34f650ca0f3c44f7fda4d20a55050342ea85ecc8838e7088de33582f36a0a375bb7008adc297a5ece1bb2df53d17bef26bb6f800", 0x7f, 0x2}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0x3c000000]}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'veth0_to_batadv\x00', 'ip6gretap0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x338) 14:48:04 executing program 2: clone(0x80910b00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) set_mempolicy(0x3, &(0x7f0000000040), 0x0) gettid() r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x2, 0x3, 0x2d8, 0x190, 0x190, 0x95ffffff, 0x77, 0x93ffffff, 0x240, 0x240, 0x221, 0x240, 0x240, 0x3, 0x0, {[{{@uncond, 0x0, 0x130, 0x190, 0x0, {0xc400000000000000}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "bdc74c01369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa6ecab6b1d2cc05e3182f64694d7d05fb8b8c8f56627a54f905d564eeeb8334f650ca0f3c44f7fda4d20a55050342ea85ecc8838e7088de33582f36a0a375bb7008adc297a5ece1bb2df53d17bef26bb6f800", 0x7f}}]}, @common=@SET={0x60}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'veth0_to_batadv\x00', 'ip6gretap0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x338) 14:48:04 executing program 1: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) ftruncate(r1, 0x2007fff) close(r0) open(&(0x7f00000002c0)='./bus\x00', 0x14d842, 0x0) sendfile(r0, r1, 0x0, 0x20e007) [ 2813.509119][T13529] generic_file_read_iter+0x72/0x2a0 [ 2813.514482][T13529] ? iov_iter_pipe+0x100/0x150 [ 2813.519283][T13529] ? ext4_file_read_iter+0x7a/0x1f0 [ 2813.524485][T13529] generic_file_splice_read+0x24f/0x330 [ 2813.530047][T13529] ? splice_shrink_spd+0x60/0x60 [ 2813.535029][T13529] splice_direct_to_actor+0x2aa/0x650 [ 2813.540413][T13529] ? do_splice_direct+0x190/0x190 [ 2813.545510][T13529] do_splice_direct+0x106/0x190 [ 2813.550370][T13529] do_sendfile+0x675/0xc40 [ 2813.554972][T13529] __x64_sys_sendfile64+0x102/0x140 [ 2813.560167][T13529] do_syscall_64+0x44/0xd0 [ 2813.564594][T13529] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2813.570493][T13529] RIP: 0033:0x7f2d29acae99 [ 2813.574925][T13529] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2813.594532][T13529] RSP: 002b:00007f2d28c41168 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 2813.602967][T13529] RAX: ffffffffffffffda RBX: 00007f2d29bddf60 RCX: 00007f2d29acae99 [ 2813.610941][T13529] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 2813.619034][T13529] RBP: 00007f2d28c411d0 R08: 0000000000000000 R09: 0000000000000000 [ 2813.627012][T13529] R10: 0000000000201000 R11: 0000000000000246 R12: 0000000000000002 [ 2813.635006][T13529] R13: 00007ffcc1d93fdf R14: 00007f2d28c41300 R15: 0000000000022000 [ 2813.643050][T13529] 14:48:04 executing program 4: r0 = socket$inet6(0xa, 0x400000000001, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) ftruncate(r1, 0x2007fff) close(r0) open(&(0x7f00000002c0)='./bus\x00', 0x14d842, 0x0) sendfile(r0, r1, 0x0, 0x201000) (fail_nth: 42) 14:48:04 executing program 3: r0 = syz_io_uring_setup(0x2de5, &(0x7f0000000000)={0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000fe8000/0x1000)=nil, &(0x7f0000fe8000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000280)=0x0) r3 = open_tree(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x80000) mmap$IORING_OFF_SQES(&(0x7f0000fe7000/0x2000)=nil, 0x2000, 0x1000001, 0x10, r3, 0x10000000) r4 = io_uring_setup(0x2096, &(0x7f0000000000)={0x0, 0xf5c7}) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r4, 0x13, 0x20000000, r6) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000080)=0x80, &(0x7f0000000200)=@isdn, 0x0, 0x800, 0x0, {0x0, r6}}, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f00000003c0)}, 0x1010001) r7 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r7, &(0x7f0000000340)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(0x0, r7, &(0x7f0000000000)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(0x0, r7, &(0x7f0000004040)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000140)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_CLOSE, 0x0) syz_io_uring_submit(0x0, r7, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE, 0x0) syz_io_uring_setup(0x327c, &(0x7f00000002c0)={0x0, 0xf9ec, 0x4, 0x0, 0x1d2, 0x0, r3}, &(0x7f0000fe6000/0x4000)=nil, &(0x7f0000fe9000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000340)=0x0) syz_io_uring_submit(0x0, r8, &(0x7f00000003c0)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000380), 0x1, 0x1, 0x1, {0x0, r5}}, 0x9) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0xb2, 0x0, 0x0, 0x0, 0x7401) [ 2813.846421][T13618] FAULT_INJECTION: forcing a failure. [ 2813.846421][T13618] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2813.859721][T13618] CPU: 0 PID: 13618 Comm: syz-executor.4 Tainted: G W 5.16.0-rc6-syzkaller #0 [ 2813.870397][T13618] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2813.880502][T13618] Call Trace: [ 2813.883776][T13618] [ 2813.886701][T13618] dump_stack_lvl+0xd6/0x122 [ 2813.891359][T13618] dump_stack+0x11/0x1b [ 2813.895519][T13618] should_fail+0x23c/0x250 [ 2813.900104][T13618] __alloc_pages+0x102/0x330 [ 2813.904719][T13618] alloc_pages+0x382/0x3d0 [ 2813.909145][T13618] folio_alloc+0x1a/0x20 [ 2813.913436][T13618] filemap_alloc_folio+0x53/0xf0 [ 2813.918386][T13618] page_cache_ra_unbounded+0x1c0/0x430 [ 2813.923882][T13618] ondemand_readahead+0x4f8/0x700 [ 2813.928907][T13618] ? filemap_get_read_batch+0x3e2/0x410 [ 2813.934516][T13618] page_cache_async_ra+0xed/0x120 [ 2813.939577][T13618] filemap_read+0x500/0x16d0 [ 2813.944200][T13618] generic_file_read_iter+0x72/0x2a0 [ 2813.949486][T13618] ? iov_iter_pipe+0x100/0x150 [ 2813.954482][T13618] ? ext4_file_read_iter+0x7a/0x1f0 [ 2813.959806][T13618] generic_file_splice_read+0x24f/0x330 [ 2813.965359][T13618] ? splice_shrink_spd+0x60/0x60 [ 2813.970387][T13618] splice_direct_to_actor+0x2aa/0x650 [ 2813.975803][T13618] ? do_splice_direct+0x190/0x190 [ 2813.980842][T13618] do_splice_direct+0x106/0x190 [ 2813.985698][T13618] do_sendfile+0x675/0xc40 [ 2813.990136][T13618] __x64_sys_sendfile64+0x102/0x140 [ 2813.995362][T13618] do_syscall_64+0x44/0xd0 [ 2813.999902][T13618] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2814.005827][T13618] RIP: 0033:0x7f2d29acae99 [ 2814.010242][T13618] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2814.029850][T13618] RSP: 002b:00007f2d28c41168 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 2814.038264][T13618] RAX: ffffffffffffffda RBX: 00007f2d29bddf60 RCX: 00007f2d29acae99 [ 2814.046346][T13618] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 2814.054342][T13618] RBP: 00007f2d28c411d0 R08: 0000000000000000 R09: 0000000000000000 [ 2814.062495][T13618] R10: 0000000000201000 R11: 0000000000000246 R12: 0000000000000002 [ 2814.070559][T13618] R13: 00007ffcc1d93fdf R14: 00007f2d28c41300 R15: 0000000000022000 [ 2814.078607][T13618] 14:48:05 executing program 0: openat(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/self/exe\x00', 0x0, 0x0) (async) r0 = socket$inet6(0xa, 0x800, 0x3a) setsockopt$inet6_int(r0, 0x29, 0xd1, &(0x7f0000000000)=0x4, 0x4) setsockopt$inet6_MRT6_ADD_MFC(r0, 0x29, 0xc8, 0x0, 0x4) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r0, 0x29, 0xc9, 0x0, 0x0) (async) mmap(&(0x7f000073c000/0x1000)=nil, 0x1000, 0x1800007, 0x12, r0, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x2) write$evdev(r1, &(0x7f000004d000)=[{}], 0xfffffe82) 14:48:05 executing program 1: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) ftruncate(r1, 0x2007fff) close(r0) open(&(0x7f00000002c0)='./bus\x00', 0x14d842, 0x0) sendfile(r0, r1, 0x0, 0x20f000) 14:48:05 executing program 2: clone(0x80910b00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) set_mempolicy(0x3, &(0x7f0000000040), 0x0) gettid() r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x2, 0x3, 0x2d8, 0x190, 0x190, 0x95ffffff, 0x77, 0x93ffffff, 0x240, 0x240, 0x221, 0x240, 0x240, 0x3, 0x0, {[{{@uncond, 0x0, 0x130, 0x190, 0x0, {0xc402000000000000}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "bdc74c01369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa6ecab6b1d2cc05e3182f64694d7d05fb8b8c8f56627a54f905d564eeeb8334f650ca0f3c44f7fda4d20a55050342ea85ecc8838e7088de33582f36a0a375bb7008adc297a5ece1bb2df53d17bef26bb6f800", 0x7f}}]}, @common=@SET={0x60}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'veth0_to_batadv\x00', 'ip6gretap0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x338) 14:48:05 executing program 5: clone(0x80910b00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) set_mempolicy(0x3, &(0x7f0000000040)=0xffffffff80000001, 0x400) gettid() r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, &(0x7f0000000080)=ANY=[@ANYBLOB="7549f8187a2a6e40594b4473692aef0dda6d1a46f2019ed7e86b1d711c76877056283bedab9579d2125c7cad3b1f28c963b3a626ef87b075574ff5612ccc80d8e14883ad2a8e6516a15c410ce005b2e841ebacd55a1365c685244ec3b66b003e7ec96ed005906d578130183c37"]) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x2, 0x3, 0x2d8, 0x190, 0x190, 0x95ffffff, 0x77, 0x93ffffff, 0x240, 0x240, 0x221, 0x240, 0x240, 0x3, 0x0, {[{{@uncond, 0x0, 0x130, 0x190, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "bdc74c01369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa6ecab6b1d2cc05e3182f64694d7d05fb8b8c8f56627a54f905d564eeeb8334f650ca0f3c44f7fda4d20a55050342ea85ecc8838e7088de33582f36a0a375bb7008adc297a5ece1bb2df53d17bef26bb6f800", 0x7f, 0x2}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0x3c010000]}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'veth0_to_batadv\x00', 'ip6gretap0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x338) 14:48:05 executing program 3: r0 = syz_io_uring_setup(0x2de5, &(0x7f0000000000)={0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000fe8000/0x1000)=nil, &(0x7f0000fe8000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000280)=0x0) (async) r3 = open_tree(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x80000) mmap$IORING_OFF_SQES(&(0x7f0000fe7000/0x2000)=nil, 0x2000, 0x1000001, 0x10, r3, 0x10000000) (async, rerun: 32) r4 = io_uring_setup(0x2096, &(0x7f0000000000)={0x0, 0xf5c7}) (rerun: 32) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r4, 0x13, 0x20000000, r6) (async) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000080)=0x80, &(0x7f0000000200)=@isdn, 0x0, 0x800, 0x0, {0x0, r6}}, 0x4) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f00000003c0)}, 0x1010001) (async) r7 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r7, &(0x7f0000000340)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(0x0, r7, &(0x7f0000000000)=@IORING_OP_SYNC_FILE_RANGE, 0x0) (async) syz_io_uring_submit(0x0, r7, &(0x7f0000004040)=@IORING_OP_SYNC_FILE_RANGE, 0x0) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000140)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_CLOSE, 0x0) syz_io_uring_submit(0x0, r7, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE, 0x0) (async) syz_io_uring_setup(0x327c, &(0x7f00000002c0)={0x0, 0xf9ec, 0x4, 0x0, 0x1d2, 0x0, r3}, &(0x7f0000fe6000/0x4000)=nil, &(0x7f0000fe9000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000340)=0x0) syz_io_uring_submit(0x0, r8, &(0x7f00000003c0)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000380), 0x1, 0x1, 0x1, {0x0, r5}}, 0x9) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) (async) io_uring_enter(r0, 0xb2, 0x0, 0x0, 0x0, 0x7401) 14:48:05 executing program 4: r0 = socket$inet6(0xa, 0x400000000001, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) ftruncate(r1, 0x2007fff) close(r0) open(&(0x7f00000002c0)='./bus\x00', 0x14d842, 0x0) sendfile(r0, r1, 0x0, 0x201000) (fail_nth: 43) 14:48:05 executing program 2: clone(0x80910b00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) set_mempolicy(0x3, &(0x7f0000000040), 0x0) gettid() r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x2, 0x3, 0x2d8, 0x190, 0x190, 0x95ffffff, 0x77, 0x93ffffff, 0x240, 0x240, 0x221, 0x240, 0x240, 0x3, 0x0, {[{{@uncond, 0x0, 0x130, 0x190, 0x0, {0xc7ffffff00000000}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "bdc74c01369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa6ecab6b1d2cc05e3182f64694d7d05fb8b8c8f56627a54f905d564eeeb8334f650ca0f3c44f7fda4d20a55050342ea85ecc8838e7088de33582f36a0a375bb7008adc297a5ece1bb2df53d17bef26bb6f800", 0x7f}}]}, @common=@SET={0x60}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'veth0_to_batadv\x00', 'ip6gretap0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x338) [ 2814.516621][T13632] FAULT_INJECTION: forcing a failure. [ 2814.516621][T13632] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2814.529986][T13632] CPU: 0 PID: 13632 Comm: syz-executor.4 Tainted: G W 5.16.0-rc6-syzkaller #0 [ 2814.540254][T13632] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2814.550315][T13632] Call Trace: [ 2814.553592][T13632] [ 2814.556612][T13632] dump_stack_lvl+0xd6/0x122 [ 2814.561294][T13632] dump_stack+0x11/0x1b 14:48:05 executing program 5: clone(0x80910b00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) set_mempolicy(0x3, &(0x7f0000000040)=0xffffffff80000001, 0x400) gettid() r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, &(0x7f0000000080)=ANY=[@ANYBLOB="7549f8187a2a6e40594b4473692aef0dda6d1a46f2019ed7e86b1d711c76877056283bedab9579d2125c7cad3b1f28c963b3a626ef87b075574ff5612ccc80d8e14883ad2a8e6516a15c410ce005b2e841ebacd55a1365c685244ec3b66b003e7ec96ed005906d578130183c37"]) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x2, 0x3, 0x2d8, 0x190, 0x190, 0x95ffffff, 0x77, 0x93ffffff, 0x240, 0x240, 0x221, 0x240, 0x240, 0x3, 0x0, {[{{@uncond, 0x0, 0x130, 0x190, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "bdc74c01369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa6ecab6b1d2cc05e3182f64694d7d05fb8b8c8f56627a54f905d564eeeb8334f650ca0f3c44f7fda4d20a55050342ea85ecc8838e7088de33582f36a0a375bb7008adc297a5ece1bb2df53d17bef26bb6f800", 0x7f, 0x2}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0x3d000000]}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'veth0_to_batadv\x00', 'ip6gretap0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x338) [ 2814.565465][T13632] should_fail+0x23c/0x250 [ 2814.569932][T13632] __alloc_pages+0x102/0x330 [ 2814.574598][T13632] alloc_pages+0x382/0x3d0 [ 2814.579036][T13632] folio_alloc+0x1a/0x20 [ 2814.583456][T13632] filemap_alloc_folio+0x53/0xf0 [ 2814.588413][T13632] page_cache_ra_unbounded+0x1c0/0x430 [ 2814.593948][T13632] ondemand_readahead+0x4f8/0x700 [ 2814.599088][T13632] ? filemap_get_read_batch+0x3e2/0x410 [ 2814.604643][T13632] page_cache_async_ra+0xed/0x120 [ 2814.609684][T13632] filemap_read+0x500/0x16d0 [ 2814.614333][T13632] generic_file_read_iter+0x72/0x2a0 [ 2814.619652][T13632] ? iov_iter_pipe+0x100/0x150 [ 2814.624422][T13632] ? ext4_file_read_iter+0x7a/0x1f0 [ 2814.629625][T13632] generic_file_splice_read+0x24f/0x330 [ 2814.635230][T13632] ? splice_shrink_spd+0x60/0x60 [ 2814.640180][T13632] splice_direct_to_actor+0x2aa/0x650 [ 2814.645596][T13632] ? do_splice_direct+0x190/0x190 [ 2814.650741][T13632] do_splice_direct+0x106/0x190 [ 2814.655613][T13632] do_sendfile+0x675/0xc40 [ 2814.660045][T13632] __x64_sys_sendfile64+0x102/0x140 14:48:05 executing program 1: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) ftruncate(r1, 0x2007fff) close(r0) open(&(0x7f00000002c0)='./bus\x00', 0x14d842, 0x0) sendfile(r0, r1, 0x0, 0x20f007) 14:48:05 executing program 2: clone(0x80910b00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) set_mempolicy(0x3, &(0x7f0000000040), 0x0) gettid() r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x2, 0x3, 0x2d8, 0x190, 0x190, 0x95ffffff, 0x77, 0x93ffffff, 0x240, 0x240, 0x221, 0x240, 0x240, 0x3, 0x0, {[{{@uncond, 0x0, 0x130, 0x190, 0x0, {0xc8ffffff00000000}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "bdc74c01369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa6ecab6b1d2cc05e3182f64694d7d05fb8b8c8f56627a54f905d564eeeb8334f650ca0f3c44f7fda4d20a55050342ea85ecc8838e7088de33582f36a0a375bb7008adc297a5ece1bb2df53d17bef26bb6f800", 0x7f}}]}, @common=@SET={0x60}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'veth0_to_batadv\x00', 'ip6gretap0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x338) [ 2814.665256][T13632] do_syscall_64+0x44/0xd0 [ 2814.669701][T13632] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2814.675598][T13632] RIP: 0033:0x7f2d29acae99 [ 2814.680017][T13632] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2814.699921][T13632] RSP: 002b:00007f2d28c41168 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 2814.708346][T13632] RAX: ffffffffffffffda RBX: 00007f2d29bddf60 RCX: 00007f2d29acae99 [ 2814.716498][T13632] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 2814.724832][T13632] RBP: 00007f2d28c411d0 R08: 0000000000000000 R09: 0000000000000000 [ 2814.732923][T13632] R10: 0000000000201000 R11: 0000000000000246 R12: 0000000000000002 [ 2814.740908][T13632] R13: 00007ffcc1d93fdf R14: 00007f2d28c41300 R15: 0000000000022000 [ 2814.748984][T13632] 14:48:05 executing program 3: r0 = syz_io_uring_setup(0x2de5, &(0x7f0000000000)={0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000fe8000/0x1000)=nil, &(0x7f0000fe8000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000280)=0x0) r3 = open_tree(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x80000) mmap$IORING_OFF_SQES(&(0x7f0000fe7000/0x2000)=nil, 0x2000, 0x1000001, 0x10, r3, 0x10000000) r4 = io_uring_setup(0x2096, &(0x7f0000000000)={0x0, 0xf5c7}) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r4, 0x13, 0x20000000, r6) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000080)=0x80, &(0x7f0000000200)=@isdn, 0x0, 0x800, 0x0, {0x0, r6}}, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f00000003c0)}, 0x1010001) r7 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r7, &(0x7f0000000340)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(0x0, r7, &(0x7f0000000000)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(0x0, r7, &(0x7f0000004040)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000140)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_CLOSE, 0x0) syz_io_uring_submit(0x0, r7, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE, 0x0) syz_io_uring_setup(0x327c, &(0x7f00000002c0)={0x0, 0xf9ec, 0x4, 0x0, 0x1d2, 0x0, r3}, &(0x7f0000fe6000/0x4000)=nil, &(0x7f0000fe9000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000340)=0x0) syz_io_uring_submit(0x0, r8, &(0x7f00000003c0)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000380), 0x1, 0x1, 0x1, {0x0, r5}}, 0x9) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0xb2, 0x0, 0x0, 0x0, 0x7401) syz_io_uring_setup(0x2de5, &(0x7f0000000000)={0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000fe8000/0x1000)=nil, &(0x7f0000fe8000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000280)) (async) open_tree(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x80000) (async) mmap$IORING_OFF_SQES(&(0x7f0000fe7000/0x2000)=nil, 0x2000, 0x1000001, 0x10, r3, 0x10000000) (async) io_uring_setup(0x2096, &(0x7f0000000000)={0x0, 0xf5c7}) (async) io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) (async) io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) (async) io_uring_register$IORING_UNREGISTER_PERSONALITY(r4, 0x13, 0x20000000, r6) (async) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000080)=0x80, &(0x7f0000000200)=@isdn, 0x0, 0x800, 0x0, {0x0, r6}}, 0x4) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f00000003c0)}, 0x1010001) (async) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, 0xffffffffffffffff, 0x10000000) (async) syz_io_uring_submit(0x0, r7, &(0x7f0000000340)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd_index}, 0x0) (async) syz_io_uring_submit(0x0, r7, &(0x7f0000000000)=@IORING_OP_SYNC_FILE_RANGE, 0x0) (async) syz_io_uring_submit(0x0, r7, &(0x7f0000004040)=@IORING_OP_SYNC_FILE_RANGE, 0x0) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000140)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_CLOSE, 0x0) (async) syz_io_uring_submit(0x0, r7, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE, 0x0) (async) syz_io_uring_setup(0x327c, &(0x7f00000002c0)={0x0, 0xf9ec, 0x4, 0x0, 0x1d2, 0x0, r3}, &(0x7f0000fe6000/0x4000)=nil, &(0x7f0000fe9000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000340)) (async) syz_io_uring_submit(0x0, r8, &(0x7f00000003c0)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000380), 0x1, 0x1, 0x1, {0x0, r5}}, 0x9) (async) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) (async) io_uring_enter(r0, 0xb2, 0x0, 0x0, 0x0, 0x7401) (async) 14:48:05 executing program 2: clone(0x80910b00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) set_mempolicy(0x3, &(0x7f0000000040), 0x0) gettid() r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x2, 0x3, 0x2d8, 0x190, 0x190, 0x95ffffff, 0x77, 0x93ffffff, 0x240, 0x240, 0x221, 0x240, 0x240, 0x3, 0x0, {[{{@uncond, 0x0, 0x130, 0x190, 0x0, {0xc901000000000000}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "bdc74c01369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa6ecab6b1d2cc05e3182f64694d7d05fb8b8c8f56627a54f905d564eeeb8334f650ca0f3c44f7fda4d20a55050342ea85ecc8838e7088de33582f36a0a375bb7008adc297a5ece1bb2df53d17bef26bb6f800", 0x7f}}]}, @common=@SET={0x60}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'veth0_to_batadv\x00', 'ip6gretap0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x338) [ 2814.766169][T13737] set_target_v0_checkentry: 29 callbacks suppressed [ 2814.766186][T13737] Cannot find add_set index 0 as target [ 2814.833483][T13753] Cannot find add_set index 0 as target 14:48:06 executing program 0: openat(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/self/exe\x00', 0x0, 0x0) r0 = socket$inet6(0xa, 0x800, 0x3a) setsockopt$inet6_int(r0, 0x29, 0xd1, &(0x7f0000000000)=0x4, 0x4) setsockopt$inet6_MRT6_ADD_MFC(r0, 0x29, 0xc8, 0x0, 0x4) (async, rerun: 64) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r0, 0x29, 0xc9, 0x0, 0x0) (async, rerun: 64) mmap(&(0x7f000073c000/0x1000)=nil, 0x1000, 0x1800007, 0x12, r0, 0x0) (async, rerun: 32) r1 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x2) (rerun: 32) write$evdev(r1, &(0x7f000004d000)=[{}], 0xfffffe82) 14:48:06 executing program 5: clone(0x80910b00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) set_mempolicy(0x3, &(0x7f0000000040)=0xffffffff80000001, 0x400) gettid() r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, &(0x7f0000000080)=ANY=[@ANYBLOB="7549f8187a2a6e40594b4473692aef0dda6d1a46f2019ed7e86b1d711c76877056283bedab9579d2125c7cad3b1f28c963b3a626ef87b075574ff5612ccc80d8e14883ad2a8e6516a15c410ce005b2e841ebacd55a1365c685244ec3b66b003e7ec96ed005906d578130183c37"]) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x2, 0x3, 0x2d8, 0x190, 0x190, 0x95ffffff, 0x77, 0x93ffffff, 0x240, 0x240, 0x221, 0x240, 0x240, 0x3, 0x0, {[{{@uncond, 0x0, 0x130, 0x190, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "bdc74c01369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa6ecab6b1d2cc05e3182f64694d7d05fb8b8c8f56627a54f905d564eeeb8334f650ca0f3c44f7fda4d20a55050342ea85ecc8838e7088de33582f36a0a375bb7008adc297a5ece1bb2df53d17bef26bb6f800", 0x7f, 0x2}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0x3e030000]}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'veth0_to_batadv\x00', 'ip6gretap0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x338) 14:48:06 executing program 1: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) ftruncate(r1, 0x2007fff) close(r0) open(&(0x7f00000002c0)='./bus\x00', 0x14d842, 0x0) sendfile(r0, r1, 0x0, 0x20ff0f) 14:48:06 executing program 2: clone(0x80910b00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) set_mempolicy(0x3, &(0x7f0000000040), 0x0) gettid() r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x2, 0x3, 0x2d8, 0x190, 0x190, 0x95ffffff, 0x77, 0x93ffffff, 0x240, 0x240, 0x221, 0x240, 0x240, 0x3, 0x0, {[{{@uncond, 0x0, 0x130, 0x190, 0x0, {0xc902000000000000}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "bdc74c01369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa6ecab6b1d2cc05e3182f64694d7d05fb8b8c8f56627a54f905d564eeeb8334f650ca0f3c44f7fda4d20a55050342ea85ecc8838e7088de33582f36a0a375bb7008adc297a5ece1bb2df53d17bef26bb6f800", 0x7f}}]}, @common=@SET={0x60}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'veth0_to_batadv\x00', 'ip6gretap0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x338) 14:48:06 executing program 3: r0 = syz_io_uring_setup(0x2de5, &(0x7f0000000000)={0x0, 0x42c0, 0x0, 0x1000, 0x0, 0x0, 0x0}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000fe8000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x0) r3 = syz_io_uring_setup(0x5d67, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ee7000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r4, r5, &(0x7f00000000c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, &(0x7f00000003c0)}, 0x1010001) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r3, 0x10000000) syz_io_uring_submit(r4, r6, &(0x7f0000000340)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r4, r6, &(0x7f0000000000)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r4, r6, &(0x7f0000004040)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd, 0x0, 0x0, 0x401}, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000140)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_CLOSE, 0x0) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) setsockopt$inet6_MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xc8, 0x0, 0x4) setsockopt$inet6_MRT6_ADD_MFC_PROXY(0xffffffffffffffff, 0x29, 0xc9, 0x0, 0x0) ioctl$F2FS_IOC_GET_FEATURES(0xffffffffffffffff, 0x8004f50c, &(0x7f0000000180)) syz_io_uring_submit(r1, r5, &(0x7f00000001c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x2000, @fd_index=0x20, 0x0, 0x0, 0x0, 0x0, 0x1, {0x0, r7}}, 0x0) io_uring_enter(r0, 0xb2, 0x0, 0x0, 0x0, 0x7401) r8 = io_uring_setup(0x4283, &(0x7f0000000000)={0x0, 0xca23, 0x8}) io_uring_register$IORING_REGISTER_PERSONALITY(r8, 0x9, 0x0, 0x0) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r8, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r8, 0x13, 0x20000000, r9) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_TIMEOUT={0xb, 0x1, 0x0, 0x0, 0x5, &(0x7f0000000080)={0x0, 0x3938700}, 0x1, 0x0, 0x1, {0x0, r9}}, 0xf9) 14:48:06 executing program 4: r0 = socket$inet6(0xa, 0x400000000001, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) ftruncate(r1, 0x2007fff) close(r0) open(&(0x7f00000002c0)='./bus\x00', 0x14d842, 0x0) sendfile(r0, r1, 0x0, 0x201000) (fail_nth: 44) 14:48:06 executing program 3: r0 = syz_io_uring_setup(0x2de5, &(0x7f0000000000)={0x0, 0x42c0, 0x0, 0x1000, 0x0, 0x0, 0x0}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000fe8000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x0) r3 = syz_io_uring_setup(0x5d67, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ee7000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r4, r5, &(0x7f00000000c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, &(0x7f00000003c0)}, 0x1010001) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r3, 0x10000000) syz_io_uring_submit(r4, r6, &(0x7f0000000340)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r4, r6, &(0x7f0000000000)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r4, r6, &(0x7f0000004040)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd, 0x0, 0x0, 0x401}, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000140)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_CLOSE, 0x0) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) setsockopt$inet6_MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xc8, 0x0, 0x4) setsockopt$inet6_MRT6_ADD_MFC_PROXY(0xffffffffffffffff, 0x29, 0xc9, 0x0, 0x0) ioctl$F2FS_IOC_GET_FEATURES(0xffffffffffffffff, 0x8004f50c, &(0x7f0000000180)) syz_io_uring_submit(r1, r5, &(0x7f00000001c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x2000, @fd_index=0x20, 0x0, 0x0, 0x0, 0x0, 0x1, {0x0, r7}}, 0x0) io_uring_enter(r0, 0xb2, 0x0, 0x0, 0x0, 0x7401) r8 = io_uring_setup(0x4283, &(0x7f0000000000)={0x0, 0xca23, 0x8}) io_uring_register$IORING_REGISTER_PERSONALITY(r8, 0x9, 0x0, 0x0) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r8, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r8, 0x13, 0x20000000, r9) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_TIMEOUT={0xb, 0x1, 0x0, 0x0, 0x5, &(0x7f0000000080)={0x0, 0x3938700}, 0x1, 0x0, 0x1, {0x0, r9}}, 0xf9) syz_io_uring_setup(0x2de5, &(0x7f0000000000)={0x0, 0x42c0, 0x0, 0x1000, 0x0, 0x0, 0x0}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000fe8000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000140)) (async) syz_io_uring_setup(0x5d67, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ee7000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380), &(0x7f0000000280)) (async) syz_io_uring_submit(r4, r5, &(0x7f00000000c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, &(0x7f00000003c0)}, 0x1010001) (async) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r3, 0x10000000) (async) syz_io_uring_submit(r4, r6, &(0x7f0000000340)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd_index}, 0x0) (async) syz_io_uring_submit(r4, r6, &(0x7f0000000000)=@IORING_OP_SYNC_FILE_RANGE, 0x0) (async) syz_io_uring_submit(r4, r6, &(0x7f0000004040)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd, 0x0, 0x0, 0x401}, 0x0) (async) syz_io_uring_submit(r4, r5, &(0x7f0000000140)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) (async) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_CLOSE, 0x0) (async) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) (async) setsockopt$inet6_MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xc8, 0x0, 0x4) (async) setsockopt$inet6_MRT6_ADD_MFC_PROXY(0xffffffffffffffff, 0x29, 0xc9, 0x0, 0x0) (async) ioctl$F2FS_IOC_GET_FEATURES(0xffffffffffffffff, 0x8004f50c, &(0x7f0000000180)) (async) syz_io_uring_submit(r1, r5, &(0x7f00000001c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x2000, @fd_index=0x20, 0x0, 0x0, 0x0, 0x0, 0x1, {0x0, r7}}, 0x0) (async) io_uring_enter(r0, 0xb2, 0x0, 0x0, 0x0, 0x7401) (async) io_uring_setup(0x4283, &(0x7f0000000000)={0x0, 0xca23, 0x8}) (async) io_uring_register$IORING_REGISTER_PERSONALITY(r8, 0x9, 0x0, 0x0) (async) io_uring_register$IORING_REGISTER_PERSONALITY(r8, 0x9, 0x0, 0x0) (async) io_uring_register$IORING_UNREGISTER_PERSONALITY(r8, 0x13, 0x20000000, r9) (async) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_TIMEOUT={0xb, 0x1, 0x0, 0x0, 0x5, &(0x7f0000000080)={0x0, 0x3938700}, 0x1, 0x0, 0x1, {0x0, r9}}, 0xf9) (async) [ 2815.558592][T13866] FAULT_INJECTION: forcing a failure. [ 2815.558592][T13866] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2815.559643][T13868] Cannot find add_set index 0 as target [ 2815.571938][T13866] CPU: 0 PID: 13866 Comm: syz-executor.4 Tainted: G W 5.16.0-rc6-syzkaller #0 [ 2815.587689][T13866] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2815.597836][T13866] Call Trace: [ 2815.601112][T13866] [ 2815.604050][T13866] dump_stack_lvl+0xd6/0x122 14:48:06 executing program 2: clone(0x80910b00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) set_mempolicy(0x3, &(0x7f0000000040), 0x0) gettid() r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x2, 0x3, 0x2d8, 0x190, 0x190, 0x95ffffff, 0x77, 0x93ffffff, 0x240, 0x240, 0x221, 0x240, 0x240, 0x3, 0x0, {[{{@uncond, 0x0, 0x130, 0x190, 0x0, {0xcaffffff00000000}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "bdc74c01369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa6ecab6b1d2cc05e3182f64694d7d05fb8b8c8f56627a54f905d564eeeb8334f650ca0f3c44f7fda4d20a55050342ea85ecc8838e7088de33582f36a0a375bb7008adc297a5ece1bb2df53d17bef26bb6f800", 0x7f}}]}, @common=@SET={0x60}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'veth0_to_batadv\x00', 'ip6gretap0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x338) [ 2815.609012][T13866] dump_stack+0x11/0x1b [ 2815.613183][T13866] should_fail+0x23c/0x250 [ 2815.617609][T13866] __alloc_pages+0x102/0x330 [ 2815.622208][T13866] alloc_pages+0x382/0x3d0 [ 2815.626657][T13866] folio_alloc+0x1a/0x20 [ 2815.630901][T13866] filemap_alloc_folio+0x53/0xf0 [ 2815.635916][T13866] page_cache_ra_unbounded+0x1c0/0x430 [ 2815.641393][T13866] ondemand_readahead+0x4f8/0x700 [ 2815.644854][T13941] Cannot find add_set index 0 as target [ 2815.646429][T13866] ? filemap_get_read_batch+0x3e2/0x410 14:48:06 executing program 3: r0 = syz_io_uring_setup(0x2de5, &(0x7f0000000000)={0x0, 0x42c0, 0x0, 0x1000, 0x0, 0x0, 0x0}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000fe8000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x0) r3 = syz_io_uring_setup(0x5d67, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ee7000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r4, r5, &(0x7f00000000c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, &(0x7f00000003c0)}, 0x1010001) (async) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r3, 0x10000000) syz_io_uring_submit(r4, r6, &(0x7f0000000340)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r4, r6, &(0x7f0000000000)=@IORING_OP_SYNC_FILE_RANGE, 0x0) (async) syz_io_uring_submit(r4, r6, &(0x7f0000004040)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd, 0x0, 0x0, 0x401}, 0x0) (async) syz_io_uring_submit(r4, r5, &(0x7f0000000140)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) (async) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_CLOSE, 0x0) (async) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) (async) setsockopt$inet6_MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xc8, 0x0, 0x4) setsockopt$inet6_MRT6_ADD_MFC_PROXY(0xffffffffffffffff, 0x29, 0xc9, 0x0, 0x0) (async) ioctl$F2FS_IOC_GET_FEATURES(0xffffffffffffffff, 0x8004f50c, &(0x7f0000000180)) (async) syz_io_uring_submit(r1, r5, &(0x7f00000001c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x2000, @fd_index=0x20, 0x0, 0x0, 0x0, 0x0, 0x1, {0x0, r7}}, 0x0) io_uring_enter(r0, 0xb2, 0x0, 0x0, 0x0, 0x7401) r8 = io_uring_setup(0x4283, &(0x7f0000000000)={0x0, 0xca23, 0x8}) io_uring_register$IORING_REGISTER_PERSONALITY(r8, 0x9, 0x0, 0x0) (async) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r8, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r8, 0x13, 0x20000000, r9) (async) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_TIMEOUT={0xb, 0x1, 0x0, 0x0, 0x5, &(0x7f0000000080)={0x0, 0x3938700}, 0x1, 0x0, 0x1, {0x0, r9}}, 0xf9) 14:48:06 executing program 2: clone(0x80910b00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) set_mempolicy(0x3, &(0x7f0000000040), 0x0) gettid() r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x2, 0x3, 0x2d8, 0x190, 0x190, 0x95ffffff, 0x77, 0x93ffffff, 0x240, 0x240, 0x221, 0x240, 0x240, 0x3, 0x0, {[{{@uncond, 0x0, 0x130, 0x190, 0x0, {0xccffffff00000000}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "bdc74c01369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa6ecab6b1d2cc05e3182f64694d7d05fb8b8c8f56627a54f905d564eeeb8334f650ca0f3c44f7fda4d20a55050342ea85ecc8838e7088de33582f36a0a375bb7008adc297a5ece1bb2df53d17bef26bb6f800", 0x7f}}]}, @common=@SET={0x60}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'veth0_to_batadv\x00', 'ip6gretap0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x338) [ 2815.657539][T13866] page_cache_async_ra+0xed/0x120 [ 2815.662572][T13866] filemap_read+0x500/0x16d0 [ 2815.667231][T13866] generic_file_read_iter+0x72/0x2a0 [ 2815.672603][T13866] ? iov_iter_pipe+0x100/0x150 [ 2815.677373][T13866] ? ext4_file_read_iter+0x7a/0x1f0 [ 2815.684055][T13866] generic_file_splice_read+0x24f/0x330 [ 2815.689632][T13866] ? splice_shrink_spd+0x60/0x60 [ 2815.694693][T13866] splice_direct_to_actor+0x2aa/0x650 [ 2815.700465][T13866] ? do_splice_direct+0x190/0x190 14:48:06 executing program 2: clone(0x80910b00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) set_mempolicy(0x3, &(0x7f0000000040), 0x0) gettid() r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x2, 0x3, 0x2d8, 0x190, 0x190, 0x95ffffff, 0x77, 0x93ffffff, 0x240, 0x240, 0x221, 0x240, 0x240, 0x3, 0x0, {[{{@uncond, 0x0, 0x130, 0x190, 0x0, {0xce01000000000000}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "bdc74c01369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa6ecab6b1d2cc05e3182f64694d7d05fb8b8c8f56627a54f905d564eeeb8334f650ca0f3c44f7fda4d20a55050342ea85ecc8838e7088de33582f36a0a375bb7008adc297a5ece1bb2df53d17bef26bb6f800", 0x7f}}]}, @common=@SET={0x60}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'veth0_to_batadv\x00', 'ip6gretap0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x338) [ 2815.705510][T13866] do_splice_direct+0x106/0x190 [ 2815.710368][T13866] do_sendfile+0x675/0xc40 [ 2815.714797][T13866] __x64_sys_sendfile64+0x102/0x140 [ 2815.718081][T13992] Cannot find add_set index 0 as target [ 2815.720017][T13866] do_syscall_64+0x44/0xd0 [ 2815.720042][T13866] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2815.735823][T13866] RIP: 0033:0x7f2d29acae99 [ 2815.740234][T13866] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 14:48:06 executing program 3: r0 = syz_io_uring_setup(0x2de5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000fe8000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000340)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000004040)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000140)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_CLOSE, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE, 0x0) r3 = socket$key(0xf, 0x3, 0x2) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_CLOSE={0x13, 0x4, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r4}}, 0xfffffffe) io_uring_enter(r0, 0xb2, 0x0, 0x0, 0x0, 0x7401) r5 = signalfd4(r0, &(0x7f0000000080)={[0x10001]}, 0x8, 0x800) r6 = socket$xdp(0x2c, 0x3, 0x0) r7 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_int(r7, 0x29, 0x9, &(0x7f0000000000)=0x8000004, 0x1b) setsockopt$inet6_MRT6_ADD_MFC(r7, 0x29, 0xc8, 0x0, 0x4) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r7, 0x29, 0xc9, 0x0, 0x0) r8 = socket$kcm(0x29, 0x2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[r5, r6, r7, r8], 0x4, 0x0, 0x1}, 0x100) [ 2815.759851][T13866] RSP: 002b:00007f2d28c41168 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 2815.768332][T13866] RAX: ffffffffffffffda RBX: 00007f2d29bddf60 RCX: 00007f2d29acae99 [ 2815.776383][T13866] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 2815.784443][T13866] RBP: 00007f2d28c411d0 R08: 0000000000000000 R09: 0000000000000000 [ 2815.792466][T13866] R10: 0000000000201000 R11: 0000000000000246 R12: 0000000000000002 [ 2815.800465][T13866] R13: 00007ffcc1d93fdf R14: 00007f2d28c41300 R15: 0000000000022000 [ 2815.806813][T14094] Cannot find add_set index 0 as target [ 2815.808514][T13866] 14:48:07 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x2) write$evdev(r1, &(0x7f000004d000)=[{}], 0xfffffe82) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/sco\x00') 14:48:07 executing program 5: clone(0x80910b00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) set_mempolicy(0x3, &(0x7f0000000040)=0xffffffff80000001, 0x400) gettid() r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, &(0x7f0000000080)=ANY=[@ANYBLOB="7549f8187a2a6e40594b4473692aef0dda6d1a46f2019ed7e86b1d711c76877056283bedab9579d2125c7cad3b1f28c963b3a626ef87b075574ff5612ccc80d8e14883ad2a8e6516a15c410ce005b2e841ebacd55a1365c685244ec3b66b003e7ec96ed005906d578130183c37"]) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x2, 0x3, 0x2d8, 0x190, 0x190, 0x95ffffff, 0x77, 0x93ffffff, 0x240, 0x240, 0x221, 0x240, 0x240, 0x3, 0x0, {[{{@uncond, 0x0, 0x130, 0x190, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "bdc74c01369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa6ecab6b1d2cc05e3182f64694d7d05fb8b8c8f56627a54f905d564eeeb8334f650ca0f3c44f7fda4d20a55050342ea85ecc8838e7088de33582f36a0a375bb7008adc297a5ece1bb2df53d17bef26bb6f800", 0x7f, 0x2}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0x40000000]}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'veth0_to_batadv\x00', 'ip6gretap0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x338) 14:48:07 executing program 2: clone(0x80910b00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) set_mempolicy(0x3, &(0x7f0000000040), 0x0) gettid() r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x2, 0x3, 0x2d8, 0x190, 0x190, 0x95ffffff, 0x77, 0x93ffffff, 0x240, 0x240, 0x221, 0x240, 0x240, 0x3, 0x0, {[{{@uncond, 0x0, 0x130, 0x190, 0x0, {0xd000000000000000}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "bdc74c01369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa6ecab6b1d2cc05e3182f64694d7d05fb8b8c8f56627a54f905d564eeeb8334f650ca0f3c44f7fda4d20a55050342ea85ecc8838e7088de33582f36a0a375bb7008adc297a5ece1bb2df53d17bef26bb6f800", 0x7f}}]}, @common=@SET={0x60}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'veth0_to_batadv\x00', 'ip6gretap0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x338) 14:48:07 executing program 1: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) ftruncate(r1, 0x2007fff) close(r0) open(&(0x7f00000002c0)='./bus\x00', 0x14d842, 0x0) sendfile(r0, r1, 0x0, 0x7ffff000) 14:48:07 executing program 3: r0 = syz_io_uring_setup(0x2de5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000fe8000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000340)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd_index}, 0x0) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000004040)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000140)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_CLOSE, 0x0) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE, 0x0) (async) r3 = socket$key(0xf, 0x3, 0x2) (async) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_CLOSE={0x13, 0x4, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r4}}, 0xfffffffe) (async) io_uring_enter(r0, 0xb2, 0x0, 0x0, 0x0, 0x7401) (async) r5 = signalfd4(r0, &(0x7f0000000080)={[0x10001]}, 0x8, 0x800) (async) r6 = socket$xdp(0x2c, 0x3, 0x0) (async) r7 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_int(r7, 0x29, 0x9, &(0x7f0000000000)=0x8000004, 0x1b) setsockopt$inet6_MRT6_ADD_MFC(r7, 0x29, 0xc8, 0x0, 0x4) (async) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r7, 0x29, 0xc9, 0x0, 0x0) (async) r8 = socket$kcm(0x29, 0x2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[r5, r6, r7, r8], 0x4, 0x0, 0x1}, 0x100) 14:48:07 executing program 4: r0 = socket$inet6(0xa, 0x400000000001, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) ftruncate(r1, 0x2007fff) close(r0) open(&(0x7f00000002c0)='./bus\x00', 0x14d842, 0x0) sendfile(r0, r1, 0x0, 0x201000) (fail_nth: 45) 14:48:07 executing program 2: clone(0x80910b00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) set_mempolicy(0x3, &(0x7f0000000040), 0x0) gettid() r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x2, 0x3, 0x2d8, 0x190, 0x190, 0x95ffffff, 0x77, 0x93ffffff, 0x240, 0x240, 0x221, 0x240, 0x240, 0x3, 0x0, {[{{@uncond, 0x0, 0x130, 0x190, 0x0, {0xd101000000000000}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "bdc74c01369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa6ecab6b1d2cc05e3182f64694d7d05fb8b8c8f56627a54f905d564eeeb8334f650ca0f3c44f7fda4d20a55050342ea85ecc8838e7088de33582f36a0a375bb7008adc297a5ece1bb2df53d17bef26bb6f800", 0x7f}}]}, @common=@SET={0x60}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'veth0_to_batadv\x00', 'ip6gretap0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x338) [ 2816.624192][T14670] FAULT_INJECTION: forcing a failure. [ 2816.624192][T14670] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2816.637556][T14670] CPU: 0 PID: 14670 Comm: syz-executor.4 Tainted: G W 5.16.0-rc6-syzkaller #0 [ 2816.647712][T14670] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2816.657766][T14670] Call Trace: [ 2816.657776][T14670] [ 2816.657864][T14670] dump_stack_lvl+0xd6/0x122 [ 2816.657891][T14670] dump_stack+0x11/0x1b [ 2816.672892][T14670] should_fail+0x23c/0x250 [ 2816.677360][T14670] __alloc_pages+0x102/0x330 [ 2816.678147][T14689] Cannot find add_set index 0 as target [ 2816.681989][T14670] alloc_pages+0x382/0x3d0 [ 2816.682014][T14670] folio_alloc+0x1a/0x20 [ 2816.696209][T14670] filemap_alloc_folio+0x53/0xf0 [ 2816.696240][T14670] page_cache_ra_unbounded+0x1c0/0x430 [ 2816.706619][T14670] ondemand_readahead+0x4f8/0x700 [ 2816.711663][T14670] ? filemap_get_read_batch+0x3e2/0x410 [ 2816.717235][T14670] page_cache_async_ra+0xed/0x120 14:48:07 executing program 2: clone(0x80910b00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) set_mempolicy(0x3, &(0x7f0000000040), 0x0) gettid() r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x2, 0x3, 0x2d8, 0x190, 0x190, 0x95ffffff, 0x77, 0x93ffffff, 0x240, 0x240, 0x221, 0x240, 0x240, 0x3, 0x0, {[{{@uncond, 0x0, 0x130, 0x190, 0x0, {0xd102000000000000}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "bdc74c01369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa6ecab6b1d2cc05e3182f64694d7d05fb8b8c8f56627a54f905d564eeeb8334f650ca0f3c44f7fda4d20a55050342ea85ecc8838e7088de33582f36a0a375bb7008adc297a5ece1bb2df53d17bef26bb6f800", 0x7f}}]}, @common=@SET={0x60}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'veth0_to_batadv\x00', 'ip6gretap0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x338) [ 2816.722366][T14670] filemap_read+0x500/0x16d0 [ 2816.726993][T14670] generic_file_read_iter+0x72/0x2a0 [ 2816.727025][T14670] ? iov_iter_pipe+0x100/0x150 [ 2816.727051][T14670] ? ext4_file_read_iter+0x7a/0x1f0 [ 2816.727073][T14670] generic_file_splice_read+0x24f/0x330 [ 2816.727102][T14670] ? splice_shrink_spd+0x60/0x60 [ 2816.727190][T14670] splice_direct_to_actor+0x2aa/0x650 [ 2816.758309][T14670] ? do_splice_direct+0x190/0x190 [ 2816.763405][T14670] do_splice_direct+0x106/0x190 [ 2816.768288][T14670] do_sendfile+0x675/0xc40 [ 2816.772764][T14670] __x64_sys_sendfile64+0x102/0x140 [ 2816.778009][T14670] do_syscall_64+0x44/0xd0 [ 2816.782435][T14670] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2816.788336][T14670] RIP: 0033:0x7f2d29acae99 [ 2816.792756][T14670] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2816.812380][T14670] RSP: 002b:00007f2d28c41168 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 2816.820874][T14670] RAX: ffffffffffffffda RBX: 00007f2d29bddf60 RCX: 00007f2d29acae99 [ 2816.820893][T14670] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 2816.820907][T14670] RBP: 00007f2d28c411d0 R08: 0000000000000000 R09: 0000000000000000 [ 2816.820991][T14670] R10: 0000000000201000 R11: 0000000000000246 R12: 0000000000000002 [ 2816.821072][T14670] R13: 00007ffcc1d93fdf R14: 00007f2d28c41300 R15: 0000000000022000 [ 2816.821090][T14670] [ 2816.822026][T14693] Cannot find add_set index 0 as target 14:48:07 executing program 2: clone(0x80910b00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) set_mempolicy(0x3, &(0x7f0000000040), 0x0) gettid() r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x2, 0x3, 0x2d8, 0x190, 0x190, 0x95ffffff, 0x77, 0x93ffffff, 0x240, 0x240, 0x221, 0x240, 0x240, 0x3, 0x0, {[{{@uncond, 0x0, 0x130, 0x190, 0x0, {0xd201000000000000}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "bdc74c01369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa6ecab6b1d2cc05e3182f64694d7d05fb8b8c8f56627a54f905d564eeeb8334f650ca0f3c44f7fda4d20a55050342ea85ecc8838e7088de33582f36a0a375bb7008adc297a5ece1bb2df53d17bef26bb6f800", 0x7f}}]}, @common=@SET={0x60}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'veth0_to_batadv\x00', 'ip6gretap0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x338) 14:48:07 executing program 5: clone(0x80910b00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) set_mempolicy(0x3, &(0x7f0000000040)=0xffffffff80000001, 0x400) gettid() r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, &(0x7f0000000080)=ANY=[@ANYBLOB="7549f8187a2a6e40594b4473692aef0dda6d1a46f2019ed7e86b1d711c76877056283bedab9579d2125c7cad3b1f28c963b3a626ef87b075574ff5612ccc80d8e14883ad2a8e6516a15c410ce005b2e841ebacd55a1365c685244ec3b66b003e7ec96ed005906d578130183c37"]) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x2, 0x3, 0x2d8, 0x190, 0x190, 0x95ffffff, 0x77, 0x93ffffff, 0x240, 0x240, 0x221, 0x240, 0x240, 0x3, 0x0, {[{{@uncond, 0x0, 0x130, 0x190, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "bdc74c01369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa6ecab6b1d2cc05e3182f64694d7d05fb8b8c8f56627a54f905d564eeeb8334f650ca0f3c44f7fda4d20a55050342ea85ecc8838e7088de33582f36a0a375bb7008adc297a5ece1bb2df53d17bef26bb6f800", 0x7f, 0x2}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0x40020000]}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'veth0_to_batadv\x00', 'ip6gretap0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x338) [ 2816.826459][T14684] Cannot find add_set index 0 as target 14:48:07 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x2) write$evdev(r1, &(0x7f000004d000)=[{}], 0xfffffe82) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/sco\x00') 14:48:07 executing program 2: clone(0x80910b00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) set_mempolicy(0x3, &(0x7f0000000040), 0x0) gettid() r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x2, 0x3, 0x2d8, 0x190, 0x190, 0x95ffffff, 0x77, 0x93ffffff, 0x240, 0x240, 0x221, 0x240, 0x240, 0x3, 0x0, {[{{@uncond, 0x0, 0x130, 0x190, 0x0, {0xd2ffffff00000000}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "bdc74c01369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa6ecab6b1d2cc05e3182f64694d7d05fb8b8c8f56627a54f905d564eeeb8334f650ca0f3c44f7fda4d20a55050342ea85ecc8838e7088de33582f36a0a375bb7008adc297a5ece1bb2df53d17bef26bb6f800", 0x7f}}]}, @common=@SET={0x60}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'veth0_to_batadv\x00', 'ip6gretap0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x338) 14:48:07 executing program 3: r0 = syz_io_uring_setup(0x2de5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000fe8000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000340)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd_index}, 0x0) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000004040)=@IORING_OP_SYNC_FILE_RANGE, 0x0) (async, rerun: 32) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000140)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) (rerun: 32) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_CLOSE, 0x0) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE, 0x0) r3 = socket$key(0xf, 0x3, 0x2) (async, rerun: 32) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) (rerun: 32) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_CLOSE={0x13, 0x4, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r4}}, 0xfffffffe) (async) io_uring_enter(r0, 0xb2, 0x0, 0x0, 0x0, 0x7401) (async, rerun: 32) r5 = signalfd4(r0, &(0x7f0000000080)={[0x10001]}, 0x8, 0x800) (async, rerun: 32) r6 = socket$xdp(0x2c, 0x3, 0x0) r7 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_int(r7, 0x29, 0x9, &(0x7f0000000000)=0x8000004, 0x1b) setsockopt$inet6_MRT6_ADD_MFC(r7, 0x29, 0xc8, 0x0, 0x4) (async) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r7, 0x29, 0xc9, 0x0, 0x0) r8 = socket$kcm(0x29, 0x2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[r5, r6, r7, r8], 0x4, 0x0, 0x1}, 0x100) 14:48:07 executing program 5: clone(0x80910b00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) set_mempolicy(0x3, &(0x7f0000000040)=0xffffffff80000001, 0x400) gettid() r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, &(0x7f0000000080)=ANY=[@ANYBLOB="7549f8187a2a6e40594b4473692aef0dda6d1a46f2019ed7e86b1d711c76877056283bedab9579d2125c7cad3b1f28c963b3a626ef87b075574ff5612ccc80d8e14883ad2a8e6516a15c410ce005b2e841ebacd55a1365c685244ec3b66b003e7ec96ed005906d578130183c37"]) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x2, 0x3, 0x2d8, 0x190, 0x190, 0x95ffffff, 0x77, 0x93ffffff, 0x240, 0x240, 0x221, 0x240, 0x240, 0x3, 0x0, {[{{@uncond, 0x0, 0x130, 0x190, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "bdc74c01369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa6ecab6b1d2cc05e3182f64694d7d05fb8b8c8f56627a54f905d564eeeb8334f650ca0f3c44f7fda4d20a55050342ea85ecc8838e7088de33582f36a0a375bb7008adc297a5ece1bb2df53d17bef26bb6f800", 0x7f, 0x2}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0x40030000]}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'veth0_to_batadv\x00', 'ip6gretap0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x338) [ 2816.916672][T14736] Cannot find add_set index 0 as target 14:48:07 executing program 2: clone(0x80910b00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) set_mempolicy(0x3, &(0x7f0000000040), 0x0) gettid() r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x2, 0x3, 0x2d8, 0x190, 0x190, 0x95ffffff, 0x77, 0x93ffffff, 0x240, 0x240, 0x221, 0x240, 0x240, 0x3, 0x0, {[{{@uncond, 0x0, 0x130, 0x190, 0x0, {0xd5ffffff00000000}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "bdc74c01369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa6ecab6b1d2cc05e3182f64694d7d05fb8b8c8f56627a54f905d564eeeb8334f650ca0f3c44f7fda4d20a55050342ea85ecc8838e7088de33582f36a0a375bb7008adc297a5ece1bb2df53d17bef26bb6f800", 0x7f}}]}, @common=@SET={0x60}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'veth0_to_batadv\x00', 'ip6gretap0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x338) 14:48:08 executing program 2: clone(0x80910b00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) set_mempolicy(0x3, &(0x7f0000000040), 0x0) gettid() r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x2, 0x3, 0x2d8, 0x190, 0x190, 0x95ffffff, 0x77, 0x93ffffff, 0x240, 0x240, 0x221, 0x240, 0x240, 0x3, 0x0, {[{{@uncond, 0x0, 0x130, 0x190, 0x0, {0xd601000000000000}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "bdc74c01369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa6ecab6b1d2cc05e3182f64694d7d05fb8b8c8f56627a54f905d564eeeb8334f650ca0f3c44f7fda4d20a55050342ea85ecc8838e7088de33582f36a0a375bb7008adc297a5ece1bb2df53d17bef26bb6f800", 0x7f}}]}, @common=@SET={0x60}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'veth0_to_batadv\x00', 'ip6gretap0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x338) 14:48:08 executing program 5: clone(0x80910b00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) set_mempolicy(0x3, &(0x7f0000000040)=0xffffffff80000001, 0x400) gettid() r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, &(0x7f0000000080)=ANY=[@ANYBLOB="7549f8187a2a6e40594b4473692aef0dda6d1a46f2019ed7e86b1d711c76877056283bedab9579d2125c7cad3b1f28c963b3a626ef87b075574ff5612ccc80d8e14883ad2a8e6516a15c410ce005b2e841ebacd55a1365c685244ec3b66b003e7ec96ed005906d578130183c37"]) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x2, 0x3, 0x2d8, 0x190, 0x190, 0x95ffffff, 0x77, 0x93ffffff, 0x240, 0x240, 0x221, 0x240, 0x240, 0x3, 0x0, {[{{@uncond, 0x0, 0x130, 0x190, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "bdc74c01369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa6ecab6b1d2cc05e3182f64694d7d05fb8b8c8f56627a54f905d564eeeb8334f650ca0f3c44f7fda4d20a55050342ea85ecc8838e7088de33582f36a0a375bb7008adc297a5ece1bb2df53d17bef26bb6f800", 0x7f, 0x2}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0x41000000]}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'veth0_to_batadv\x00', 'ip6gretap0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x338) 14:48:08 executing program 3: r0 = syz_io_uring_setup(0x2de5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000fe8000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x0) r3 = mmap$IORING_OFF_SQES(&(0x7f0000fe8000/0x1000)=nil, 0x1000, 0x1, 0x810, r0, 0x10000000) r4 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_int(r4, 0x29, 0xd1, &(0x7f0000000000)=0x4, 0x4) setsockopt$inet6_MRT6_ADD_MFC(r4, 0x29, 0xc8, 0x0, 0x4) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r6 = socket$inet6(0xa, 0x3, 0x2c) connect$inet6(r6, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r6, 0x29, 0x7, &(0x7f0000000080)=0x2, 0x4) splice(r5, 0x0, r6, 0x0, 0x4ff9c, 0x0) r7 = io_uring_setup(0x2096, &(0x7f0000000000)) io_uring_register$IORING_REGISTER_PERSONALITY(r7, 0x9, 0x0, 0x0) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r7, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r7, 0x13, 0x20000000, r8) syz_io_uring_submit(0x0, r2, &(0x7f0000000180)=@IORING_OP_OPENAT={0x12, 0x3, 0x0, r5, 0x0, &(0x7f0000000100)='./file0\x00', 0x13, 0x2000, 0x23456, {0x0, r8}}, 0x5f96d28c) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r4, 0x29, 0xc9, 0x0, 0x0) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000080)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd=r4, 0x9, {0x0, r0}, 0x44d8, 0x0, 0x0, {0x0, r9, r0}}, 0x429b) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0xb2, 0x0, 0x0, 0x0, 0x7401) 14:48:08 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x2) write$evdev(r1, &(0x7f000004d000)=[{}], 0xfffffe82) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/sco\x00') 14:48:08 executing program 4: r0 = socket$inet6(0xa, 0x400000000001, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) ftruncate(r1, 0x2007fff) close(r0) open(&(0x7f00000002c0)='./bus\x00', 0x14d842, 0x0) sendfile(r0, r1, 0x0, 0x201000) (fail_nth: 46) 14:48:08 executing program 1: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) ftruncate(r1, 0x2007fff) close(r0) open(&(0x7f00000002c0)='./bus\x00', 0x14d842, 0x0) sendfile(r0, r1, 0x0, 0xffffffff000) 14:48:08 executing program 2: clone(0x80910b00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) set_mempolicy(0x3, &(0x7f0000000040), 0x0) gettid() r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x2, 0x3, 0x2d8, 0x190, 0x190, 0x95ffffff, 0x77, 0x93ffffff, 0x240, 0x240, 0x221, 0x240, 0x240, 0x3, 0x0, {[{{@uncond, 0x0, 0x130, 0x190, 0x0, {0xd700000000000000}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "bdc74c01369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa6ecab6b1d2cc05e3182f64694d7d05fb8b8c8f56627a54f905d564eeeb8334f650ca0f3c44f7fda4d20a55050342ea85ecc8838e7088de33582f36a0a375bb7008adc297a5ece1bb2df53d17bef26bb6f800", 0x7f}}]}, @common=@SET={0x60}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'veth0_to_batadv\x00', 'ip6gretap0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x338) 14:48:08 executing program 2: clone(0x80910b00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) set_mempolicy(0x3, &(0x7f0000000040), 0x0) gettid() r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x2, 0x3, 0x2d8, 0x190, 0x190, 0x95ffffff, 0x77, 0x93ffffff, 0x240, 0x240, 0x221, 0x240, 0x240, 0x3, 0x0, {[{{@uncond, 0x0, 0x130, 0x190, 0x0, {0xd801000000000000}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "bdc74c01369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa6ecab6b1d2cc05e3182f64694d7d05fb8b8c8f56627a54f905d564eeeb8334f650ca0f3c44f7fda4d20a55050342ea85ecc8838e7088de33582f36a0a375bb7008adc297a5ece1bb2df53d17bef26bb6f800", 0x7f}}]}, @common=@SET={0x60}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'veth0_to_batadv\x00', 'ip6gretap0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x338) [ 2817.497425][T14914] FAULT_INJECTION: forcing a failure. [ 2817.497425][T14914] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2817.510776][T14914] CPU: 0 PID: 14914 Comm: syz-executor.4 Tainted: G W 5.16.0-rc6-syzkaller #0 [ 2817.521112][T14914] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2817.531267][T14914] Call Trace: [ 2817.534646][T14914] [ 2817.537580][T14914] dump_stack_lvl+0xd6/0x122 [ 2817.542418][T14914] dump_stack+0x11/0x1b 14:48:08 executing program 2: clone(0x80910b00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) set_mempolicy(0x3, &(0x7f0000000040), 0x0) gettid() r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x2, 0x3, 0x2d8, 0x190, 0x190, 0x95ffffff, 0x77, 0x93ffffff, 0x240, 0x240, 0x221, 0x240, 0x240, 0x3, 0x0, {[{{@uncond, 0x0, 0x130, 0x190, 0x0, {0xd901000000000000}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "bdc74c01369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa6ecab6b1d2cc05e3182f64694d7d05fb8b8c8f56627a54f905d564eeeb8334f650ca0f3c44f7fda4d20a55050342ea85ecc8838e7088de33582f36a0a375bb7008adc297a5ece1bb2df53d17bef26bb6f800", 0x7f}}]}, @common=@SET={0x60}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'veth0_to_batadv\x00', 'ip6gretap0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x338) 14:48:08 executing program 2: clone(0x80910b00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) set_mempolicy(0x3, &(0x7f0000000040), 0x0) gettid() r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x2, 0x3, 0x2d8, 0x190, 0x190, 0x95ffffff, 0x77, 0x93ffffff, 0x240, 0x240, 0x221, 0x240, 0x240, 0x3, 0x0, {[{{@uncond, 0x0, 0x130, 0x190, 0x0, {0xda02000000000000}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "bdc74c01369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa6ecab6b1d2cc05e3182f64694d7d05fb8b8c8f56627a54f905d564eeeb8334f650ca0f3c44f7fda4d20a55050342ea85ecc8838e7088de33582f36a0a375bb7008adc297a5ece1bb2df53d17bef26bb6f800", 0x7f}}]}, @common=@SET={0x60}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'veth0_to_batadv\x00', 'ip6gretap0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x338) [ 2817.546590][T14914] should_fail+0x23c/0x250 [ 2817.551038][T14914] __alloc_pages+0x102/0x330 [ 2817.555654][T14914] alloc_pages+0x382/0x3d0 [ 2817.560145][T14914] folio_alloc+0x1a/0x20 [ 2817.564477][T14914] filemap_alloc_folio+0x53/0xf0 [ 2817.569510][T14914] page_cache_ra_unbounded+0x1c0/0x430 [ 2817.569551][T14914] ondemand_readahead+0x4f8/0x700 [ 2817.569576][T14914] ? filemap_get_read_batch+0x3e2/0x410 [ 2817.569676][T14914] page_cache_async_ra+0xed/0x120 [ 2817.569700][T14914] filemap_read+0x500/0x16d0 14:48:08 executing program 2: clone(0x80910b00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) set_mempolicy(0x3, &(0x7f0000000040), 0x0) gettid() r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x2, 0x3, 0x2d8, 0x190, 0x190, 0x95ffffff, 0x77, 0x93ffffff, 0x240, 0x240, 0x221, 0x240, 0x240, 0x3, 0x0, {[{{@uncond, 0x0, 0x130, 0x190, 0x0, {0xdb01000000000000}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "bdc74c01369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa6ecab6b1d2cc05e3182f64694d7d05fb8b8c8f56627a54f905d564eeeb8334f650ca0f3c44f7fda4d20a55050342ea85ecc8838e7088de33582f36a0a375bb7008adc297a5ece1bb2df53d17bef26bb6f800", 0x7f}}]}, @common=@SET={0x60}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'veth0_to_batadv\x00', 'ip6gretap0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x338) [ 2817.569768][T14914] generic_file_read_iter+0x72/0x2a0 [ 2817.569791][T14914] ? iov_iter_pipe+0x100/0x150 [ 2817.569812][T14914] ? ext4_file_read_iter+0x7a/0x1f0 [ 2817.569837][T14914] generic_file_splice_read+0x24f/0x330 [ 2817.569862][T14914] ? splice_shrink_spd+0x60/0x60 [ 2817.569883][T14914] splice_direct_to_actor+0x2aa/0x650 [ 2817.569904][T14914] ? do_splice_direct+0x190/0x190 [ 2817.569929][T14914] do_splice_direct+0x106/0x190 [ 2817.570016][T14914] do_sendfile+0x675/0xc40 [ 2817.570118][T14914] __x64_sys_sendfile64+0x102/0x140 14:48:08 executing program 2: clone(0x80910b00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) set_mempolicy(0x3, &(0x7f0000000040), 0x0) gettid() r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x2, 0x3, 0x2d8, 0x190, 0x190, 0x95ffffff, 0x77, 0x93ffffff, 0x240, 0x240, 0x221, 0x240, 0x240, 0x3, 0x0, {[{{@uncond, 0x0, 0x130, 0x190, 0x0, {0xde00000000000000}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "bdc74c01369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa6ecab6b1d2cc05e3182f64694d7d05fb8b8c8f56627a54f905d564eeeb8334f650ca0f3c44f7fda4d20a55050342ea85ecc8838e7088de33582f36a0a375bb7008adc297a5ece1bb2df53d17bef26bb6f800", 0x7f}}]}, @common=@SET={0x60}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'veth0_to_batadv\x00', 'ip6gretap0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x338) 14:48:08 executing program 5: clone(0x80910b00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) set_mempolicy(0x3, &(0x7f0000000040)=0xffffffff80000001, 0x400) gettid() r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, &(0x7f0000000080)=ANY=[@ANYBLOB="7549f8187a2a6e40594b4473692aef0dda6d1a46f2019ed7e86b1d711c76877056283bedab9579d2125c7cad3b1f28c963b3a626ef87b075574ff5612ccc80d8e14883ad2a8e6516a15c410ce005b2e841ebacd55a1365c685244ec3b66b003e7ec96ed005906d578130183c37"]) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x2, 0x3, 0x2d8, 0x190, 0x190, 0x95ffffff, 0x77, 0x93ffffff, 0x240, 0x240, 0x221, 0x240, 0x240, 0x3, 0x0, {[{{@uncond, 0x0, 0x130, 0x190, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "bdc74c01369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa6ecab6b1d2cc05e3182f64694d7d05fb8b8c8f56627a54f905d564eeeb8334f650ca0f3c44f7fda4d20a55050342ea85ecc8838e7088de33582f36a0a375bb7008adc297a5ece1bb2df53d17bef26bb6f800", 0x7f, 0x2}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0x42000000]}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'veth0_to_batadv\x00', 'ip6gretap0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x338) [ 2817.570141][T14914] do_syscall_64+0x44/0xd0 [ 2817.570224][T14914] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2817.570250][T14914] RIP: 0033:0x7f2d29acae99 [ 2817.570265][T14914] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2817.680959][T14914] RSP: 002b:00007f2d28c41168 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 14:48:08 executing program 1: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) ftruncate(r1, 0x2007fff) close(r0) open(&(0x7f00000002c0)='./bus\x00', 0x14d842, 0x0) sendfile(r0, r1, 0x0, 0xffffffffffffffff) [ 2817.680984][T14914] RAX: ffffffffffffffda RBX: 00007f2d29bddf60 RCX: 00007f2d29acae99 [ 2817.680998][T14914] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 2817.681011][T14914] RBP: 00007f2d28c411d0 R08: 0000000000000000 R09: 0000000000000000 [ 2817.681024][T14914] R10: 0000000000201000 R11: 0000000000000246 R12: 0000000000000002 14:48:08 executing program 3: r0 = syz_io_uring_setup(0x2de5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000fe8000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x0) r3 = mmap$IORING_OFF_SQES(&(0x7f0000fe8000/0x1000)=nil, 0x1000, 0x1, 0x810, r0, 0x10000000) (async) r4 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_int(r4, 0x29, 0xd1, &(0x7f0000000000)=0x4, 0x4) (async) setsockopt$inet6_MRT6_ADD_MFC(r4, 0x29, 0xc8, 0x0, 0x4) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r6 = socket$inet6(0xa, 0x3, 0x2c) connect$inet6(r6, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r6, 0x29, 0x7, &(0x7f0000000080)=0x2, 0x4) splice(r5, 0x0, r6, 0x0, 0x4ff9c, 0x0) r7 = io_uring_setup(0x2096, &(0x7f0000000000)) io_uring_register$IORING_REGISTER_PERSONALITY(r7, 0x9, 0x0, 0x0) (async) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r7, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r7, 0x13, 0x20000000, r8) (async) syz_io_uring_submit(0x0, r2, &(0x7f0000000180)=@IORING_OP_OPENAT={0x12, 0x3, 0x0, r5, 0x0, &(0x7f0000000100)='./file0\x00', 0x13, 0x2000, 0x23456, {0x0, r8}}, 0x5f96d28c) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r4, 0x29, 0xc9, 0x0, 0x0) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000080)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd=r4, 0x9, {0x0, r0}, 0x44d8, 0x0, 0x0, {0x0, r9, r0}}, 0x429b) (async) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) (async) io_uring_enter(r0, 0xb2, 0x0, 0x0, 0x0, 0x7401) 14:48:08 executing program 5: clone(0x80910b00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) set_mempolicy(0x3, &(0x7f0000000040)=0xffffffff80000001, 0x400) gettid() r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, &(0x7f0000000080)=ANY=[@ANYBLOB="7549f8187a2a6e40594b4473692aef0dda6d1a46f2019ed7e86b1d711c76877056283bedab9579d2125c7cad3b1f28c963b3a626ef87b075574ff5612ccc80d8e14883ad2a8e6516a15c410ce005b2e841ebacd55a1365c685244ec3b66b003e7ec96ed005906d578130183c37"]) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x2, 0x3, 0x2d8, 0x190, 0x190, 0x95ffffff, 0x77, 0x93ffffff, 0x240, 0x240, 0x221, 0x240, 0x240, 0x3, 0x0, {[{{@uncond, 0x0, 0x130, 0x190, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "bdc74c01369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa6ecab6b1d2cc05e3182f64694d7d05fb8b8c8f56627a54f905d564eeeb8334f650ca0f3c44f7fda4d20a55050342ea85ecc8838e7088de33582f36a0a375bb7008adc297a5ece1bb2df53d17bef26bb6f800", 0x7f, 0x2}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0x42020000]}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'veth0_to_batadv\x00', 'ip6gretap0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x338) 14:48:08 executing program 1: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) ftruncate(r1, 0x2007fff) close(r0) open(&(0x7f00000002c0)='./bus\x00', 0x14d842, 0x0) sendfile(r0, r1, 0x0, 0x201000) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r3 = socket$inet6(0xa, 0x3, 0x2c) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r3, 0x29, 0x7, &(0x7f0000000080)=0x2, 0x4) splice(r2, 0x0, r3, 0x0, 0x4ff9c, 0x0) write$P9_RMKDIR(r2, &(0x7f0000000000)={0x14, 0x49, 0x2, {0x40, 0x0, 0x1}}, 0x14) [ 2817.681037][T14914] R13: 00007ffcc1d93fdf R14: 00007f2d28c41300 R15: 0000000000022000 [ 2817.681056][T14914] 14:48:08 executing program 4: r0 = socket$inet6(0xa, 0x400000000001, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) ftruncate(r1, 0x2007fff) close(r0) open(&(0x7f00000002c0)='./bus\x00', 0x14d842, 0x0) sendfile(r0, r1, 0x0, 0x201000) (fail_nth: 47) 14:48:08 executing program 3: r0 = syz_io_uring_setup(0x2de5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000fe8000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x0) r3 = mmap$IORING_OFF_SQES(&(0x7f0000fe8000/0x1000)=nil, 0x1000, 0x1, 0x810, r0, 0x10000000) (async) r4 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_int(r4, 0x29, 0xd1, &(0x7f0000000000)=0x4, 0x4) setsockopt$inet6_MRT6_ADD_MFC(r4, 0x29, 0xc8, 0x0, 0x4) (async) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r6 = socket$inet6(0xa, 0x3, 0x2c) connect$inet6(r6, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r6, 0x29, 0x7, &(0x7f0000000080)=0x2, 0x4) splice(r5, 0x0, r6, 0x0, 0x4ff9c, 0x0) (async) r7 = io_uring_setup(0x2096, &(0x7f0000000000)) io_uring_register$IORING_REGISTER_PERSONALITY(r7, 0x9, 0x0, 0x0) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r7, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r7, 0x13, 0x20000000, r8) (async) syz_io_uring_submit(0x0, r2, &(0x7f0000000180)=@IORING_OP_OPENAT={0x12, 0x3, 0x0, r5, 0x0, &(0x7f0000000100)='./file0\x00', 0x13, 0x2000, 0x23456, {0x0, r8}}, 0x5f96d28c) (async) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r4, 0x29, 0xc9, 0x0, 0x0) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000080)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd=r4, 0x9, {0x0, r0}, 0x44d8, 0x0, 0x0, {0x0, r9, r0}}, 0x429b) (async) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) (async) io_uring_enter(r0, 0xb2, 0x0, 0x0, 0x0, 0x7401) 14:48:08 executing program 5: clone(0x80910b00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) set_mempolicy(0x3, &(0x7f0000000040)=0xffffffff80000001, 0x400) gettid() r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, &(0x7f0000000080)=ANY=[@ANYBLOB="7549f8187a2a6e40594b4473692aef0dda6d1a46f2019ed7e86b1d711c76877056283bedab9579d2125c7cad3b1f28c963b3a626ef87b075574ff5612ccc80d8e14883ad2a8e6516a15c410ce005b2e841ebacd55a1365c685244ec3b66b003e7ec96ed005906d578130183c37"]) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x2, 0x3, 0x2d8, 0x190, 0x190, 0x95ffffff, 0x77, 0x93ffffff, 0x240, 0x240, 0x221, 0x240, 0x240, 0x3, 0x0, {[{{@uncond, 0x0, 0x130, 0x190, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "bdc74c01369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa6ecab6b1d2cc05e3182f64694d7d05fb8b8c8f56627a54f905d564eeeb8334f650ca0f3c44f7fda4d20a55050342ea85ecc8838e7088de33582f36a0a375bb7008adc297a5ece1bb2df53d17bef26bb6f800", 0x7f, 0x2}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0x42030000]}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'veth0_to_batadv\x00', 'ip6gretap0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x338) 14:48:08 executing program 2: clone(0x80910b00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) set_mempolicy(0x3, &(0x7f0000000040), 0x0) gettid() r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x2, 0x3, 0x2d8, 0x190, 0x190, 0x95ffffff, 0x77, 0x93ffffff, 0x240, 0x240, 0x221, 0x240, 0x240, 0x3, 0x0, {[{{@uncond, 0x0, 0x130, 0x190, 0x0, {0xdeffffff00000000}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "bdc74c01369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa6ecab6b1d2cc05e3182f64694d7d05fb8b8c8f56627a54f905d564eeeb8334f650ca0f3c44f7fda4d20a55050342ea85ecc8838e7088de33582f36a0a375bb7008adc297a5ece1bb2df53d17bef26bb6f800", 0x7f}}]}, @common=@SET={0x60}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'veth0_to_batadv\x00', 'ip6gretap0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x338) 14:48:08 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/self/exe\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_int(r1, 0x29, 0xd1, &(0x7f0000000000)=0x4, 0x4) setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xc8, 0x0, 0x4) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r1, 0x29, 0xc9, 0x0, 0x0) r2 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_int(r2, 0x29, 0xd1, &(0x7f0000000000)=0x4, 0x4) setsockopt$inet6_MRT6_ADD_MFC(r2, 0x29, 0xc8, 0x0, 0x4) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r2, 0x29, 0xc9, 0x0, 0x0) setsockopt$inet6_MRT6_ADD_MFC(r2, 0x29, 0xcc, &(0x7f0000000040)={{0xa, 0x4e24, 0x100, @private0, 0x8}, {0xa, 0x4e20, 0xe00000, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x20}, 0x52, [0x8, 0x4, 0x3ff, 0xd22, 0x8000, 0x8001, 0xec3d, 0x10001]}, 0x5c) mmap(&(0x7f00007a6000/0x3000)=nil, 0x3000, 0xb, 0x40010, r1, 0x21fe7000) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) r3 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x2) write$evdev(r3, &(0x7f000004d000)=[{}], 0xfffffe82) 14:48:08 executing program 5: clone(0x80910b00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) set_mempolicy(0x3, &(0x7f0000000040)=0xffffffff80000001, 0x400) gettid() r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, &(0x7f0000000080)=ANY=[@ANYBLOB="7549f8187a2a6e40594b4473692aef0dda6d1a46f2019ed7e86b1d711c76877056283bedab9579d2125c7cad3b1f28c963b3a626ef87b075574ff5612ccc80d8e14883ad2a8e6516a15c410ce005b2e841ebacd55a1365c685244ec3b66b003e7ec96ed005906d578130183c37"]) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x2, 0x3, 0x2d8, 0x190, 0x190, 0x95ffffff, 0x77, 0x93ffffff, 0x240, 0x240, 0x221, 0x240, 0x240, 0x3, 0x0, {[{{@uncond, 0x0, 0x130, 0x190, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "bdc74c01369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa6ecab6b1d2cc05e3182f64694d7d05fb8b8c8f56627a54f905d564eeeb8334f650ca0f3c44f7fda4d20a55050342ea85ecc8838e7088de33582f36a0a375bb7008adc297a5ece1bb2df53d17bef26bb6f800", 0x7f, 0x2}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0x43000000]}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'veth0_to_batadv\x00', 'ip6gretap0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x338) 14:48:08 executing program 2: clone(0x80910b00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) set_mempolicy(0x3, &(0x7f0000000040), 0x0) gettid() r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x2, 0x3, 0x2d8, 0x190, 0x190, 0x95ffffff, 0x77, 0x93ffffff, 0x240, 0x240, 0x221, 0x240, 0x240, 0x3, 0x0, {[{{@uncond, 0x0, 0x130, 0x190, 0x0, {0xe001000000000000}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "bdc74c01369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa6ecab6b1d2cc05e3182f64694d7d05fb8b8c8f56627a54f905d564eeeb8334f650ca0f3c44f7fda4d20a55050342ea85ecc8838e7088de33582f36a0a375bb7008adc297a5ece1bb2df53d17bef26bb6f800", 0x7f}}]}, @common=@SET={0x60}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'veth0_to_batadv\x00', 'ip6gretap0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x338) [ 2817.992284][T15203] FAULT_INJECTION: forcing a failure. [ 2817.992284][T15203] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2818.005733][T15203] CPU: 0 PID: 15203 Comm: syz-executor.4 Tainted: G W 5.16.0-rc6-syzkaller #0 [ 2818.005814][T15203] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2818.005827][T15203] Call Trace: [ 2818.005833][T15203] [ 2818.005840][T15203] dump_stack_lvl+0xd6/0x122 [ 2818.005940][T15203] dump_stack+0x11/0x1b 14:48:08 executing program 5: clone(0x80910b00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) set_mempolicy(0x3, &(0x7f0000000040)=0xffffffff80000001, 0x400) gettid() r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, &(0x7f0000000080)=ANY=[@ANYBLOB="7549f8187a2a6e40594b4473692aef0dda6d1a46f2019ed7e86b1d711c76877056283bedab9579d2125c7cad3b1f28c963b3a626ef87b075574ff5612ccc80d8e14883ad2a8e6516a15c410ce005b2e841ebacd55a1365c685244ec3b66b003e7ec96ed005906d578130183c37"]) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x2, 0x3, 0x2d8, 0x190, 0x190, 0x95ffffff, 0x77, 0x93ffffff, 0x240, 0x240, 0x221, 0x240, 0x240, 0x3, 0x0, {[{{@uncond, 0x0, 0x130, 0x190, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "bdc74c01369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa6ecab6b1d2cc05e3182f64694d7d05fb8b8c8f56627a54f905d564eeeb8334f650ca0f3c44f7fda4d20a55050342ea85ecc8838e7088de33582f36a0a375bb7008adc297a5ece1bb2df53d17bef26bb6f800", 0x7f, 0x2}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0x43010000]}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'veth0_to_batadv\x00', 'ip6gretap0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x338) [ 2818.005957][T15203] should_fail+0x23c/0x250 [ 2818.005983][T15203] __alloc_pages+0x102/0x330 [ 2818.006012][T15203] alloc_pages+0x382/0x3d0 [ 2818.006104][T15203] folio_alloc+0x1a/0x20 [ 2818.006121][T15203] filemap_alloc_folio+0x53/0xf0 [ 2818.006143][T15203] page_cache_ra_unbounded+0x1c0/0x430 [ 2818.006170][T15203] ondemand_readahead+0x4f8/0x700 [ 2818.006238][T15203] ? filemap_get_read_batch+0x3e2/0x410 [ 2818.006264][T15203] page_cache_async_ra+0xed/0x120 [ 2818.006289][T15203] filemap_read+0x500/0x16d0 14:48:08 executing program 5: clone(0x80910b00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) set_mempolicy(0x3, &(0x7f0000000040)=0xffffffff80000001, 0x400) gettid() r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, &(0x7f0000000080)=ANY=[@ANYBLOB="7549f8187a2a6e40594b4473692aef0dda6d1a46f2019ed7e86b1d711c76877056283bedab9579d2125c7cad3b1f28c963b3a626ef87b075574ff5612ccc80d8e14883ad2a8e6516a15c410ce005b2e841ebacd55a1365c685244ec3b66b003e7ec96ed005906d578130183c37"]) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x2, 0x3, 0x2d8, 0x190, 0x190, 0x95ffffff, 0x77, 0x93ffffff, 0x240, 0x240, 0x221, 0x240, 0x240, 0x3, 0x0, {[{{@uncond, 0x0, 0x130, 0x190, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "bdc74c01369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa6ecab6b1d2cc05e3182f64694d7d05fb8b8c8f56627a54f905d564eeeb8334f650ca0f3c44f7fda4d20a55050342ea85ecc8838e7088de33582f36a0a375bb7008adc297a5ece1bb2df53d17bef26bb6f800", 0x7f, 0x2}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0x44000000]}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'veth0_to_batadv\x00', 'ip6gretap0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x338) 14:48:08 executing program 3: r0 = syz_io_uring_setup(0x2de5, &(0x7f0000000000)={0x0, 0x74e7, 0x0, 0x0, 0x20c, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000fe8000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) r3 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_int(r3, 0x29, 0xd1, &(0x7f0000000000)=0x4, 0x4) sendfile(r3, r0, &(0x7f0000000100)=0x3, 0x6) sendto$inet6(r3, &(0x7f0000000240)="84f726468637eb25259749a7ce786ff8b69923e4ae37aeb14443f86cd21f4dc578e83b59f372a7a9e861691bc2e70e017fa66e66437566ac41c3756f1efee44edc77b766fe210b07dbcfd9033304ec085a203e0a4c5d703fd1795c6460acaa16447e47fa043d2a956367ce694f629bd65cefcbc58fcf2e9f63a79a034cd1206454fe2aebce98b0fdf7ceb3baa9e547a08715bf9c9187835b6b358f02d102aa8bf6c653abdb0f1af98f18c949f0382ba3c97b4509c1d99983e3543001490a6f2775f4e89ca68bd2c774ebfea4c1725c0e24b913ee651c872d335bdc006e394845a967", 0xe2, 0x4040, &(0x7f0000000180)={0xa, 0x4e23, 0xbf, @dev={0xfe, 0x80, '\x00', 0x2b}, 0xff}, 0x1c) setsockopt$inet6_MRT6_ADD_MFC(r3, 0x29, 0xc8, 0x0, 0x4) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r3, 0x29, 0xc9, 0x0, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_SPLICE={0x1e, 0x2, 0x0, @fd_index, 0xba, {0x0, r3}, 0x5, 0x8, 0x0, {0x0, r4, r0}}, 0x1f) io_uring_enter(r0, 0xb2, 0x0, 0x0, 0x0, 0x7401) setsockopt$inet6_IPV6_DSTOPTS(r3, 0x29, 0x3b, &(0x7f0000000200)={0xc}, 0x8) setsockopt$inet6_MRT6_ADD_MFC(r3, 0x29, 0xcc, &(0x7f0000000340)={{0xa, 0x4e20, 0x400, @ipv4={'\x00', '\xff\xff', @private=0xa010100}, 0x7}, {0xa, 0x4e24, 0xfffffffd, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x4}, 0x0, [0xffffe673, 0x101, 0xfff, 0x4, 0x4, 0x1ff, 0x5, 0x3]}, 0x5c) [ 2818.006355][T15203] generic_file_read_iter+0x72/0x2a0 [ 2818.006378][T15203] ? iov_iter_pipe+0x100/0x150 [ 2818.006397][T15203] ? ext4_file_read_iter+0x7a/0x1f0 [ 2818.006417][T15203] generic_file_splice_read+0x24f/0x330 [ 2818.006443][T15203] ? splice_shrink_spd+0x60/0x60 [ 2818.006539][T15203] splice_direct_to_actor+0x2aa/0x650 [ 2818.006617][T15203] ? do_splice_direct+0x190/0x190 [ 2818.006642][T15203] do_splice_direct+0x106/0x190 [ 2818.006692][T15203] do_sendfile+0x675/0xc40 [ 2818.006712][T15203] __x64_sys_sendfile64+0x102/0x140 [ 2818.006732][T15203] do_syscall_64+0x44/0xd0 [ 2818.006752][T15203] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2818.006812][T15203] RIP: 0033:0x7f2d29acae99 [ 2818.006829][T15203] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2818.006848][T15203] RSP: 002b:00007f2d28c41168 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 2818.175750][T15203] RAX: ffffffffffffffda RBX: 00007f2d29bddf60 RCX: 00007f2d29acae99 14:48:08 executing program 2: clone(0x80910b00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) set_mempolicy(0x3, &(0x7f0000000040), 0x0) gettid() r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x2, 0x3, 0x2d8, 0x190, 0x190, 0x95ffffff, 0x77, 0x93ffffff, 0x240, 0x240, 0x221, 0x240, 0x240, 0x3, 0x0, {[{{@uncond, 0x0, 0x130, 0x190, 0x0, {0xe101000000000000}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "bdc74c01369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa6ecab6b1d2cc05e3182f64694d7d05fb8b8c8f56627a54f905d564eeeb8334f650ca0f3c44f7fda4d20a55050342ea85ecc8838e7088de33582f36a0a375bb7008adc297a5ece1bb2df53d17bef26bb6f800", 0x7f}}]}, @common=@SET={0x60}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'veth0_to_batadv\x00', 'ip6gretap0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x338) [ 2818.175764][T15203] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 2818.200207][T15203] RBP: 00007f2d28c411d0 R08: 0000000000000000 R09: 0000000000000000 [ 2818.200248][T15203] R10: 0000000000201000 R11: 0000000000000246 R12: 0000000000000002 [ 2818.216211][T15203] R13: 00007ffcc1d93fdf R14: 00007f2d28c41300 R15: 0000000000022000 [ 2818.224194][T15203] 14:48:09 executing program 1: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) ftruncate(r1, 0x2007fff) close(r0) open(&(0x7f00000002c0)='./bus\x00', 0x14d842, 0x0) sendfile(r0, r1, 0x0, 0x201000) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r3 = socket$inet6(0xa, 0x3, 0x2c) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r3, 0x29, 0x7, &(0x7f0000000080)=0x2, 0x4) splice(r2, 0x0, r3, 0x0, 0x4ff9c, 0x0) write$P9_RMKDIR(r2, &(0x7f0000000000)={0x14, 0x49, 0x2, {0x40, 0x0, 0x1}}, 0x14) socket$inet6(0xa, 0x400000000001, 0x0) (async) open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) (async) ftruncate(r1, 0x2007fff) (async) close(r0) (async) open(&(0x7f00000002c0)='./bus\x00', 0x14d842, 0x0) (async) sendfile(r0, r1, 0x0, 0x201000) (async) pipe(&(0x7f0000000180)) (async) socket$inet6(0xa, 0x3, 0x2c) (async) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) (async) setsockopt$inet6_int(r3, 0x29, 0x7, &(0x7f0000000080)=0x2, 0x4) (async) splice(r2, 0x0, r3, 0x0, 0x4ff9c, 0x0) (async) write$P9_RMKDIR(r2, &(0x7f0000000000)={0x14, 0x49, 0x2, {0x40, 0x0, 0x1}}, 0x14) (async) 14:48:09 executing program 5: clone(0x80910b00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) set_mempolicy(0x3, &(0x7f0000000040)=0xffffffff80000001, 0x400) gettid() r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, &(0x7f0000000080)=ANY=[@ANYBLOB="7549f8187a2a6e40594b4473692aef0dda6d1a46f2019ed7e86b1d711c76877056283bedab9579d2125c7cad3b1f28c963b3a626ef87b075574ff5612ccc80d8e14883ad2a8e6516a15c410ce005b2e841ebacd55a1365c685244ec3b66b003e7ec96ed005906d578130183c37"]) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x2, 0x3, 0x2d8, 0x190, 0x190, 0x95ffffff, 0x77, 0x93ffffff, 0x240, 0x240, 0x221, 0x240, 0x240, 0x3, 0x0, {[{{@uncond, 0x0, 0x130, 0x190, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "bdc74c01369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa6ecab6b1d2cc05e3182f64694d7d05fb8b8c8f56627a54f905d564eeeb8334f650ca0f3c44f7fda4d20a55050342ea85ecc8838e7088de33582f36a0a375bb7008adc297a5ece1bb2df53d17bef26bb6f800", 0x7f, 0x2}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0x45010000]}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'veth0_to_batadv\x00', 'ip6gretap0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x338) 14:48:09 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/self/exe\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_int(r1, 0x29, 0xd1, &(0x7f0000000000)=0x4, 0x4) setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xc8, 0x0, 0x4) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r1, 0x29, 0xc9, 0x0, 0x0) r2 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_int(r2, 0x29, 0xd1, &(0x7f0000000000)=0x4, 0x4) setsockopt$inet6_MRT6_ADD_MFC(r2, 0x29, 0xc8, 0x0, 0x4) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r2, 0x29, 0xc9, 0x0, 0x0) setsockopt$inet6_MRT6_ADD_MFC(r2, 0x29, 0xcc, &(0x7f0000000040)={{0xa, 0x4e24, 0x100, @private0, 0x8}, {0xa, 0x4e20, 0xe00000, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x20}, 0x52, [0x8, 0x4, 0x3ff, 0xd22, 0x8000, 0x8001, 0xec3d, 0x10001]}, 0x5c) mmap(&(0x7f00007a6000/0x3000)=nil, 0x3000, 0xb, 0x40010, r1, 0x21fe7000) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) r3 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x2) write$evdev(r3, &(0x7f000004d000)=[{}], 0xfffffe82) openat(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/self/exe\x00', 0x0, 0x0) (async) socket$inet6(0xa, 0x3, 0x3a) (async) setsockopt$inet6_int(r1, 0x29, 0xd1, &(0x7f0000000000)=0x4, 0x4) (async) setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xc8, 0x0, 0x4) (async) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r1, 0x29, 0xc9, 0x0, 0x0) (async) socket$inet6(0xa, 0x3, 0x3a) (async) setsockopt$inet6_int(r2, 0x29, 0xd1, &(0x7f0000000000)=0x4, 0x4) (async) setsockopt$inet6_MRT6_ADD_MFC(r2, 0x29, 0xc8, 0x0, 0x4) (async) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r2, 0x29, 0xc9, 0x0, 0x0) (async) setsockopt$inet6_MRT6_ADD_MFC(r2, 0x29, 0xcc, &(0x7f0000000040)={{0xa, 0x4e24, 0x100, @private0, 0x8}, {0xa, 0x4e20, 0xe00000, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x20}, 0x52, [0x8, 0x4, 0x3ff, 0xd22, 0x8000, 0x8001, 0xec3d, 0x10001]}, 0x5c) (async) mmap(&(0x7f00007a6000/0x3000)=nil, 0x3000, 0xb, 0x40010, r1, 0x21fe7000) (async) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) (async) syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x2) (async) write$evdev(r3, &(0x7f000004d000)=[{}], 0xfffffe82) (async) 14:48:09 executing program 3: r0 = syz_io_uring_setup(0x2de5, &(0x7f0000000000)={0x0, 0x74e7, 0x0, 0x0, 0x20c, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000fe8000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) (async) r3 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_int(r3, 0x29, 0xd1, &(0x7f0000000000)=0x4, 0x4) (async) sendfile(r3, r0, &(0x7f0000000100)=0x3, 0x6) sendto$inet6(r3, &(0x7f0000000240)="84f726468637eb25259749a7ce786ff8b69923e4ae37aeb14443f86cd21f4dc578e83b59f372a7a9e861691bc2e70e017fa66e66437566ac41c3756f1efee44edc77b766fe210b07dbcfd9033304ec085a203e0a4c5d703fd1795c6460acaa16447e47fa043d2a956367ce694f629bd65cefcbc58fcf2e9f63a79a034cd1206454fe2aebce98b0fdf7ceb3baa9e547a08715bf9c9187835b6b358f02d102aa8bf6c653abdb0f1af98f18c949f0382ba3c97b4509c1d99983e3543001490a6f2775f4e89ca68bd2c774ebfea4c1725c0e24b913ee651c872d335bdc006e394845a967", 0xe2, 0x4040, &(0x7f0000000180)={0xa, 0x4e23, 0xbf, @dev={0xfe, 0x80, '\x00', 0x2b}, 0xff}, 0x1c) (async) setsockopt$inet6_MRT6_ADD_MFC(r3, 0x29, 0xc8, 0x0, 0x4) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r3, 0x29, 0xc9, 0x0, 0x0) (async) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_SPLICE={0x1e, 0x2, 0x0, @fd_index, 0xba, {0x0, r3}, 0x5, 0x8, 0x0, {0x0, r4, r0}}, 0x1f) io_uring_enter(r0, 0xb2, 0x0, 0x0, 0x0, 0x7401) (async) setsockopt$inet6_IPV6_DSTOPTS(r3, 0x29, 0x3b, &(0x7f0000000200)={0xc}, 0x8) setsockopt$inet6_MRT6_ADD_MFC(r3, 0x29, 0xcc, &(0x7f0000000340)={{0xa, 0x4e20, 0x400, @ipv4={'\x00', '\xff\xff', @private=0xa010100}, 0x7}, {0xa, 0x4e24, 0xfffffffd, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x4}, 0x0, [0xffffe673, 0x101, 0xfff, 0x4, 0x4, 0x1ff, 0x5, 0x3]}, 0x5c) 14:48:09 executing program 2: clone(0x80910b00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) set_mempolicy(0x3, &(0x7f0000000040), 0x0) gettid() r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x2, 0x3, 0x2d8, 0x190, 0x190, 0x95ffffff, 0x77, 0x93ffffff, 0x240, 0x240, 0x221, 0x240, 0x240, 0x3, 0x0, {[{{@uncond, 0x0, 0x130, 0x190, 0x0, {0xe1ffffff00000000}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "bdc74c01369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa6ecab6b1d2cc05e3182f64694d7d05fb8b8c8f56627a54f905d564eeeb8334f650ca0f3c44f7fda4d20a55050342ea85ecc8838e7088de33582f36a0a375bb7008adc297a5ece1bb2df53d17bef26bb6f800", 0x7f}}]}, @common=@SET={0x60}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'veth0_to_batadv\x00', 'ip6gretap0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x338) 14:48:09 executing program 4: r0 = socket$inet6(0xa, 0x400000000001, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) ftruncate(r1, 0x2007fff) close(r0) open(&(0x7f00000002c0)='./bus\x00', 0x14d842, 0x0) sendfile(r0, r1, 0x0, 0x201000) (fail_nth: 48) 14:48:09 executing program 2: clone(0x80910b00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) set_mempolicy(0x3, &(0x7f0000000040), 0x0) gettid() r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x2, 0x3, 0x2d8, 0x190, 0x190, 0x95ffffff, 0x77, 0x93ffffff, 0x240, 0x240, 0x221, 0x240, 0x240, 0x3, 0x0, {[{{@uncond, 0x0, 0x130, 0x190, 0x0, {0xe201000000000000}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "bdc74c01369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa6ecab6b1d2cc05e3182f64694d7d05fb8b8c8f56627a54f905d564eeeb8334f650ca0f3c44f7fda4d20a55050342ea85ecc8838e7088de33582f36a0a375bb7008adc297a5ece1bb2df53d17bef26bb6f800", 0x7f}}]}, @common=@SET={0x60}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'veth0_to_batadv\x00', 'ip6gretap0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x338) 14:48:09 executing program 2: clone(0x80910b00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) set_mempolicy(0x3, &(0x7f0000000040), 0x0) gettid() r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x2, 0x3, 0x2d8, 0x190, 0x190, 0x95ffffff, 0x77, 0x93ffffff, 0x240, 0x240, 0x221, 0x240, 0x240, 0x3, 0x0, {[{{@uncond, 0x0, 0x130, 0x190, 0x0, {0xe301000000000000}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "bdc74c01369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa6ecab6b1d2cc05e3182f64694d7d05fb8b8c8f56627a54f905d564eeeb8334f650ca0f3c44f7fda4d20a55050342ea85ecc8838e7088de33582f36a0a375bb7008adc297a5ece1bb2df53d17bef26bb6f800", 0x7f}}]}, @common=@SET={0x60}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'veth0_to_batadv\x00', 'ip6gretap0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x338) [ 2818.685368][T15727] FAULT_INJECTION: forcing a failure. [ 2818.685368][T15727] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2818.698659][T15727] CPU: 0 PID: 15727 Comm: syz-executor.4 Tainted: G W 5.16.0-rc6-syzkaller #0 [ 2818.708967][T15727] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2818.719213][T15727] Call Trace: [ 2818.722498][T15727] [ 2818.725428][T15727] dump_stack_lvl+0xd6/0x122 [ 2818.730026][T15727] dump_stack+0x11/0x1b [ 2818.734264][T15727] should_fail+0x23c/0x250 [ 2818.738707][T15727] __alloc_pages+0x102/0x330 [ 2818.738739][T15727] alloc_pages+0x382/0x3d0 [ 2818.738758][T15727] folio_alloc+0x1a/0x20 [ 2818.738781][T15727] filemap_alloc_folio+0x53/0xf0 [ 2818.756913][T15727] page_cache_ra_unbounded+0x1c0/0x430 [ 2818.762457][T15727] ondemand_readahead+0x4f8/0x700 [ 2818.762483][T15727] ? filemap_get_read_batch+0x3e2/0x410 [ 2818.762573][T15727] page_cache_async_ra+0xed/0x120 [ 2818.762597][T15727] filemap_read+0x500/0x16d0 [ 2818.782845][T15727] generic_file_read_iter+0x72/0x2a0 [ 2818.788152][T15727] ? iov_iter_pipe+0x100/0x150 [ 2818.793051][T15727] ? ext4_file_read_iter+0x7a/0x1f0 [ 2818.798364][T15727] generic_file_splice_read+0x24f/0x330 [ 2818.798394][T15727] ? splice_shrink_spd+0x60/0x60 [ 2818.798415][T15727] splice_direct_to_actor+0x2aa/0x650 [ 2818.814438][T15727] ? do_splice_direct+0x190/0x190 [ 2818.814472][T15727] do_splice_direct+0x106/0x190 [ 2818.814497][T15727] do_sendfile+0x675/0xc40 [ 2818.828738][T15727] __x64_sys_sendfile64+0x102/0x140 [ 2818.828765][T15727] do_syscall_64+0x44/0xd0 [ 2818.838361][T15727] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2818.838387][T15727] RIP: 0033:0x7f2d29acae99 [ 2818.838402][T15727] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2818.838422][T15727] RSP: 002b:00007f2d28c41168 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 2818.868448][T15727] RAX: ffffffffffffffda RBX: 00007f2d29bddf60 RCX: 00007f2d29acae99 14:48:09 executing program 5: clone(0x80910b00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) set_mempolicy(0x3, &(0x7f0000000040)=0xffffffff80000001, 0x400) gettid() r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, &(0x7f0000000080)=ANY=[@ANYBLOB="7549f8187a2a6e40594b4473692aef0dda6d1a46f2019ed7e86b1d711c76877056283bedab9579d2125c7cad3b1f28c963b3a626ef87b075574ff5612ccc80d8e14883ad2a8e6516a15c410ce005b2e841ebacd55a1365c685244ec3b66b003e7ec96ed005906d578130183c37"]) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x2, 0x3, 0x2d8, 0x190, 0x190, 0x95ffffff, 0x77, 0x93ffffff, 0x240, 0x240, 0x221, 0x240, 0x240, 0x3, 0x0, {[{{@uncond, 0x0, 0x130, 0x190, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "bdc74c01369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa6ecab6b1d2cc05e3182f64694d7d05fb8b8c8f56627a54f905d564eeeb8334f650ca0f3c44f7fda4d20a55050342ea85ecc8838e7088de33582f36a0a375bb7008adc297a5ece1bb2df53d17bef26bb6f800", 0x7f, 0x2}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0x46010000]}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'veth0_to_batadv\x00', 'ip6gretap0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x338) 14:48:09 executing program 1: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) ftruncate(r1, 0x2007fff) (async) close(r0) (async) open(&(0x7f00000002c0)='./bus\x00', 0x14d842, 0x0) (async) sendfile(r0, r1, 0x0, 0x201000) (async) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r3 = socket$inet6(0xa, 0x3, 0x2c) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) (async) setsockopt$inet6_int(r3, 0x29, 0x7, &(0x7f0000000080)=0x2, 0x4) (async) splice(r2, 0x0, r3, 0x0, 0x4ff9c, 0x0) (async) write$P9_RMKDIR(r2, &(0x7f0000000000)={0x14, 0x49, 0x2, {0x40, 0x0, 0x1}}, 0x14) 14:48:09 executing program 2: clone(0x80910b00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) set_mempolicy(0x3, &(0x7f0000000040), 0x0) gettid() r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x2, 0x3, 0x2d8, 0x190, 0x190, 0x95ffffff, 0x77, 0x93ffffff, 0x240, 0x240, 0x221, 0x240, 0x240, 0x3, 0x0, {[{{@uncond, 0x0, 0x130, 0x190, 0x0, {0xe3ffffff00000000}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "bdc74c01369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa6ecab6b1d2cc05e3182f64694d7d05fb8b8c8f56627a54f905d564eeeb8334f650ca0f3c44f7fda4d20a55050342ea85ecc8838e7088de33582f36a0a375bb7008adc297a5ece1bb2df53d17bef26bb6f800", 0x7f}}]}, @common=@SET={0x60}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'veth0_to_batadv\x00', 'ip6gretap0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x338) 14:48:09 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/self/exe\x00', 0x0, 0x0) (async) r1 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_int(r1, 0x29, 0xd1, &(0x7f0000000000)=0x4, 0x4) (async) setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xc8, 0x0, 0x4) (async) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r1, 0x29, 0xc9, 0x0, 0x0) (async) r2 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_int(r2, 0x29, 0xd1, &(0x7f0000000000)=0x4, 0x4) setsockopt$inet6_MRT6_ADD_MFC(r2, 0x29, 0xc8, 0x0, 0x4) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r2, 0x29, 0xc9, 0x0, 0x0) setsockopt$inet6_MRT6_ADD_MFC(r2, 0x29, 0xcc, &(0x7f0000000040)={{0xa, 0x4e24, 0x100, @private0, 0x8}, {0xa, 0x4e20, 0xe00000, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x20}, 0x52, [0x8, 0x4, 0x3ff, 0xd22, 0x8000, 0x8001, 0xec3d, 0x10001]}, 0x5c) (async) mmap(&(0x7f00007a6000/0x3000)=nil, 0x3000, 0xb, 0x40010, r1, 0x21fe7000) (async) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) r3 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x2) write$evdev(r3, &(0x7f000004d000)=[{}], 0xfffffe82) 14:48:09 executing program 3: r0 = syz_io_uring_setup(0x2de5, &(0x7f0000000000)={0x0, 0x74e7, 0x0, 0x0, 0x20c, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000fe8000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) r3 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_int(r3, 0x29, 0xd1, &(0x7f0000000000)=0x4, 0x4) sendfile(r3, r0, &(0x7f0000000100)=0x3, 0x6) sendto$inet6(r3, &(0x7f0000000240)="84f726468637eb25259749a7ce786ff8b69923e4ae37aeb14443f86cd21f4dc578e83b59f372a7a9e861691bc2e70e017fa66e66437566ac41c3756f1efee44edc77b766fe210b07dbcfd9033304ec085a203e0a4c5d703fd1795c6460acaa16447e47fa043d2a956367ce694f629bd65cefcbc58fcf2e9f63a79a034cd1206454fe2aebce98b0fdf7ceb3baa9e547a08715bf9c9187835b6b358f02d102aa8bf6c653abdb0f1af98f18c949f0382ba3c97b4509c1d99983e3543001490a6f2775f4e89ca68bd2c774ebfea4c1725c0e24b913ee651c872d335bdc006e394845a967", 0xe2, 0x4040, &(0x7f0000000180)={0xa, 0x4e23, 0xbf, @dev={0xfe, 0x80, '\x00', 0x2b}, 0xff}, 0x1c) setsockopt$inet6_MRT6_ADD_MFC(r3, 0x29, 0xc8, 0x0, 0x4) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r3, 0x29, 0xc9, 0x0, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_SPLICE={0x1e, 0x2, 0x0, @fd_index, 0xba, {0x0, r3}, 0x5, 0x8, 0x0, {0x0, r4, r0}}, 0x1f) io_uring_enter(r0, 0xb2, 0x0, 0x0, 0x0, 0x7401) setsockopt$inet6_IPV6_DSTOPTS(r3, 0x29, 0x3b, &(0x7f0000000200)={0xc}, 0x8) setsockopt$inet6_MRT6_ADD_MFC(r3, 0x29, 0xcc, &(0x7f0000000340)={{0xa, 0x4e20, 0x400, @ipv4={'\x00', '\xff\xff', @private=0xa010100}, 0x7}, {0xa, 0x4e24, 0xfffffffd, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x4}, 0x0, [0xffffe673, 0x101, 0xfff, 0x4, 0x4, 0x1ff, 0x5, 0x3]}, 0x5c) syz_io_uring_setup(0x2de5, &(0x7f0000000000)={0x0, 0x74e7, 0x0, 0x0, 0x20c, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000fe8000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000140)) (async) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) (async) socket$inet6(0xa, 0x3, 0x3a) (async) setsockopt$inet6_int(r3, 0x29, 0xd1, &(0x7f0000000000)=0x4, 0x4) (async) sendfile(r3, r0, &(0x7f0000000100)=0x3, 0x6) (async) sendto$inet6(r3, &(0x7f0000000240)="84f726468637eb25259749a7ce786ff8b69923e4ae37aeb14443f86cd21f4dc578e83b59f372a7a9e861691bc2e70e017fa66e66437566ac41c3756f1efee44edc77b766fe210b07dbcfd9033304ec085a203e0a4c5d703fd1795c6460acaa16447e47fa043d2a956367ce694f629bd65cefcbc58fcf2e9f63a79a034cd1206454fe2aebce98b0fdf7ceb3baa9e547a08715bf9c9187835b6b358f02d102aa8bf6c653abdb0f1af98f18c949f0382ba3c97b4509c1d99983e3543001490a6f2775f4e89ca68bd2c774ebfea4c1725c0e24b913ee651c872d335bdc006e394845a967", 0xe2, 0x4040, &(0x7f0000000180)={0xa, 0x4e23, 0xbf, @dev={0xfe, 0x80, '\x00', 0x2b}, 0xff}, 0x1c) (async) setsockopt$inet6_MRT6_ADD_MFC(r3, 0x29, 0xc8, 0x0, 0x4) (async) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r3, 0x29, 0xc9, 0x0, 0x0) (async) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) (async) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_SPLICE={0x1e, 0x2, 0x0, @fd_index, 0xba, {0x0, r3}, 0x5, 0x8, 0x0, {0x0, r4, r0}}, 0x1f) (async) io_uring_enter(r0, 0xb2, 0x0, 0x0, 0x0, 0x7401) (async) setsockopt$inet6_IPV6_DSTOPTS(r3, 0x29, 0x3b, &(0x7f0000000200)={0xc}, 0x8) (async) setsockopt$inet6_MRT6_ADD_MFC(r3, 0x29, 0xcc, &(0x7f0000000340)={{0xa, 0x4e20, 0x400, @ipv4={'\x00', '\xff\xff', @private=0xa010100}, 0x7}, {0xa, 0x4e24, 0xfffffffd, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x4}, 0x0, [0xffffe673, 0x101, 0xfff, 0x4, 0x4, 0x1ff, 0x5, 0x3]}, 0x5c) (async) [ 2818.868463][T15727] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 2818.868495][T15727] RBP: 00007f2d28c411d0 R08: 0000000000000000 R09: 0000000000000000 [ 2818.901053][T15727] R10: 0000000000201000 R11: 0000000000000246 R12: 0000000000000002 [ 2818.901073][T15727] R13: 00007ffcc1d93fdf R14: 00007f2d28c41300 R15: 0000000000022000 [ 2818.917142][T15727] 