbf5ac03f260d5d7de2ff319d4e808cd20e32483956a7255d3883a4d2b2618a11a03fcceab8e95fde63d881629456af6a62c8c1ab864271f232ec9d71df201586e704aa87683bd128e65bdc60110cfa4c1026142e01d7b46807f14b92e111f5c3f0c32c038887fd1e5a793ffdfd1bba8c484bc6d5bed99c9a79c42397ff70007ad72b68ca538a0a6071e1d7daf0b5d453a1afcc9ccb6042d8ee6a6b4c9c8101d31cdcce9f6f7f9ce7e5ebeaa17dfb0dc2e1a9c67a507e8fd5dff9f4190ba6601f87771b4271e7733d3348fefec511d1a5785960204df57ef90f26695b00ab5037c9abdc34429f7674dac6f36c234236c38371e61b9d201cc04f1791b31d6403e98a08f384f3ad0cac781f17638711c2e7511807021af8109c3fd90fad9e29b01e55cfbe254610007bfaf781b3d62937596315230edeff79447a766fe5ad9f2f36539f01f8b472506b2a631bdd343b2765cb90cd4d91266d9c6df4cb8ef9ac1e31639398c706fe24cab06cfa6f20ff5836c3df7b29eee21bdc07716f404bea2e242f650db8681bf45016490cb2b8351657e9fd9f420d107bc098d37f4642d1116facca4e065d5f2e2be8d5ab7d93a322b6d82633f6b8112b2ee93200f91fadd1ec582c8ec709fe1443155a69070d56646af07d60b916cbfc00d7e3a56a5cb5d174ca5e399a36a080c0ee0d726dbfdc4f98ddac266620fd9599daed1b5394113bc456cff92e07899e9968698db04992d814372d2119130f8ee6d2acb418830d4b0fffc8629d2f97becc2480062b25abf4cb08278b9047f6683a4de8a3123ecd88903622d9f59873aad6c4909bbe2e6df5f201da84b43abfc36f4e75c80cf27b77e6bf8bcff45aefa4509c9e92190e867f2d63abcdee6f2c5c5d4d553fadd1aa11f8758fca33124ec07eb489d40496fa5490ecf11193fada0d263db4bbecd2cdbbfe5c9485087ddf39621c743390533c1d2195c0f950dd11c8361c34688d8e8967137a042abb7eb62f85a82830fe15da3a19371e024da1a6998d0738f269780dd13c965848b443212c6ee1aebe95203008722396fb04fa79796e2b5a590eefc0b06c74ac4c95e5bce47a84c48f994ea2d41d6e1d494aac975e7d935c839957a9b2608b52709300864dc22ed1ab792954b2c36860e9af92ad90cdf38edb06d776e2be77e45bcd2fbd6b42014054c65574910c011c3d7715b433faee5644b922315780fbf55e7861476c3b8f65d9501eb463c9ffc68ee9ec6a8be429ab4c3042bea5d5fc22d013fe6fa75754cf0916d60904740e989da9338b923af4246f81a4c631a730ede9c5064b4537895891ef28f933878f2ae1162eeb7ba657e7032d3c726d81b52d87ff4f02dc79a317a3888ce7bf2af2f52d199d999236f718687be843fe697f45d66a6895f6b0d714eaaa9e8f65ba39359b56c5bee1c44160f5006632a0b43d729c596429a46244d6d7edb212778892a7a304a610ebcdad85beaf46208e2c49fde55349c0db74d8fc6391f0bb14a2deeb0c875efd8724a6d43c072efbc97c22a2fa1f4f136e7fdb65fb9ae3260ec06a9d4a7ccbc55646301c93e9d89039e8dcfb4a4500b44d9b647c068e4cfb468fae1c0e7287f02d3ee8437e5c5d6ac363926164be81ab36b06430d772dc378aadfc88b3180a67a9f53ff8e147e45f993a97e88d351cde6257cb90e29dee9ab93381b4a12485c9bb94ad5265836ba0e0f2135e1e3b05d33b1745e90111b4bc9fd12d821cf62cab5f2acee2c475329de034babd2940675e1847c0cb1dff763dd4ea5a90d9d14576bb34649201bd785a8ec14fbe3d1935fe20fd3975f0483c8453357536c37a6b2c5fc196ac6465761925f28cbd6322bbd59694f6dd84d389803ac64a4b4a86f9e34ee3acca66dc9ec1f7aafb269f4fa88b6b68d3646a5d38376eed121ea6f499c98199d93573eb5b9493826db6323039af40db0abfb6e28cacada7052645f7dd5f32e1f7e7155e38fe5bd1e21fb00ef9d5b25c1093bca8b1102d2cc37b10f76b1279293e4037afe8bef501925755e2d575a9aa3594be36bb756b9b56d45fa3e94fd850ad104904cf461ab428e02c036cf1044afa86a28338ce69dfb9a2480aa691b765c3911944d059919cf4fe961a65d402b4f9d7f99b7e3612eecd57665dccfa990d6b2f4cc1c6a8e504d84456df1d8bae458cf58229b7abe11deb30d56c04b1a478e53ca32dbaaa060962fc36127c48a502d93a34f14d364418e7bad600bb4e0c8dac5e586d1787eaba0b21b6b31cf09325f79775046b037c31e0967d640e8a50adc9c864d18fd8ecab60ae780a1e3e2cc670b02326fdd31c252a10bbd941257ded61c96efc031ad8f7a4ea798fb7b8d30bde5b7805194ca13abdeea60f0c80fa58314d9beba37a8c50cebd9b600ada92548f3adb1bd6f77f609eddd420a82cbbdac7c97d96c7f45d4796a11a605837eb3cccb49e950015d5c9d03653b4f39a30ed8d78e200edfb32fb411e60cab5dd411c969b03f57b5a078d24a716a0810fc942acdb1fddfa1870aad65b8d823b2e51659e4dcc3b5b7fdb67b87969dba8d81f5b97f178eec9979ef57c096cda3f40c9e961e64e57e95a7b338b7ef362bddb7274e59eaf678f2d6bfed511fb3e5fd495cd59c95ecfaaeb72444be4f2fc29d824f7b8f854ed5ef9c5cbef1eb0b3632f878923b911a155e30d61e12328e3377d00c272d4169a4022c5a9e28d3276afd7b973cbe69df87d3ee12342ef717372069b80d6443717c611f69c615d3d4e9a78e8cebd9baad42211689f6f75b2352a8c736b8a032537af697aec16d00d0dd0e908c69a7dac0a43749c626ddc98f7bf8b18e324e112d7945ce7b7e881454c8aa6f64081492093101b28f5775215ccdc2f07805cce4aecb4715b99e57a8aec162bbaffd66b12db5365b3c77e36ff77d2137fff75e7529c8276330448e57dd6cdad2219e13a75b0bc33775897c414126bf7a68c7b7b2a1eb17af66f3121995936c0906c4cdf392e9ea11b38563b6ec839f8e200fca68b247790ef4a89a1c40f87d71db1ec3a220b984016b0fcc48ab46407a76dc6c6e7cc4b5cec705e1835a52cdc80d9fda7c563d0843aad64b98eeec5bc6565d22453b47f67f8ed44f9a38d64052b93174b48a21b4342d733dec24cd8ea25b196216c39ac0ebcc84de780d0735652e31cad29220acc8ea4fdd2aa4e324ed76a90097aaf241c6b414de76b50b09296f63e9ce72c233596a4a58e9052cc84ff278d1c35c30e9d6cf6b212b220a66f8496ba37e921e334d1f976b99b3318d10581c85402dacfb0ad4969999658aebd504bb4147d52b15740043b9b997170fd9baf92c43a63acef2eb876f88fcaf0ad133c287f70a678b9081b1748c11b6800023c486bbd33460f4bf294e3bda9f68b5d804ec9e2e6a353f7a8c4f37d6de8a732b5a36528eba3373692ba699fcaf52df10854141dd126c78f77ef517bf3809e506677ad0e54913b8310bf5ff7edc35a89be2f31f3fea0f2ac43d236f6cc6589fde48c6c38a79ce00e32f5e391257c6074496ba8c3c21cba6f9eec76cbb74e7319c5b833486a45d075713230495926ebc2a2502d01f7ed063fae31bf5bdd564b136c3b76b4ae3d1ad2f702e3dc2acab552bdc338f057d4773cdb6b6547ddac1adb0e99e06e998a5d21e8ca84c76b1c21989fff745e454e6c131b26029155e3c7a0742dc7eb12ae980f288581e82317673e1cf9b2574b7ed5e4a50b8cc56cf9f72d700a736b2517d452ed95a134d74723ffd8a85b461099f9d7ca28935a90bd758ad368a165645dd758408d41c94a1a0ac114ef1816e51e1a8fce57ce7c0bc19bba6d837e32cf4b1d37c19989abb2b4110b9c46b0dcadf6ad74d94b2d2730e6a55b8564ba556b8e8f3c35e596467da4833ae91fae78d1e8b2910bf78098f52d23cd3a0f53740e1e092bceb6221bf794") bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000001280)={0x0, 0x0}, 0x8) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000540)=r1, 0x4) r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000001300)={0xffffffffffffffff, 0x9}, 0xc) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001340)=@base={0x1a, 0xce0, 0xffffffff, 0x8001, 0x2, r0, 0x1, '\x00', 0x0, r0, 0x4, 0x2, 0x3}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001400)={0xf, 0xf, &(0x7f0000001100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x4}, [@btf_id={0x18, 0x0, 0x3, 0x0, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @ldst={0x0, 0x3, 0x2, 0x7, 0x9, 0x100, 0xfffffffffffffff1}, @map_idx_val={0x18, 0x2, 0x6, 0x0, 0xa, 0x0, 0x0, 0x0, 0x1}, @initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2}, @exit, @call={0x85, 0x0, 0x0, 0x93}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x1}]}, &(0x7f0000001180)='GPL\x00', 0x0, 0xa6, &(0x7f00000011c0)=""/166, 0x40f00, 0x0, '\x00', 0x0, 0x17, 0xffffffffffffffff, 0x8, &(0x7f0000001280)={0x2, 0x3}, 0x8, 0x10, &(0x7f00000012c0)={0x0, 0xa, 0x5, 0xf93}, 0x10, r1, 0xffffffffffffffff, 0x0, &(0x7f00000013c0)=[r0, r2, r0, r0, r3]}, 0x80) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) (async) syz_clone(0x1ffff000, 0x0, 0x0, 0x0, 0x0, 0x0) (async) syz_clone(0x100, &(0x7f0000000000)="4de0a16245cac3232f9c55859f5abbdf9652a7f3a5dcbe65be90635b8c65fd7de961f867dabc6df62c7226027b905562f08d40d6216b444a846622283ab588a1602e89ac6e929160d641fd74a89ebe81ae1d997a", 0x54, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000100)="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") (async) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000001280), 0x8) (async) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000540)=r1, 0x4) (async) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000001300)={0xffffffffffffffff, 0x9}, 0xc) (async) bpf$MAP_CREATE(0x0, &(0x7f0000001340)=@base={0x1a, 0xce0, 0xffffffff, 0x8001, 0x2, r0, 0x1, '\x00', 0x0, r0, 0x4, 0x2, 0x3}, 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f0000001400)={0xf, 0xf, &(0x7f0000001100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x4}, [@btf_id={0x18, 0x0, 0x3, 0x0, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @ldst={0x0, 0x3, 0x2, 0x7, 0x9, 0x100, 0xfffffffffffffff1}, @map_idx_val={0x18, 0x2, 0x6, 0x0, 0xa, 0x0, 0x0, 0x0, 0x1}, @initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2}, @exit, @call={0x85, 0x0, 0x0, 0x93}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x1}]}, &(0x7f0000001180)='GPL\x00', 0x0, 0xa6, &(0x7f00000011c0)=""/166, 0x40f00, 0x0, '\x00', 0x0, 0x17, 0xffffffffffffffff, 0x8, &(0x7f0000001280)={0x2, 0x3}, 0x8, 0x10, &(0x7f00000012c0)={0x0, 0xa, 0x5, 0xf93}, 0x10, r1, 0xffffffffffffffff, 0x0, &(0x7f00000013c0)=[r0, r2, r0, r0, r3]}, 0x80) (async) [ 115.964101][ T5521] ? __kasan_slab_alloc+0xb2/0xe0 [ 115.968962][ T5521] ? kmem_cache_alloc+0x189/0x2f0 [ 115.973826][ T5521] ? vm_area_dup+0x26/0x1d0 [ 115.978163][ T5521] ? dup_mmap+0x6b8/0xea0 [ 115.982328][ T5521] ? dup_mm+0x91/0x330 [ 115.986242][ T5521] ? copy_mm+0x108/0x1b0 [ 115.990324][ T5521] ? copy_process+0x1295/0x3250 [ 115.995001][ T5521] ? kernel_clone+0x22d/0x990 [ 115.999518][ T5521] ? __x64_sys_clone+0x289/0x310 [ 116.004291][ T5521] ? do_syscall_64+0x44/0xd0 [ 116.008713][ T5521] ? entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 116.014631][ T5521] copy_page_range+0xc1e/0x1090 [ 116.023567][ T5521] ? pfn_valid+0x1e0/0x1e0 [ 116.027908][ T5521] dup_mmap+0x99f/0xea0 [ 116.031889][ T5521] ? __delayed_free_task+0x20/0x20 [ 116.036842][ T5521] ? mm_init+0x807/0x960 [ 116.040918][ T5521] dup_mm+0x91/0x330 [ 116.044667][ T5521] copy_mm+0x108/0x1b0 [ 116.048550][ T5521] copy_process+0x1295/0x3250 [ 116.053067][ T5521] ? proc_fail_nth_write+0x213/0x290 [ 116.058187][ T5521] ? proc_fail_nth_read+0x220/0x220 [ 116.063221][ T5521] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 116.068165][ T5521] ? vfs_write+0x9af/0x1050 [ 116.072504][ T5521] ? vmacache_update+0xb7/0x120 [ 116.077199][ T5521] kernel_clone+0x22d/0x990 [ 116.081532][ T5521] ? file_end_write+0x1b0/0x1b0 [ 116.086217][ T5521] ? __kasan_check_write+0x14/0x20 [ 116.091161][ T5521] ? create_io_thread+0x1e0/0x1e0 [ 116.096020][ T5521] ? __mutex_lock_slowpath+0x10/0x10 [ 116.101143][ T5521] __x64_sys_clone+0x289/0x310 [ 116.105742][ T5521] ? __do_sys_vfork+0x130/0x130 [ 116.110432][ T5521] ? debug_smp_processor_id+0x17/0x20 [ 116.115638][ T5521] do_syscall_64+0x44/0xd0 [ 116.119887][ T5521] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 116.125626][ T5521] RIP: 0033:0x7f931dc135a9 [ 116.129871][ T5521] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 116.149309][ T5521] RSP: 002b:00007f931c987118 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 116.157558][ T5521] RAX: ffffffffffffffda RBX: 00007f931dd33f80 RCX: 00007f931dc135a9 12:34:59 executing program 5: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) syz_clone(0x0, 0x0, 0x1100000000000000, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 12:34:59 executing program 0: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 12:34:59 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) syz_clone(0x1ffff000, 0x0, 0x0, 0x0, 0x0, 0x0) (async) syz_clone(0x100, &(0x7f0000000000)="4de0a16245cac3232f9c55859f5abbdf9652a7f3a5dcbe65be90635b8c65fd7de961f867dabc6df62c7226027b905562f08d40d6216b444a846622283ab588a1602e89ac6e929160d641fd74a89ebe81ae1d997a", 0x54, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000100)="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") (async) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000001280)={0x0, 0x0}, 0x8) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000540)=r1, 0x4) r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000001300)={0xffffffffffffffff, 0x9}, 0xc) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001340)=@base={0x1a, 0xce0, 0xffffffff, 0x8001, 0x2, r0, 0x1, '\x00', 0x0, r0, 0x4, 0x2, 0x3}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001400)={0xf, 0xf, &(0x7f0000001100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x4}, [@btf_id={0x18, 0x0, 0x3, 0x0, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @ldst={0x0, 0x3, 0x2, 0x7, 0x9, 0x100, 0xfffffffffffffff1}, @map_idx_val={0x18, 0x2, 0x6, 0x0, 0xa, 0x0, 0x0, 0x0, 0x1}, @initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2}, @exit, @call={0x85, 0x0, 0x0, 0x93}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x1}]}, &(0x7f0000001180)='GPL\x00', 0x0, 0xa6, &(0x7f00000011c0)=""/166, 0x40f00, 0x0, '\x00', 0x0, 0x17, 0xffffffffffffffff, 0x8, &(0x7f0000001280)={0x2, 0x3}, 0x8, 0x10, &(0x7f00000012c0)={0x0, 0xa, 0x5, 0xf93}, 0x10, r1, 0xffffffffffffffff, 0x0, &(0x7f00000013c0)=[r0, r2, r0, r0, r3]}, 0x80) 12:34:59 executing program 5: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) syz_clone(0x0, 0x0, 0x1f00000000000000, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 12:34:59 executing program 2: syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 56) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) [ 116.165369][ T5521] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 116.173175][ T5521] RBP: 00007f931c9871d0 R08: 0000000000000000 R09: 0000000000000000 [ 116.180985][ T5521] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 116.188796][ T5521] R13: 00007fffd2d3bdcf R14: 00007f931c987300 R15: 0000000000022000 [ 116.196624][ T5521] 12:34:59 executing program 0: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 12:34:59 executing program 5: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) syz_clone(0x0, 0x0, 0x2000000000000000, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) [ 116.267263][ T5576] FAULT_INJECTION: forcing a failure. [ 116.267263][ T5576] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 116.286451][ T5576] CPU: 1 PID: 5576 Comm: syz-executor.2 Not tainted 5.15.74-syzkaller-04383-g7f2e600bf63a #0 [ 116.296439][ T5576] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/11/2022 [ 116.306595][ T5576] Call Trace: [ 116.309719][ T5576] [ 116.312522][ T5576] dump_stack_lvl+0x151/0x1b7 [ 116.317006][ T5576] ? bfq_pos_tree_add_move+0x43e/0x43e [ 116.322302][ T5576] dump_stack+0x15/0x17 [ 116.326379][ T5576] should_fail+0x3c0/0x510 [ 116.330637][ T5576] should_fail_alloc_page+0x58/0x70 [ 116.335670][ T5576] __alloc_pages+0x1de/0x7c0 [ 116.340094][ T5576] ? __count_vm_events+0x30/0x30 [ 116.344870][ T5576] ? __this_cpu_preempt_check+0x13/0x20 [ 116.350251][ T5576] ? __mod_node_page_state+0xac/0xf0 [ 116.355371][ T5576] pte_alloc_one+0x73/0x1b0 [ 116.359715][ T5576] ? pfn_modify_allowed+0x2e0/0x2e0 [ 116.364748][ T5576] __pte_alloc+0x86/0x350 [ 116.368911][ T5576] ? free_pgtables+0x210/0x210 [ 116.373509][ T5576] ? _raw_spin_lock+0xa3/0x1b0 [ 116.378107][ T5576] ? _raw_spin_trylock_bh+0x1d0/0x1d0 [ 116.383315][ T5576] ? __kernel_text_address+0x9a/0x110 [ 116.388524][ T5576] copy_pte_range+0x1b1f/0x20b0 [ 116.393217][ T5576] ? __kunmap_atomic+0x80/0x80 [ 116.397894][ T5576] ? __kasan_slab_alloc+0xc4/0xe0 [ 116.402756][ T5576] ? __kasan_slab_alloc+0xb2/0xe0 [ 116.407617][ T5576] ? kmem_cache_alloc+0x189/0x2f0 [ 116.412482][ T5576] ? vm_area_dup+0x26/0x1d0 [ 116.416814][ T5576] ? dup_mmap+0x6b8/0xea0 [ 116.420983][ T5576] ? dup_mm+0x91/0x330 [ 116.424895][ T5576] ? copy_mm+0x108/0x1b0 [ 116.428966][ T5576] ? copy_process+0x1295/0x3250 [ 116.433653][ T5576] ? kernel_clone+0x22d/0x990 [ 116.438167][ T5576] ? __x64_sys_clone+0x289/0x310 [ 116.442939][ T5576] ? do_syscall_64+0x44/0xd0 [ 116.447365][ T5576] ? entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 116.453270][ T5576] copy_page_range+0xc1e/0x1090 [ 116.457962][ T5576] ? pfn_valid+0x1e0/0x1e0 [ 116.462212][ T5576] dup_mmap+0x99f/0xea0 [ 116.466203][ T5576] ? __delayed_free_task+0x20/0x20 [ 116.471149][ T5576] ? mm_init+0x807/0x960 [ 116.475228][ T5576] dup_mm+0x91/0x330 [ 116.478959][ T5576] copy_mm+0x108/0x1b0 [ 116.482865][ T5576] copy_process+0x1295/0x3250 [ 116.487379][ T5576] ? proc_fail_nth_write+0x213/0x290 [ 116.492505][ T5576] ? proc_fail_nth_read+0x220/0x220 [ 116.497618][ T5576] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 116.502565][ T5576] ? vfs_write+0x9af/0x1050 [ 116.506914][ T5576] ? vmacache_update+0xb7/0x120 [ 116.511593][ T5576] kernel_clone+0x22d/0x990 [ 116.515931][ T5576] ? file_end_write+0x1b0/0x1b0 [ 116.520618][ T5576] ? __kasan_check_write+0x14/0x20 [ 116.525563][ T5576] ? create_io_thread+0x1e0/0x1e0 [ 116.530472][ T5576] ? __mutex_lock_slowpath+0x10/0x10 [ 116.535548][ T5576] __x64_sys_clone+0x289/0x310 [ 116.540146][ T5576] ? __do_sys_vfork+0x130/0x130 [ 116.544840][ T5576] ? debug_smp_processor_id+0x17/0x20 [ 116.550044][ T5576] do_syscall_64+0x44/0xd0 [ 116.554643][ T5576] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 116.560368][ T5576] RIP: 0033:0x7f931dc135a9 [ 116.564623][ T5576] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 116.585020][ T5576] RSP: 002b:00007f931c987118 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 116.593260][ T5576] RAX: ffffffffffffffda RBX: 00007f931dd33f80 RCX: 00007f931dc135a9 [ 116.601076][ T5576] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 116.608881][ T5576] RBP: 00007f931c9871d0 R08: 0000000000000000 R09: 0000000000000000 12:34:59 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0) write$cgroup_type(r0, &(0x7f0000000080), 0x11ffffce1) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x660c, 0x0) ioctl$TUNSETDEBUG(r0, 0x400454c9, &(0x7f0000000000)=0x80000001) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) syz_clone(0x1ffff000, 0x0, 0x0, 0x0, 0x0, 0x0) 12:35:00 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'\x00', 0x52d35ce30131f272}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) close(r0) close(r0) r1 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000040), 0x2, 0x0) close(r1) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000080)='net_prio.ifpriomap\x00') [ 116.616691][ T5576] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 116.624503][ T5576] R13: 00007fffd2d3bdcf R14: 00007f931c987300 R15: 0000000000022000 [ 116.632315][ T5576] 12:35:00 executing program 4: perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x12) r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cgroup.controllers\x00', 0x100002, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000140)='memory.low\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f0000000200), 0x12) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000000080)=0x3) syz_clone(0x74809480, 0x0, 0x4100, &(0x7f0000000000), 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000400000000000000000000850000006d000000850000000f00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000080)='sys_exit\x00', r2}, 0x10) 12:35:00 executing program 5: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) syz_clone(0x0, 0x0, 0x6402000000000000, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 12:35:00 executing program 0: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 12:35:00 executing program 2: syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 57) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 12:35:00 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0) write$cgroup_type(r0, &(0x7f0000000080), 0x11ffffce1) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x660c, 0x0) ioctl$TUNSETDEBUG(r0, 0x400454c9, &(0x7f0000000000)=0x80000001) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) syz_clone(0x1ffff000, 0x0, 0x0, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0) (async) write$cgroup_type(r0, &(0x7f0000000080), 0x11ffffce1) (async) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x660c, 0x0) (async) ioctl$TUNSETDEBUG(r0, 0x400454c9, &(0x7f0000000000)=0x80000001) (async) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) (async) syz_clone(0x1ffff000, 0x0, 0x0, 0x0, 0x0, 0x0) (async) 12:35:00 executing program 0: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfeffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 12:35:00 executing program 5: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) syz_clone(0x0, 0x0, 0x9b01000000000000, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) [ 116.729429][ T5593] FAULT_INJECTION: forcing a failure. [ 116.729429][ T5593] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 116.761901][ T5593] CPU: 1 PID: 5593 Comm: syz-executor.2 Not tainted 5.15.74-syzkaller-04383-g7f2e600bf63a #0 [ 116.771891][ T5593] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/11/2022 [ 116.781794][ T5593] Call Trace: [ 116.784909][ T5593] [ 116.787687][ T5593] dump_stack_lvl+0x151/0x1b7 [ 116.792198][ T5593] ? bfq_pos_tree_add_move+0x43e/0x43e [ 116.797596][ T5593] dump_stack+0x15/0x17 [ 116.801572][ T5593] should_fail+0x3c0/0x510 [ 116.805821][ T5593] should_fail_alloc_page+0x58/0x70 [ 116.810867][ T5593] __alloc_pages+0x1de/0x7c0 [ 116.815292][ T5593] ? __count_vm_events+0x30/0x30 [ 116.820057][ T5593] ? __this_cpu_preempt_check+0x13/0x20 [ 116.825438][ T5593] ? __mod_node_page_state+0xac/0xf0 [ 116.830564][ T5593] pte_alloc_one+0x73/0x1b0 [ 116.834897][ T5593] ? pfn_modify_allowed+0x2e0/0x2e0 [ 116.839936][ T5593] __pte_alloc+0x86/0x350 [ 116.844098][ T5593] ? free_pgtables+0x210/0x210 [ 116.848696][ T5593] ? _raw_spin_lock+0xa3/0x1b0 [ 116.853299][ T5593] ? _raw_spin_trylock_bh+0x1d0/0x1d0 [ 116.858506][ T5593] ? __kernel_text_address+0x9a/0x110 [ 116.863715][ T5593] copy_pte_range+0x1b1f/0x20b0 [ 116.868417][ T5593] ? __kunmap_atomic+0x80/0x80 [ 116.872999][ T5593] ? __kasan_slab_alloc+0xc4/0xe0 [ 116.877859][ T5593] ? __kasan_slab_alloc+0xb2/0xe0 [ 116.882730][ T5593] ? kmem_cache_alloc+0x189/0x2f0 [ 116.887588][ T5593] ? vm_area_dup+0x26/0x1d0 [ 116.891928][ T5593] ? dup_mmap+0x6b8/0xea0 [ 116.896088][ T5593] ? dup_mm+0x91/0x330 [ 116.899995][ T5593] ? copy_mm+0x108/0x1b0 [ 116.904069][ T5593] ? copy_process+0x1295/0x3250 [ 116.908758][ T5593] ? kernel_clone+0x22d/0x990 [ 116.913290][ T5593] ? __x64_sys_clone+0x289/0x310 [ 116.918044][ T5593] ? do_syscall_64+0x44/0xd0 [ 116.922472][ T5593] ? entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 116.928382][ T5593] copy_page_range+0xc1e/0x1090 [ 116.933066][ T5593] ? pfn_valid+0x1e0/0x1e0 [ 116.937343][ T5593] dup_mmap+0x99f/0xea0 [ 116.941312][ T5593] ? __delayed_free_task+0x20/0x20 [ 116.946256][ T5593] ? mm_init+0x807/0x960 [ 116.950333][ T5593] dup_mm+0x91/0x330 [ 116.954061][ T5593] copy_mm+0x108/0x1b0 [ 116.957968][ T5593] copy_process+0x1295/0x3250 [ 116.962480][ T5593] ? proc_fail_nth_write+0x213/0x290 [ 116.967606][ T5593] ? proc_fail_nth_read+0x220/0x220 [ 116.972634][ T5593] ? check_kill_permission+0x37/0x490 [ 116.977845][ T5593] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 116.982790][ T5593] ? group_send_sig_info+0xa4/0x2f0 [ 116.987828][ T5593] ? vmacache_update+0xb7/0x120 [ 116.992514][ T5593] kernel_clone+0x22d/0x990 [ 116.996858][ T5593] ? create_io_thread+0x1e0/0x1e0 [ 117.001715][ T5593] ? __mutex_lock_slowpath+0x10/0x10 [ 117.006833][ T5593] __x64_sys_clone+0x289/0x310 [ 117.011431][ T5593] ? __do_sys_vfork+0x130/0x130 [ 117.016122][ T5593] ? debug_smp_processor_id+0x17/0x20 [ 117.021326][ T5593] do_syscall_64+0x44/0xd0 [ 117.025581][ T5593] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 117.031305][ T5593] RIP: 0033:0x7f931dc135a9 [ 117.035562][ T5593] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 117.055002][ T5593] RSP: 002b:00007f931c987118 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 117.063246][ T5593] RAX: ffffffffffffffda RBX: 00007f931dd33f80 RCX: 00007f931dc135a9 [ 117.071059][ T5593] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 12:35:00 executing program 0: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 12:35:00 executing program 5: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) syz_clone(0x0, 0x0, 0xf5ffffff00000000, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 12:35:00 executing program 5: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) syz_clone(0x0, 0x0, 0xfbffffff00000000, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 12:35:00 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0) write$cgroup_type(r0, &(0x7f0000000080), 0x11ffffce1) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x660c, 0x0) ioctl$TUNSETDEBUG(r0, 0x400454c9, &(0x7f0000000000)=0x80000001) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) syz_clone(0x1ffff000, 0x0, 0x0, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0) (async) write$cgroup_type(r0, &(0x7f0000000080), 0x11ffffce1) (async) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x660c, 0x0) (async) ioctl$TUNSETDEBUG(r0, 0x400454c9, &(0x7f0000000000)=0x80000001) (async) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) (async) syz_clone(0x1ffff000, 0x0, 0x0, 0x0, 0x0, 0x0) (async) 12:35:00 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'\x00', 0x52d35ce30131f272}) (async) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) (async) close(r0) (async) close(r0) r1 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000040), 0x2, 0x0) close(r1) (async) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000080)='net_prio.ifpriomap\x00') [ 117.078962][ T5593] RBP: 00007f931c9871d0 R08: 0000000000000000 R09: 0000000000000000 [ 117.086778][ T5593] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 117.094575][ T5593] R13: 00007fffd2d3bdcf R14: 00007f931c987300 R15: 0000000000022000 [ 117.102396][ T5593] 12:35:00 executing program 4: perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x12) r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cgroup.controllers\x00', 0x100002, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000140)='memory.low\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f0000000200), 0x12) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000000080)=0x3) syz_clone(0x74809480, 0x0, 0x4100, &(0x7f0000000000), 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000400000000000000000000850000006d000000850000000f00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000080)='sys_exit\x00', r2}, 0x10) 12:35:00 executing program 5: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) syz_clone(0x0, 0x0, 0xff0f010000000000, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 12:35:00 executing program 0: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 12:35:00 executing program 2: syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 58) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 12:35:00 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'\x00', 0x52d35ce30131f272}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) close(r0) close(r0) r1 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000040), 0x2, 0x0) close(r1) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000080)='net_prio.ifpriomap\x00') openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'\x00', 0x52d35ce30131f272}) (async) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) (async) close(r0) (async) close(r0) (async) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000040), 0x2, 0x0) (async) close(r1) (async) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000080)='net_prio.ifpriomap\x00') (async) 12:35:00 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) write$cgroup_int(r0, &(0x7f0000000000)=0x2650, 0x12) syz_clone(0x1ffff000, 0x0, 0x0, 0x0, 0x0, 0x0) 12:35:00 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) write$cgroup_int(r0, &(0x7f0000000000)=0x2650, 0x12) syz_clone(0x1ffff000, 0x0, 0x0, 0x0, 0x0, 0x0) 12:35:00 executing program 5: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) syz_clone(0x0, 0x0, 0xffffffff00000000, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 12:35:00 executing program 0: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 12:35:00 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) write$cgroup_int(r0, &(0x7f0000000000)=0x2650, 0x12) syz_clone(0x1ffff000, 0x0, 0x0, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) (async) write$cgroup_int(r0, &(0x7f0000000000)=0x2650, 0x12) (async) syz_clone(0x1ffff000, 0x0, 0x0, 0x0, 0x0, 0x0) (async) [ 117.311572][ T5645] FAULT_INJECTION: forcing a failure. [ 117.311572][ T5645] name failslab, interval 1, probability 0, space 0, times 0 [ 117.346209][ T5645] CPU: 0 PID: 5645 Comm: syz-executor.2 Not tainted 5.15.74-syzkaller-04383-g7f2e600bf63a #0 [ 117.356208][ T5645] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/11/2022 [ 117.366101][ T5645] Call Trace: [ 117.369226][ T5645] [ 117.372000][ T5645] dump_stack_lvl+0x151/0x1b7 [ 117.376515][ T5645] ? bfq_pos_tree_add_move+0x43e/0x43e [ 117.381822][ T5645] dump_stack+0x15/0x17 [ 117.385803][ T5645] should_fail+0x3c0/0x510 [ 117.390057][ T5645] __should_failslab+0x9f/0xe0 [ 117.394656][ T5645] should_failslab+0x9/0x20 [ 117.398993][ T5645] kmem_cache_alloc+0x4f/0x2f0 [ 117.403596][ T5645] ? vm_area_dup+0x26/0x1d0 [ 117.407934][ T5645] vm_area_dup+0x26/0x1d0 12:35:00 executing program 5: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0xffffffb3) 12:35:00 executing program 0: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 117.412100][ T5645] dup_mmap+0x6b8/0xea0 [ 117.416093][ T5645] ? __delayed_free_task+0x20/0x20 [ 117.421038][ T5645] ? mm_init+0x807/0x960 [ 117.425113][ T5645] dup_mm+0x91/0x330 [ 117.428852][ T5645] copy_mm+0x108/0x1b0 [ 117.432756][ T5645] copy_process+0x1295/0x3250 [ 117.437269][ T5645] ? proc_fail_nth_write+0x213/0x290 [ 117.442387][ T5645] ? proc_fail_nth_read+0x220/0x220 [ 117.447423][ T5645] ? check_kill_permission+0x37/0x490 [ 117.452634][ T5645] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 117.457578][ T5645] ? group_send_sig_info+0xa4/0x2f0 [ 117.462610][ T5645] ? vmacache_update+0xb7/0x120 [ 117.467302][ T5645] kernel_clone+0x22d/0x990 [ 117.471637][ T5645] ? create_io_thread+0x1e0/0x1e0 [ 117.476496][ T5645] ? __mutex_lock_slowpath+0x10/0x10 [ 117.481619][ T5645] __x64_sys_clone+0x289/0x310 [ 117.486217][ T5645] ? __do_sys_vfork+0x130/0x130 [ 117.490904][ T5645] ? debug_smp_processor_id+0x17/0x20 [ 117.496116][ T5645] do_syscall_64+0x44/0xd0 [ 117.500368][ T5645] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 117.506096][ T5645] RIP: 0033:0x7f931dc135a9 [ 117.510355][ T5645] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 117.530052][ T5645] RSP: 002b:00007f931c987118 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 117.538292][ T5645] RAX: ffffffffffffffda RBX: 00007f931dd33f80 RCX: 00007f931dc135a9 [ 117.546102][ T5645] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 117.553912][ T5645] RBP: 00007f931c9871d0 R08: 0000000000000000 R09: 0000000000000000 [ 117.561811][ T5645] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 117.569639][ T5645] R13: 00007fffd2d3bdcf R14: 00007f931c987300 R15: 0000000000022000 [ 117.577436][ T5645] 12:35:01 executing program 4: perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x12) r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cgroup.controllers\x00', 0x100002, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000140)='memory.low\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f0000000200), 0x12) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000000080)=0x3) syz_clone(0x74809480, 0x0, 0x4100, &(0x7f0000000000), 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000400000000000000000000850000006d000000850000000f00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000080)='sys_exit\x00', r2}, 0x10) 12:35:01 executing program 0: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 12:35:01 executing program 5: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0xffffffb3) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) (async) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0xffffffb3) (async) 12:35:01 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) openat$cgroup_procs(r0, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x100002, 0x0) syz_clone(0x1ffff000, 0x0, 0x0, 0x0, 0x0, 0x0) 12:35:01 executing program 2: syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 59) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 12:35:01 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0) write$cgroup_type(r1, &(0x7f0000000080), 0x11ffffce1) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x660c, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='blkio.throttle.io_service_bytes_recursive\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'vlan1\x00', 0x52d35ce30131f272}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000240)={'pimreg0\x00', 0x200}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x80, 0x0) ioctl$TUNGETVNETHDRSZ(r2, 0x800454d7, &(0x7f0000000340)) perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0x0, 0x3, 0x8, 0x5e, 0x0, 0xc9fc, 0x40104, 0xd, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, @perf_config_ext={0x100000001, 0x200}, 0x1040, 0x7ff, 0x4, 0x0, 0x1, 0x7, 0x0, 0x0, 0x93a, 0x0, 0x9}, 0xffffffffffffffff, 0x2, r2, 0x3) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={'tunl0\x00', 0x200}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0) write$cgroup_type(r4, &(0x7f0000000080), 0x11ffffce1) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x660c, 0x0) openat$cgroup_ro(r4, &(0x7f00000001c0)='memory.swap.current\x00', 0x0, 0x0) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) perf_event_open$cgroup(&(0x7f0000000140)={0x0, 0x80, 0x6, 0xc6, 0x9, 0x2, 0x0, 0x5, 0x82984, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x100, 0x2, @perf_bp={&(0x7f0000000100), 0xf}, 0x8351, 0x4, 0x0, 0x6, 0x6, 0xe00, 0x8001, 0x0, 0x2, 0x0, 0xffffffffffffffff}, r2, 0x4, r1, 0x5) close(r0) 12:35:01 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) openat$cgroup_procs(r0, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x100002, 0x0) syz_clone(0x1ffff000, 0x0, 0x0, 0x0, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) (async) openat$cgroup_procs(r0, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) (async) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x100002, 0x0) (async) syz_clone(0x1ffff000, 0x0, 0x0, 0x0, 0x0, 0x0) (async) 12:35:01 executing program 0: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 12:35:01 executing program 5: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) (async) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0xffffffb3) [ 117.792085][ T5689] FAULT_INJECTION: forcing a failure. [ 117.792085][ T5689] name failslab, interval 1, probability 0, space 0, times 0 [ 117.826852][ T5689] CPU: 0 PID: 5689 Comm: syz-executor.2 Not tainted 5.15.74-syzkaller-04383-g7f2e600bf63a #0 [ 117.836847][ T5689] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/11/2022 [ 117.846837][ T5689] Call Trace: [ 117.849959][ T5689] [ 117.852734][ T5689] dump_stack_lvl+0x151/0x1b7 [ 117.857247][ T5689] ? bfq_pos_tree_add_move+0x43e/0x43e [ 117.862552][ T5689] dump_stack+0x15/0x17 [ 117.866536][ T5689] should_fail+0x3c0/0x510 [ 117.870792][ T5689] __should_failslab+0x9f/0xe0 [ 117.875394][ T5689] should_failslab+0x9/0x20 [ 117.879732][ T5689] kmem_cache_alloc+0x4f/0x2f0 [ 117.884327][ T5689] ? vm_area_dup+0x26/0x1d0 [ 117.888668][ T5689] vm_area_dup+0x26/0x1d0 [ 117.892836][ T5689] dup_mmap+0x6b8/0xea0 [ 117.896828][ T5689] ? __delayed_free_task+0x20/0x20 [ 117.901777][ T5689] ? mm_init+0x807/0x960 [ 117.905854][ T5689] dup_mm+0x91/0x330 [ 117.909586][ T5689] copy_mm+0x108/0x1b0 [ 117.913488][ T5689] copy_process+0x1295/0x3250 [ 117.918003][ T5689] ? proc_fail_nth_write+0x213/0x290 [ 117.923124][ T5689] ? proc_fail_nth_read+0x220/0x220 [ 117.928161][ T5689] ? check_kill_permission+0x37/0x490 [ 117.933365][ T5689] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 117.938316][ T5689] ? group_send_sig_info+0xa4/0x2f0 [ 117.943347][ T5689] ? vmacache_update+0xb7/0x120 [ 117.948036][ T5689] kernel_clone+0x22d/0x990 [ 117.952373][ T5689] ? create_io_thread+0x1e0/0x1e0 [ 117.957245][ T5689] ? __mutex_lock_slowpath+0x10/0x10 [ 117.962474][ T5689] __x64_sys_clone+0x289/0x310 [ 117.967044][ T5689] ? __do_sys_vfork+0x130/0x130 [ 117.971730][ T5689] ? debug_smp_processor_id+0x17/0x20 [ 117.976938][ T5689] do_syscall_64+0x44/0xd0 [ 117.981199][ T5689] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 117.986914][ T5689] RIP: 0033:0x7f931dc135a9 [ 117.991169][ T5689] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 118.010628][ T5689] RSP: 002b:00007f931c987118 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 118.018859][ T5689] RAX: ffffffffffffffda RBX: 00007f931dd33f80 RCX: 00007f931dc135a9 [ 118.026671][ T5689] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 118.034480][ T5689] RBP: 00007f931c9871d0 R08: 0000000000000000 R09: 0000000000000000 12:35:01 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0) write$cgroup_type(r1, &(0x7f0000000080), 0x11ffffce1) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x660c, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='blkio.throttle.io_service_bytes_recursive\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'vlan1\x00', 0x52d35ce30131f272}) (async) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000240)={'pimreg0\x00', 0x200}) (async) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x80, 0x0) (async) ioctl$TUNGETVNETHDRSZ(r2, 0x800454d7, &(0x7f0000000340)) perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0x0, 0x3, 0x8, 0x5e, 0x0, 0xc9fc, 0x40104, 0xd, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, @perf_config_ext={0x100000001, 0x200}, 0x1040, 0x7ff, 0x4, 0x0, 0x1, 0x7, 0x0, 0x0, 0x93a, 0x0, 0x9}, 0xffffffffffffffff, 0x2, r2, 0x3) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={'tunl0\x00', 0x200}) (async) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0) write$cgroup_type(r4, &(0x7f0000000080), 0x11ffffce1) (async) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x660c, 0x0) (async, rerun: 64) openat$cgroup_ro(r4, &(0x7f00000001c0)='memory.swap.current\x00', 0x0, 0x0) (async, rerun: 64) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) (async, rerun: 64) perf_event_open$cgroup(&(0x7f0000000140)={0x0, 0x80, 0x6, 0xc6, 0x9, 0x2, 0x0, 0x5, 0x82984, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x100, 0x2, @perf_bp={&(0x7f0000000100), 0xf}, 0x8351, 0x4, 0x0, 0x6, 0x6, 0xe00, 0x8001, 0x0, 0x2, 0x0, 0xffffffffffffffff}, r2, 0x4, r1, 0x5) (rerun: 64) close(r0) 12:35:01 executing program 5: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) syz_clone(0x60a6d000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 12:35:01 executing program 0: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 118.042288][ T5689] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 118.050099][ T5689] R13: 00007fffd2d3bdcf R14: 00007f931c987300 R15: 0000000000022000 [ 118.057913][ T5689] 12:35:01 executing program 2: syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 60) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 12:35:01 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) openat$cgroup_procs(r0, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x100002, 0x0) (async, rerun: 64) syz_clone(0x1ffff000, 0x0, 0x0, 0x0, 0x0, 0x0) (rerun: 64) 12:35:01 executing program 0: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 12:35:01 executing program 5: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) syz_clone(0x60a6d000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) (async) syz_clone(0x60a6d000, 0x0, 0x0, 0x0, 0x0, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async) 12:35:01 executing program 4: perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x12) r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cgroup.controllers\x00', 0x100002, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000140)='memory.low\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f0000000200), 0x12) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000000080)=0x3) syz_clone(0x74809480, 0x0, 0x4100, &(0x7f0000000000), 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000400000000000000000000850000006d000000850000000f00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000080)='sys_exit\x00', r2}, 0x10) 12:35:01 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0) write$cgroup_type(r1, &(0x7f0000000080), 0x11ffffce1) (async) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x660c, 0x0) (async) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='blkio.throttle.io_service_bytes_recursive\x00', 0x0, 0x0) (async) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'vlan1\x00', 0x52d35ce30131f272}) (async) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000240)={'pimreg0\x00', 0x200}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x80, 0x0) (async) ioctl$TUNGETVNETHDRSZ(r2, 0x800454d7, &(0x7f0000000340)) perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0x0, 0x3, 0x8, 0x5e, 0x0, 0xc9fc, 0x40104, 0xd, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, @perf_config_ext={0x100000001, 0x200}, 0x1040, 0x7ff, 0x4, 0x0, 0x1, 0x7, 0x0, 0x0, 0x93a, 0x0, 0x9}, 0xffffffffffffffff, 0x2, r2, 0x3) (async) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={'tunl0\x00', 0x200}) (async) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0) write$cgroup_type(r4, &(0x7f0000000080), 0x11ffffce1) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x660c, 0x0) (async) openat$cgroup_ro(r4, &(0x7f00000001c0)='memory.swap.current\x00', 0x0, 0x0) (async) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) (async) perf_event_open$cgroup(&(0x7f0000000140)={0x0, 0x80, 0x6, 0xc6, 0x9, 0x2, 0x0, 0x5, 0x82984, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x100, 0x2, @perf_bp={&(0x7f0000000100), 0xf}, 0x8351, 0x4, 0x0, 0x6, 0x6, 0xe00, 0x8001, 0x0, 0x2, 0x0, 0xffffffffffffffff}, r2, 0x4, r1, 0x5) close(r0) 12:35:01 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) close(r0) write$cgroup_int(r0, &(0x7f0000000000)=0x101, 0x12) syz_clone(0x1ffff000, 0x0, 0x0, 0x0, 0x0, 0x0) 12:35:01 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) close(r0) write$cgroup_int(r0, &(0x7f0000000000)=0x101, 0x12) (async) syz_clone(0x1ffff000, 0x0, 0x0, 0x0, 0x0, 0x0) 12:35:01 executing program 0: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 12:35:01 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) close(r0) (async) write$cgroup_int(r0, &(0x7f0000000000)=0x101, 0x12) (async) syz_clone(0x1ffff000, 0x0, 0x0, 0x0, 0x0, 0x0) [ 118.359329][ T5738] FAULT_INJECTION: forcing a failure. [ 118.359329][ T5738] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 118.399886][ T5738] CPU: 0 PID: 5738 Comm: syz-executor.2 Not tainted 5.15.74-syzkaller-04383-g7f2e600bf63a #0 [ 118.409879][ T5738] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/11/2022 [ 118.419860][ T5738] Call Trace: [ 118.424204][ T5738] [ 118.426983][ T5738] dump_stack_lvl+0x151/0x1b7 [ 118.431494][ T5738] ? bfq_pos_tree_add_move+0x43e/0x43e [ 118.436786][ T5738] dump_stack+0x15/0x17 [ 118.440775][ T5738] should_fail+0x3c0/0x510 [ 118.445031][ T5738] should_fail_alloc_page+0x58/0x70 [ 118.450065][ T5738] __alloc_pages+0x1de/0x7c0 [ 118.454491][ T5738] ? __count_vm_events+0x30/0x30 [ 118.459272][ T5738] ? __this_cpu_preempt_check+0x13/0x20 [ 118.464650][ T5738] ? __mod_node_page_state+0xac/0xf0 [ 118.469766][ T5738] pte_alloc_one+0x73/0x1b0 [ 118.474107][ T5738] ? pfn_modify_allowed+0x2e0/0x2e0 [ 118.479137][ T5738] __pte_alloc+0x86/0x350 [ 118.483300][ T5738] ? free_pgtables+0x210/0x210 [ 118.487897][ T5738] ? _raw_spin_lock+0xa3/0x1b0 [ 118.492497][ T5738] ? _raw_spin_trylock_bh+0x1d0/0x1d0 [ 118.497705][ T5738] ? __kernel_text_address+0x9a/0x110 [ 118.502914][ T5738] copy_pte_range+0x1b1f/0x20b0 [ 118.507603][ T5738] ? __kunmap_atomic+0x80/0x80 [ 118.512200][ T5738] ? __kasan_slab_alloc+0xc4/0xe0 [ 118.517063][ T5738] ? __kasan_slab_alloc+0xb2/0xe0 [ 118.521940][ T5738] ? kmem_cache_alloc+0x189/0x2f0 [ 118.526779][ T5738] ? vm_area_dup+0x26/0x1d0 [ 118.531129][ T5738] ? dup_mmap+0x6b8/0xea0 [ 118.535286][ T5738] ? dup_mm+0x91/0x330 [ 118.539194][ T5738] ? copy_mm+0x108/0x1b0 [ 118.543270][ T5738] ? copy_process+0x1295/0x3250 [ 118.547956][ T5738] ? kernel_clone+0x22d/0x990 [ 118.552469][ T5738] ? __x64_sys_clone+0x289/0x310 [ 118.557245][ T5738] ? do_syscall_64+0x44/0xd0 [ 118.561670][ T5738] ? entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 118.567573][ T5738] copy_page_range+0xc1e/0x1090 [ 118.572263][ T5738] ? pfn_valid+0x1e0/0x1e0 [ 118.576513][ T5738] dup_mmap+0x99f/0xea0 [ 118.580507][ T5738] ? __delayed_free_task+0x20/0x20 [ 118.585451][ T5738] ? mm_init+0x807/0x960 [ 118.589536][ T5738] dup_mm+0x91/0x330 [ 118.593263][ T5738] copy_mm+0x108/0x1b0 [ 118.598124][ T5738] copy_process+0x1295/0x3250 [ 118.602638][ T5738] ? proc_fail_nth_write+0x213/0x290 [ 118.607778][ T5738] ? proc_fail_nth_read+0x220/0x220 [ 118.612790][ T5738] ? check_kill_permission+0x37/0x490 [ 118.617997][ T5738] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 118.622945][ T5738] ? group_send_sig_info+0xa4/0x2f0 [ 118.627983][ T5738] ? vmacache_update+0xb7/0x120 [ 118.632667][ T5738] kernel_clone+0x22d/0x990 [ 118.637008][ T5738] ? create_io_thread+0x1e0/0x1e0 [ 118.641867][ T5738] ? __mutex_lock_slowpath+0x10/0x10 [ 118.646986][ T5738] __x64_sys_clone+0x289/0x310 [ 118.651585][ T5738] ? __do_sys_vfork+0x130/0x130 [ 118.656273][ T5738] ? debug_smp_processor_id+0x17/0x20 [ 118.661483][ T5738] do_syscall_64+0x44/0xd0 [ 118.665732][ T5738] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 118.671462][ T5738] RIP: 0033:0x7f931dc135a9 [ 118.675716][ T5738] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 12:35:02 executing program 0: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 12:35:02 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000000)={r0}, 0x8) openat$cgroup_ro(r1, &(0x7f0000000040)='blkio.bfq.time\x00', 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='devices.list\x00', 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0) write$cgroup_type(r2, &(0x7f0000000080), 0x11ffffce1) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x660c, 0x0) write$cgroup_type(r2, &(0x7f00000000c0), 0x9) perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x3, 0x6, 0xfe, 0x20, 0x0, 0x400000000000, 0x80802, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x3, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x38, 0x0, @perf_bp={&(0x7f0000000100)}, 0x6000, 0x9, 0x8001, 0x3, 0x1, 0x0, 0x800, 0x0, 0x2, 0x0, 0x7}, 0xffffffffffffffff, 0x0, r2, 0x8) syz_clone(0x1fe7e180, 0x0, 0xfffffffffffffeb6, 0x0, 0x0, 0x0) [ 118.695418][ T5738] RSP: 002b:00007f931c987118 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 118.703660][ T5738] RAX: ffffffffffffffda RBX: 00007f931dd33f80 RCX: 00007f931dc135a9 [ 118.711470][ T5738] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 118.719282][ T5738] RBP: 00007f931c9871d0 R08: 0000000000000000 R09: 0000000000000000 [ 118.727266][ T5738] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 118.735085][ T5738] R13: 00007fffd2d3bdcf R14: 00007f931c987300 R15: 0000000000022000 [ 118.742982][ T5738] 12:35:02 executing program 2: syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 61) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 12:35:02 executing program 0: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 12:35:02 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'\x00', 0x52d35ce30131f272}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r2 = bpf$ITER_CREATE(0x21, &(0x7f00000000c0)={r0}, 0x8) ioctl$TUNSETSTEERINGEBPF(r1, 0x800454e0, &(0x7f0000000100)=r2) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) ioctl$TUNSETVNETLE(r0, 0x400454dc, &(0x7f0000000040)) close(r0) 12:35:02 executing program 5: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) (async) syz_clone(0x60a6d000, 0x0, 0x0, 0x0, 0x0, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) [ 118.939700][ T5781] FAULT_INJECTION: forcing a failure. [ 118.939700][ T5781] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 118.961603][ T5781] CPU: 1 PID: 5781 Comm: syz-executor.2 Not tainted 5.15.74-syzkaller-04383-g7f2e600bf63a #0 [ 118.972441][ T5781] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/11/2022 [ 118.982464][ T5781] Call Trace: [ 118.985543][ T5781] [ 118.988320][ T5781] dump_stack_lvl+0x151/0x1b7 [ 118.992918][ T5781] ? bfq_pos_tree_add_move+0x43e/0x43e [ 118.998216][ T5781] dump_stack+0x15/0x17 [ 119.002206][ T5781] should_fail+0x3c0/0x510 [ 119.006461][ T5781] should_fail_alloc_page+0x58/0x70 [ 119.011495][ T5781] __alloc_pages+0x1de/0x7c0 [ 119.015922][ T5781] ? __count_vm_events+0x30/0x30 [ 119.020691][ T5781] ? __this_cpu_preempt_check+0x13/0x20 [ 119.026163][ T5781] ? __mod_node_page_state+0xac/0xf0 [ 119.031287][ T5781] pte_alloc_one+0x73/0x1b0 [ 119.035739][ T5781] ? pfn_modify_allowed+0x2e0/0x2e0 [ 119.040814][ T5781] __pte_alloc+0x86/0x350 [ 119.044940][ T5781] ? free_pgtables+0x210/0x210 [ 119.049535][ T5781] ? _raw_spin_lock+0xa3/0x1b0 [ 119.054137][ T5781] ? _raw_spin_trylock_bh+0x1d0/0x1d0 [ 119.059341][ T5781] ? __kernel_text_address+0x9a/0x110 [ 119.064552][ T5781] copy_pte_range+0x1b1f/0x20b0 [ 119.069255][ T5781] ? __kunmap_atomic+0x80/0x80 [ 119.073848][ T5781] ? __kasan_slab_alloc+0xc4/0xe0 [ 119.078699][ T5781] ? __kasan_slab_alloc+0xb2/0xe0 [ 119.083556][ T5781] ? kmem_cache_alloc+0x189/0x2f0 [ 119.088597][ T5781] ? vm_area_dup+0x26/0x1d0 [ 119.093029][ T5781] ? dup_mmap+0x6b8/0xea0 [ 119.097179][ T5781] ? dup_mm+0x91/0x330 [ 119.101084][ T5781] ? copy_mm+0x108/0x1b0 [ 119.105165][ T5781] ? copy_process+0x1295/0x3250 [ 119.109850][ T5781] ? kernel_clone+0x22d/0x990 [ 119.114367][ T5781] ? __x64_sys_clone+0x289/0x310 [ 119.119136][ T5781] ? do_syscall_64+0x44/0xd0 [ 119.123565][ T5781] ? entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 