14:48:09 executing program 5: clone(0x80910b00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) set_mempolicy(0x3, &(0x7f0000000040)=0xffffffff80000001, 0x400) gettid() r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, &(0x7f0000000080)=ANY=[@ANYBLOB="7549f8187a2a6e40594b4473692aef0dda6d1a46f2019ed7e86b1d711c76877056283bedab9579d2125c7cad3b1f28c963b3a626ef87b075574ff5612ccc80d8e14883ad2a8e6516a15c410ce005b2e841ebacd55a1365c685244ec3b66b003e7ec96ed005906d578130183c37"]) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x2, 0x3, 0x2d8, 0x190, 0x190, 0x95ffffff, 0x77, 0x93ffffff, 0x240, 0x240, 0x221, 0x240, 0x240, 0x3, 0x0, {[{{@uncond, 0x0, 0x130, 0x190, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "bdc74c01369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa6ecab6b1d2cc05e3182f64694d7d05fb8b8c8f56627a54f905d564eeeb8334f650ca0f3c44f7fda4d20a55050342ea85ecc8838e7088de33582f36a0a375bb7008adc297a5ece1bb2df53d17bef26bb6f800", 0x7f, 0x2}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0x48000000]}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'veth0_to_batadv\x00', 'ip6gretap0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x338) 14:48:09 executing program 2: clone(0x80910b00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) set_mempolicy(0x3, &(0x7f0000000040), 0x0) gettid() r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x2, 0x3, 0x2d8, 0x190, 0x190, 0x95ffffff, 0x77, 0x93ffffff, 0x240, 0x240, 0x221, 0x240, 0x240, 0x3, 0x0, {[{{@uncond, 0x0, 0x130, 0x190, 0x0, {0xe800000000000000}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "bdc74c01369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa6ecab6b1d2cc05e3182f64694d7d05fb8b8c8f56627a54f905d564eeeb8334f650ca0f3c44f7fda4d20a55050342ea85ecc8838e7088de33582f36a0a375bb7008adc297a5ece1bb2df53d17bef26bb6f800", 0x7f}}]}, @common=@SET={0x60}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'veth0_to_batadv\x00', 'ip6gretap0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x338) 14:48:09 executing program 1: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) ftruncate(r1, 0x2007fff) close(r0) open(&(0x7f0000000000)='./bus\x00', 0x55d840, 0x0) sendfile(r0, r1, 0x0, 0x201000) 14:48:09 executing program 2: clone(0x80910b00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) set_mempolicy(0x3, &(0x7f0000000040), 0x0) gettid() r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x2, 0x3, 0x2d8, 0x190, 0x190, 0x95ffffff, 0x77, 0x93ffffff, 0x240, 0x240, 0x221, 0x240, 0x240, 0x3, 0x0, {[{{@uncond, 0x0, 0x130, 0x190, 0x0, {0xe902000000000000}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "bdc74c01369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa6ecab6b1d2cc05e3182f64694d7d05fb8b8c8f56627a54f905d564eeeb8334f650ca0f3c44f7fda4d20a55050342ea85ecc8838e7088de33582f36a0a375bb7008adc297a5ece1bb2df53d17bef26bb6f800", 0x7f}}]}, @common=@SET={0x60}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'veth0_to_batadv\x00', 'ip6gretap0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x338) 14:48:09 executing program 4: r0 = socket$inet6(0xa, 0x400000000001, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) ftruncate(r1, 0x2007fff) close(r0) open(&(0x7f00000002c0)='./bus\x00', 0x14d842, 0x0) sendfile(r0, r1, 0x0, 0x201000) (fail_nth: 49) 14:48:09 executing program 1: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) ftruncate(r1, 0x2007fff) close(r0) open(&(0x7f0000000000)='./bus\x00', 0x55d840, 0x0) sendfile(r0, r1, 0x0, 0x201000) socket$inet6(0xa, 0x400000000001, 0x0) (async) open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) (async) ftruncate(r1, 0x2007fff) (async) close(r0) (async) open(&(0x7f0000000000)='./bus\x00', 0x55d840, 0x0) (async) sendfile(r0, r1, 0x0, 0x201000) (async) 14:48:09 executing program 5: clone(0x80910b00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) set_mempolicy(0x3, &(0x7f0000000040)=0xffffffff80000001, 0x400) gettid() r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, &(0x7f0000000080)=ANY=[@ANYBLOB="7549f8187a2a6e40594b4473692aef0dda6d1a46f2019ed7e86b1d711c76877056283bedab9579d2125c7cad3b1f28c963b3a626ef87b075574ff5612ccc80d8e14883ad2a8e6516a15c410ce005b2e841ebacd55a1365c685244ec3b66b003e7ec96ed005906d578130183c37"]) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x2, 0x3, 0x2d8, 0x190, 0x190, 0x95ffffff, 0x77, 0x93ffffff, 0x240, 0x240, 0x221, 0x240, 0x240, 0x3, 0x0, {[{{@uncond, 0x0, 0x130, 0x190, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "bdc74c01369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa6ecab6b1d2cc05e3182f64694d7d05fb8b8c8f56627a54f905d564eeeb8334f650ca0f3c44f7fda4d20a55050342ea85ecc8838e7088de33582f36a0a375bb7008adc297a5ece1bb2df53d17bef26bb6f800", 0x7f, 0x2}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0x48020000]}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'veth0_to_batadv\x00', 'ip6gretap0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x338) 14:48:09 executing program 2: clone(0x80910b00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) set_mempolicy(0x3, &(0x7f0000000040), 0x0) gettid() r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x2, 0x3, 0x2d8, 0x190, 0x190, 0x95ffffff, 0x77, 0x93ffffff, 0x240, 0x240, 0x221, 0x240, 0x240, 0x3, 0x0, {[{{@uncond, 0x0, 0x130, 0x190, 0x0, {0xea00000000000000}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "bdc74c01369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa6ecab6b1d2cc05e3182f64694d7d05fb8b8c8f56627a54f905d564eeeb8334f650ca0f3c44f7fda4d20a55050342ea85ecc8838e7088de33582f36a0a375bb7008adc297a5ece1bb2df53d17bef26bb6f800", 0x7f}}]}, @common=@SET={0x60}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'veth0_to_batadv\x00', 'ip6gretap0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x338) 14:48:09 executing program 3: r0 = syz_io_uring_setup(0x2de5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000fe8000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0xb2, 0x0, 0x0, 0x0, 0x7401) r3 = socket$tipc(0x1e, 0x5, 0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r3, 0x8983, &(0x7f0000000080)) 14:48:09 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000080)=ANY=[], 0x2bb98205) write$P9_RREADLINK(r1, &(0x7f0000000180)={0x10, 0x17, 0x1, {0x7, './file0'}}, 0x10) finit_module(r1, &(0x7f0000000140)='\x00', 0x0) write$P9_RREMOVE(r0, &(0x7f0000000040)={0x7, 0x7b, 0x1}, 0x7) write$P9_RGETATTR(r0, &(0x7f0000000080)={0xa0, 0x19, 0x1, {0x2403, {0x2, 0x3, 0x3}, 0x110, 0xee01, 0xee00, 0x1, 0x5, 0x3ff, 0x6a27, 0x800, 0x80000000, 0x7, 0x6, 0x3ff, 0xf870, 0x7fffffff, 0x8001, 0x1, 0xfffffffffffffffd, 0x1f}}, 0xa0) r2 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x2) write$evdev(r2, &(0x7f000004d000)=[{}], 0xfffffe82) 14:48:09 executing program 5: clone(0x80910b00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) set_mempolicy(0x3, &(0x7f0000000040)=0xffffffff80000001, 0x400) gettid() r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, &(0x7f0000000080)=ANY=[@ANYBLOB="7549f8187a2a6e40594b4473692aef0dda6d1a46f2019ed7e86b1d711c76877056283bedab9579d2125c7cad3b1f28c963b3a626ef87b075574ff5612ccc80d8e14883ad2a8e6516a15c410ce005b2e841ebacd55a1365c685244ec3b66b003e7ec96ed005906d578130183c37"]) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x2, 0x3, 0x2d8, 0x190, 0x190, 0x95ffffff, 0x77, 0x93ffffff, 0x240, 0x240, 0x221, 0x240, 0x240, 0x3, 0x0, {[{{@uncond, 0x0, 0x130, 0x190, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "bdc74c01369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa6ecab6b1d2cc05e3182f64694d7d05fb8b8c8f56627a54f905d564eeeb8334f650ca0f3c44f7fda4d20a55050342ea85ecc8838e7088de33582f36a0a375bb7008adc297a5ece1bb2df53d17bef26bb6f800", 0x7f, 0x2}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0x49000000]}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'veth0_to_batadv\x00', 'ip6gretap0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x338) 14:48:09 executing program 5: clone(0x80910b00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) set_mempolicy(0x3, &(0x7f0000000040)=0xffffffff80000001, 0x400) gettid() r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, &(0x7f0000000080)=ANY=[@ANYBLOB="7549f8187a2a6e40594b4473692aef0dda6d1a46f2019ed7e86b1d711c76877056283bedab9579d2125c7cad3b1f28c963b3a626ef87b075574ff5612ccc80d8e14883ad2a8e6516a15c410ce005b2e841ebacd55a1365c685244ec3b66b003e7ec96ed005906d578130183c37"]) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x2, 0x3, 0x2d8, 0x190, 0x190, 0x95ffffff, 0x77, 0x93ffffff, 0x240, 0x240, 0x221, 0x240, 0x240, 0x3, 0x0, {[{{@uncond, 0x0, 0x130, 0x190, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "bdc74c01369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa6ecab6b1d2cc05e3182f64694d7d05fb8b8c8f56627a54f905d564eeeb8334f650ca0f3c44f7fda4d20a55050342ea85ecc8838e7088de33582f36a0a375bb7008adc297a5ece1bb2df53d17bef26bb6f800", 0x7f, 0x2}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0x49020000]}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'veth0_to_batadv\x00', 'ip6gretap0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x338) 14:48:09 executing program 2: clone(0x80910b00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) set_mempolicy(0x3, &(0x7f0000000040), 0x0) gettid() r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x2, 0x3, 0x2d8, 0x190, 0x190, 0x95ffffff, 0x77, 0x93ffffff, 0x240, 0x240, 0x221, 0x240, 0x240, 0x3, 0x0, {[{{@uncond, 0x0, 0x130, 0x190, 0x0, {0xeaffffff00000000}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "bdc74c01369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa6ecab6b1d2cc05e3182f64694d7d05fb8b8c8f56627a54f905d564eeeb8334f650ca0f3c44f7fda4d20a55050342ea85ecc8838e7088de33582f36a0a375bb7008adc297a5ece1bb2df53d17bef26bb6f800", 0x7f}}]}, @common=@SET={0x60}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'veth0_to_batadv\x00', 'ip6gretap0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x338) 14:48:09 executing program 1: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) ftruncate(r1, 0x2007fff) close(r0) open(&(0x7f0000000000)='./bus\x00', 0x55d840, 0x0) sendfile(r0, r1, 0x0, 0x201000) socket$inet6(0xa, 0x400000000001, 0x0) (async) open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) (async) ftruncate(r1, 0x2007fff) (async) close(r0) (async) open(&(0x7f0000000000)='./bus\x00', 0x55d840, 0x0) (async) sendfile(r0, r1, 0x0, 0x201000) (async) [ 2819.299961][T16453] FAULT_INJECTION: forcing a failure. [ 2819.299961][T16453] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2819.313505][T16453] CPU: 0 PID: 16453 Comm: syz-executor.4 Tainted: G W 5.16.0-rc6-syzkaller #0 [ 2819.323673][T16453] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2819.333828][T16453] Call Trace: [ 2819.337120][T16453] [ 2819.340057][T16453] dump_stack_lvl+0xd6/0x122 [ 2819.344660][T16453] dump_stack+0x11/0x1b [ 2819.348818][T16453] should_fail+0x23c/0x250 [ 2819.353241][T16453] __alloc_pages+0x102/0x330 [ 2819.357979][T16453] alloc_pages+0x382/0x3d0 [ 2819.362528][T16453] folio_alloc+0x1a/0x20 [ 2819.366854][T16453] filemap_alloc_folio+0x53/0xf0 [ 2819.371871][T16453] page_cache_ra_unbounded+0x1c0/0x430 [ 2819.377335][T16453] ondemand_readahead+0x4f8/0x700 [ 2819.382388][T16453] ? filemap_get_read_batch+0x3e2/0x410 [ 2819.388107][T16453] page_cache_async_ra+0xed/0x120 [ 2819.393304][T16453] filemap_read+0x500/0x16d0 [ 2819.397904][T16453] generic_file_read_iter+0x72/0x2a0 [ 2819.403270][T16453] ? iov_iter_pipe+0x100/0x150 [ 2819.408046][T16453] ? ext4_file_read_iter+0x7a/0x1f0 [ 2819.413245][T16453] generic_file_splice_read+0x24f/0x330 [ 2819.418901][T16453] ? splice_shrink_spd+0x60/0x60 [ 2819.423849][T16453] splice_direct_to_actor+0x2aa/0x650 [ 2819.429268][T16453] ? do_splice_direct+0x190/0x190 [ 2819.434333][T16453] do_splice_direct+0x106/0x190 [ 2819.439321][T16453] do_sendfile+0x675/0xc40 [ 2819.443743][T16453] __x64_sys_sendfile64+0x102/0x140 [ 2819.448949][T16453] do_syscall_64+0x44/0xd0 [ 2819.453476][T16453] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2819.459457][T16453] RIP: 0033:0x7f2d29acae99 [ 2819.463872][T16453] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2819.483745][T16453] RSP: 002b:00007f2d28c41168 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 2819.492261][T16453] RAX: ffffffffffffffda RBX: 00007f2d29bddf60 RCX: 00007f2d29acae99 14:48:10 executing program 2: clone(0x80910b00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) set_mempolicy(0x3, &(0x7f0000000040), 0x0) gettid() r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x2, 0x3, 0x2d8, 0x190, 0x190, 0x95ffffff, 0x77, 0x93ffffff, 0x240, 0x240, 0x221, 0x240, 0x240, 0x3, 0x0, {[{{@uncond, 0x0, 0x130, 0x190, 0x0, {0xebffffff00000000}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "bdc74c01369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa6ecab6b1d2cc05e3182f64694d7d05fb8b8c8f56627a54f905d564eeeb8334f650ca0f3c44f7fda4d20a55050342ea85ecc8838e7088de33582f36a0a375bb7008adc297a5ece1bb2df53d17bef26bb6f800", 0x7f}}]}, @common=@SET={0x60}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'veth0_to_batadv\x00', 'ip6gretap0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x338) 14:48:10 executing program 5: clone(0x80910b00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) set_mempolicy(0x3, &(0x7f0000000040)=0xffffffff80000001, 0x400) gettid() r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, &(0x7f0000000080)=ANY=[@ANYBLOB="7549f8187a2a6e40594b4473692aef0dda6d1a46f2019ed7e86b1d711c76877056283bedab9579d2125c7cad3b1f28c963b3a626ef87b075574ff5612ccc80d8e14883ad2a8e6516a15c410ce005b2e841ebacd55a1365c685244ec3b66b003e7ec96ed005906d578130183c37"]) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x2, 0x3, 0x2d8, 0x190, 0x190, 0x95ffffff, 0x77, 0x93ffffff, 0x240, 0x240, 0x221, 0x240, 0x240, 0x3, 0x0, {[{{@uncond, 0x0, 0x130, 0x190, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "bdc74c01369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa6ecab6b1d2cc05e3182f64694d7d05fb8b8c8f56627a54f905d564eeeb8334f650ca0f3c44f7fda4d20a55050342ea85ecc8838e7088de33582f36a0a375bb7008adc297a5ece1bb2df53d17bef26bb6f800", 0x7f, 0x2}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0x4a000000]}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'veth0_to_batadv\x00', 'ip6gretap0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x338) [ 2819.500238][T16453] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 2819.508318][T16453] RBP: 00007f2d28c411d0 R08: 0000000000000000 R09: 0000000000000000 [ 2819.516291][T16453] R10: 0000000000201000 R11: 0000000000000246 R12: 0000000000000002 [ 2819.524432][T16453] R13: 00007ffcc1d93fdf R14: 00007f2d28c41300 R15: 0000000000022000 [ 2819.532519][T16453] 14:48:10 executing program 4: r0 = socket$inet6(0xa, 0x400000000001, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) ftruncate(r1, 0x2007fff) close(r0) open(&(0x7f00000002c0)='./bus\x00', 0x14d842, 0x0) sendfile(r0, r1, 0x0, 0x201000) (fail_nth: 50) 14:48:10 executing program 1: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) ftruncate(r1, 0x2007fff) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0xd1, &(0x7f0000000000)=0x4, 0x4) setsockopt$inet6_MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xc8, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x4e22, 0x1f, @dev={0xfe, 0x80, '\x00', 0x3f}, 0x101}, 0x1c) close(r0) open(&(0x7f00000002c0)='./bus\x00', 0x14d842, 0x12) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r3 = socket$inet6(0xa, 0x3, 0x2c) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r3, 0x29, 0x7, &(0x7f0000000080)=0x2, 0x4) setsockopt$inet6_int(r1, 0x29, 0x4b, &(0x7f0000000140)=0x1ff, 0x4) splice(r2, 0x0, r3, 0x0, 0x4ff9c, 0x0) r4 = openat$cgroup_ro(r2, &(0x7f0000000080)='blkio.throttle.io_serviced\x00', 0x0, 0x0) r5 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) finit_module(r5, &(0x7f00000001c0)='\x00A\xf1S\xda\xc0%`\xbc\xd9\xd8\x8c\x9d\x8d\xf1y\xa4$\xa1\xfc\xd6\xad42\xe8\x19\xa9\x84\x9d\xdfd\x93J\a\\-\xbd\x83y\xa3;\xb2\x95BX\xf0\x1f<\xa7\xf9w\xf0\x8e\xdc\x9d\xb29%F\v~\xe6 \x14.\xcf\xf1^/-D\x84\x87\x98\xfb\x1eotU\xdbV\xdb\xb0<\xd8(\xc4(!e\x9d\xc5v\x85|\x13\x89\x1fO\xfb#A~O\xeem\xee\x16QF\x8a\xd8\n\xeent\xccm\xc6u#0\xbbk\xa6F\xf5\\\xaas%\x9fg\xb8\x8e!.\x12\xe7z\xcb\xbb\xd2@\xe6y\xb4', 0xcc2d1be59dab4ed3) openat$pfkey(0xffffffffffffff9c, &(0x7f00000000c0), 0x284882, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f0000000300)) sendfile(r0, r1, 0x0, 0x201000) 14:48:10 executing program 3: r0 = syz_io_uring_setup(0x2de5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000fe8000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0xb2, 0x0, 0x0, 0x0, 0x7401) (async) r3 = socket$tipc(0x1e, 0x5, 0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r3, 0x8983, &(0x7f0000000080)) 14:48:10 executing program 2: clone(0x80910b00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) set_mempolicy(0x3, &(0x7f0000000040), 0x0) gettid() r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x2, 0x3, 0x2d8, 0x190, 0x190, 0x95ffffff, 0x77, 0x93ffffff, 0x240, 0x240, 0x221, 0x240, 0x240, 0x3, 0x0, {[{{@uncond, 0x0, 0x130, 0x190, 0x0, {0xecffffff00000000}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "bdc74c01369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa6ecab6b1d2cc05e3182f64694d7d05fb8b8c8f56627a54f905d564eeeb8334f650ca0f3c44f7fda4d20a55050342ea85ecc8838e7088de33582f36a0a375bb7008adc297a5ece1bb2df53d17bef26bb6f800", 0x7f}}]}, @common=@SET={0x60}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'veth0_to_batadv\x00', 'ip6gretap0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x338) 14:48:10 executing program 5: clone(0x80910b00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) set_mempolicy(0x3, &(0x7f0000000040)=0xffffffff80000001, 0x400) gettid() r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, &(0x7f0000000080)=ANY=[@ANYBLOB="7549f8187a2a6e40594b4473692aef0dda6d1a46f2019ed7e86b1d711c76877056283bedab9579d2125c7cad3b1f28c963b3a626ef87b075574ff5612ccc80d8e14883ad2a8e6516a15c410ce005b2e841ebacd55a1365c685244ec3b66b003e7ec96ed005906d578130183c37"]) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x2, 0x3, 0x2d8, 0x190, 0x190, 0x95ffffff, 0x77, 0x93ffffff, 0x240, 0x240, 0x221, 0x240, 0x240, 0x3, 0x0, {[{{@uncond, 0x0, 0x130, 0x190, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "bdc74c01369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa6ecab6b1d2cc05e3182f64694d7d05fb8b8c8f56627a54f905d564eeeb8334f650ca0f3c44f7fda4d20a55050342ea85ecc8838e7088de33582f36a0a375bb7008adc297a5ece1bb2df53d17bef26bb6f800", 0x7f, 0x2}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0x4a010000]}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'veth0_to_batadv\x00', 'ip6gretap0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x338) [ 2819.759043][T18623] FAULT_INJECTION: forcing a failure. [ 2819.759043][T18623] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2819.772419][T18623] CPU: 0 PID: 18623 Comm: syz-executor.4 Tainted: G W 5.16.0-rc6-syzkaller #0 [ 2819.783102][T18623] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2819.793282][T18623] Call Trace: [ 2819.796558][T18623] [ 2819.799630][T18623] dump_stack_lvl+0xd6/0x122 [ 2819.804236][T18623] dump_stack+0x11/0x1b [ 2819.808392][T18623] should_fail+0x23c/0x250 [ 2819.812805][T18623] __alloc_pages+0x102/0x330 [ 2819.817385][T18623] alloc_pages+0x382/0x3d0 [ 2819.821789][T18623] folio_alloc+0x1a/0x20 [ 2819.826059][T18623] filemap_alloc_folio+0x53/0xf0 [ 2819.831007][T18623] page_cache_ra_unbounded+0x1c0/0x430 [ 2819.836452][T18623] ondemand_readahead+0x4f8/0x700 [ 2819.841525][T18623] ? filemap_get_read_batch+0x3e2/0x410 [ 2819.847132][T18623] page_cache_async_ra+0xed/0x120 [ 2819.852158][T18623] filemap_read+0x500/0x16d0 [ 2819.856736][T18623] generic_file_read_iter+0x72/0x2a0 [ 2819.862086][T18623] ? iov_iter_pipe+0x100/0x150 [ 2819.866950][T18623] ? ext4_file_read_iter+0x7a/0x1f0 [ 2819.872271][T18623] generic_file_splice_read+0x24f/0x330 [ 2819.877984][T18623] ? splice_shrink_spd+0x60/0x60 [ 2819.882921][T18623] splice_direct_to_actor+0x2aa/0x650 [ 2819.888304][T18623] ? do_splice_direct+0x190/0x190 [ 2819.893319][T18623] do_splice_direct+0x106/0x190 [ 2819.898395][T18623] do_sendfile+0x675/0xc40 [ 2819.902806][T18623] __x64_sys_sendfile64+0x102/0x140 [ 2819.907993][T18623] do_syscall_64+0x44/0xd0 [ 2819.912425][T18623] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2819.918401][T18623] RIP: 0033:0x7f2d29acae99 [ 2819.922797][T18623] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2819.942416][T18623] RSP: 002b:00007f2d28c41168 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 2819.950825][T18623] RAX: ffffffffffffffda RBX: 00007f2d29bddf60 RCX: 00007f2d29acae99 [ 2819.958879][T18623] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 2819.967357][T18623] RBP: 00007f2d28c411d0 R08: 0000000000000000 R09: 0000000000000000 [ 2819.975429][T18623] R10: 0000000000201000 R11: 0000000000000246 R12: 0000000000000002 [ 2819.983387][T18623] R13: 00007ffcc1d93fdf R14: 00007f2d28c41300 R15: 0000000000022000 [ 2819.991638][T18623] 14:48:10 executing program 5: clone(0x80910b00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) set_mempolicy(0x3, &(0x7f0000000040)=0xffffffff80000001, 0x400) gettid() r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, &(0x7f0000000080)=ANY=[@ANYBLOB="7549f8187a2a6e40594b4473692aef0dda6d1a46f2019ed7e86b1d711c76877056283bedab9579d2125c7cad3b1f28c963b3a626ef87b075574ff5612ccc80d8e14883ad2a8e6516a15c410ce005b2e841ebacd55a1365c685244ec3b66b003e7ec96ed005906d578130183c37"]) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x2, 0x3, 0x2d8, 0x190, 0x190, 0x95ffffff, 0x77, 0x93ffffff, 0x240, 0x240, 0x221, 0x240, 0x240, 0x3, 0x0, {[{{@uncond, 0x0, 0x130, 0x190, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "bdc74c01369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa6ecab6b1d2cc05e3182f64694d7d05fb8b8c8f56627a54f905d564eeeb8334f650ca0f3c44f7fda4d20a55050342ea85ecc8838e7088de33582f36a0a375bb7008adc297a5ece1bb2df53d17bef26bb6f800", 0x7f, 0x2}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0x4b000000]}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'veth0_to_batadv\x00', 'ip6gretap0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x338) 14:48:10 executing program 2: clone(0x80910b00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) set_mempolicy(0x3, &(0x7f0000000040), 0x0) gettid() r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x2, 0x3, 0x2d8, 0x190, 0x190, 0x95ffffff, 0x77, 0x93ffffff, 0x240, 0x240, 0x221, 0x240, 0x240, 0x3, 0x0, {[{{@uncond, 0x0, 0x130, 0x190, 0x0, {0xeeffffff00000000}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "bdc74c01369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa6ecab6b1d2cc05e3182f64694d7d05fb8b8c8f56627a54f905d564eeeb8334f650ca0f3c44f7fda4d20a55050342ea85ecc8838e7088de33582f36a0a375bb7008adc297a5ece1bb2df53d17bef26bb6f800", 0x7f}}]}, @common=@SET={0x60}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'veth0_to_batadv\x00', 'ip6gretap0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x338) 14:48:10 executing program 3: r0 = syz_io_uring_setup(0x2de5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000fe8000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0xb2, 0x0, 0x0, 0x0, 0x7401) r3 = socket$tipc(0x1e, 0x5, 0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r3, 0x8983, &(0x7f0000000080)) 14:48:10 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) (async) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000080)=ANY=[], 0x2bb98205) write$P9_RREADLINK(r1, &(0x7f0000000180)={0x10, 0x17, 0x1, {0x7, './file0'}}, 0x10) finit_module(r1, &(0x7f0000000140)='\x00', 0x0) write$P9_RREMOVE(r0, &(0x7f0000000040)={0x7, 0x7b, 0x1}, 0x7) (async) write$P9_RGETATTR(r0, &(0x7f0000000080)={0xa0, 0x19, 0x1, {0x2403, {0x2, 0x3, 0x3}, 0x110, 0xee01, 0xee00, 0x1, 0x5, 0x3ff, 0x6a27, 0x800, 0x80000000, 0x7, 0x6, 0x3ff, 0xf870, 0x7fffffff, 0x8001, 0x1, 0xfffffffffffffffd, 0x1f}}, 0xa0) (async) r2 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x2) write$evdev(r2, &(0x7f000004d000)=[{}], 0xfffffe82) 14:48:10 executing program 5: clone(0x80910b00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) set_mempolicy(0x3, &(0x7f0000000040)=0xffffffff80000001, 0x400) gettid() r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, &(0x7f0000000080)=ANY=[@ANYBLOB="7549f8187a2a6e40594b4473692aef0dda6d1a46f2019ed7e86b1d711c76877056283bedab9579d2125c7cad3b1f28c963b3a626ef87b075574ff5612ccc80d8e14883ad2a8e6516a15c410ce005b2e841ebacd55a1365c685244ec3b66b003e7ec96ed005906d578130183c37"]) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x2, 0x3, 0x2d8, 0x190, 0x190, 0x95ffffff, 0x77, 0x93ffffff, 0x240, 0x240, 0x221, 0x240, 0x240, 0x3, 0x0, {[{{@uncond, 0x0, 0x130, 0x190, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "bdc74c01369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa6ecab6b1d2cc05e3182f64694d7d05fb8b8c8f56627a54f905d564eeeb8334f650ca0f3c44f7fda4d20a55050342ea85ecc8838e7088de33582f36a0a375bb7008adc297a5ece1bb2df53d17bef26bb6f800", 0x7f, 0x2}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0x4c000000]}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'veth0_to_batadv\x00', 'ip6gretap0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x338) [ 2820.120977][T18664] set_target_v0_checkentry: 36 callbacks suppressed [ 2820.120993][T18664] Cannot find add_set index 0 as target [ 2820.128960][T18663] Cannot find add_set index 0 as target 14:48:10 executing program 5: clone(0x80910b00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) set_mempolicy(0x3, &(0x7f0000000040)=0xffffffff80000001, 0x400) gettid() r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, &(0x7f0000000080)=ANY=[@ANYBLOB="7549f8187a2a6e40594b4473692aef0dda6d1a46f2019ed7e86b1d711c76877056283bedab9579d2125c7cad3b1f28c963b3a626ef87b075574ff5612ccc80d8e14883ad2a8e6516a15c410ce005b2e841ebacd55a1365c685244ec3b66b003e7ec96ed005906d578130183c37"]) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x2, 0x3, 0x2d8, 0x190, 0x190, 0x95ffffff, 0x77, 0x93ffffff, 0x240, 0x240, 0x221, 0x240, 0x240, 0x3, 0x0, {[{{@uncond, 0x0, 0x130, 0x190, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "bdc74c01369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa6ecab6b1d2cc05e3182f64694d7d05fb8b8c8f56627a54f905d564eeeb8334f650ca0f3c44f7fda4d20a55050342ea85ecc8838e7088de33582f36a0a375bb7008adc297a5ece1bb2df53d17bef26bb6f800", 0x7f, 0x2}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0x4c030000]}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'veth0_to_batadv\x00', 'ip6gretap0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x338) 14:48:10 executing program 2: clone(0x80910b00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) set_mempolicy(0x3, &(0x7f0000000040), 0x0) gettid() r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x2, 0x3, 0x2d8, 0x190, 0x190, 0x95ffffff, 0x77, 0x93ffffff, 0x240, 0x240, 0x221, 0x240, 0x240, 0x3, 0x0, {[{{@uncond, 0x0, 0x130, 0x190, 0x0, {0xf000000000000000}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "bdc74c01369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa6ecab6b1d2cc05e3182f64694d7d05fb8b8c8f56627a54f905d564eeeb8334f650ca0f3c44f7fda4d20a55050342ea85ecc8838e7088de33582f36a0a375bb7008adc297a5ece1bb2df53d17bef26bb6f800", 0x7f}}]}, @common=@SET={0x60}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'veth0_to_batadv\x00', 'ip6gretap0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x338) [ 2820.168909][T18782] Cannot find add_set index 0 as target [ 2820.254540][T19273] Cannot find add_set index 0 as target 14:48:11 executing program 2: clone(0x80910b00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) set_mempolicy(0x3, &(0x7f0000000040), 0x0) gettid() r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x2, 0x3, 0x2d8, 0x190, 0x190, 0x95ffffff, 0x77, 0x93ffffff, 0x240, 0x240, 0x221, 0x240, 0x240, 0x3, 0x0, {[{{@uncond, 0x0, 0x130, 0x190, 0x0, {0xf103000000000000}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "bdc74c01369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa6ecab6b1d2cc05e3182f64694d7d05fb8b8c8f56627a54f905d564eeeb8334f650ca0f3c44f7fda4d20a55050342ea85ecc8838e7088de33582f36a0a375bb7008adc297a5ece1bb2df53d17bef26bb6f800", 0x7f}}]}, @common=@SET={0x60}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'veth0_to_batadv\x00', 'ip6gretap0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x338) 14:48:11 executing program 4: r0 = socket$inet6(0xa, 0x400000000001, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) ftruncate(r1, 0x2007fff) close(r0) open(&(0x7f00000002c0)='./bus\x00', 0x14d842, 0x0) sendfile(r0, r1, 0x0, 0x201000) (fail_nth: 51) 14:48:11 executing program 5: clone(0x80910b00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) set_mempolicy(0x3, &(0x7f0000000040)=0xffffffff80000001, 0x400) gettid() r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, &(0x7f0000000080)=ANY=[@ANYBLOB="7549f8187a2a6e40594b4473692aef0dda6d1a46f2019ed7e86b1d711c76877056283bedab9579d2125c7cad3b1f28c963b3a626ef87b075574ff5612ccc80d8e14883ad2a8e6516a15c410ce005b2e841ebacd55a1365c685244ec3b66b003e7ec96ed005906d578130183c37"]) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x2, 0x3, 0x2d8, 0x190, 0x190, 0x95ffffff, 0x77, 0x93ffffff, 0x240, 0x240, 0x221, 0x240, 0x240, 0x3, 0x0, {[{{@uncond, 0x0, 0x130, 0x190, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "bdc74c01369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa6ecab6b1d2cc05e3182f64694d7d05fb8b8c8f56627a54f905d564eeeb8334f650ca0f3c44f7fda4d20a55050342ea85ecc8838e7088de33582f36a0a375bb7008adc297a5ece1bb2df53d17bef26bb6f800", 0x7f, 0x2}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0x4d000000]}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'veth0_to_batadv\x00', 'ip6gretap0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x338) 14:48:11 executing program 1: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) ftruncate(r1, 0x2007fff) (async) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0xd1, &(0x7f0000000000)=0x4, 0x4) setsockopt$inet6_MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xc8, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x4e22, 0x1f, @dev={0xfe, 0x80, '\x00', 0x3f}, 0x101}, 0x1c) close(r0) (async) open(&(0x7f00000002c0)='./bus\x00', 0x14d842, 0x12) (async) pipe(&(0x7f0000000180)={0xffffffffffffffff}) (async) r3 = socket$inet6(0xa, 0x3, 0x2c) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) (async, rerun: 32) setsockopt$inet6_int(r3, 0x29, 0x7, &(0x7f0000000080)=0x2, 0x4) (async, rerun: 32) setsockopt$inet6_int(r1, 0x29, 0x4b, &(0x7f0000000140)=0x1ff, 0x4) splice(r2, 0x0, r3, 0x0, 0x4ff9c, 0x0) (async, rerun: 32) r4 = openat$cgroup_ro(r2, &(0x7f0000000080)='blkio.throttle.io_serviced\x00', 0x0, 0x0) (async, rerun: 32) r5 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) finit_module(r5, &(0x7f00000001c0)='\x00A\xf1S\xda\xc0%`\xbc\xd9\xd8\x8c\x9d\x8d\xf1y\xa4$\xa1\xfc\xd6\xad42\xe8\x19\xa9\x84\x9d\xdfd\x93J\a\\-\xbd\x83y\xa3;\xb2\x95BX\xf0\x1f<\xa7\xf9w\xf0\x8e\xdc\x9d\xb29%F\v~\xe6 \x14.\xcf\xf1^/-D\x84\x87\x98\xfb\x1eotU\xdbV\xdb\xb0<\xd8(\xc4(!e\x9d\xc5v\x85|\x13\x89\x1fO\xfb#A~O\xeem\xee\x16QF\x8a\xd8\n\xeent\xccm\xc6u#0\xbbk\xa6F\xf5\\\xaas%\x9fg\xb8\x8e!.\x12\xe7z\xcb\xbb\xd2@\xe6y\xb4', 0xcc2d1be59dab4ed3) (async) openat$pfkey(0xffffffffffffff9c, &(0x7f00000000c0), 0x284882, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f0000000300)) (async, rerun: 64) sendfile(r0, r1, 0x0, 0x201000) (rerun: 64) 14:48:11 executing program 3: r0 = syz_io_uring_setup(0x2d65, &(0x7f0000000000)={0x0, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x4000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x4, 0x11, r0, 0x8000000) r4 = mmap$IORING_OFF_SQES(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x1000000, 0x2010, r0, 0x10000000) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = socket$inet6(0xa, 0x3, 0x2c) ioctl$AUTOFS_DEV_IOCTL_READY(r5, 0xc0189376, &(0x7f0000000300)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r6, @ANYBLOB="0580001f140000f82e2f66696c080000"]) io_uring_enter(r8, 0x1f87, 0x40fd40, 0x0, &(0x7f0000000380)={[0x4]}, 0xfffffffffffffe57) connect$inet6(r7, &(0x7f0000000040)={0xa, 0x0, 0x3, @empty}, 0x1c) setsockopt$inet6_int(r7, 0x29, 0x7, &(0x7f0000000080)=0x2, 0x4) splice(r5, 0x0, r7, 0x0, 0x4ff9c, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000100)=@IORING_OP_STATX={0x15, 0x1, 0x0, r5, &(0x7f0000000200), &(0x7f0000000080)='./file0\x00', 0x1, 0x1000}, 0xc0000000) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r9, &(0x7f0000000080)=ANY=[], 0x2bb98205) ioctl$NS_GET_NSTYPE(r9, 0xb703, 0x0) r10 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={&(0x7f00000003c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x6c, 0x6c, 0x3, [@fwd={0x1}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x4}}, @volatile={0x2, 0x0, 0x0, 0x9, 0x5}, @typedef={0xb, 0x0, 0x0, 0x8, 0x1}, @func_proto={0x0, 0x2, 0x0, 0xd, 0x0, [{0x1, 0x4}, {0x1, 0x1}]}, @enum={0x10, 0x1, 0x0, 0x6, 0x4, [{0x2, 0x7}]}]}, {0x0, [0x0]}}, &(0x7f0000000340)=""/46, 0x87, 0x2e, 0x1}, 0x20) write$binfmt_misc(r10, &(0x7f00000004c0)={'syz1', "1bc302ab841a312fe3346cf1be998747a28a16982d979c13b0125f4b086385efe8b26f1212b822956ed3e79d79e1780a60807b35f7c0cc23e5d5868b03f0abe735629332cadfe9a3f987c1cbc7e2077930b35f4739d6c7534f3f5609faf91ca916c0ca2056351dccd02d9d9cd85cea07817841bda8307eb3e00dc9269b27e2f71fca65d7420a87ca86dbd0f6f22b3eff4256436e3ba3961e17bd696da93c5e2ba5ca19c354605a73cf66de47017b09e871ab541454ef0d"}, 0xbb) io_uring_enter(r0, 0xb2, 0x0, 0x0, 0x0, 0x7401) 14:48:11 executing program 5: clone(0x80910b00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) set_mempolicy(0x3, &(0x7f0000000040)=0xffffffff80000001, 0x400) gettid() r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, &(0x7f0000000080)=ANY=[@ANYBLOB="7549f8187a2a6e40594b4473692aef0dda6d1a46f2019ed7e86b1d711c76877056283bedab9579d2125c7cad3b1f28c963b3a626ef87b075574ff5612ccc80d8e14883ad2a8e6516a15c410ce005b2e841ebacd55a1365c685244ec3b66b003e7ec96ed005906d578130183c37"]) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x2, 0x3, 0x2d8, 0x190, 0x190, 0x95ffffff, 0x77, 0x93ffffff, 0x240, 0x240, 0x221, 0x240, 0x240, 0x3, 0x0, {[{{@uncond, 0x0, 0x130, 0x190, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "bdc74c01369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa6ecab6b1d2cc05e3182f64694d7d05fb8b8c8f56627a54f905d564eeeb8334f650ca0f3c44f7fda4d20a55050342ea85ecc8838e7088de33582f36a0a375bb7008adc297a5ece1bb2df53d17bef26bb6f800", 0x7f, 0x2}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0x4e000000]}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'veth0_to_batadv\x00', 'ip6gretap0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x338) [ 2820.590693][T19552] FAULT_INJECTION: forcing a failure. [ 2820.590693][T19552] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2820.595642][T19559] Cannot find add_set index 0 as target [ 2820.604110][T19552] CPU: 0 PID: 19552 Comm: syz-executor.4 Tainted: G W 5.16.0-rc6-syzkaller #0 [ 2820.619728][T19552] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2820.629790][T19552] Call Trace: [ 2820.630847][T19562] Cannot find add_set index 0 as target 14:48:11 executing program 5: clone(0x80910b00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) set_mempolicy(0x3, &(0x7f0000000040)=0xffffffff80000001, 0x400) gettid() r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, &(0x7f0000000080)=ANY=[@ANYBLOB="7549f8187a2a6e40594b4473692aef0dda6d1a46f2019ed7e86b1d711c76877056283bedab9579d2125c7cad3b1f28c963b3a626ef87b075574ff5612ccc80d8e14883ad2a8e6516a15c410ce005b2e841ebacd55a1365c685244ec3b66b003e7ec96ed005906d578130183c37"]) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x2, 0x3, 0x2d8, 0x190, 0x190, 0x95ffffff, 0x77, 0x93ffffff, 0x240, 0x240, 0x221, 0x240, 0x240, 0x3, 0x0, {[{{@uncond, 0x0, 0x130, 0x190, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "bdc74c01369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa6ecab6b1d2cc05e3182f64694d7d05fb8b8c8f56627a54f905d564eeeb8334f650ca0f3c44f7fda4d20a55050342ea85ecc8838e7088de33582f36a0a375bb7008adc297a5ece1bb2df53d17bef26bb6f800", 0x7f, 0x2}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0x50000000]}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'veth0_to_batadv\x00', 'ip6gretap0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x338) [ 2820.633068][T19552] [ 2820.633077][T19552] dump_stack_lvl+0xd6/0x122 [ 2820.646115][T19552] dump_stack+0x11/0x1b [ 2820.650279][T19552] should_fail+0x23c/0x250 [ 2820.654708][T19552] __alloc_pages+0x102/0x330 [ 2820.658491][T19554] Cannot find add_set index 0 as target [ 2820.659468][T19552] alloc_pages+0x382/0x3d0 [ 2820.659492][T19552] folio_alloc+0x1a/0x20 [ 2820.673732][T19552] filemap_alloc_folio+0x53/0xf0 [ 2820.678727][T19552] page_cache_ra_unbounded+0x1c0/0x430 [ 2820.684198][T19552] ondemand_readahead+0x4f8/0x700 [ 2820.689280][T19552] ? filemap_get_read_batch+0x3e2/0x410 [ 2820.694914][T19552] page_cache_async_ra+0xed/0x120 [ 2820.699947][T19552] filemap_read+0x500/0x16d0 [ 2820.704588][T19552] generic_file_read_iter+0x72/0x2a0 [ 2820.708179][T19649] Cannot find add_set index 0 as target [ 2820.709942][T19552] ? iov_iter_pipe+0x100/0x150 [ 2820.720234][T19552] ? ext4_file_read_iter+0x7a/0x1f0 [ 2820.725511][T19552] generic_file_splice_read+0x24f/0x330 [ 2820.731070][T19552] ? splice_shrink_spd+0x60/0x60 [ 2820.736036][T19552] splice_direct_to_actor+0x2aa/0x650 [ 2820.741414][T19552] ? do_splice_direct+0x190/0x190 [ 2820.746451][T19552] do_splice_direct+0x106/0x190 [ 2820.751309][T19552] do_sendfile+0x675/0xc40 [ 2820.755771][T19552] __x64_sys_sendfile64+0x102/0x140 [ 2820.761063][T19552] do_syscall_64+0x44/0xd0 [ 2820.765510][T19552] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2820.771411][T19552] RIP: 0033:0x7f2d29acae99 [ 2820.775860][T19552] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2820.795550][T19552] RSP: 002b:00007f2d28c41168 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 2820.804007][T19552] RAX: ffffffffffffffda RBX: 00007f2d29bddf60 RCX: 00007f2d29acae99 [ 2820.811966][T19552] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 2820.819935][T19552] RBP: 00007f2d28c411d0 R08: 0000000000000000 R09: 0000000000000000 [ 2820.828015][T19552] R10: 0000000000201000 R11: 0000000000000246 R12: 0000000000000002 [ 2820.836023][T19552] R13: 00007ffcc1d93fdf R14: 00007f2d28c41300 R15: 0000000000022000 [ 2820.844037][T19552] 14:48:11 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) (async) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000080)=ANY=[], 0x2bb98205) (async) write$P9_RREADLINK(r1, &(0x7f0000000180)={0x10, 0x17, 0x1, {0x7, './file0'}}, 0x10) finit_module(r1, &(0x7f0000000140)='\x00', 0x0) (async) write$P9_RREMOVE(r0, &(0x7f0000000040)={0x7, 0x7b, 0x1}, 0x7) (async) write$P9_RGETATTR(r0, &(0x7f0000000080)={0xa0, 0x19, 0x1, {0x2403, {0x2, 0x3, 0x3}, 0x110, 0xee01, 0xee00, 0x1, 0x5, 0x3ff, 0x6a27, 0x800, 0x80000000, 0x7, 0x6, 0x3ff, 0xf870, 0x7fffffff, 0x8001, 0x1, 0xfffffffffffffffd, 0x1f}}, 0xa0) (async) r2 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x2) write$evdev(r2, &(0x7f000004d000)=[{}], 0xfffffe82) 14:48:11 executing program 2: clone(0x80910b00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) set_mempolicy(0x3, &(0x7f0000000040), 0x0) gettid() r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x2, 0x3, 0x2d8, 0x190, 0x190, 0x95ffffff, 0x77, 0x93ffffff, 0x240, 0x240, 0x221, 0x240, 0x240, 0x3, 0x0, {[{{@uncond, 0x0, 0x130, 0x190, 0x0, {0xf1ffffff00000000}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "bdc74c01369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa6ecab6b1d2cc05e3182f64694d7d05fb8b8c8f56627a54f905d564eeeb8334f650ca0f3c44f7fda4d20a55050342ea85ecc8838e7088de33582f36a0a375bb7008adc297a5ece1bb2df53d17bef26bb6f800", 0x7f}}]}, @common=@SET={0x60}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'veth0_to_batadv\x00', 'ip6gretap0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x338) 14:48:11 executing program 3: r0 = syz_io_uring_setup(0x2d65, &(0x7f0000000000)={0x0, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x4000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x4, 0x11, r0, 0x8000000) r4 = mmap$IORING_OFF_SQES(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x1000000, 0x2010, r0, 0x10000000) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = socket$inet6(0xa, 0x3, 0x2c) ioctl$AUTOFS_DEV_IOCTL_READY(r5, 0xc0189376, &(0x7f0000000300)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r6, @ANYBLOB="0580001f140000f82e2f66696c080000"]) io_uring_enter(r8, 0x1f87, 0x40fd40, 0x0, &(0x7f0000000380)={[0x4]}, 0xfffffffffffffe57) connect$inet6(r7, &(0x7f0000000040)={0xa, 0x0, 0x3, @empty}, 0x1c) setsockopt$inet6_int(r7, 0x29, 0x7, &(0x7f0000000080)=0x2, 0x4) splice(r5, 0x0, r7, 0x0, 0x4ff9c, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000100)=@IORING_OP_STATX={0x15, 0x1, 0x0, r5, &(0x7f0000000200), &(0x7f0000000080)='./file0\x00', 0x1, 0x1000}, 0xc0000000) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r9, &(0x7f0000000080)=ANY=[], 0x2bb98205) ioctl$NS_GET_NSTYPE(r9, 0xb703, 0x0) r10 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={&(0x7f00000003c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x6c, 0x6c, 0x3, [@fwd={0x1}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x4}}, @volatile={0x2, 0x0, 0x0, 0x9, 0x5}, @typedef={0xb, 0x0, 0x0, 0x8, 0x1}, @func_proto={0x0, 0x2, 0x0, 0xd, 0x0, [{0x1, 0x4}, {0x1, 0x1}]}, @enum={0x10, 0x1, 0x0, 0x6, 0x4, [{0x2, 0x7}]}]}, {0x0, [0x0]}}, &(0x7f0000000340)=""/46, 0x87, 0x2e, 0x1}, 0x20) write$binfmt_misc(r10, &(0x7f00000004c0)={'syz1', "1bc302ab841a312fe3346cf1be998747a28a16982d979c13b0125f4b086385efe8b26f1212b822956ed3e79d79e1780a60807b35f7c0cc23e5d5868b03f0abe735629332cadfe9a3f987c1cbc7e2077930b35f4739d6c7534f3f5609faf91ca916c0ca2056351dccd02d9d9cd85cea07817841bda8307eb3e00dc9269b27e2f71fca65d7420a87ca86dbd0f6f22b3eff4256436e3ba3961e17bd696da93c5e2ba5ca19c354605a73cf66de47017b09e871ab541454ef0d"}, 0xbb) io_uring_enter(r0, 0xb2, 0x0, 0x0, 0x0, 0x7401) syz_io_uring_setup(0x2d65, &(0x7f0000000000)={0x0, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x4000)=nil, &(0x7f00000000c0), &(0x7f0000000140)) (async) mmap$IORING_OFF_CQ_RING(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x4, 0x11, r0, 0x8000000) (async) mmap$IORING_OFF_SQES(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x1000000, 0x2010, r0, 0x10000000) (async) pipe(&(0x7f0000000180)) (async) socket$inet6(0xa, 0x3, 0x2c) (async) ioctl$AUTOFS_DEV_IOCTL_READY(r5, 0xc0189376, &(0x7f0000000300)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r6, @ANYBLOB="0580001f140000f82e2f66696c080000"]) (async) io_uring_enter(r8, 0x1f87, 0x40fd40, 0x0, &(0x7f0000000380)={[0x4]}, 0xfffffffffffffe57) (async) connect$inet6(r7, &(0x7f0000000040)={0xa, 0x0, 0x3, @empty}, 0x1c) (async) setsockopt$inet6_int(r7, 0x29, 0x7, &(0x7f0000000080)=0x2, 0x4) (async) splice(r5, 0x0, r7, 0x0, 0x4ff9c, 0x0) (async) syz_io_uring_submit(r3, r4, &(0x7f0000000100)=@IORING_OP_STATX={0x15, 0x1, 0x0, r5, &(0x7f0000000200), &(0x7f0000000080)='./file0\x00', 0x1, 0x1000}, 0xc0000000) (async) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) (async) pipe(&(0x7f0000000180)) (async) write$binfmt_misc(r9, &(0x7f0000000080)=ANY=[], 0x2bb98205) (async) ioctl$NS_GET_NSTYPE(r9, 0xb703, 0x0) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={&(0x7f00000003c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x6c, 0x6c, 0x3, [@fwd={0x1}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x4}}, @volatile={0x2, 0x0, 0x0, 0x9, 0x5}, @typedef={0xb, 0x0, 0x0, 0x8, 0x1}, @func_proto={0x0, 0x2, 0x0, 0xd, 0x0, [{0x1, 0x4}, {0x1, 0x1}]}, @enum={0x10, 0x1, 0x0, 0x6, 0x4, [{0x2, 0x7}]}]}, {0x0, [0x0]}}, &(0x7f0000000340)=""/46, 0x87, 0x2e, 0x1}, 0x20) (async) write$binfmt_misc(r10, &(0x7f00000004c0)={'syz1', "1bc302ab841a312fe3346cf1be998747a28a16982d979c13b0125f4b086385efe8b26f1212b822956ed3e79d79e1780a60807b35f7c0cc23e5d5868b03f0abe735629332cadfe9a3f987c1cbc7e2077930b35f4739d6c7534f3f5609faf91ca916c0ca2056351dccd02d9d9cd85cea07817841bda8307eb3e00dc9269b27e2f71fca65d7420a87ca86dbd0f6f22b3eff4256436e3ba3961e17bd696da93c5e2ba5ca19c354605a73cf66de47017b09e871ab541454ef0d"}, 0xbb) (async) io_uring_enter(r0, 0xb2, 0x0, 0x0, 0x0, 0x7401) (async) 14:48:11 executing program 5: clone(0x80910b00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) set_mempolicy(0x3, &(0x7f0000000040)=0xffffffff80000001, 0x400) gettid() r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, &(0x7f0000000080)=ANY=[@ANYBLOB="7549f8187a2a6e40594b4473692aef0dda6d1a46f2019ed7e86b1d711c76877056283bedab9579d2125c7cad3b1f28c963b3a626ef87b075574ff5612ccc80d8e14883ad2a8e6516a15c410ce005b2e841ebacd55a1365c685244ec3b66b003e7ec96ed005906d578130183c37"]) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x2, 0x3, 0x2d8, 0x190, 0x190, 0x95ffffff, 0x77, 0x93ffffff, 0x240, 0x240, 0x221, 0x240, 0x240, 0x3, 0x0, {[{{@uncond, 0x0, 0x130, 0x190, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "bdc74c01369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa6ecab6b1d2cc05e3182f64694d7d05fb8b8c8f56627a54f905d564eeeb8334f650ca0f3c44f7fda4d20a55050342ea85ecc8838e7088de33582f36a0a375bb7008adc297a5ece1bb2df53d17bef26bb6f800", 0x7f, 0x2}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0x52020000]}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'veth0_to_batadv\x00', 'ip6gretap0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x338) 14:48:11 executing program 2: clone(0x80910b00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) set_mempolicy(0x3, &(0x7f0000000040), 0x0) gettid() r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x2, 0x3, 0x2d8, 0x190, 0x190, 0x95ffffff, 0x77, 0x93ffffff, 0x240, 0x240, 0x221, 0x240, 0x240, 0x3, 0x0, {[{{@uncond, 0x0, 0x130, 0x190, 0x0, {0xf2ffffff00000000}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "bdc74c01369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa6ecab6b1d2cc05e3182f64694d7d05fb8b8c8f56627a54f905d564eeeb8334f650ca0f3c44f7fda4d20a55050342ea85ecc8838e7088de33582f36a0a375bb7008adc297a5ece1bb2df53d17bef26bb6f800", 0x7f}}]}, @common=@SET={0x60}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'veth0_to_batadv\x00', 'ip6gretap0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x338) 14:48:11 executing program 5: clone(0x80910b00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) set_mempolicy(0x3, &(0x7f0000000040)=0xffffffff80000001, 0x400) gettid() r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, &(0x7f0000000080)=ANY=[@ANYBLOB="7549f8187a2a6e40594b4473692aef0dda6d1a46f2019ed7e86b1d711c76877056283bedab9579d2125c7cad3b1f28c963b3a626ef87b075574ff5612ccc80d8e14883ad2a8e6516a15c410ce005b2e841ebacd55a1365c685244ec3b66b003e7ec96ed005906d578130183c37"]) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x2, 0x3, 0x2d8, 0x190, 0x190, 0x95ffffff, 0x77, 0x93ffffff, 0x240, 0x240, 0x221, 0x240, 0x240, 0x3, 0x0, {[{{@uncond, 0x0, 0x130, 0x190, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "bdc74c01369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa6ecab6b1d2cc05e3182f64694d7d05fb8b8c8f56627a54f905d564eeeb8334f650ca0f3c44f7fda4d20a55050342ea85ecc8838e7088de33582f36a0a375bb7008adc297a5ece1bb2df53d17bef26bb6f800", 0x7f, 0x2}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0x54000000]}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'veth0_to_batadv\x00', 'ip6gretap0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x338) [ 2821.007885][T19677] Cannot find add_set index 0 as target [ 2821.019033][T19682] Cannot find add_set index 0 as target 14:48:11 executing program 4: r0 = socket$inet6(0xa, 0x400000000001, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) ftruncate(r1, 0x2007fff) close(r0) open(&(0x7f00000002c0)='./bus\x00', 0x14d842, 0x0) sendfile(r0, r1, 0x0, 0x201000) (fail_nth: 52) 14:48:11 executing program 2: clone(0x80910b00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) set_mempolicy(0x3, &(0x7f0000000040), 0x0) gettid() r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x2, 0x3, 0x2d8, 0x190, 0x190, 0x95ffffff, 0x77, 0x93ffffff, 0x240, 0x240, 0x221, 0x240, 0x240, 0x3, 0x0, {[{{@uncond, 0x0, 0x130, 0x190, 0x0, {0xf301000000000000}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "bdc74c01369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa6ecab6b1d2cc05e3182f64694d7d05fb8b8c8f56627a54f905d564eeeb8334f650ca0f3c44f7fda4d20a55050342ea85ecc8838e7088de33582f36a0a375bb7008adc297a5ece1bb2df53d17bef26bb6f800", 0x7f}}]}, @common=@SET={0x60}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'veth0_to_batadv\x00', 'ip6gretap0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x338) [ 2821.124506][T19794] FAULT_INJECTION: forcing a failure. [ 2821.124506][T19794] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2821.138008][T19794] CPU: 0 PID: 19794 Comm: syz-executor.4 Tainted: G W 5.16.0-rc6-syzkaller #0 [ 2821.148290][T19794] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2821.148305][T19794] Call Trace: [ 2821.148312][T19794] [ 2821.148390][T19794] dump_stack_lvl+0xd6/0x122 [ 2821.169258][T19794] dump_stack+0x11/0x1b [ 2821.173461][T19794] should_fail+0x23c/0x250 [ 2821.173489][T19794] __alloc_pages+0x102/0x330 [ 2821.173584][T19794] alloc_pages+0x382/0x3d0 [ 2821.186952][T19794] folio_alloc+0x1a/0x20 [ 2821.186972][T19794] filemap_alloc_folio+0x53/0xf0 [ 2821.186999][T19794] page_cache_ra_unbounded+0x1c0/0x430 [ 2821.201575][T19794] ondemand_readahead+0x4f8/0x700 [ 2821.201605][T19794] ? filemap_get_read_batch+0x3e2/0x410 [ 2821.201700][T19794] page_cache_async_ra+0xed/0x120 [ 2821.201787][T19794] filemap_read+0x500/0x16d0 [ 2821.201818][T19794] generic_file_read_iter+0x72/0x2a0 [ 2821.201904][T19794] ? iov_iter_pipe+0x100/0x150 [ 2821.201925][T19794] ? ext4_file_read_iter+0x7a/0x1f0 [ 2821.201972][T19794] generic_file_splice_read+0x24f/0x330 [ 2821.242902][T19794] ? splice_shrink_spd+0x60/0x60 [ 2821.247852][T19794] splice_direct_to_actor+0x2aa/0x650 [ 2821.253236][T19794] ? do_splice_direct+0x190/0x190 [ 2821.258271][T19794] do_splice_direct+0x106/0x190 [ 2821.263187][T19794] do_sendfile+0x675/0xc40 [ 2821.267611][T19794] __x64_sys_sendfile64+0x102/0x140 [ 2821.272822][T19794] do_syscall_64+0x44/0xd0 [ 2821.277282][T19794] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2821.283267][T19794] RIP: 0033:0x7f2d29acae99 [ 2821.287688][T19794] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2821.307368][T19794] RSP: 002b:00007f2d28c41168 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 2821.315790][T19794] RAX: ffffffffffffffda RBX: 00007f2d29bddf60 RCX: 00007f2d29acae99 [ 2821.323751][T19794] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 2821.331807][T19794] RBP: 00007f2d28c411d0 R08: 0000000000000000 R09: 0000000000000000 [ 2821.339859][T19794] R10: 0000000000201000 R11: 0000000000000246 R12: 0000000000000002 [ 2821.347857][T19794] R13: 00007ffcc1d93fdf R14: 00007f2d28c41300 R15: 0000000000022000 [ 2821.355840][T19794] 14:48:12 executing program 1: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) ftruncate(r1, 0x2007fff) (async) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0xd1, &(0x7f0000000000)=0x4, 0x4) (async) setsockopt$inet6_MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xc8, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x4e22, 0x1f, @dev={0xfe, 0x80, '\x00', 0x3f}, 0x101}, 0x1c) close(r0) open(&(0x7f00000002c0)='./bus\x00', 0x14d842, 0x12) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r3 = socket$inet6(0xa, 0x3, 0x2c) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r3, 0x29, 0x7, &(0x7f0000000080)=0x2, 0x4) (async) setsockopt$inet6_int(r1, 0x29, 0x4b, &(0x7f0000000140)=0x1ff, 0x4) (async) splice(r2, 0x0, r3, 0x0, 0x4ff9c, 0x0) (async) r4 = openat$cgroup_ro(r2, &(0x7f0000000080)='blkio.throttle.io_serviced\x00', 0x0, 0x0) (async) r5 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) finit_module(r5, &(0x7f00000001c0)='\x00A\xf1S\xda\xc0%`\xbc\xd9\xd8\x8c\x9d\x8d\xf1y\xa4$\xa1\xfc\xd6\xad42\xe8\x19\xa9\x84\x9d\xdfd\x93J\a\\-\xbd\x83y\xa3;\xb2\x95BX\xf0\x1f<\xa7\xf9w\xf0\x8e\xdc\x9d\xb29%F\v~\xe6 \x14.\xcf\xf1^/-D\x84\x87\x98\xfb\x1eotU\xdbV\xdb\xb0<\xd8(\xc4(!e\x9d\xc5v\x85|\x13\x89\x1fO\xfb#A~O\xeem\xee\x16QF\x8a\xd8\n\xeent\xccm\xc6u#0\xbbk\xa6F\xf5\\\xaas%\x9fg\xb8\x8e!.\x12\xe7z\xcb\xbb\xd2@\xe6y\xb4', 0xcc2d1be59dab4ed3) (async) openat$pfkey(0xffffffffffffff9c, &(0x7f00000000c0), 0x284882, 0x0) (async) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f0000000300)) (async) sendfile(r0, r1, 0x0, 0x201000) 14:48:12 executing program 5: clone(0x80910b00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) set_mempolicy(0x3, &(0x7f0000000040)=0xffffffff80000001, 0x400) gettid() r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, &(0x7f0000000080)=ANY=[@ANYBLOB="7549f8187a2a6e40594b4473692aef0dda6d1a46f2019ed7e86b1d711c76877056283bedab9579d2125c7cad3b1f28c963b3a626ef87b075574ff5612ccc80d8e14883ad2a8e6516a15c410ce005b2e841ebacd55a1365c685244ec3b66b003e7ec96ed005906d578130183c37"]) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x2, 0x3, 0x2d8, 0x190, 0x190, 0x95ffffff, 0x77, 0x93ffffff, 0x240, 0x240, 0x221, 0x240, 0x240, 0x3, 0x0, {[{{@uncond, 0x0, 0x130, 0x190, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "bdc74c01369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa6ecab6b1d2cc05e3182f64694d7d05fb8b8c8f56627a54f905d564eeeb8334f650ca0f3c44f7fda4d20a55050342ea85ecc8838e7088de33582f36a0a375bb7008adc297a5ece1bb2df53d17bef26bb6f800", 0x7f, 0x2}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0x55000000]}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'veth0_to_batadv\x00', 'ip6gretap0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x338) 14:48:12 executing program 2: clone(0x80910b00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) set_mempolicy(0x3, &(0x7f0000000040), 0x0) gettid() r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x2, 0x3, 0x2d8, 0x190, 0x190, 0x95ffffff, 0x77, 0x93ffffff, 0x240, 0x240, 0x221, 0x240, 0x240, 0x3, 0x0, {[{{@uncond, 0x0, 0x130, 0x190, 0x0, {0xf5ffffff00000000}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "bdc74c01369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa6ecab6b1d2cc05e3182f64694d7d05fb8b8c8f56627a54f905d564eeeb8334f650ca0f3c44f7fda4d20a55050342ea85ecc8838e7088de33582f36a0a375bb7008adc297a5ece1bb2df53d17bef26bb6f800", 0x7f}}]}, @common=@SET={0x60}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'veth0_to_batadv\x00', 'ip6gretap0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x338) 14:48:12 executing program 3: r0 = syz_io_uring_setup(0x2d65, &(0x7f0000000000)={0x0, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x4000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x4, 0x11, r0, 0x8000000) r4 = mmap$IORING_OFF_SQES(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x1000000, 0x2010, r0, 0x10000000) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = socket$inet6(0xa, 0x3, 0x2c) ioctl$AUTOFS_DEV_IOCTL_READY(r5, 0xc0189376, &(0x7f0000000300)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r6, @ANYBLOB="0580001f140000f82e2f66696c080000"]) io_uring_enter(r8, 0x1f87, 0x40fd40, 0x0, &(0x7f0000000380)={[0x4]}, 0xfffffffffffffe57) connect$inet6(r7, &(0x7f0000000040)={0xa, 0x0, 0x3, @empty}, 0x1c) setsockopt$inet6_int(r7, 0x29, 0x7, &(0x7f0000000080)=0x2, 0x4) splice(r5, 0x0, r7, 0x0, 0x4ff9c, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000100)=@IORING_OP_STATX={0x15, 0x1, 0x0, r5, &(0x7f0000000200), &(0x7f0000000080)='./file0\x00', 0x1, 0x1000}, 0xc0000000) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r9, &(0x7f0000000080)=ANY=[], 0x2bb98205) ioctl$NS_GET_NSTYPE(r9, 0xb703, 0x0) r10 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={&(0x7f00000003c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x6c, 0x6c, 0x3, [@fwd={0x1}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x4}}, @volatile={0x2, 0x0, 0x0, 0x9, 0x5}, @typedef={0xb, 0x0, 0x0, 0x8, 0x1}, @func_proto={0x0, 0x2, 0x0, 0xd, 0x0, [{0x1, 0x4}, {0x1, 0x1}]}, @enum={0x10, 0x1, 0x0, 0x6, 0x4, [{0x2, 0x7}]}]}, {0x0, [0x0]}}, &(0x7f0000000340)=""/46, 0x87, 0x2e, 0x1}, 0x20) write$binfmt_misc(r10, &(0x7f00000004c0)={'syz1', "1bc302ab841a312fe3346cf1be998747a28a16982d979c13b0125f4b086385efe8b26f1212b822956ed3e79d79e1780a60807b35f7c0cc23e5d5868b03f0abe735629332cadfe9a3f987c1cbc7e2077930b35f4739d6c7534f3f5609faf91ca916c0ca2056351dccd02d9d9cd85cea07817841bda8307eb3e00dc9269b27e2f71fca65d7420a87ca86dbd0f6f22b3eff4256436e3ba3961e17bd696da93c5e2ba5ca19c354605a73cf66de47017b09e871ab541454ef0d"}, 0xbb) io_uring_enter(r0, 0xb2, 0x0, 0x0, 0x0, 0x7401) syz_io_uring_setup(0x2d65, &(0x7f0000000000)={0x0, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x4000)=nil, &(0x7f00000000c0), &(0x7f0000000140)) (async) mmap$IORING_OFF_CQ_RING(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x4, 0x11, r0, 0x8000000) (async) mmap$IORING_OFF_SQES(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x1000000, 0x2010, r0, 0x10000000) (async) pipe(&(0x7f0000000180)) (async) socket$inet6(0xa, 0x3, 0x2c) (async) ioctl$AUTOFS_DEV_IOCTL_READY(r5, 0xc0189376, &(0x7f0000000300)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r6, @ANYBLOB="0580001f140000f82e2f66696c080000"]) (async) io_uring_enter(r8, 0x1f87, 0x40fd40, 0x0, &(0x7f0000000380)={[0x4]}, 0xfffffffffffffe57) (async) connect$inet6(r7, &(0x7f0000000040)={0xa, 0x0, 0x3, @empty}, 0x1c) (async) setsockopt$inet6_int(r7, 0x29, 0x7, &(0x7f0000000080)=0x2, 0x4) (async) splice(r5, 0x0, r7, 0x0, 0x4ff9c, 0x0) (async) syz_io_uring_submit(r3, r4, &(0x7f0000000100)=@IORING_OP_STATX={0x15, 0x1, 0x0, r5, &(0x7f0000000200), &(0x7f0000000080)='./file0\x00', 0x1, 0x1000}, 0xc0000000) (async) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) (async) pipe(&(0x7f0000000180)) (async) write$binfmt_misc(r9, &(0x7f0000000080)=ANY=[], 0x2bb98205) (async) ioctl$NS_GET_NSTYPE(r9, 0xb703, 0x0) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={&(0x7f00000003c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x6c, 0x6c, 0x3, [@fwd={0x1}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x4}}, @volatile={0x2, 0x0, 0x0, 0x9, 0x5}, @typedef={0xb, 0x0, 0x0, 0x8, 0x1}, @func_proto={0x0, 0x2, 0x0, 0xd, 0x0, [{0x1, 0x4}, {0x1, 0x1}]}, @enum={0x10, 0x1, 0x0, 0x6, 0x4, [{0x2, 0x7}]}]}, {0x0, [0x0]}}, &(0x7f0000000340)=""/46, 0x87, 0x2e, 0x1}, 0x20) (async) write$binfmt_misc(r10, &(0x7f00000004c0)={'syz1', "1bc302ab841a312fe3346cf1be998747a28a16982d979c13b0125f4b086385efe8b26f1212b822956ed3e79d79e1780a60807b35f7c0cc23e5d5868b03f0abe735629332cadfe9a3f987c1cbc7e2077930b35f4739d6c7534f3f5609faf91ca916c0ca2056351dccd02d9d9cd85cea07817841bda8307eb3e00dc9269b27e2f71fca65d7420a87ca86dbd0f6f22b3eff4256436e3ba3961e17bd696da93c5e2ba5ca19c354605a73cf66de47017b09e871ab541454ef0d"}, 0xbb) (async) io_uring_enter(r0, 0xb2, 0x0, 0x0, 0x0, 0x7401) (async) 14:48:12 executing program 2: clone(0x80910b00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) set_mempolicy(0x3, &(0x7f0000000040), 0x0) gettid() r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x2, 0x3, 0x2d8, 0x190, 0x190, 0x95ffffff, 0x77, 0x93ffffff, 0x240, 0x240, 0x221, 0x240, 0x240, 0x3, 0x0, {[{{@uncond, 0x0, 0x130, 0x190, 0x0, {0xf600000000000000}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "bdc74c01369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa6ecab6b1d2cc05e3182f64694d7d05fb8b8c8f56627a54f905d564eeeb8334f650ca0f3c44f7fda4d20a55050342ea85ecc8838e7088de33582f36a0a375bb7008adc297a5ece1bb2df53d17bef26bb6f800", 0x7f}}]}, @common=@SET={0x60}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'veth0_to_batadv\x00', 'ip6gretap0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x338) 14:48:12 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x4002, 0x36) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x2) write$evdev(r1, &(0x7f000004d000)=[{}], 0xfffffe82) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000080), 0x46400, 0x0) r3 = openat$cgroup_ro(r0, &(0x7f0000000100)='cpuacct.usage_percpu_user\x00', 0x0, 0x0) ioctl$EVIOCREVOKE(r3, 0x40044591, &(0x7f0000000140)=0x3) ioctl$EVIOCSCLOCKID(r2, 0x400445a0, &(0x7f00000000c0)=0xffff7fff) 14:48:12 executing program 4: r0 = socket$inet6(0xa, 0x400000000001, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) ftruncate(r1, 0x2007fff) close(r0) open(&(0x7f00000002c0)='./bus\x00', 0x14d842, 0x0) sendfile(r0, r1, 0x0, 0x201000) (fail_nth: 53) 14:48:12 executing program 3: r0 = syz_io_uring_setup(0x2de5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000fe8000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_setup(0x7e3b, &(0x7f0000000200)={0x0, 0x6afa, 0x8, 0x3, 0x23}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000fe8000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000100)) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0xb2, 0x0, 0x0, 0x0, 0x7401) r3 = syz_io_uring_setup(0x5d66, &(0x7f00000002c0), &(0x7f0000ee7000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380), &(0x7f00000001c0)) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r3, 0x10000000) io_uring_enter(r3, 0x7443, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r3, 0x6e7f, 0x5213, 0x0, &(0x7f0000000180)={[0x6]}, 0x8) 14:48:12 executing program 2: clone(0x80910b00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) set_mempolicy(0x3, &(0x7f0000000040), 0x0) gettid() r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x2, 0x3, 0x2d8, 0x190, 0x190, 0x95ffffff, 0x77, 0x93ffffff, 0x240, 0x240, 0x221, 0x240, 0x240, 0x3, 0x0, {[{{@uncond, 0x0, 0x130, 0x190, 0x0, {0xf6ffffff00000000}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "bdc74c01369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa6ecab6b1d2cc05e3182f64694d7d05fb8b8c8f56627a54f905d564eeeb8334f650ca0f3c44f7fda4d20a55050342ea85ecc8838e7088de33582f36a0a375bb7008adc297a5ece1bb2df53d17bef26bb6f800", 0x7f}}]}, @common=@SET={0x60}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'veth0_to_batadv\x00', 'ip6gretap0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x338) [ 2821.880935][T19926] FAULT_INJECTION: forcing a failure. [ 2821.880935][T19926] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2821.894526][T19926] CPU: 0 PID: 19926 Comm: syz-executor.4 Tainted: G W 5.16.0-rc6-syzkaller #0 [ 2821.904751][T19926] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2821.914840][T19926] Call Trace: [ 2821.918125][T19926] [ 2821.921085][T19926] dump_stack_lvl+0xd6/0x122 [ 2821.925691][T19926] dump_stack+0x11/0x1b 14:48:12 executing program 2: clone(0x80910b00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) set_mempolicy(0x3, &(0x7f0000000040), 0x0) gettid() r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x2, 0x3, 0x2d8, 0x190, 0x190, 0x95ffffff, 0x77, 0x93ffffff, 0x240, 0x240, 0x221, 0x240, 0x240, 0x3, 0x0, {[{{@uncond, 0x0, 0x130, 0x190, 0x0, {0xf7ffffff00000000}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "bdc74c01369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa6ecab6b1d2cc05e3182f64694d7d05fb8b8c8f56627a54f905d564eeeb8334f650ca0f3c44f7fda4d20a55050342ea85ecc8838e7088de33582f36a0a375bb7008adc297a5ece1bb2df53d17bef26bb6f800", 0x7f}}]}, @common=@SET={0x60}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'veth0_to_batadv\x00', 'ip6gretap0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x338) [ 2821.929962][T19926] should_fail+0x23c/0x250 [ 2821.934395][T19926] __alloc_pages+0x102/0x330 [ 2821.939001][T19926] alloc_pages+0x382/0x3d0 [ 2821.943532][T19926] folio_alloc+0x1a/0x20 [ 2821.947780][T19926] filemap_alloc_folio+0x53/0xf0 [ 2821.952935][T19926] page_cache_ra_unbounded+0x1c0/0x430 [ 2821.958430][T19926] ondemand_readahead+0x4f8/0x700 [ 2821.963546][T19926] ? filemap_get_read_batch+0x3e2/0x410 [ 2821.969184][T19926] page_cache_async_ra+0xed/0x120 [ 2821.974231][T19926] filemap_read+0x500/0x16d0 14:48:12 executing program 2: clone(0x80910b00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) set_mempolicy(0x3, &(0x7f0000000040), 0x0) gettid() r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x2, 0x3, 0x2d8, 0x190, 0x190, 0x95ffffff, 0x77, 0x93ffffff, 0x240, 0x240, 0x221, 0x240, 0x240, 0x3, 0x0, {[{{@uncond, 0x0, 0x130, 0x190, 0x0, {0xf801000000000000}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "bdc74c01369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa6ecab6b1d2cc05e3182f64694d7d05fb8b8c8f56627a54f905d564eeeb8334f650ca0f3c44f7fda4d20a55050342ea85ecc8838e7088de33582f36a0a375bb7008adc297a5ece1bb2df53d17bef26bb6f800", 0x7f}}]}, @common=@SET={0x60}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'veth0_to_batadv\x00', 'ip6gretap0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x338) [ 2821.978936][T19926] generic_file_read_iter+0x72/0x2a0 [ 2821.984431][T19926] ? iov_iter_pipe+0x100/0x150 [ 2821.989198][T19926] ? ext4_file_read_iter+0x7a/0x1f0 [ 2821.994421][T19926] generic_file_splice_read+0x24f/0x330 [ 2821.999975][T19926] ? splice_shrink_spd+0x60/0x60 [ 2822.004928][T19926] splice_direct_to_actor+0x2aa/0x650 [ 2822.010315][T19926] ? do_splice_direct+0x190/0x190 [ 2822.015353][T19926] do_splice_direct+0x106/0x190 [ 2822.020272][T19926] do_sendfile+0x675/0xc40 [ 2822.024687][T19926] __x64_sys_sendfile64+0x102/0x140 [ 2822.029891][T19926] do_syscall_64+0x44/0xd0 [ 2822.034349][T19926] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2822.040315][T19926] RIP: 0033:0x7f2d29acae99 [ 2822.044728][T19926] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2822.064338][T19926] RSP: 002b:00007f2d28c41168 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 2822.072759][T19926] RAX: ffffffffffffffda RBX: 00007f2d29bddf60 RCX: 00007f2d29acae99 14:48:12 executing program 5: clone(0x80910b00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) set_mempolicy(0x3, &(0x7f0000000040)=0xffffffff80000001, 0x400) gettid() r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, &(0x7f0000000080)=ANY=[@ANYBLOB="7549f8187a2a6e40594b4473692aef0dda6d1a46f2019ed7e86b1d711c76877056283bedab9579d2125c7cad3b1f28c963b3a626ef87b075574ff5612ccc80d8e14883ad2a8e6516a15c410ce005b2e841ebacd55a1365c685244ec3b66b003e7ec96ed005906d578130183c37"]) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x2, 0x3, 0x2d8, 0x190, 0x190, 0x95ffffff, 0x77, 0x93ffffff, 0x240, 0x240, 0x221, 0x240, 0x240, 0x3, 0x0, {[{{@uncond, 0x0, 0x130, 0x190, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "bdc74c01369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa6ecab6b1d2cc05e3182f64694d7d05fb8b8c8f56627a54f905d564eeeb8334f650ca0f3c44f7fda4d20a55050342ea85ecc8838e7088de33582f36a0a375bb7008adc297a5ece1bb2df53d17bef26bb6f800", 0x7f, 0x2}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0x56000000]}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'veth0_to_batadv\x00', 'ip6gretap0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x338) [ 2822.080801][T19926] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 2822.088847][T19926] RBP: 00007f2d28c411d0 R08: 0000000000000000 R09: 0000000000000000 [ 2822.096861][T19926] R10: 0000000000201000 R11: 0000000000000246 R12: 0000000000000002 [ 2822.104827][T19926] R13: 00007ffcc1d93fdf R14: 00007f2d28c41300 R15: 0000000000022000 [ 2822.112944][T19926] 14:48:13 executing program 1: r0 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0xe0) ftruncate(r0, 0x2007fff) close(0xffffffffffffffff) open(&(0x7f00000002c0)='./bus\x00', 0x14d842, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x201000) 14:48:13 executing program 2: clone(0x80910b00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) set_mempolicy(0x3, &(0x7f0000000040), 0x0) gettid() r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x2, 0x3, 0x2d8, 0x190, 0x190, 0x95ffffff, 0x77, 0x93ffffff, 0x240, 0x240, 0x221, 0x240, 0x240, 0x3, 0x0, {[{{@uncond, 0x0, 0x130, 0x190, 0x0, {0xf8ffffff00000000}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "bdc74c01369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa6ecab6b1d2cc05e3182f64694d7d05fb8b8c8f56627a54f905d564eeeb8334f650ca0f3c44f7fda4d20a55050342ea85ecc8838e7088de33582f36a0a375bb7008adc297a5ece1bb2df53d17bef26bb6f800", 0x7f}}]}, @common=@SET={0x60}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'veth0_to_batadv\x00', 'ip6gretap0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x338) 14:48:13 executing program 3: r0 = syz_io_uring_setup(0x2de5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000fe8000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_setup(0x7e3b, &(0x7f0000000200)={0x0, 0x6afa, 0x8, 0x3, 0x23}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000fe8000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000100)) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0xb2, 0x0, 0x0, 0x0, 0x7401) r3 = syz_io_uring_setup(0x5d66, &(0x7f00000002c0), &(0x7f0000ee7000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380), &(0x7f00000001c0)) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r3, 0x10000000) io_uring_enter(r3, 0x7443, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r3, 0x6e7f, 0x5213, 0x0, &(0x7f0000000180)={[0x6]}, 0x8) syz_io_uring_setup(0x2de5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000fe8000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000140)) (async) syz_io_uring_setup(0x7e3b, &(0x7f0000000200)={0x0, 0x6afa, 0x8, 0x3, 0x23}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000fe8000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000100)) (async) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) (async) io_uring_enter(r0, 0xb2, 0x0, 0x0, 0x0, 0x7401) (async) syz_io_uring_setup(0x5d66, &(0x7f00000002c0), &(0x7f0000ee7000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380), &(0x7f00000001c0)) (async) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r3, 0x10000000) (async) io_uring_enter(r3, 0x7443, 0x0, 0x0, 0x0, 0x0) (async) io_uring_enter(r3, 0x6e7f, 0x5213, 0x0, &(0x7f0000000180)={[0x6]}, 0x8) (async) 14:48:13 executing program 5: clone(0x80910b00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) set_mempolicy(0x3, &(0x7f0000000040)=0xffffffff80000001, 0x400) gettid() r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, &(0x7f0000000080)=ANY=[@ANYBLOB="7549f8187a2a6e40594b4473692aef0dda6d1a46f2019ed7e86b1d711c76877056283bedab9579d2125c7cad3b1f28c963b3a626ef87b075574ff5612ccc80d8e14883ad2a8e6516a15c410ce005b2e841ebacd55a1365c685244ec3b66b003e7ec96ed005906d578130183c37"]) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x2, 0x3, 0x2d8, 0x190, 0x190, 0x95ffffff, 0x77, 0x93ffffff, 0x240, 0x240, 0x221, 0x240, 0x240, 0x3, 0x0, {[{{@uncond, 0x0, 0x130, 0x190, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "bdc74c01369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa6ecab6b1d2cc05e3182f64694d7d05fb8b8c8f56627a54f905d564eeeb8334f650ca0f3c44f7fda4d20a55050342ea85ecc8838e7088de33582f36a0a375bb7008adc297a5ece1bb2df53d17bef26bb6f800", 0x7f, 0x2}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0x58000000]}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'veth0_to_batadv\x00', 'ip6gretap0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x338) 14:48:13 executing program 4: r0 = socket$inet6(0xa, 0x400000000001, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) ftruncate(r1, 0x2007fff) close(r0) open(&(0x7f00000002c0)='./bus\x00', 0x14d842, 0x0) sendfile(r0, r1, 0x0, 0x201000) (fail_nth: 54) [ 2822.427851][T20051] FAULT_INJECTION: forcing a failure. [ 2822.427851][T20051] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2822.441371][T20051] CPU: 0 PID: 20051 Comm: syz-executor.4 Tainted: G W 5.16.0-rc6-syzkaller #0 [ 2822.451529][T20051] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2822.461635][T20051] Call Trace: [ 2822.465020][T20051] [ 2822.468017][T20051] dump_stack_lvl+0xd6/0x122 [ 2822.472688][T20051] dump_stack+0x11/0x1b [ 2822.476940][T20051] should_fail+0x23c/0x250 [ 2822.481431][T20051] __alloc_pages+0x102/0x330 [ 2822.486075][T20051] alloc_pages+0x382/0x3d0 [ 2822.490493][T20051] folio_alloc+0x1a/0x20 [ 2822.494819][T20051] filemap_alloc_folio+0x53/0xf0 [ 2822.500198][T20051] page_cache_ra_unbounded+0x1c0/0x430 [ 2822.505672][T20051] ondemand_readahead+0x4f8/0x700 [ 2822.510768][T20051] ? filemap_get_read_batch+0x3e2/0x410 [ 2822.516334][T20051] page_cache_async_ra+0xed/0x120 [ 2822.521359][T20051] filemap_read+0x500/0x16d0 [ 2822.526219][T20051] generic_file_read_iter+0x72/0x2a0 [ 2822.531506][T20051] ? iov_iter_pipe+0x100/0x150 [ 2822.536348][T20051] ? ext4_file_read_iter+0x7a/0x1f0 [ 2822.541622][T20051] generic_file_splice_read+0x24f/0x330 [ 2822.547190][T20051] ? splice_shrink_spd+0x60/0x60 [ 2822.552134][T20051] splice_direct_to_actor+0x2aa/0x650 [ 2822.557506][T20051] ? do_splice_direct+0x190/0x190 [ 2822.562529][T20051] do_splice_direct+0x106/0x190 [ 2822.567430][T20051] do_sendfile+0x675/0xc40 [ 2822.571914][T20051] __x64_sys_sendfile64+0x102/0x140 [ 2822.577170][T20051] do_syscall_64+0x44/0xd0 [ 2822.581677][T20051] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2822.587594][T20051] RIP: 0033:0x7f2d29acae99 [ 2822.592052][T20051] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2822.611909][T20051] RSP: 002b:00007f2d28c41168 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 2822.620582][T20051] RAX: ffffffffffffffda RBX: 00007f2d29bddf60 RCX: 00007f2d29acae99 [ 2822.628654][T20051] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 2822.636684][T20051] RBP: 00007f2d28c411d0 R08: 0000000000000000 R09: 0000000000000000 [ 2822.644732][T20051] R10: 0000000000201000 R11: 0000000000000246 R12: 0000000000000002 [ 2822.652716][T20051] R13: 00007ffcc1d93fdf R14: 00007f2d28c41300 R15: 0000000000022000 [ 2822.660762][T20051] 14:48:13 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x4002, 0x36) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x2) write$evdev(r1, &(0x7f000004d000)=[{}], 0xfffffe82) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000080), 0x46400, 0x0) r3 = openat$cgroup_ro(r0, &(0x7f0000000100)='cpuacct.usage_percpu_user\x00', 0x0, 0x0) ioctl$EVIOCREVOKE(r3, 0x40044591, &(0x7f0000000140)=0x3) ioctl$EVIOCSCLOCKID(r2, 0x400445a0, &(0x7f00000000c0)=0xffff7fff) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x4002, 0x36) (async) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) (async) syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x2) (async) write$evdev(r1, &(0x7f000004d000)=[{}], 0xfffffe82) (async) openat$null(0xffffffffffffff9c, &(0x7f0000000080), 0x46400, 0x0) (async) openat$cgroup_ro(r0, &(0x7f0000000100)='cpuacct.usage_percpu_user\x00', 0x0, 0x0) (async) ioctl$EVIOCREVOKE(r3, 0x40044591, &(0x7f0000000140)=0x3) (async) ioctl$EVIOCSCLOCKID(r2, 0x400445a0, &(0x7f00000000c0)=0xffff7fff) (async) 14:48:13 executing program 3: r0 = syz_io_uring_setup(0x2de5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000fe8000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_setup(0x7e3b, &(0x7f0000000200)={0x0, 0x6afa, 0x8, 0x3, 0x23}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000fe8000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000100)) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0xb2, 0x0, 0x0, 0x0, 0x7401) r3 = syz_io_uring_setup(0x5d66, &(0x7f00000002c0), &(0x7f0000ee7000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380), &(0x7f00000001c0)) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r3, 0x10000000) io_uring_enter(r3, 0x7443, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r3, 0x6e7f, 0x5213, 0x0, &(0x7f0000000180)={[0x6]}, 0x8) syz_io_uring_setup(0x2de5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000fe8000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000140)) (async) syz_io_uring_setup(0x7e3b, &(0x7f0000000200)={0x0, 0x6afa, 0x8, 0x3, 0x23}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000fe8000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000100)) (async) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) (async) io_uring_enter(r0, 0xb2, 0x0, 0x0, 0x0, 0x7401) (async) syz_io_uring_setup(0x5d66, &(0x7f00000002c0), &(0x7f0000ee7000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380), &(0x7f00000001c0)) (async) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r3, 0x10000000) (async) io_uring_enter(r3, 0x7443, 0x0, 0x0, 0x0, 0x0) (async) io_uring_enter(r3, 0x6e7f, 0x5213, 0x0, &(0x7f0000000180)={[0x6]}, 0x8) (async) 14:48:13 executing program 1: r0 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0xe0) ftruncate(r0, 0x2007fff) (async) close(0xffffffffffffffff) open(&(0x7f00000002c0)='./bus\x00', 0x14d842, 0x0) (async, rerun: 32) sendfile(0xffffffffffffffff, r0, 0x0, 0x201000) (rerun: 32) 14:48:13 executing program 5: clone(0x80910b00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) set_mempolicy(0x3, &(0x7f0000000040)=0xffffffff80000001, 0x400) gettid() r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, &(0x7f0000000080)=ANY=[@ANYBLOB="7549f8187a2a6e40594b4473692aef0dda6d1a46f2019ed7e86b1d711c76877056283bedab9579d2125c7cad3b1f28c963b3a626ef87b075574ff5612ccc80d8e14883ad2a8e6516a15c410ce005b2e841ebacd55a1365c685244ec3b66b003e7ec96ed005906d578130183c37"]) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x2, 0x3, 0x2d8, 0x190, 0x190, 0x95ffffff, 0x77, 0x93ffffff, 0x240, 0x240, 0x221, 0x240, 0x240, 0x3, 0x0, {[{{@uncond, 0x0, 0x130, 0x190, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "bdc74c01369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa6ecab6b1d2cc05e3182f64694d7d05fb8b8c8f56627a54f905d564eeeb8334f650ca0f3c44f7fda4d20a55050342ea85ecc8838e7088de33582f36a0a375bb7008adc297a5ece1bb2df53d17bef26bb6f800", 0x7f, 0x2}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0x59000000]}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'veth0_to_batadv\x00', 'ip6gretap0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x338) 14:48:13 executing program 2: clone(0x80910b00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) set_mempolicy(0x3, &(0x7f0000000040), 0x0) gettid() r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x2, 0x3, 0x2d8, 0x190, 0x190, 0x95ffffff, 0x77, 0x93ffffff, 0x240, 0x240, 0x221, 0x240, 0x240, 0x3, 0x0, {[{{@uncond, 0x0, 0x130, 0x190, 0x0, {0xf902000000000000}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "bdc74c01369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa6ecab6b1d2cc05e3182f64694d7d05fb8b8c8f56627a54f905d564eeeb8334f650ca0f3c44f7fda4d20a55050342ea85ecc8838e7088de33582f36a0a375bb7008adc297a5ece1bb2df53d17bef26bb6f800", 0x7f}}]}, @common=@SET={0x60}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'veth0_to_batadv\x00', 'ip6gretap0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x338) 14:48:13 executing program 4: r0 = socket$inet6(0xa, 0x400000000001, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) ftruncate(r1, 0x2007fff) close(r0) open(&(0x7f00000002c0)='./bus\x00', 0x14d842, 0x0) sendfile(r0, r1, 0x0, 0x201000) (fail_nth: 55) [ 2822.978152][T20163] FAULT_INJECTION: forcing a failure. [ 2822.978152][T20163] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2822.991437][T20163] CPU: 0 PID: 20163 Comm: syz-executor.4 Tainted: G W 5.16.0-rc6-syzkaller #0 [ 2823.001645][T20163] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2823.011700][T20163] Call Trace: [ 2823.014982][T20163] [ 2823.017972][T20163] dump_stack_lvl+0xd6/0x122 [ 2823.022568][T20163] dump_stack+0x11/0x1b 14:48:13 executing program 5: clone(0x80910b00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) set_mempolicy(0x3, &(0x7f0000000040)=0xffffffff80000001, 0x400) gettid() r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, &(0x7f0000000080)=ANY=[@ANYBLOB="7549f8187a2a6e40594b4473692aef0dda6d1a46f2019ed7e86b1d711c76877056283bedab9579d2125c7cad3b1f28c963b3a626ef87b075574ff5612ccc80d8e14883ad2a8e6516a15c410ce005b2e841ebacd55a1365c685244ec3b66b003e7ec96ed005906d578130183c37"]) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x2, 0x3, 0x2d8, 0x190, 0x190, 0x95ffffff, 0x77, 0x93ffffff, 0x240, 0x240, 0x221, 0x240, 0x240, 0x3, 0x0, {[{{@uncond, 0x0, 0x130, 0x190, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "bdc74c01369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa6ecab6b1d2cc05e3182f64694d7d05fb8b8c8f56627a54f905d564eeeb8334f650ca0f3c44f7fda4d20a55050342ea85ecc8838e7088de33582f36a0a375bb7008adc297a5ece1bb2df53d17bef26bb6f800", 0x7f, 0x2}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0x59010000]}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'veth0_to_batadv\x00', 'ip6gretap0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x338) 14:48:13 executing program 1: r0 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0xe0) ftruncate(r0, 0x2007fff) close(0xffffffffffffffff) open(&(0x7f00000002c0)='./bus\x00', 0x14d842, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x201000) open(&(0x7f0000002000)='./bus\x00', 0x143042, 0xe0) (async) ftruncate(r0, 0x2007fff) (async) close(0xffffffffffffffff) (async) open(&(0x7f00000002c0)='./bus\x00', 0x14d842, 0x0) (async) sendfile(0xffffffffffffffff, r0, 0x0, 0x201000) (async) [ 2823.026792][T20163] should_fail+0x23c/0x250 [ 2823.031221][T20163] __alloc_pages+0x102/0x330 [ 2823.035846][T20163] alloc_pages+0x382/0x3d0 [ 2823.040276][T20163] folio_alloc+0x1a/0x20 [ 2823.044513][T20163] filemap_alloc_folio+0x53/0xf0 [ 2823.049471][T20163] page_cache_ra_unbounded+0x1c0/0x430 [ 2823.055008][T20163] ondemand_readahead+0x4f8/0x700 [ 2823.060094][T20163] ? filemap_get_read_batch+0x3e2/0x410 [ 2823.065646][T20163] page_cache_async_ra+0xed/0x120 [ 2823.070675][T20163] filemap_read+0x500/0x16d0 14:48:13 executing program 3: syz_io_uring_setup(0x2de5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000fe8000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r0, r1, &(0x7f00000001c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) [ 2823.075344][T20163] generic_file_read_iter+0x72/0x2a0 [ 2823.080687][T20163] ? iov_iter_pipe+0x100/0x150 [ 2823.085478][T20163] ? ext4_file_read_iter+0x7a/0x1f0 [ 2823.090674][T20163] generic_file_splice_read+0x24f/0x330 [ 2823.096216][T20163] ? splice_shrink_spd+0x60/0x60 [ 2823.101174][T20163] splice_direct_to_actor+0x2aa/0x650 [ 2823.106604][T20163] ? do_splice_direct+0x190/0x190 [ 2823.111664][T20163] do_splice_direct+0x106/0x190 [ 2823.116526][T20163] do_sendfile+0x675/0xc40 [ 2823.120949][T20163] __x64_sys_sendfile64+0x102/0x140 14:48:13 executing program 2: clone(0x80910b00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) set_mempolicy(0x3, &(0x7f0000000040), 0x0) gettid() r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x2, 0x3, 0x2d8, 0x190, 0x190, 0x95ffffff, 0x77, 0x93ffffff, 0x240, 0x240, 0x221, 0x240, 0x240, 0x3, 0x0, {[{{@uncond, 0x0, 0x130, 0x190, 0x0, {0xf903000000000000}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "bdc74c01369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa6ecab6b1d2cc05e3182f64694d7d05fb8b8c8f56627a54f905d564eeeb8334f650ca0f3c44f7fda4d20a55050342ea85ecc8838e7088de33582f36a0a375bb7008adc297a5ece1bb2df53d17bef26bb6f800", 0x7f}}]}, @common=@SET={0x60}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'veth0_to_batadv\x00', 'ip6gretap0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x338) [ 2823.126154][T20163] do_syscall_64+0x44/0xd0 [ 2823.130569][T20163] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2823.136471][T20163] RIP: 0033:0x7f2d29acae99 [ 2823.140879][T20163] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2823.160487][T20163] RSP: 002b:00007f2d28c41168 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 2823.168894][T20163] RAX: ffffffffffffffda RBX: 00007f2d29bddf60 RCX: 00007f2d29acae99 14:48:13 executing program 1: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) ftruncate(r1, 0x2007fff) close(r0) open(&(0x7f00000002c0)='./bus\x00', 0x14d842, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) sendfile(r0, r1, 0x0, 0xab0) setsockopt$inet6_int(r0, 0x29, 0x13, &(0x7f0000000000)=0x9, 0x4) 14:48:13 executing program 5: clone(0x80910b00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) set_mempolicy(0x3, &(0x7f0000000040)=0xffffffff80000001, 0x400) gettid() r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, &(0x7f0000000080)=ANY=[@ANYBLOB="7549f8187a2a6e40594b4473692aef0dda6d1a46f2019ed7e86b1d711c76877056283bedab9579d2125c7cad3b1f28c963b3a626ef87b075574ff5612ccc80d8e14883ad2a8e6516a15c410ce005b2e841ebacd55a1365c685244ec3b66b003e7ec96ed005906d578130183c37"]) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x2, 0x3, 0x2d8, 0x190, 0x190, 0x95ffffff, 0x77, 0x93ffffff, 0x240, 0x240, 0x221, 0x240, 0x240, 0x3, 0x0, {[{{@uncond, 0x0, 0x130, 0x190, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "bdc74c01369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa6ecab6b1d2cc05e3182f64694d7d05fb8b8c8f56627a54f905d564eeeb8334f650ca0f3c44f7fda4d20a55050342ea85ecc8838e7088de33582f36a0a375bb7008adc297a5ece1bb2df53d17bef26bb6f800", 0x7f, 0x2}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0x59020000]}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'veth0_to_batadv\x00', 'ip6gretap0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x338) [ 2823.176862][T20163] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 2823.184831][T20163] RBP: 00007f2d28c411d0 R08: 0000000000000000 R09: 0000000000000000 [ 2823.192822][T20163] R10: 0000000000201000 R11: 0000000000000246 R12: 0000000000000002 [ 2823.200792][T20163] R13: 00007ffcc1d93fdf R14: 00007f2d28c41300 R15: 0000000000022000 [ 2823.208820][T20163] 14:48:14 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x4002, 0x36) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) (async) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x2) write$evdev(r1, &(0x7f000004d000)=[{}], 0xfffffe82) (async) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000080), 0x46400, 0x0) (async) r3 = openat$cgroup_ro(r0, &(0x7f0000000100)='cpuacct.usage_percpu_user\x00', 0x0, 0x0) ioctl$EVIOCREVOKE(r3, 0x40044591, &(0x7f0000000140)=0x3) (async) ioctl$EVIOCSCLOCKID(r2, 0x400445a0, &(0x7f00000000c0)=0xffff7fff) 14:48:14 executing program 2: clone(0x80910b00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) set_mempolicy(0x3, &(0x7f0000000040), 0x0) gettid() r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x2, 0x3, 0x2d8, 0x190, 0x190, 0x95ffffff, 0x77, 0x93ffffff, 0x240, 0x240, 0x221, 0x240, 0x240, 0x3, 0x0, {[{{@uncond, 0x0, 0x130, 0x190, 0x0, {0xf9ffffff00000000}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "bdc74c01369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa6ecab6b1d2cc05e3182f64694d7d05fb8b8c8f56627a54f905d564eeeb8334f650ca0f3c44f7fda4d20a55050342ea85ecc8838e7088de33582f36a0a375bb7008adc297a5ece1bb2df53d17bef26bb6f800", 0x7f}}]}, @common=@SET={0x60}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'veth0_to_batadv\x00', 'ip6gretap0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x338) 14:48:14 executing program 3: syz_io_uring_setup(0x2de5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000fe8000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r0, r1, &(0x7f00000001c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) 14:48:14 executing program 5: clone(0x80910b00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) set_mempolicy(0x3, &(0x7f0000000040)=0xffffffff80000001, 0x400) gettid() r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, &(0x7f0000000080)=ANY=[@ANYBLOB="7549f8187a2a6e40594b4473692aef0dda6d1a46f2019ed7e86b1d711c76877056283bedab9579d2125c7cad3b1f28c963b3a626ef87b075574ff5612ccc80d8e14883ad2a8e6516a15c410ce005b2e841ebacd55a1365c685244ec3b66b003e7ec96ed005906d578130183c37"]) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x2, 0x3, 0x2d8, 0x190, 0x190, 0x95ffffff, 0x77, 0x93ffffff, 0x240, 0x240, 0x221, 0x240, 0x240, 0x3, 0x0, {[{{@uncond, 0x0, 0x130, 0x190, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "bdc74c01369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa6ecab6b1d2cc05e3182f64694d7d05fb8b8c8f56627a54f905d564eeeb8334f650ca0f3c44f7fda4d20a55050342ea85ecc8838e7088de33582f36a0a375bb7008adc297a5ece1bb2df53d17bef26bb6f800", 0x7f, 0x2}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0x5a000000]}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'veth0_to_batadv\x00', 'ip6gretap0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x338) 14:48:14 executing program 1: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) ftruncate(r1, 0x2007fff) (async) close(r0) (async) open(&(0x7f00000002c0)='./bus\x00', 0x14d842, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) (async) sendfile(r0, r1, 0x0, 0xab0) setsockopt$inet6_int(r0, 0x29, 0x13, &(0x7f0000000000)=0x9, 0x4) 14:48:14 executing program 4: r0 = socket$inet6(0xa, 0x400000000001, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) ftruncate(r1, 0x2007fff) close(r0) open(&(0x7f00000002c0)='./bus\x00', 0x14d842, 0x0) sendfile(r0, r1, 0x0, 0x201000) (fail_nth: 56) 14:48:14 executing program 2: clone(0x80910b00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) set_mempolicy(0x3, &(0x7f0000000040), 0x0) gettid() r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x2, 0x3, 0x2d8, 0x190, 0x190, 0x95ffffff, 0x77, 0x93ffffff, 0x240, 0x240, 0x221, 0x240, 0x240, 0x3, 0x0, {[{{@uncond, 0x0, 0x130, 0x190, 0x0, {0xfa01000000000000}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "bdc74c01369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa6ecab6b1d2cc05e3182f64694d7d05fb8b8c8f56627a54f905d564eeeb8334f650ca0f3c44f7fda4d20a55050342ea85ecc8838e7088de33582f36a0a375bb7008adc297a5ece1bb2df53d17bef26bb6f800", 0x7f}}]}, @common=@SET={0x60}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'veth0_to_batadv\x00', 'ip6gretap0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x338) [ 2823.882072][T20408] FAULT_INJECTION: forcing a failure. [ 2823.882072][T20408] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2823.895512][T20408] CPU: 0 PID: 20408 Comm: syz-executor.4 Tainted: G W 5.16.0-rc6-syzkaller #0 [ 2823.905671][T20408] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2823.915738][T20408] Call Trace: [ 2823.919021][T20408] [ 2823.921943][T20408] dump_stack_lvl+0xd6/0x122 [ 2823.926610][T20408] dump_stack+0x11/0x1b 14:48:14 executing program 2: clone(0x80910b00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) set_mempolicy(0x3, &(0x7f0000000040), 0x0) gettid() r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x2, 0x3, 0x2d8, 0x190, 0x190, 0x95ffffff, 0x77, 0x93ffffff, 0x240, 0x240, 0x221, 0x240, 0x240, 0x3, 0x0, {[{{@uncond, 0x0, 0x130, 0x190, 0x0, {0xfaffffff00000000}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "bdc74c01369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa6ecab6b1d2cc05e3182f64694d7d05fb8b8c8f56627a54f905d564eeeb8334f650ca0f3c44f7fda4d20a55050342ea85ecc8838e7088de33582f36a0a375bb7008adc297a5ece1bb2df53d17bef26bb6f800", 0x7f}}]}, @common=@SET={0x60}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'veth0_to_batadv\x00', 'ip6gretap0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x338) [ 2823.930840][T20408] should_fail+0x23c/0x250 [ 2823.935382][T20408] __alloc_pages+0x102/0x330 [ 2823.940011][T20408] alloc_pages+0x382/0x3d0 [ 2823.944582][T20408] folio_alloc+0x1a/0x20 [ 2823.948820][T20408] filemap_alloc_folio+0x53/0xf0 [ 2823.953759][T20408] page_cache_ra_unbounded+0x1c0/0x430 [ 2823.959220][T20408] ondemand_readahead+0x4f8/0x700 [ 2823.964257][T20408] ? filemap_get_read_batch+0x3e2/0x410 [ 2823.969871][T20408] page_cache_async_ra+0xed/0x120 [ 2823.974898][T20408] filemap_read+0x500/0x16d0 14:48:14 executing program 2: clone(0x80910b00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) set_mempolicy(0x3, &(0x7f0000000040), 0x0) gettid() r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x2, 0x3, 0x2d8, 0x190, 0x190, 0x95ffffff, 0x77, 0x93ffffff, 0x240, 0x240, 0x221, 0x240, 0x240, 0x3, 0x0, {[{{@uncond, 0x0, 0x130, 0x190, 0x0, {0xfbffffff00000000}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "bdc74c01369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa6ecab6b1d2cc05e3182f64694d7d05fb8b8c8f56627a54f905d564eeeb8334f650ca0f3c44f7fda4d20a55050342ea85ecc8838e7088de33582f36a0a375bb7008adc297a5ece1bb2df53d17bef26bb6f800", 0x7f}}]}, @common=@SET={0x60}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'veth0_to_batadv\x00', 'ip6gretap0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x338) [ 2823.979504][T20408] generic_file_read_iter+0x72/0x2a0 [ 2823.984789][T20408] ? iov_iter_pipe+0x100/0x150 [ 2823.989557][T20408] ? ext4_file_read_iter+0x7a/0x1f0 [ 2823.994755][T20408] generic_file_splice_read+0x24f/0x330 [ 2824.000392][T20408] ? splice_shrink_spd+0x60/0x60 [ 2824.005337][T20408] splice_direct_to_actor+0x2aa/0x650 [ 2824.010714][T20408] ? do_splice_direct+0x190/0x190 [ 2824.015743][T20408] do_splice_direct+0x106/0x190 [ 2824.020669][T20408] do_sendfile+0x675/0xc40 [ 2824.025084][T20408] __x64_sys_sendfile64+0x102/0x140 14:48:14 executing program 2: clone(0x80910b00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) set_mempolicy(0x3, &(0x7f0000000040), 0x0) gettid() r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x2, 0x3, 0x2d8, 0x190, 0x190, 0x95ffffff, 0x77, 0x93ffffff, 0x240, 0x240, 0x221, 0x240, 0x240, 0x3, 0x0, {[{{@uncond, 0x0, 0x130, 0x190, 0x0, {0xfdffffff00000000}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "bdc74c01369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa6ecab6b1d2cc05e3182f64694d7d05fb8b8c8f56627a54f905d564eeeb8334f650ca0f3c44f7fda4d20a55050342ea85ecc8838e7088de33582f36a0a375bb7008adc297a5ece1bb2df53d17bef26bb6f800", 0x7f}}]}, @common=@SET={0x60}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'veth0_to_batadv\x00', 'ip6gretap0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x338) [ 2824.030295][T20408] do_syscall_64+0x44/0xd0 [ 2824.034717][T20408] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2824.040610][T20408] RIP: 0033:0x7f2d29acae99 [ 2824.045016][T20408] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2824.064633][T20408] RSP: 002b:00007f2d28c41168 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 2824.073047][T20408] RAX: ffffffffffffffda RBX: 00007f2d29bddf60 RCX: 00007f2d29acae99 14:48:14 executing program 1: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) ftruncate(r1, 0x2007fff) close(r0) open(&(0x7f00000002c0)='./bus\x00', 0x14d842, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) sendfile(r0, r1, 0x0, 0xab0) setsockopt$inet6_int(r0, 0x29, 0x13, &(0x7f0000000000)=0x9, 0x4) socket$inet6(0xa, 0x400000000001, 0x0) (async) open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) (async) ftruncate(r1, 0x2007fff) (async) close(r0) (async) open(&(0x7f00000002c0)='./bus\x00', 0x14d842, 0x0) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) (async) sendfile(r0, r1, 0x0, 0xab0) (async) setsockopt$inet6_int(r0, 0x29, 0x13, &(0x7f0000000000)=0x9, 0x4) (async) 14:48:14 executing program 2: clone(0x80910b00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) set_mempolicy(0x3, &(0x7f0000000040), 0x0) gettid() r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x2, 0x3, 0x2d8, 0x190, 0x190, 0x95ffffff, 0x77, 0x93ffffff, 0x240, 0x240, 0x221, 0x240, 0x240, 0x3, 0x0, {[{{@uncond, 0x0, 0x130, 0x190, 0x0, {0xfe00000000000000}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "bdc74c01369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa6ecab6b1d2cc05e3182f64694d7d05fb8b8c8f56627a54f905d564eeeb8334f650ca0f3c44f7fda4d20a55050342ea85ecc8838e7088de33582f36a0a375bb7008adc297a5ece1bb2df53d17bef26bb6f800", 0x7f}}]}, @common=@SET={0x60}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'veth0_to_batadv\x00', 'ip6gretap0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x338) [ 2824.081013][T20408] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 2824.088978][T20408] RBP: 00007f2d28c411d0 R08: 0000000000000000 R09: 0000000000000000 [ 2824.096968][T20408] R10: 0000000000201000 R11: 0000000000000246 R12: 0000000000000002 [ 2824.104935][T20408] R13: 00007ffcc1d93fdf R14: 00007f2d28c41300 R15: 0000000000022000 [ 2824.113002][T20408] 14:48:15 executing program 0: r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000025c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000100)=0x14) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x12c, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0xfc, 0x2, {{}, [@TCA_NETEM_DELAY_DIST={0x45, 0x2, "7d2b1c2d7e6ca128a9bbe2e203b4ebed6de920ef368c1be6e4b441ddd94bd6f70cea6c3c03e9950fbeec369a9bf99b7c20753ccd678fd6dd5dc072a1419b7876d3"}, @TCA_NETEM_ECN={0x8}, @TCA_NETEM_SLOT={0x2c, 0xc, {0x759, 0x7fff, 0x1000, 0x67bf, 0x3}}, @TCA_NETEM_LATENCY64={0xc, 0xa, 0x2}, @TCA_NETEM_DELAY_DIST={0x44, 0x2, "e8d3252fd15001026ede6b9425341d1864d90de6424d24104db908874fa42a71a7b3fe2c9999b68845c67be19d7cadbea6c3a19a7c146349660bfd8664ad8faf"}, @TCA_NETEM_RATE={0x14, 0x6, {0x10001, 0x0, 0x52e, 0x6}}]}}}]}, 0x12c}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000140)={'syztnl1\x00', &(0x7f00000000c0)={'syztnl1\x00', 0x0, 0x2f, 0x2, 0x7f, 0x6b1, 0x12, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, @private1, 0x20, 0x8000, 0x6}}) sendmsg$ETHTOOL_MSG_PAUSE_SET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)={0x70, r0, 0x4, 0x70bd26, 0x25dfdbfd, {}, [@ETHTOOL_A_PAUSE_RX={0x5}, @ETHTOOL_A_PAUSE_RX={0x5}, @ETHTOOL_A_PAUSE_AUTONEG={0x5, 0x2, 0x1}, @ETHTOOL_A_PAUSE_HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}, @ETHTOOL_A_PAUSE_AUTONEG={0x5, 0x2, 0x1}, @ETHTOOL_A_PAUSE_RX={0x5}, @ETHTOOL_A_PAUSE_RX={0x5}, @ETHTOOL_A_PAUSE_TX={0x5, 0x4, 0x1}, @ETHTOOL_A_PAUSE_AUTONEG={0x5}]}, 0x70}, 0x1, 0x0, 0x0, 0x40080}, 0x4000000) r5 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r5, 0x0) r6 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x2) write$evdev(r6, &(0x7f000004d000)=[{}], 0xfffffe82) 14:48:15 executing program 2: clone(0x80910b00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) set_mempolicy(0x3, &(0x7f0000000040), 0x0) gettid() r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x2, 0x3, 0x2d8, 0x190, 0x190, 0x95ffffff, 0x77, 0x93ffffff, 0x240, 0x240, 0x221, 0x240, 0x240, 0x3, 0x0, {[{{@uncond, 0x0, 0x130, 0x190, 0x0, {0xffffffff00000000}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "bdc74c01369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa6ecab6b1d2cc05e3182f64694d7d05fb8b8c8f56627a54f905d564eeeb8334f650ca0f3c44f7fda4d20a55050342ea85ecc8838e7088de33582f36a0a375bb7008adc297a5ece1bb2df53d17bef26bb6f800", 0x7f}}]}, @common=@SET={0x60}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'veth0_to_batadv\x00', 'ip6gretap0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x338) 14:48:15 executing program 1: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) ftruncate(r1, 0x2007fff) close(r0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000040)={0x8, 'gre0\x00', {'hsr0\x00'}, 0x4}) open(&(0x7f0000000000)='./bus\x00', 0x14d842, 0x0) sendfile(r0, r1, 0x0, 0x201000) 14:48:15 executing program 4: r0 = socket$inet6(0xa, 0x400000000001, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) ftruncate(r1, 0x2007fff) close(r0) open(&(0x7f00000002c0)='./bus\x00', 0x14d842, 0x0) sendfile(r0, r1, 0x0, 0x201000) (fail_nth: 57) 14:48:15 executing program 3: syz_io_uring_setup(0x2de5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000fe8000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r0, r1, &(0x7f00000001c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x2de5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000fe8000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000140)) (async) syz_io_uring_submit(r0, r1, &(0x7f00000001c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) (async) 14:48:15 executing program 5: clone(0x80910b00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) set_mempolicy(0x3, &(0x7f0000000040)=0xffffffff80000001, 0x400) gettid() r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, &(0x7f0000000080)=ANY=[@ANYBLOB="7549f8187a2a6e40594b4473692aef0dda6d1a46f2019ed7e86b1d711c76877056283bedab9579d2125c7cad3b1f28c963b3a626ef87b075574ff5612ccc80d8e14883ad2a8e6516a15c410ce005b2e841ebacd55a1365c685244ec3b66b003e7ec96ed005906d578130183c37"]) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x2, 0x3, 0x2d8, 0x190, 0x190, 0x95ffffff, 0x77, 0x93ffffff, 0x240, 0x240, 0x221, 0x240, 0x240, 0x3, 0x0, {[{{@uncond, 0x0, 0x130, 0x190, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "bdc74c01369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa6ecab6b1d2cc05e3182f64694d7d05fb8b8c8f56627a54f905d564eeeb8334f650ca0f3c44f7fda4d20a55050342ea85ecc8838e7088de33582f36a0a375bb7008adc297a5ece1bb2df53d17bef26bb6f800", 0x7f, 0x2}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0x5a020000]}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'veth0_to_batadv\x00', 'ip6gretap0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x338) 14:48:15 executing program 5: clone(0x80910b00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) set_mempolicy(0x3, &(0x7f0000000040)=0xffffffff80000001, 0x400) gettid() r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, &(0x7f0000000080)=ANY=[@ANYBLOB="7549f8187a2a6e40594b4473692aef0dda6d1a46f2019ed7e86b1d711c76877056283bedab9579d2125c7cad3b1f28c963b3a626ef87b075574ff5612ccc80d8e14883ad2a8e6516a15c410ce005b2e841ebacd55a1365c685244ec3b66b003e7ec96ed005906d578130183c37"]) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x2, 0x3, 0x2d8, 0x190, 0x190, 0x95ffffff, 0x77, 0x93ffffff, 0x240, 0x240, 0x221, 0x240, 0x240, 0x3, 0x0, {[{{@uncond, 0x0, 0x130, 