119.129590][ T5781] copy_page_range+0xc1e/0x1090 [ 119.134272][ T5781] ? pfn_valid+0x1e0/0x1e0 [ 119.138542][ T5781] dup_mmap+0x99f/0xea0 [ 119.142518][ T5781] ? __delayed_free_task+0x20/0x20 [ 119.147462][ T5781] ? mm_init+0x807/0x960 [ 119.151541][ T5781] dup_mm+0x91/0x330 [ 119.155322][ T5781] copy_mm+0x108/0x1b0 [ 119.159181][ T5781] copy_process+0x1295/0x3250 [ 119.163692][ T5781] ? proc_fail_nth_write+0x213/0x290 [ 119.168815][ T5781] ? proc_fail_nth_read+0x220/0x220 [ 119.173847][ T5781] ? check_kill_permission+0x37/0x490 [ 119.179059][ T5781] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 119.184017][ T5781] ? group_send_sig_info+0xa4/0x2f0 [ 119.189036][ T5781] ? vmacache_update+0xb7/0x120 [ 119.193723][ T5781] kernel_clone+0x22d/0x990 [ 119.198063][ T5781] ? create_io_thread+0x1e0/0x1e0 [ 119.202925][ T5781] ? __mutex_lock_slowpath+0x10/0x10 [ 119.208046][ T5781] __x64_sys_clone+0x289/0x310 [ 119.212650][ T5781] ? __do_sys_vfork+0x130/0x130 [ 119.217332][ T5781] ? debug_smp_processor_id+0x17/0x20 [ 119.222539][ T5781] do_syscall_64+0x44/0xd0 [ 119.226791][ T5781] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 119.232519][ T5781] RIP: 0033:0x7f931dc135a9 [ 119.236905][ T5781] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 119.256347][ T5781] RSP: 002b:00007f931c987118 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 119.264592][ T5781] RAX: ffffffffffffffda RBX: 00007f931dd33f80 RCX: 00007f931dc135a9 [ 119.272402][ T5781] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 119.280214][ T5781] RBP: 00007f931c9871d0 R08: 0000000000000000 R09: 0000000000000000 [ 119.288028][ T5781] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 119.295837][ T5781] R13: 00007fffd2d3bdcf R14: 00007f931c987300 R15: 0000000000022000 [ 119.303652][ T5781] 12:35:03 executing program 4: perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x12) r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cgroup.controllers\x00', 0x100002, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000140)='memory.low\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f0000000200), 0x12) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000000080)=0x3) syz_clone(0x74809480, 0x0, 0x4100, &(0x7f0000000000), 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000400000000000000000000850000006d000000850000000f00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000080)='sys_exit\x00', r2}, 0x10) 12:35:03 executing program 0: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400001}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 12:35:03 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000000)={r0}, 0x8) openat$cgroup_ro(r1, &(0x7f0000000040)='blkio.bfq.time\x00', 0x0, 0x0) (async) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='devices.list\x00', 0x0, 0x0) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0) write$cgroup_type(r2, &(0x7f0000000080), 0x11ffffce1) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x660c, 0x0) (async) write$cgroup_type(r2, &(0x7f00000000c0), 0x9) (async) perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x3, 0x6, 0xfe, 0x20, 0x0, 0x400000000000, 0x80802, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x3, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x38, 0x0, @perf_bp={&(0x7f0000000100)}, 0x6000, 0x9, 0x8001, 0x3, 0x1, 0x0, 0x800, 0x0, 0x2, 0x0, 0x7}, 0xffffffffffffffff, 0x0, r2, 0x8) syz_clone(0x1fe7e180, 0x0, 0xfffffffffffffeb6, 0x0, 0x0, 0x0) 12:35:03 executing program 2: syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 62) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 12:35:03 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'\x00', 0x52d35ce30131f272}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) r2 = bpf$ITER_CREATE(0x21, &(0x7f00000000c0)={r0}, 0x8) ioctl$TUNSETSTEERINGEBPF(r1, 0x800454e0, &(0x7f0000000100)=r2) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) (async, rerun: 64) ioctl$TUNSETVNETLE(r0, 0x400454dc, &(0x7f0000000040)) (rerun: 64) close(r0) 12:35:03 executing program 5: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) openat$cgroup_ro(r0, &(0x7f0000000040)='pids.current\x00', 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup/syz0\x00', 0x200002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) [ 119.998688][ T5803] FAULT_INJECTION: forcing a failure. [ 119.998688][ T5803] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 120.013259][ T5803] CPU: 1 PID: 5803 Comm: syz-executor.2 Not tainted 5.15.74-syzkaller-04383-g7f2e600bf63a #0 [ 120.023239][ T5803] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/11/2022 [ 120.033306][ T5803] Call Trace: [ 120.036430][ T5803] [ 120.039206][ T5803] dump_stack_lvl+0x151/0x1b7 [ 120.043719][ T5803] ? bfq_pos_tree_add_move+0x43e/0x43e [ 120.049016][ T5803] dump_stack+0x15/0x17 [ 120.053005][ T5803] should_fail+0x3c0/0x510 [ 120.057263][ T5803] should_fail_alloc_page+0x58/0x70 [ 120.062297][ T5803] __alloc_pages+0x1de/0x7c0 [ 120.066737][ T5803] ? __count_vm_events+0x30/0x30 [ 120.071500][ T5803] ? __this_cpu_preempt_check+0x13/0x20 [ 120.076881][ T5803] ? __mod_node_page_state+0xac/0xf0 [ 120.081997][ T5803] pte_alloc_one+0x73/0x1b0 [ 120.086338][ T5803] ? pfn_modify_allowed+0x2e0/0x2e0 [ 120.091372][ T5803] __pte_alloc+0x86/0x350 [ 120.095535][ T5803] ? free_pgtables+0x210/0x210 [ 120.100132][ T5803] ? _raw_spin_lock+0xa3/0x1b0 [ 120.104732][ T5803] ? _raw_spin_trylock_bh+0x1d0/0x1d0 [ 120.110027][ T5803] ? __kernel_text_address+0x9a/0x110 [ 120.115237][ T5803] copy_pte_range+0x1b1f/0x20b0 [ 120.119928][ T5803] ? __kunmap_atomic+0x80/0x80 [ 120.124523][ T5803] ? __kasan_slab_alloc+0xc4/0xe0 [ 120.129391][ T5803] ? __kasan_slab_alloc+0xb2/0xe0 [ 120.134242][ T5803] ? kmem_cache_alloc+0x189/0x2f0 [ 120.139100][ T5803] ? vm_area_dup+0x26/0x1d0 [ 120.143437][ T5803] ? dup_mmap+0x6b8/0xea0 [ 120.147602][ T5803] ? dup_mm+0x91/0x330 [ 120.151510][ T5803] ? copy_mm+0x108/0x1b0 [ 120.155589][ T5803] ? copy_process+0x1295/0x3250 [ 120.160276][ T5803] ? kernel_clone+0x22d/0x990 [ 120.164788][ T5803] ? __x64_sys_clone+0x289/0x310 [ 120.169562][ T5803] ? do_syscall_64+0x44/0xd0 [ 120.173989][ T5803] ? entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 120.179892][ T5803] copy_page_range+0xc1e/0x1090 [ 120.184581][ T5803] ? pfn_valid+0x1e0/0x1e0 [ 120.188831][ T5803] dup_mmap+0x99f/0xea0 [ 120.192823][ T5803] ? __delayed_free_task+0x20/0x20 [ 120.197770][ T5803] ? mm_init+0x807/0x960 [ 120.201849][ T5803] dup_mm+0x91/0x330 [ 120.205582][ T5803] copy_mm+0x108/0x1b0 [ 120.209485][ T5803] copy_process+0x1295/0x3250 [ 120.213999][ T5803] ? proc_fail_nth_write+0x213/0x290 [ 120.219121][ T5803] ? proc_fail_nth_read+0x220/0x220 [ 120.224153][ T5803] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 120.229101][ T5803] ? vfs_write+0x9af/0x1050 [ 120.233439][ T5803] ? vmacache_update+0xb7/0x120 [ 120.238130][ T5803] kernel_clone+0x22d/0x990 [ 120.242467][ T5803] ? file_end_write+0x1b0/0x1b0 [ 120.247347][ T5803] ? __kasan_check_write+0x14/0x20 [ 120.252294][ T5803] ? create_io_thread+0x1e0/0x1e0 [ 120.257158][ T5803] ? __mutex_lock_slowpath+0x10/0x10 [ 120.262277][ T5803] __x64_sys_clone+0x289/0x310 [ 120.266965][ T5803] ? __do_sys_vfork+0x130/0x130 [ 120.271651][ T5803] ? debug_smp_processor_id+0x17/0x20 [ 120.276857][ T5803] do_syscall_64+0x44/0xd0 [ 120.281109][ T5803] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 120.286852][ T5803] RIP: 0033:0x7f931dc135a9 [ 120.291104][ T5803] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 120.310532][ T5803] RSP: 002b:00007f931c987118 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 120.318863][ T5803] RAX: ffffffffffffffda RBX: 00007f931dd33f80 RCX: 00007f931dc135a9 [ 120.326675][ T5803] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 120.334486][ T5803] RBP: 00007f931c9871d0 R08: 0000000000000000 R09: 0000000000000000 [ 120.342297][ T5803] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 12:35:03 executing program 0: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1004000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 12:35:03 executing program 5: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) (async) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) openat$cgroup_ro(r0, &(0x7f0000000040)='pids.current\x00', 0x0, 0x0) (async) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup/syz0\x00', 0x200002, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 12:35:03 executing program 2: syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 63) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) [ 120.350108][ T5803] R13: 00007fffd2d3bdcf R14: 00007f931c987300 R15: 0000000000022000 [ 120.357922][ T5803] 12:35:03 executing program 0: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 12:35:03 executing program 0: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 12:35:03 executing program 5: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) openat$cgroup_ro(r0, &(0x7f0000000040)='pids.current\x00', 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup/syz0\x00', 0x200002, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) [ 120.494415][ T5829] FAULT_INJECTION: forcing a failure. [ 120.494415][ T5829] name failslab, interval 1, probability 0, space 0, times 0 [ 120.518330][ T5829] CPU: 1 PID: 5829 Comm: syz-executor.2 Not tainted 5.15.74-syzkaller-04383-g7f2e600bf63a #0 [ 120.528320][ T5829] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/11/2022 [ 120.538215][ T5829] Call Trace: [ 120.541346][ T5829] [ 120.544115][ T5829] dump_stack_lvl+0x151/0x1b7 [ 120.548631][ T5829] ? bfq_pos_tree_add_move+0x43e/0x43e [ 120.553926][ T5829] dump_stack+0x15/0x17 [ 120.557918][ T5829] should_fail+0x3c0/0x510 [ 120.562168][ T5829] __should_failslab+0x9f/0xe0 [ 120.566767][ T5829] should_failslab+0x9/0x20 [ 120.571110][ T5829] kmem_cache_alloc+0x4f/0x2f0 [ 120.575707][ T5829] ? vm_area_dup+0x26/0x1d0 [ 120.580057][ T5829] vm_area_dup+0x26/0x1d0 [ 120.584213][ T5829] dup_mmap+0x6b8/0xea0 [ 120.588206][ T5829] ? __delayed_free_task+0x20/0x20 [ 120.593151][ T5829] ? mm_init+0x807/0x960 [ 120.597241][ T5829] dup_mm+0x91/0x330 [ 120.600963][ T5829] copy_mm+0x108/0x1b0 [ 120.604871][ T5829] copy_process+0x1295/0x3250 [ 120.609382][ T5829] ? proc_fail_nth_write+0x213/0x290 [ 120.614501][ T5829] ? proc_fail_nth_read+0x220/0x220 [ 120.619539][ T5829] ? check_kill_permission+0x37/0x490 [ 120.624750][ T5829] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 120.629693][ T5829] ? group_send_sig_info+0xa4/0x2f0 [ 120.634734][ T5829] ? vmacache_update+0xb7/0x120 [ 120.639413][ T5829] kernel_clone+0x22d/0x990 [ 120.643754][ T5829] ? create_io_thread+0x1e0/0x1e0 [ 120.648612][ T5829] ? __mutex_lock_slowpath+0x10/0x10 [ 120.653731][ T5829] __x64_sys_clone+0x289/0x310 [ 120.658333][ T5829] ? __do_sys_vfork+0x130/0x130 [ 120.663027][ T5829] ? debug_smp_processor_id+0x17/0x20 [ 120.668315][ T5829] do_syscall_64+0x44/0xd0 [ 120.672564][ T5829] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 120.678310][ T5829] RIP: 0033:0x7f931dc135a9 [ 120.682551][ T5829] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 120.701990][ T5829] RSP: 002b:00007f931c987118 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 120.710232][ T5829] RAX: ffffffffffffffda RBX: 00007f931dd33f80 RCX: 00007f931dc135a9 [ 120.718043][ T5829] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 120.725863][ T5829] RBP: 00007f931c9871d0 R08: 0000000000000000 R09: 0000000000000000 [ 120.733760][ T5829] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 12:35:04 executing program 4: perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x12) r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cgroup.controllers\x00', 0x100002, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000140)='memory.low\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f0000000200), 0x12) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000000080)=0x3) syz_clone(0x74809480, 0x0, 0x4100, &(0x7f0000000000), 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000400000000000000000000850000006d000000850000000f00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000080)='sys_exit\x00', r2}, 0x10) 12:35:04 executing program 0: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 12:35:04 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'\x00', 0x52d35ce30131f272}) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) r2 = bpf$ITER_CREATE(0x21, &(0x7f00000000c0)={r0}, 0x8) ioctl$TUNSETSTEERINGEBPF(r1, 0x800454e0, &(0x7f0000000100)=r2) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) (async) ioctl$TUNSETVNETLE(r0, 0x400454dc, &(0x7f0000000040)) (async) close(r0) 12:35:04 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0) write$cgroup_type(r1, &(0x7f0000000080), 0x11ffffce1) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x660c, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000180)=0xca0, 0x12) r2 = perf_event_open$cgroup(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x4, 0xff, 0x9, 0x0, 0x3, 0x200, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, @perf_bp={&(0x7f0000000040)}, 0x6000, 0x80000001, 0x9, 0x2, 0x200000000, 0x5, 0x8001, 0x0, 0x6, 0x0, 0xffffffffffffb0ba}, r0, 0xd, r0, 0x6) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, &(0x7f0000000140)=0xffffffffffffffff) openat$cgroup_ro(r1, &(0x7f0000000000)='blkio.throttle.io_service_bytes_recursive\x00', 0x0, 0x0) 12:35:04 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000000)={r0}, 0x8) openat$cgroup_ro(r1, &(0x7f0000000040)='blkio.bfq.time\x00', 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='devices.list\x00', 0x0, 0x0) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0) write$cgroup_type(r2, &(0x7f0000000080), 0x11ffffce1) (async) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x660c, 0x0) (async) write$cgroup_type(r2, &(0x7f00000000c0), 0x9) (async) perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x3, 0x6, 0xfe, 0x20, 0x0, 0x400000000000, 0x80802, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x3, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x38, 0x0, @perf_bp={&(0x7f0000000100)}, 0x6000, 0x9, 0x8001, 0x3, 0x1, 0x0, 0x800, 0x0, 0x2, 0x0, 0x7}, 0xffffffffffffffff, 0x0, r2, 0x8) syz_clone(0x1fe7e180, 0x0, 0xfffffffffffffeb6, 0x0, 0x0, 0x0) 12:35:04 executing program 2: syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 64) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 12:35:04 executing program 0: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfeffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 120.741561][ T5829] R13: 00007fffd2d3bdcf R14: 00007f931c987300 R15: 0000000000022000 [ 120.749376][ T5829] 12:35:04 executing program 0: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 12:35:04 executing program 0: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 120.800791][ T5844] FAULT_INJECTION: forcing a failure. [ 120.800791][ T5844] name failslab, interval 1, probability 0, space 0, times 0 [ 120.865134][ T5844] CPU: 1 PID: 5844 Comm: syz-executor.2 Not tainted 5.15.74-syzkaller-04383-g7f2e600bf63a #0 [ 120.875667][ T5844] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/11/2022 [ 120.885547][ T5844] Call Trace: [ 120.888669][ T5844] [ 120.891449][ T5844] dump_stack_lvl+0x151/0x1b7 [ 120.895962][ T5844] ? bfq_pos_tree_add_move+0x43e/0x43e [ 120.901258][ T5844] ? vma_interval_tree_augment_rotate+0x210/0x210 [ 120.907682][ T5844] dump_stack+0x15/0x17 [ 120.914450][ T5844] should_fail+0x3c0/0x510 [ 120.918803][ T5844] __should_failslab+0x9f/0xe0 [ 120.923390][ T5844] should_failslab+0x9/0x20 [ 120.927725][ T5844] kmem_cache_alloc+0x4f/0x2f0 [ 120.932326][ T5844] ? anon_vma_fork+0xf7/0x4f0 [ 120.936840][ T5844] anon_vma_fork+0xf7/0x4f0 [ 120.941179][ T5844] ? anon_vma_name+0x43/0x70 [ 120.945606][ T5844] dup_mmap+0x750/0xea0 [ 120.949597][ T5844] ? __delayed_free_task+0x20/0x20 [ 120.954548][ T5844] ? mm_init+0x807/0x960 [ 120.958623][ T5844] dup_mm+0x91/0x330 [ 120.962355][ T5844] copy_mm+0x108/0x1b0 [ 120.966264][ T5844] copy_process+0x1295/0x3250 [ 120.970777][ T5844] ? proc_fail_nth_write+0x213/0x290 [ 120.975895][ T5844] ? proc_fail_nth_read+0x220/0x220 [ 120.980931][ T5844] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 120.985877][ T5844] ? vfs_write+0x9af/0x1050 [ 120.990215][ T5844] ? vmacache_update+0xb7/0x120 [ 120.994997][ T5844] kernel_clone+0x22d/0x990 [ 120.999329][ T5844] ? file_end_write+0x1b0/0x1b0 [ 121.004014][ T5844] ? __kasan_check_write+0x14/0x20 [ 121.008962][ T5844] ? create_io_thread+0x1e0/0x1e0 [ 121.013825][ T5844] ? __mutex_lock_slowpath+0x10/0x10 [ 121.018953][ T5844] __x64_sys_clone+0x289/0x310 [ 121.023670][ T5844] ? __do_sys_vfork+0x130/0x130 [ 121.028351][ T5844] ? debug_smp_processor_id+0x17/0x20 [ 121.033558][ T5844] do_syscall_64+0x44/0xd0 [ 121.037810][ T5844] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 121.043537][ T5844] RIP: 0033:0x7f931dc135a9 [ 121.047790][ T5844] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 121.067234][ T5844] RSP: 002b:00007f931c987118 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 121.075477][ T5844] RAX: ffffffffffffffda RBX: 00007f931dd33f80 RCX: 00007f931dc135a9 [ 121.083290][ T5844] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 121.091102][ T5844] RBP: 00007f931c9871d0 R08: 0000000000000000 R09: 0000000000000000 [ 121.098912][ T5844] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 121.106721][ T5844] R13: 00007fffd2d3bdcf R14: 00007f931c987300 R15: 0000000000022000 12:35:04 executing program 0: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 12:35:04 executing program 0: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 121.114539][ T5844] 12:35:04 executing program 0: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 12:35:04 executing program 4: perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x12) r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cgroup.controllers\x00', 0x100002, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000140)='memory.low\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f0000000200), 0x12) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000000080)=0x3) syz_clone(0x74809480, 0x0, 0x4100, &(0x7f0000000000), 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000400000000000000000000850000006d000000850000000f00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000080)='sys_exit\x00', r2}, 0x10) 12:35:04 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'wg1\x00', 0x4000}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) close(r0) 12:35:04 executing program 0: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400001}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 12:35:04 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0) write$cgroup_type(r1, &(0x7f0000000080), 0x11ffffce1) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x660c, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000180)=0xca0, 0x12) r2 = perf_event_open$cgroup(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x4, 0xff, 0x9, 0x0, 0x3, 0x200, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, @perf_bp={&(0x7f0000000040)}, 0x6000, 0x80000001, 0x9, 0x2, 0x200000000, 0x5, 0x8001, 0x0, 0x6, 0x0, 0xffffffffffffb0ba}, r0, 0xd, r0, 0x6) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, &(0x7f0000000140)=0xffffffffffffffff) openat$cgroup_ro(r1, &(0x7f0000000000)='blkio.throttle.io_service_bytes_recursive\x00', 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) (async) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0) (async) write$cgroup_type(r1, &(0x7f0000000080), 0x11ffffce1) (async) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x660c, 0x0) (async) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000180)=0xca0, 0x12) (async) perf_event_open$cgroup(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x4, 0xff, 0x9, 0x0, 0x3, 0x200, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, @perf_bp={&(0x7f0000000040)}, 0x6000, 0x80000001, 0x9, 0x2, 0x200000000, 0x5, 0x8001, 0x0, 0x6, 0x0, 0xffffffffffffb0ba}, r0, 0xd, r0, 0x6) (async) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, &(0x7f0000000140)=0xffffffffffffffff) (async) openat$cgroup_ro(r1, &(0x7f0000000000)='blkio.throttle.io_service_bytes_recursive\x00', 0x0, 0x0) (async) 12:35:04 executing program 1: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) syz_clone(0x1ffdf200, 0x0, 0x0, 0x0, 0x0, 0x0) 12:35:04 executing program 2: syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 65) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 12:35:04 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'wg1\x00', 0x4000}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) close(r0) openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'wg1\x00', 0x4000}) (async) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) (async) close(r0) (async) 12:35:04 executing program 0: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1004000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 12:35:04 executing program 1: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) (async) syz_clone(0x1ffdf200, 0x0, 0x0, 0x0, 0x0, 0x0) 12:35:04 executing program 0: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 12:35:04 executing program 1: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) syz_clone(0x1ffdf200, 0x0, 0x0, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) (async) syz_clone(0x1ffdf200, 0x0, 0x0, 0x0, 0x0, 0x0) (async) 12:35:04 executing program 0: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 121.545774][ T5891] FAULT_INJECTION: forcing a failure. [ 121.545774][ T5891] name failslab, interval 1, probability 0, space 0, times 0 [ 121.562314][ T5891] CPU: 0 PID: 5891 Comm: syz-executor.2 Not tainted 5.15.74-syzkaller-04383-g7f2e600bf63a #0 [ 121.572318][ T5891] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/11/2022 [ 121.582298][ T5891] Call Trace: [ 121.585410][ T5891] [ 121.588184][ T5891] dump_stack_lvl+0x151/0x1b7 [ 121.594185][ T5891] ? bfq_pos_tree_add_move+0x43e/0x43e [ 121.599563][ T5891] dump_stack+0x15/0x17 [ 121.603563][ T5891] should_fail+0x3c0/0x510 [ 121.607808][ T5891] __should_failslab+0x9f/0xe0 [ 121.612408][ T5891] should_failslab+0x9/0x20 [ 121.616752][ T5891] kmem_cache_alloc+0x4f/0x2f0 [ 121.621350][ T5891] ? anon_vma_fork+0x1b9/0x4f0 [ 121.625947][ T5891] anon_vma_fork+0x1b9/0x4f0 [ 121.630384][ T5891] dup_mmap+0x750/0xea0 [ 121.634365][ T5891] ? __delayed_free_task+0x20/0x20 [ 121.639312][ T5891] ? mm_init+0x807/0x960 [ 121.643388][ T5891] dup_mm+0x91/0x330 [ 121.647135][ T5891] copy_mm+0x108/0x1b0 [ 121.651028][ T5891] copy_process+0x1295/0x3250 [ 121.655538][ T5891] ? proc_fail_nth_write+0x213/0x290 [ 121.660669][ T5891] ? proc_fail_nth_read+0x220/0x220 [ 121.665691][ T5891] ? check_kill_permission+0x37/0x490 [ 121.670899][ T5891] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 121.675852][ T5891] ? group_send_sig_info+0xa4/0x2f0 [ 121.680885][ T5891] ? vmacache_update+0xb7/0x120 [ 121.685570][ T5891] kernel_clone+0x22d/0x990 [ 121.689908][ T5891] ? create_io_thread+0x1e0/0x1e0 [ 121.694767][ T5891] ? __mutex_lock_slowpath+0x10/0x10 [ 121.699890][ T5891] __x64_sys_clone+0x289/0x310 [ 121.705332][ T5891] ? __do_sys_vfork+0x130/0x130 [ 121.710011][ T5891] ? debug_smp_processor_id+0x17/0x20 [ 121.715218][ T5891] do_syscall_64+0x44/0xd0 [ 121.719468][ T5891] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 121.725194][ T5891] RIP: 0033:0x7f931dc135a9 [ 121.729451][ T5891] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 121.748889][ T5891] RSP: 002b:00007f931c987118 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 121.757135][ T5891] RAX: ffffffffffffffda RBX: 00007f931dd33f80 RCX: 00007f931dc135a9 [ 121.764945][ T5891] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 121.772756][ T5891] RBP: 00007f931c9871d0 R08: 0000000000000000 R09: 0000000000000000 [ 121.780571][ T5891] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 121.788385][ T5891] R13: 00007fffd2d3bdcf R14: 00007f931c987300 R15: 0000000000022000 12:35:05 executing program 4: perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x12) r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cgroup.controllers\x00', 0x100002, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000140)='memory.low\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f0000000200), 0x12) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000000080)=0x3) syz_clone(0x74809480, 0x0, 0x4100, &(0x7f0000000000), 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000400000000000000000000850000006d000000850000000f00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000080)='sys_exit\x00', r2}, 