0x190, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "bdc74c01369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa6ecab6b1d2cc05e3182f64694d7d05fb8b8c8f56627a54f905d564eeeb8334f650ca0f3c44f7fda4d20a55050342ea85ecc8838e7088de33582f36a0a375bb7008adc297a5ece1bb2df53d17bef26bb6f800", 0x7f, 0x2}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0x5f000000]}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'veth0_to_batadv\x00', 'ip6gretap0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x338) [ 2824.824481][T20458] FAULT_INJECTION: forcing a failure. [ 2824.824481][T20458] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2824.837771][T20458] CPU: 0 PID: 20458 Comm: syz-executor.4 Tainted: G W 5.16.0-rc6-syzkaller #0 [ 2824.848019][T20458] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2824.858073][T20458] Call Trace: [ 2824.861350][T20458] [ 2824.864277][T20458] dump_stack_lvl+0xd6/0x122 [ 2824.868983][T20458] dump_stack+0x11/0x1b 14:48:15 executing program 5: clone(0x80910b00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) set_mempolicy(0x3, &(0x7f0000000040)=0xffffffff80000001, 0x400) gettid() r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, &(0x7f0000000080)=ANY=[@ANYBLOB="7549f8187a2a6e40594b4473692aef0dda6d1a46f2019ed7e86b1d711c76877056283bedab9579d2125c7cad3b1f28c963b3a626ef87b075574ff5612ccc80d8e14883ad2a8e6516a15c410ce005b2e841ebacd55a1365c685244ec3b66b003e7ec96ed005906d578130183c37"]) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x2, 0x3, 0x2d8, 0x190, 0x190, 0x95ffffff, 0x77, 0x93ffffff, 0x240, 0x240, 0x221, 0x240, 0x240, 0x3, 0x0, {[{{@uncond, 0x0, 0x130, 0x190, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "bdc74c01369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa6ecab6b1d2cc05e3182f64694d7d05fb8b8c8f56627a54f905d564eeeb8334f650ca0f3c44f7fda4d20a55050342ea85ecc8838e7088de33582f36a0a375bb7008adc297a5ece1bb2df53d17bef26bb6f800", 0x7f, 0x2}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0x60000000]}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'veth0_to_batadv\x00', 'ip6gretap0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x338) [ 2824.873151][T20458] should_fail+0x23c/0x250 [ 2824.877631][T20458] __alloc_pages+0x102/0x330 [ 2824.882269][T20458] alloc_pages+0x382/0x3d0 [ 2824.886690][T20458] folio_alloc+0x1a/0x20 [ 2824.890939][T20458] filemap_alloc_folio+0x53/0xf0 [ 2824.896027][T20458] page_cache_ra_unbounded+0x1c0/0x430 [ 2824.901556][T20458] ondemand_readahead+0x4f8/0x700 [ 2824.906669][T20458] ? filemap_get_read_batch+0x3e2/0x410 [ 2824.912302][T20458] page_cache_async_ra+0xed/0x120 [ 2824.917376][T20458] filemap_read+0x500/0x16d0 14:48:15 executing program 1: r0 = socket$inet6(0xa, 0x400000000001, 0x0) (async) r1 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) ftruncate(r1, 0x2007fff) (async) close(r0) (async) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000040)={0x8, 'gre0\x00', {'hsr0\x00'}, 0x4}) (async) open(&(0x7f0000000000)='./bus\x00', 0x14d842, 0x0) (async) sendfile(r0, r1, 0x0, 0x201000) [ 2824.922019][T20458] generic_file_read_iter+0x72/0x2a0 [ 2824.927314][T20458] ? iov_iter_pipe+0x100/0x150 [ 2824.932085][T20458] ? ext4_file_read_iter+0x7a/0x1f0 [ 2824.937291][T20458] generic_file_splice_read+0x24f/0x330 [ 2824.942873][T20458] ? splice_shrink_spd+0x60/0x60 [ 2824.947818][T20458] splice_direct_to_actor+0x2aa/0x650 [ 2824.953262][T20458] ? do_splice_direct+0x190/0x190 [ 2824.958894][T20458] do_splice_direct+0x106/0x190 [ 2824.963848][T20458] do_sendfile+0x675/0xc40 [ 2824.968282][T20458] __x64_sys_sendfile64+0x102/0x140 14:48:15 executing program 3: r0 = syz_io_uring_setup(0x2de5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000fe8000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0xb2, 0x0, 0x0, 0x0, 0x7401) r3 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_int(r3, 0x29, 0xd1, &(0x7f0000000000)=0x4, 0x4) setsockopt$inet6_MRT6_ADD_MFC(r3, 0x29, 0xc8, 0x0, 0x4) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r3, 0x29, 0xc9, 0x0, 0x0) ioctl$BTRFS_IOC_QUOTA_CTL(r3, 0xc0109428, &(0x7f0000000080)={0x1, 0x1ff}) [ 2824.973542][T20458] do_syscall_64+0x44/0xd0 [ 2824.977972][T20458] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2824.983885][T20458] RIP: 0033:0x7f2d29acae99 [ 2824.988300][T20458] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2825.007982][T20458] RSP: 002b:00007f2d28c41168 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 2825.016432][T20458] RAX: ffffffffffffffda RBX: 00007f2d29bddf60 RCX: 00007f2d29acae99 14:48:15 executing program 2: clone(0x80910b00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) set_mempolicy(0x3, &(0x7f0000000040), 0x0) gettid() r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x2, 0x3, 0x2d8, 0x190, 0x190, 0x95ffffff, 0x77, 0x93ffffff, 0x240, 0x240, 0x221, 0x240, 0x240, 0x3, 0x0, {[{{@uncond, 0x0, 0x130, 0x190, 0x0, {0x0, 0x2}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "bdc74c01369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa6ecab6b1d2cc05e3182f64694d7d05fb8b8c8f56627a54f905d564eeeb8334f650ca0f3c44f7fda4d20a55050342ea85ecc8838e7088de33582f36a0a375bb7008adc297a5ece1bb2df53d17bef26bb6f800", 0x7f}}]}, @common=@SET={0x60}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'veth0_to_batadv\x00', 'ip6gretap0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x338) [ 2825.024488][T20458] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 2825.032462][T20458] RBP: 00007f2d28c411d0 R08: 0000000000000000 R09: 0000000000000000 [ 2825.040449][T20458] R10: 0000000000201000 R11: 0000000000000246 R12: 0000000000000002 [ 2825.048554][T20458] R13: 00007ffcc1d93fdf R14: 00007f2d28c41300 R15: 0000000000022000 [ 2825.056543][T20458] 14:48:15 executing program 5: clone(0x80910b00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) set_mempolicy(0x3, &(0x7f0000000040)=0xffffffff80000001, 0x400) gettid() r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, &(0x7f0000000080)=ANY=[@ANYBLOB="7549f8187a2a6e40594b4473692aef0dda6d1a46f2019ed7e86b1d711c76877056283bedab9579d2125c7cad3b1f28c963b3a626ef87b075574ff5612ccc80d8e14883ad2a8e6516a15c410ce005b2e841ebacd55a1365c685244ec3b66b003e7ec96ed005906d578130183c37"]) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x2, 0x3, 0x2d8, 0x190, 0x190, 0x95ffffff, 0x77, 0x93ffffff, 0x240, 0x240, 0x221, 0x240, 0x240, 0x3, 0x0, {[{{@uncond, 0x0, 0x130, 0x190, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "bdc74c01369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa6ecab6b1d2cc05e3182f64694d7d05fb8b8c8f56627a54f905d564eeeb8334f650ca0f3c44f7fda4d20a55050342ea85ecc8838e7088de33582f36a0a375bb7008adc297a5ece1bb2df53d17bef26bb6f800", 0x7f, 0x2}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0x64000000]}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'veth0_to_batadv\x00', 'ip6gretap0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x338) 14:48:15 executing program 0: r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000025c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000100)=0x14) (async) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x12c, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0xfc, 0x2, {{}, [@TCA_NETEM_DELAY_DIST={0x45, 0x2, "7d2b1c2d7e6ca128a9bbe2e203b4ebed6de920ef368c1be6e4b441ddd94bd6f70cea6c3c03e9950fbeec369a9bf99b7c20753ccd678fd6dd5dc072a1419b7876d3"}, @TCA_NETEM_ECN={0x8}, @TCA_NETEM_SLOT={0x2c, 0xc, {0x759, 0x7fff, 0x1000, 0x67bf, 0x3}}, @TCA_NETEM_LATENCY64={0xc, 0xa, 0x2}, @TCA_NETEM_DELAY_DIST={0x44, 0x2, "e8d3252fd15001026ede6b9425341d1864d90de6424d24104db908874fa42a71a7b3fe2c9999b68845c67be19d7cadbea6c3a19a7c146349660bfd8664ad8faf"}, @TCA_NETEM_RATE={0x14, 0x6, {0x10001, 0x0, 0x52e, 0x6}}]}}}]}, 0x12c}}, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000140)={'syztnl1\x00', &(0x7f00000000c0)={'syztnl1\x00', 0x0, 0x2f, 0x2, 0x7f, 0x6b1, 0x12, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, @private1, 0x20, 0x8000, 0x6}}) sendmsg$ETHTOOL_MSG_PAUSE_SET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)={0x70, r0, 0x4, 0x70bd26, 0x25dfdbfd, {}, [@ETHTOOL_A_PAUSE_RX={0x5}, @ETHTOOL_A_PAUSE_RX={0x5}, @ETHTOOL_A_PAUSE_AUTONEG={0x5, 0x2, 0x1}, @ETHTOOL_A_PAUSE_HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}, @ETHTOOL_A_PAUSE_AUTONEG={0x5, 0x2, 0x1}, @ETHTOOL_A_PAUSE_RX={0x5}, @ETHTOOL_A_PAUSE_RX={0x5}, @ETHTOOL_A_PAUSE_TX={0x5, 0x4, 0x1}, @ETHTOOL_A_PAUSE_AUTONEG={0x5}]}, 0x70}, 0x1, 0x0, 0x0, 0x40080}, 0x4000000) r5 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r5, 0x0) r6 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x2) write$evdev(r6, &(0x7f000004d000)=[{}], 0xfffffe82) 14:48:15 executing program 3: r0 = syz_io_uring_setup(0x2de5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000fe8000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) (async) io_uring_enter(r0, 0xb2, 0x0, 0x0, 0x0, 0x7401) (async) r3 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_int(r3, 0x29, 0xd1, &(0x7f0000000000)=0x4, 0x4) setsockopt$inet6_MRT6_ADD_MFC(r3, 0x29, 0xc8, 0x0, 0x4) (async) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r3, 0x29, 0xc9, 0x0, 0x0) (async) ioctl$BTRFS_IOC_QUOTA_CTL(r3, 0xc0109428, &(0x7f0000000080)={0x1, 0x1ff}) 14:48:15 executing program 2: clone(0x80910b00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) set_mempolicy(0x3, &(0x7f0000000040), 0x0) gettid() r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x2, 0x3, 0x2d8, 0x190, 0x190, 0x95ffffff, 0x77, 0x93ffffff, 0x240, 0x240, 0x221, 0x240, 0x240, 0x3, 0x0, {[{{@uncond, 0x0, 0x130, 0x190, 0x0, {0x0, 0x3}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "bdc74c01369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa6ecab6b1d2cc05e3182f64694d7d05fb8b8c8f56627a54f905d564eeeb8334f650ca0f3c44f7fda4d20a55050342ea85ecc8838e7088de33582f36a0a375bb7008adc297a5ece1bb2df53d17bef26bb6f800", 0x7f}}]}, @common=@SET={0x60}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'veth0_to_batadv\x00', 'ip6gretap0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x338) 14:48:15 executing program 5: clone(0x80910b00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) set_mempolicy(0x3, &(0x7f0000000040)=0xffffffff80000001, 0x400) gettid() r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, &(0x7f0000000080)=ANY=[@ANYBLOB="7549f8187a2a6e40594b4473692aef0dda6d1a46f2019ed7e86b1d711c76877056283bedab9579d2125c7cad3b1f28c963b3a626ef87b075574ff5612ccc80d8e14883ad2a8e6516a15c410ce005b2e841ebacd55a1365c685244ec3b66b003e7ec96ed005906d578130183c37"]) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x2, 0x3, 0x2d8, 0x190, 0x190, 0x95ffffff, 0x77, 0x93ffffff, 0x240, 0x240, 0x221, 0x240, 0x240, 0x3, 0x0, {[{{@uncond, 0x0, 0x130, 0x190, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "bdc74c01369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa6ecab6b1d2cc05e3182f64694d7d05fb8b8c8f56627a54f905d564eeeb8334f650ca0f3c44f7fda4d20a55050342ea85ecc8838e7088de33582f36a0a375bb7008adc297a5ece1bb2df53d17bef26bb6f800", 0x7f, 0x2}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0x68000000]}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'veth0_to_batadv\x00', 'ip6gretap0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x338) 14:48:15 executing program 5: clone(0x80910b00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) set_mempolicy(0x3, &(0x7f0000000040)=0xffffffff80000001, 0x400) gettid() r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, &(0x7f0000000080)=ANY=[@ANYBLOB="7549f8187a2a6e40594b4473692aef0dda6d1a46f2019ed7e86b1d711c76877056283bedab9579d2125c7cad3b1f28c963b3a626ef87b075574ff5612ccc80d8e14883ad2a8e6516a15c410ce005b2e841ebacd55a1365c685244ec3b66b003e7ec96ed005906d578130183c37"]) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x2, 0x3, 0x2d8, 0x190, 0x190, 0x95ffffff, 0x77, 0x93ffffff, 0x240, 0x240, 0x221, 0x240, 0x240, 0x3, 0x0, {[{{@uncond, 0x0, 0x130, 0x190, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "bdc74c01369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa6ecab6b1d2cc05e3182f64694d7d05fb8b8c8f56627a54f905d564eeeb8334f650ca0f3c44f7fda4d20a55050342ea85ecc8838e7088de33582f36a0a375bb7008adc297a5ece1bb2df53d17bef26bb6f800", 0x7f, 0x2}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0x6a000000]}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'veth0_to_batadv\x00', 'ip6gretap0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x338) [ 2825.247839][T21072] set_target_v0_checkentry: 29 callbacks suppressed [ 2825.247855][T21072] Cannot find add_set index 0 as target [ 2825.250900][T21070] Cannot find add_set index 0 as target 14:48:15 executing program 4: r0 = socket$inet6(0xa, 0x400000000001, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) ftruncate(r1, 0x2007fff) close(r0) open(&(0x7f00000002c0)='./bus\x00', 0x14d842, 0x0) sendfile(r0, r1, 0x0, 0x201000) (fail_nth: 58) 14:48:15 executing program 1: r0 = socket$inet6(0xa, 0x400000000001, 0x0) (async) r1 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) ftruncate(r1, 0x2007fff) close(r0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000040)={0x8, 'gre0\x00', {'hsr0\x00'}, 0x4}) open(&(0x7f0000000000)='./bus\x00', 0x14d842, 0x0) (async) sendfile(r0, r1, 0x0, 0x201000) 14:48:15 executing program 2: clone(0x80910b00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) set_mempolicy(0x3, &(0x7f0000000040), 0x0) gettid() r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x2, 0x3, 0x2d8, 0x190, 0x190, 0x95ffffff, 0x77, 0x93ffffff, 0x240, 0x240, 0x221, 0x240, 0x240, 0x3, 0x0, {[{{@uncond, 0x0, 0x130, 0x190, 0x0, {0x0, 0x4}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "bdc74c01369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa6ecab6b1d2cc05e3182f64694d7d05fb8b8c8f56627a54f905d564eeeb8334f650ca0f3c44f7fda4d20a55050342ea85ecc8838e7088de33582f36a0a375bb7008adc297a5ece1bb2df53d17bef26bb6f800", 0x7f}}]}, @common=@SET={0x60}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'veth0_to_batadv\x00', 'ip6gretap0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x338) 14:48:15 executing program 5: clone(0x80910b00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) set_mempolicy(0x3, &(0x7f0000000040)=0xffffffff80000001, 0x400) gettid() r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, &(0x7f0000000080)=ANY=[@ANYBLOB="7549f8187a2a6e40594b4473692aef0dda6d1a46f2019ed7e86b1d711c76877056283bedab9579d2125c7cad3b1f28c963b3a626ef87b075574ff5612ccc80d8e14883ad2a8e6516a15c410ce005b2e841ebacd55a1365c685244ec3b66b003e7ec96ed005906d578130183c37"]) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x2, 0x3, 0x2d8, 0x190, 0x190, 0x95ffffff, 0x77, 0x93ffffff, 0x240, 0x240, 0x221, 0x240, 0x240, 0x3, 0x0, {[{{@uncond, 0x0, 0x130, 0x190, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "bdc74c01369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa6ecab6b1d2cc05e3182f64694d7d05fb8b8c8f56627a54f905d564eeeb8334f650ca0f3c44f7fda4d20a55050342ea85ecc8838e7088de33582f36a0a375bb7008adc297a5ece1bb2df53d17bef26bb6f800", 0x7f, 0x2}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0x6a020000]}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'veth0_to_batadv\x00', 'ip6gretap0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x338) 14:48:15 executing program 3: r0 = syz_io_uring_setup(0x2de5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000fe8000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) (async) io_uring_enter(r0, 0xb2, 0x0, 0x0, 0x0, 0x7401) (async) r3 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_int(r3, 0x29, 0xd1, &(0x7f0000000000)=0x4, 0x4) (async) setsockopt$inet6_MRT6_ADD_MFC(r3, 0x29, 0xc8, 0x0, 0x4) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r3, 0x29, 0xc9, 0x0, 0x0) (async) ioctl$BTRFS_IOC_QUOTA_CTL(r3, 0xc0109428, &(0x7f0000000080)={0x1, 0x1ff}) [ 2825.322704][T21147] Cannot find add_set index 0 as target 14:48:15 executing program 0: r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) (async) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000025c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000100)=0x14) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x12c, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0xfc, 0x2, {{}, [@TCA_NETEM_DELAY_DIST={0x45, 0x2, "7d2b1c2d7e6ca128a9bbe2e203b4ebed6de920ef368c1be6e4b441ddd94bd6f70cea6c3c03e9950fbeec369a9bf99b7c20753ccd678fd6dd5dc072a1419b7876d3"}, @TCA_NETEM_ECN={0x8}, @TCA_NETEM_SLOT={0x2c, 0xc, {0x759, 0x7fff, 0x1000, 0x67bf, 0x3}}, @TCA_NETEM_LATENCY64={0xc, 0xa, 0x2}, @TCA_NETEM_DELAY_DIST={0x44, 0x2, "e8d3252fd15001026ede6b9425341d1864d90de6424d24104db908874fa42a71a7b3fe2c9999b68845c67be19d7cadbea6c3a19a7c146349660bfd8664ad8faf"}, @TCA_NETEM_RATE={0x14, 0x6, {0x10001, 0x0, 0x52e, 0x6}}]}}}]}, 0x12c}}, 0x0) (async, rerun: 32) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000140)={'syztnl1\x00', &(0x7f00000000c0)={'syztnl1\x00', 0x0, 0x2f, 0x2, 0x7f, 0x6b1, 0x12, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, @private1, 0x20, 0x8000, 0x6}}) (rerun: 32) sendmsg$ETHTOOL_MSG_PAUSE_SET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)={0x70, r0, 0x4, 0x70bd26, 0x25dfdbfd, {}, [@ETHTOOL_A_PAUSE_RX={0x5}, @ETHTOOL_A_PAUSE_RX={0x5}, @ETHTOOL_A_PAUSE_AUTONEG={0x5, 0x2, 0x1}, @ETHTOOL_A_PAUSE_HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}, @ETHTOOL_A_PAUSE_AUTONEG={0x5, 0x2, 0x1}, @ETHTOOL_A_PAUSE_RX={0x5}, @ETHTOOL_A_PAUSE_RX={0x5}, @ETHTOOL_A_PAUSE_TX={0x5, 0x4, 0x1}, @ETHTOOL_A_PAUSE_AUTONEG={0x5}]}, 0x70}, 0x1, 0x0, 0x0, 0x40080}, 0x4000000) (async) r5 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r5, 0x0) (async) r6 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x2) write$evdev(r6, &(0x7f000004d000)=[{}], 0xfffffe82) 14:48:16 executing program 5: clone(0x80910b00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) set_mempolicy(0x3, &(0x7f0000000040)=0xffffffff80000001, 0x400) gettid() r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, &(0x7f0000000080)=ANY=[@ANYBLOB="7549f8187a2a6e40594b4473692aef0dda6d1a46f2019ed7e86b1d711c76877056283bedab9579d2125c7cad3b1f28c963b3a626ef87b075574ff5612ccc80d8e14883ad2a8e6516a15c410ce005b2e841ebacd55a1365c685244ec3b66b003e7ec96ed005906d578130183c37"]) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x2, 0x3, 0x2d8, 0x190, 0x190, 0x95ffffff, 0x77, 0x93ffffff, 0x240, 0x240, 0x221, 0x240, 0x240, 0x3, 0x0, {[{{@uncond, 0x0, 0x130, 0x190, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "bdc74c01369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa6ecab6b1d2cc05e3182f64694d7d05fb8b8c8f56627a54f905d564eeeb8334f650ca0f3c44f7fda4d20a55050342ea85ecc8838e7088de33582f36a0a375bb7008adc297a5ece1bb2df53d17bef26bb6f800", 0x7f, 0x2}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0x6a030000]}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'veth0_to_batadv\x00', 'ip6gretap0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x338) 14:48:16 executing program 2: clone(0x80910b00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) set_mempolicy(0x3, &(0x7f0000000040), 0x0) gettid() r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x2, 0x3, 0x2d8, 0x190, 0x190, 0x95ffffff, 0x77, 0x93ffffff, 0x240, 0x240, 0x221, 0x240, 0x240, 0x3, 0x0, {[{{@uncond, 0x0, 0x130, 0x190, 0x0, {0x0, 0x5}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "bdc74c01369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa6ecab6b1d2cc05e3182f64694d7d05fb8b8c8f56627a54f905d564eeeb8334f650ca0f3c44f7fda4d20a55050342ea85ecc8838e7088de33582f36a0a375bb7008adc297a5ece1bb2df53d17bef26bb6f800", 0x7f}}]}, @common=@SET={0x60}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'veth0_to_batadv\x00', 'ip6gretap0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x338) [ 2825.390459][T21187] Cannot find add_set index 0 as target [ 2825.393870][T21186] Cannot find add_set index 0 as target [ 2825.409121][T21193] FAULT_INJECTION: forcing a failure. [ 2825.409121][T21193] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2825.422489][T21193] CPU: 0 PID: 21193 Comm: syz-executor.4 Tainted: G W 5.16.0-rc6-syzkaller #0 [ 2825.432747][T21193] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2825.442895][T21193] Call Trace: [ 2825.446174][T21193] [ 2825.449100][T21193] dump_stack_lvl+0xd6/0x122 [ 2825.453736][T21193] dump_stack+0x11/0x1b [ 2825.457944][T21193] should_fail+0x23c/0x250 [ 2825.462423][T21193] __alloc_pages+0x102/0x330 [ 2825.467038][T21193] alloc_pages+0x382/0x3d0 [ 2825.471541][T21193] folio_alloc+0x1a/0x20 [ 2825.475788][T21193] filemap_alloc_folio+0x53/0xf0 [ 2825.480821][T21193] page_cache_ra_unbounded+0x1c0/0x430 [ 2825.486295][T21193] ondemand_readahead+0x4f8/0x700 [ 2825.491339][T21193] ? filemap_get_read_batch+0x3e2/0x410 [ 2825.496900][T21193] page_cache_async_ra+0xed/0x120 [ 2825.501928][T21193] filemap_read+0x500/0x16d0 [ 2825.506616][T21193] generic_file_read_iter+0x72/0x2a0 [ 2825.511926][T21193] ? iov_iter_pipe+0x100/0x150 [ 2825.516713][T21193] ? ext4_file_read_iter+0x7a/0x1f0 [ 2825.521916][T21193] generic_file_splice_read+0x24f/0x330 [ 2825.527476][T21193] ? splice_shrink_spd+0x60/0x60 [ 2825.532541][T21193] splice_direct_to_actor+0x2aa/0x650 14:48:16 executing program 3: r0 = syz_io_uring_setup(0x2de5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000fe8000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x0) r3 = io_uring_setup(0x2096, &(0x7f0000000000)) io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r3, 0x13, 0x20000000, r4) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_FADVISE={0x18, 0x1, 0x0, @fd_index=0x8000a, 0x3, 0x0, 0x8, 0x2, 0x0, {0x0, r4}}, 0xfffffffc) io_uring_enter(r0, 0xb2, 0x0, 0x0, 0x0, 0x7401) 14:48:16 executing program 1: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) ftruncate(r1, 0x2007fff) close(r0) open(&(0x7f00000002c0)='./bus\x00', 0x14d842, 0x0) sendfile(r0, r1, 0x0, 0x201000) socket$inet6(0xa, 0x3, 0x897f) open(&(0x7f0000000000)='./bus/file0\x00', 0x0, 0x10) r2 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_int(r2, 0x29, 0xd1, &(0x7f0000000000)=0x4, 0x4) setsockopt$inet6_MRT6_ADD_MFC(r2, 0x29, 0xc8, 0x0, 0x4) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r2, 0x29, 0xc9, 0x0, 0x0) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2000000, 0x4010, r2, 0x8890f000) [ 2825.538023][T21193] ? do_splice_direct+0x190/0x190 [ 2825.543059][T21193] do_splice_direct+0x106/0x190 [ 2825.547931][T21193] do_sendfile+0x675/0xc40 [ 2825.552386][T21193] __x64_sys_sendfile64+0x102/0x140 [ 2825.557591][T21193] do_syscall_64+0x44/0xd0 [ 2825.562065][T21193] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2825.568132][T21193] RIP: 0033:0x7f2d29acae99 14:48:16 executing program 3: r0 = syz_io_uring_setup(0x2de5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000fe8000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x0) r3 = io_uring_setup(0x2096, &(0x7f0000000000)) io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) (async, rerun: 32) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) (rerun: 32) io_uring_register$IORING_UNREGISTER_PERSONALITY(r3, 0x13, 0x20000000, r4) (async, rerun: 32) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_FADVISE={0x18, 0x1, 0x0, @fd_index=0x8000a, 0x3, 0x0, 0x8, 0x2, 0x0, {0x0, r4}}, 0xfffffffc) (async, rerun: 32) io_uring_enter(r0, 0xb2, 0x0, 0x0, 0x0, 0x7401) [ 2825.572546][T21193] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2825.592193][T21193] RSP: 002b:00007f2d28c41168 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 2825.600728][T21193] RAX: ffffffffffffffda RBX: 00007f2d29bddf60 RCX: 00007f2d29acae99 [ 2825.608711][T21193] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 2825.616684][T21193] RBP: 00007f2d28c411d0 R08: 0000000000000000 R09: 0000000000000000 [ 2825.624740][T21193] R10: 0000000000201000 R11: 0000000000000246 R12: 0000000000000002 [ 2825.625970][T21304] Cannot find add_set index 0 as target 14:48:16 executing program 2: clone(0x80910b00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) set_mempolicy(0x3, &(0x7f0000000040), 0x0) gettid() r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x2, 0x3, 0x2d8, 0x190, 0x190, 0x95ffffff, 0x77, 0x93ffffff, 0x240, 0x240, 0x221, 0x240, 0x240, 0x3, 0x0, {[{{@uncond, 0x0, 0x130, 0x190, 0x0, {0x0, 0x6}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "bdc74c01369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa6ecab6b1d2cc05e3182f64694d7d05fb8b8c8f56627a54f905d564eeeb8334f650ca0f3c44f7fda4d20a55050342ea85ecc8838e7088de33582f36a0a375bb7008adc297a5ece1bb2df53d17bef26bb6f800", 0x7f}}]}, @common=@SET={0x60}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'veth0_to_batadv\x00', 'ip6gretap0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x338) [ 2825.632727][T21193] R13: 00007ffcc1d93fdf R14: 00007f2d28c41300 R15: 0000000000022000 [ 2825.632750][T21193] [ 2825.654237][T21308] Cannot find add_set index 0 as target [ 2825.701237][T21415] Cannot find add_set index 0 as target 14:48:16 executing program 4: r0 = socket$inet6(0xa, 0x400000000001, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) ftruncate(r1, 0x2007fff) close(r0) open(&(0x7f00000002c0)='./bus\x00', 0x14d842, 0x0) sendfile(r0, r1, 0x0, 0x201000) (fail_nth: 59) 14:48:16 executing program 5: clone(0x80910b00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) set_mempolicy(0x3, &(0x7f0000000040)=0xffffffff80000001, 0x400) gettid() r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, &(0x7f0000000080)=ANY=[@ANYBLOB="7549f8187a2a6e40594b4473692aef0dda6d1a46f2019ed7e86b1d711c76877056283bedab9579d2125c7cad3b1f28c963b3a626ef87b075574ff5612ccc80d8e14883ad2a8e6516a15c410ce005b2e841ebacd55a1365c685244ec3b66b003e7ec96ed005906d578130183c37"]) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x2, 0x3, 0x2d8, 0x190, 0x190, 0x95ffffff, 0x77, 0x93ffffff, 0x240, 0x240, 0x221, 0x240, 0x240, 0x3, 0x0, {[{{@uncond, 0x0, 0x130, 0x190, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "bdc74c01369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa6ecab6b1d2cc05e3182f64694d7d05fb8b8c8f56627a54f905d564eeeb8334f650ca0f3c44f7fda4d20a55050342ea85ecc8838e7088de33582f36a0a375bb7008adc297a5ece1bb2df53d17bef26bb6f800", 0x7f, 0x2}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0x6c000000]}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'veth0_to_batadv\x00', 'ip6gretap0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x338) 14:48:16 executing program 3: r0 = syz_io_uring_setup(0x2de5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000fe8000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x0) r3 = io_uring_setup(0x2096, &(0x7f0000000000)) io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) (async) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r3, 0x13, 0x20000000, r4) (async) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_FADVISE={0x18, 0x1, 0x0, @fd_index=0x8000a, 0x3, 0x0, 0x8, 0x2, 0x0, {0x0, r4}}, 0xfffffffc) (async) io_uring_enter(r0, 0xb2, 0x0, 0x0, 0x0, 0x7401) 14:48:16 executing program 2: clone(0x80910b00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) set_mempolicy(0x3, &(0x7f0000000040), 0x0) gettid() r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x2, 0x3, 0x2d8, 0x190, 0x190, 0x95ffffff, 0x77, 0x93ffffff, 0x240, 0x240, 0x221, 0x240, 0x240, 0x3, 0x0, {[{{@uncond, 0x0, 0x130, 0x190, 0x0, {0x0, 0x7}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "bdc74c01369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa6ecab6b1d2cc05e3182f64694d7d05fb8b8c8f56627a54f905d564eeeb8334f650ca0f3c44f7fda4d20a55050342ea85ecc8838e7088de33582f36a0a375bb7008adc297a5ece1bb2df53d17bef26bb6f800", 0x7f}}]}, @common=@SET={0x60}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'veth0_to_batadv\x00', 'ip6gretap0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x338) 14:48:16 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x2) socketpair(0xa, 0x4, 0x5, &(0x7f0000000040)={0xffffffffffffffff}) read(r2, &(0x7f0000000080)=""/201, 0xc9) write$evdev(r1, &(0x7f000004d000)=[{}], 0xfffffe82) 14:48:16 executing program 1: r0 = socket$inet6(0xa, 0x400000000001, 0x0) (async) r1 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) ftruncate(r1, 0x2007fff) (async) close(r0) (async) open(&(0x7f00000002c0)='./bus\x00', 0x14d842, 0x0) (async) sendfile(r0, r1, 0x0, 0x201000) (async) socket$inet6(0xa, 0x3, 0x897f) (async) open(&(0x7f0000000000)='./bus/file0\x00', 0x0, 0x10) (async) r2 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_int(r2, 0x29, 0xd1, &(0x7f0000000000)=0x4, 0x4) (async) setsockopt$inet6_MRT6_ADD_MFC(r2, 0x29, 0xc8, 0x0, 0x4) (async) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r2, 0x29, 0xc9, 0x0, 0x0) (async) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2000000, 0x4010, r2, 0x8890f000) 14:48:16 executing program 2: clone(0x80910b00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) set_mempolicy(0x3, &(0x7f0000000040), 0x0) gettid() r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x2, 0x3, 0x2d8, 0x190, 0x190, 0x95ffffff, 0x77, 0x93ffffff, 0x240, 0x240, 0x221, 0x240, 0x240, 0x3, 0x0, {[{{@uncond, 0x0, 0x130, 0x190, 0x0, {0x0, 0x8}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "bdc74c01369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa6ecab6b1d2cc05e3182f64694d7d05fb8b8c8f56627a54f905d564eeeb8334f650ca0f3c44f7fda4d20a55050342ea85ecc8838e7088de33582f36a0a375bb7008adc297a5ece1bb2df53d17bef26bb6f800", 0x7f}}]}, @common=@SET={0x60}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'veth0_to_batadv\x00', 'ip6gretap0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x338) 14:48:16 executing program 1: r0 = socket$inet6(0xa, 0x400000000001, 0x0) (async) r1 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) ftruncate(r1, 0x2007fff) close(r0) open(&(0x7f00000002c0)='./bus\x00', 0x14d842, 0x0) (async) sendfile(r0, r1, 0x0, 0x201000) socket$inet6(0xa, 0x3, 0x897f) open(&(0x7f0000000000)='./bus/file0\x00', 0x0, 0x10) (async) r2 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_int(r2, 0x29, 0xd1, &(0x7f0000000000)=0x4, 0x4) (async) setsockopt$inet6_MRT6_ADD_MFC(r2, 0x29, 0xc8, 0x0, 0x4) (async) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r2, 0x29, 0xc9, 0x0, 0x0) (async) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2000000, 0x4010, r2, 0x8890f000) [ 2825.874718][T21424] Cannot find add_set index 0 as target [ 2825.885360][T21428] Cannot find add_set index 0 as target 14:48:16 executing program 1: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) ftruncate(r1, 0x2007fff) close(r0) open(&(0x7f00000002c0)='./bus\x00', 0x14d842, 0x0) sendfile(r0, r1, 0x0, 0x201000) r2 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_int(r2, 0x29, 0xd1, &(0x7f0000000000)=0x4, 0x4) setsockopt$inet6_MRT6_ADD_MFC(r2, 0x29, 0xc8, 0x0, 0x4) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r2, 0x29, 0xc9, 0x0, 0x0) fsetxattr$trusted_overlay_opaque(r2, &(0x7f0000000000), &(0x7f0000000040), 0x2, 0x2) [ 2825.917463][T21462] FAULT_INJECTION: forcing a failure. [ 2825.917463][T21462] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2825.930795][T21462] CPU: 0 PID: 21462 Comm: syz-executor.4 Tainted: G W 5.16.0-rc6-syzkaller #0 [ 2825.940951][T21462] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2825.951179][T21462] Call Trace: [ 2825.954541][T21462] [ 2825.957652][T21462] dump_stack_lvl+0xd6/0x122 [ 2825.962298][T21462] dump_stack+0x11/0x1b 14:48:16 executing program 2: clone(0x80910b00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) set_mempolicy(0x3, &(0x7f0000000040), 0x0) gettid() r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x2, 0x3, 0x2d8, 0x190, 0x190, 0x95ffffff, 0x77, 0x93ffffff, 0x240, 0x240, 0x221, 0x240, 0x240, 0x3, 0x0, {[{{@uncond, 0x0, 0x130, 0x190, 0x0, {0x0, 0x9}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "bdc74c01369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa6ecab6b1d2cc05e3182f64694d7d05fb8b8c8f56627a54f905d564eeeb8334f650ca0f3c44f7fda4d20a55050342ea85ecc8838e7088de33582f36a0a375bb7008adc297a5ece1bb2df53d17bef26bb6f800", 0x7f}}]}, @common=@SET={0x60}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'veth0_to_batadv\x00', 'ip6gretap0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x338) 14:48:16 executing program 5: clone(0x80910b00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) set_mempolicy(0x3, &(0x7f0000000040)=0xffffffff80000001, 0x400) gettid() r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, &(0x7f0000000080)=ANY=[@ANYBLOB="7549f8187a2a6e40594b4473692aef0dda6d1a46f2019ed7e86b1d711c76877056283bedab9579d2125c7cad3b1f28c963b3a626ef87b075574ff5612ccc80d8e14883ad2a8e6516a15c410ce005b2e841ebacd55a1365c685244ec3b66b003e7ec96ed005906d578130183c37"]) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x2, 0x3, 0x2d8, 0x190, 0x190, 0x95ffffff, 0x77, 0x93ffffff, 0x240, 0x240, 0x221, 0x240, 0x240, 0x3, 0x0, {[{{@uncond, 0x0, 0x130, 0x190, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "bdc74c01369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa6ecab6b1d2cc05e3182f64694d7d05fb8b8c8f56627a54f905d564eeeb8334f650ca0f3c44f7fda4d20a55050342ea85ecc8838e7088de33582f36a0a375bb7008adc297a5ece1bb2df53d17bef26bb6f800", 0x7f, 0x2}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0x6c010000]}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'veth0_to_batadv\x00', 'ip6gretap0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x338) [ 2825.966459][T21462] should_fail+0x23c/0x250 [ 2825.970883][T21462] __alloc_pages+0x102/0x330 [ 2825.975485][T21462] alloc_pages+0x382/0x3d0 [ 2825.979902][T21462] folio_alloc+0x1a/0x20 [ 2825.984272][T21462] filemap_alloc_folio+0x53/0xf0 [ 2825.989352][T21462] page_cache_ra_unbounded+0x1c0/0x430 [ 2825.994915][T21462] ondemand_readahead+0x4f8/0x700 [ 2826.000046][T21462] ? filemap_get_read_batch+0x3e2/0x410 [ 2826.005613][T21462] page_cache_async_ra+0xed/0x120 [ 2826.010645][T21462] filemap_read+0x500/0x16d0 [ 2826.015295][T21462] generic_file_read_iter+0x72/0x2a0 [ 2826.020591][T21462] ? iov_iter_pipe+0x100/0x150 [ 2826.025416][T21462] ? ext4_file_read_iter+0x7a/0x1f0 [ 2826.030624][T21462] generic_file_splice_read+0x24f/0x330 [ 2826.036489][T21462] ? splice_shrink_spd+0x60/0x60 [ 2826.041510][T21462] splice_direct_to_actor+0x2aa/0x650 [ 2826.046892][T21462] ? do_splice_direct+0x190/0x190 [ 2826.051973][T21462] do_splice_direct+0x106/0x190 [ 2826.057017][T21462] do_sendfile+0x675/0xc40 [ 2826.061504][T21462] __x64_sys_sendfile64+0x102/0x140 14:48:16 executing program 5: clone(0x80910b00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) set_mempolicy(0x3, &(0x7f0000000040)=0xffffffff80000001, 0x400) gettid() r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, &(0x7f0000000080)=ANY=[@ANYBLOB="7549f8187a2a6e40594b4473692aef0dda6d1a46f2019ed7e86b1d711c76877056283bedab9579d2125c7cad3b1f28c963b3a626ef87b075574ff5612ccc80d8e14883ad2a8e6516a15c410ce005b2e841ebacd55a1365c685244ec3b66b003e7ec96ed005906d578130183c37"]) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x2, 0x3, 0x2d8, 0x190, 0x190, 0x95ffffff, 0x77, 0x93ffffff, 0x240, 0x240, 0x221, 0x240, 0x240, 0x3, 0x0, {[{{@uncond, 0x0, 0x130, 0x190, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "bdc74c01369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa6ecab6b1d2cc05e3182f64694d7d05fb8b8c8f56627a54f905d564eeeb8334f650ca0f3c44f7fda4d20a55050342ea85ecc8838e7088de33582f36a0a375bb7008adc297a5ece1bb2df53d17bef26bb6f800", 0x7f, 0x2}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0x6f020000]}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'veth0_to_batadv\x00', 'ip6gretap0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x338) [ 2826.061530][T21462] do_syscall_64+0x44/0xd0 [ 2826.061553][T21462] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2826.061590][T21462] RIP: 0033:0x7f2d29acae99 [ 2826.061605][T21462] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2826.061689][T21462] RSP: 002b:00007f2d28c41168 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 2826.061712][T21462] RAX: ffffffffffffffda RBX: 00007f2d29bddf60 RCX: 00007f2d29acae99 [ 2826.061727][T21462] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 2826.061739][T21462] RBP: 00007f2d28c411d0 R08: 0000000000000000 R09: 0000000000000000 [ 2826.061807][T21462] R10: 0000000000201000 R11: 0000000000000246 R12: 0000000000000002 [ 2826.061820][T21462] R13: 00007ffcc1d93fdf R14: 00007f2d28c41300 R15: 0000000000022000 [ 2826.061835][T21462] 14:48:16 executing program 4: r0 = socket$inet6(0xa, 0x400000000001, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) ftruncate(r1, 0x2007fff) close(r0) open(&(0x7f00000002c0)='./bus\x00', 0x14d842, 0x0) sendfile(r0, r1, 0x0, 0x201000) (fail_nth: 60) 14:48:16 executing program 5: clone(0x80910b00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) set_mempolicy(0x3, &(0x7f0000000040)=0xffffffff80000001, 0x400) gettid() r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, &(0x7f0000000080)=ANY=[@ANYBLOB="7549f8187a2a6e40594b4473692aef0dda6d1a46f2019ed7e86b1d711c76877056283bedab9579d2125c7cad3b1f28c963b3a626ef87b075574ff5612ccc80d8e14883ad2a8e6516a15c410ce005b2e841ebacd55a1365c685244ec3b66b003e7ec96ed005906d578130183c37"]) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x2, 0x3, 0x2d8, 0x190, 0x190, 0x95ffffff, 0x77, 0x93ffffff, 0x240, 0x240, 0x221, 0x240, 0x240, 0x3, 0x0, {[{{@uncond, 0x0, 0x130, 0x190, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "bdc74c01369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa6ecab6b1d2cc05e3182f64694d7d05fb8b8c8f56627a54f905d564eeeb8334f650ca0f3c44f7fda4d20a55050342ea85ecc8838e7088de33582f36a0a375bb7008adc297a5ece1bb2df53d17bef26bb6f800", 0x7f, 0x2}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0x70000000]}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'veth0_to_batadv\x00', 'ip6gretap0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x338) 14:48:16 executing program 1: r0 = socket$inet6(0xa, 0x400000000001, 0x0) (async) r1 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) ftruncate(r1, 0x2007fff) (async) close(r0) open(&(0x7f00000002c0)='./bus\x00', 0x14d842, 0x0) (async) sendfile(r0, r1, 0x0, 0x201000) (async) r2 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_int(r2, 0x29, 0xd1, &(0x7f0000000000)=0x4, 0x4) (async, rerun: 32) setsockopt$inet6_MRT6_ADD_MFC(r2, 0x29, 0xc8, 0x0, 0x4) (rerun: 32) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r2, 0x29, 0xc9, 0x0, 0x0) fsetxattr$trusted_overlay_opaque(r2, &(0x7f0000000000), &(0x7f0000000040), 0x2, 0x2) 14:48:16 executing program 2: clone(0x80910b00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) set_mempolicy(0x3, &(0x7f0000000040), 0x0) gettid() r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x2, 0x3, 0x2d8, 0x190, 0x190, 0x95ffffff, 0x77, 0x93ffffff, 0x240, 0x240, 0x221, 0x240, 0x240, 0x3, 0x0, {[{{@uncond, 0x0, 0x130, 0x190, 0x0, {0x0, 0xa}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "bdc74c01369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa6ecab6b1d2cc05e3182f64694d7d05fb8b8c8f56627a54f905d564eeeb8334f650ca0f3c44f7fda4d20a55050342ea85ecc8838e7088de33582f36a0a375bb7008adc297a5ece1bb2df53d17bef26bb6f800", 0x7f}}]}, @common=@SET={0x60}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'veth0_to_batadv\x00', 'ip6gretap0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x338) 14:48:16 executing program 3: r0 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0xd1, &(0x7f0000000000)=0x4, 0x4) setsockopt$inet6_MRT6_ADD_MFC(r0, 0x29, 0xc8, 0x0, 0x4) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r0, 0x29, 0xc9, 0x0, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f00000018c0)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0}}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f00000000c0)={r1, 0x1, 0x29, 0x1}) r2 = dup2(r0, r0) openat$vsock(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r2, 0x84009422, &(0x7f0000001cc0)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0}}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f00000000c0)={r3, 0x1, 0x29, 0x1}) ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, &(0x7f0000000200)={0x8, 0x315c2f9e1518061a, {0x7fff, @usage, r1, 0x0, 0x7ff, 0x4, 0x9, 0x3, 0x472, @usage=0x101, 0x80000000, 0x3, [0x1000, 0xac7, 0xffff, 0x800, 0x6, 0x68]}, {0x3274, @usage=0x80d3, r3, 0xffffffff, 0x2, 0x6, 0x4, 0x9, 0x60, @struct={0x7, 0x20}, 0x40, 0x3ff, [0x7, 0x6, 0xbce, 0x8]}, {0x3, @usage=0x8, 0x0, 0x7, 0x100000000, 0x7, 0x1, 0x9, 0x0, @struct={0x10000, 0x3e07}, 0x5, 0x32, [0xfffffffffffff800, 0x1f, 0x1ff, 0x7fff, 0x400, 0x7f]}, {0x3489c0000, 0x3, 0x9}}) r4 = syz_io_uring_setup(0x2de5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000fe8000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r5, r6, &(0x7f00000001c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) r7 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_int(r7, 0x29, 0xd1, &(0x7f0000000000)=0x4, 0x4) setsockopt$inet6_MRT6_ADD_MFC(r7, 0x29, 0xc8, 0x0, 0x4) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r7, 0x29, 0xc9, 0x0, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, &(0x7f0000000600)={{0x0, 0x0, 0x4, 0xfffffffffffffffa, 0x8001, 0x7, 0x9972, 0x0, 0x2, 0x598, 0x8000, 0x1f, 0x3, 0x5, 0x7}, 0x10, [0x0, 0x0]}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r7, 0xd000943e, &(0x7f0000000680)={0x0, r8, "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", "e33c7db8fc13856353a6bc9f8243ca39a998e92d7479507fb366514526d46c7b30115ff688b6b39394b8b54a4d1d052d69f57f675e0588d469d5ef1deba035d72730c23d67febabbabb382edecd816623134bc3cf779a6f9d5b90d04bd0267152240d15a1a7f2498ebb3613111a29ceba11c7ec106a54140052a6987c3353eef86176db7e1bd8008fae090a00b968ff4e47bb337a267c5be54cdd03b4ad4c2df04b0e30b62e4d1f6a8072da3293b1e687f7a6de22f958c600f752daee3c2c78e8c12868d86c940fcb1ea25d1043a3d0a5ea80b17211492122e0e540f78cf4c35e01dd4c1b6b0c0e8b8e2fe493a53c3e508a8b80f8e7d1f58be99c3256d90ec5717bec4fe530566dcc2b035742ec43b28b22779647a485b84d5461e5859c772c2b0b19b46e560ad8435255bc0621a512cf530bee155ffae4d5df9df4c9531c713fead14e31f04933549dbe022f25604142a239e38fc96b5c6717f2a465e9cfd04b592ea446a0304959750db68cee3f1188a65e9a7d1cb8b2e571f0d35cb8e0333b5a634f3144126b1a5fb72393ed7125299178e9fceaec895d99c11a47471b1ef705caec6670ebeda7f6ddffcd0df5dda87bd22a7f7993b4f21cae4b25e26ce54bf6a6835beff750263215f1f5672d38b6f1d699bdce130049e63f0144cf8db6c887789df1d3c5d12ce3067b7010e3357ef55b8a160b0f1d529e93bf1d5b97a35d0d6d0dc6827a709a2ab90c89c1cd462ab60b6502d8f85b33d83ce9ad20c11757e3958da89b0bd3a710ebaa1a4fc440445af8b3e948308031442ede90f545406f38f805bbc2435c4b8db85c1c187791d18893401b1aa288a00d4696ab844d1e751a7dc9b4b82f9096c2d1fac8928d6a69d9ebf5ebeba83b7fce896023c3b5f212aea5b725d845e20e60d695a52d0bb6c28350d92f89c158f8795185dda73ae3a835c55f69d886a74495b89fe7c8bd4e3232c99a6400d0894938d729dff38f4801a58183c261b32260283fbf654fb126f713e2c6edb00407b2ccca9235595625aa3dcd54b585dea2be52e03fcaadcecbfe73cae2b46e3fab1df9f6cb18cc3ed3808d3611a8532a799dd568d642cf421faaf3db90071f587b77ed05a748a63aa607432ee3c196d8b379d6254d3d510166f1d89517aee1bc2eb48c51d3370f03225211a7041ef556bc0e5138b283dd3395daeac9e0fd8db7cf35d7b00f251addf90dbdc8787061886ea3a3649972ff46c830ecb0c57e3a606cf4f8a867873fbea875838e5a5be6b3fb8dd57a8f91c8e685452e8cbb1710cd2bb1ac659ff8c19e4ba193d182c968cd25e6b67b70ab4de88d95d2294518c524edbf473a2e79a799089750e7103aa44a39fe56ff54180f0507fe50300e908b2498a450fb8c684582ec716a53140b002b2e5769f06e7fa67e8fc71327ca3f921f3c4c7f6d2776d5ccb5c1c9603153a05be7a1ebf9b3d91e99d74f52a7a58b4c181c863c108ec8bfa49e164177377ffe7f8ebd8def0b1e65eef1a7edecdcb1e4a72299a8e77a0cbb07c9fe6a6686fb64b2e911cb07d1f41a448227bdabbd1f2e02a94aa200461e1b7080a337f89073680e41f9fee439c0f260f8af0912db5178ccbc46d08d01ba34069eabd67a59508a0e178dd0a2c2a75b8003036e3777a28c76e54facb41b84d71945ce3d24487d5a6d08b979f871b860536fc444e3ec9d6be17d233d4d2704e86c5d9803abde0d3865bba09131f2c1071202d28356d2fbe2dfca0887b71327cdf127a6940765d6d66d23097af690a9740c557fc23382addc592397a8ffce05aa9a26c58c628192b64963c1f50f44f03413fef89b53c432242995108915d9b758569b8cd0d67a074e6e8844c5fb85de79d6aba1f91864e773f6224b88202454749b993f753292628087557589d8a217db77063db95d2ae52b1fc0d30886209e22fdc50f5dcf54104997a07eb3785305603b1b748ec7ffbfcbd3763eff962ce00b98784bcdfce4722a3c36926c2dba52bb9b086730fe194b1cb8b2a3dfb3d9c1ba8dd224aa72567cf9488546786f37e8c86ce430882e11d63529a2e069892d9c8659512d9ccd644e25da951097c6c0164bb0ad4a58d91a087da55ab45908c9327fbf878660ddb2c9afee5d9f831748ec1e534656334f1e7694022ecf6f1aef6247bfbdf941550cfb7af24fea03299b1bfe282008eed18b46c7a408aafc2388fc893cab5fdfab9e687c6e17ec1fdd2dd8cc6054ebccdf76f53be702e9304253cb61665805f51d136512a25d9c4be69fcad2f452bc573f623481ccc3c4e2b15f87e48138dfadeaa0cb4102b1bcdccc5f3f280a3d27a6f34aa038562dec9f323102b9fe416cfbb647ee2f4a81042dfab492defd405628aabec9195cd5df79e63a756a759972ddb7e98e0df5ca7dabb1a7e4063ca58fd05791747fa2832756ce7d535949102c29289179d48713a1d4a35a1ffd8ef86a40681eed0ad21165ada980f42cda5c73b4a229941685233b571bb024b282b2f5cde8704f30952e0a539eac2ff55411737a8bcc78e3acbb98c7e0c34fb5b773f2ed2df278ece8258d272a2e83785bc033a4ccdec3bc835499dceee4801e8c1f3eb6b2a781383666afa33304fbd9e406e8f322b64d625ee08defd0fbc7d7b6d62a4987caffce3639f68c19fc4a64f9c9ef2ed8d2287de58ec8c427a1839bd379d433621cd4e4d6233ad2a673a795c3871e0e210a990eb09ae3d82510bae965903a7550adcbe451961924425f293e682cb588cb0d4f507ec25fb82bfe05ec70b342cff8ad049dced8d303cc4fdad1db3c035f2477db1c102136afa9d3ed8e64cd9ef418d86d5d5ac61347f19355b875dac65724ea392941748d9367fc4c9f25418d71ddfd364cc92902ef20ed6aa294a75d7824557987b5dba6698b87649ce98499919c520192968d2521e57d59a906d500b0517c18537208bd53f7407a341596290cbed54c690737ada2a621644f9612700c697c576f95d5e9b6fc2f134f203a4a3811a95a5f812e5f98cf33337785b0277f567335f21e104d102725fa728502b8b0aa2f99cc76807aec5d242ac04733597fc1da99330cc24317f08f3017eabf53fd7516367011a9db262be08211317b955788c5b06e31ede20fc41d222d811473f4faff8f0c1443a50117a3e2972540512d60c3ee174f8ba5af530b77d51ef2e306a9d4a03139fcc078e0bc9ddbcfd1c9453c06f7b7ee6ee40dfc946242f8cbf36115ee0395ff10fe63cddd66b228982f455b6bfb3c1746d4b49704f397582487b509a8c52c1aed3264e6dee0adad15bdb233162688b63851d87c057ae891611578cf3e86fa64e7a666d4eb6d4490995acb2652ebd19c428ec952cad3e6f29be0688cb8acec8da02988531c24775093b4c6048a8cf70b29e6305c1ef8fafb889d5571df602e179b47774eba9e4642c8a7759f6ddc2d11106d69c0dd32b6df75fa0c174302cf99ac65762cec69241ed3a276a3c2889560af89bc11f3c838f75bb51d128883e6a83869fbfc0e722be760335cd7136d748aed17dcb2ab4fc600f973c34a45a8c43a8a5e5c230a914b6c2cf1040132e360dc1dc4e5999b95f37c0a4729e307fb494df793365d15c2da7fbe54be7e553e72585ed91a61d3c9e7757b6827f26ff9ca04fa4aa10461e6ded35b73bc3ce4b4e54d518cdc38d45d457b3c09c69a9063814ec980536bd1bde0b367c84a630857c86ef27b0e63218a92962e0b38c86c9fb50a9f21bfb6cd6d789e500404be064062c82419b50fb7a90dfbfa355118062d2384305bdbbda5b80fd00c38eec19a22d226d4ff3eb7b8eea3ec6bc5665aebd6e354bec3038b251cd8c94f8263786ea2a8a583536195303b896e690bb4100e1219b3b03858ff556b5df91edb1b90487a9206e5589111f671072e9020ed7c60dfe3f505d96500dd6b96f96a79459dd378b5867da25edb53128bfab02a662a47a2f51ab743f0d61bbcc76f0151dfef93663d373ff757538f3353eef3b35fbe0d6152b5fd6ff0ce446aff27d698d8ebe0774945ba99adac8c46f5c1c6521d80dd25fee20dda6d88c6a02d17347145dd824851e032d77cf7de24b6bcb6c8ee28669e56e96d5648ebc9e3b33ac5635694b398b6fbdf53c8c4ba54c59d16151dad83225b4ffa98f083e0654613b9bc68674e8ed36be608d7d1288e5970e585082d588487c9dd3bd42a250d7f3d3736fbb936bd6325e38815de6f1c1f64b9b81f1c255b3048cf0bb68db9b78c1d233f004ead051d4399f08467e85056d686745ceaf076923d4e5c974ba03cb3cfc615b04b589de104626faa3243943b0ce3669088a0a31251fbf3cf4b4487315fad36de28b2dd1394946365e49e54b413242e7458638a0e65912bf355c5ab2ac422408a632b71ec4fcdca129c1e0a7be8ab99e31e94a4b1d3a406bcb84dc7a322c2da6340644e020ca6e364091eca2c276e5e645dc8db964973793492caa894651175373366e8e6b5c287b81ca5a1592e92ed65c68e7dada14670582aab89381100c2420262686fbcdcc6d1d4e135e0822d7046f8dadfddacec4974a98f1941b1493fe8108520f38a44eb9ef5b4c7a39d387fff6848ebb7f257933ed34bd7aa7f68be66155c98136452740b7e26c7a386427457066bd0994d9f65ae3a1fe820631f7535e70dd2ad672c8d14502a54291f852c709c123be2afc775fadf5f1c5d8a9f46ef0f3b5948a5b56d990f76cde5aa6b6156dc4acc80d3dced52cb4fec4dd2fe4fcebcc30580f3ce223de9d6dcd9bae50fccfb430f76e21932dafff7a503d661f137b6974a3b3f75f2e21fcac9b2634d38f4aaf36958b950a7b98fc5e6393d893e4e07b40602c640daccc3d61e978818612344a4c9aee415b3560c7794d93fc76bc9463dd7c3583ae42ce461915afe732e532f28515a6d874a5f98751e5d1503735dd9312cb00084694142ce35d5f87a27584eaeec0a60d08dc768d967f269009f04a2f0ffe797561057e9380164c084866bf937b7e81dfd5307fbd37ceb5d32baeb95954f3c8f566746d6c8795915e817a29e7b95ac7aa2f0b7495da981505680d5a7597561d637ed4459eb7e811732ae63146a7b9207a17beb52b702eb18d96ba003d158002ac451554b1ba6c2d4474b2acf335532df50657dee269a9cafd0954b15893413d951c3751e8432a1f73d0279d859b9ac3723353e26a70c196f9a1b61a77816fdfd2cc68c47e47a096d5bfd86a191c26ba3e23430927ef0d2c9d892d44eb681197cbe384f6416e38d84c9aa7a5deaffab676ef7ac6aac14c41dc8d66eb76d3a6df150fb437e62a135bb7367c126b4d7663389b90c1bfb62aae76db16acf279591cce898aa7d1a2296954666559310aea13e07be3b037270227592c688ce61a764b4e4df27e921b40f18dd8"}) io_uring_enter(r4, 0xb2, 0x0, 0x0, 0x0, 0x7401) 14:48:16 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x2) (async) socketpair(0xa, 0x4, 0x5, &(0x7f0000000040)={0xffffffffffffffff}) read(r2, &(0x7f0000000080)=""/201, 0xc9) (async) write$evdev(r1, &(0x7f000004d000)=[{}], 0xfffffe82) 14:48:16 executing program 5: clone(0x80910b00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) set_mempolicy(0x3, &(0x7f0000000040)=0xffffffff80000001, 0x400) gettid() r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, &(0x7f0000000080)=ANY=[@ANYBLOB="7549f8187a2a6e40594b4473692aef0dda6d1a46f2019ed7e86b1d711c76877056283bedab9579d2125c7cad3b1f28c963b3a626ef87b075574ff5612ccc80d8e14883ad2a8e6516a15c410ce005b2e841ebacd55a1365c685244ec3b66b003e7ec96ed005906d578130183c37"]) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x2, 0x3, 0x2d8, 0x190, 0x190, 0x95ffffff, 0x77, 0x93ffffff, 0x240, 0x240, 0x221, 0x240, 0x240, 0x3, 0x0, {[{{@uncond, 0x0, 0x130, 0x190, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "bdc74c01369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa6ecab6b1d2cc05e3182f64694d7d05fb8b8c8f56627a54f905d564eeeb8334f650ca0f3c44f7fda4d20a55050342ea85ecc8838e7088de33582f36a0a375bb7008adc297a5ece1bb2df53d17bef26bb6f800", 0x7f, 0x2}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0x74000000]}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'veth0_to_batadv\x00', 'ip6gretap0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x338) 14:48:16 executing program 2: clone(0x80910b00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) set_mempolicy(0x3, &(0x7f0000000040), 0x0) gettid() r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x2, 0x3, 0x2d8, 0x190, 0x190, 0x95ffffff, 0x77, 0x93ffffff, 0x240, 0x240, 0x221, 0x240, 0x240, 0x3, 0x0, {[{{@uncond, 0x0, 0x130, 0x190, 0x0, {0x0, 0xb}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "bdc74c01369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa6ecab6b1d2cc05e3182f64694d7d05fb8b8c8f56627a54f905d564eeeb8334f650ca0f3c44f7fda4d20a55050342ea85ecc8838e7088de33582f36a0a375bb7008adc297a5ece1bb2df53d17bef26bb6f800", 0x7f}}]}, @common=@SET={0x60}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'veth0_to_batadv\x00', 'ip6gretap0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x338) 14:48:16 executing program 5: clone(0x80910b00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) set_mempolicy(0x3, &(0x7f0000000040)=0xffffffff80000001, 0x400) gettid() r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, &(0x7f0000000080)=ANY=[@ANYBLOB="7549f8187a2a6e40594b4473692aef0dda6d1a46f2019ed7e86b1d711c76877056283bedab9579d2125c7cad3b1f28c963b3a626ef87b075574ff5612ccc80d8e14883ad2a8e6516a15c410ce005b2e841ebacd55a1365c685244ec3b66b003e7ec96ed005906d578130183c37"]) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x2, 0x3, 0x2d8, 0x190, 0x190, 0x95ffffff, 0x77, 0x93ffffff, 0x240, 0x240, 0x221, 0x240, 0x240, 0x3, 0x0, {[{{@uncond, 0x0, 0x130, 0x190, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "bdc74c01369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa6ecab6b1d2cc05e3182f64694d7d05fb8b8c8f56627a54f905d564eeeb8334f650ca0f3c44f7fda4d20a55050342ea85ecc8838e7088de33582f36a0a375bb7008adc297a5ece1bb2df53d17bef26bb6f800", 0x7f, 0x2}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0x74020000]}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'veth0_to_batadv\x00', 'ip6gretap0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x338) [ 2826.411023][T21669] FAULT_INJECTION: forcing a failure. [ 2826.411023][T21669] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2826.424672][T21669] CPU: 0 PID: 21669 Comm: syz-executor.4 Tainted: G W 5.16.0-rc6-syzkaller #0 [ 2826.434829][T21669] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2826.444952][T21669] Call Trace: [ 2826.448230][T21669] [ 2826.451177][T21669] dump_stack_lvl+0xd6/0x122 [ 2826.455770][T21669] dump_stack+0x11/0x1b [ 2826.459924][T21669] should_fail+0x23c/0x250 [ 2826.464359][T21669] __alloc_pages+0x102/0x330 [ 2826.468963][T21669] alloc_pages+0x382/0x3d0 [ 2826.473450][T21669] folio_alloc+0x1a/0x20 [ 2826.477763][T21669] filemap_alloc_folio+0x53/0xf0 [ 2826.482787][T21669] page_cache_ra_unbounded+0x1c0/0x430 [ 2826.488256][T21669] ondemand_readahead+0x4f8/0x700 [ 2826.493343][T21669] ? filemap_get_read_batch+0x3e2/0x410 [ 2826.498901][T21669] page_cache_async_ra+0xed/0x120 [ 2826.503989][T21669] filemap_read+0x500/0x16d0 14:48:17 executing program 5: clone(0x80910b00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) set_mempolicy(0x3, &(0x7f0000000040)=0xffffffff80000001, 0x400) gettid() r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, &(0x7f0000000080)=ANY=[@ANYBLOB="7549f8187a2a6e40594b4473692aef0dda6d1a46f2019ed7e86b1d711c76877056283bedab9579d2125c7cad3b1f28c963b3a626ef87b075574ff5612ccc80d8e14883ad2a8e6516a15c410ce005b2e841ebacd55a1365c685244ec3b66b003e7ec96ed005906d578130183c37"]) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x2, 0x3, 0x2d8, 0x190, 0x190, 0x95ffffff, 0x77, 0x93ffffff, 0x240, 0x240, 0x221, 0x240, 0x240, 0x3, 0x0, {[{{@uncond, 0x0, 0x130, 0x190, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "bdc74c01369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa6ecab6b1d2cc05e3182f64694d7d05fb8b8c8f56627a54f905d564eeeb8334f650ca0f3c44f7fda4d20a55050342ea85ecc8838e7088de33582f36a0a375bb7008adc297a5ece1bb2df53d17bef26bb6f800", 0x7f, 0x2}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0x7a000000]}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'veth0_to_batadv\x00', 'ip6gretap0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x338) [ 2826.508580][T21669] ? debug_smp_processor_id+0x18/0x20 [ 2826.514018][T21669] generic_file_read_iter+0x72/0x2a0 [ 2826.519299][T21669] ? iov_iter_pipe+0x100/0x150 [ 2826.524062][T21669] ? ext4_file_read_iter+0x7a/0x1f0 [ 2826.529264][T21669] generic_file_splice_read+0x24f/0x330 [ 2826.534819][T21669] ? splice_shrink_spd+0x60/0x60 [ 2826.539759][T21669] splice_direct_to_actor+0x2aa/0x650 [ 2826.545132][T21669] ? do_splice_direct+0x190/0x190 [ 2826.550161][T21669] do_splice_direct+0x106/0x190 [ 2826.555016][T21669] do_sendfile+0x675/0xc40 [ 2826.559506][T21669] __x64_sys_sendfile64+0x102/0x140 [ 2826.564778][T21669] do_syscall_64+0x44/0xd0 [ 2826.569202][T21669] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2826.575118][T21669] RIP: 0033:0x7f2d29acae99 [ 2826.579599][T21669] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2826.599202][T21669] RSP: 002b:00007f2d28c41168 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 14:48:17 executing program 3: r0 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0xd1, &(0x7f0000000000)=0x4, 0x4) setsockopt$inet6_MRT6_ADD_MFC(r0, 0x29, 0xc8, 0x0, 0x4) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r0, 0x29, 0xc9, 0x0, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f00000018c0)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0}}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f00000000c0)={r1, 0x1, 0x29, 0x1}) r2 = dup2(r0, r0) openat$vsock(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r2, 0x84009422, &(0x7f0000001cc0)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0}}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f00000000c0)={r3, 0x1, 0x29, 0x1}) ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, &(0x7f0000000200)={0x8, 0x315c2f9e1518061a, {0x7fff, @usage, r1, 0x0, 0x7ff, 0x4, 0x9, 0x3, 0x472, @usage=0x101, 0x80000000, 0x3, [0x1000, 0xac7, 0xffff, 0x800, 0x6, 0x68]}, {0x3274, @usage=0x80d3, r3, 0xffffffff, 0x2, 0x6, 0x4, 0x9, 0x60, @struct={0x7, 0x20}, 0x40, 0x3ff, [0x7, 0x6, 0xbce, 0x8]}, {0x3, @usage=0x8, 0x0, 0x7, 0x100000000, 0x7, 0x1, 0x9, 0x0, @struct={0x10000, 0x3e07}, 0x5, 0x32, [0xfffffffffffff800, 0x1f, 0x1ff, 0x7fff, 0x400, 0x7f]}, {0x3489c0000, 0x3, 0x9}}) r4 = syz_io_uring_setup(0x2de5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000fe8000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r5, r6, &(0x7f00000001c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) r7 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_int(r7, 0x29, 0xd1, &(0x7f0000000000)=0x4, 0x4) setsockopt$inet6_MRT6_ADD_MFC(r7, 0x29, 0xc8, 0x0, 0x4) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r7, 0x29, 0xc9, 0x0, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, &(0x7f0000000600)={{0x0, 0x0, 0x4, 0xfffffffffffffffa, 0x8001, 0x7, 0x9972, 0x0, 0x2, 0x598, 0x8000, 0x1f, 0x3, 0x5, 0x7}, 0x10, [0x0, 0x0]}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r7, 0xd000943e, &(0x7f0000000680)={0x0, r8, "71b024ed5261b5872e0b8aef9d7b225ac925eeb17542a9d576b00c09be3459d39a7c6196ca051775533b806f64f647d0b613dc13aa90763216cd0b15d0a13114d4651b5f7c7832132f6b5714c119122c95948918a7b871c3eb37577d2b21dd84bbfd933557eaeec8dccfe0750312eaf2a88f10c4e19157144f5b67c3a2b205ef7bf3a12e7e19e0d3051a4880bc025862f195640bb9749bcc9ffa4014403059f28c7e2671ebce282459982ae94aecf70576af43765349f78c2e3c804c61c11e645ede4c3955873060253575dfec3874834ba37d9283fed9a34d9da856900dc78e4ff13ab4c79a4f9cdbce35166b7e8be175f14755058a87eccd8a23f6cb8b8d8a", "e33c7db8fc13856353a6bc9f8243ca39a998e92d7479507fb366514526d46c7b30115ff688b6b39394b8b54a4d1d052d69f57f675e0588d469d5ef1deba035d72730c23d67febabbabb382edecd816623134bc3cf779a6f9d5b90d04bd0267152240d15a1a7f2498ebb3613111a29ceba11c7ec106a54140052a6987c3353eef86176db7e1bd8008fae090a00b968ff4e47bb337a267c5be54cdd03b4ad4c2df04b0e30b62e4d1f6a8072da3293b1e687f7a6de22f958c600f752daee3c2c78e8c12868d86c940fcb1ea25d1043a3d0a5ea80b17211492122e0e540f78cf4c35e01dd4c1b6b0c0e8b8e2fe493a53c3e508a8b80f8e7d1f58be99c3256d90ec5717bec4fe530566dcc2b035742ec43b28b22779647a485b84d5461e5859c772c2b0b19b46e560ad8435255bc0621a512cf530bee155ffae4d5df9df4c9531c713fead14e31f04933549dbe022f25604142a239e38fc96b5c6717f2a465e9cfd04b592ea446a0304959750db68cee3f1188a65e9a7d1cb8b2e571f0d35cb8e0333b5a634f3144126b1a5fb72393ed7125299178e9fceaec895d99c11a47471b1ef705caec6670ebeda7f6ddffcd0df5dda87bd22a7f7993b4f21cae4b25e26ce54bf6a6835beff750263215f1f5672d38b6f1d699bdce130049e63f0144cf8db6c887789df1d3c5d12ce3067b7010e3357ef55b8a160b0f1d529e93bf1d5b97a35d0d6d0dc6827a709a2ab90c89c1cd462ab60b6502d8f85b33d83ce9ad20c11757e3958da89b0bd3a710ebaa1a4fc440445af8b3e948308031442ede90f545406f38f805bbc2435c4b8db85c1c187791d18893401b1aa288a00d4696ab844d1e751a7dc9b4b82f9096c2d1fac8928d6a69d9ebf5ebeba83b7fce896023c3b5f212aea5b725d845e20e60d695a52d0bb6c28350d92f89c158f8795185dda73ae3a835c55f69d886a74495b89fe7c8bd4e3232c99a6400d0894938d729dff38f4801a58183c261b32260283fbf654fb126f713e2c6edb00407b2ccca9235595625aa3dcd54b585dea2be52e03fcaadcecbfe73cae2b46e3fab1df9f6cb18cc3ed3808d3611a8532a799dd568d642cf421faaf3db90071f587b77ed05a748a63aa607432ee3c196d8b379d6254d3d510166f1d89517aee1bc2eb48c51d3370f03225211a7041ef556bc0e5138b283dd3395daeac9e0fd8db7cf35d7b00f251addf90dbdc8787061886ea3a3649972ff46c830ecb0c57e3a606cf4f8a867873fbea875838e5a5be6b3fb8dd57a8f91c8e685452e8cbb1710cd2bb1ac659ff8c19e4ba193d182c968cd25e6b67b70ab4de88d95d2294518c524edbf473a2e79a799089750e7103aa44a39fe56ff54180f0507fe50300e908b2498a450fb8c684582ec716a53140b002b2e5769f06e7fa67e8fc71327ca3f921f3c4c7f6d2776d5ccb5c1c9603153a05be7a1ebf9b3d91e99d74f52a7a58b4c181c863c108ec8bfa49e164177377ffe7f8ebd8def0b1e65eef1a7edecdcb1e4a72299a8e77a0cbb07c9fe6a6686fb64b2e911cb07d1f41a448227bdabbd1f2e02a94aa200461e1b7080a337f89073680e41f9fee439c0f260f8af0912db5178ccbc46d08d01ba34069eabd67a59508a0e178dd0a2c2a75b8003036e3777a28c76e54facb41b84d71945ce3d24487d5a6d08b979f871b860536fc444e3ec9d6be17d233d4d2704e86c5d9803abde0d3865bba09131f2c1071202d28356d2fbe2dfca0887b71327cdf127a6940765d6d66d23097af690a9740c557fc23382addc592397a8ffce05aa9a26c58c628192b64963c1f50f44f03413fef89b53c432242995108915d9b758569b8cd0d67a074e6e8844c5fb85de79d6aba1f91864e773f6224b88202454749b993f753292628087557589d8a217db77063db95d2ae52b1fc0d30886209e22fdc50f5dcf54104997a07eb3785305603b1b748ec7ffbfcbd3763eff962ce00b98784bcdfce4722a3c36926c2dba52bb9b086730fe194b1cb8b2a3dfb3d9c1ba8dd224aa72567cf9488546786f37e8c86ce430882e11d63529a2e069892d9c8659512d9ccd644e25da951097c6c0164bb0ad4a58d91a087da55ab45908c9327fbf878660ddb2c9afee5d9f831748ec1e534656334f1e7694022ecf6f1aef6247bfbdf941550cfb7af24fea03299b1bfe282008eed18b46c7a408aafc2388fc893cab5fdfab9e687c6e17ec1fdd2dd8cc6054ebccdf76f53be702e9304253cb61665805f51d136512a25d9c4be69fcad2f452bc573f623481ccc3c4e2b15f87e48138dfadeaa0cb4102b1bcdccc5f3f280a3d27a6f34aa038562dec9f323102b9fe416cfbb647ee2f4a81042dfab492defd405628aabec9195cd5df79e63a756a759972ddb7e98e0df5ca7dabb1a7e4063ca58fd05791747fa2832756ce7d535949102c29289179d48713a1d4a35a1ffd8ef86a40681eed0ad21165ada980f42cda5c73b4a229941685233b571bb024b282b2f5cde8704f30952e0a539eac2ff55411737a8bcc78e3acbb98c7e0c34fb5b773f2ed2df278ece8258d272a2e83785bc033a4ccdec3bc835499dceee4801e8c1f3eb6b2a781383666afa33304fbd9e406e8f322b64d625ee08defd0fbc7d7b6d62a4987caffce3639f68c19fc4a64f9c9ef2ed8d2287de58ec8c427a1839bd379d433621cd4e4d6233ad2a673a795c3871e0e210a990eb09ae3d82510bae965903a7550adcbe451961924425f293e682cb588cb0d4f507ec25fb82bfe05ec70b342cff8ad049dced8d303cc4fdad1db3c035f2477db1c102136afa9d3ed8e64cd9ef418d86d5d5ac61347f19355b875dac65724ea392941748d9367fc4c9f25418d71ddfd364cc92902ef20ed6aa294a75d7824557987b5dba6698b87649ce98499919c520192968d2521e57d59a906d500b0517c18537208bd53f7407a341596290cbed54c690737ada2a621644f9612700c697c576f95d5e9b6fc2f134f203a4a3811a95a5f812e5f98cf33337785b0277f567335f21e104d102725fa728502b8b0aa2f99cc76807aec5d242ac04733597fc1da99330cc24317f08f3017eabf53fd7516367011a9db262be08211317b955788c5b06e31ede20fc41d222d811473f4faff8f0c1443a50117a3e2972540512d60c3ee174f8ba5af530b77d51ef2e306a9d4a03139fcc078e0bc9ddbcfd1c9453c06f7b7ee6ee40dfc946242f8cbf36115ee0395ff10fe63cddd66b228982f455b6bfb3c1746d4b49704f397582487b509a8c52c1aed3264e6dee0adad15bdb233162688b63851d87c057ae891611578cf3e86fa64e7a666d4eb6d4490995acb2652ebd19c428ec952cad3e6f29be0688cb8acec8da02988531c24775093b4c6048a8cf70b29e6305c1ef8fafb889d5571df602e179b47774eba9e4642c8a7759f6ddc2d11106d69c0dd32b6df75fa0c174302cf99ac65762cec69241ed3a276a3c2889560af89bc11f3c838f75bb51d128883e6a83869fbfc0e722be760335cd7136d748aed17dcb2ab4fc600f973c34a45a8c43a8a5e5c230a914b6c2cf1040132e360dc1dc4e5999b95f37c0a4729e307fb494df793365d15c2da7fbe54be7e553e72585ed91a61d3c9e7757b6827f26ff9ca04fa4aa10461e6ded35b73bc3ce4b4e54d518cdc38d45d457b3c09c69a9063814ec980536bd1bde0b367c84a630857c86ef27b0e63218a92962e0b38c86c9fb50a9f21bfb6cd6d789e500404be064062c82419b50fb7a90dfbfa355118062d2384305bdbbda5b80fd00c38eec19a22d226d4ff3eb7b8eea3ec6bc5665aebd6e354bec3038b251cd8c94f8263786ea2a8a583536195303b896e690bb4100e1219b3b03858ff556b5df91edb1b90487a9206e5589111f671072e9020ed7c60dfe3f505d96500dd6b96f96a79459dd378b5867da25edb53128bfab02a662a47a2f51ab743f0d61bbcc76f0151dfef93663d373ff757538f3353eef3b35fbe0d6152b5fd6ff0ce446aff27d698d8ebe0774945ba99adac8c46f5c1c6521d80dd25fee20dda6d88c6a02d17347145dd824851e032d77cf7de24b6bcb6c8ee28669e56e96d5648ebc9e3b33ac5635694b398b6fbdf53c8c4ba54c59d16151dad83225b4ffa98f083e0654613b9bc68674e8ed36be608d7d1288e5970e585082d588487c9dd3bd42a250d7f3d3736fbb936bd6325e38815de6f1c1f64b9b81f1c255b3048cf0bb68db9b78c1d233f004ead051d4399f08467e85056d686745ceaf076923d4e5c974ba03cb3cfc615b04b589de104626faa3243943b0ce3669088a0a31251fbf3cf4b4487315fad36de28b2dd1394946365e49e54b413242e7458638a0e65912bf355c5ab2ac422408a632b71ec4fcdca129c1e0a7be8ab99e31e94a4b1d3a406bcb84dc7a322c2da6340644e020ca6e364091eca2c276e5e645dc8db964973793492caa894651175373366e8e6b5c287b81ca5a1592e92ed65c68e7dada14670582aab89381100c2420262686fbcdcc6d1d4e135e0822d7046f8dadfddacec4974a98f1941b1493fe8108520f38a44eb9ef5b4c7a39d387fff6848ebb7f257933ed34bd7aa7f68be66155c98136452740b7e26c7a386427457066bd0994d9f65ae3a1fe820631f7535e70dd2ad672c8d14502a54291f852c709c123be2afc775fadf5f1c5d8a9f46ef0f3b5948a5b56d990f76cde5aa6b6156dc4acc80d3dced52cb4fec4dd2fe4fcebcc30580f3ce223de9d6dcd9bae50fccfb430f76e21932dafff7a503d661f137b6974a3b3f75f2e21fcac9b2634d38f4aaf36958b950a7b98fc5e6393d893e4e07b40602c640daccc3d61e978818612344a4c9aee415b3560c7794d93fc76bc9463dd7c3583ae42ce461915afe732e532f28515a6d874a5f98751e5d1503735dd9312cb00084694142ce35d5f87a27584eaeec0a60d08dc768d967f269009f04a2f0ffe797561057e9380164c084866bf937b7e81dfd5307fbd37ceb5d32baeb95954f3c8f566746d6c8795915e817a29e7b95ac7aa2f0b7495da981505680d5a7597561d637ed4459eb7e811732ae63146a7b9207a17beb52b702eb18d96ba003d158002ac451554b1ba6c2d4474b2acf335532df50657dee269a9cafd0954b15893413d951c3751e8432a1f73d0279d859b9ac3723353e26a70c196f9a1b61a77816fdfd2cc68c47e47a096d5bfd86a191c26ba3e23430927ef0d2c9d892d44eb681197cbe384f6416e38d84c9aa7a5deaffab676ef7ac6aac14c41dc8d66eb76d3a6df150fb437e62a135bb7367c126b4d7663389b90c1bfb62aae76db16acf279591cce898aa7d1a2296954666559310aea13e07be3b037270227592c688ce61a764b4e4df27e921b40f18dd8"}) io_uring_enter(r4, 0xb2, 0x0, 0x0, 0x0, 0x7401) socket$inet6(0xa, 0x3, 0x3a) (async) setsockopt$inet6_int(r0, 0x29, 0xd1, &(0x7f0000000000)=0x4, 0x4) (async) setsockopt$inet6_MRT6_ADD_MFC(r0, 0x29, 0xc8, 0x0, 0x4) (async) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r0, 0x29, 0xc9, 0x0, 0x0) (async) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f00000018c0)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) (async) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f00000000c0)={r1, 0x1, 0x29, 0x1}) (async) dup2(r0, r0) (async) openat$vsock(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r2, 0x84009422, &(0x7f0000001cc0)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) (async) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f00000000c0)={r3, 0x1, 0x29, 0x1}) (async) ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, &(0x7f0000000200)={0x8, 0x315c2f9e1518061a, {0x7fff, @usage, r1, 0x0, 0x7ff, 0x4, 0x9, 0x3, 0x472, @usage=0x101, 0x80000000, 0x3, [0x1000, 0xac7, 0xffff, 0x800, 0x6, 0x68]}, {0x3274, @usage=0x80d3, r3, 0xffffffff, 0x2, 0x6, 0x4, 0x9, 0x60, @struct={0x7, 0x20}, 0x40, 0x3ff, [0x7, 0x6, 0xbce, 0x8]}, {0x3, @usage=0x8, 0x0, 0x7, 0x100000000, 0x7, 0x1, 0x9, 0x0, @struct={0x10000, 0x3e07}, 0x5, 0x32, [0xfffffffffffff800, 0x1f, 0x1ff, 0x7fff, 0x400, 0x7f]}, {0x3489c0000, 0x3, 0x9}}) (async) syz_io_uring_setup(0x2de5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000fe8000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000140)) (async) syz_io_uring_submit(r5, r6, &(0x7f00000001c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) (async) socket$inet6(0xa, 0x3, 0x3a) (async) setsockopt$inet6_int(r7, 0x29, 0xd1, &(0x7f0000000000)=0x4, 0x4) (async) setsockopt$inet6_MRT6_ADD_MFC(r7, 0x29, 0xc8, 0x0, 0x4) (async) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r7, 0x29, 0xc9, 0x0, 0x0) (async) ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, &(0x7f0000000600)={{0x0, 0x0, 0x4, 0xfffffffffffffffa, 0x8001, 0x7, 0x9972, 0x0, 0x2, 0x598, 0x8000, 0x1f, 0x3, 0x5, 0x7}, 0x10, [0x0, 0x0]}) (async) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r7, 0xd000943e, &(0x7f0000000680)={0x0, r8, "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", "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"}) (async) io_uring_enter(r4, 0xb2, 0x0, 0x0, 0x0, 0x7401) (async) 14:48:17 executing program 5: clone(0x80910b00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) set_mempolicy(0x3, &(0x7f0000000040)=0xffffffff80000001, 0x400) gettid() r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, &(0x7f0000000080)=ANY=[@ANYBLOB="7549f8187a2a6e40594b4473692aef0dda6d1a46f2019ed7e86b1d711c76877056283bedab9579d2125c7cad3b1f28c963b3a626ef87b075574ff5612ccc80d8e14883ad2a8e6516a15c410ce005b2e841ebacd55a1365c685244ec3b66b003e7ec96ed005906d578130183c37"]) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x2, 0x3, 0x2d8, 0x190, 0x190, 0x95ffffff, 0x77, 0x93ffffff, 0x240, 0x240, 0x221, 0x240, 0x240, 0x3, 0x0, {[{{@uncond, 0x0, 0x130, 0x190, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "bdc74c01369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa6ecab6b1d2cc05e3182f64694d7d05fb8b8c8f56627a54f905d564eeeb8334f650ca0f3c44f7fda4d20a55050342ea85ecc8838e7088de33582f36a0a375bb7008adc297a5ece1bb2df53d17bef26bb6f800", 0x7f, 0x2}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0x7a020000]}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'veth0_to_batadv\x00', 'ip6gretap0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x338) [ 2826.607612][T21669] RAX: ffffffffffffffda RBX: 00007f2d29bddf60 RCX: 00007f2d29acae99 [ 2826.615583][T21669] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 2826.623552][T21669] RBP: 00007f2d28c411d0 R08: 0000000000000000 R09: 0000000000000000 [ 2826.631695][T21669] R10: 0000000000201000 R11: 0000000000000246 R12: 0000000000000002 [ 2826.639669][T21669] R13: 00007ffcc1d93fdf R14: 00007f2d28c41300 R15: 0000000000022000 [ 2826.647650][T21669] 14:48:17 executing program 2: clone(0x80910b00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) set_mempolicy(0x3, &(0x7f0000000040), 0x0) gettid() r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x2, 0x3, 0x2d8, 0x190, 0x190, 0x95ffffff, 0x77, 0x93ffffff, 0x240, 0x240, 0x221, 0x240, 0x240, 0x3, 0x0, {[{{@uncond, 0x0, 0x130, 0x190, 0x0, {0x0, 0xc}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "bdc74c01369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa6ecab6b1d2cc05e3182f64694d7d05fb8b8c8f56627a54f905d564eeeb8334f650ca0f3c44f7fda4d20a55050342ea85ecc8838e7088de33582f36a0a375bb7008adc297a5ece1bb2df53d17bef26bb6f800", 0x7f}}]}, @common=@SET={0x60}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'veth0_to_batadv\x00', 'ip6gretap0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x338) 14:48:17 executing program 4: r0 = socket$inet6(0xa, 0x400000000001, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) ftruncate(r1, 0x2007fff) close(r0) open(&(0x7f00000002c0)='./bus\x00', 0x14d842, 0x0) sendfile(r0, r1, 0x0, 0x201000) (fail_nth: 61) 14:48:17 executing program 5: clone(0x80910b00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) set_mempolicy(0x3, &(0x7f0000000040)=0xffffffff80000001, 0x400) gettid() r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, &(0x7f0000000080)=ANY=[@ANYBLOB="7549f8187a2a6e40594b4473692aef0dda6d1a46f2019ed7e86b1d711c76877056283bedab9579d2125c7cad3b1f28c963b3a626ef87b075574ff5612ccc80d8e14883ad2a8e6516a15c410ce005b2e841ebacd55a1365c685244ec3b66b003e7ec96ed005906d578130183c37"]) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x2, 0x3, 0x2d8, 0x190, 0x190, 0x95ffffff, 0x77, 0x93ffffff, 0x240, 0x240, 0x221, 0x240, 0x240, 0x3, 0x0, {[{{@uncond, 0x0, 0x130, 0x190, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "bdc74c01369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa6ecab6b1d2cc05e3182f64694d7d05fb8b8c8f56627a54f905d564eeeb8334f650ca0f3c44f7fda4d20a55050342ea85ecc8838e7088de33582f36a0a375bb7008adc297a5ece1bb2df53d17bef26bb6f800", 0x7f, 0x2}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0x7d000000]}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'veth0_to_batadv\x00', 'ip6gretap0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x338) 14:48:17 executing program 2: clone(0x80910b00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) set_mempolicy(0x3, &(0x7f0000000040), 0x0) gettid() r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x2, 0x3, 0x2d8, 0x190, 0x190, 0x95ffffff, 0x77, 0x93ffffff, 0x240, 0x240, 0x221, 0x240, 0x240, 0x3, 0x0, {[{{@uncond, 0x0, 0x130, 0x190, 0x0, {0x0, 0xd}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "bdc74c01369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa6ecab6b1d2cc05e3182f64694d7d05fb8b8c8f56627a54f905d564eeeb8334f650ca0f3c44f7fda4d20a55050342ea85ecc8838e7088de33582f36a0a375bb7008adc297a5ece1bb2df53d17bef26bb6f800", 0x7f}}]}, @common=@SET={0x60}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'veth0_to_batadv\x00', 'ip6gretap0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x338) 14:48:17 executing program 1: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) ftruncate(r1, 0x2007fff) close(r0) open(&(0x7f00000002c0)='./bus\x00', 0x14d842, 0x0) sendfile(r0, r1, 0x0, 0x201000) r2 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_int(r2, 0x29, 0xd1, &(0x7f0000000000)=0x4, 0x4) setsockopt$inet6_MRT6_ADD_MFC(r2, 0x29, 0xc8, 0x0, 0x4) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r2, 0x29, 0xc9, 0x0, 0x0) fsetxattr$trusted_overlay_opaque(r2, &(0x7f0000000000), &(0x7f0000000040), 0x2, 0x2) socket$inet6(0xa, 0x400000000001, 0x0) (async) open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) (async) ftruncate(r1, 0x2007fff) (async) close(r0) (async) open(&(0x7f00000002c0)='./bus\x00', 0x14d842, 0x0) (async) sendfile(r0, r1, 0x0, 0x201000) (async) socket$inet6(0xa, 0x3, 0x3a) (async) setsockopt$inet6_int(r2, 0x29, 0xd1, &(0x7f0000000000)=0x4, 0x4) (async) setsockopt$inet6_MRT6_ADD_MFC(r2, 0x29, 0xc8, 0x0, 0x4) (async) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r2, 0x29, 0xc9, 0x0, 0x0) (async) fsetxattr$trusted_overlay_opaque(r2, &(0x7f0000000000), &(0x7f0000000040), 0x2, 0x2) (async) 14:48:17 executing program 3: r0 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0xd1, &(0x7f0000000000)=0x4, 0x4) (async) setsockopt$inet6_MRT6_ADD_MFC(r0, 0x29, 0xc8, 0x0, 0x4) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r0, 0x29, 0xc9, 0x0, 0x0) (async) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f00000018c0)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0}}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f00000000c0)={r1, 0x1, 0x29, 0x1}) (async) r2 = dup2(r0, r0) openat$vsock(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r2, 0x84009422, &(0x7f0000001cc0)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0}}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f00000000c0)={r3, 0x1, 0x29, 0x1}) (async) ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, &(0x7f0000000200)={0x8, 0x315c2f9e1518061a, {0x7fff, @usage, r1, 0x0, 0x7ff, 0x4, 0x9, 0x3, 0x472, @usage=0x101, 0x80000000, 0x3, [0x1000, 0xac7, 0xffff, 0x800, 0x6, 0x68]}, {0x3274, @usage=0x80d3, r3, 0xffffffff, 0x2, 0x6, 0x4, 0x9, 0x60, @struct={0x7, 0x20}, 0x40, 0x3ff, [0x7, 0x6, 0xbce, 0x8]}, {0x3, @usage=0x8, 0x0, 0x7, 0x100000000, 0x7, 0x1, 0x9, 0x0, @struct={0x10000, 0x3e07}, 0x5, 0x32, [0xfffffffffffff800, 0x1f, 0x1ff, 0x7fff, 0x400, 0x7f]}, {0x3489c0000, 0x3, 0x9}}) (async) r4 = syz_io_uring_setup(0x2de5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000fe8000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r5, r6, &(0x7f00000001c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) (async) r7 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_int(r7, 0x29, 0xd1, &(0x7f0000000000)=0x4, 0x4) (async) setsockopt$inet6_MRT6_ADD_MFC(r7, 0x29, 0xc8, 0x0, 0x4) (async) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r7, 0x29, 0xc9, 0x0, 0x0) (async) ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, &(0x7f0000000600)={{0x0, 0x0, 0x4, 0xfffffffffffffffa, 0x8001, 0x7, 0x9972, 0x0, 0x2, 0x598, 0x8000, 0x1f, 0x3, 0x5, 0x7}, 0x10, [0x0, 0x0]}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r7, 0xd000943e, &(0x7f0000000680)={0x0, r8, "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", "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"}) io_uring_enter(r4, 0xb2, 0x0, 0x0, 0x0, 0x7401) 14:48:17 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x2) socketpair(0xa, 0x4, 0x5, &(0x7f0000000040)={0xffffffffffffffff}) read(r2, &(0x7f0000000080)=""/201, 0xc9) write$evdev(r1, &(0x7f000004d000)=[{}], 0xfffffe82) openat(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/self/exe\x00', 0x0, 0x0) (async) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) (async) syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x2) (async) socketpair(0xa, 0x4, 0x5, &(0x7f0000000040)) (async) read(r2, &(0x7f0000000080)=""/201, 0xc9) (async) write$evdev(r1, &(0x7f000004d000)=[{}], 0xfffffe82) (async) 14:48:17 executing program 2: clone(0x80910b00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) set_mempolicy(0x3, &(0x7f0000000040), 0x0) gettid() r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x2, 0x3, 0x2d8, 0x190, 0x190, 0x95ffffff, 0x77, 0x93ffffff, 0x240, 0x240, 0x221, 0x240, 0x240, 0x3, 0x0, {[{{@uncond, 0x0, 0x130, 0x190, 0x0, {0x0, 0xe}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "bdc74c01369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa6ecab6b1d2cc05e3182f64694d7d05fb8b8c8f56627a54f905d564eeeb8334f650ca0f3c44f7fda4d20a55050342ea85ecc8838e7088de33582f36a0a375bb7008adc297a5ece1bb2df53d17bef26bb6f800", 0x7f}}]}, @common=@SET={0x60}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'veth0_to_batadv\x00', 'ip6gretap0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x338) 14:48:17 executing program 2: clone(0x80910b00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) set_mempolicy(0x3, &(0x7f0000000040), 0x0) gettid() r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x2, 0x3, 0x2d8, 0x190, 0x190, 0x95ffffff, 0x77, 0x93ffffff, 0x240, 0x240, 0x221, 0x240, 0x240, 0x3, 0x0, {[{{@uncond, 0x0, 0x130, 0x190, 0x0, {0x0, 0xf}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "bdc74c01369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa6ecab6b1d2cc05e3182f64694d7d05fb8b8c8f56627a54f905d564eeeb8334f650ca0f3c44f7fda4d20a55050342ea85ecc8838e7088de33582f36a0a375bb7008adc297a5ece1bb2df53d17bef26bb6f800", 0x7f}}]}, @common=@SET={0x60}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'veth0_to_batadv\x00', 'ip6gretap0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x338) 14:48:17 executing program 5: clone(0x80910b00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) set_mempolicy(0x3, &(0x7f0000000040)=0xffffffff80000001, 0x400) gettid() r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, &(0x7f0000000080)=ANY=[@ANYBLOB="7549f8187a2a6e40594b4473692aef0dda6d1a46f2019ed7e86b1d711c76877056283bedab9579d2125c7cad3b1f28c963b3a626ef87b075574ff5612ccc80d8e14883ad2a8e6516a15c410ce005b2e841ebacd55a1365c685244ec3b66b003e7ec96ed005906d578130183c37"]) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x2, 0x3, 0x2d8, 0x190, 0x190, 0x95ffffff, 0x77, 0x93ffffff, 0x240, 0x240, 0x221, 0x240, 0x240, 0x3, 0x0, {[{{@uncond, 0x0, 0x130, 0x190, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "bdc74c01369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa6ecab6b1d2cc05e3182f64694d7d05fb8b8c8f56627a54f905d564eeeb8334f650ca0f3c44f7fda4d20a55050342ea85ecc8838e7088de33582f36a0a375bb7008adc297a5ece1bb2df53d17bef26bb6f800", 0x7f, 0x2}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0x81010000]}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'veth0_to_batadv\x00', 'ip6gretap0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x338) 14:48:17 executing program 3: r0 = syz_io_uring_setup(0x5d66, &(0x7f00000002c0), &(0x7f0000ee7000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380), &(0x7f00000001c0)) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) io_uring_enter(r0, 0x7443, 0x0, 0x0, 0x0, 0x0) r1 = syz_io_uring_setup(0x2de5, &(0x7f0000000000)={0x0, 0x0, 0x1, 0xfffffffd, 0x1f3, 0x0, r0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000fe8000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000340)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0xb2, 0x0, 0x0, 0x0, 0x7401) r4 = signalfd(r0, &(0x7f00000000c0)={[0x4]}, 0x8) r5 = signalfd4(r0, &(0x7f0000000280)={[0xcd5]}, 0x8, 0x80000) ioctl$TIOCVHANGUP(r5, 0x5437, 0x0) syz_io_uring_setup(0xfa6, &(0x7f0000000200)={0x0, 0xc4ca, 0x8, 0x0, 0x1d, 0x0, r4}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000180)) [ 2826.987650][T23171] FAULT_INJECTION: forcing a failure. [ 2826.987650][T23171] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2827.000986][T23171] CPU: 0 PID: 23171 Comm: syz-executor.4 Tainted: G W 5.16.0-rc6-syzkaller #0 [ 2827.011212][T23171] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2827.021272][T23171] Call Trace: [ 2827.024549][T23171] [ 2827.027471][T23171] dump_stack_lvl+0xd6/0x122 [ 2827.032135][T23171] dump_stack+0x11/0x1b [ 2827.036294][T23171] should_fail+0x23c/0x250 [ 2827.040783][T23171] __alloc_pages+0x102/0x330 [ 2827.045456][T23171] alloc_pages+0x382/0x3d0 [ 2827.049872][T23171] folio_alloc+0x1a/0x20 [ 2827.054117][T23171] filemap_alloc_folio+0x53/0xf0 [ 2827.059153][T23171] page_cache_ra_unbounded+0x1c0/0x430 [ 2827.064776][T23171] ondemand_readahead+0x4f8/0x700 [ 2827.070422][T23171] ? filemap_get_read_batch+0x3e2/0x410 [ 2827.070498][T23171] page_cache_async_ra+0xed/0x120 [ 2827.081069][T23171] filemap_read+0x500/0x16d0 [ 2827.085747][T23171] generic_file_read_iter+0x72/0x2a0 [ 2827.091194][T23171] ? iov_iter_pipe+0x100/0x150 [ 2827.091221][T23171] ? ext4_file_read_iter+0x7a/0x1f0 [ 2827.101148][T23171] generic_file_splice_read+0x24f/0x330 [ 2827.106816][T23171] ? splice_shrink_spd+0x60/0x60 [ 2827.111769][T23171] splice_direct_to_actor+0x2aa/0x650 [ 2827.117214][T23171] ? do_splice_direct+0x190/0x190 [ 2827.122301][T23171] do_splice_direct+0x106/0x190 [ 2827.127236][T23171] do_sendfile+0x675/0xc40 [ 2827.127264][T23171] __x64_sys_sendfile64+0x102/0x140 14:48:17 executing program 5: clone(0x80910b00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) set_mempolicy(0x3, &(0x7f0000000040)=0xffffffff80000001, 0x400) gettid() r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, &(0x7f0000000080)=ANY=[@ANYBLOB="7549f8187a2a6e40594b4473692aef0dda6d1a46f2019ed7e86b1d711c76877056283bedab9579d2125c7cad3b1f28c963b3a626ef87b075574ff5612ccc80d8e14883ad2a8e6516a15c410ce005b2e841ebacd55a1365c685244ec3b66b003e7ec96ed005906d578130183c37"]) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x2, 0x3, 0x2d8, 0x190, 0x190, 0x95ffffff, 0x77, 0x93ffffff, 0x240, 0x240, 0x221, 0x240, 0x240, 0x3, 0x0, {[{{@uncond, 0x0, 0x130, 0x190, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "bdc74c01369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa6ecab6b1d2cc05e3182f64694d7d05fb8b8c8f56627a54f905d564eeeb8334f650ca0f3c44f7fda4d20a55050342ea85ecc8838e7088de33582f36a0a375bb7008adc297a5ece1bb2df53d17bef26bb6f800", 0x7f, 0x2}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0x82000000]}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'veth0_to_batadv\x00', 'ip6gretap0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x338) 14:48:17 executing program 1: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) ftruncate(0xffffffffffffffff, 0x3) ftruncate(r1, 0x2007fff) close(r0) r2 = open(&(0x7f00000002c0)='./bus\x00', 0x14d842, 0x0) r3 = syz_io_uring_setup(0x5d66, &(0x7f00000002c0), &(0x7f0000ee7000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r4, r5, &(0x7f00000000c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f00000003c0)}, 0x1010001) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r3, 0x10000000) syz_io_uring_submit(r4, r6, &(0x7f0000000340)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r4, r6, &(0x7f0000000000)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r4, r6, &(0x7f0000004040)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000140)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_CLOSE, 0x0) syz_io_uring_submit(r4, r6, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE, 0x0) r7 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x1010, r2, 0x10000000) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r2, 0xc0189373, &(0x7f0000000100)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="21002316000000c7562fc92562757300"]) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) syz_io_uring_submit(r4, r7, &(0x7f0000000080)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x5, 0x0, r8, &(0x7f0000000040)={0x6}, r2, 0x1, 0x0, 0x0, {0x0, r9}}, 0x4) sendfile(r0, r1, 0x0, 0x201000) [ 2827.136893][T23171] do_syscall_64+0x44/0xd0 [ 2827.141314][T23171] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2827.147218][T23171] RIP: 0033:0x7f2d29acae99 [ 2827.151821][T23171] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2827.171615][T23171] RSP: 002b:00007f2d28c41168 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 2827.171642][T23171] RAX: ffffffffffffffda RBX: 00007f2d29bddf60 RCX: 00007f2d29acae99 [ 2827.171656][T23171] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 2827.171669][T23171] RBP: 00007f2d28c411d0 R08: 0000000000000000 R09: 0000000000000000 [ 2827.171682][T23171] R10: 0000000000201000 R11: 0000000000000246 R12: 0000000000000002 [ 2827.171695][T23171] R13: 00007ffcc1d93fdf R14: 00007f2d28c41300 R15: 0000000000022000 [ 2827.171745][T23171] 14:48:17 executing program 4: r0 = socket$inet6(0xa, 0x400000000001, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) ftruncate(r1, 0x2007fff) close(r0) open(&(0x7f00000002c0)='./bus\x00', 0x14d842, 0x0) sendfile(r0, r1, 0x0, 0x201000) (fail_nth: 62) 14:48:17 executing program 0: openat(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/self/exe\x00', 0x0, 0x0) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000040), 0x200000, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) mmap(&(0x7f0000507000/0x2000)=nil, 0x2000, 0x180000f, 0x1010, r0, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x2) write$evdev(r1, &(0x7f000004d000)=[{}], 0xfffffe82) 14:48:17 executing program 2: clone(0x80910b00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) set_mempolicy(0x3, &(0x7f0000000040), 0x0) gettid() r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x2, 0x3, 0x2d8, 0x190, 0x190, 0x95ffffff, 0x77, 0x93ffffff, 0x240, 0x240, 0x221, 0x240, 0x240, 0x3, 0x0, {[{{@uncond, 0x0, 0x130, 0x190, 0x0, {0x0, 0x11}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "bdc74c01369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa6ecab6b1d2cc05e3182f64694d7d05fb8b8c8f56627a54f905d564eeeb8334f650ca0f3c44f7fda4d20a55050342ea85ecc8838e7088de33582f36a0a375bb7008adc297a5ece1bb2df53d17bef26bb6f800", 0x7f}}]}, @common=@SET={0x60}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'veth0_to_batadv\x00', 'ip6gretap0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x338) 14:48:17 executing program 3: r0 = syz_io_uring_setup(0x5d66, &(0x7f00000002c0), &(0x7f0000ee7000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380), &(0x7f00000001c0)) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) (async) io_uring_enter(r0, 0x7443, 0x0, 0x0, 0x0, 0x0) r1 = syz_io_uring_setup(0x2de5, &(0x7f0000000000)={0x0, 0x0, 0x1, 0xfffffffd, 0x1f3, 0x0, r0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000fe8000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000340)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) (async) io_uring_enter(r1, 0xb2, 0x0, 0x0, 0x0, 0x7401) (async) r4 = signalfd(r0, &(0x7f00000000c0)={[0x4]}, 0x8) r5 = signalfd4(r0, &(0x7f0000000280)={[0xcd5]}, 0x8, 0x80000) ioctl$TIOCVHANGUP(r5, 0x5437, 0x0) (async) syz_io_uring_setup(0xfa6, &(0x7f0000000200)={0x0, 0xc4ca, 0x8, 0x0, 0x1d, 0x0, r4}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000180)) 14:48:17 executing program 5: clone(0x80910b00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) set_mempolicy(0x3, &(0x7f0000000040)=0xffffffff80000001, 0x400) gettid() r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, &(0x7f0000000080)=ANY=[@ANYBLOB="7549f8187a2a6e40594b4473692aef0dda6d1a46f2019ed7e86b1d711c76877056283bedab9579d2125c7cad3b1f28c963b3a626ef87b075574ff5612ccc80d8e14883ad2a8e6516a15c410ce005b2e841ebacd55a1365c685244ec3b66b003e7ec96ed005906d578130183c37"]) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x2, 0x3, 0x2d8, 0x190, 0x190, 0x95ffffff, 0x77, 0x93ffffff, 0x240, 0x240, 0x221, 0x240, 0x240, 0x3, 0x0, {[{{@uncond, 0x0, 0x130, 0x190, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "bdc74c01369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa6ecab6b1d2cc05e3182f64694d7d05fb8b8c8f56627a54f905d564eeeb8334f650ca0f3c44f7fda4d20a55050342ea85ecc8838e7088de33582f36a0a375bb7008adc297a5ece1bb2df53d17bef26bb6f800", 0x7f, 0x2}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0x82020000]}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'veth0_to_batadv\x00', 'ip6gretap0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x338) 14:48:17 executing program 2: clone(0x80910b00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) set_mempolicy(0x3, &(0x7f0000000040), 0x0) gettid() r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x2, 0x3, 0x2d8, 0x190, 0x190, 0x95ffffff, 0x77, 0x93ffffff, 0x240, 0x240, 0x221, 0x240, 0x240, 0x3, 0x0, {[{{@uncond, 0x0, 0x130, 0x190, 0x0, {0x0, 0x12}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "bdc74c01369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa6ecab6b1d2cc05e3182f64694d7d05fb8b8c8f56627a54f905d564eeeb8334f650ca0f3c44f7fda4d20a55050342ea85ecc8838e7088de33582f36a0a375bb7008adc297a5ece1bb2df53d17bef26bb6f800", 0x7f}}]}, @common=@SET={0x60}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'veth0_to_batadv\x00', 'ip6gretap0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x338) 14:48:17 executing program 5: clone(0x80910b00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) set_mempolicy(0x3, &(0x7f0000000040)=0xffffffff80000001, 0x400) gettid() r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, &(0x7f0000000080)=ANY=[@ANYBLOB="7549f8187a2a6e40594b4473692aef0dda6d1a46f2019ed7e86b1d711c76877056283bedab9579d2125c7cad3b1f28c963b3a626ef87b075574ff5612ccc80d8e14883ad2a8e6516a15c410ce005b2e841ebacd55a1365c685244ec3b66b003e7ec96ed005906d578130183c37"]) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x2, 0x3, 0x2d8, 0x190, 0x190, 0x95ffffff, 0x77, 0x93ffffff, 0x240, 0x240, 0x221, 0x240, 0x240, 0x3, 0x0, {[{{@uncond, 0x0, 0x130, 0x190, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "bdc74c01369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa6ecab6b1d2cc05e3182f64694d7d05fb8b8c8f56627a54f905d564eeeb8334f650ca0f3c44f7fda4d20a55050342ea85ecc8838e7088de33582f36a0a375bb7008adc297a5ece1bb2df53d17bef26bb6f800", 0x7f, 0x2}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0x83ffffff]}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'veth0_to_batadv\x00', 'ip6gretap0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x338) 14:48:17 executing program 1: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) ftruncate(0xffffffffffffffff, 0x3) ftruncate(r1, 0x2007fff) close(r0) r2 = open(&(0x7f00000002c0)='./bus\x00', 0x14d842, 0x0) r3 = syz_io_uring_setup(0x5d66, &(0x7f00000002c0), &(0x7f0000ee7000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r4, r5, &(0x7f00000000c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f00000003c0)}, 0x1010001) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r3, 0x10000000) syz_io_uring_submit(r4, r6, &(0x7f0000000340)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r4, r6, &(0x7f0000000000)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r4, r6, &(0x7f0000004040)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000140)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_CLOSE, 0x0) syz_io_uring_submit(r4, r6, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE, 0x0) r7 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x1010, r2, 0x10000000) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r2, 0xc0189373, &(0x7f0000000100)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="21002316000000c7562fc92562757300"]) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) syz_io_uring_submit(r4, r7, &(0x7f0000000080)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x5, 0x0, r8, &(0x7f0000000040)={0x6}, r2, 0x1, 0x0, 0x0, {0x0, r9}}, 0x4) sendfile(r0, r1, 0x0, 0x201000) socket$inet6(0xa, 0x400000000001, 0x0) (async) open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) (async) ftruncate(0xffffffffffffffff, 0x3) (async) ftruncate(r1, 0x2007fff) (async) close(r0) (async) open(&(0x7f00000002c0)='./bus\x00', 0x14d842, 0x0) (async) syz_io_uring_setup(0x5d66, &(0x7f00000002c0), &(0x7f0000ee7000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380), &(0x7f00000001c0)) (async) syz_io_uring_submit(r4, r5, &(0x7f00000000c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f00000003c0)}, 0x1010001) (async) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r3, 0x10000000) (async) syz_io_uring_submit(r4, r6, &(0x7f0000000340)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd_index}, 0x0) (async) syz_io_uring_submit(r4, r6, &(0x7f0000000000)=@IORING_OP_SYNC_FILE_RANGE, 0x0) (async) syz_io_uring_submit(r4, r6, &(0x7f0000004040)=@IORING_OP_SYNC_FILE_RANGE, 0x0) (async) syz_io_uring_submit(r4, r5, &(0x7f0000000140)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) (async) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_CLOSE, 0x0) (async) syz_io_uring_submit(r4, r6, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE, 0x0) (async) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x1010, r2, 0x10000000) (async) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r2, 0xc0189373, &(0x7f0000000100)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="21002316000000c7562fc92562757300"]) (async) io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) (async) syz_io_uring_submit(r4, r7, &(0x7f0000000080)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x5, 0x0, r8, &(0x7f0000000040)={0x6}, r2, 0x1, 0x0, 0x0, {0x0, r9}}, 0x4) (async) sendfile(r0, r1, 0x0, 0x201000) (async) 14:48:18 executing program 5: clone(0x80910b00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) set_mempolicy(0x3, &(0x7f0000000040)=0xffffffff80000001, 0x400) gettid() r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, &(0x7f0000000080)=ANY=[@ANYBLOB="7549f8187a2a6e40594b4473692aef0dda6d1a46f2019ed7e86b1d711c76877056283bedab9579d2125c7cad3b1f28c963b3a626ef87b075574ff5612ccc80d8e14883ad2a8e6516a15c410ce005b2e841ebacd55a1365c685244ec3b66b003e7ec96ed005906d578130183c37"]) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x2, 0x3, 0x2d8, 0x190, 0x190, 0x95ffffff, 0x77, 0x93ffffff, 0x240, 0x240, 0x221, 0x240, 0x240, 0x3, 0x0, {[{{@uncond, 0x0, 0x130, 0x190, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "bdc74c01369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa6ecab6b1d2cc05e3182f64694d7d05fb8b8c8f56627a54f905d564eeeb8334f650ca0f3c44f7fda4d20a55050342ea85ecc8838e7088de33582f36a0a375bb7008adc297a5ece1bb2df53d17bef26bb6f800", 0x7f, 0x2}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0x84010000]}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'veth0_to_batadv\x00', 'ip6gretap0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x338) [ 2827.479150][T23319] FAULT_INJECTION: forcing a failure. [ 2827.479150][T23319] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2827.492468][T23319] CPU: 0 PID: 23319 Comm: syz-executor.4 Tainted: G W 5.16.0-rc6-syzkaller #0 [ 2827.502625][T23319] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2827.512684][T23319] Call Trace: [ 2827.515953][T23319] [ 2827.518946][T23319] dump_stack_lvl+0xd6/0x122 [ 2827.523540][T23319] dump_stack+0x11/0x1b 14:48:18 executing program 5: clone(0x80910b00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) set_mempolicy(0x3, &(0x7f0000000040)=0xffffffff80000001, 0x400) gettid() r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, &(0x7f0000000080)=ANY=[@ANYBLOB="7549f8187a2a6e40594b4473692aef0dda6d1a46f2019ed7e86b1d711c76877056283bedab9579d2125c7cad3b1f28c963b3a626ef87b075574ff5612ccc80d8e14883ad2a8e6516a15c410ce005b2e841ebacd55a1365c685244ec3b66b003e7ec96ed005906d578130183c37"]) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x2, 0x3, 0x2d8, 0x190, 0x190, 0x95ffffff, 0x77, 0x93ffffff, 0x240, 0x240, 0x221, 0x240, 0x240, 0x3, 0x0, {[{{@uncond, 0x0, 0x130, 0x190, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "bdc74c01369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa6ecab6b1d2cc05e3182f64694d7d05fb8b8c8f56627a54f905d564eeeb8334f650ca0f3c44f7fda4d20a55050342ea85ecc8838e7088de33582f36a0a375bb7008adc297a5ece1bb2df53d17bef26bb6f800", 0x7f, 0x2}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0x85010000]}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'veth0_to_batadv\x00', 'ip6gretap0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x338) [ 2827.527700][T23319] should_fail+0x23c/0x250 [ 2827.532125][T23319] __alloc_pages+0x102/0x330 [ 2827.536797][T23319] alloc_pages+0x382/0x3d0 [ 2827.541269][T23319] folio_alloc+0x1a/0x20 [ 2827.545530][T23319] filemap_alloc_folio+0x53/0xf0 [ 2827.550564][T23319] page_cache_ra_unbounded+0x1c0/0x430 [ 2827.556024][T23319] ondemand_readahead+0x4f8/0x700 [ 2827.561119][T23319] ? filemap_get_read_batch+0x3e2/0x410 [ 2827.566749][T23319] page_cache_async_ra+0xed/0x120 [ 2827.571779][T23319] filemap_read+0x500/0x16d0 14:48:18 executing program 5: clone(0x80910b00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) set_mempolicy(0x3, &(0x7f0000000040)=0xffffffff80000001, 0x400) gettid() r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, &(0x7f0000000080)=ANY=[@ANYBLOB="7549f8187a2a6e40594b4473692aef0dda6d1a46f2019ed7e86b1d711c76877056283bedab9579d2125c7cad3b1f28c963b3a626ef87b075574ff5612ccc80d8e14883ad2a8e6516a15c410ce005b2e841ebacd55a1365c685244ec3b66b003e7ec96ed005906d578130183c37"]) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x2, 0x3, 0x2d8, 0x190, 0x190, 0x95ffffff, 0x77, 0x93ffffff, 0x240, 0x240, 0x221, 0x240, 0x240, 0x3, 0x0, {[{{@uncond, 0x0, 0x130, 0x190, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "bdc74c01369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa6ecab6b1d2cc05e3182f64694d7d05fb8b8c8f56627a54f905d564eeeb8334f650ca0f3c44f7fda4d20a55050342ea85ecc8838e7088de33582f36a0a375bb7008adc297a5ece1bb2df53d17bef26bb6f800", 0x7f, 0x2}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0x85ffffff]}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'veth0_to_batadv\x00', 'ip6gretap0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x338) [ 2827.576381][T23319] generic_file_read_iter+0x72/0x2a0 [ 2827.581672][T23319] ? iov_iter_pipe+0x100/0x150 [ 2827.586440][T23319] ? ext4_file_read_iter+0x7a/0x1f0 [ 2827.591641][T23319] generic_file_splice_read+0x24f/0x330 [ 2827.597365][T23319] ? splice_shrink_spd+0x60/0x60 [ 2827.602309][T23319] splice_direct_to_actor+0x2aa/0x650 [ 2827.607693][T23319] ? do_splice_direct+0x190/0x190 [ 2827.612793][T23319] do_splice_direct+0x106/0x190 [ 2827.617646][T23319] do_sendfile+0x675/0xc40 [ 2827.622148][T23319] __x64_sys_sendfile64+0x102/0x140 14:48:18 executing program 5: clone(0x80910b00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) set_mempolicy(0x3, &(0x7f0000000040)=0xffffffff80000001, 0x400) gettid() r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, &(0x7f0000000080)=ANY=[@ANYBLOB="7549f8187a2a6e40594b4473692aef0dda6d1a46f2019ed7e86b1d711c76877056283bedab9579d2125c7cad3b1f28c963b3a626ef87b075574ff5612ccc80d8e14883ad2a8e6516a15c410ce005b2e841ebacd55a1365c685244ec3b66b003e7ec96ed005906d578130183c37"]) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x2, 0x3, 0x2d8, 0x190, 0x190, 0x95ffffff, 0x77, 0x93ffffff, 0x240, 0x240, 0x221, 0x240, 0x240, 0x3, 0x0, {[{{@uncond, 0x0, 0x130, 0x190, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "bdc74c01369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa6ecab6b1d2cc05e3182f64694d7d05fb8b8c8f56627a54f905d564eeeb8334f650ca0f3c44f7fda4d20a55050342ea85ecc8838e7088de33582f36a0a375bb7008adc297a5ece1bb2df53d17bef26bb6f800", 0x7f, 0x2}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0x86000000]}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'veth0_to_batadv\x00', 'ip6gretap0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x338) [ 2827.627408][T23319] do_syscall_64+0x44/0xd0 [ 2827.631843][T23319] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2827.637797][T23319] RIP: 0033:0x7f2d29acae99 [ 2827.642244][T23319] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2827.661939][T23319] RSP: 002b:00007f2d28c41168 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 2827.670366][T23319] RAX: ffffffffffffffda RBX: 00007f2d29bddf60 RCX: 00007f2d29acae99 [ 2827.678338][T23319] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 2827.686376][T23319] RBP: 00007f2d28c411d0 R08: 0000000000000000 R09: 0000000000000000 [ 2827.694357][T23319] R10: 0000000000201000 R11: 0000000000000246 R12: 0000000000000002 [ 2827.702322][T23319] R13: 00007ffcc1d93fdf R14: 00007f2d28c41300 R15: 0000000000022000 [ 2827.710298][T23319] 14:48:18 executing program 4: r0 = socket$inet6(0xa, 0x400000000001, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) ftruncate(r1, 0x2007fff) close(r0) open(&(0x7f00000002c0)='./bus\x00', 0x14d842, 0x0) sendfile(r0, r1, 0x0, 0x201000) (fail_nth: 63) [ 2827.897941][T23414] FAULT_INJECTION: forcing a failure. [ 2827.897941][T23414] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2827.911357][T23414] CPU: 0 PID: 23414 Comm: syz-executor.4 Tainted: G W 5.16.0-rc6-syzkaller #0 [ 2827.921629][T23414] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2827.931810][T23414] Call