0x10) 12:35:05 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) syz_clone(0x1feff000, 0x0, 0x0, 0x0, 0x0, 0x0) openat$cgroup(r0, &(0x7f0000000000)='syz0\x00', 0x200002, 0x0) 12:35:05 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'wg1\x00', 0x4000}) (async) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) close(r0) 12:35:05 executing program 0: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 12:35:05 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0) write$cgroup_type(r1, &(0x7f0000000080), 0x11ffffce1) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x660c, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000180)=0xca0, 0x12) r2 = perf_event_open$cgroup(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x4, 0xff, 0x9, 0x0, 0x3, 0x200, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, @perf_bp={&(0x7f0000000040)}, 0x6000, 0x80000001, 0x9, 0x2, 0x200000000, 0x5, 0x8001, 0x0, 0x6, 0x0, 0xffffffffffffb0ba}, r0, 0xd, r0, 0x6) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, &(0x7f0000000140)=0xffffffffffffffff) openat$cgroup_ro(r1, &(0x7f0000000000)='blkio.throttle.io_service_bytes_recursive\x00', 0x0, 0x0) [ 121.796200][ T5891] 12:35:05 executing program 2: syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 66) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 12:35:05 executing program 0: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfeffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 12:35:05 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) syz_clone(0x1feff000, 0x0, 0x0, 0x0, 0x0, 0x0) openat$cgroup(r0, &(0x7f0000000000)='syz0\x00', 0x200002, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) (async) syz_clone(0x1feff000, 0x0, 0x0, 0x0, 0x0, 0x0) (async) openat$cgroup(r0, &(0x7f0000000000)='syz0\x00', 0x200002, 0x0) (async) 12:35:05 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'\x00', 0x52d35ce30131f272}) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='blkio.bfq.sectors_recursive\x00', 0x0, 0x0) ioctl$TUNSETLINK(r1, 0x400454cd, 0x18) close(r0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip_vti0\x00', 0x2}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'macvlan0\x00', 0x1000}) 12:35:05 executing program 0: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 12:35:05 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) syz_clone(0x1feff000, 0x0, 0x0, 0x0, 0x0, 0x0) (async) openat$cgroup(r0, &(0x7f0000000000)='syz0\x00', 0x200002, 0x0) [ 121.876385][ T5931] FAULT_INJECTION: forcing a failure. [ 121.876385][ T5931] name failslab, interval 1, probability 0, space 0, times 0 [ 121.906885][ T5931] CPU: 0 PID: 5931 Comm: syz-executor.2 Not tainted 5.15.74-syzkaller-04383-g7f2e600bf63a #0 12:35:05 executing program 1: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) syz_clone(0x1ffff000, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0) write$cgroup_type(r0, &(0x7f0000000080), 0x11ffffce1) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x660c, 0x0) openat$cgroup_ro(r0, &(0x7f0000000000)='cpu.stat\x00', 0x0, 0x0) [ 121.916884][ T5931] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/11/2022 [ 121.926781][ T5931] Call Trace: [ 121.929899][ T5931] [ 121.932678][ T5931] dump_stack_lvl+0x151/0x1b7 [ 121.937215][ T5931] ? bfq_pos_tree_add_move+0x43e/0x43e [ 121.942487][ T5931] dump_stack+0x15/0x17 [ 121.946478][ T5931] should_fail+0x3c0/0x510 [ 121.950734][ T5931] __should_failslab+0x9f/0xe0 [ 121.955338][ T5931] should_failslab+0x9/0x20 [ 121.959667][ T5931] kmem_cache_alloc+0x4f/0x2f0 [ 121.964286][ T5931] ? vm_area_dup+0x26/0x1d0 [ 121.968609][ T5931] vm_area_dup+0x26/0x1d0 [ 121.972781][ T5931] dup_mmap+0x6b8/0xea0 [ 121.976768][ T5931] ? __delayed_free_task+0x20/0x20 [ 121.981856][ T5931] ? mm_init+0x807/0x960 [ 121.985934][ T5931] dup_mm+0x91/0x330 [ 121.989668][ T5931] copy_mm+0x108/0x1b0 [ 121.993571][ T5931] copy_process+0x1295/0x3250 [ 121.998087][ T5931] ? proc_fail_nth_write+0x213/0x290 [ 122.003992][ T5931] ? proc_fail_nth_read+0x220/0x220 [ 122.009018][ T5931] ? check_kill_permission+0x37/0x490 [ 122.014229][ T5931] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 122.019183][ T5931] ? group_send_sig_info+0xa4/0x2f0 [ 122.024209][ T5931] ? vmacache_update+0xb7/0x120 [ 122.029071][ T5931] kernel_clone+0x22d/0x990 [ 122.033409][ T5931] ? create_io_thread+0x1e0/0x1e0 [ 122.038369][ T5931] ? __mutex_lock_slowpath+0x10/0x10 [ 122.043573][ T5931] __x64_sys_clone+0x289/0x310 [ 122.048161][ T5931] ? __do_sys_vfork+0x130/0x130 [ 122.052853][ T5931] ? debug_smp_processor_id+0x17/0x20 [ 122.058065][ T5931] do_syscall_64+0x44/0xd0 [ 122.062310][ T5931] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 122.068034][ T5931] RIP: 0033:0x7f931dc135a9 [ 122.072288][ T5931] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 122.091906][ T5931] RSP: 002b:00007f931c987118 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 122.100152][ T5931] RAX: ffffffffffffffda RBX: 00007f931dd33f80 RCX: 00007f931dc135a9 [ 122.107964][ T5931] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 122.115772][ T5931] RBP: 00007f931c9871d0 R08: 0000000000000000 R09: 0000000000000000 [ 122.123582][ T5931] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 122.131391][ T5931] R13: 00007fffd2d3bdcf R14: 00007f931c987300 R15: 0000000000022000 [ 122.139211][ T5931] 12:35:05 executing program 4: perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x12) r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cgroup.controllers\x00', 0x100002, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000140)='memory.low\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f0000000200), 0x12) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000000080)=0x3) syz_clone(0x74809480, 0x0, 0x4100, &(0x7f0000000000), 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000400000000000000000000850000006d000000850000000f00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000080)='sys_exit\x00', r2}, 0x10) 12:35:05 executing program 0: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 12:35:05 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'\x00', 0x52d35ce30131f272}) (async) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='blkio.bfq.sectors_recursive\x00', 0x0, 0x0) ioctl$TUNSETLINK(r1, 0x400454cd, 0x18) (async) close(r0) (async) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip_vti0\x00', 0x2}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'macvlan0\x00', 0x1000}) 12:35:05 executing program 0: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 12:35:05 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'\x00', 0x52d35ce30131f272}) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='blkio.bfq.sectors_recursive\x00', 0x0, 0x0) ioctl$TUNSETLINK(r1, 0x400454cd, 0x18) close(r0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip_vti0\x00', 0x2}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'macvlan0\x00', 0x1000}) openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'\x00', 0x52d35ce30131f272}) (async) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='blkio.bfq.sectors_recursive\x00', 0x0, 0x0) (async) ioctl$TUNSETLINK(r1, 0x400454cd, 0x18) (async) close(r0) (async) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip_vti0\x00', 0x2}) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'macvlan0\x00', 0x1000}) (async) 12:35:05 executing program 0: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 12:35:05 executing program 2: syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 67) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 12:35:05 executing program 5: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0) r1 = getpid() syz_open_procfs$namespace(r1, &(0x7f0000000180)='ns/pid_for_children\x00') bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x19, 0x86, 0x8, 0x3, 0x100, r0, 0x7, '\x00', 0x0, r0, 0x3, 0x2, 0x2}, 0x48) write$cgroup_type(r0, &(0x7f0000000080), 0x11ffffce1) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x660c, 0x0) r2 = openat$cgroup(r0, &(0x7f0000000040)='syz0\x00', 0x200002, 0x0) syz_clone(0x20009000, &(0x7f0000000240)="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", 0x1000, &(0x7f00000001c0), &(0x7f0000001240), &(0x7f0000001280)="83130fb5e428a55b0750c25d30f4037563c4") openat$cgroup_int(r2, &(0x7f00000000c0)='hugetlb.2MB.rsvd.max_usage_in_bytes\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000000000)=0x40) 12:35:05 executing program 1: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) syz_clone(0x1ffff000, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0) write$cgroup_type(r0, &(0x7f0000000080), 0x11ffffce1) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x660c, 0x0) openat$cgroup_ro(r0, &(0x7f0000000000)='cpu.stat\x00', 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) (async) syz_clone(0x1ffff000, 0x0, 0x0, 0x0, 0x0, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0) (async) write$cgroup_type(r0, &(0x7f0000000080), 0x11ffffce1) (async) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x660c, 0x0) (async) openat$cgroup_ro(r0, &(0x7f0000000000)='cpu.stat\x00', 0x0, 0x0) (async) 12:35:05 executing program 0: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400001}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 12:35:05 executing program 0: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1004000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 12:35:05 executing program 4: perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x12) r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cgroup.controllers\x00', 0x100002, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000140)='memory.low\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f0000000200), 0x12) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000000080)=0x3) syz_clone(0x74809480, 0x0, 0x4100, &(0x7f0000000000), 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000400000000000000000000850000006d000000850000000f00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000080)='sys_exit\x00', r2}, 0x10) [ 122.432393][ T5973] FAULT_INJECTION: forcing a failure. [ 122.432393][ T5973] name failslab, interval 1, probability 0, space 0, times 0 [ 122.455759][ T5973] CPU: 0 PID: 5973 Comm: syz-executor.2 Not tainted 5.15.74-syzkaller-04383-g7f2e600bf63a #0 [ 122.465766][ T5973] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/11/2022 [ 122.475640][ T5973] Call Trace: [ 122.478764][ T5973] [ 122.481541][ T5973] dump_stack_lvl+0x151/0x1b7 [ 122.486054][ T5973] ? bfq_pos_tree_add_move+0x43e/0x43e [ 122.491347][ T5973] ? do_syscall_64+0x44/0xd0 [ 122.495778][ T5973] dump_stack+0x15/0x17 [ 122.499856][ T5973] should_fail+0x3c0/0x510 [ 122.504118][ T5973] __should_failslab+0x9f/0xe0 [ 122.508706][ T5973] should_failslab+0x9/0x20 [ 122.513047][ T5973] kmem_cache_alloc+0x4f/0x2f0 [ 122.517644][ T5973] ? anon_vma_clone+0xa1/0x4f0 [ 122.522246][ T5973] anon_vma_clone+0xa1/0x4f0 [ 122.526757][ T5973] anon_vma_fork+0x91/0x4f0 [ 122.531103][ T5973] ? anon_vma_name+0x4c/0x70 [ 122.535610][ T5973] dup_mmap+0x750/0xea0 [ 122.539603][ T5973] ? __delayed_free_task+0x20/0x20 [ 122.544817][ T5973] ? mm_init+0x807/0x960 [ 122.548974][ T5973] dup_mm+0x91/0x330 [ 122.552705][ T5973] copy_mm+0x108/0x1b0 [ 122.556610][ T5973] copy_process+0x1295/0x3250 [ 122.561127][ T5973] ? proc_fail_nth_read+0x220/0x220 [ 122.566160][ T5973] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 122.571106][ T5973] ? vfs_write+0x9af/0x1050 [ 122.575530][ T5973] ? vmacache_update+0xb7/0x120 [ 122.580220][ T5973] kernel_clone+0x22d/0x990 [ 122.584654][ T5973] ? make_kuid+0x700/0x700 [ 122.588908][ T5973] ? trace_raw_output_bpf_trace_printk+0xd0/0xd0 [ 122.595153][ T5973] ? create_io_thread+0x1e0/0x1e0 [ 122.600019][ T5973] __x64_sys_clone+0x289/0x310 [ 122.604714][ T5973] ? __do_sys_vfork+0x130/0x130 [ 122.609391][ T5973] ? debug_smp_processor_id+0x17/0x20 [ 122.614596][ T5973] do_syscall_64+0x44/0xd0 [ 122.618850][ T5973] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 122.624578][ T5973] RIP: 0033:0x7f931dc135a9 [ 122.628832][ T5973] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 122.648273][ T5973] RSP: 002b:00007f931c987118 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 122.656518][ T5973] RAX: ffffffffffffffda RBX: 00007f931dd33f80 RCX: 00007f931dc135a9 [ 122.664328][ T5973] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 122.672139][ T5973] RBP: 00007f931c9871d0 R08: 0000000000000000 R09: 0000000000000000 12:35:06 executing program 0: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 12:35:06 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'veth0_macvtap\x00', 0x103}) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) ioctl$TUNSETLINK(r1, 0x400454cd, 0x320) ioctl$TUNSETPERSIST(r1, 0x400454cb, 0x0) ioctl$TUNSETLINK(r0, 0x400454cd, 0x104) close(r0) 12:35:06 executing program 0: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 12:35:06 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'veth0_macvtap\x00', 0x103}) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) ioctl$TUNSETLINK(r1, 0x400454cd, 0x320) ioctl$TUNSETPERSIST(r1, 0x400454cb, 0x0) ioctl$TUNSETLINK(r0, 0x400454cd, 0x104) close(r0) openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'veth0_macvtap\x00', 0x103}) (async) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) (async) ioctl$TUNSETLINK(r1, 0x400454cd, 0x320) (async) ioctl$TUNSETPERSIST(r1, 0x400454cb, 0x0) (async) ioctl$TUNSETLINK(r0, 0x400454cd, 0x104) (async) close(r0) (async) [ 122.679949][ T5973] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 122.687856][ T5973] R13: 00007fffd2d3bdcf R14: 00007f931c987300 R15: 0000000000022000 [ 122.695664][ T5973] 12:35:06 executing program 0: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 12:35:06 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'veth0_macvtap\x00', 0x103}) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) ioctl$TUNSETLINK(r1, 0x400454cd, 0x320) (async) ioctl$TUNSETPERSIST(r1, 0x400454cb, 0x0) ioctl$TUNSETLINK(r0, 0x400454cd, 0x104) (async) close(r0) 12:35:06 executing program 2: syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 68) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) [ 122.810932][ T6012] FAULT_INJECTION: forcing a failure. [ 122.810932][ T6012] name failslab, interval 1, probability 0, space 0, times 0 [ 122.830807][ T6012] CPU: 0 PID: 6012 Comm: syz-executor.2 Not tainted 5.15.74-syzkaller-04383-g7f2e600bf63a #0 [ 122.840800][ T6012] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/11/2022 [ 122.850696][ T6012] Call Trace: [ 122.853823][ T6012] [ 122.856602][ T6012] dump_stack_lvl+0x151/0x1b7 [ 122.861109][ T6012] ? bfq_pos_tree_add_move+0x43e/0x43e [ 122.866404][ T6012] dump_stack+0x15/0x17 [ 122.870402][ T6012] should_fail+0x3c0/0x510 [ 122.874740][ T6012] __should_failslab+0x9f/0xe0 [ 122.879347][ T6012] should_failslab+0x9/0x20 [ 122.883675][ T6012] kmem_cache_alloc+0x4f/0x2f0 [ 122.888273][ T6012] ? anon_vma_clone+0xa1/0x4f0 [ 122.892875][ T6012] anon_vma_clone+0xa1/0x4f0 [ 122.897305][ T6012] anon_vma_fork+0x91/0x4f0 [ 122.901647][ T6012] ? anon_vma_name+0x43/0x70 [ 122.906063][ T6012] dup_mmap+0x750/0xea0 [ 122.910057][ T6012] ? __delayed_free_task+0x20/0x20 [ 122.915006][ T6012] ? mm_init+0x807/0x960 [ 122.919083][ T6012] dup_mm+0x91/0x330 [ 122.922819][ T6012] copy_mm+0x108/0x1b0 [ 122.926733][ T6012] copy_process+0x1295/0x3250 [ 122.931233][ T6012] ? proc_fail_nth_write+0x213/0x290 [ 122.936353][ T6012] ? proc_fail_nth_read+0x220/0x220 [ 122.941388][ T6012] ? check_kill_permission+0x37/0x490 [ 122.946596][ T6012] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 122.951544][ T6012] ? group_send_sig_info+0xa4/0x2f0 [ 122.956578][ T6012] ? vmacache_update+0xb7/0x120 [ 122.961272][ T6012] kernel_clone+0x22d/0x990 [ 122.965605][ T6012] ? create_io_thread+0x1e0/0x1e0 [ 122.970558][ T6012] ? __mutex_lock_slowpath+0x10/0x10 [ 122.975671][ T6012] __x64_sys_clone+0x289/0x310 [ 122.980277][ T6012] ? __do_sys_vfork+0x130/0x130 [ 122.984960][ T6012] ? debug_smp_processor_id+0x17/0x20 [ 122.990177][ T6012] do_syscall_64+0x44/0xd0 [ 122.994418][ T6012] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 123.000153][ T6012] RIP: 0033:0x7f931dc135a9 [ 123.004397][ T6012] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 123.024733][ T6012] RSP: 002b:00007f931c987118 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 123.032983][ T6012] RAX: ffffffffffffffda RBX: 00007f931dd33f80 RCX: 00007f931dc135a9 [ 123.040788][ T6012] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 123.048598][ T6012] RBP: 00007f931c9871d0 R08: 0000000000000000 R09: 0000000000000000 12:35:06 executing program 5: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) (async) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0) r1 = getpid() syz_open_procfs$namespace(r1, &(0x7f0000000180)='ns/pid_for_children\x00') (async) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x19, 0x86, 0x8, 0x3, 0x100, r0, 0x7, '\x00', 0x0, r0, 0x3, 0x2, 0x2}, 0x48) write$cgroup_type(r0, &(0x7f0000000080), 0x11ffffce1) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x660c, 0x0) r2 = openat$cgroup(r0, &(0x7f0000000040)='syz0\x00', 0x200002, 0x0) syz_clone(0x20009000, &(0x7f0000000240)="64e795f5834e95a8b7a01d16a2ef6d3776db61d679722ff4b089fae621faaf60bded54b54769b25a5b1d1724aad262236a171b9b4adf2e04497cd9ea2c7b4de28af0c34e5d73667eb24906dba1e1a7eb979a392445bdbc5f35c291aac39e4cbff3a28274aa8a1ab93abfacec4e970d981f840c558c87bd04deaa84963ef5ca72a62837cf208299f4ec9a87fb3da6b3c91dc458603838eb03ee14ab776b146c88aefc0c676d1fbc644c94666169c1baae770627f0fa7c7b7ba1a6e9fa9edc7de80f309a6798f4ed06ee45fcb2cb7e1b170b570a418772c0bf9685a71979eb89e6638537a4ec86465dcd3afca38fc8f0711351d1a970f42417b748bde28ae678e80ee952324623e6ed82b70965a2fa943994d9407dc3dddff3e0fa188b3af930aaf60a608f7eceb794920c0db28f3e34b9b2964bea186607cbe86a7f2ccf0c17b2eab8670ef6bf611d79472ef93c0d61c777aac08c0ffb981bcf4de4edde8a6e6330a934e53a9f12c4bf503120ef005d57a32630dd5263a65385cf7c54c3d476f9ba9d5e212dafd4b00825b505a107dac6a0f08a63a381162860646cc6f1c30c58c66d0b176933ab333ffebecdddd18ac48461fa97f492041be8b19bbb06da44f2dd4f10889cde9c17936fc69899f6f83b25f41afd5006bf774d54335d16be08389f4415ef2e7df7296d51809e786a8dd0a1177d9bd50a7d71493aba38a9e173686546305ca25d032728169183ddc05966197cc608b64ca91e080cbd2ff5f48c7f1b4b200ac10c0930b2c071b18a8a069e63bef272a4deb6df650ffa76e9e50859264403bd408d7cc736b6fd7ca146a96fce98b1a0e9eb582b88d61eca64f154c5af0da043dba5a450bbec6487dd4cc2e43e9180ad576a93c34eb937531b9e611b44f7db784704be01709df3272625f8e011d639a8005bb31e2ce210e180eee965b7643ee8d60a00c87166400ea799afa3f2009151d42592e1f5d0a9826c2a917e6606d5a4210f4c3fdb949dea5214736377eaa49c0f5ae27bc11705058d63689f635dc43b7feafbac12d44f7104ca8725fcf7a54d271a81e63d19c9ecb2e5f23bcdad7feabb916eca05b09b24f96490ea6f8d372bd91dd9a5cd12102f5f5ba96897b4e45ffca452976404bf89ad100c97d6268ca87d81cc9fb559d9ea9d14706a249a63dff9eb3c831a61b3893ed9571babf7ee74b164a4340ff49887621a2fb75820cbf8c3cfd8dae3913cc0c5f92ae89eef8b6321ba99844bd3789e800df6b8ef9f21fe7c0eff25d05b6bc6914f5713b28fe1f4de4ed0a66cefc9c3333ed8e29978e4306762792d655adb4defe2b6610f77f04ee36f25cf1656541f9815fcdf4d27e5ccf0e7ea513126f19883ca8234a497e32808c762d20e57e860bec90d2d01d50cd14be40aeba0771ca70c6729098feec168bd96125c107f9b413410224e92080e0e81d34dc0e5fce7a6be3daa779cc744737dbfad577ba06ba2ff3e576d397f15d40975346c1494aaaa265896cf5db2b23565bc1ca0eb9762d547b548abdcec15bb2675ab39f136f852542ae51182a13638ea765d86bdd4995d6bb242bd62dc5491d2b48ccd4aa0777647bb8049331f2881446ceee1e7a0c131b551794633bffa4c702aea4b45bc85032887ac5a76e212c6dd32ee6435cad255ac9aa97e58b64d22825b15075d696b6b0addada67b4b19cd1bbf8d01038325403e43a7656fb0baccf487bfe1bc7add316c5bfa3b71cdd53d3783aa380b687a0c36e5e6c72b800f2b2dc6c9d26f027e0e86b7aa1e043a7e0c2dff0237ceb1589d96f6cde06dced69872bd5f84c3508d42dae4b4154f2459e33413b442918e7f53d14fbc117d726b6682c9ff88ec188abeb672a1ce58de1b252eebf0f6841a99370d8ff7fa2d22ed311f61682e753b08679fcedb45a3813a3cd5a75ce853ba22aa374765b2be018cf1ca5841623658f993c1fb9cb14a99072dafab5a5adf5bd0d7d2f12418fe187e2426970452e6a6296e42c1e9506cc06877ce3cca9fa51ea6221899f2d0f5dac20bb11ab508c6e953112e03b65576472bfe87278f24fbf5f0ce85399406c64644dc9df49a70933f44ea3a682b4555fa14db868d0c0ab435195e3e6313e9db92cc514c37a97a94772f0b5c8ef999570d74ee79fe6d36c239c5b24d5e994497e86be66fa62c6792aafe477f4c58dc585e1dba07978d75da17702658d7c4013c35f149cb1e65e5698327031e538360a8619a732ee49b0ddfd4784987c3a0a2a464b0670a39d7916da1c2a59f379886e9ee8aaac832bd79ad107c3d78c21d6d4eb290bc0f226841e53a61e0e8e1be027903750ab177b0bc03a1fbf9d21869d630606d11a3e4186eee8905f62f68c081cab04de4e14237efea487b71248a6dc63c817b8eed7976bbd69d70fb4cfdaa74722b12ac820fa073dd6046bfc371c01831cbd8fdb213f4d9c5736c38890682c825efc888498bd681115471fa3cb3af5f054f47850671d951c7393842e5ebbd8acced59aa843a9cdf4566ccdba6060d5150a430f7498e05ca9f2ea4d08ffa051590b0b687a6fca830ebb7ea3c8b27b2c78d122a1142c7794aefb849dc81521235cf117229cd7657714ee38f5de8041aafe0b88cc73af7b70b0f5de3fe0132e2a4dd2271dd670c70a542c63f589c6c180655bf86fc6727b681ca3b5356222cd76d92a796c4cfc365fad0658e3230a4f23c74e56af7d3b0009cd48e60b16c73e7c1b54c869bfd94db9d8987c113862663eea3b7e16d454971ac2af3af1b3fffd0104877be51364962c976f848a843b2b06976ff1ddd05c371d6ccd6f407ba5f220bb139f888a90c6dd435954b3e29ad1e81e0a314ee204dddbc273bc3b3bb26031b206dc715c1d1117e706e5c50dbd7bbb2648ef90bc43a4362c89877fbde5c5b83997ba2b71ed8b301c090fc2a092301cc5cd48d537b406d3b7030a225a5b76d08c2a1eeb19e4fd22e7f0816883f953cedc89b63bf6077f1ebe87defecece29e71bd55a606c5a72e7944d510305d9a77798d4808e0849474024f410ebea5f4497064727a8e94f59c91993a61ab2de62e13a284f161e335a9cf7df768ac85b4059b9d0f5998dc6fbedf714dd8e8740c168b2665b490d4d425493e4b2d614a1fad4cdc2e61a9a003c21ebda63027dd5d6d1ec2d833ce739f8a4704d7d9318901b42a6deb09ce54b5807578c7d0c6202336536b1e4a9c6cc27b5c5e3b8c7aa7ea2fe8312e88f531573dc705a3ace73e29ec409d9bfcb48f388de71be169a84e864c2ede773a7c1a64ad20c20e583a6c9f748d4e727955cb13b279752cc986308ceb26bb245dd6de52c17e90e22aded9541672580926f42277a19968b84afb73fc2009db2145e7f9fc563652b55995f2fa34ee15ee4cef95cb71cea8e9a59f2b62b0072943cfafdd2cc560ba3a7d99e657bcd6828f83bd550d408b49e216e3fe401bfd2515adbfd73ba6f8b30d5551b1a064e6542ad69490937ace3d544bd91a57b1f3ae97431b9c4579680f7da3cace6225020c632ac9d156848c5910fd5254b5ca00c6589d0392d9995aad92090ad67c3d2910d7e3dd7f54525404d8783c3907e5eca0f2ba4730475f05e4204e13a10ad9d39f139ccd3ea20468bab4beece70e3934b85cec33fdf10203e06489ad5bfef0c22dfc543f3f8c3b79f7b616129a8faa25c747fa226239e7e70fc06bf3334e0dcccad0137d24bb0ee8b95395e605dc7036e01f1fe8c633f51108c40926d32faf8597d42c0a213d5f1ecfcab038f24d7dcd6ab8a56ac848cc325ea413afc22c2e0cdcb6974bef4a6835905c5f2351535f7e787141210c283bbf945f6a55793b2de49988d40e36c8278e76a3f941334f11213bfb309c3bbe0dbea34d85a87491d03e3cb678c8b01147c8a91e3c48be17d28a7487f1bebe6de81dc6bbbc2a3982c96c84b8ba81383ba91651153f8fbedb18db386970bf4c3d34c3a1ddc0ed484f920c5254828e1c55909e50128198324e57b50101bd3cd101c1c20febdc9c49542dfc0dec2a60d2883907dab99513ae0f285dae37cba9f5bf01b441c77c3636d1e3164412e367e5de9546229b3a12de63373ffb52c544d56283138b653bd30ff11d0ed2dcd4af21531b11f3716d57ac205d8efcd250466fce5d222c27051dd766dacc40e30d717e7ac2415e272a433cae53ea31398d759eb0c9f818bb3b387868c5b8889f666499adc2a378df5bde5299440805df6fce0b8cfe7944cf39eb3b673e270f88ebc668ad8cb5a749ecb10a2599f9820c6655f47571020327b822a07bee551af84447cbfff93100dd9fbb6a5480ee82327792bcdf345c23a667f12f22c16d060ffd0053c70b7118edb7db44fa4340a395701fd395bea01bf4dc4ffa585063192bca8e93558e1bd30c3e31521454f455abefbc3a6ce3e699e4c36b90ec39383591144bfe4714068cb903b63e1bbd8408fe5913ae44e37a6670aedb1db736d752972004e6daca3dc84a5122e24926d66abf0fd2a12356fb757c1fc8569ce28b8b511190d2aa4854d843399fad828ca2143a066faa6661d102c91b5e92497b1eba44b7b131ac99824cada14015e99fa5d8a8872c978ebfca6781052f0d021edbdd32e9900b6baace44f4072b38b935a8dfb5f3b30e35dfeb5abbf8afde393175b0195755a05dab015f624b097600fa67c65b1a507006bf8e916b3218f6983819775641ad5be36eaa001de89b404144fd6837ac39bf6186afbf9e962c6c15397ff71c5e20301b5e68be573c9b67cde3c5ea0aea89fc7b7355d6903777b31b81d9ad102c28f8e38334fcd9738247a8c871a2a5516188320ab6e44da74c06d1270fd98b8c76693fe2338ce708e129746d38d80fd4f106a89cd929a5e79b77104534c2941fe25bda2a31b50b8fcdd87efa90c257fa0650d45f891c55796f719198d0b4f7a2eb4e40ac846d3cdcf9c1ca8976717f888d14b4c025e88881b13233f77182ac57a87fb3a0b23cd4d8b14f6b901aad2e79585f688dd7f54912df921386758bed27712dd1773e1384ff345e322362af3d8ff6056955c3bd9a9bc3713bb882062cbfb3fe32aa376dec4984b13aa13ef9e6254c3a5a5db279390824037e69548553fd14e74b162ef8ac4fa151060fbb8b5d725396a21e6190767add165522fdbe2e52b588f5ad7432754ba1cc340a030b24a2e9082c3fa7db64caa3a40816cf80a0a6a52893a422a49b28ec474911cba549ab600b28dffe27693703397ad78664a29e674794c36fe668d639afcb049bdfb2515a4f3ec1c41678761fba11b72f21d7a2f94e64dbec431f0bb88b2f15a1ce0e0b502f31bb12f41c18f9b0f8a1db0e92846f67def289703aab63fa580a6130927ff8ccd6ae162f5b9d2f4e31f71c6cbfbe4b03a8bd651a2ee8c0611eb59ab0915dd1d78fa279082ee3917ed951dda767efc0a39feca2715edbb1ac10e1902b8e585742befd11b8721c5787cf167e70e37731b7e528a1a7816440de3927490978060c49c73771e9f15b2dda837bbfd5e3b313b041a37dc4db7ff0dd10bde859d87fc2bc47833edf648d413a054e815a4cd2fdcd76d73fc4c4ff0be5e9067e062dda6506af4264c03ac8950180c809e8036adc7c6a909e5664049ed01d40c2914e2c9ae2bbe99aff1ddf8a5530a4b1ab0cdb4a3dd273be9d8afbbdc882835ad573382a2c581bbf39eb6c1189b33eee2d5b847590126547f9fdfd426e1d3079ebe2838a1704b81c2f57d52274408dccf65075dad3f6086321be2975ae48c2ba7366c60e206331d9bb949e5a51faee69", 0x1000, &(0x7f00000001c0), &(0x7f0000001240), &(0x7f0000001280)="83130fb5e428a55b0750c25d30f4037563c4") (async) openat$cgroup_int(r2, &(0x7f00000000c0)='hugetlb.2MB.rsvd.max_usage_in_bytes\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000000000)=0x40) 12:35:06 executing program 0: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 12:35:06 executing program 1: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) syz_clone(0x1ffff000, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0) write$cgroup_type(r0, &(0x7f0000000080), 0x11ffffce1) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x660c, 0x0) openat$cgroup_ro(r0, &(0x7f0000000000)='cpu.stat\x00', 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) (async) syz_clone(0x1ffff000, 0x0, 0x0, 0x0, 0x0, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0) (async) write$cgroup_type(r0, &(0x7f0000000080), 0x11ffffce1) (async) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x660c, 0x0) (async) openat$cgroup_ro(r0, &(0x7f0000000000)='cpu.stat\x00', 0x0, 0x0) (async) 12:35:06 executing program 3: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'\x00', 0x52d35ce30131f272}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0) write$cgroup_type(r1, &(0x7f0000000340), 0x9) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x660c, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.net/syz1\x00', 0x200002, 0x0) perf_event_open$cgroup(&(0x7f00000002c0)={0x5, 0x80, 0x1, 0xa8, 0x9, 0x8, 0x0, 0x0, 0x80000, 0x8, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x40000, 0x0, @perf_config_ext={0x101, 0x5bad}, 0x300, 0x1, 0x6, 0x5, 0x7fff, 0x10001, 0x6, 0x0, 0x1, 0x0, 0x8}, r2, 0xe, 0xffffffffffffffff, 0x0) ioctl$TUNGETVNETHDRSZ(r1, 0x800454d7, &(0x7f0000000040)) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000180)={0x3, &(0x7f0000000140)=[{0x6, 0x81, 0x3, 0x4}, {0x7, 0x5, 0x8, 0x3c}, {0x1, 0xeb, 0x2}]}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000100)={0xffffffffffffffff, 0x8, 0x10}, 0xc) close(r3) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000000c0)={@map=r1, r1, 0x3, 0x0, r1}, 0x14) close(r0) openat$cgroup_ro(r1, &(0x7f00000001c0)='blkio.bfq.empty_time\x00', 0x0, 0x0) [ 123.056493][ T6012] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 123.064310][ T6012] R13: 00007fffd2d3bdcf R14: 00007f931c987300 R15: 0000000000022000 [ 123.072122][ T6012] 12:35:06 executing program 4: perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x12) r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cgroup.controllers\x00', 0x100002, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000140)='memory.low\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f0000000200), 0x12) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000000080)=0x3) syz_clone(0x74809480, 0x0, 0x4100, &(0x7f0000000000), 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000400000000000000000000850000006d000000850000000f00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000080)='sys_exit\x00', r2}, 0x10) 12:35:06 executing program 0: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfeffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 12:35:06 executing program 2: syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 69) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 12:35:06 executing program 1: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) r0 = getpid() syz_clone(0x10000, &(0x7f00000000c0)="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", 0xfa, &(0x7f00000001c0), &(0x7f0000000200), &(0x7f0000000240)="223d32191e871ab70b655b6044d9c49061d0875f312d274e863e33f24106ab56c89f3990c13725cc9da9dea3cd24969aa0f5ec642e326bf4263781463e2bfb16495644e5db0760e1a5d3c61108e202514fd1dff3fa8bf48a106b374edbd88e0ccd88785064c55bb393206720418ccb6285954e68aeaa0123fc757a547b3e0ce765af12d1a5aaa9ce31f8eee87256420f") perf_event_open(&(0x7f0000000040)={0x3, 0x80, 0x0, 0x6, 0x3, 0x9, 0x0, 0x5, 0x4, 0x8, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x80, 0x1, @perf_bp={&(0x7f0000000000), 0xe}, 0x2211, 0x7fff, 0x101, 0x5, 0x4, 0xffff7fff, 0x6, 0x0, 0xa78, 0x0, 0x3}, r0, 0x10, 0xffffffffffffffff, 0x6) 12:35:06 executing program 3: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0) (async) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'\x00', 0x52d35ce30131f272}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0) write$cgroup_type(r1, &(0x7f0000000340), 0x9) (async) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x660c, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.net/syz1\x00', 0x200002, 0x0) perf_event_open$cgroup(&(0x7f00000002c0)={0x5, 0x80, 0x1, 0xa8, 0x9, 0x8, 0x0, 0x0, 0x80000, 0x8, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x40000, 0x0, @perf_config_ext={0x101, 0x5bad}, 0x300, 0x1, 0x6, 0x5, 0x7fff, 0x10001, 0x6, 0x0, 0x1, 0x0, 0x8}, r2, 0xe, 0xffffffffffffffff, 0x0) (async) ioctl$TUNGETVNETHDRSZ(r1, 0x800454d7, &(0x7f0000000040)) (async) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000180)={0x3, &(0x7f0000000140)=[{0x6, 0x81, 0x3, 0x4}, {0x7, 0x5, 0x8, 0x3c}, {0x1, 0xeb, 0x2}]}) (async) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) (async) r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000100)={0xffffffffffffffff, 0x8, 0x10}, 0xc) close(r3) (async) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000000c0)={@map=r1, r1, 0x3, 0x0, r1}, 0x14) (async) close(r0) (async) openat$cgroup_ro(r1, &(0x7f00000001c0)='blkio.bfq.empty_time\x00', 0x0, 0x0) 12:35:06 executing program 1: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) (async) r0 = getpid() syz_clone(0x10000, &(0x7f00000000c0)="4b3bb7d78fa48a4ec1ac82563afe34cc3de91e9258d687e513e990662609464c598c6842e41b09bd73d78cfbde2fa845e07d6148a5de1498bba02666e4c6dd6f3feb8091f56b51f9942d9f11161e442c6fad69c365158ad456a27f66009588b15a06510f0309caff5f4042847865a6c316179c8f2b25ca4fe8e6eee8f776a829fd3e480fb8bd69f9f6c836534798d9ebb7704b00cae2c9fd9d2481982d7167da1c3c2a62f9bf9bc7bdd5e0bded421da00715b55aa9434a0f0d8a2ef707b3e49afca11e36ac62a13dfa7b471ccf787ab1a0112d9b3696f85b4769086d648db0e42fdc301fcbcf733d0c2a56e31c543a98ad2fbad3cd7d5a988602", 0xfa, &(0x7f00000001c0), &(0x7f0000000200), &(0x7f0000000240)="223d32191e871ab70b655b6044d9c49061d0875f312d274e863e33f24106ab56c89f3990c13725cc9da9dea3cd24969aa0f5ec642e326bf4263781463e2bfb16495644e5db0760e1a5d3c61108e202514fd1dff3fa8bf48a106b374edbd88e0ccd88785064c55bb393206720418ccb6285954e68aeaa0123fc757a547b3e0ce765af12d1a5aaa9ce31f8eee87256420f") (async, rerun: 32) perf_event_open(&(0x7f0000000040)={0x3, 0x80, 0x0, 0x6, 0x3, 0x9, 0x0, 0x5, 0x4, 0x8, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x80, 0x1, @perf_bp={&(0x7f0000000000), 0xe}, 0x2211, 0x7fff, 0x101, 0x5, 0x4, 0xffff7fff, 0x6, 0x0, 0xa78, 0x0, 0x3}, r0, 0x10, 0xffffffffffffffff, 0x6) (rerun: 32) 12:35:06 executing program 0: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 12:35:06 executing program 0: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 123.321008][ T6042] FAULT_INJECTION: forcing a failure. [ 123.321008][ T6042] name failslab, interval 1, probability 0, space 0, times 0 [ 123.373390][ T6042] CPU: 0 PID: 6042 Comm: syz-executor.2 Not tainted 5.15.74-syzkaller-04383-g7f2e600bf63a #0 [ 123.383383][ T6042] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/11/2022 [ 123.393276][ T6042] Call Trace: [ 123.396397][ T6042] [ 123.399177][ T6042] dump_stack_lvl+0x151/0x1b7 [ 123.403691][ T6042] ? bfq_pos_tree_add_move+0x43e/0x43e [ 123.408986][ T6042] ? vma_interval_tree_augment_rotate+0x210/0x210 [ 123.415234][ T6042] dump_stack+0x15/0x17 [ 123.419227][ T6042] should_fail+0x3c0/0x510 [ 123.423482][ T6042] __should_failslab+0x9f/0xe0 [ 123.428077][ T6042] should_failslab+0x9/0x20 [ 123.432418][ T6042] kmem_cache_alloc+0x4f/0x2f0 [ 123.437020][ T6042] ? anon_vma_fork+0xf7/0x4f0 [ 123.441532][ T6042] anon_vma_fork+0xf7/0x4f0 [ 123.445892][ T6042] ? anon_vma_name+0x43/0x70 [ 123.450297][ T6042] dup_mmap+0x750/0xea0 [ 123.454297][ T6042] ? __delayed_free_task+0x20/0x20 [ 123.459238][ T6042] ? mm_init+0x807/0x960 [ 123.463323][ T6042] dup_mm+0x91/0x330 [ 123.467052][ T6042] copy_mm+0x108/0x1b0 [ 123.470962][ T6042] copy_process+0x1295/0x3250 [ 123.475465][ T6042] ? proc_fail_nth_write+0x213/0x290 [ 123.480588][ T6042] ? proc_fail_nth_read+0x220/0x220 [ 123.485621][ T6042] ? check_kill_permission+0x37/0x490 [ 123.490829][ T6042] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 123.495777][ T6042] ? group_send_sig_info+0xa4/0x2f0 [ 123.500917][ T6042] ? vmacache_update+0xb7/0x120 [ 123.505582][ T6042] kernel_clone+0x22d/0x990 [ 123.510011][ T6042] ? create_io_thread+0x1e0/0x1e0 [ 123.514956][ T6042] ? __mutex_lock_slowpath+0x10/0x10 [ 123.520077][ T6042] __x64_sys_clone+0x289/0x310 [ 123.524765][ T6042] ? __do_sys_vfork+0x130/0x130 [ 123.529456][ T6042] ? debug_smp_processor_id+0x17/0x20 [ 123.534658][ T6042] do_syscall_64+0x44/0xd0 [ 123.538910][ T6042] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 123.544639][ T6042] RIP: 0033:0x7f931dc135a9 [ 123.548898][ T6042] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 12:35:06 executing program 5: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0) r1 = getpid() syz_open_procfs$namespace(r1, &(0x7f0000000180)='ns/pid_for_children\x00') bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x19, 0x86, 0x8, 0x3, 0x100, r0, 0x7, '\x00', 0x0, r0, 0x3, 0x2, 0x2}, 0x48) write$cgroup_type(r0, &(0x7f0000000080), 0x11ffffce1) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x660c, 0x0) r2 = openat$cgroup(r0, &(0x7f0000000040)='syz0\x00', 0x200002, 0x0) syz_clone(0x20009000, &(0x7f0000000240)="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", 0x1000, &(0x7f00000001c0), &(0x7f0000001240), &(0x7f0000001280)="83130fb5e428a55b0750c25d30f4037563c4") openat$cgroup_int(r2, &(0x7f00000000c0)='hugetlb.2MB.rsvd.max_usage_in_bytes\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000000000)=0x40) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) (async) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0) (async) getpid() (async) syz_open_procfs$namespace(r1, &(0x7f0000000180)='ns/pid_for_children\x00') (async) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x19, 0x86, 0x8, 0x3, 0x100, r0, 0x7, '\x00', 0x0, r0, 0x3, 0x2, 0x2}, 0x48) (async) write$cgroup_type(r0, &(0x7f0000000080), 0x11ffffce1) (async) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x660c, 0x0) (async) openat$cgroup(r0, &(0x7f0000000040)='syz0\x00', 0x200002, 0x0) (async) syz_clone(0x20009000, &(0x7f0000000240)="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", 0x1000, &(0x7f00000001c0), &(0x7f0000001240), &(0x7f0000001280)="83130fb5e428a55b0750c25d30f4037563c4") (async) openat$cgroup_int(r2, &(0x7f00000000c0)='hugetlb.2MB.rsvd.max_usage_in_bytes\x00', 0x2, 0x0) (async) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000000000)=0x40) (async) 12:35:06 executing program 1: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) r0 = getpid() syz_clone(0x10000, &(0x7f00000000c0)="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", 0xfa, &(0x7f00000001c0), &(0x7f0000000200), &(0x7f0000000240)="223d32191e871ab70b655b6044d9c49061d0875f312d274e863e33f24106ab56c89f3990c13725cc9da9dea3cd24969aa0f5ec642e326bf4263781463e2bfb16495644e5db0760e1a5d3c61108e202514fd1dff3fa8bf48a106b374edbd88e0ccd88785064c55bb393206720418ccb6285954e68aeaa0123fc757a547b3e0ce765af12d1a5aaa9ce31f8eee87256420f") perf_event_open(&(0x7f0000000040)={0x3, 0x80, 0x0, 0x6, 0x3, 0x9, 0x0, 0x5, 0x4, 0x8, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x80, 0x1, @perf_bp={&(0x7f0000000000), 0xe}, 0x2211, 0x7fff, 0x101, 0x5, 0x4, 0xffff7fff, 0x6, 0x0, 0xa78, 0x0, 0x3}, r0, 0x10, 0xffffffffffffffff, 0x6) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) (async) getpid() (async) syz_clone(0x10000, &(0x7f00000000c0)="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", 0xfa, &(0x7f00000001c0), &(0x7f0000000200), &(0x7f0000000240)="223d32191e871ab70b655b6044d9c49061d0875f312d274e863e33f24106ab56c89f3990c13725cc9da9dea3cd24969aa0f5ec642e326bf4263781463e2bfb16495644e5db0760e1a5d3c61108e202514fd1dff3fa8bf48a106b374edbd88e0ccd88785064c55bb393206720418ccb6285954e68aeaa0123fc757a547b3e0ce765af12d1a5aaa9ce31f8eee87256420f") (async) perf_event_open(&(0x7f0000000040)={0x3, 0x80, 0x0, 0x6, 0x3, 0x9, 0x0, 0x5, 0x4, 0x8, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x80, 0x1, @perf_bp={&(0x7f0000000000), 0xe}, 0x2211, 0x7fff, 0x101, 0x5, 0x4, 0xffff7fff, 0x6, 0x0, 0xa78, 0x0, 0x3}, r0, 0x10, 0xffffffffffffffff, 0x6) (async) 12:35:06 executing program 0: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000001000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 12:35:06 executing program 3: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'\x00', 0x52d35ce30131f272}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0) write$cgroup_type(r1, &(0x7f0000000340), 0x9) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x660c, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.net/syz1\x00', 0x200002, 0x0) perf_event_open$cgroup(&(0x7f00000002c0)={0x5, 0x80, 0x1, 0xa8, 0x9, 0x8, 0x0, 0x0, 0x80000, 0x8, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x40000, 0x0, @perf_config_ext={0x101, 0x5bad}, 0x300, 0x1, 0x6, 0x5, 0x7fff, 0x10001, 0x6, 0x0, 0x1, 0x0, 0x8}, r2, 0xe, 0xffffffffffffffff, 0x0) ioctl$TUNGETVNETHDRSZ(r1, 0x800454d7, &(0x7f0000000040)) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000180)={0x3, &(0x7f0000000140)=[{0x6, 0x81, 0x3, 0x4}, {0x7, 0x5, 0x8, 0x3c}, {0x1, 0xeb, 0x2}]}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000100)={0xffffffffffffffff, 0x8, 0x10}, 0xc) close(r3) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000000c0)={@map=r1, r1, 0x3, 0x0, r1}, 0x14) close(r0) openat$cgroup_ro(r1, &(0x7f00000001c0)='blkio.bfq.empty_time\x00', 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'\x00', 0x52d35ce30131f272}) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0) (async) write$cgroup_type(r1, &(0x7f0000000340), 0x9) (async) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x660c, 0x0) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.net/syz1\x00', 0x200002, 0x0) (async) perf_event_open$cgroup(&(0x7f00000002c0)={0x5, 0x80, 0x1, 0xa8, 0x9, 0x8, 0x0, 0x0, 0x80000, 0x8, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x40000, 0x0, @perf_config_ext={0x101, 0x5bad}, 0x300, 0x1, 0x6, 0x5, 0x7fff, 0x10001, 0x6, 0x0, 0x1, 0x0, 0x8}, r2, 0xe, 0xffffffffffffffff, 0x0) (async) ioctl$TUNGETVNETHDRSZ(r1, 0x800454d7, &(0x7f0000000040)) (async) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000180)={0x3, &(0x7f0000000140)=[{0x6, 0x81, 0x3, 0x4}, {0x7, 0x5, 0x8, 0x3c}, {0x1, 0xeb, 0x2}]}) (async) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) (async) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000100)={0xffffffffffffffff, 0x8, 0x10}, 0xc) (async) close(r3) (async) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000000c0)={@map=r1, r1, 0x3, 0x0, r1}, 0x14) (async) close(r0) (async) openat$cgroup_ro(r1, &(0x7f00000001c0)='blkio.bfq.empty_time\x00', 0x0, 0x0) (async) [ 123.568333][ T6042] RSP: 002b:00007f931c987118 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 123.576582][ T6042] RAX: ffffffffffffffda RBX: 00007f931dd33f80 RCX: 00007f931dc135a9 [ 123.584391][ T6042] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 123.592460][ T6042] RBP: 00007f931c9871d0 R08: 0000000000000000 R09: 0000000000000000 [ 123.600280][ T6042] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 123.608075][ T6042] R13: 00007fffd2d3bdcf R14: 00007f931c987300 R15: 0000000000022000 [ 123.615892][ T6042] 12:35:06 executing program 4: perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x12) r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cgroup.controllers\x00', 0x100002, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000140)='memory.low\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f0000000200), 0x12) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000000080)=0x3) syz_clone(0x74809480, 0x0, 0x4100, &(0x7f0000000000), 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000400000000000000000000850000006d000000850000000f00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000080)='sys_exit\x00', r2}, 0x10) 12:35:06 executing program 0: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 123.643247][ T6042] ================================================================== [ 123.651146][ T6042] BUG: KASAN: use-after-free in vm_area_free+0x7e/0x230 [ 123.658001][ T6042] Write of size 4 at addr ffff888110d97e38 by task syz-executor.2/6042 [ 123.666084][ T6042] [ 123.668245][ T6042] CPU: 0 PID: 6042 Comm: syz-executor.2 Not tainted 5.15.74-syzkaller-04383-g7f2e600bf63a #0 [ 123.678312][ T6042] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/11/2022 [ 123.688209][ T6042] Call Trace: [ 123.691676][ T6042] [ 123.694454][ T6042] dump_stack_lvl+0x151/0x1b7 [ 123.698969][ T6042] ? bfq_pos_tree_add_move+0x43e/0x43e [ 123.704262][ T6042] ? panic+0x727/0x727 [ 123.708170][ T6042] ? slab_free_freelist_hook+0xc9/0x1a0 [ 123.713548][ T6042] print_address_description+0x87/0x3d0 [ 123.718934][ T6042] kasan_report+0x1a6/0x1f0 [ 123.723357][ T6042] ? vm_area_free+0x7e/0x230 [ 123.727785][ T6042] ? vm_area_free+0x7e/0x230 [ 123.732212][ T6042] kasan_check_range+0x2aa/0x2e0 [ 123.736982][ T6042] __kasan_check_write+0x14/0x20 [ 123.741754][ T6042] vm_area_free+0x7e/0x230 [ 123.746012][ T6042] dup_mmap+0xbcd/0xea0 [ 123.750029][ T6042] ? __delayed_free_task+0x20/0x20 [ 123.755470][ T6042] ? mm_init+0x807/0x960 [ 123.759553][ T6042] dup_mm+0x91/0x330 [ 123.763281][ T6042] copy_mm+0x108/0x1b0 [ 123.767197][ T6042] copy_process+0x1295/0x3250 [ 123.771701][ T6042] ? proc_fail_nth_write+0x213/0x290 [ 123.776822][ T6042] ? proc_fail_nth_read+0x220/0x220 [ 123.781860][ T6042] ? check_kill_permission+0x37/0x490 [ 123.787085][ T6042] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 123.792012][ T6042] ? group_send_sig_info+0xa4/0x2f0 [ 123.797045][ T6042] ? vmacache_update+0xb7/0x120 [ 123.801735][ T6042] kernel_clone+0x22d/0x990 [ 123.806071][ T6042] ? create_io_thread+0x1e0/0x1e0 [ 123.810931][ T6042] ? __mutex_lock_slowpath+0x10/0x10 [ 123.816053][ T6042] __x64_sys_clone+0x289/0x310 [ 123.820655][ T6042] ? __do_sys_vfork+0x130/0x130 [ 123.825354][ T6042] ? debug_smp_processor_id+0x17/0x20 [ 123.830546][ T6042] do_syscall_64+0x44/0xd0 [ 123.834797][ T6042] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 123.840529][ T6042] RIP: 0033:0x7f931dc135a9 [ 123.844778][ T6042] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 123.864305][ T6042] RSP: 002b:00007f931c987118 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 123.872568][ T6042] RAX: ffffffffffffffda RBX: 00007f931dd33f80 RCX: 00007f931dc135a9 [ 123.880364][ T6042] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 123.888358][ T6042] RBP: 00007f931c9871d0 R08: 0000000000000000 R09: 0000000000000000 [ 123.896196][ T6042] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 123.903990][ T6042] R13: 00007fffd2d3bdcf R14: 00007f931c987300 R15: 0000000000022000 [ 123.911794][ T6042] [ 123.914653][ T6042] [ 123.916821][ T6042] Allocated by task 6012: [ 123.920989][ T6042] __kasan_slab_alloc+0xb2/0xe0 [ 123.925675][ T6042] kmem_cache_alloc+0x189/0x2f0 [ 123.930364][ T6042] vm_area_dup+0x26/0x1d0 [ 123.934530][ T6042] dup_mmap+0x6b8/0xea0 [ 123.938524][ T6042] dup_mm+0x91/0x330 [ 123.942251][ T6042] copy_mm+0x108/0x1b0 [ 123.946158][ T6042] copy_process+0x1295/0x3250 [ 123.950680][ T6042] kernel_clone+0x22d/0x990 [ 123.955012][ T6042] __x64_sys_clone+0x289/0x310 [ 123.959609][ T6042] do_syscall_64+0x44/0xd0 [ 123.963866][ T6042] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 123.969592][ T6042] [ 123.971763][ T6042] Freed by task 6020: [ 123.975580][ T6042] kasan_set_track+0x4c/0x70 [ 123.980007][ T6042] kasan_set_free_info+0x23/0x40 [ 123.984780][ T6042] ____kasan_slab_free+0x126/0x160 [ 123.989731][ T6042] __kasan_slab_free+0x11/0x20 [ 123.994331][ T6042] slab_free_freelist_hook+0xc9/0x1a0 [ 123.999534][ T6042] kmem_cache_free+0x11a/0x2e0 [ 124.004138][ T6042] vm_area_free+0x1ae/0x230 [ 124.008469][ T6042] exit_mmap+0x5dd/0x7a0 [ 124.012725][ T6042] __mmput+0x95/0x300 [ 124.016541][ T6042] mmput+0x50/0x60 [ 124.020100][ T6042] exit_mm+0x50d/0x760 [ 124.024005][ T6042] do_exit+0x63c/0x24d0 [ 124.028010][ T6042] __ia32_sys_exit+0x0/0x40 [ 124.032341][ T6042] do_syscall_64+0x44/0xd0 [ 124.036598][ T6042] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 124.042317][ T6042] [ 124.044486][ T6042] The buggy address belongs to the object at ffff888110d97de0 [ 124.044486][ T6042] which belongs to the cache vm_area_struct of size 232 [ 124.058639][ T6042] The buggy address is located 88 bytes inside of [ 124.058639][ T6042] 232-byte region [ffff888110d97de0, ffff888110d97ec8) [ 124.071656][ T6042] The buggy address belongs to the page: [ 124.077300][ T6042] page:ffffea00044365c0 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x110d97 [ 124.087365][ T6042] flags: 0x4000000000000200(slab|zone=1) [ 124.092837][ T6042] raw: 4000000000000200 ffffea00046a02c0 0000000400000004 ffff888100275980 [ 124.101257][ T6042] raw: 0000000000000000 00000000000d000d 00000001ffffffff 0000000000000000 [ 124.109670][ T6042] page dumped because: kasan: bad access detected [ 124.115930][ T6042] page_owner tracks the page as allocated [ 124.121473][ T6042] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x112cc0(GFP_USER|__GFP_NOWARN|__GFP_NORETRY), pid 5304, ts 111722863377, free_ts 111234780229 [ 124.137445][ T6042] post_alloc_hook+0x1ab/0x1b0 [ 124.142051][ T6042] get_page_from_freelist+0x38b/0x400 [ 124.147249][ T6042] __alloc_pages+0x3a8/0x7c0 [ 124.151675][ T6042] allocate_slab+0x62/0x580 [ 124.156014][ T6042] ___slab_alloc+0x2e2/0x6f0 [ 124.160442][ T6042] __slab_alloc+0x4a/0x90 [ 124.164608][ T6042] kmem_cache_alloc+0x205/0x2f0 [ 124.169296][ T6042] vm_area_dup+0x26/0x1d0 [ 124.173469][ T6042] dup_mmap+0x6b8/0xea0 [ 124.177454][ T6042] dup_mm+0x91/0x330 [ 124.181183][ T6042] copy_mm+0x108/0x1b0 [ 124.185088][ T6042] copy_process+0x1295/0x3250 [ 124.189602][ T6042] kernel_clone+0x22d/0x990 [ 124.193942][ T6042] __x64_sys_clone+0x289/0x310 [ 124.198548][ T6042] do_syscall_64+0x44/0xd0 [ 124.202794][ T6042] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 124.208523][ T6042] page last free stack trace: [ 124.213035][ T6042] free_pcp_prepare+0x448/0x450 [ 124.217722][ T6042] free_unref_page+0x9c/0x370 [ 124.222234][ T6042] __free_pages+0xd8/0x100 [ 124.226503][ T6042] __vunmap+0x846/0x980 [ 124.230483][ T6042] free_work+0x66/0x90 [ 124.234386][ T6042] process_one_work+0x6db/0xc00 [ 124.239072][ T6042] worker_thread+0xb3e/0x1340 [ 124.243593][ T6042] kthread+0x41c/0x500 [ 124.247494][ T6042] ret_from_fork+0x1f/0x30 [ 124.251749][ T6042] [ 124.253916][ T6042] Memory state around the buggy address: [ 124.259473][ T6042] ffff888110d97d00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 124.267378][ T6042] ffff888110d97d80: fb fb fb fb fc fc fc fc fc fc fc fc fa fb fb fb [ 124.275271][ T6042] >ffff888110d97e00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 124.283172][ T6042] ^ 12:35:07 executing program 2: syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 70) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 12:35:07 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) r1 = openat$cgroup(r0, &(0x7f0000000040)='syz1\x00', 0x200002, 0x0) openat$cgroup_ro(r1, &(0x7f0000000080)='blkio.bfq.time\x00', 0x0, 0x0) openat$cgroup_ro(r0, &(0x7f0000000000)='memory.swap.current\x00', 0x0, 0x0) syz_clone(0x17ffd800, 0x0, 0xa, 0x0, 0x0, 0x0) 12:35:07 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x2200, &(0x7f00000003c0)="11f1c5c6634befa1cd46533dfe08bdd0dc94f1fc346b1d5b3fe770526cc1a14c963b2347baa03e09b29bbe06bae8ca0a4e9d73a7c36303e1d3c51322963d86d001e68ad99b34cf5d016ae5415f15b876adea400c", 0x54, &(0x7f0000000440), &(0x7f0000000480), &(0x7f00000004c0)="9f251d23d67ec51f44e2f1a5e1803673bc3e2b2c33cb0e45d78cc4c93f83689480ea00b6829cf5449b95651104af596751acce78ed4a9954c15f0ecdee016f2325fb794be03a1c5817b42e977a74f6da13d20e729400b5a0c955ec87d1ac0f789d373e97e54eee3448a1c85257204f27829871aa44aed1a8df6077f88c37601a63d17a767da14754e174bef8a8243735b7bfdb3b8343a3a498b328b495501080d8ed1564a2d2f5c283407a72b17694e279794510c8c58a5f187871") perf_event_open(0x0, r2, 0xe, r1, 0x2) r3 = openat$cgroup_type(r0, &(0x7f0000000040), 0x2, 0x0) write$cgroup_type(r3, &(0x7f0000000080), 0x9) r4 = syz_clone(0x119200, &(0x7f0000000180)="32169b1adae32bed5c4c724ded24d2f0f7af47d0d9bd144e54128edf506e", 0x1e, &(0x7f00000001c0), &(0x7f0000000200), &(0x7f0000000240)="b9667e4d3bff1e684422a020a0769a6679c13528e9e2617851150d331cca5f1404ad451798989d3536a306bd39510130680831b1fc71e8341d2bd8b5265c7a8cc4f16655b13c396455a0ad5543e668a8f917cb3a8727f7dddeca58648001595afe34b3ff13e5fff3fc26673060f4f552c781974f338cc86b41d47a5921e22d1d2fde19ce8f894094f4691235075f06882e91fece2880f5a321f83eaba7952ec53b7c1a0fda00cc1af509148d6aae334fac232a911f678a20b9bee509d6f0112318299317bbe48a69666a08cfb78c") perf_event_open(&(0x7f0000000100)={0x4, 0x80, 0x94, 0x4, 0x66, 0xbb, 0x0, 0x2, 0x200, 0x8, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x3, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={&(0x7f00000000c0), 0x1}, 0x8, 0x3, 0x126, 0x7, 0xffffffffffffffff, 0x4, 0xcb40, 0x0, 0x7, 0x0, 0x400}, r4, 0xb, r0, 0xa) 12:35:07 executing program 0: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000010000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 124.288897][ T6042] ffff888110d97e80: fb fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc [ 124.296799][ T6042] ffff888110d97f00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 124.304689][ T6042] ================================================================== [ 124.312586][ T6042] Disabling lock debugging due to kernel taint 12:35:07 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x40, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x42880, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000100)={'\x00', 0x8000}) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@bloom_filter={0x1e, 0x6, 0x5a58, 0x4, 0x1008, 0x1, 0xfff, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x2, 0x3, 0x4}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001640)={0xffffffffffffffff, 0xe0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000016c0), ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001680), &(0x7f0000001680), 0x0, 0x8, &(0x7f0000001680), 0x0, 0x10, &(0x7f0000000300), &(0x7f0000001600), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000380)}}, 0x10) r5 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000500)=0xffffffffffffffff, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@bloom_filter={0x1e, 0xffffffff, 0x9, 0x0, 0x2, r3, 0x7, '\x00', r4, r5, 0x2, 0x5, 0x5, 0x3}, 0x48) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000001580)={r3, &(0x7f0000001440)="4718f42ae45068e1f5ac0508d48a1004b1f2c13bd0043442f461c329b19aa0e25c117164d529eba9e406dfe455e9", &(0x7f0000001480)=""/247}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0x18, 0x9, &(0x7f0000001340)=ANY=[@ANYBLOB="852000000200000070a65000020000001845000005000000000000000000000041760000f0ffffffc5840c00f0ffffff1831000002000000000000000000950000000000000087ec77b555bf107fcf4ce4c3906b17fa8a615257918ca0468bb92a1907d6506126a5f7e9a27c146081a352a8fee764682898e945c0f850ac563d0915509935e1134707025f"], &(0x7f0000000000)='GPL\x00', 0x200, 0x1000, &(0x7f00000002c0)=""/4096, 0x40f00, 0x8, '\x00', r4, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x9, 0x4}, 0x8, 0x10, &(0x7f0000000200)={0x4, 0x4, 0x815, 0xfffffffa}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000240)=[r1, r1]}, 0x80) r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@bloom_filter={0x1e, 0x6, 0x5a55, 0x4, 0x1008, 0x1, 0xffd, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x2, 0x6, 0x4}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={r6, 0xe0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000280)=[0x0], 0x0, 0x8, &(0x7f00000002c0)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000300), &(0x7f0000000340), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000380)}}, 0x10) r9 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000500)=0xffffffffffffffff, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@bloom_filter={0x1e, 0xffffffff, 0x9, 0x0, 0x2, r7, 0x7, '\x00', r8, r9, 0x2, 0x5, 0x5, 0x3}, 0x48) ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f0000001400)=r8) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) close(r0) 12:35:07 executing program 4: perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x12) r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cgroup.controllers\x00', 0x100002, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000140)='memory.low\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f0000000200), 0x12) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000000080)=0x3) syz_clone(0x74809480, 0x0, 0x4100, &(0x7f0000000000), 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000400000000000000000000850000006d000000850000000f00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000080)='sys_exit\x00', r2}, 0x10) 12:35:07 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) (async) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x40, 0x0) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x42880, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000100)={'\x00', 0x8000}) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@bloom_filter={0x1e, 0x6, 0x5a58, 0x4, 0x1008, 0x1, 0xfff, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x2, 0x3, 0x4}, 0x48) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001640)={0xffffffffffffffff, 0xe0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000016c0), ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001680), &(0x7f0000001680), 0x0, 0x8, &(0x7f0000001680), 0x0, 0x10, &(0x7f0000000300), &(0x7f0000001600), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000380)}}, 0x10) (async) r5 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000500)=0xffffffffffffffff, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@bloom_filter={0x1e, 0xffffffff, 0x9, 0x0, 0x2, r3, 0x7, '\x00', r4, r5, 0x2, 0x5, 0x5, 0x3}, 0x48) (async) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000001580)={r3, &(0x7f0000001440)="4718f42ae45068e1f5ac0508d48a1004b1f2c13bd0043442f461c329b19aa0e25c117164d529eba9e406dfe455e9", &(0x7f0000001480)=""/247}, 0x20) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0x18, 0x9, &(0x7f0000001340)=ANY=[@ANYBLOB="852000000200000070a65000020000001845000005000000000000000000000041760000f0ffffffc5840c00f0ffffff1831000002000000000000000000950000000000000087ec77b555bf107fcf4ce4c3906b17fa8a615257918ca0468bb92a1907d6506126a5f7e9a27c146081a352a8fee764682898e945c0f850ac563d0915509935e1134707025f"], &(0x7f0000000000)='GPL\x00', 0x200, 0x1000, &(0x7f00000002c0)=""/4096, 0x40f00, 0x8, '\x00', r4, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x9, 0x4}, 0x8, 0x10, &(0x7f0000000200)={0x4, 0x4, 0x815, 0xfffffffa}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000240)=[r1, r1]}, 0x80) r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@bloom_filter={0x1e, 0x6, 0x5a55, 0x4, 0x1008, 0x1, 0xffd, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x2, 0x6, 0x4}, 0x48) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={r6, 0xe0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000280)=[0x0], 0x0, 0x8, &(0x7f00000002c0)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000300), &(0x7f0000000340), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000380)}}, 0x10) (async) r9 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000500)=0xffffffffffffffff, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@bloom_filter={0x1e, 0xffffffff, 0x9, 0x0, 0x2, r7, 0x7, '\x00', r8, r9, 0x2, 0x5, 0x5, 0x3}, 0x48) ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f0000001400)=r8) (async) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) close(r0) 12:35:07 executing program 0: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000100000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 12:35:07 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) r1 = openat$cgroup(r0, &(0x7f0000000040)='syz1\x00', 0x200002, 0x0) openat$cgroup_ro(r1, &(0x7f0000000080)='blkio.bfq.time\x00', 0x0, 0x0) openat$cgroup_ro(r0, &(0x7f0000000000)='memory.swap.current\x00', 0x0, 0x0) syz_clone(0x17ffd800, 0x0, 0xa, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) (async) openat$cgroup(r0, &(0x7f0000000040)='syz1\x00', 0x200002, 0x0) (async) openat$cgroup_ro(r1, &(0x7f0000000080)='blkio.bfq.time\x00', 0x0, 0x0) (async) openat$cgroup_ro(r0, &(0x7f0000000000)='memory.swap.current\x00', 0x0, 0x0) (async) syz_clone(0x17ffd800, 0x0, 0xa, 0x0, 0x0, 0x0) (async) 12:35:07 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) r1 = openat$cgroup(r0, &(0x7f0000000040)='syz1\x00', 0x200002, 0x0) openat$cgroup_ro(r1, &(0x7f0000000080)='blkio.bfq.time\x00', 0x0, 0x0) (async) openat$cgroup_ro(r0, &(0x7f0000000000)='memory.swap.current\x00', 0x0, 0x0) (async, rerun: 32) syz_clone(0x17ffd800, 0x0, 0xa, 0x0, 0x0, 0x0) (rerun: 32) 12:35:07 executing program 0: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 124.374917][ T6124] FAULT_INJECTION: forcing a failure. [ 124.374917][ T6124] name failslab, interval 1, probability 0, space 0, times 0 [ 124.422895][ T6124] CPU: 1 PID: 6124 Comm: syz-executor.2 Tainted: G B 5.15.74-syzkaller-04383-g7f2e600bf63a #0 [ 124.434277][ T6124] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/11/2022 [ 124.444170][ T6124] Call Trace: [ 124.447472][ T6124] [ 124.450245][ T6124] dump_stack_lvl+0x151/0x1b7 [ 124.454758][ T6124] ? bfq_pos_tree_add_move+0x43e/0x43e [ 124.460148][ T6124] ? vma_interval_tree_augment_rotate+0x210/0x210 [ 124.466390][ T6124] dump_stack+0x15/0x17 [ 124.470554][ T6124] should_fail+0x3c0/0x510 [ 124.474802][ T6124] __should_failslab+0x9f/0xe0 [ 124.479405][ T6124] should_failslab+0x9/0x20 [ 124.483744][ T6124] kmem_cache_alloc+0x4f/0x2f0 [ 124.488355][ T6124] ? anon_vma_fork+0xf7/0x4f0 [ 124.492856][ T6124] anon_vma_fork+0xf7/0x4f0 [ 124.497193][ T6124] ? anon_vma_name+0x4c/0x70 [ 124.501622][ T6124] dup_mmap+0x750/0xea0 [ 124.505616][ T6124] ? __delayed_free_task+0x20/0x20 [ 124.510576][ T6124] ? mm_init+0x807/0x960 [ 124.514640][ T6124] dup_mm+0x91/0x330 [ 124.518371][ T6124] copy_mm+0x108/0x1b0 [ 124.522318][ T6124] copy_process+0x1295/0x3250 [ 124.526792][ T6124] ? proc_fail_nth_write+0x213/0x290 [ 124.531909][ T6124] ? proc_fail_nth_read+0x220/0x220 [ 124.536947][ T6124] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 124.541890][ T6124] ? vfs_write+0x9af/0x1050 [ 124.546230][ T6124] ? vmacache_update+0xb7/0x120 [ 124.550921][ T6124] kernel_clone+0x22d/0x990 [ 124.555256][ T6124] ? file_end_write+0x1b0/0x1b0 [ 124.559954][ T6124] ? __kasan_check_write+0x14/0x20 [ 124.564891][ T6124] ? create_io_thread+0x1e0/0x1e0 [ 124.569751][ T6124] ? __mutex_lock_slowpath+0x10/0x10 [ 124.574871][ T6124] __x64_sys_clone+0x289/0x310 [ 124.579472][ T6124] ? __do_sys_vfork+0x130/0x130 [ 124.584163][ T6124] ? debug_smp_processor_id+0x17/0x20 [ 124.589368][ T6124] do_syscall_64+0x44/0xd0 [ 124.593620][ T6124] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 124.599348][ T6124] RIP: 0033:0x7f931dc135a9 [ 124.603601][ T6124] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 12:35:07 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x40, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x42880, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000100)={'\x00', 0x8000}) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@bloom_filter={0x1e, 0x6, 0x5a58, 0x4, 0x1008, 0x1, 0xfff, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x2, 0x3, 0x4}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001640)={0xffffffffffffffff, 0xe0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000016c0), ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001680), &(0x7f0000001680), 0x0, 0x8, &(0x7f0000001680), 0x0, 0x10, &(0x7f0000000300), &(0x7f0000001600), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000380)}}, 0x10) r5 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000500)=0xffffffffffffffff, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@bloom_filter={0x1e, 0xffffffff, 0x9, 0x0, 0x2, r3, 0x7, '\x00', r4, r5, 0x2, 0x5, 0x5, 0x3}, 0x48) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000001580)={r3, &(0x7f0000001440)="4718f42ae45068e1f5ac0508d48a1004b1f2c13bd0043442f461c329b19aa0e25c117164d529eba9e406dfe455e9", &(0x7f0000001480)=""/247}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0x18, 0x9, &(0x7f0000001340)=ANY=[@ANYBLOB="852000000200000070a65000020000001845000005000000000000000000000041760000f0ffffffc5840c00f0ffffff1831000002000000000000000000950000000000000087ec77b555bf107fcf4ce4c3906b17fa8a615257918ca0468bb92a1907d6506126a5f7e9a27c146081a352a8fee764682898e945c0f850ac563d0915509935e1134707025f"], &(0x7f0000000000)='GPL\x00', 0x200, 0x1000, &(0x7f00000002c0)=""/4096, 0x40f00, 0x8, '\x00', r4, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x9, 0x4}, 0x8, 0x10, &(0x7f0000000200)={0x4, 0x4, 0x815, 0xfffffffa}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000240)=[r1, r1]}, 0x80) r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@bloom_filter={0x1e, 0x6, 0x5a55, 0x4, 0x1008, 0x1, 0xffd, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x2, 0x6, 0x4}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={r6, 0xe0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000280)=[0x0], 0x0, 0x8, &(0x7f00000002c0)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000300), &(0x7f0000000340), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000380)}}, 0x10) r9 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000500)=0xffffffffffffffff, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@bloom_filter={0x1e, 0xffffffff, 0x9, 0x0, 0x2, r7, 0x7, '\x00', r8, r9, 0x2, 0x5, 0x5, 0x3}, 0x48) ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f0000001400)=r8) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) close(r0) openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) (async) bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x40, 0x0) (async) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x42880, 0x0) (async) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000100)={'\x00', 0x8000}) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@bloom_filter={0x1e, 0x6, 0x5a58, 0x4, 0x1008, 0x1, 0xfff, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x2, 0x3, 0x4}, 0x48) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001640)={0xffffffffffffffff, 0xe0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000016c0), ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001680), &(0x7f0000001680), 0x0, 0x8, &(0x7f0000001680), 0x0, 0x10, &(0x7f0000000300), &(0x7f0000001600), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000380)}}, 0x10) (async) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000500)=0xffffffffffffffff, 0x4) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@bloom_filter={0x1e, 0xffffffff, 0x9, 0x0, 0x2, r3, 0x7, '\x00', r4, r5, 0x2, 0x5, 0x5, 0x3}, 0x48) (async) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000001580)={r3, &(0x7f0000001440)="4718f42ae45068e1f5ac0508d48a1004b1f2c13bd0043442f461c329b19aa0e25c117164d529eba9e406dfe455e9", &(0x7f0000001480)=""/247}, 0x20) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0x18, 0x9, &(0x7f0000001340)=ANY=[@ANYBLOB="852000000200000070a65000020000001845000005000000000000000000000041760000f0ffffffc5840c00f0ffffff1831000002000000000000000000950000000000000087ec77b555bf107fcf4ce4c3906b17fa8a615257918ca0468bb92a1907d6506126a5f7e9a27c146081a352a8fee764682898e945c0f850ac563d0915509935e1134707025f"], &(0x7f0000000000)='GPL\x00', 0x200, 0x1000, &(0x7f00000002c0)=""/4096, 0x40f00, 0x8, '\x00', r4, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x9, 0x4}, 0x8, 0x10, &(0x7f0000000200)={0x4, 0x4, 0x815, 0xfffffffa}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000240)=[r1, r1]}, 0x80) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@bloom_filter={0x1e, 0x6, 0x5a55, 0x4, 0x1008, 0x1, 0xffd, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x2, 0x6, 0x4}, 0x48) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={r6, 0xe0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000280)=[0x0], 0x0, 0x8, &(0x7f00000002c0)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000300), &(0x7f0000000340), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000380)}}, 0x10) (async) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000500)=0xffffffffffffffff, 0x4) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@bloom_filter={0x1e, 0xffffffff, 0x9, 0x0, 0x2, r7, 0x7, '\x00', r8, r9, 0x2, 0x5, 0x5, 0x3}, 0x48) (async) ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f0000001400)=r8) (async) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) (async) close(r0) (async) [ 124.623043][ T6124] RSP: 002b:00007f931c987118 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 124.631284][ T6124] RAX: ffffffffffffffda RBX: 00007f931dd33f80 RCX: 00007f931dc135a9 [ 124.639096][ T6124] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 124.646908][ T6124] RBP: 00007f931c9871d0 R08: 0000000000000000 R09: 0000000000000000 [ 124.654720][ T6124] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 124.662532][ T6124] R13: 00007fffd2d3bdcf R14: 00007f931c987300 R15: 0000000000022000 [ 124.670344][ T6124] 12:35:08 executing program 2: syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 71) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 12:35:08 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x2200, &(0x7f00000003c0)="11f1c5c6634befa1cd46533dfe08bdd0dc94f1fc346b1d5b3fe770526cc1a14c963b2347baa03e09b29bbe06bae8ca0a4e9d73a7c36303e1d3c51322963d86d001e68ad99b34cf5d016ae5415f15b876adea400c", 0x54, &(0x7f0000000440), &(0x7f0000000480), &(0x7f00000004c0)="9f251d23d67ec51f44e2f1a5e1803673bc3e2b2c33cb0e45d78cc4c93f83689480ea00b6829cf5449b95651104af596751acce78ed4a9954c15f0ecdee016f2325fb794be03a1c5817b42e977a74f6da13d20e729400b5a0c955ec87d1ac0f789d373e97e54eee3448a1c85257204f27829871aa44aed1a8df6077f88c37601a63d17a767da14754e174bef8a8243735b7bfdb3b8343a3a498b328b495501080d8ed1564a2d2f5c283407a72b17694e279794510c8c58a5f187871") perf_event_open(0x0, r2, 0xe, r1, 0x2) r3 = openat$cgroup_type(r0, &(0x7f0000000040), 0x2, 0x0) write$cgroup_type(r3, &(0x7f0000000080), 0x9) r4 = syz_clone(0x119200, &(0x7f0000000180)="32169b1adae32bed5c4c724ded24d2f0f7af47d0d9bd144e54128edf506e", 0x1e, &(0x7f00000001c0), &(0x7f0000000200), &(0x7f0000000240)="b9667e4d3bff1e684422a020a0769a6679c13528e9e2617851150d331cca5f1404ad451798989d3536a306bd39510130680831b1fc71e8341d2bd8b5265c7a8cc4f16655b13c396455a0ad5543e668a8f917cb3a8727f7dddeca58648001595afe34b3ff13e5fff3fc26673060f4f552c781974f338cc86b41d47a5921e22d1d2fde19ce8f894094f4691235075f06882e91fece2880f5a321f83eaba7952ec53b7c1a0fda00cc1af509148d6aae334fac232a911f678a20b9bee509d6f0112318299317bbe48a69666a08cfb78c") perf_event_open(&(0x7f0000000100)={0x4, 0x80, 0x94, 0x4, 0x66, 0xbb, 0x0, 0x2, 0x200, 0x8, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x3, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={&(0x7f00000000c0), 0x1}, 0x8, 0x3, 0x126, 0x7, 0xffffffffffffffff, 0x4, 0xcb40, 0x0, 0x7, 0x0, 0x400}, r4, 0xb, r0, 0xa) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) (async) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async) perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) syz_clone(0x2200, &(0x7f00000003c0)="11f1c5c6634befa1cd46533dfe08bdd0dc94f1fc346b1d5b3fe770526cc1a14c963b2347baa03e09b29bbe06bae8ca0a4e9d73a7c36303e1d3c51322963d86d001e68ad99b34cf5d016ae5415f15b876adea400c", 0x54, &(0x7f0000000440), &(0x7f0000000480), &(0x7f00000004c0)="9f251d23d67ec51f44e2f1a5e1803673bc3e2b2c33cb0e45d78cc4c93f83689480ea00b6829cf5449b95651104af596751acce78ed4a9954c15f0ecdee016f2325fb794be03a1c5817b42e977a74f6da13d20e729400b5a0c955ec87d1ac0f789d373e97e54eee3448a1c85257204f27829871aa44aed1a8df6077f88c37601a63d17a767da14754e174bef8a8243735b7bfdb3b8343a3a498b328b495501080d8ed1564a2d2f5c283407a72b17694e279794510c8c58a5f187871") (async) perf_event_open(0x0, r2, 0xe, r1, 0x2) (async) openat$cgroup_type(r0, &(0x7f0000000040), 0x2, 0x0) (async) write$cgroup_type(r3, &(0x7f0000000080), 0x9) (async) syz_clone(0x119200, &(0x7f0000000180)="32169b1adae32bed5c4c724ded24d2f0f7af47d0d9bd144e54128edf506e", 0x1e, &(0x7f00000001c0), &(0x7f0000000200), &(0x7f0000000240)="b9667e4d3bff1e684422a020a0769a6679c13528e9e2617851150d331cca5f1404ad451798989d3536a306bd39510130680831b1fc71e8341d2bd8b5265c7a8cc4f16655b13c396455a0ad5543e668a8f917cb3a8727f7dddeca58648001595afe34b3ff13e5fff3fc26673060f4f552c781974f338cc86b41d47a5921e22d1d2fde19ce8f894094f4691235075f06882e91fece2880f5a321f83eaba7952ec53b7c1a0fda00cc1af509148d6aae334fac232a911f678a20b9bee509d6f0112318299317bbe48a69666a08cfb78c") (async) perf_event_open(&(0x7f0000000100)={0x4, 0x80, 0x94, 0x4, 0x66, 0xbb, 0x0, 0x2, 0x200, 0x8, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x3, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={&(0x7f00000000c0), 0x1}, 0x8, 0x3, 0x126, 0x7, 0xffffffffffffffff, 0x4, 0xcb40, 0x0, 0x7, 0x0, 0x400}, r4, 0xb, r0, 0xa) (async) 12:35:08 executing program 0: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 12:35:08 executing program 1: ioctl$TUNGETFEATURES(0xffffffffffffffff, 0x800454cf, &(0x7f0000000080)) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000000)={r0}, 0x8) openat$cgroup_ro(r1, &(0x7f0000000040)='cpuacct.usage_all\x00', 0x0, 0x0) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001200)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xeb, 0xeb, 0x4, [@union={0xe, 0x5, 0x0, 0x5, 0x0, 0x0, [{0x2, 0x1, 0xffffffff}, {0xb, 0x4, 0xb61}, {0xa, 0x4, 0x9}, {0xe, 0x1, 0x100}, {0x4, 0x0, 0xe3}]}, @var={0x1, 0x0, 0x0, 0xe, 0x1}, @volatile={0x8, 0x0, 0x0, 0x9, 0x5}, @union={0xa, 0x2, 0x0, 0x5, 0x0, 0xab4b, [{0xc, 0x2, 0x3ff}, {0x1, 0x1, 0x9}]}, @volatile={0x1, 0x0, 0x0, 0x9, 0x3}, @struct={0xd, 0x3, 0x0, 0x4, 0x1, 0x8000, [{0x4, 0x2, 0x400}, {0x6, 0x5, 0x9}, {0x8, 0x4, 0x40}]}, @datasec={0x5, 0x2, 0x0, 0xf, 0x3, [{0x3, 0x800, 0x6}, {0x2, 0x80, 0x7}], "c04c5e"}]}, {0x0, [0x2e, 0x0]}}, &(0x7f0000000200)=""/4096, 0x108, 0x1000}, 0x20) close(r2) syz_clone(0x1ff59000, 0x0, 0x0, 0x0, 0x0, 0x0) 12:35:08 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'\x00', 0x52d35ce30131f272}) close(r0) [ 124.761385][ T6177] FAULT_INJECTION: forcing a failure. [ 124.761385][ T6177] name failslab, interval 1, probability 0, space 0, times 0 [ 124.788399][ T6177] CPU: 0 PID: 6177 Comm: syz-executor.2 Tainted: G B 5.15.74-syzkaller-04383-g7f2e600bf63a #0 [ 124.799867][ T6177] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/11/2022 [ 124.809846][ T6177] Call Trace: [ 124.812966][ T6177] [ 124.815745][ T6177] dump_stack_lvl+0x151/0x1b7 [ 124.820270][ T6177] ? bfq_pos_tree_add_move+0x43e/0x43e [ 124.825550][ T6177] dump_stack+0x15/0x17 [ 124.829543][ T6177] should_fail+0x3c0/0x510 [ 124.834002][ T6177] __should_failslab+0x9f/0xe0 [ 124.838603][ T6177] should_failslab+0x9/0x20 [ 124.842944][ T6177] kmem_cache_alloc+0x4f/0x2f0 [ 124.847545][ T6177] ? anon_vma_fork+0x1b9/0x4f0 [ 124.852151][ T6177] anon_vma_fork+0x1b9/0x4f0 [ 124.856582][ T6177] dup_mmap+0x750/0xea0 [ 124.860562][ T6177] ? __delayed_free_task+0x20/0x20 [ 124.865510][ T6177] ? mm_init+0x807/0x960 [ 124.869586][ T6177] dup_mm+0x91/0x330 [ 124.873322][ T6177] copy_mm+0x108/0x1b0 [ 124.877223][ T6177] copy_process+0x1295/0x3250 [ 124.881760][ T6177] ? proc_fail_nth_write+0x213/0x290 [ 124.887034][ T6177] ? proc_fail_nth_read+0x220/0x220 [ 124.892068][ T6177] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 124.897016][ T6177] ? vfs_write+0x9af/0x1050 [ 124.901353][ T6177] ? vmacache_update+0xb7/0x120 [ 124.906039][ T6177] kernel_clone+0x22d/0x990 [ 124.910376][ T6177] ? file_end_write+0x1b0/0x1b0 [ 124.915066][ T6177] ? __kasan_check_write+0x14/0x20 [ 124.920012][ T6177] ? create_io_thread+0x1e0/0x1e0 [ 124.924874][ T6177] ? __mutex_lock_slowpath+0x10/0x10 [ 124.930082][ T6177] __x64_sys_clone+0x289/0x310 [ 124.934705][ T6177] ? __do_sys_vfork+0x130/0x130 [ 124.939369][ T6177] ? debug_smp_processor_id+0x17/0x20 [ 124.944597][ T6177] do_syscall_64+0x44/0xd0 [ 124.948830][ T6177] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 124.954644][ T6177] RIP: 0033:0x7f931dc135a9 [ 124.958898][ T6177] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 124.978335][ T6177] RSP: 002b:00007f931c987118 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 124.986591][ T6177] RAX: ffffffffffffffda RBX: 00007f931dd33f80 RCX: 00007f931dc135a9 [ 124.994397][ T6177] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 125.002206][ T6177] RBP: 00007f931c9871d0 R08: 0000000000000000 R09: 0000000000000000 [ 125.010014][ T6177] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 125.017824][ T6177] R13: 00007fffd2d3bdcf R14: 00007f931c987300 R15: 0000000000022000 [ 125.025646][ T6177] 12:35:08 executing program 4: perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x12) r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cgroup.controllers\x00', 0x100002, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000140)='memory.low\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f0000000200), 0x12) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000000080)=0x3) syz_clone(0x74809480, 0x0, 0x4100, &(0x7f0000000000), 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000400000000000000000000850000006d000000850000000f00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000080)='sys_exit\x00', r2}, 0x10) 12:35:08 executing program 0: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfeffffff00000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 12:35:08 executing program 1: ioctl$TUNGETFEATURES(0xffffffffffffffff, 0x800454cf, &(0x7f0000000080)) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000000)={r0}, 0x8) openat$cgroup_ro(r1, &(0x7f0000000040)='cpuacct.usage_all\x00', 0x0, 0x0) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001200)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xeb, 0xeb, 0x4, [@union={0xe, 0x5, 0x0, 0x5, 0x0, 0x0, [{0x2, 0x1, 0xffffffff}, {0xb, 0x4, 0xb61}, {0xa, 0x4, 0x9}, {0xe, 0x1, 0x100}, {0x4, 0x0, 0xe3}]}, @var={0x1, 0x0, 0x0, 0xe, 0x1}, @volatile={0x8, 0x0, 0x0, 0x9, 0x5}, @union={0xa, 0x2, 0x0, 0x5, 0x0, 0xab4b, [{0xc, 0x2, 0x3ff}, {0x1, 0x1, 0x9}]}, @volatile={0x1, 0x0, 0x0, 0x9, 0x3}, @struct={0xd, 0x3, 0x0, 0x4, 0x1, 0x8000, [{0x4, 0x2, 0x400}, {0x6, 0x5, 0x9}, {0x8, 0x4, 0x40}]}, @datasec={0x5, 0x2, 0x0, 0xf, 0x3, [{0x3, 0x800, 0x6}, {0x2, 0x80, 0x7}], "c04c5e"}]}, {0x0, [0x2e, 0x0]}}, &(0x7f0000000200)=""/4096, 0x108, 0x1000}, 0x20) close(r2) syz_clone(0x1ff59000, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$TUNGETFEATURES(0xffffffffffffffff, 0x800454cf, &(0x7f0000000080)) (async) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) (async) bpf$ITER_CREATE(0x21, &(0x7f0000000000)={r0}, 0x8) (async) openat$cgroup_ro(r1, &(0x7f0000000040)='cpuacct.usage_all\x00', 0x0, 0x0) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001200)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xeb, 0xeb, 0x4, [@union={0xe, 0x5, 0x0, 0x5, 0x0, 0x0, [{0x2, 0x1, 0xffffffff}, {0xb, 0x4, 0xb61}, {0xa, 0x4, 0x9}, {0xe, 0x1, 0x100}, {0x4, 0x0, 0xe3}]}, @var={0x1, 0x0, 0x0, 0xe, 0x1}, @volatile={0x8, 0x0, 0x0, 0x9, 0x5}, @union={0xa, 0x2, 0x0, 0x5, 0x0, 0xab4b, [{0xc, 0x2, 0x3ff}, {0x1, 0x1, 0x9}]}, @volatile={0x1, 0x0, 0x0, 0x9, 0x3}, @struct={0xd, 0x3, 0x0, 0x4, 0x1, 0x8000, [{0x4, 0x2, 0x400}, {0x6, 0x5, 0x9}, {0x8, 0x4, 0x40}]}, @datasec={0x5, 0x2, 0x0, 0xf, 0x3, [{0x3, 0x800, 0x6}, {0x2, 0x80, 0x7}], "c04c5e"}]}, {0x0, [0x2e, 0x0]}}, &(0x7f0000000200)=""/4096, 0x108, 0x1000}, 0x20) (async) close(r2) (async) syz_clone(0x1ff59000, 0x0, 0x0, 0x0, 0x0, 0x0) (async) 12:35:08 executing program 2: syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 72) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 12:35:08 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) (async) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r2 = syz_clone(0x2200, &(0x7f00000003c0)="11f1c5c6634befa1cd46533dfe08bdd0dc94f1fc346b1d5b3fe770526cc1a14c963b2347baa03e09b29bbe06bae8ca0a4e9d73a7c36303e1d3c51322963d86d001e68ad99b34cf5d016ae5415f15b876adea400c", 0x54, &(0x7f0000000440), &(0x7f0000000480), &(0x7f00000004c0)="9f251d23d67ec51f44e2f1a5e1803673bc3e2b2c33cb0e45d78cc4c93f83689480ea00b6829cf5449b95651104af596751acce78ed4a9954c15f0ecdee016f2325fb794be03a1c5817b42e977a74f6da13d20e729400b5a0c955ec87d1ac0f789d373e97e54eee3448a1c85257204f27829871aa44aed1a8df6077f88c37601a63d17a767da14754e174bef8a8243735b7bfdb3b8343a3a498b328b495501080d8ed1564a2d2f5c283407a72b17694e279794510c8c58a5f187871") perf_event_open(0x0, r2, 0xe, r1, 0x2) r3 = openat$cgroup_type(r0, &(0x7f0000000040), 0x2, 0x0) write$cgroup_type(r3, &(0x7f0000000080), 0x9) (async) r4 = syz_clone(0x119200, &(0x7f0000000180)="32169b1adae32bed5c4c724ded24d2f0f7af47d0d9bd144e54128edf506e", 0x1e, &(0x7f00000001c0), &(0x7f0000000200), &(0x7f0000000240)="b9667e4d3bff1e684422a020a0769a6679c13528e9e2617851150d331cca5f1404ad451798989d3536a306bd39510130680831b1fc71e8341d2bd8b5265c7a8cc4f16655b13c396455a0ad5543e668a8f917cb3a8727f7dddeca58648001595afe34b3ff13e5fff3fc26673060f4f552c781974f338cc86b41d47a5921e22d1d2fde19ce8f894094f4691235075f06882e91fece2880f5a321f83eaba7952ec53b7c1a0fda00cc1af509148d6aae334fac232a911f678a20b9bee509d6f0112318299317bbe48a69666a08cfb78c") perf_event_open(&(0x7f0000000100)={0x4, 0x80, 0x94, 0x4, 0x66, 0xbb, 0x0, 0x2, 0x200, 0x8, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x3, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={&(0x7f00000000c0), 0x1}, 0x8, 0x3, 0x126, 0x7, 0xffffffffffffffff, 0x4, 0xcb40, 0x0, 0x7, 0x0, 0x400}, r4, 0xb, r0, 0xa) 12:35:08 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'\x00', 0x52d35ce30131f272}) (async) close(r0) 12:35:08 executing program 0: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x2, 0xffffffffffffffff, 0x0) 12:35:08 executing program 1: ioctl$TUNGETFEATURES(0xffffffffffffffff, 0x800454cf, &(0x7f0000000080)) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000000)={r0}, 0x8) openat$cgroup_ro(r1, &(0x7f0000000040)='cpuacct.usage_all\x00', 0x0, 0x0) (async) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001200)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xeb, 0xeb, 0x4, [@union={0xe, 0x5, 0x0, 0x5, 0x0, 0x0, [{0x2, 0x1, 0xffffffff}, {0xb, 0x4, 0xb61}, {0xa, 0x4, 0x9}, {0xe, 0x1, 0x100}, {0x4, 0x0, 0xe3}]}, @var={0x1, 0x0, 0x0, 0xe, 0x1}, @volatile={0x8, 0x0, 0x0, 0x9, 0x5}, @union={0xa, 0x2, 0x0, 0x5, 0x0, 0xab4b, [{0xc, 0x2, 0x3ff}, {0x1, 0x1, 0x9}]}, @volatile={0x1, 0x0, 0x0, 0x9, 0x3}, @struct={0xd, 0x3, 0x0, 0x4, 0x1, 0x8000, [{0x4, 0x2, 0x400}, {0x6, 0x5, 0x9}, {0x8, 0x4, 0x40}]}, @datasec={0x5, 0x2, 0x0, 0xf, 0x3, [{0x3, 0x800, 0x6}, {0x2, 0x80, 0x7}], "c04c5e"}]}, {0x0, [0x2e, 0x0]}}, &(0x7f0000000200)=""/4096, 0x108, 0x1000}, 0x20) close(r2) (async) syz_clone(0x1ff59000, 0x0, 0x0, 0x0, 0x0, 0x0) 12:35:08 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) openat$cgroup_ro(r0, &(0x7f0000000000)='memory.events\x00', 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x200002, 0x0) openat$cgroup_pressure(r1, &(0x7f0000000080)='memory.pressure\x00', 0x2, 0x0) 12:35:08 executing program 0: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x4, 0xffffffffffffffff, 0x0) [ 125.134808][ T6209] FAULT_INJECTION: forcing a failure. [ 125.134808][ T6209] name failslab, interval 1, probability 0, space 0, times 0 12:35:08 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'\x00', 0x52d35ce30131f272}) close(r0) 12:35:08 executing program 1: openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz0\x00', 0x200002, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0) write$cgroup_type(r0, &(0x7f0000000080), 0x11ffffce1) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x660c, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0) write$cgroup_type(r1, &(0x7f0000000080), 0x11ffffce1) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x660c, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f0000000100)='cgroup.freeze\x00', 0x0, 0x0) ioctl$TUNSETSTEERINGEBPF(0xffffffffffffffff, 0x800454e0, &(0x7f0000000000)) syz_clone(0xdfef400, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0) write$cgroup_type(r3, &(0x7f0000000080), 0x11ffffce1) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x660c, 0x0) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@bloom_filter={0x1e, 0x6, 0x5a58, 0x4, 0x1008, 0x1, 0xfff, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x2, 0x3, 0x4}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={r4, 0xe0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000280)=[0x0], 0x0, 0x8, &(0x7f00000002c0)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000300), &(0x7f0000000340), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000380)}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000500)=0xffffffffffffffff, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x3, 0x8, 0xebb, 0x5, 0x808, 0xffffffffffffffff, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x3, 0x4}, 0x48) ioctl$TUNSETIFINDEX(r3, 0x400454da, &(0x7f0000000080)=r5) openat$cgroup_ro(r2, &(0x7f0000000040)='cpuset.effective_mems\x00', 0x0, 0x0) [ 125.239713][ T6209] CPU: 1 PID: 6209 Comm: syz-executor.2 Tainted: G B 5.15.74-syzkaller-04383-g7f2e600bf63a #0 [ 125.251108][ T6209] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/11/2022 [ 125.260994][ T6209] Call Trace: [ 125.264117][ T6209] [ 125.266894][ T6209] dump_stack_lvl+0x151/0x1b7 [ 125.271411][ T6209] ? bfq_pos_tree_add_move+0x43e/0x43e [ 125.276706][ T6209] dump_stack+0x15/0x17 [ 125.280707][ T6209] should_fail+0x3c0/0x510 [ 125.285054][ T6209] __should_failslab+0x9f/0xe0 [ 125.289641][ T6209] should_failslab+0x9/0x20 [ 125.293982][ T6209] kmem_cache_alloc+0x4f/0x2f0 [ 125.298673][ T6209] ? anon_vma_fork+0x1b9/0x4f0 [ 125.303274][ T6209] anon_vma_fork+0x1b9/0x4f0 [ 125.307699][ T6209] dup_mmap+0x750/0xea0 [ 125.311691][ T6209] ? __delayed_free_task+0x20/0x20 [ 125.316636][ T6209] ? mm_init+0x807/0x960 [ 125.320721][ T6209] dup_mm+0x91/0x330 [ 125.324447][ T6209] copy_mm+0x108/0x1b0 [ 125.328354][ T6209] copy_process+0x1295/0x3250 [ 125.332877][ T6209] ? proc_fail_nth_write+0x213/0x290 [ 125.337989][ T6209] ? proc_fail_nth_read+0x220/0x220 [ 125.343026][ T6209] ? check_kill_permission+0x37/0x490 [ 125.348232][ T6209] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 125.353180][ T6209] ? group_send_sig_info+0xa4/0x2f0 [ 125.358296][ T6209] ? vmacache_update+0xb7/0x120 [ 125.362982][ T6209] kernel_clone+0x22d/0x990 [ 125.367321][ T6209] ? create_io_thread+0x1e0/0x1e0 [ 125.372181][ T6209] ? __mutex_lock_slowpath+0x10/0x10 [ 125.377301][ T6209] __x64_sys_clone+0x289/0x310 [ 125.381926][ T6209] ? __do_sys_vfork+0x130/0x130 [ 125.386593][ T6209] ? debug_smp_processor_id+0x17/0x20 [ 125.391795][ T6209] do_syscall_64+0x44/0xd0 [ 125.396053][ T6209] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 125.401873][ T6209] RIP: 0033:0x7f931dc135a9 [ 125.406122][ T6209] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 125.425668][ T6209] RSP: 002b:00007f931c987118 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 125.433891][ T6209] RAX: ffffffffffffffda RBX: 00007f931dd33f80 RCX: 00007f931dc135a9 [ 125.442134][ T6209] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 125.449971][ T6209] RBP: 00007f931c9871d0 R08: 0000000000000000 R09: 0000000000000000 [ 125.457842][ T6209] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 125.465655][ T6209] R13: 00007fffd2d3bdcf R14: 00007f931c987300 R15: 0000000000022000 [ 125.473473][ T6209] 12:35:08 executing program 4: perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x12) r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cgroup.controllers\x00', 0x100002, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000140)='memory.low\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f0000000200), 0x12) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000000080)=0x3) syz_clone(0x74809480, 0x0, 0x4100, &(0x7f0000000000), 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000400000000000000000000850000006d000000850000000f00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000080)='sys_exit\x00', r2}, 0x10) 12:35:08 executing program 0: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x10, 0xffffffffffffffff, 0x0) 12:35:08 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) openat$cgroup_ro(r0, &(0x7f0000000000)='memory.events\x00', 0x0, 0x0) (async) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x200002, 0x0) openat$cgroup_pressure(r1, &(0x7f0000000080)='memory.pressure\x00', 0x2, 0x0) 12:35:08 executing program 1: openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz0\x00', 0x200002, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0) write$cgroup_type(r0, &(0x7f0000000080), 0x11ffffce1) (async) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x660c, 0x0) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0) write$cgroup_type(r1, &(0x7f0000000080), 0x11ffffce1) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x660c, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f0000000100)='cgroup.freeze\x00', 0x0, 0x0) ioctl$TUNSETSTEERINGEBPF(0xffffffffffffffff, 0x800454e0, &(0x7f0000000000)) (async) syz_clone(0xdfef400, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0) write$cgroup_type(r3, &(0x7f0000000080), 0x11ffffce1) (async) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x660c, 0x0) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@bloom_filter={0x1e, 0x6, 0x5a58, 0x4, 0x1008, 0x1, 0xfff, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x2, 0x3, 0x4}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={r4, 0xe0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000280)=[0x0], 0x0, 0x8, &(0x7f00000002c0)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000300), &(0x7f0000000340), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000380)}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000500)=0xffffffffffffffff, 0x4) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x3, 0x8, 0xebb, 0x5, 0x808, 0xffffffffffffffff, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x3, 0x4}, 0x48) (async) ioctl$TUNSETIFINDEX(r3, 0x400454da, &(0x7f0000000080)=r5) (async) openat$cgroup_ro(r2, &(0x7f0000000040)='cpuset.effective_mems\x00', 0x0, 0x0) 12:35:08 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='memory.stat\x00', 0x26e1, 0x0) write$cgroup_type(r1, &(0x7f0000000080), 0x11ffffce1) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x660c, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'ip6erspan0\x00', 0x2000}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'\x00', 0x52d35ce30131f272}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) close(r0) 12:35:08 executing program 2: syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 73) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 12:35:08 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) openat$cgroup_ro(r0, &(0x7f0000000000)='memory.events\x00', 0x0, 0x0) (async) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x200002, 0x0) openat$cgroup_pressure(r1, &(0x7f0000000080)='memory.pressure\x00', 0x2, 0x0) 12:35:08 executing program 0: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x400001, 0xffffffffffffffff, 0x0) 12:35:08 executing program 0: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x1004000, 0xffffffffffffffff, 0x0) 12:35:08 executing program 0: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x2000000, 0xffffffffffffffff, 0x0) 12:35:08 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0) write$cgroup_type(r1, &(0x7f0000000080), 0x11ffffce1) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x660c, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0) write$cgroup_type(r2, &(0x7f0000000080), 0x11ffffce1) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x660c, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0) write$cgroup_type(r3, &(0x7f0000000080), 0x11ffffce1) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x660c, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x6, &(0x7f0000000280)=ANY=[@ANYBLOB="180000001f0000000000000002000000c137981781ed449500000000000000186b000000000000000000000c0a00009500000000000000"], &(0x7f0000000040)='syzkaller\x00', 0xfffffff8, 0xa8, &(0x7f0000000080)=""/168, 0x41000, 0x14, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f0000000140)={0x2, 0x2}, 0x8, 0x10, &(0x7f0000000180)={0x4, 0x6, 0xfffffbff, 0x800}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[r1, r0, 0x1, r2, r0, r3, r0]}, 0x80) [ 125.592045][ T6243] FAULT_INJECTION: forcing a failure. [ 125.592045][ T6243] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 125.657581][ T6243] CPU: 0 PID: 6243 Comm: syz-executor.2 Tainted: G B 5.15.74-syzkaller-04383-g7f2e600bf63a #0 [ 125.668969][ T6243] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/11/2022 [ 125.678951][ T6243] Call Trace: [ 125.682074][ T6243] [ 125.684855][ T6243] dump_stack_lvl+0x151/0x1b7 [ 125.689366][ T6243] ? bfq_pos_tree_add_move+0x43e/0x43e [ 125.694661][ T6243] dump_stack+0x15/0x17 [ 125.698650][ T6243] should_fail+0x3c0/0x510 [ 125.702915][ T6243] should_fail_alloc_page+0x58/0x70 [ 125.707979][ T6243] __alloc_pages+0x1de/0x7c0 [ 125.712366][ T6243] ? __count_vm_events+0x30/0x30 [ 125.717136][ T6243] pte_alloc_one+0x73/0x1b0 [ 125.721477][ T6243] ? pfn_modify_allowed+0x2e0/0x2e0 [ 125.726512][ T6243] __pte_alloc+0x86/0x350 [ 125.730687][ T6243] ? free_pgtables+0x210/0x210 [ 125.735276][ T6243] ? _raw_spin_lock+0xa3/0x1b0 [ 125.739880][ T6243] ? _raw_spin_trylock_bh+0x1d0/0x1d0 [ 125.745083][ T6243] ? unwind_get_return_address+0x4c/0x90 [ 125.750553][ T6243] copy_pte_range+0x1b1f/0x20b0 [ 125.755328][ T6243] ? stack_trace_save+0x12d/0x1f0 [ 125.760186][ T6243] ? anon_vma_clone+0xa1/0x4f0 [ 125.764786][ T6243] ? __kunmap_atomic+0x80/0x80 [ 125.769398][ T6243] ? dup_mmap+0x750/0xea0 [ 125.773559][ T6243] ? copy_mm+0x108/0x1b0 [ 125.777627][ T6243] ? copy_process+0x1295/0x3250 [ 125.782316][ T6243] ? kernel_clone+0x22d/0x990 [ 125.786830][ T6243] ? __x64_sys_clone+0x289/0x310 [ 125.791600][ T6243] ? do_syscall_64+0x44/0xd0 [ 125.796029][ T6243] ? entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 125.802022][ T6243] copy_page_range+0xc1e/0x1090 [ 125.806720][ T6243] ? pfn_valid+0x1e0/0x1e0 [ 125.810961][ T6243] dup_mmap+0x99f/0xea0 [ 125.814955][ T6243] ? __delayed_free_task+0x20/0x20 [ 125.819993][ T6243] ? mm_init+0x807/0x960 [ 125.824060][ T6243] dup_mm+0x91/0x330 [ 125.827792][ T6243] copy_mm+0x108/0x1b0 [ 125.831702][ T6243] copy_process+0x1295/0x3250 [ 125.836213][ T6243] ? proc_fail_nth_write+0x213/0x290 [ 125.841344][ T6243] ? proc_fail_nth_read+0x220/0x220 [ 125.846371][ T6243] ? check_kill_permission+0x37/0x490 [ 125.851570][ T6243] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 125.856518][ T6243] ? group_send_sig_info+0xa4/0x2f0 [ 125.861865][ T6243] ? vmacache_update+0xb7/0x120 [ 125.866554][ T6243] kernel_clone+0x22d/0x990 [ 125.870890][ T6243] ? create_io_thread+0x1e0/0x1e0 [ 125.875753][ T6243] ? __mutex_lock_slowpath+0x10/0x10 [ 125.880872][ T6243] __x64_sys_clone+0x289/0x310 [ 125.885485][ T6243] ? __do_sys_vfork+0x130/0x130 [ 125.890158][ T6243] ? debug_smp_processor_id+0x17/0x20 [ 125.895368][ T6243] do_syscall_64+0x44/0xd0 [ 125.899622][ T6243] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 125.905364][ T6243] RIP: 0033:0x7f931dc135a9 [ 125.909602][ T6243] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 125.929040][ T6243] RSP: 002b:00007f931c987118 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 125.937296][ T6243] RAX: ffffffffffffffda RBX: 00007f931dd33f80 RCX: 00007f931dc135a9 [ 125.945097][ T6243] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 12:35:09 executing program 0: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x4000000, 0xffffffffffffffff, 0x0) [ 125.952907][ T6243] RBP: 00007f931c9871d0 R08: 0000000000000000 R09: 0000000000000000 [ 125.960731][ T6243] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 125.968619][ T6243] R13: 00007fffd2d3bdcf R14: 00007f931c987300 R15: 0000000000022000 [ 125.976448][ T6243] 12:35:09 executing program 4: perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x12) r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cgroup.controllers\x00', 0x100002, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000140)='memory.low\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f0000000200), 0x12) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000000080)=0x3) syz_clone(0x74809480, 0x0, 0x4100, &(0x7f0000000000), 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000400000000000000000000850000006d000000850000000f00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000080)='sys_exit\x00', r2}, 0x10) 12:35:09 executing program 2: syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 74) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 12:35:09 executing program 0: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x10000000, 0xffffffffffffffff, 0x0) [ 126.171173][ T6276] FAULT_INJECTION: forcing a failure. [ 126.171173][ T6276] name failslab, interval 1, probability 0, space 0, times 0 [ 126.198425][ T6276] CPU: 1 PID: 6276 Comm: syz-executor.2 Tainted: G B 5.15.74-syzkaller-04383-g7f2e600bf63a #0 [ 126.210597][ T6276] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/11/2022 [ 126.220485][ T6276] Call Trace: [ 126.223610][ T6276] [ 126.226390][ T6276] dump_stack_lvl+0x151/0x1b7 [ 126.230903][ T6276] ? bfq_pos_tree_add_move+0x43e/0x43e [ 126.236196][ T6276] dump_stack+0x15/0x17 [ 126.240187][ T6276] should_fail+0x3c0/0x510 [ 126.244442][ T6276] __should_failslab+0x9f/0xe0 [ 126.249052][ T6276] should_failslab+0x9/0x20 [ 126.253444][ T6276] kmem_cache_alloc+0x4f/0x2f0 [ 126.257978][ T6276] ? vm_area_dup+0x26/0x1d0 [ 126.262320][ T6276] ? __kasan_check_read+0x11/0x20 [ 126.267178][ T6276] vm_area_dup+0x26/0x1d0 [ 126.271345][ T6276] dup_mmap+0x6b8/0xea0 [ 126.275338][ T6276] ? __delayed_free_task+0x20/0x20 [ 126.280283][ T6276] ? mm_init+0x807/0x960 [ 126.284363][ T6276] dup_mm+0x91/0x330 [ 126.288093][ T6276] copy_mm+0x108/0x1b0 [ 126.292011][ T6276] copy_process+0x1295/0x3250 [ 126.296518][ T6276] ? proc_fail_nth_write+0x213/0x290 [ 126.301639][ T6276] ? proc_fail_nth_read+0x220/0x220 [ 126.306673][ T6276] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 126.311616][ T6276] ? vfs_write+0x9af/0x1050 [ 126.315954][ T6276] ? vmacache_update+0xb7/0x120 [ 126.320640][ T6276] kernel_clone+0x22d/0x990 [ 126.324980][ T6276] ? file_end_write+0x1b0/0x1b0 [ 126.329667][ T6276] ? __kasan_check_write+0x14/0x20 [ 126.334613][ T6276] ? create_io_thread+0x1e0/0x1e0 [ 126.339477][ T6276] ? __mutex_lock_slowpath+0x10/0x10 [ 126.344595][ T6276] __x64_sys_clone+0x289/0x310 [ 126.349198][ T6276] ? __do_sys_vfork+0x130/0x130 [ 126.353982][ T6276] ? debug_smp_processor_id+0x17/0x20 [ 126.359280][ T6276] do_syscall_64+0x44/0xd0 [ 126.363523][ T6276] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 126.369260][ T6276] RIP: 0033:0x7f931dc135a9 [ 126.373506][ T6276] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 126.392945][ T6276] RSP: 002b:00007f931c987118 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 126.401215][ T6276] RAX: ffffffffffffffda RBX: 00007f931dd33f80 RCX: 00007f931dc135a9 [ 126.409091][ T6276] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 12:35:09 executing program 1: openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz0\x00', 0x200002, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0) write$cgroup_type(r0, &(0x7f0000000080), 0x11ffffce1) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x660c, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0) write$cgroup_type(r1, &(0x7f0000000080), 0x11ffffce1) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x660c, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f0000000100)='cgroup.freeze\x00', 0x0, 0x0) ioctl$TUNSETSTEERINGEBPF(0xffffffffffffffff, 0x800454e0, &(0x7f0000000000)) syz_clone(0xdfef400, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0) write$cgroup_type(r3, &(0x7f0000000080), 0x11ffffce1) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x660c, 0x0) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@bloom_filter={0x1e, 0x6, 0x5a58, 0x4, 0x1008, 0x1, 0xfff, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x2, 0x3, 0x4}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={r4, 0xe0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000280)=[0x0], 0x0, 0x8, &(0x7f00000002c0)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000300), &(0x7f0000000340), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000380)}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000500)=0xffffffffffffffff, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x3, 0x8, 0xebb, 0x5, 0x808, 0xffffffffffffffff, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x3, 0x4}, 0x48) ioctl$TUNSETIFINDEX(r3, 0x400454da, &(0x7f0000000080)=r5) openat$cgroup_ro(r2, &(0x7f0000000040)='cpuset.effective_mems\x00', 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz0\x00', 0x200002, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0) (async) write$cgroup_type(r0, &(0x7f0000000080), 0x11ffffce1) (async) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x660c, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0) (async) write$cgroup_type(r1, &(0x7f0000000080), 0x11ffffce1) (async) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x660c, 0x0) (async) openat$cgroup_ro(r1, &(0x7f0000000100)='cgroup.freeze\x00', 0x0, 0x0) (async) ioctl$TUNSETSTEERINGEBPF(0xffffffffffffffff, 0x800454e0, &(0x7f0000000000)) (async) syz_clone(0xdfef400, 0x0, 0x0, 0x0, 0x0, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0) (async) write$cgroup_type(r3, &(0x7f0000000080), 0x11ffffce1) (async) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x660c, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@bloom_filter={0x1e, 0x6, 0x5a58, 0x4, 0x1008, 0x1, 0xfff, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x2, 0x3, 0x4}, 0x48) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={r4, 0xe0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000280)=[0x0], 0x0, 0x8, &(0x7f00000002c0)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000300), &(0x7f0000000340), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000380)}}, 0x10) (async) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000500)=0xffffffffffffffff, 0x4) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x3, 0x8, 0xebb, 0x5, 0x808, 0xffffffffffffffff, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x3, 0x4}, 0x48) (async) ioctl$TUNSETIFINDEX(r3, 0x400454da, &(0x7f0000000080)=r5) (async) openat$cgroup_ro(r2, &(0x7f0000000040)='cpuset.effective_mems\x00', 0x0, 0x0) (async) 12:35:09 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='memory.stat\x00', 0x26e1, 0x0) write$cgroup_type(r1, &(0x7f0000000080), 0x11ffffce1) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x660c, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'ip6erspan0\x00', 0x2000}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'\x00', 0x52d35ce30131f272}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) close(r0) openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) (async) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='memory.stat\x00', 0x26e1, 0x0) (async) write$cgroup_type(r1, &(0x7f0000000080), 0x11ffffce1) (async) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x660c, 0x0) (async) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'ip6erspan0\x00', 0x2000}) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'\x00', 0x52d35ce30131f272}) (async) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) (async) close(r0) (async) 12:35:09 executing program 0: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x20000000, 0xffffffffffffffff, 0x0) [ 126.416900][ T6276] RBP: 00007f931c9871d0 R08: 0000000000000000 R09: 0000000000000000 [ 126.424710][ T6276] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 126.432531][ T6276] R13: 00007fffd2d3bdcf R14: 00007f931c987300 R15: 0000000000022000 [ 126.440340][ T6276] 12:35:09 executing program 0: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfeffffff, 0xffffffffffffffff, 0x0) 12:35:09 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) (async) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0) write$cgroup_type(r1, &(0x7f0000000080), 0x11ffffce1) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x660c, 0x0) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0) write$cgroup_type(r2, &(0x7f0000000080), 0x11ffffce1) (async) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x660c, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0) write$cgroup_type(r3, &(0x7f0000000080), 0x11ffffce1) (async) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x660c, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x6, &(0x7f0000000280)=ANY=[@ANYBLOB="180000001f0000000000000002000000c137981781ed449500000000000000186b000000000000000000000c0a00009500000000000000"], &(0x7f0000000040)='syzkaller\x00', 0xfffffff8, 0xa8, &(0x7f0000000080)=""/168, 0x41000, 0x14, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f0000000140)={0x2, 0x2}, 0x8, 0x10, &(0x7f0000000180)={0x4, 0x6, 0xfffffbff, 0x800}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[r1, r0, 0x1, r2, r0, r3, r0]}, 0x80) 12:35:09 executing program 0: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffffe, 0xffffffffffffffff, 0x0) 12:35:09 executing program 0: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x200000000, 0xffffffffffffffff, 0x0) 12:35:09 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) (async) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='memory.stat\x00', 0x26e1, 0x0) write$cgroup_type(r1, &(0x7f0000000080), 0x11ffffce1) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x660c, 0x0) (async) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'ip6erspan0\x00', 0x2000}) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'\x00', 0x52d35ce30131f272}) (async, rerun: 32) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) (rerun: 32) close(r0) 12:35:09 executing program 0: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x1000001000, 0xffffffffffffffff, 0x0) 12:35:09 executing program 4: perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x12) r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cgroup.controllers\x00', 0x100002, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000140)='memory.low\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f0000000200), 0x12) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000000080)=0x3) syz_clone(0x74809480, 0x0, 0x4100, &(0x7f0000000000), 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000400000000000000000000850000006d000000850000000f00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000080)='sys_exit\x00', r2}, 0x10) 12:35:09 executing program 0: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x2000000000, 0xffffffffffffffff, 0x0) 12:35:09 executing program 2: syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 75) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) [ 126.674706][ T6317] FAULT_INJECTION: forcing a failure. [ 126.674706][ T6317] name failslab, interval 1, probability 0, space 0, times 0 [ 126.709854][ T6317] CPU: 0 PID: 6317 Comm: syz-executor.2 Tainted: G B 5.15.74-syzkaller-04383-g7f2e600bf63a #0 [ 126.721233][ T6317] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/11/2022 [ 126.731127][ T6317] Call Trace: [ 126.734250][ T6317] [ 126.737028][ T6317] dump_stack_lvl+0x151/0x1b7 [ 126.741547][ T6317] ? bfq_pos_tree_add_move+0x43e/0x43e [ 126.746836][ T6317] ? do_syscall_64+0x44/0xd0 [ 126.751266][ T6317] dump_stack+0x15/0x17 [ 126.755257][ T6317] should_fail+0x3c0/0x510 [ 126.759596][ T6317] __should_failslab+0x9f/0xe0 [ 126.764202][ T6317] should_failslab+0x9/0x20 [ 126.768537][ T6317] kmem_cache_alloc+0x4f/0x2f0 [ 126.773134][ T6317] ? anon_vma_clone+0xa1/0x4f0 [ 126.777737][ T6317] anon_vma_clone+0xa1/0x4f0 [ 126.782164][ T6317] anon_vma_fork+0x91/0x4f0 [ 126.786497][ T6317] ? anon_vma_name+0x43/0x70 [ 126.790926][ T6317] dup_mmap+0x750/0xea0 [ 126.794916][ T6317] ? __delayed_free_task+0x20/0x20 [ 126.799863][ T6317] ? mm_init+0x807/0x960 [ 126.803940][ T6317] dup_mm+0x91/0x330 [ 126.807672][ T6317] copy_mm+0x108/0x1b0 [ 126.811756][ T6317] copy_process+0x1295/0x3250 [ 126.816353][ T6317] ? proc_fail_nth_write+0x213/0x290 [ 126.821924][ T6317] ? proc_fail_nth_read+0x220/0x220 [ 126.826963][ T6317] ? check_kill_permission+0x37/0x490 [ 126.832169][ T6317] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 126.837114][ T6317] ? group_send_sig_info+0xa4/0x2f0 [ 126.842145][ T6317] ? vmacache_update+0xb7/0x120 [ 126.846840][ T6317] kernel_clone+0x22d/0x990 [ 126.851176][ T6317] ? create_io_thread+0x1e0/0x1e0 [ 126.856040][ T6317] ? __mutex_lock_slowpath+0x10/0x10 [ 126.861162][ T6317] __x64_sys_clone+0x289/0x310 [ 126.865753][ T6317] ? __do_sys_vfork+0x130/0x130 [ 126.870444][ T6317] ? debug_smp_processor_id+0x17/0x20 [ 126.875645][ T6317] do_syscall_64+0x44/0xd0 [ 126.879900][ T6317] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 126.885629][ T6317] RIP: 0033:0x7f931dc135a9 [ 126.889881][ T6317] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 126.909579][ T6317] RSP: 002b:00007f931c987118 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 126.917827][ T6317] RAX: ffffffffffffffda RBX: 00007f931dd33f80 RCX: 00007f931dc135a9 12:35:10 executing program 3: ioctl$TUNSETFILTEREBPF(0xffffffffffffffff, 0x800454e1, &(0x7f0000000500)) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cpuacct.usage_user\x00', 0x0, 0x0) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_tracing={0x1a, 0xb, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, [@map_val={0x18, 0x7, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x8}, @call={0x85, 0x0, 0x0, 0x36}, @alu={0x4, 0x1, 0x2, 0xa, 0xb, 0xfffffffffffffff8, 0x10}, @map_val={0x18, 0x8, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0xa26d}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @alu={0x4, 0x0, 0xa, 0x8, 0xa, 0xffffffffffffffc0, 0xffffffffffffffff}]}, &(0x7f0000000240)='GPL\x00', 0x4, 0x0, 0x0, 0x41000, 0xe, '\x00', 0x0, 0x19, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0xa, 0x2}, 0x8, 0x10, &(0x7f0000000380)={0x1, 0xf, 0x909, 0xfff}, 0x10, 0x93c0, 0xffffffffffffffff, 0x0, &(0x7f00000003c0)=[0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1]}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x18, 0x6, &(0x7f00000000c0)=@raw=[@kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @map_val={0x18, 0x7, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x1000}, @call={0x85, 0x0, 0x0, 0x1e}, @map_idx_val={0x18, 0x3, 0x6, 0x0, 0x5}], &(0x7f0000000100)='GPL\x00', 0xb5, 0x1e, &(0x7f0000000140)=""/30, 0x41100, 0xa, '\x00', 0x0, 0x26, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0xa, 0x1}, 0x8, 0x10, &(0x7f00000001c0)={0x4, 0x3, 0x2000200, 0x1}, 0x10, 0x0, r1}, 0x80) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'\x00', 0x52d35ce30131f272}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0) write$cgroup_type(r3, &(0x7f0000000080), 0x11ffffce1) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x660c, 0x0) ioctl$TUNSETLINK(r3, 0x400454cd, 0x118) close(r2) 12:35:10 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) syz_clone(0x1ffff000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x80000, &(0x7f0000000000)="c9027b3e9b9e8ba69f6521b1688631da740154d42d3b0e05c152d4681ef0d63319ee1ec8873626e269bf5a5793d6f593a20d110ed88c86414f59e294346736072ac83f6fbcc49796ce53252ae65f816bb0f232c53008", 0x56, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000100)="352c4af775fd3e021dc08f770a60c3be582f33667c6cf1a5f08958bfff25") r1 = openat$cgroup_ro(r0, &(0x7f0000000140)='net_prio.prioidx\x00', 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000001c0)='cpuset.memory_pressure\x00', 0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000400f1ffffffffffffff00850000006d000000850000000f00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000080)='sys_exit\x00', r3}, 0x10) close(r3) openat$cgroup_ro(r2, &(0x7f0000000200)='cpuacct.usage_percpu_user\x00', 0x0, 0x0) openat$cgroup_ro(r1, &(0x7f0000000180)='blkio.bfq.time_recursive\x00', 0x0, 0x0) 12:35:10 executing program 0: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x10000010000000, 0xffffffffffffffff, 0x0) 12:35:10 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) syz_clone(0x1ffff000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x80000, &(0x7f0000000000)="c9027b3e9b9e8ba69f6521b1688631da740154d42d3b0e05c152d4681ef0d63319ee1ec8873626e269bf5a5793d6f593a20d110ed88c86414f59e294346736072ac83f6fbcc49796ce53252ae65f816bb0f232c53008", 0x56, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000100)="352c4af775fd3e021dc08f770a60c3be582f33667c6cf1a5f08958bfff25") r1 = openat$cgroup_ro(r0, &(0x7f0000000140)='net_prio.prioidx\x00', 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000001c0)='cpuset.memory_pressure\x00', 0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000400f1ffffffffffffff00850000006d000000850000000f00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000080)='sys_exit\x00', r3}, 0x10) close(r3) openat$cgroup_ro(r2, &(0x7f0000000200)='cpuacct.usage_percpu_user\x00', 0x0, 0x0) openat$cgroup_ro(r1, &(0x7f0000000180)='blkio.bfq.time_recursive\x00', 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) (async) syz_clone(0x1ffff000, 0x0, 0x0, 0x0, 0x0, 0x0) (async) syz_clone(0x80000, &(0x7f0000000000)="c9027b3e9b9e8ba69f6521b1688631da740154d42d3b0e05c152d4681ef0d63319ee1ec8873626e269bf5a5793d6f593a20d110ed88c86414f59e294346736072ac83f6fbcc49796ce53252ae65f816bb0f232c53008", 0x56, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000100)="352c4af775fd3e021dc08f770a60c3be582f33667c6cf1a5f08958bfff25") (async) openat$cgroup_ro(r0, &(0x7f0000000140)='net_prio.prioidx\x00', 0x0, 0x0) (async) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000001c0)='cpuset.memory_pressure\x00', 0x0, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000400f1ffffffffffffff00850000006d000000850000000f00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000080)='sys_exit\x00', r3}, 0x10) (async) close(r3) (async) openat$cgroup_ro(r2, &(0x7f0000000200)='cpuacct.usage_percpu_user\x00', 0x0, 0x0) (async) openat$cgroup_ro(r1, &(0x7f0000000180)='blkio.bfq.time_recursive\x00', 0x0, 0x0) (async) [ 126.925650][ T6317] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 126.933448][ T6317] RBP: 00007f931c9871d0 R08: 0000000000000000 R09: 0000000000000000 [ 126.941259][ T6317] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 126.949070][ T6317] R13: 00007fffd2d3bdcf R14: 00007f931c987300 R15: 0000000000022000 [ 126.956894][ T6317] 12:35:10 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) (async) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0) write$cgroup_type(r1, &(0x7f0000000080), 0x11ffffce1) (async) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x660c, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0) write$cgroup_type(r2, &(0x7f0000000080), 0x11ffffce1) (async) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x660c, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0) write$cgroup_type(r3, &(0x7f0000000080), 0x11ffffce1) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x660c, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x6, &(0x7f0000000280)=ANY=[@ANYBLOB="180000001f0000000000000002000000c137981781ed449500000000000000186b000000000000000000000c0a00009500000000000000"], &(0x7f0000000040)='syzkaller\x00', 0xfffffff8, 0xa8, &(0x7f0000000080)=""/168, 0x41000, 0x14, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f0000000140)={0x2, 0x2}, 0x8, 0x10, &(0x7f0000000180)={0x4, 0x6, 0xfffffbff, 0x800}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[r1, r0, 0x1, r2, r0, r3, r0]}, 0x80) 12:35:10 executing program 0: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x40000100000000, 0xffffffffffffffff, 0x0) 12:35:10 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) (async) syz_clone(0x1ffff000, 0x0, 0x0, 0x0, 0x0, 0x0) (async, rerun: 64) syz_clone(0x80000, &(0x7f0000000000)="c9027b3e9b9e8ba69f6521b1688631da740154d42d3b0e05c152d4681ef0d63319ee1ec8873626e269bf5a5793d6f593a20d110ed88c86414f59e294346736072ac83f6fbcc49796ce53252ae65f816bb0f232c53008", 0x56, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000100)="352c4af775fd3e021dc08f770a60c3be582f33667c6cf1a5f08958bfff25") (rerun: 64) r1 = openat$cgroup_ro(r0, &(0x7f0000000140)='net_prio.prioidx\x00', 0x0, 0x0) (async) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000001c0)='cpuset.memory_pressure\x00', 0x0, 0x0) (async, rerun: 64) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000400f1ffffffffffffff00850000006d000000850000000f00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (rerun: 64) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000080)='sys_exit\x00', r3}, 0x10) (async) close(r3) openat$cgroup_ro(r2, &(0x7f0000000200)='cpuacct.usage_percpu_user\x00', 0x0, 0x0) (async) openat$cgroup_ro(r1, &(0x7f0000000180)='blkio.bfq.time_recursive\x00', 0x0, 0x0) 12:35:10 executing program 2: syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 76) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 12:35:10 executing program 0: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x400000000000000, 0xffffffffffffffff, 0x0) [ 127.194801][ T6380] FAULT_INJECTION: forcing a failure. [ 127.194801][ T6380] name failslab, interval 1, probability 0, space 0, times 0 [ 127.246252][ T6380] CPU: 0 PID: 6380 Comm: syz-executor.2 Tainted: G B 5.15.74-syzkaller-04383-g7f2e600bf63a #0 [ 127.257636][ T6380] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/11/2022 [ 127.267528][ T6380] Call Trace: [ 127.270652][ T6380] [ 127.273431][ T6380] dump_stack_lvl+0x151/0x1b7 [ 127.277944][ T6380] ? bfq_pos_tree_add_move+0x43e/0x43e [ 127.283240][ T6380] dump_stack+0x15/0x17 [ 127.287231][ T6380] should_fail+0x3c0/0x510 [ 127.291482][ T6380] __should_failslab+0x9f/0xe0 [ 127.296079][ T6380] should_failslab+0x9/0x20 [ 127.300421][ T6380] kmem_cache_alloc+0x4f/0x2f0 [ 127.305019][ T6380] ? anon_vma_clone+0xa1/0x4f0 [ 127.309621][ T6380] anon_vma_clone+0xa1/0x4f0 [ 127.314048][ T6380] anon_vma_fork+0x91/0x4f0 [ 127.318384][ T6380] ? anon_vma_name+0x43/0x70 [ 127.322815][ T6380] dup_mmap+0x750/0xea0 [ 127.326811][ T6380] ? __delayed_free_task+0x20/0x20 [ 127.331753][ T6380] ? mm_init+0x807/0x960 [ 127.335833][ T6380] dup_mm+0x91/0x330 [ 127.339565][ T6380] copy_mm+0x108/0x1b0 [ 127.343471][ T6380] copy_process+0x1295/0x3250 [ 127.347986][ T6380] ? proc_fail_nth_write+0x213/0x290 [ 127.353104][ T6380] ? proc_fail_nth_read+0x220/0x220 [ 127.358227][ T6380] ? check_kill_permission+0x37/0x490 [ 127.363444][ T6380] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 127.368380][ T6380] ? group_send_sig_info+0xa4/0x2f0 [ 127.373423][ T6380] ? vmacache_update+0xb7/0x120 [ 127.378207][ T6380] kernel_clone+0x22d/0x990 [ 127.382616][ T6380] ? create_io_thread+0x1e0/0x1e0 [ 127.387474][ T6380] ? __mutex_lock_slowpath+0x10/0x10 [ 127.392598][ T6380] __x64_sys_clone+0x289/0x310 [ 127.397294][ T6380] ? __do_sys_vfork+0x130/0x130 [ 127.402007][ T6380] ? debug_smp_processor_id+0x17/0x20 [ 127.407277][ T6380] do_syscall_64+0x44/0xd0 [ 127.411612][ T6380] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 127.417328][ T6380] RIP: 0033:0x7f931dc135a9 [ 127.421585][ T6380] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 127.441028][ T6380] RSP: 002b:00007f931c987118 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 127.449271][ T6380] RAX: ffffffffffffffda RBX: 00007f931dd33f80 RCX: 00007f931dc135a9 [ 127.457167][ T6380] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 127.464979][ T6380] RBP: 00007f931c9871d0 R08: 0000000000000000 R09: 0000000000000000 [ 127.472805][ T6380] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 127.480601][ T6380] R13: 00007fffd2d3bdcf R14: 00007f931c987300 R15: 0000000000022000 [ 127.488414][ T6380] [ 127.583880][ T6372] general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] PREEMPT SMP KASAN [ 127.595435][ T6372] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007] [ 127.603770][ T6372] CPU: 1 PID: 6372 Comm: syz-executor.1 Tainted: G B 5.15.74-syzkaller-04383-g7f2e600bf63a #0 [ 127.615225][ T6372] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/11/2022 [ 127.625333][ T6372] RIP: 0010:__rb_erase_color+0x208/0xb60 [ 127.630760][ T6372] Code: 00 00 00 00 fc ff df 41 80 3c 07 00 74 08 48 89 df e8 5c 03 2d ff 4c 8b 33 4d 89 f4 49 c1 ec 03 48 b8 00 00 00 00 00 fc ff df <41> 80 3c 04 00 74 08 4c 89 f7 e8 39 03 2d ff 41 f6 06 01 48 89 5d [ 127.650288][ T6372] RSP: 0018:ffffc9000642f708 EFLAGS: 00010246 [ 127.656274][ T6372] RAX: dffffc0000000000 RBX: ffff88810c082758 RCX: ffff8881145dcf00 [ 127.664086][ T6372] RDX: ffffffff81a6fa00 RSI: ffff888109772658 RDI: ffff88810c082748 [ 127.671911][ T6372] RBP: ffffc9000642f768 R08: ffffffff81a6db99 R09: ffffed10212ee4cf [ 127.679711][ T6372] R10: ffffed10212ee4cf R11: 1ffff110212ee4ce R12: 0000000000000000 [ 127.687605][ T6372] R13: ffff88810c082748 R14: 0000000000000000 R15: 1ffff110218104eb [ 127.695415][ T6372] FS: 0000000000000000(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 127.704183][ T6372] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 127.710605][ T6372] CR2: 0000000020d68000 CR3: 00000001212ea000 CR4: 00000000003506a0 [ 127.718419][ T6372] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 127.726232][ T6372] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 127.734042][ T6372] Call Trace: [ 127.737179][ T6372] [ 127.739946][ T6372] ? anon_vma_interval_tree_iter_next+0x3b0/0x3b0 [ 127.746190][ T6372] ? __kasan_check_write+0x14/0x20 [ 127.751149][ T6372] ? down_write+0xdd/0x140 [ 127.755392][ T6372] vma_interval_tree_remove+0xa66/0xa80 [ 127.760947][ T6372] unlink_file_vma+0xd9/0xf0 [ 127.765370][ T6372] free_pgtables+0x13b/0x210 [ 127.769973][ T6372] exit_mmap+0x466/0x7a0 [ 127.774052][ T6372] ? exit_aio+0x270/0x3b0 [ 127.778229][ T6372] ? vm_brk+0x30/0x30 [ 127.782122][ T6372] ? mutex_unlock+0xa2/0x110 [ 127.786571][ T6372] ? uprobe_clear_state+0x2c2/0x320 [ 127.791581][ T6372] __mmput+0x95/0x300 [ 127.795402][ T6372] mmput+0x50/0x60 [ 127.798962][ T6372] exit_mm+0x50d/0x760 [ 127.802867][ T6372] ? exit_itimers+0x694/0x6e0 [ 127.807378][ T6372] ? do_exit+0x24d0/0x24d0 [ 127.811629][ T6372] ? taskstats_exit+0x3a0/0xa20 [ 127.816315][ T6372] do_exit+0x63c/0x24d0 [ 127.820309][ T6372] ? ____kasan_slab_free+0x131/0x160 [ 127.825522][ T6372] ? get_task_struct+0x80/0x80 [ 127.830126][ T6372] do_group_exit+0x13a/0x300 [ 127.834556][ T6372] get_signal+0x77e/0x1600 [ 127.838811][ T6372] arch_do_signal_or_restart+0x9f/0x670 [ 127.844189][ T6372] ? get_sigframe_size+0x10/0x10 [ 127.848959][ T6372] exit_to_user_mode_loop+0xd4/0x110 [ 127.854336][ T6372] exit_to_user_mode_prepare+0x3b/0x40 [ 127.859723][ T6372] irqentry_exit_to_user_mode+0x9/0x20 [ 127.865018][ T6372] irqentry_exit+0x12/0x40 [ 127.869269][ T6372] exc_page_fault+0x75/0x1a0 [ 127.873688][ T6372] asm_exc_page_fault+0x27/0x30 [ 127.878379][ T6372] RIP: 0033:0x830c532f2b0 [ 127.882545][ T6372] Code: Unable to access opcode bytes at RIP 0x830c532f286. [ 127.889658][ T6372] RSP: 002b:0000000020000058 EFLAGS: 00010217 [ 127.895562][ T6372] RAX: 0000000000000000 RBX: 00007f45db539120 RCX: 00007f45db4185a9 [ 127.903374][ T6372] RDX: 0000000020000080 RSI: 0000000020000050 RDI: 0000000000080000 [ 127.911183][ T6372] RBP: 00007f45db4737b0 R08: 0000000020000100 R09: 0000000020000100 [ 127.918994][ T6372] R10: 00000000200000c0 R11: 0000000000000206 R12: 0000000000000000 [ 127.926806][ T6372] R13: 00007ffc40ec3b7f R14: 00007f45da14a300 R15: 0000000000022000 [ 127.934707][ T6372] [ 127.937568][ T6372] Modules linked in: [ 127.944613][ T6372] ---[ end trace e0230c2f37e44274 ]--- [ 127.950585][ T6372] RIP: 0010:__rb_erase_color+0x208/0xb60 [ 127.956408][ T6372] Code: 00 00 00 00 fc ff df 41 80 3c 07 00 74 08 48 89 df e8 5c 03 2d ff 4c 8b 33 4d 89 f4 49 c1 ec 03 48 b8 00 00 00 00 00 fc ff df <41> 80 3c 04 00 74 08 4c 89 f7 e8 39 03 2d ff 41 f6 06 01 48 89 5d [ 127.977061][ T6372] RSP: 0018:ffffc9000642f708 EFLAGS: 00010246 [ 127.983236][ T6372] RAX: dffffc0000000000 RBX: ffff88810c082758 RCX: ffff8881145dcf00 [ 127.991760][ T6372] RDX: ffffffff81a6fa00 RSI: ffff888109772658 RDI: ffff88810c082748 [ 127.999732][ T6372] RBP: ffffc9000642f768 R08: ffffffff81a6db99 R09: ffffed10212ee4cf [ 128.007680][ T6372] R10: ffffed10212ee4cf R11: 1ffff110212ee4ce R12: 0000000000000000 [ 128.015486][ T6372] R13: ffff88810c082748 R14: 0000000000000000 R15: 1ffff110218104eb [ 128.023590][ T6372] FS: 0000000000000000(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 128.032435][ T6372] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 128.038792][ T6372] CR2: 0000000020d68000 CR3: 000000010cfdf000 CR4: 00000000003506a0 [ 128.046766][ T6372] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 128.054565][ T6372] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 128.062508][ T6372] Kernel panic - not syncing: Fatal exception [ 128.068628][ T6372] Kernel Offset: disabled [ 128.072859][ T6372] Rebooting in 86400 seconds..