Trace: [ 2827.935094][T23414] [ 2827.938022][T23414] dump_stack_lvl+0xd6/0x122 [ 2827.942611][T23414] dump_stack+0x11/0x1b [ 2827.946764][T23414] should_fail+0x23c/0x250 [ 2827.951592][T23414] __alloc_pages+0x102/0x330 [ 2827.956185][T23414] alloc_pages+0x382/0x3d0 [ 2827.960599][T23414] folio_alloc+0x1a/0x20 [ 2827.964906][T23414] filemap_alloc_folio+0x53/0xf0 [ 2827.969841][T23414] page_cache_ra_unbounded+0x1c0/0x430 [ 2827.975299][T23414] ondemand_readahead+0x4f8/0x700 [ 2827.980397][T23414] ? filemap_get_read_batch+0x3e2/0x410 [ 2827.986015][T23414] page_cache_async_ra+0xed/0x120 [ 2827.991059][T23414] filemap_read+0x500/0x16d0 [ 2827.995653][T23414] ? debug_smp_processor_id+0x18/0x20 [ 2828.001029][T23414] generic_file_read_iter+0x72/0x2a0 [ 2828.006363][T23414] ? iov_iter_pipe+0x100/0x150 [ 2828.011223][T23414] ? ext4_file_read_iter+0x7a/0x1f0 [ 2828.016414][T23414] generic_file_splice_read+0x24f/0x330 [ 2828.022019][T23414] ? splice_shrink_spd+0x60/0x60 [ 2828.027024][T23414] splice_direct_to_actor+0x2aa/0x650 [ 2828.032401][T23414] ? do_splice_direct+0x190/0x190 [ 2828.037511][T23414] do_splice_direct+0x106/0x190 [ 2828.042371][T23414] do_sendfile+0x675/0xc40 [ 2828.046783][T23414] __x64_sys_sendfile64+0x102/0x140 [ 2828.052090][T23414] do_syscall_64+0x44/0xd0 [ 2828.056585][T23414] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2828.062544][T23414] RIP: 0033:0x7f2d29acae99 [ 2828.067012][T23414] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2828.086645][T23414] RSP: 002b:00007f2d28c41168 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 2828.095053][T23414] RAX: ffffffffffffffda RBX: 00007f2d29bddf60 RCX: 00007f2d29acae99 [ 2828.103022][T23414] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 2828.110989][T23414] RBP: 00007f2d28c411d0 R08: 0000000000000000 R09: 0000000000000000 [ 2828.118951][T23414] R10: 0000000000201000 R11: 0000000000000246 R12: 0000000000000002 [ 2828.126970][T23414] R13: 00007ffcc1d93fdf R14: 00007f2d28c41300 R15: 0000000000022000 [ 2828.135003][T23414] 14:48:18 executing program 0: openat(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/self/exe\x00', 0x0, 0x0) (async) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000040), 0x200000, 0x0) (async) socket$inet6_udp(0xa, 0x2, 0x0) mmap(&(0x7f0000507000/0x2000)=nil, 0x2000, 0x180000f, 0x1010, r0, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x2) write$evdev(r1, &(0x7f000004d000)=[{}], 0xfffffe82) 14:48:18 executing program 3: r0 = syz_io_uring_setup(0x5d66, &(0x7f00000002c0), &(0x7f0000ee7000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380), &(0x7f00000001c0)) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) io_uring_enter(r0, 0x7443, 0x0, 0x0, 0x0, 0x0) r1 = syz_io_uring_setup(0x2de5, &(0x7f0000000000)={0x0, 0x0, 0x1, 0xfffffffd, 0x1f3, 0x0, r0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000fe8000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000340)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0xb2, 0x0, 0x0, 0x0, 0x7401) r4 = signalfd(r0, &(0x7f00000000c0)={[0x4]}, 0x8) r5 = signalfd4(r0, &(0x7f0000000280)={[0xcd5]}, 0x8, 0x80000) ioctl$TIOCVHANGUP(r5, 0x5437, 0x0) syz_io_uring_setup(0xfa6, &(0x7f0000000200)={0x0, 0xc4ca, 0x8, 0x0, 0x1d, 0x0, r4}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000180)) syz_io_uring_setup(0x5d66, &(0x7f00000002c0), &(0x7f0000ee7000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380), &(0x7f00000001c0)) (async) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) (async) io_uring_enter(r0, 0x7443, 0x0, 0x0, 0x0, 0x0) (async) syz_io_uring_setup(0x2de5, &(0x7f0000000000)={0x0, 0x0, 0x1, 0xfffffffd, 0x1f3, 0x0, r0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000fe8000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000340)) (async) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) (async) io_uring_enter(r1, 0xb2, 0x0, 0x0, 0x0, 0x7401) (async) signalfd(r0, &(0x7f00000000c0)={[0x4]}, 0x8) (async) signalfd4(r0, &(0x7f0000000280)={[0xcd5]}, 0x8, 0x80000) (async) ioctl$TIOCVHANGUP(r5, 0x5437, 0x0) (async) syz_io_uring_setup(0xfa6, &(0x7f0000000200)={0x0, 0xc4ca, 0x8, 0x0, 0x1d, 0x0, r4}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000180)) (async) 14:48:18 executing program 1: r0 = socket$inet6(0xa, 0x400000000001, 0x0) (async) r1 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) (async) ftruncate(0xffffffffffffffff, 0x3) ftruncate(r1, 0x2007fff) close(r0) (async) r2 = open(&(0x7f00000002c0)='./bus\x00', 0x14d842, 0x0) (async) r3 = syz_io_uring_setup(0x5d66, &(0x7f00000002c0), &(0x7f0000ee7000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r4, r5, &(0x7f00000000c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f00000003c0)}, 0x1010001) (async) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r3, 0x10000000) syz_io_uring_submit(r4, r6, &(0x7f0000000340)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r4, r6, &(0x7f0000000000)=@IORING_OP_SYNC_FILE_RANGE, 0x0) (async) syz_io_uring_submit(r4, r6, &(0x7f0000004040)=@IORING_OP_SYNC_FILE_RANGE, 0x0) (async) syz_io_uring_submit(r4, r5, &(0x7f0000000140)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_CLOSE, 0x0) (async) syz_io_uring_submit(r4, r6, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE, 0x0) (async) r7 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x1010, r2, 0x10000000) (async) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r2, 0xc0189373, &(0x7f0000000100)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="21002316000000c7562fc92562757300"]) (async) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) syz_io_uring_submit(r4, r7, &(0x7f0000000080)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x5, 0x0, r8, &(0x7f0000000040)={0x6}, r2, 0x1, 0x0, 0x0, {0x0, r9}}, 0x4) sendfile(r0, r1, 0x0, 0x201000) 14:48:18 executing program 2: clone(0x80910b00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) set_mempolicy(0x3, &(0x7f0000000040), 0x0) gettid() r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x2, 0x3, 0x2d8, 0x190, 0x190, 0x95ffffff, 0x77, 0x93ffffff, 0x240, 0x240, 0x221, 0x240, 0x240, 0x3, 0x0, {[{{@uncond, 0x0, 0x130, 0x190, 0x0, {0x0, 0x17}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "bdc74c01369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa6ecab6b1d2cc05e3182f64694d7d05fb8b8c8f56627a54f905d564eeeb8334f650ca0f3c44f7fda4d20a55050342ea85ecc8838e7088de33582f36a0a375bb7008adc297a5ece1bb2df53d17bef26bb6f800", 0x7f}}]}, @common=@SET={0x60}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'veth0_to_batadv\x00', 'ip6gretap0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x338) 14:48:18 executing program 5: clone(0x80910b00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) set_mempolicy(0x3, &(0x7f0000000040)=0xffffffff80000001, 0x400) gettid() r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, &(0x7f0000000080)=ANY=[@ANYBLOB="7549f8187a2a6e40594b4473692aef0dda6d1a46f2019ed7e86b1d711c76877056283bedab9579d2125c7cad3b1f28c963b3a626ef87b075574ff5612ccc80d8e14883ad2a8e6516a15c410ce005b2e841ebacd55a1365c685244ec3b66b003e7ec96ed005906d578130183c37"]) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x2, 0x3, 0x2d8, 0x190, 0x190, 0x95ffffff, 0x77, 0x93ffffff, 0x240, 0x240, 0x221, 0x240, 0x240, 0x3, 0x0, {[{{@uncond, 0x0, 0x130, 0x190, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "bdc74c01369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa6ecab6b1d2cc05e3182f64694d7d05fb8b8c8f56627a54f905d564eeeb8334f650ca0f3c44f7fda4d20a55050342ea85ecc8838e7088de33582f36a0a375bb7008adc297a5ece1bb2df53d17bef26bb6f800", 0x7f, 0x2}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0x86ffffff]}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'veth0_to_batadv\x00', 'ip6gretap0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x338) 14:48:18 executing program 4: r0 = socket$inet6(0xa, 0x400000000001, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) ftruncate(r1, 0x2007fff) close(r0) open(&(0x7f00000002c0)='./bus\x00', 0x14d842, 0x0) sendfile(r0, r1, 0x0, 0x201000) (fail_nth: 64) 14:48:18 executing program 5: clone(0x80910b00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) set_mempolicy(0x3, &(0x7f0000000040)=0xffffffff80000001, 0x400) gettid() r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, &(0x7f0000000080)=ANY=[@ANYBLOB="7549f8187a2a6e40594b4473692aef0dda6d1a46f2019ed7e86b1d711c76877056283bedab9579d2125c7cad3b1f28c963b3a626ef87b075574ff5612ccc80d8e14883ad2a8e6516a15c410ce005b2e841ebacd55a1365c685244ec3b66b003e7ec96ed005906d578130183c37"]) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x2, 0x3, 0x2d8, 0x190, 0x190, 0x95ffffff, 0x77, 0x93ffffff, 0x240, 0x240, 0x221, 0x240, 0x240, 0x3, 0x0, {[{{@uncond, 0x0, 0x130, 0x190, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "bdc74c01369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa6ecab6b1d2cc05e3182f64694d7d05fb8b8c8f56627a54f905d564eeeb8334f650ca0f3c44f7fda4d20a55050342ea85ecc8838e7088de33582f36a0a375bb7008adc297a5ece1bb2df53d17bef26bb6f800", 0x7f, 0x2}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0x88ffffff]}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'veth0_to_batadv\x00', 'ip6gretap0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x338) 14:48:19 executing program 2: clone(0x80910b00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) set_mempolicy(0x3, &(0x7f0000000040), 0x0) gettid() r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x2, 0x3, 0x2d8, 0x190, 0x190, 0x95ffffff, 0x77, 0x93ffffff, 0x240, 0x240, 0x221, 0x240, 0x240, 0x3, 0x0, {[{{@uncond, 0x0, 0x130, 0x190, 0x0, {0x0, 0x18}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "bdc74c01369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa6ecab6b1d2cc05e3182f64694d7d05fb8b8c8f56627a54f905d564eeeb8334f650ca0f3c44f7fda4d20a55050342ea85ecc8838e7088de33582f36a0a375bb7008adc297a5ece1bb2df53d17bef26bb6f800", 0x7f}}]}, @common=@SET={0x60}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'veth0_to_batadv\x00', 'ip6gretap0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x338) [ 2828.475955][T23417] FAULT_INJECTION: forcing a failure. [ 2828.475955][T23417] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2828.489248][T23417] CPU: 0 PID: 23417 Comm: syz-executor.4 Tainted: G W 5.16.0-rc6-syzkaller #0 [ 2828.499404][T23417] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2828.509455][T23417] Call Trace: [ 2828.512732][T23417] [ 2828.515660][T23417] dump_stack_lvl+0xd6/0x122 [ 2828.520257][T23417] dump_stack+0x11/0x1b 14:48:19 executing program 2: clone(0x80910b00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) set_mempolicy(0x3, &(0x7f0000000040), 0x0) gettid() r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x2, 0x3, 0x2d8, 0x190, 0x190, 0x95ffffff, 0x77, 0x93ffffff, 0x240, 0x240, 0x221, 0x240, 0x240, 0x3, 0x0, {[{{@uncond, 0x0, 0x130, 0x190, 0x0, {0x0, 0x22}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "bdc74c01369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa6ecab6b1d2cc05e3182f64694d7d05fb8b8c8f56627a54f905d564eeeb8334f650ca0f3c44f7fda4d20a55050342ea85ecc8838e7088de33582f36a0a375bb7008adc297a5ece1bb2df53d17bef26bb6f800", 0x7f}}]}, @common=@SET={0x60}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'veth0_to_batadv\x00', 'ip6gretap0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x338) 14:48:19 executing program 3: r0 = syz_io_uring_setup(0x2de5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000fe8000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x0) r3 = syz_io_uring_setup(0x5d66, &(0x7f00000002c0), &(0x7f0000ee7000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380), &(0x7f00000001c0)) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r3, 0x10000000) io_uring_enter(r3, 0x7443, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r3, 0x3657, 0xe6d9, 0x3, &(0x7f0000000080)={[0x5]}, 0x8) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0xb2, 0x0, 0x0, 0x0, 0x7401) [ 2828.524415][T23417] should_fail+0x23c/0x250 [ 2828.528910][T23417] __alloc_pages+0x102/0x330 [ 2828.533597][T23417] alloc_pages+0x382/0x3d0 [ 2828.538018][T23417] folio_alloc+0x1a/0x20 [ 2828.542329][T23417] filemap_alloc_folio+0x53/0xf0 [ 2828.547323][T23417] page_cache_ra_unbounded+0x1c0/0x430 [ 2828.552836][T23417] ondemand_readahead+0x4f8/0x700 [ 2828.557897][T23417] ? filemap_get_read_batch+0x3e2/0x410 [ 2828.563515][T23417] page_cache_async_ra+0xed/0x120 [ 2828.568569][T23417] filemap_read+0x500/0x16d0 14:48:19 executing program 2: clone(0x80910b00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) set_mempolicy(0x3, &(0x7f0000000040), 0x0) gettid() r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x2, 0x3, 0x2d8, 0x190, 0x190, 0x95ffffff, 0x77, 0x93ffffff, 0x240, 0x240, 0x221, 0x240, 0x240, 0x3, 0x0, {[{{@uncond, 0x0, 0x130, 0x190, 0x0, {0x0, 0x25}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "bdc74c01369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa6ecab6b1d2cc05e3182f64694d7d05fb8b8c8f56627a54f905d564eeeb8334f650ca0f3c44f7fda4d20a55050342ea85ecc8838e7088de33582f36a0a375bb7008adc297a5ece1bb2df53d17bef26bb6f800", 0x7f}}]}, @common=@SET={0x60}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'veth0_to_batadv\x00', 'ip6gretap0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x338) [ 2828.573170][T23417] generic_file_read_iter+0x72/0x2a0 [ 2828.578461][T23417] ? iov_iter_pipe+0x100/0x150 [ 2828.583250][T23417] ? ext4_file_read_iter+0x7a/0x1f0 [ 2828.588451][T23417] generic_file_splice_read+0x24f/0x330 [ 2828.594068][T23417] ? splice_shrink_spd+0x60/0x60 [ 2828.599007][T23417] splice_direct_to_actor+0x2aa/0x650 [ 2828.604438][T23417] ? do_splice_direct+0x190/0x190 [ 2828.609468][T23417] do_splice_direct+0x106/0x190 [ 2828.614321][T23417] do_sendfile+0x675/0xc40 [ 2828.618824][T23417] __x64_sys_sendfile64+0x102/0x140 14:48:19 executing program 3: r0 = syz_io_uring_setup(0x2de5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000fe8000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x0) r3 = syz_io_uring_setup(0x5d66, &(0x7f00000002c0), &(0x7f0000ee7000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380), &(0x7f00000001c0)) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r3, 0x10000000) io_uring_enter(r3, 0x7443, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r3, 0x3657, 0xe6d9, 0x3, &(0x7f0000000080)={[0x5]}, 0x8) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0xb2, 0x0, 0x0, 0x0, 0x7401) syz_io_uring_setup(0x2de5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000fe8000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000140)) (async) syz_io_uring_setup(0x5d66, &(0x7f00000002c0), &(0x7f0000ee7000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380), &(0x7f00000001c0)) (async) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r3, 0x10000000) (async) io_uring_enter(r3, 0x7443, 0x0, 0x0, 0x0, 0x0) (async) io_uring_enter(r3, 0x3657, 0xe6d9, 0x3, &(0x7f0000000080)={[0x5]}, 0x8) (async) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) (async) io_uring_enter(r0, 0xb2, 0x0, 0x0, 0x0, 0x7401) (async) [ 2828.624026][T23417] do_syscall_64+0x44/0xd0 [ 2828.628448][T23417] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2828.634398][T23417] RIP: 0033:0x7f2d29acae99 [ 2828.638809][T23417] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2828.658482][T23417] RSP: 002b:00007f2d28c41168 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 2828.666897][T23417] RAX: ffffffffffffffda RBX: 00007f2d29bddf60 RCX: 00007f2d29acae99 [ 2828.676350][T23417] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 2828.684347][T23417] RBP: 00007f2d28c411d0 R08: 0000000000000000 R09: 0000000000000000 [ 2828.692317][T23417] R10: 0000000000201000 R11: 0000000000000246 R12: 0000000000000002 [ 2828.700304][T23417] R13: 00007ffcc1d93fdf R14: 00007f2d28c41300 R15: 0000000000022000 [ 2828.708276][T23417] 14:48:19 executing program 0: openat(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/self/exe\x00', 0x0, 0x0) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000040), 0x200000, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) mmap(&(0x7f0000507000/0x2000)=nil, 0x2000, 0x180000f, 0x1010, r0, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x2) write$evdev(r1, &(0x7f000004d000)=[{}], 0xfffffe82) openat(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/self/exe\x00', 0x0, 0x0) (async) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000040), 0x200000, 0x0) (async) socket$inet6_udp(0xa, 0x2, 0x0) (async) mmap(&(0x7f0000507000/0x2000)=nil, 0x2000, 0x180000f, 0x1010, r0, 0x0) (async) syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x2) (async) write$evdev(r1, &(0x7f000004d000)=[{}], 0xfffffe82) (async) 14:48:19 executing program 2: clone(0x80910b00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) set_mempolicy(0x3, &(0x7f0000000040), 0x0) gettid() r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x2, 0x3, 0x2d8, 0x190, 0x190, 0x95ffffff, 0x77, 0x93ffffff, 0x240, 0x240, 0x221, 0x240, 0x240, 0x3, 0x0, {[{{@uncond, 0x0, 0x130, 0x190, 0x0, {0x0, 0x29}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "bdc74c01369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa6ecab6b1d2cc05e3182f64694d7d05fb8b8c8f56627a54f905d564eeeb8334f650ca0f3c44f7fda4d20a55050342ea85ecc8838e7088de33582f36a0a375bb7008adc297a5ece1bb2df53d17bef26bb6f800", 0x7f}}]}, @common=@SET={0x60}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'veth0_to_batadv\x00', 'ip6gretap0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x338) 14:48:19 executing program 1: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x204f80, 0x176) ftruncate(r1, 0x2007fff) close(r0) open(&(0x7f00000002c0)='./bus\x00', 0x14d842, 0x0) sendfile(r0, r1, 0x0, 0x201000) 14:48:19 executing program 5: clone(0x80910b00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) set_mempolicy(0x3, &(0x7f0000000040)=0xffffffff80000001, 0x400) gettid() r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, &(0x7f0000000080)=ANY=[@ANYBLOB="7549f8187a2a6e40594b4473692aef0dda6d1a46f2019ed7e86b1d711c76877056283bedab9579d2125c7cad3b1f28c963b3a626ef87b075574ff5612ccc80d8e14883ad2a8e6516a15c410ce005b2e841ebacd55a1365c685244ec3b66b003e7ec96ed005906d578130183c37"]) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x2, 0x3, 0x2d8, 0x190, 0x190, 0x95ffffff, 0x77, 0x93ffffff, 0x240, 0x240, 0x221, 0x240, 0x240, 0x3, 0x0, {[{{@uncond, 0x0, 0x130, 0x190, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "bdc74c01369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa6ecab6b1d2cc05e3182f64694d7d05fb8b8c8f56627a54f905d564eeeb8334f650ca0f3c44f7fda4d20a55050342ea85ecc8838e7088de33582f36a0a375bb7008adc297a5ece1bb2df53d17bef26bb6f800", 0x7f, 0x2}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0x89000000]}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'veth0_to_batadv\x00', 'ip6gretap0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x338) 14:48:19 executing program 3: r0 = syz_io_uring_setup(0x2de5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000fe8000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x0) (async, rerun: 64) r3 = syz_io_uring_setup(0x5d66, &(0x7f00000002c0), &(0x7f0000ee7000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380), &(0x7f00000001c0)) (rerun: 64) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r3, 0x10000000) (async) io_uring_enter(r3, 0x7443, 0x0, 0x0, 0x0, 0x0) (async) io_uring_enter(r3, 0x3657, 0xe6d9, 0x3, &(0x7f0000000080)={[0x5]}, 0x8) (async) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0xb2, 0x0, 0x0, 0x0, 0x7401) 14:48:19 executing program 4: r0 = socket$inet6(0xa, 0x400000000001, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) ftruncate(r1, 0x2007fff) close(r0) open(&(0x7f00000002c0)='./bus\x00', 0x14d842, 0x0) sendfile(r0, r1, 0x0, 0x201000) (fail_nth: 65) 14:48:19 executing program 2: clone(0x80910b00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) set_mempolicy(0x3, &(0x7f0000000040), 0x0) gettid() r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x2, 0x3, 0x2d8, 0x190, 0x190, 0x95ffffff, 0x77, 0x93ffffff, 0x240, 0x240, 0x221, 0x240, 0x240, 0x3, 0x0, {[{{@uncond, 0x0, 0x130, 0x190, 0x0, {0x0, 0x2d}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "bdc74c01369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa6ecab6b1d2cc05e3182f64694d7d05fb8b8c8f56627a54f905d564eeeb8334f650ca0f3c44f7fda4d20a55050342ea85ecc8838e7088de33582f36a0a375bb7008adc297a5ece1bb2df53d17bef26bb6f800", 0x7f}}]}, @common=@SET={0x60}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'veth0_to_batadv\x00', 'ip6gretap0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x338) [ 2829.411077][T23679] FAULT_INJECTION: forcing a failure. [ 2829.411077][T23679] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2829.424402][T23679] CPU: 0 PID: 23679 Comm: syz-executor.4 Tainted: G W 5.16.0-rc6-syzkaller #0 [ 2829.434695][T23679] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2829.444807][T23679] Call Trace: [ 2829.448083][T23679] [ 2829.451024][T23679] dump_stack_lvl+0xd6/0x122 [ 2829.455624][T23679] dump_stack+0x11/0x1b [ 2829.459862][T23679] should_fail+0x23c/0x250 [ 2829.464288][T23679] __alloc_pages+0x102/0x330 [ 2829.468905][T23679] alloc_pages+0x382/0x3d0 [ 2829.473324][T23679] folio_alloc+0x1a/0x20 [ 2829.477581][T23679] filemap_alloc_folio+0x53/0xf0 [ 2829.482602][T23679] page_cache_ra_unbounded+0x1c0/0x430 [ 2829.488125][T23679] ondemand_readahead+0x4f8/0x700 [ 2829.493157][T23679] ? filemap_get_read_batch+0x3e2/0x410 [ 2829.498742][T23679] page_cache_async_ra+0xed/0x120 [ 2829.503815][T23679] filemap_read+0x500/0x16d0 14:48:20 executing program 3: r0 = syz_io_uring_setup(0x2de5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000fe8000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x717f, &(0x7f0000000200)={0x0, 0xce90, 0x8, 0x3, 0x1f, 0x0, r0}, &(0x7f0000fe8000/0x1000)=nil, &(0x7f0000003000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000280)=@IORING_OP_ASYNC_CANCEL={0xe, 0x3, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x5) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY_ALL_USERS(0xffffffffffffffff, 0xc0406619, &(0x7f0000000080)={@id={0x2, 0x0, @a}}) io_uring_enter(r0, 0xb2, 0x0, 0x0, 0x0, 0x7401) [ 2829.508445][T23679] generic_file_read_iter+0x72/0x2a0 [ 2829.513887][T23679] ? iov_iter_pipe+0x100/0x150 [ 2829.518691][T23679] ? ext4_file_read_iter+0x7a/0x1f0 [ 2829.523928][T23679] generic_file_splice_read+0x24f/0x330 [ 2829.529485][T23679] ? splice_shrink_spd+0x60/0x60 [ 2829.534524][T23679] splice_direct_to_actor+0x2aa/0x650 [ 2829.539900][T23679] ? do_splice_direct+0x190/0x190 [ 2829.544987][T23679] do_splice_direct+0x106/0x190 [ 2829.549866][T23679] do_sendfile+0x675/0xc40 [ 2829.554281][T23679] __x64_sys_sendfile64+0x102/0x140 [ 2829.559525][T23679] do_syscall_64+0x44/0xd0 [ 2829.563994][T23679] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2829.569886][T23679] RIP: 0033:0x7f2d29acae99 [ 2829.574289][T23679] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2829.594007][T23679] RSP: 002b:00007f2d28c41168 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 2829.602416][T23679] RAX: ffffffffffffffda RBX: 00007f2d29bddf60 RCX: 00007f2d29acae99 14:48:20 executing program 5: clone(0x80910b00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) set_mempolicy(0x3, &(0x7f0000000040)=0xffffffff80000001, 0x400) gettid() r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, &(0x7f0000000080)=ANY=[@ANYBLOB="7549f8187a2a6e40594b4473692aef0dda6d1a46f2019ed7e86b1d711c76877056283bedab9579d2125c7cad3b1f28c963b3a626ef87b075574ff5612ccc80d8e14883ad2a8e6516a15c410ce005b2e841ebacd55a1365c685244ec3b66b003e7ec96ed005906d578130183c37"]) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x2, 0x3, 0x2d8, 0x190, 0x190, 0x95ffffff, 0x77, 0x93ffffff, 0x240, 0x240, 0x221, 0x240, 0x240, 0x3, 0x0, {[{{@uncond, 0x0, 0x130, 0x190, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "bdc74c01369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa6ecab6b1d2cc05e3182f64694d7d05fb8b8c8f56627a54f905d564eeeb8334f650ca0f3c44f7fda4d20a55050342ea85ecc8838e7088de33582f36a0a375bb7008adc297a5ece1bb2df53d17bef26bb6f800", 0x7f, 0x2}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0x8a000000]}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'veth0_to_batadv\x00', 'ip6gretap0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x338) 14:48:20 executing program 2: clone(0x80910b00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) set_mempolicy(0x3, &(0x7f0000000040), 0x0) gettid() r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x2, 0x3, 0x2d8, 0x190, 0x190, 0x95ffffff, 0x77, 0x93ffffff, 0x240, 0x240, 0x221, 0x240, 0x240, 0x3, 0x0, {[{{@uncond, 0x0, 0x130, 0x190, 0x0, {0x0, 0x2f}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "bdc74c01369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa6ecab6b1d2cc05e3182f64694d7d05fb8b8c8f56627a54f905d564eeeb8334f650ca0f3c44f7fda4d20a55050342ea85ecc8838e7088de33582f36a0a375bb7008adc297a5ece1bb2df53d17bef26bb6f800", 0x7f}}]}, @common=@SET={0x60}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'veth0_to_batadv\x00', 'ip6gretap0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x338) [ 2829.610389][T23679] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 2829.618510][T23679] RBP: 00007f2d28c411d0 R08: 0000000000000000 R09: 0000000000000000 [ 2829.626566][T23679] R10: 0000000000201000 R11: 0000000000000246 R12: 0000000000000002 [ 2829.634531][T23679] R13: 00007ffcc1d93fdf R14: 00007f2d28c41300 R15: 0000000000022000 [ 2829.642594][T23679] 14:48:20 executing program 1: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x204f80, 0x176) ftruncate(r1, 0x2007fff) close(r0) open(&(0x7f00000002c0)='./bus\x00', 0x14d842, 0x0) sendfile(r0, r1, 0x0, 0x201000) socket$inet6(0xa, 0x400000000001, 0x0) (async) open(&(0x7f0000000000)='./bus\x00', 0x204f80, 0x176) (async) ftruncate(r1, 0x2007fff) (async) close(r0) (async) open(&(0x7f00000002c0)='./bus\x00', 0x14d842, 0x0) (async) sendfile(r0, r1, 0x0, 0x201000) (async) 14:48:20 executing program 2: clone(0x80910b00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) set_mempolicy(0x3, &(0x7f0000000040), 0x0) gettid() r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x2, 0x3, 0x2d8, 0x190, 0x190, 0x95ffffff, 0x77, 0x93ffffff, 0x240, 0x240, 0x221, 0x240, 0x240, 0x3, 0x0, {[{{@uncond, 0x0, 0x130, 0x190, 0x0, {0x0, 0x33}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "bdc74c01369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa6ecab6b1d2cc05e3182f64694d7d05fb8b8c8f56627a54f905d564eeeb8334f650ca0f3c44f7fda4d20a55050342ea85ecc8838e7088de33582f36a0a375bb7008adc297a5ece1bb2df53d17bef26bb6f800", 0x7f}}]}, @common=@SET={0x60}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'veth0_to_batadv\x00', 'ip6gretap0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x338) 14:48:20 executing program 1: r0 = socket$inet6(0xa, 0x400000000001, 0x0) (async) r1 = open(&(0x7f0000000000)='./bus\x00', 0x204f80, 0x176) ftruncate(r1, 0x2007fff) (async, rerun: 32) close(r0) (async, rerun: 32) open(&(0x7f00000002c0)='./bus\x00', 0x14d842, 0x0) (async) sendfile(r0, r1, 0x0, 0x201000) 14:48:20 executing program 3: r0 = syz_io_uring_setup(0x2de5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000fe8000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) (async) syz_io_uring_setup(0x717f, &(0x7f0000000200)={0x0, 0xce90, 0x8, 0x3, 0x1f, 0x0, r0}, &(0x7f0000fe8000/0x1000)=nil, &(0x7f0000003000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000280)=@IORING_OP_ASYNC_CANCEL={0xe, 0x3, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x5) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY_ALL_USERS(0xffffffffffffffff, 0xc0406619, &(0x7f0000000080)={@id={0x2, 0x0, @a}}) (async) io_uring_enter(r0, 0xb2, 0x0, 0x0, 0x0, 0x7401) 14:48:20 executing program 5: clone(0x80910b00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) set_mempolicy(0x3, &(0x7f0000000040)=0xffffffff80000001, 0x400) gettid() r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, &(0x7f0000000080)=ANY=[@ANYBLOB="7549f8187a2a6e40594b4473692aef0dda6d1a46f2019ed7e86b1d711c76877056283bedab9579d2125c7cad3b1f28c963b3a626ef87b075574ff5612ccc80d8e14883ad2a8e6516a15c410ce005b2e841ebacd55a1365c685244ec3b66b003e7ec96ed005906d578130183c37"]) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x2, 0x3, 0x2d8, 0x190, 0x190, 0x95ffffff, 0x77, 0x93ffffff, 0x240, 0x240, 0x221, 0x240, 0x240, 0x3, 0x0, {[{{@uncond, 0x0, 0x130, 0x190, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "bdc74c01369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa6ecab6b1d2cc05e3182f64694d7d05fb8b8c8f56627a54f905d564eeeb8334f650ca0f3c44f7fda4d20a55050342ea85ecc8838e7088de33582f36a0a375bb7008adc297a5ece1bb2df53d17bef26bb6f800", 0x7f, 0x2}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0x8a030000]}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'veth0_to_batadv\x00', 'ip6gretap0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x338) 14:48:20 executing program 2: clone(0x80910b00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) set_mempolicy(0x3, &(0x7f0000000040), 0x0) gettid() r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x2, 0x3, 0x2d8, 0x190, 0x190, 0x95ffffff, 0x77, 0x93ffffff, 0x240, 0x240, 0x221, 0x240, 0x240, 0x3, 0x0, {[{{@uncond, 0x0, 0x130, 0x190, 0x0, {0x0, 0x34}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "bdc74c01369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa6ecab6b1d2cc05e3182f64694d7d05fb8b8c8f56627a54f905d564eeeb8334f650ca0f3c44f7fda4d20a55050342ea85ecc8838e7088de33582f36a0a375bb7008adc297a5ece1bb2df53d17bef26bb6f800", 0x7f}}]}, @common=@SET={0x60}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'veth0_to_batadv\x00', 'ip6gretap0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x338) 14:48:20 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) r1 = socket$inet6(0xa, 0x3, 0x3a) pread64(r0, &(0x7f0000000200)=""/179, 0xb3, 0x8) setsockopt$inet6_int(r1, 0x29, 0xd1, &(0x7f0000000000)=0x4, 0x4) setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xc8, 0x0, 0x4) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r1, 0x29, 0xc9, 0x0, 0x0) sendfile(r0, r1, &(0x7f0000000100)=0x1e200000000000, 0x9) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r0) r2 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x2) syz_open_dev$evdev(&(0x7f0000000040), 0x9, 0x2000) write$evdev(r2, &(0x7f0000000080)=[{{}, 0x2}, {{}, 0x16, 0x1, 0x2}, {{0x77359400}, 0x3, 0x0, 0x2}], 0x48) 14:48:20 executing program 4: r0 = socket$inet6(0xa, 0x400000000001, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) ftruncate(r1, 0x2007fff) close(r0) open(&(0x7f00000002c0)='./bus\x00', 0x14d842, 0x0) sendfile(r0, r1, 0x0, 0x201000) (fail_nth: 66) [ 2830.402679][T24550] FAULT_INJECTION: forcing a failure. [ 2830.402679][T24550] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2830.403494][T24548] set_target_v0_checkentry: 36 callbacks suppressed [ 2830.403507][T24548] Cannot find add_set index 0 as target [ 2830.415951][T24550] CPU: 0 PID: 24550 Comm: syz-executor.4 Tainted: G W 5.16.0-rc6-syzkaller #0 [ 2830.415978][T24550] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2830.415996][T24550] Call Trace: 14:48:20 executing program 5: clone(0x80910b00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) set_mempolicy(0x3, &(0x7f0000000040)=0xffffffff80000001, 0x400) gettid() r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, &(0x7f0000000080)=ANY=[@ANYBLOB="7549f8187a2a6e40594b4473692aef0dda6d1a46f2019ed7e86b1d711c76877056283bedab9579d2125c7cad3b1f28c963b3a626ef87b075574ff5612ccc80d8e14883ad2a8e6516a15c410ce005b2e841ebacd55a1365c685244ec3b66b003e7ec96ed005906d578130183c37"]) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x2, 0x3, 0x2d8, 0x190, 0x190, 0x95ffffff, 0x77, 0x93ffffff, 0x240, 0x240, 0x221, 0x240, 0x240, 0x3, 0x0, {[{{@uncond, 0x0, 0x130, 0x190, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "bdc74c01369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa6ecab6b1d2cc05e3182f64694d7d05fb8b8c8f56627a54f905d564eeeb8334f650ca0f3c44f7fda4d20a55050342ea85ecc8838e7088de33582f36a0a375bb7008adc297a5ece1bb2df53d17bef26bb6f800", 0x7f, 0x2}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0x8bffffff]}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'veth0_to_batadv\x00', 'ip6gretap0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x338) 14:48:20 executing program 1: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000025c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000100)=0x14) setsockopt$TIPC_MCAST_BROADCAST(r0, 0x10f, 0x85) r1 = socket$inet6(0xa, 0x400000000001, 0x0) r2 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) ftruncate(r2, 0x2007fff) close(r1) open(&(0x7f00000002c0)='./bus\x00', 0x14d842, 0x0) sendfile(r1, r2, 0x0, 0x201000) [ 2830.427492][T24546] Cannot find add_set index 0 as target [ 2830.428276][T24550] [ 2830.428285][T24550] dump_stack_lvl+0xd6/0x122 [ 2830.428310][T24550] dump_stack+0x11/0x1b [ 2830.469036][T24550] should_fail+0x23c/0x250 [ 2830.473465][T24550] __alloc_pages+0x102/0x330 [ 2830.478109][T24550] alloc_pages+0x382/0x3d0 [ 2830.482551][T24550] folio_alloc+0x1a/0x20 [ 2830.486803][T24550] filemap_alloc_folio+0x53/0xf0 [ 2830.491746][T24550] page_cache_ra_unbounded+0x1c0/0x430 [ 2830.497212][T24550] ondemand_readahead+0x4f8/0x700 14:48:20 executing program 2: clone(0x80910b00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) set_mempolicy(0x3, &(0x7f0000000040), 0x0) gettid() r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x2, 0x3, 0x2d8, 0x190, 0x190, 0x95ffffff, 0x77, 0x93ffffff, 0x240, 0x240, 0x221, 0x240, 0x240, 0x3, 0x0, {[{{@uncond, 0x0, 0x130, 0x190, 0x0, {0x0, 0x36}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "bdc74c01369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa6ecab6b1d2cc05e3182f64694d7d05fb8b8c8f56627a54f905d564eeeb8334f650ca0f3c44f7fda4d20a55050342ea85ecc8838e7088de33582f36a0a375bb7008adc297a5ece1bb2df53d17bef26bb6f800", 0x7f}}]}, @common=@SET={0x60}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'veth0_to_batadv\x00', 'ip6gretap0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x338) 14:48:20 executing program 5: clone(0x80910b00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) set_mempolicy(0x3, &(0x7f0000000040)=0xffffffff80000001, 0x400) gettid() r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, &(0x7f0000000080)=ANY=[@ANYBLOB="7549f8187a2a6e40594b4473692aef0dda6d1a46f2019ed7e86b1d711c76877056283bedab9579d2125c7cad3b1f28c963b3a626ef87b075574ff5612ccc80d8e14883ad2a8e6516a15c410ce005b2e841ebacd55a1365c685244ec3b66b003e7ec96ed005906d578130183c37"]) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x2, 0x3, 0x2d8, 0x190, 0x190, 0x95ffffff, 0x77, 0x93ffffff, 0x240, 0x240, 0x221, 0x240, 0x240, 0x3, 0x0, {[{{@uncond, 0x0, 0x130, 0x190, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "bdc74c01369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa6ecab6b1d2cc05e3182f64694d7d05fb8b8c8f56627a54f905d564eeeb8334f650ca0f3c44f7fda4d20a55050342ea85ecc8838e7088de33582f36a0a375bb7008adc297a5ece1bb2df53d17bef26bb6f800", 0x7f, 0x2}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0x8cffffff]}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'veth0_to_batadv\x00', 'ip6gretap0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x338) [ 2830.502310][T24550] ? filemap_get_read_batch+0x3e2/0x410 [ 2830.505764][T24559] Cannot find add_set index 0 as target [ 2830.507875][T24550] page_cache_async_ra+0xed/0x120 [ 2830.518417][T24550] filemap_read+0x500/0x16d0 [ 2830.523023][T24550] generic_file_read_iter+0x72/0x2a0 [ 2830.528386][T24550] ? iov_iter_pipe+0x100/0x150 [ 2830.533188][T24550] ? ext4_file_read_iter+0x7a/0x1f0 [ 2830.538398][T24550] generic_file_splice_read+0x24f/0x330 [ 2830.543951][T24550] ? splice_shrink_spd+0x60/0x60 14:48:21 executing program 2: clone(0x80910b00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) set_mempolicy(0x3, &(0x7f0000000040), 0x0) gettid() r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x2, 0x3, 0x2d8, 0x190, 0x190, 0x95ffffff, 0x77, 0x93ffffff, 0x240, 0x240, 0x221, 0x240, 0x240, 0x3, 0x0, {[{{@uncond, 0x0, 0x130, 0x190, 0x0, {0x0, 0x3a}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "bdc74c01369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa6ecab6b1d2cc05e3182f64694d7d05fb8b8c8f56627a54f905d564eeeb8334f650ca0f3c44f7fda4d20a55050342ea85ecc8838e7088de33582f36a0a375bb7008adc297a5ece1bb2df53d17bef26bb6f800", 0x7f}}]}, @common=@SET={0x60}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'veth0_to_batadv\x00', 'ip6gretap0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x338) [ 2830.548976][T24550] splice_direct_to_actor+0x2aa/0x650 [ 2830.554408][T24550] ? do_splice_direct+0x190/0x190 [ 2830.559114][T24564] Cannot find add_set index 0 as target [ 2830.559439][T24550] do_splice_direct+0x106/0x190 [ 2830.569794][T24550] do_sendfile+0x675/0xc40 [ 2830.574215][T24550] __x64_sys_sendfile64+0x102/0x140 [ 2830.579416][T24550] do_syscall_64+0x44/0xd0 [ 2830.583854][T24550] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2830.589801][T24550] RIP: 0033:0x7f2d29acae99 [ 2830.594209][T24550] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2830.613821][T24550] RSP: 002b:00007f2d28c41168 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 2830.622243][T24550] RAX: ffffffffffffffda RBX: 00007f2d29bddf60 RCX: 00007f2d29acae99 [ 2830.630259][T24550] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 2830.638233][T24550] RBP: 00007f2d28c411d0 R08: 0000000000000000 R09: 0000000000000000 14:48:21 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) (async) r1 = socket$inet6(0xa, 0x3, 0x3a) (async) pread64(r0, &(0x7f0000000200)=""/179, 0xb3, 0x8) setsockopt$inet6_int(r1, 0x29, 0xd1, &(0x7f0000000000)=0x4, 0x4) (async) setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xc8, 0x0, 0x4) (async) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r1, 0x29, 0xc9, 0x0, 0x0) sendfile(r0, r1, &(0x7f0000000100)=0x1e200000000000, 0x9) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r0) (async, rerun: 64) r2 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x2) (rerun: 64) syz_open_dev$evdev(&(0x7f0000000040), 0x9, 0x2000) (async) write$evdev(r2, &(0x7f0000000080)=[{{}, 0x2}, {{}, 0x16, 0x1, 0x2}, {{0x77359400}, 0x3, 0x0, 0x2}], 0x48) 14:48:21 executing program 5: clone(0x80910b00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) set_mempolicy(0x3, &(0x7f0000000040)=0xffffffff80000001, 0x400) gettid() r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, &(0x7f0000000080)=ANY=[@ANYBLOB="7549f8187a2a6e40594b4473692aef0dda6d1a46f2019ed7e86b1d711c76877056283bedab9579d2125c7cad3b1f28c963b3a626ef87b075574ff5612ccc80d8e14883ad2a8e6516a15c410ce005b2e841ebacd55a1365c685244ec3b66b003e7ec96ed005906d578130183c37"]) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x2, 0x3, 0x2d8, 0x190, 0x190, 0x95ffffff, 0x77, 0x93ffffff, 0x240, 0x240, 0x221, 0x240, 0x240, 0x3, 0x0, {[{{@uncond, 0x0, 0x130, 0x190, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "bdc74c01369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa6ecab6b1d2cc05e3182f64694d7d05fb8b8c8f56627a54f905d564eeeb8334f650ca0f3c44f7fda4d20a55050342ea85ecc8838e7088de33582f36a0a375bb7008adc297a5ece1bb2df53d17bef26bb6f800", 0x7f, 0x2}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0x8e000000]}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'veth0_to_batadv\x00', 'ip6gretap0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x338) 14:48:21 executing program 3: r0 = syz_io_uring_setup(0x2de5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000fe8000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x717f, &(0x7f0000000200)={0x0, 0xce90, 0x8, 0x3, 0x1f, 0x0, r0}, &(0x7f0000fe8000/0x1000)=nil, &(0x7f0000003000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000280)=@IORING_OP_ASYNC_CANCEL={0xe, 0x3, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x5) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY_ALL_USERS(0xffffffffffffffff, 0xc0406619, &(0x7f0000000080)={@id={0x2, 0x0, @a}}) io_uring_enter(r0, 0xb2, 0x0, 0x0, 0x0, 0x7401) syz_io_uring_setup(0x2de5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000fe8000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000140)) (async) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) (async) syz_io_uring_setup(0x717f, &(0x7f0000000200)={0x0, 0xce90, 0x8, 0x3, 0x1f, 0x0, r0}, &(0x7f0000fe8000/0x1000)=nil, &(0x7f0000003000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000180)) (async) syz_io_uring_submit(r1, r3, &(0x7f0000000280)=@IORING_OP_ASYNC_CANCEL={0xe, 0x3, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x5) (async) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY_ALL_USERS(0xffffffffffffffff, 0xc0406619, &(0x7f0000000080)={@id={0x2, 0x0, @a}}) (async) io_uring_enter(r0, 0xb2, 0x0, 0x0, 0x0, 0x7401) (async) 14:48:21 executing program 2: clone(0x80910b00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) set_mempolicy(0x3, &(0x7f0000000040), 0x0) gettid() r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x2, 0x3, 0x2d8, 0x190, 0x190, 0x95ffffff, 0x77, 0x93ffffff, 0x240, 0x240, 0x221, 0x240, 0x240, 0x3, 0x0, {[{{@uncond, 0x0, 0x130, 0x190, 0x0, {0x0, 0x3b}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "bdc74c01369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa6ecab6b1d2cc05e3182f64694d7d05fb8b8c8f56627a54f905d564eeeb8334f650ca0f3c44f7fda4d20a55050342ea85ecc8838e7088de33582f36a0a375bb7008adc297a5ece1bb2df53d17bef26bb6f800", 0x7f}}]}, @common=@SET={0x60}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'veth0_to_batadv\x00', 'ip6gretap0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x338) 14:48:21 executing program 1: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000025c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000100)=0x14) (async) setsockopt$TIPC_MCAST_BROADCAST(r0, 0x10f, 0x85) (async) r1 = socket$inet6(0xa, 0x400000000001, 0x0) (async) r2 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) ftruncate(r2, 0x2007fff) (async) close(r1) (async) open(&(0x7f00000002c0)='./bus\x00', 0x14d842, 0x0) (async) sendfile(r1, r2, 0x0, 0x201000) [ 2830.646296][T24550] R10: 0000000000201000 R11: 0000000000000246 R12: 0000000000000002 [ 2830.654270][T24550] R13: 00007ffcc1d93fdf R14: 00007f2d28c41300 R15: 0000000000022000 [ 2830.662247][T24550] [ 2830.670312][T24607] Cannot find add_set index 0 as target [ 2830.682415][T24672] Cannot find add_set index 0 as target 14:48:21 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) (async) r1 = socket$inet6(0xa, 0x3, 0x3a) pread64(r0, &(0x7f0000000200)=""/179, 0xb3, 0x8) (async) setsockopt$inet6_int(r1, 0x29, 0xd1, &(0x7f0000000000)=0x4, 0x4) setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xc8, 0x0, 0x4) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r1, 0x29, 0xc9, 0x0, 0x0) (async) sendfile(r0, r1, &(0x7f0000000100)=0x1e200000000000, 0x9) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r0) (async) r2 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x2) syz_open_dev$evdev(&(0x7f0000000040), 0x9, 0x2000) (async) write$evdev(r2, &(0x7f0000000080)=[{{}, 0x2}, {{}, 0x16, 0x1, 0x2}, {{0x77359400}, 0x3, 0x0, 0x2}], 0x48) [ 2830.737967][T24688] Cannot find add_set index 0 as target [ 2830.760063][T24699] Cannot find add_set index 0 as target 14:48:21 executing program 4: r0 = socket$inet6(0xa, 0x400000000001, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) ftruncate(r1, 0x2007fff) close(r0) open(&(0x7f00000002c0)='./bus\x00', 0x14d842, 0x0) sendfile(r0, r1, 0x0, 0x201000) (fail_nth: 67) 14:48:21 executing program 5: clone(0x80910b00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) set_mempolicy(0x3, &(0x7f0000000040)=0xffffffff80000001, 0x400) gettid() r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, &(0x7f0000000080)=ANY=[@ANYBLOB="7549f8187a2a6e40594b4473692aef0dda6d1a46f2019ed7e86b1d711c76877056283bedab9579d2125c7cad3b1f28c963b3a626ef87b075574ff5612ccc80d8e14883ad2a8e6516a15c410ce005b2e841ebacd55a1365c685244ec3b66b003e7ec96ed005906d578130183c37"]) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x2, 0x3, 0x2d8, 0x190, 0x190, 0x95ffffff, 0x77, 0x93ffffff, 0x240, 0x240, 0x221, 0x240, 0x240, 0x3, 0x0, {[{{@uncond, 0x0, 0x130, 0x190, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "bdc74c01369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa6ecab6b1d2cc05e3182f64694d7d05fb8b8c8f56627a54f905d564eeeb8334f650ca0f3c44f7fda4d20a55050342ea85ecc8838e7088de33582f36a0a375bb7008adc297a5ece1bb2df53d17bef26bb6f800", 0x7f, 0x2}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0x8effffff]}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'veth0_to_batadv\x00', 'ip6gretap0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x338) 14:48:21 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x2) write$evdev(r1, &(0x7f000004d000)=[{}], 0xfffffe82) 14:48:21 executing program 2: clone(0x80910b00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) set_mempolicy(0x3, &(0x7f0000000040), 0x0) gettid() r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x2, 0x3, 0x2d8, 0x190, 0x190, 0x95ffffff, 0x77, 0x93ffffff, 0x240, 0x240, 0x221, 0x240, 0x240, 0x3, 0x0, {[{{@uncond, 0x0, 0x130, 0x190, 0x0, {0x0, 0x3c}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "bdc74c01369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa6ecab6b1d2cc05e3182f64694d7d05fb8b8c8f56627a54f905d564eeeb8334f650ca0f3c44f7fda4d20a55050342ea85ecc8838e7088de33582f36a0a375bb7008adc297a5ece1bb2df53d17bef26bb6f800", 0x7f}}]}, @common=@SET={0x60}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'veth0_to_batadv\x00', 'ip6gretap0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x338) 14:48:21 executing program 3: r0 = syz_io_uring_setup(0x2de5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000002000/0x4000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0xb2, 0x3, 0x2, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000340)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000004040)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000140)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_CLOSE, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE, 0x0) r3 = syz_io_uring_setup(0x5d66, &(0x7f00000002c0), &(0x7f0000ee7000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r4, r5, &(0x7f00000000c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f00000003c0)}, 0x1010001) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r3, 0x10000000) syz_io_uring_submit(r4, r6, &(0x7f0000000340)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r4, r6, &(0x7f0000000000)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r4, r6, &(0x7f0000004040)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000140)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_CLOSE, 0x0) syz_io_uring_submit(r4, r6, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE, 0x0) r7 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) syz_io_uring_submit(0x0, r6, &(0x7f0000000100)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x2007, @fd=r7, 0x7, &(0x7f0000000080), 0x0, 0x11}, 0x8) 14:48:21 executing program 1: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000025c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000100)=0x14) (async) setsockopt$TIPC_MCAST_BROADCAST(r0, 0x10f, 0x85) r1 = socket$inet6(0xa, 0x400000000001, 0x0) r2 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) ftruncate(r2, 0x2007fff) close(r1) (async) open(&(0x7f00000002c0)='./bus\x00', 0x14d842, 0x0) (async, rerun: 64) sendfile(r1, r2, 0x0, 0x201000) (rerun: 64) 14:48:21 executing program 2: clone(0x80910b00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) set_mempolicy(0x3, &(0x7f0000000040), 0x0) gettid() r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x2, 0x3, 0x2d8, 0x190, 0x190, 0x95ffffff, 0x77, 0x93ffffff, 0x240, 0x240, 0x221, 0x240, 0x240, 0x3, 0x0, {[{{@uncond, 0x0, 0x130, 0x190, 0x0, {0x0, 0x3d}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "bdc74c01369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa6ecab6b1d2cc05e3182f64694d7d05fb8b8c8f56627a54f905d564eeeb8334f650ca0f3c44f7fda4d20a55050342ea85ecc8838e7088de33582f36a0a375bb7008adc297a5ece1bb2df53d17bef26bb6f800", 0x7f}}]}, @common=@SET={0x60}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'veth0_to_batadv\x00', 'ip6gretap0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x338) [ 2830.956097][T25297] Cannot find add_set index 0 as target [ 2831.002929][T25305] FAULT_INJECTION: forcing a failure. [ 2831.002929][T25305] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2831.016258][T25305] CPU: 0 PID: 25305 Comm: syz-executor.4 Tainted: G W 5.16.0-rc6-syzkaller #0 [ 2831.016332][T25305] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2831.036521][T25305] Call Trace: [ 2831.039807][T25305] [ 2831.039816][T25305] dump_stack_lvl+0xd6/0x122 [ 2831.047398][T25305] dump_stack+0x11/0x1b 14:48:21 executing program 5: clone(0x80910b00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) set_mempolicy(0x3, &(0x7f0000000040)=0xffffffff80000001, 0x400) gettid() r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, &(0x7f0000000080)=ANY=[@ANYBLOB="7549f8187a2a6e40594b4473692aef0dda6d1a46f2019ed7e86b1d711c76877056283bedab9579d2125c7cad3b1f28c963b3a626ef87b075574ff5612ccc80d8e14883ad2a8e6516a15c410ce005b2e841ebacd55a1365c685244ec3b66b003e7ec96ed005906d578130183c37"]) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x2, 0x3, 0x2d8, 0x190, 0x190, 0x95ffffff, 0x77, 0x93ffffff, 0x240, 0x240, 0x221, 0x240, 0x240, 0x3, 0x0, {[{{@uncond, 0x0, 0x130, 0x190, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "bdc74c01369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa6ecab6b1d2cc05e3182f64694d7d05fb8b8c8f56627a54f905d564eeeb8334f650ca0f3c44f7fda4d20a55050342ea85ecc8838e7088de33582f36a0a375bb7008adc297a5ece1bb2df53d17bef26bb6f800", 0x7f, 0x2}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0x8fffffff]}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'veth0_to_batadv\x00', 'ip6gretap0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x338) 14:48:21 executing program 3: r0 = syz_io_uring_setup(0x2de5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000002000/0x4000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0xb2, 0x3, 0x2, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000340)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000004040)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000140)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_CLOSE, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE, 0x0) r3 = syz_io_uring_setup(0x5d66, &(0x7f00000002c0), &(0x7f0000ee7000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r4, r5, &(0x7f00000000c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f00000003c0)}, 0x1010001) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r3, 0x10000000) syz_io_uring_submit(r4, r6, &(0x7f0000000340)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r4, r6, &(0x7f0000000000)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r4, r6, &(0x7f0000004040)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000140)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_CLOSE, 0x0) syz_io_uring_submit(r4, r6, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE, 0x0) r7 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) syz_io_uring_submit(0x0, r6, &(0x7f0000000100)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x2007, @fd=r7, 0x7, &(0x7f0000000080), 0x0, 0x11}, 0x8) syz_io_uring_setup(0x2de5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000002000/0x4000)=nil, &(0x7f00000000c0), &(0x7f0000000140)) (async) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) (async) io_uring_enter(r0, 0xb2, 0x3, 0x2, 0x0, 0x0) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000340)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd_index}, 0x0) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SYNC_FILE_RANGE, 0x0) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f0000004040)=@IORING_OP_SYNC_FILE_RANGE, 0x0) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000140)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_CLOSE, 0x0) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE, 0x0) (async) syz_io_uring_setup(0x5d66, &(0x7f00000002c0), &(0x7f0000ee7000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380), &(0x7f00000001c0)) (async) syz_io_uring_submit(r4, r5, &(0x7f00000000c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f00000003c0)}, 0x1010001) (async) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r3, 0x10000000) (async) syz_io_uring_submit(r4, r6, &(0x7f0000000340)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd_index}, 0x0) (async) syz_io_uring_submit(r4, r6, &(0x7f0000000000)=@IORING_OP_SYNC_FILE_RANGE, 0x0) (async) syz_io_uring_submit(r4, r6, &(0x7f0000004040)=@IORING_OP_SYNC_FILE_RANGE, 0x0) (async) syz_io_uring_submit(r4, r5, &(0x7f0000000140)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) (async) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_CLOSE, 0x0) (async) syz_io_uring_submit(r4, r6, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE, 0x0) (async) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) (async) syz_io_uring_submit(0x0, r6, &(0x7f0000000100)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x2007, @fd=r7, 0x7, &(0x7f0000000080), 0x0, 0x11}, 0x8) (async) [ 2831.047423][T25305] should_fail+0x23c/0x250 [ 2831.047506][T25305] __alloc_pages+0x102/0x330 [ 2831.047533][T25305] alloc_pages+0x382/0x3d0 [ 2831.047552][T25305] folio_alloc+0x1a/0x20 [ 2831.047570][T25305] filemap_alloc_folio+0x53/0xf0 [ 2831.047632][T25305] page_cache_ra_unbounded+0x1c0/0x430 [ 2831.047660][T25305] ondemand_readahead+0x4f8/0x700 [ 2831.047685][T25305] ? filemap_get_read_batch+0x3e2/0x410 [ 2831.047714][T25305] page_cache_async_ra+0xed/0x120 [ 2831.047738][T25305] filemap_read+0x500/0x16d0 14:48:21 executing program 5: clone(0x80910b00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) set_mempolicy(0x3, &(0x7f0000000040)=0xffffffff80000001, 0x400) gettid() r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, &(0x7f0000000080)=ANY=[@ANYBLOB="7549f8187a2a6e40594b4473692aef0dda6d1a46f2019ed7e86b1d711c76877056283bedab9579d2125c7cad3b1f28c963b3a626ef87b075574ff5612ccc80d8e14883ad2a8e6516a15c410ce005b2e841ebacd55a1365c685244ec3b66b003e7ec96ed005906d578130183c37"]) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x2, 0x3, 0x2d8, 0x190, 0x190, 0x95ffffff, 0x77, 0x93ffffff, 0x240, 0x240, 0x221, 0x240, 0x240, 0x3, 0x0, {[{{@uncond, 0x0, 0x130, 0x190, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "bdc74c01369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa6ecab6b1d2cc05e3182f64694d7d05fb8b8c8f56627a54f905d564eeeb8334f650ca0f3c44f7fda4d20a55050342ea85ecc8838e7088de33582f36a0a375bb7008adc297a5ece1bb2df53d17bef26bb6f800", 0x7f, 0x2}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0x90010000]}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'veth0_to_batadv\x00', 'ip6gretap0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x338) 14:48:21 executing program 5: clone(0x80910b00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) set_mempolicy(0x3, &(0x7f0000000040)=0xffffffff80000001, 0x400) gettid() r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, &(0x7f0000000080)=ANY=[@ANYBLOB="7549f8187a2a6e40594b4473692aef0dda6d1a46f2019ed7e86b1d711c76877056283bedab9579d2125c7cad3b1f28c963b3a626ef87b075574ff5612ccc80d8e14883ad2a8e6516a15c410ce005b2e841ebacd55a1365c685244ec3b66b003e7ec96ed005906d578130183c37"]) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x2, 0x3, 0x2d8, 0x190, 0x190, 0x95ffffff, 0x77, 0x93ffffff, 0x240, 0x240, 0x221, 0x240, 0x240, 0x3, 0x0, {[{{@uncond, 0x0, 0x130, 0x190, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "bdc74c01369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa6ecab6b1d2cc05e3182f64694d7d05fb8b8c8f56627a54f905d564eeeb8334f650ca0f3c44f7fda4d20a55050342ea85ecc8838e7088de33582f36a0a375bb7008adc297a5ece1bb2df53d17bef26bb6f800", 0x7f, 0x2}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0x94000000]}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'veth0_to_batadv\x00', 'ip6gretap0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x338) [ 2831.047770][T25305] generic_file_read_iter+0x72/0x2a0 [ 2831.047811][T25305] ? iov_iter_pipe+0x100/0x150 [ 2831.047832][T25305] ? ext4_file_read_iter+0x7a/0x1f0 [ 2831.047854][T25305] generic_file_splice_read+0x24f/0x330 [ 2831.047880][T25305] ? splice_shrink_spd+0x60/0x60 [ 2831.047933][T25305] splice_direct_to_actor+0x2aa/0x650 [ 2831.047956][T25305] ? do_splice_direct+0x190/0x190 [ 2831.047978][T25305] do_splice_direct+0x106/0x190 [ 2831.048001][T25305] do_sendfile+0x675/0xc40 [ 2831.048109][T25305] __x64_sys_sendfile64+0x102/0x140 14:48:21 executing program 5: clone(0x80910b00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) set_mempolicy(0x3, &(0x7f0000000040)=0xffffffff80000001, 0x400) gettid() r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, &(0x7f0000000080)=ANY=[@ANYBLOB="7549f8187a2a6e40594b4473692aef0dda6d1a46f2019ed7e86b1d711c76877056283bedab9579d2125c7cad3b1f28c963b3a626ef87b075574ff5612ccc80d8e14883ad2a8e6516a15c410ce005b2e841ebacd55a1365c685244ec3b66b003e7ec96ed005906d578130183c37"]) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x2, 0x3, 0x2d8, 0x190, 0x190, 0x95ffffff, 0x77, 0x93ffffff, 0x240, 0x240, 0x221, 0x240, 0x240, 0x3, 0x0, {[{{@uncond, 0x0, 0x130, 0x190, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "bdc74c01369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa6ecab6b1d2cc05e3182f64694d7d05fb8b8c8f56627a54f905d564eeeb8334f650ca0f3c44f7fda4d20a55050342ea85ecc8838e7088de33582f36a0a375bb7008adc297a5ece1bb2df53d17bef26bb6f800", 0x7f, 0x2}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0x96010000]}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'veth0_to_batadv\x00', 'ip6gretap0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x338) [ 2831.084873][T25310] Cannot find add_set index 0 as target [ 2831.085269][T25305] do_syscall_64+0x44/0xd0 [ 2831.160650][T25305] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2831.166570][T25305] RIP: 0033:0x7f2d29acae99 [ 2831.171030][T25305] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2831.190637][T25305] RSP: 002b:00007f2d28c41168 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 2831.199052][T25305] RAX: ffffffffffffffda RBX: 00007f2d29bddf60 RCX: 00007f2d29acae99 [ 2831.207027][T25305] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 2831.215041][T25305] RBP: 00007f2d28c411d0 R08: 0000000000000000 R09: 0000000000000000 [ 2831.223008][T25305] R10: 0000000000201000 R11: 0000000000000246 R12: 0000000000000002 [ 2831.230981][T25305] R13: 00007ffcc1d93fdf R14: 00007f2d28c41300 R15: 0000000000022000 [ 2831.239131][T25305] 14:48:21 executing program 4: r0 = socket$inet6(0xa, 0x400000000001, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) ftruncate(r1, 0x2007fff) close(r0) open(&(0x7f00000002c0)='./bus\x00', 0x14d842, 0x0) sendfile(r0, r1, 0x0, 0x201000) (fail_nth: 68) 14:48:21 executing program 2: clone(0x80910b00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) set_mempolicy(0x3, &(0x7f0000000040), 0x0) gettid() r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x2, 0x3, 0x2d8, 0x190, 0x190, 0x95ffffff, 0x77, 0x93ffffff, 0x240, 0x240, 0x221, 0x240, 0x240, 0x3, 0x0, {[{{@uncond, 0x0, 0x130, 0x190, 0x0, {0x0, 0x42}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "bdc74c01369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa6ecab6b1d2cc05e3182f64694d7d05fb8b8c8f56627a54f905d564eeeb8334f650ca0f3c44f7fda4d20a55050342ea85ecc8838e7088de33582f36a0a375bb7008adc297a5ece1bb2df53d17bef26bb6f800", 0x7f}}]}, @common=@SET={0x60}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'veth0_to_batadv\x00', 'ip6gretap0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x338) 14:48:21 executing program 3: r0 = syz_io_uring_setup(0x2de5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000002000/0x4000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0xb2, 0x3, 0x2, 0x0, 0x0) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000340)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd_index}, 0x0) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SYNC_FILE_RANGE, 0x0) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f0000004040)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000140)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_CLOSE, 0x0) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE, 0x0) r3 = syz_io_uring_setup(0x5d66, &(0x7f00000002c0), &(0x7f0000ee7000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r4, r5, &(0x7f00000000c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f00000003c0)}, 0x1010001) (async) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r3, 0x10000000) syz_io_uring_submit(r4, r6, &(0x7f0000000340)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd_index}, 0x0) (async) syz_io_uring_submit(r4, r6, &(0x7f0000000000)=@IORING_OP_SYNC_FILE_RANGE, 0x0) (async) syz_io_uring_submit(r4, r6, &(0x7f0000004040)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000140)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) (async) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_CLOSE, 0x0) syz_io_uring_submit(r4, r6, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE, 0x0) (async) r7 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) syz_io_uring_submit(0x0, r6, &(0x7f0000000100)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x2007, @fd=r7, 0x7, &(0x7f0000000080), 0x0, 0x11}, 0x8) 14:48:21 executing program 5: clone(0x80910b00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) set_mempolicy(0x3, &(0x7f0000000040)=0xffffffff80000001, 0x400) gettid() r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, &(0x7f0000000080)=ANY=[@ANYBLOB="7549f8187a2a6e40594b4473692aef0dda6d1a46f2019ed7e86b1d711c76877056283bedab9579d2125c7cad3b1f28c963b3a626ef87b075574ff5612ccc80d8e14883ad2a8e6516a15c410ce005b2e841ebacd55a1365c685244ec3b66b003e7ec96ed005906d578130183c37"]) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x2, 0x3, 0x2d8, 0x190, 0x190, 0x95ffffff, 0x77, 0x93ffffff, 0x240, 0x240, 0x221, 0x240, 0x240, 0x3, 0x0, {[{{@uncond, 0x0, 0x130, 0x190, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "bdc74c01369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa6ecab6b1d2cc05e3182f64694d7d05fb8b8c8f56627a54f905d564eeeb8334f650ca0f3c44f7fda4d20a55050342ea85ecc8838e7088de33582f36a0a375bb7008adc297a5ece1bb2df53d17bef26bb6f800", 0x7f, 0x2}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0x97010000]}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'veth0_to_batadv\x00', 'ip6gretap0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x338) 14:48:21 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x2) write$evdev(r1, &(0x7f000004d000)=[{}], 0xfffffe82) 14:48:21 executing program 1: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) ftruncate(r1, 0x2007fff) close(r0) open(&(0x7f00000002c0)='./bus\x00', 0x14d842, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, &(0x7f0000000080)=ANY=[], 0x2bb98205) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r2, 0x4058534c, &(0x7f0000000000)={0x3, 0x7, 0x9, 0x80000001, 0x7, 0x1000}) sendfile(r0, r1, 0x0, 0x201000) 14:48:21 executing program 5: clone(0x80910b00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) set_mempolicy(0x3, &(0x7f0000000040)=0xffffffff80000001, 0x400) gettid() r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, &(0x7f0000000080)=ANY=[@ANYBLOB="7549f8187a2a6e40594b4473692aef0dda6d1a46f2019ed7e86b1d711c76877056283bedab9579d2125c7cad3b1f28c963b3a626ef87b075574ff5612ccc80d8e14883ad2a8e6516a15c410ce005b2e841ebacd55a1365c685244ec3b66b003e7ec96ed005906d578130183c37"]) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x2, 0x3, 0x2d8, 0x190, 0x190, 0x95ffffff, 0x77, 0x93ffffff, 0x240, 0x240, 0x221, 0x240, 0x240, 0x3, 0x0, {[{{@uncond, 0x0, 0x130, 0x190, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "bdc74c01369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa6ecab6b1d2cc05e3182f64694d7d05fb8b8c8f56627a54f905d564eeeb8334f650ca0f3c44f7fda4d20a55050342ea85ecc8838e7088de33582f36a0a375bb7008adc297a5ece1bb2df53d17bef26bb6f800", 0x7f, 0x2}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0x97ffffff]}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'veth0_to_batadv\x00', 'ip6gretap0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x338) 14:48:21 executing program 2: clone(0x80910b00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) set_mempolicy(0x3, &(0x7f0000000040), 0x0) gettid() r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x2, 0x3, 0x2d8, 0x190, 0x190, 0x95ffffff, 0x77, 0x93ffffff, 0x240, 0x240, 0x221, 0x240, 0x240, 0x3, 0x0, {[{{@uncond, 0x0, 0x130, 0x190, 0x0, {0x0, 0x43}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "bdc74c01369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa6ecab6b1d2cc05e3182f64694d7d05fb8b8c8f56627a54f905d564eeeb8334f650ca0f3c44f7fda4d20a55050342ea85ecc8838e7088de33582f36a0a375bb7008adc297a5ece1bb2df53d17bef26bb6f800", 0x7f}}]}, @common=@SET={0x60}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'veth0_to_batadv\x00', 'ip6gretap0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x338) [ 2831.411499][T25470] FAULT_INJECTION: forcing a failure. [ 2831.411499][T25470] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2831.424875][T25470] CPU: 0 PID: 25470 Comm: syz-executor.4 Tainted: G W 5.16.0-rc6-syzkaller #0 [ 2831.424902][T25470] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2831.424929][T25470] Call Trace: [ 2831.424937][T25470] [ 2831.424944][T25470] dump_stack_lvl+0xd6/0x122 [ 2831.424970][T25470] dump_stack+0x11/0x1b [ 2831.424990][T25470] should_fail+0x23c/0x250 [ 2831.425055][T25470] __alloc_pages+0x102/0x330 [ 2831.425082][T25470] alloc_pages+0x382/0x3d0 [ 2831.425102][T25470] folio_alloc+0x1a/0x20 [ 2831.425130][T25470] filemap_alloc_folio+0x53/0xf0 [ 2831.425188][T25470] page_cache_ra_unbounded+0x1c0/0x430 [ 2831.425217][T25470] ondemand_readahead+0x4f8/0x700 [ 2831.425239][T25470] ? filemap_get_read_batch+0x3e2/0x410 [ 2831.425271][T25470] page_cache_async_ra+0xed/0x120 [ 2831.425331][T25470] filemap_read+0x500/0x16d0 [ 2831.425362][T25470] generic_file_read_iter+0x72/0x2a0 [ 2831.425386][T25470] ? iov_iter_pipe+0x100/0x150 [ 2831.425409][T25470] ? ext4_file_read_iter+0x7a/0x1f0 [ 2831.425431][T25470] generic_file_splice_read+0x24f/0x330 [ 2831.425577][T25470] ? splice_shrink_spd+0x60/0x60 [ 2831.425600][T25470] splice_direct_to_actor+0x2aa/0x650 [ 2831.425622][T25470] ? do_splice_direct+0x190/0x190 [ 2831.425714][T25470] do_splice_direct+0x106/0x190 [ 2831.425813][T25470] do_sendfile+0x675/0xc40 [ 2831.425834][T25470] __x64_sys_sendfile64+0x102/0x140 [ 2831.425857][T25470] do_syscall_64+0x44/0xd0 [ 2831.425877][T25470] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2831.425899][T25470] RIP: 0033:0x7f2d29acae99 [ 2831.574352][T25470] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2831.574376][T25470] RSP: 002b:00007f2d28c41168 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 2831.574397][T25470] RAX: ffffffffffffffda RBX: 00007f2d29bddf60 RCX: 00007f2d29acae99 14:48:22 executing program 2: clone(0x80910b00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) set_mempolicy(0x3, &(0x7f0000000040), 0x0) gettid() r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x2, 0x3, 0x2d8, 0x190, 0x190, 0x95ffffff, 0x77, 0x93ffffff, 0x240, 0x240, 0x221, 0x240, 0x240, 0x3, 0x0, {[{{@uncond, 0x0, 0x130, 0x190, 0x0, {0x0, 0x44}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "bdc74c01369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa6ecab6b1d2cc05e3182f64694d7d05fb8b8c8f56627a54f905d564eeeb8334f650ca0f3c44f7fda4d20a55050342ea85ecc8838e7088de33582f36a0a375bb7008adc297a5ece1bb2df53d17bef26bb6f800", 0x7f}}]}, @common=@SET={0x60}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'veth0_to_batadv\x00', 'ip6gretap0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x338) 14:48:22 executing program 3: getsockopt$inet_sctp_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000200)={0x0, 0x6, 0x5, 0xff00, 0x1, 0x2, 0x9, 0x0, {0x0, @in6={{0xa, 0x4e23, 0x700, @loopback}}, 0x5, 0x101, 0x10000, 0x7, 0x7}}, &(0x7f0000000080)=0xb0) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(0xffffffffffffffff, 0x84, 0x19, &(0x7f0000000100)={r0, 0x3}, 0x8) r1 = syz_io_uring_setup(0x2de5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000fe8000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0xb2, 0x0, 0x0, 0x0, 0x7401) 14:48:22 executing program 5: clone(0x80910b00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) set_mempolicy(0x3, &(0x7f0000000040)=0xffffffff80000001, 0x400) gettid() r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, &(0x7f0000000080)=ANY=[@ANYBLOB="7549f8187a2a6e40594b4473692aef0dda6d1a46f2019ed7e86b1d711c76877056283bedab9579d2125c7cad3b1f28c963b3a626ef87b075574ff5612ccc80d8e14883ad2a8e6516a15c410ce005b2e841ebacd55a1365c685244ec3b66b003e7ec96ed005906d578130183c37"]) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x2, 0x3, 0x2d8, 0x190, 0x190, 0x95ffffff, 0x77, 0x93ffffff, 0x240, 0x240, 0x221, 0x240, 0x240, 0x3, 0x0, {[{{@uncond, 0x0, 0x130, 0x190, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "bdc74c01369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa6ecab6b1d2cc05e3182f64694d7d05fb8b8c8f56627a54f905d564eeeb8334f650ca0f3c44f7fda4d20a55050342ea85ecc8838e7088de33582f36a0a375bb7008adc297a5ece1bb2df53d17bef26bb6f800", 0x7f, 0x2}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0x98020000]}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'veth0_to_batadv\x00', 'ip6gretap0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x338) 14:48:22 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) (async) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x2) write$evdev(r1, &(0x7f000004d000)=[{}], 0xfffffe82) [ 2831.574423][T25470] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 2831.618684][T25470] RBP: 00007f2d28c411d0 R08: 0000000000000000 R09: 0000000000000000 [ 2831.618704][T25470] R10: 0000000000201000 R11: 0000000000000246 R12: 0000000000000002 [ 2831.618719][T25470] R13: 00007ffcc1d93fdf R14: 00007f2d28c41300 R15: 0000000000022000 [ 2831.618737][T25470] 14:48:22 executing program 4: r0 = socket$inet6(0xa, 0x400000000001, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) ftruncate(r1, 0x2007fff) close(r0) open(&(0x7f00000002c0)='./bus\x00', 0x14d842, 0x0) sendfile(r0, r1, 0x0, 0x201000) (fail_nth: 69) 14:48:22 executing program 5: clone(0x80910b00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) set_mempolicy(0x3, &(0x7f0000000040)=0xffffffff80000001, 0x400) gettid() r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, &(0x7f0000000080)=ANY=[@ANYBLOB="7549f8187a2a6e40594b4473692aef0dda6d1a46f2019ed7e86b1d711c76877056283bedab9579d2125c7cad3b1f28c963b3a626ef87b075574ff5612ccc80d8e14883ad2a8e6516a15c410ce005b2e841ebacd55a1365c685244ec3b66b003e7ec96ed005906d578130183c37"]) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x2, 0x3, 0x2d8, 0x190, 0x190, 0x95ffffff, 0x77, 0x93ffffff, 0x240, 0x240, 0x221, 0x240, 0x240, 0x3, 0x0, {[{{@uncond, 0x0, 0x130, 0x190, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "bdc74c01369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa6ecab6b1d2cc05e3182f64694d7d05fb8b8c8f56627a54f905d564eeeb8334f650ca0f3c44f7fda4d20a55050342ea85ecc8838e7088de33582f36a0a375bb7008adc297a5ece1bb2df53d17bef26bb6f800", 0x7f, 0x2}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0x9a000000]}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'veth0_to_batadv\x00', 'ip6gretap0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x338) 14:48:22 executing program 3: getsockopt$inet_sctp_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000200)={0x0, 0x6, 0x5, 0xff00, 0x1, 0x2, 0x9, 0x0, {0x0, @in6={{0xa, 0x4e23, 0x700, @loopback}}, 0x5, 0x101, 0x10000, 0x7, 0x7}}, &(0x7f0000000080)=0xb0) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(0xffffffffffffffff, 0x84, 0x19, &(0x7f0000000100)={r0, 0x3}, 0x8) r1 = syz_io_uring_setup(0x2de5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000fe8000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0xb2, 0x0, 0x0, 0x0, 0x7401) getsockopt$inet_sctp_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000200)={0x0, 0x6, 0x5, 0xff00, 0x1, 0x2, 0x9, 0x0, {0x0, @in6={{0xa, 0x4e23, 0x700, @loopback}}, 0x5, 0x101, 0x10000, 0x7, 0x7}}, &(0x7f0000000080)=0xb0) (async) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(0xffffffffffffffff, 0x84, 0x19, &(0x7f0000000100)={r0, 0x3}, 0x8) (async) syz_io_uring_setup(0x2de5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000fe8000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000140)) (async) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) (async) io_uring_enter(r1, 0xb2, 0x0, 0x0, 0x0, 0x7401) (async) 14:48:22 executing program 2: clone(0x80910b00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) set_mempolicy(0x3, &(0x7f0000000040), 0x0) gettid() r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x2, 0x3, 0x2d8, 0x190, 0x190, 0x95ffffff, 0x77, 0x93ffffff, 0x240, 0x240, 0x221, 0x240, 0x240, 0x3, 0x0, {[{{@uncond, 0x0, 0x130, 0x190, 0x0, {0x0, 0x48}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "bdc74c01369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa6ecab6b1d2cc05e3182f64694d7d05fb8b8c8f56627a54f905d564eeeb8334f650ca0f3c44f7fda4d20a55050342ea85ecc8838e7088de33582f36a0a375bb7008adc297a5ece1bb2df53d17bef26bb6f800", 0x7f}}]}, @common=@SET={0x60}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'veth0_to_batadv\x00', 'ip6gretap0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x338) [ 2831.843906][T25659] FAULT_INJECTION: forcing a failure. [ 2831.843906][T25659] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2831.857512][T25659] CPU: 0 PID: 25659 Comm: syz-executor.4 Tainted: G W 5.16.0-rc6-syzkaller #0 [ 2831.867677][T25659] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2831.877734][T25659] Call Trace: [ 2831.881013][T25659] [ 2831.883943][T25659] dump_stack_lvl+0xd6/0x122 [ 2831.888551][T25659] dump_stack+0x11/0x1b [ 2831.892725][T25659] should_fail+0x23c/0x250 [ 2831.897159][T25659] __alloc_pages+0x102/0x330 [ 2831.901776][T25659] alloc_pages+0x382/0x3d0 [ 2831.906282][T25659] folio_alloc+0x1a/0x20 [ 2831.910517][T25659] filemap_alloc_folio+0x53/0xf0 [ 2831.915533][T25659] page_cache_ra_unbounded+0x1c0/0x430 [ 2831.921015][T25659] ondemand_readahead+0x4f8/0x700 [ 2831.926102][T25659] ? filemap_get_read_batch+0x3e2/0x410 [ 2831.931744][T25659] page_cache_async_ra+0xed/0x120 [ 2831.936876][T25659] filemap_read+0x500/0x16d0 [ 2831.941509][T25659] generic_file_read_iter+0x72/0x2a0 [ 2831.946853][T25659] ? iov_iter_pipe+0x100/0x150 [ 2831.951708][T25659] ? ext4_file_read_iter+0x7a/0x1f0 [ 2831.956895][T25659] generic_file_splice_read+0x24f/0x330 [ 2831.962444][T25659] ? splice_shrink_spd+0x60/0x60 [ 2831.967445][T25659] splice_direct_to_actor+0x2aa/0x650 [ 2831.972937][T25659] ? do_splice_direct+0x190/0x190 [ 2831.977957][T25659] do_splice_direct+0x106/0x190 [ 2831.982812][T25659] do_sendfile+0x675/0xc40 [ 2831.987217][T25659] __x64_sys_sendfile64+0x102/0x140 [ 2831.992397][T25659] do_syscall_64+0x44/0xd0 [ 2831.996801][T25659] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2832.002687][T25659] RIP: 0033:0x7f2d29acae99 [ 2832.007098][T25659] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2832.026875][T25659] RSP: 002b:00007f2d28c41168 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 2832.035267][T25659] RAX: ffffffffffffffda RBX: 00007f2d29bddf60 RCX: 00007f2d29acae99 [ 2832.043359][T25659] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 2832.051311][T25659] RBP: 00007f2d28c411d0 R08: 0000000000000000 R09: 0000000000000000 [ 2832.059263][T25659] R10: 0000000000201000 R11: 0000000000000246 R12: 0000000000000002 [ 2832.067222][T25659] R13: 00007ffcc1d93fdf R14: 00007f2d28c41300 R15: 0000000000022000 [ 2832.075187][T25659] 14:48:22 executing program 1: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) ftruncate(r1, 0x2007fff) (async) close(r0) (async) open(&(0x7f00000002c0)='./bus\x00', 0x14d842, 0x0) (async) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, &(0x7f0000000080)=ANY=[], 0x2bb98205) (async) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r2, 0x4058534c, &(0x7f0000000000)={0x3, 0x7, 0x9, 0x80000001, 0x7, 0x1000}) (async) sendfile(r0, r1, 0x0, 0x201000) 14:48:22 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x2) r2 = socket$packet(0x11, 0xe03af5865097764d, 0x300) r3 = accept$packet(r2, &(0x7f0000000080)={0x11, 0x0, 0x0}, &(0x7f0000006200)=0x14) clock_gettime(0x0, &(0x7f0000006100)={0x0, 0x0}) recvmmsg(r3, &(0x7f0000005f40)=[{{0x0, 0x0, &(0x7f0000001440)=[{&(0x7f0000000100)=""/138, 0x8a}, {&(0x7f0000000200)=""/137, 0x89}, {&(0x7f00000002c0)=""/76, 0x4c}, {&(0x7f0000000340)=""/19, 0x13}, {&(0x7f0000000380)=""/30, 0x1e}, {&(0x7f00000003c0)=""/50, 0x42}, {&(0x7f0000000440)=""/4096, 0x1000}], 0x7, &(0x7f00000074c0)=""/178, 0xa3}, 0xf14}, {{&(0x7f0000001580)=@nl=@unspec, 0x80, &(0x7f00000019c0)=[{&(0x7f0000001600)=""/177, 0xb1}, {&(0x7f00000055c0)=""/23, 0xd}, {&(0x7f0000001700)=""/222, 0xde}, {&(0x7f0000001800)=""/138, 0x8a}, {&(0x7f00000018c0)=""/102, 0x66}, {&(0x7f0000001940)=""/105, 0x69}, {&(0x7f00000064c0)=""/4096}], 0x6, &(0x7f0000005780)=""/109, 0x63}, 0x2}, {{&(0x7f0000001ac0)=@tipc=@name, 0x80, &(0x7f0000003c80)=[{&(0x7f0000001b40)=""/4096, 0x1000}, {&(0x7f00000016c0)=""/56, 0x32}, {&(0x7f0000002b80)=""/21, 0x15}, {&(0x7f0000002bc0)=""/189, 0xbd}, {&(0x7f0000002c80)=""/4096, 0xffffffffffffffc3}], 0x5, &(0x7f0000003d00)=""/4096, 0x1000}, 0x1}, {{&(0x7f0000004d00)=@l2tp6={0xa, 0x0, 0x0, @initdev}, 0x80, &(0x7f0000004fc0)=[{&(0x7f0000004d80)=""/74, 0x4a}, {&(0x7f0000004e00)=""/48, 0x30}, {&(0x7f0000004e40)=""/222, 0xde}, {&(0x7f0000004f40)=""/57, 0x39}, {&(0x7f0000004f80)=""/22, 0x16}], 0x5, &(0x7f0000005040)=""/163, 0xa3}, 0x15}, {{&(0x7f0000005100)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000005340)=[{&(0x7f0000005180)=""/214, 0xd6}, {&(0x7f0000005280)=""/147, 0x93}], 0x2, &(0x7f0000005380)=""/183, 0xb7}, 0x4}, {{&(0x7f0000005440)=@ethernet={0x0, @link_local}, 0x80, &(0x7f0000005900)=[{&(0x7f00000054c0)=""/226, 0xe2}, {&(0x7f0000006400)=""/30, 0x1e}, {&(0x7f0000005600)=""/24, 0x18}, {&(0x7f0000005640)=""/29, 0x1d}, {&(0x7f0000005680)=""/123, 0x7b}, {&(0x7f0000005700)=""/78, 0x4e}, {&(0x7f0000006440)=""/70, 0x46}, {&(0x7f0000005800)=""/204, 0xcc}], 0x8, &(0x7f0000005980)=""/112, 0x70}, 0x4}, {{0x0, 0x0, &(0x7f0000005e80)=[{&(0x7f0000005a00)=""/172, 0xac}, {&(0x7f0000005ac0)=""/60, 0x3c}, {&(0x7f0000005b00)=""/247, 0xf7}, {&(0x7f0000005c00)=""/223, 0xdf}, {&(0x7f0000005d00)=""/154, 0x9a}, {&(0x7f0000005dc0)=""/28, 0x1c}, {&(0x7f0000005e00)=""/120, 0x78}], 0x7, &(0x7f0000005f00)=""/20, 0x14}}], 0x7, 0x20010002, &(0x7f0000006140)={r5, r6+10000000}) socketpair(0x31, 0x4, 0x7, &(0x7f0000006180)={0xffffffffffffffff}) r8 = syz_open_dev$vcsn(&(0x7f0000000040), 0x5, 0x240600) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r10 = socket$inet6(0xa, 0x3, 0x2c) connect$inet6(r10, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r10, 0x29, 0x7, &(0x7f0000000080)=0x2, 0x4) splice(r9, 0x0, r10, 0x0, 0x4ff9c, 0x0) ioctl$EVIOCGBITSW(r9, 0x80404525, &(0x7f0000006380)=""/54) bind$packet(r7, &(0x7f00000063c0)={0x11, 0x2, r4, 0x1, 0x0, 0x6, @multicast}, 0x14) sendmsg$nl_route(r8, &(0x7f00000062c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000006280)={&(0x7f0000006240)=@RTM_GETMDB={0x18, 0x56, 0x10, 0x70bd29, 0x25dfdbfc, {}, [""]}, 0x18}, 0x1, 0x0, 0x0, 0x45}, 0x50) ioctl$FS_IOC_GETVERSION(r7, 0x80087601, &(0x7f00000061c0)) write$evdev(r1, &(0x7f000004d000)=[{{}, 0x0, 0x400}], 0x18) splice(r8, &(0x7f0000006300)=0x5, r7, &(0x7f0000006340)=0x3, 0x9, 0x1) 14:48:22 executing program 5: clone(0x80910b00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) set_mempolicy(0x3, &(0x7f0000000040)=0xffffffff80000001, 0x400) gettid() r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, &(0x7f0000000080)=ANY=[@ANYBLOB="7549f8187a2a6e40594b4473692aef0dda6d1a46f2019ed7e86b1d711c76877056283bedab9579d2125c7cad3b1f28c963b3a626ef87b075574ff5612ccc80d8e14883ad2a8e6516a15c410ce005b2e841ebacd55a1365c685244ec3b66b003e7ec96ed005906d578130183c37"]) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x2, 0x3, 0x2d8, 0x190, 0x190, 0x95ffffff, 0x77, 0x93ffffff, 0x240, 0x240, 0x221, 0x240, 0x240, 0x3, 0x0, {[{{@uncond, 0x0, 0x130, 0x190, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "bdc74c01369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa6ecab6b1d2cc05e3182f64694d7d05fb8b8c8f56627a54f905d564eeeb8334f650ca0f3c44f7fda4d20a55050342ea85ecc8838e7088de33582f36a0a375bb7008adc297a5ece1bb2df53d17bef26bb6f800", 0x7f, 0x2}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0x9a020000]}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'veth0_to_batadv\x00', 'ip6gretap0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x338) 14:48:22 executing program 2: clone(0x80910b00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) set_mempolicy(0x3, &(0x7f0000000040), 0x0) gettid() r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x2, 0x3, 0x2d8, 0x190, 0x190, 0x95ffffff, 0x77, 0x93ffffff, 0x240, 0x240, 0x221, 0x240, 0x240, 0x3, 0x0, {[{{@uncond, 0x0, 0x130, 0x190, 0x0, {0x0, 0x4a}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "bdc74c01369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa6ecab6b1d2cc05e3182f64694d7d05fb8b8c8f56627a54f905d564eeeb8334f650ca0f3c44f7fda4d20a55050342ea85ecc8838e7088de33582f36a0a375bb7008adc297a5ece1bb2df53d17bef26bb6f800", 0x7f}}]}, @common=@SET={0x60}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'veth0_to_batadv\x00', 'ip6gretap0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x338) 14:48:22 executing program 3: getsockopt$inet_sctp_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000200)={0x0, 0x6, 0x5, 0xff00, 0x1, 0x2, 0x9, 0x0, {0x0, @in6={{0xa, 0x4e23, 0x700, @loopback}}, 0x5, 0x101, 0x10000, 0x7, 0x7}}, &(0x7f0000000080)=0xb0) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(0xffffffffffffffff, 0x84, 0x19, &(0x7f0000000100)={r0, 0x3}, 0x8) r1 = syz_io_uring_setup(0x2de5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000fe8000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0xb2, 0x0, 0x0, 0x0, 0x7401) getsockopt$inet_sctp_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000200)={0x0, 0x6, 0x5, 0xff00, 0x1, 0x2, 0x9, 0x0, {0x0, @in6={{0xa, 0x4e23, 0x700, @loopback}}, 0x5, 0x101, 0x10000, 0x7, 0x7}}, &(0x7f0000000080)=0xb0) (async) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(0xffffffffffffffff, 0x84, 0x19, &(0x7f0000000100)={r0, 0x3}, 0x8) (async) syz_io_uring_setup(0x2de5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000fe8000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000140)) (async) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) (async) io_uring_enter(r1, 0xb2, 0x0, 0x0, 0x0, 0x7401) (async) 14:48:22 executing program 4: r0 = socket$inet6(0xa, 0x400000000001, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) ftruncate(r1, 0x2007fff) close(r0) open(&(0x7f00000002c0)='./bus\x00', 0x14d842, 0x0) sendfile(r0, r1, 0x0, 0x201000) (fail_nth: 70) 14:48:22 executing program 2: clone(0x80910b00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) set_mempolicy(0x3, &(0x7f0000000040), 0x0) gettid() r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x2, 0x3, 0x2d8, 0x190, 0x190, 0x95ffffff, 0x77, 0x93ffffff, 0x240, 0x240, 0x221, 0x240, 0x240, 0x3, 0x0, {[{{@uncond, 0x0, 0x130, 0x190, 0x0, {0x0, 0x4c}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "bdc74c01369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa6ecab6b1d2cc05e3182f64694d7d05fb8b8c8f56627a54f905d564eeeb8334f650ca0f3c44f7fda4d20a55050342ea85ecc8838e7088de33582f36a0a375bb7008adc297a5ece1bb2df53d17bef26bb6f800", 0x7f}}]}, @common=@SET={0x60}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'veth0_to_batadv\x00', 'ip6gretap0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x338) [ 2832.267143][T26047] FAULT_INJECTION: forcing a failure. [ 2832.267143][T26047] name failslab, interval 1, probability 0, space 0, times 0 [ 2832.279843][T26047] CPU: 0 PID: 26047 Comm: syz-executor.4 Tainted: G W 5.16.0-rc6-syzkaller #0 [ 2832.290131][T26047] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2832.300225][T26047] Call Trace: [ 2832.303498][T26047] [ 2832.306429][T26047] dump_stack_lvl+0xd6/0x122 [ 2832.311048][T26047] dump_stack+0x11/0x1b 14:48:22 executing program 5: clone(0x80910b00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) set_mempolicy(0x3, &(0x7f0000000040)=0xffffffff80000001, 0x400) gettid() r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, &(0x7f0000000080)=ANY=[@ANYBLOB="7549f8187a2a6e40594b4473692aef0dda6d1a46f2019ed7e86b1d711c76877056283bedab9579d2125c7cad3b1f28c963b3a626ef87b075574ff5612ccc80d8e14883ad2a8e6516a15c410ce005b2e841ebacd55a1365c685244ec3b66b003e7ec96ed005906d578130183c37"]) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x2, 0x3, 0x2d8, 0x190, 0x190, 0x95ffffff, 0x77, 0x93ffffff, 0x240, 0x240, 0x221, 0x240, 0x240, 0x3, 0x0, {[{{@uncond, 0x0, 0x130, 0x190, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "bdc74c01369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa6ecab6b1d2cc05e3182f64694d7d05fb8b8c8f56627a54f905d564eeeb8334f650ca0f3c44f7fda4d20a55050342ea85ecc8838e7088de33582f36a0a375bb7008adc297a5ece1bb2df53d17bef26bb6f800", 0x7f, 0x2}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0x9bffffff]}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'veth0_to_batadv\x00', 'ip6gretap0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x338) 14:48:22 executing program 3: r0 = fsmount(0xffffffffffffffff, 0x1, 0x0) ioctl$SG_SET_RESERVED_SIZE(r0, 0x2275, &(0x7f0000000080)=0xff) r1 = syz_io_uring_setup(0x2de5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000fe8000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0xb2, 0x0, 0x0, 0x0, 0x7401) [ 2832.315258][T26047] should_fail+0x23c/0x250 [ 2832.319742][T26047] ? kmalloc_array+0x2d/0x40 [ 2832.324333][T26047] __should_failslab+0x81/0x90 [ 2832.329095][T26047] should_failslab+0x5/0x20 [ 2832.333598][T26047] __kmalloc+0x6f/0x370 [ 2832.337754][T26047] kmalloc_array+0x2d/0x40 [ 2832.342179][T26047] iter_file_splice_write+0xd5/0x790 [ 2832.347556][T26047] ? generic_file_read_iter+0x72/0x2a0 [ 2832.353038][T26047] ? iov_iter_pipe+0x100/0x150 [ 2832.357858][T26047] ? ext4_file_read_iter+0x7a/0x1f0 [ 2832.363057][T26047] ? generic_file_splice_read+0x2c9/0x330 [ 2832.368871][T26047] ? splice_from_pipe+0xd0/0xd0 [ 2832.373844][T26047] direct_splice_actor+0x80/0xa0 [ 2832.378858][T26047] splice_direct_to_actor+0x345/0x650 [ 2832.384235][T26047] ? do_splice_direct+0x190/0x190 [ 2832.389340][T26047] do_splice_direct+0x106/0x190 [ 2832.394264][T26047] do_sendfile+0x675/0xc40 [ 2832.398744][T26047] __x64_sys_sendfile64+0x102/0x140 [ 2832.404004][T26047] do_syscall_64+0x44/0xd0 [ 2832.408427][T26047] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2832.414384][T26047] RIP: 0033:0x7f2d29acae99 [ 2832.418797][T26047] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2832.438398][T26047] RSP: 002b:00007f2d28c41168 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 2832.446809][T26047] RAX: ffffffffffffffda RBX: 00007f2d29bddf60 RCX: 00007f2d29acae99 [ 2832.454777][T26047] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 14:48:22 executing program 2: clone(0x80910b00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) set_mempolicy(0x3, &(0x7f0000000040), 0x0) gettid() r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x2, 0x3, 0x2d8, 0x190, 0x190, 0x95ffffff, 0x77, 0x93ffffff, 0x240, 0x240, 0x221, 0x240, 0x240, 0x3, 0x0, {[{{@uncond, 0x0, 0x130, 0x190, 0x0, {0x0, 0x4d}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "bdc74c01369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa6ecab6b1d2cc05e3182f64694d7d05fb8b8c8f56627a54f905d564eeeb8334f650ca0f3c44f7fda4d20a55050342ea85ecc8838e7088de33582f36a0a375bb7008adc297a5ece1bb2df53d17bef26bb6f800", 0x7f}}]}, @common=@SET={0x60}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'veth0_to_batadv\x00', 'ip6gretap0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x338) [ 2832.462740][T26047] RBP: 00007f2d28c411d0 R08: 0000000000000000 R09: 0000000000000000 [ 2832.470708][T26047] R10: 0000000000201000 R11: 0000000000000246 R12: 0000000000000002 [ 2832.478689][T26047] R13: 00007ffcc1d93fdf R14: 00007f2d28c41300 R15: 0000000000022000 [ 2832.486683][T26047] 14:48:22 executing program 5: clone(0x80910b00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) set_mempolicy(0x3, &(0x7f0000000040)=0xffffffff80000001, 0x400) gettid() r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, &(0x7f0000000080)=ANY=[@ANYBLOB="7549f8187a2a6e40594b4473692aef0dda6d1a46f2019ed7e86b1d711c76877056283bedab9579d2125c7cad3b1f28c963b3a626ef87b075574ff5612ccc80d8e14883ad2a8e6516a15c410ce005b2e841ebacd55a1365c685244ec3b66b003e7ec96ed005906d578130183c37"]) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x2, 0x3, 0x2d8, 0x190, 0x190, 0x95ffffff, 0x77, 0x93ffffff, 0x240, 0x240, 0x221, 0x240, 0x240, 0x3, 0x0, {[{{@uncond, 0x0, 0x130, 0x190, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "bdc74c01369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa6ecab6b1d2cc05e3182f64694d7d05fb8b8c8f56627a54f905d564eeeb8334f650ca0f3c44f7fda4d20a55050342ea85ecc8838e7088de33582f36a0a375bb7008adc297a5ece1bb2df53d17bef26bb6f800", 0x7f, 0x2}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0x9c020000]}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'veth0_to_batadv\x00', 'ip6gretap0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x338) 14:48:22 executing program 4: r0 = socket$inet6(0xa, 0x400000000001, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) ftruncate(r1, 0x2007fff) close(r0) open(&(0x7f00000002c0)='./bus\x00', 0x14d842, 0x0) sendfile(r0, r1, 0x0, 0x201000) (fail_nth: 71) [ 2832.590363][T27406] FAULT_INJECTION: forcing a failure. [ 2832.590363][T27406] name failslab, interval 1, probability 0, space 0, times 0 [ 2832.603044][T27406] CPU: 0 PID: 27406 Comm: syz-executor.4 Tainted: G W 5.16.0-rc6-syzkaller #0 [ 2832.613286][T27406] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2832.623479][T27406] Call Trace: [ 2832.626744][T27406] [ 2832.629676][T27406] dump_stack_lvl+0xd6/0x122 [ 2832.634278][T27406] dump_stack+0x11/0x1b [ 2832.638485][T27406] should_fail+0x23c/0x250 [ 2832.642913][T27406] ? __iomap_dio_rw+0x143/0x1070 [ 2832.647857][T27406] __should_failslab+0x81/0x90 [ 2832.652613][T27406] should_failslab+0x5/0x20 [ 2832.657207][T27406] kmem_cache_alloc_trace+0x52/0x350 [ 2832.662494][T27406] __iomap_dio_rw+0x143/0x1070 [ 2832.667249][T27406] ? ext4_initxattrs+0x90/0x90 [ 2832.672101][T27406] ? __vfs_getxattr+0x264/0x280 [ 2832.676931][T27406] iomap_dio_rw+0x38/0x80 [ 2832.681242][T27406] ext4_file_write_iter+0x7eb/0xdc0 [ 2832.686431][T27406] ? filemap_read+0x1661/0x16d0 [ 2832.691326][T27406] do_iter_readv_writev+0x2de/0x380 [ 2832.696509][T27406] do_iter_write+0x192/0x5c0 [ 2832.701152][T27406] ? splice_from_pipe_next+0x34f/0x3b0 [ 2832.706634][T27406] ? kmalloc_array+0x2d/0x40 [ 2832.711223][T27406] vfs_iter_write+0x4c/0x70 [ 2832.715712][T27406] iter_file_splice_write+0x43a/0x790 [ 2832.721087][T27406] ? splice_from_pipe+0xd0/0xd0 [ 2832.725961][T27406] direct_splice_actor+0x80/0xa0 [ 2832.730878][T27406] splice_direct_to_actor+0x345/0x650 [ 2832.736281][T27406] ? do_splice_direct+0x190/0x190 [ 2832.741418][T27406] do_splice_direct+0x106/0x190 [ 2832.746249][T27406] do_sendfile+0x675/0xc40 [ 2832.750708][T27406] __x64_sys_sendfile64+0x102/0x140 [ 2832.756056][T27406] do_syscall_64+0x44/0xd0 [ 2832.760578][T27406] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2832.766449][T27406] RIP: 0033:0x7f2d29acae99 [ 2832.770869][T27406] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2832.790505][T27406] RSP: 002b:00007f2d28c41168 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 2832.798939][T27406] RAX: ffffffffffffffda RBX: 00007f2d29bddf60 RCX: 00007f2d29acae99 [ 2832.806933][T27406] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 2832.814914][T27406] RBP: 00007f2d28c411d0 R08: 0000000000000000 R09: 0000000000000000 [ 2832.822882][T27406] R10: 0000000000201000 R11: 0000000000000246 R12: 0000000000000002 [ 2832.830835][T27406] R13: 00007ffcc1d93fdf R14: 00007f2d28c41300 R15: 0000000000022000 [ 2832.838807][T27406] 14:48:23 executing program 1: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) ftruncate(r1, 0x2007fff) (async, rerun: 32) close(r0) (async, rerun: 32) open(&(0x7f00000002c0)='./bus\x00', 0x14d842, 0x0) (async) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, &(0x7f0000000080)=ANY=[], 0x2bb98205) (async) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r2, 0x4058534c, &(0x7f0000000000)={0x3, 0x7, 0x9, 0x80000001, 0x7, 0x1000}) (async) sendfile(r0, r1, 0x0, 0x201000) 14:48:23 executing program 3: r0 = fsmount(0xffffffffffffffff, 0x1, 0x0) ioctl$SG_SET_RESERVED_SIZE(r0, 0x2275, &(0x7f0000000080)=0xff) (async) r1 = syz_io_uring_setup(0x2de5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000fe8000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0xb2, 0x0, 0x0, 0x0, 0x7401) 14:48:23 executing program 2: clone(0x80910b00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) set_mempolicy(0x3, &(0x7f0000000040), 0x0) gettid() r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x2, 0x3, 0x2d8, 0x190, 0x190, 0x95ffffff, 0x77, 0x93ffffff, 0x240, 0x240, 0x221, 0x240, 0x240, 0x3, 0x0, {[{{@uncond, 0x0, 0x130, 0x190, 0x0, {0x0, 0x50}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "bdc74c01369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa6ecab6b1d2cc05e3182f64694d7d05fb8b8c8f56627a54f905d564eeeb8334f650ca0f3c44f7fda4d20a55050342ea85ecc8838e7088de33582f36a0a375bb7008adc297a5ece1bb2df53d17bef26bb6f800", 0x7f}}]}, @common=@SET={0x60}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'veth0_to_batadv\x00', 'ip6gretap0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x338) 14:48:23 executing program 4: r0 = socket$inet6(0xa, 0x400000000001, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) ftruncate(r1, 0x2007fff) close(r0) open(&(0x7f00000002c0)='./bus\x00', 0x14d842, 0x0) sendfile(r0, r1, 0x0, 0x201000) (fail_nth: 72) 14:48:23 executing program 5: clone(0x80910b00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) set_mempolicy(0x3, &(0x7f0000000040)=0xffffffff80000001, 0x400) gettid() r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, &(0x7f0000000080)=ANY=[@ANYBLOB="7549f8187a2a6e40594b4473692aef0dda6d1a46f2019ed7e86b1d711c76877056283bedab9579d2125c7cad3b1f28c963b3a626ef87b075574ff5612ccc80d8e14883ad2a8e6516a15c410ce005b2e841ebacd55a1365c685244ec3b66b003e7ec96ed005906d578130183c37"]) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x2, 0x3, 0x2d8, 0x190, 0x190, 0x95ffffff, 0x77, 0x93ffffff, 0x240, 0x240, 0x221, 0x240, 0x240, 0x3, 0x0, {[{{@uncond, 0x0, 0x130, 0x190, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "bdc74c01369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa6ecab6b1d2cc05e3182f64694d7d05fb8b8c8f56627a54f905d564eeeb8334f650ca0f3c44f7fda4d20a55050342ea85ecc8838e7088de33582f36a0a375bb7008adc297a5ece1bb2df53d17bef26bb6f800", 0x7f, 0x2}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0x9dffffff]}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'veth0_to_batadv\x00', 'ip6gretap0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x338) 14:48:23 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x2) r2 = socket$packet(0x11, 0xe03af5865097764d, 0x300) r3 = accept$packet(r2, &(0x7f0000000080)={0x11, 0x0, 0x0}, &(0x7f0000006200)=0x14) clock_gettime(0x0, &(0x7f0000006100)={0x0, 0x0}) recvmmsg(r3, &(0x7f0000005f40)=[{{0x0, 0x0, &(0x7f0000001440)=[{&(0x7f0000000100)=""/138, 0x8a}, {&(0x7f0000000200)=""/137, 0x89}, {&(0x7f00000002c0)=""/76, 0x4c}, {&(0x7f0000000340)=""/19, 0x13}, {&(0x7f0000000380)=""/30, 0x1e}, {&(0x7f00000003c0)=""/50, 0x42}, {&(0x7f0000000440)=""/4096, 0x1000}], 0x7, &(0x7f00000074c0)=""/178, 0xa3}, 0xf14}, {{&(0x7f0000001580)=@nl=@unspec, 0x80, &(0x7f00000019c0)=[{&(0x7f0000001600)=""/177, 0xb1}, {&(0x7f00000055c0)=""/23, 0xd}, {&(0x7f0000001700)=""/222, 0xde}, {&(0x7f0000001800)=""/138, 0x8a}, {&(0x7f00000018c0)=""/102, 0x66}, {&(0x7f0000001940)=""/105, 0x69}, {&(0x7f00000064c0)=""/4096}], 0x6, &(0x7f0000005780)=""/109, 0x63}, 0x2}, {{&(0x7f0000001ac0)=@tipc=@name, 0x80, &(0x7f0000003c80)=[{&(0x7f0000001b40)=""/4096, 0x1000}, {&(0x7f00000016c0)=""/56, 0x32}, {&(0x7f0000002b80)=""/21, 0x15}, {&(0x7f0000002bc0)=""/189, 0xbd}, {&(0x7f0000002c80)=""/4096, 0xffffffffffffffc3}], 0x5, &(0x7f0000003d00)=""/4096, 0x1000}, 0x1}, {{&(0x7f0000004d00)=@l2tp6={0xa, 0x0, 0x0, @initdev}, 0x80, &(0x7f0000004fc0)=[{&(0x7f0000004d80)=""/74, 0x4a}, {&(0x7f0000004e00)=""/48, 0x30}, {&(0x7f0000004e40)=""/222, 0xde}, {&(0x7f0000004f40)=""/57, 0x39}, {&(0x7f0000004f80)=""/22, 0x16}], 0x5, &(0x7f0000005040)=""/163, 0xa3}, 0x15}, {{&(0x7f0000005100)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000005340)=[{&(0x7f0000005180)=""/214, 0xd6}, {&(0x7f0000005280)=""/147, 0x93}], 0x2, &(0x7f0000005380)=""/183, 0xb7}, 0x4}, {{&(0x7f0000005440)=@ethernet={0x0, @link_local}, 0x80, &(0x7f0000005900)=[{&(0x7f00000054c0)=""/226, 0xe2}, {&(0x7f0000006400)=""/30, 0x1e}, {&(0x7f0000005600)=""/24, 0x18}, {&(0x7f0000005640)=""/29, 0x1d}, {&(0x7f0000005680)=""/123, 0x7b}, {&(0x7f0000005700)=""/78, 0x4e}, {&(0x7f0000006440)=""/70, 0x46}, {&(0x7f0000005800)=""/204, 0xcc}], 0x8, &(0x7f0000005980)=""/112, 0x70}, 0x4}, {{0x0, 0x0, &(0x7f0000005e80)=[{&(0x7f0000005a00)=""/172, 0xac}, {&(0x7f0000005ac0)=""/60, 0x3c}, {&(0x7f0000005b00)=""/247, 0xf7}, {&(0x7f0000005c00)=""/223, 0xdf}, {&(0x7f0000005d00)=""/154, 0x9a}, {&(0x7f0000005dc0)=""/28, 0x1c}, {&(0x7f0000005e00)=""/120, 0x78}], 0x7, &(0x7f0000005f00)=""/20, 0x14}}], 0x7, 0x20010002, &(0x7f0000006140)={r5, r6+10000000}) socketpair(0x31, 0x4, 0x7, &(0x7f0000006180)={0xffffffffffffffff}) r8 = syz_open_dev$vcsn(&(0x7f0000000040), 0x5, 0x240600) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r10 = socket$inet6(0xa, 0x3, 0x2c) connect$inet6(r10, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r10, 0x29, 0x7, &(0x7f0000000080)=0x2, 0x4) splice(r9, 0x0, r10, 0x0, 0x4ff9c, 0x0) ioctl$EVIOCGBITSW(r9, 0x80404525, &(0x7f0000006380)=""/54) bind$packet(r7, &(0x7f00000063c0)={0x11, 0x2, r4, 0x1, 0x0, 0x6, @multicast}, 0x14) sendmsg$nl_route(r8, &(0x7f00000062c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000006280)={&(0x7f0000006240)=@RTM_GETMDB={0x18, 0x56, 0x10, 0x70bd29, 0x25dfdbfc, {}, [""]}, 0x18}, 0x1, 0x0, 0x0, 0x45}, 0x50) ioctl$FS_IOC_GETVERSION(r7, 0x80087601, &(0x7f00000061c0)) write$evdev(r1, &(0x7f000004d000)=[{{}, 0x0, 0x400}], 0x18) splice(r8, &(0x7f0000006300)=0x5, r7, &(0x7f0000006340)=0x3, 0x9, 0x1) openat(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/self/exe\x00', 0x0, 0x0) (async) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) (async) syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x2) (async) socket$packet(0x11, 0xe03af5865097764d, 0x300) (async) accept$packet(r2, &(0x7f0000000080), &(0x7f0000006200)=0x14) (async) clock_gettime(0x0, &(0x7f0000006100)) (async) recvmmsg(r3, &(0x7f0000005f40)=[{{0x0, 0x0, &(0x7f0000001440)=[{&(0x7f0000000100)=""/138, 0x8a}, {&(0x7f0000000200)=""/137, 0x89}, {&(0x7f00000002c0)=""/76, 0x4c}, {&(0x7f0000000340)=""/19, 0x13}, {&(0x7f0000000380)=""/30, 0x1e}, {&(0x7f00000003c0)=""/50, 0x42}, {&(0x7f0000000440)=""/4096, 0x1000}], 0x7, &(0x7f00000074c0)=""/178, 0xa3}, 0xf14}, {{&(0x7f0000001580)=@nl=@unspec, 0x80, &(0x7f00000019c0)=[{&(0x7f0000001600)=""/177, 0xb1}, {&(0x7f00000055c0)=""/23, 0xd}, {&(0x7f0000001700)=""/222, 0xde}, {&(0x7f0000001800)=""/138, 0x8a}, {&(0x7f00000018c0)=""/102, 0x66}, {&(0x7f0000001940)=""/105, 0x69}, {&(0x7f00000064c0)=""/4096}], 0x6, &(0x7f0000005780)=""/109, 0x63}, 0x2}, {{&(0x7f0000001ac0)=@tipc=@name, 0x80, &(0x7f0000003c80)=[{&(0x7f0000001b40)=""/4096, 0x1000}, {&(0x7f00000016c0)=""/56, 0x32}, {&(0x7f0000002b80)=""/21, 0x15}, {&(0x7f0000002bc0)=""/189, 0xbd}, {&(0x7f0000002c80)=""/4096, 0xffffffffffffffc3}], 0x5, &(0x7f0000003d00)=""/4096, 0x1000}, 0x1}, {{&(0x7f0000004d00)=@l2tp6={0xa, 0x0, 0x0, @initdev}, 0x80, &(0x7f0000004fc0)=[{&(0x7f0000004d80)=""/74, 0x4a}, {&(0x7f0000004e00)=""/48, 0x30}, {&(0x7f0000004e40)=""/222, 0xde}, {&(0x7f0000004f40)=""/57, 0x39}, {&(0x7f0000004f80)=""/22, 0x16}], 0x5, &(0x7f0000005040)=""/163, 0xa3}, 0x15}, {{&(0x7f0000005100)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000005340)=[{&(0x7f0000005180)=""/214, 0xd6}, {&(0x7f0000005280)=""/147, 0x93}], 0x2, &(0x7f0000005380)=""/183, 0xb7}, 0x4}, {{&(0x7f0000005440)=@ethernet={0x0, @link_local}, 0x80, &(0x7f0000005900)=[{&(0x7f00000054c0)=""/226, 0xe2}, {&(0x7f0000006400)=""/30, 0x1e}, {&(0x7f0000005600)=""/24, 0x18}, {&(0x7f0000005640)=""/29, 0x1d}, {&(0x7f0000005680)=""/123, 0x7b}, {&(0x7f0000005700)=""/78, 0x4e}, {&(0x7f0000006440)=""/70, 0x46}, {&(0x7f0000005800)=""/204, 0xcc}], 0x8, &(0x7f0000005980)=""/112, 0x70}, 0x4}, {{0x0, 0x0, &(0x7f0000005e80)=[{&(0x7f0000005a00)=""/172, 0xac}, {&(0x7f0000005ac0)=""/60, 0x3c}, {&(0x7f0000005b00)=""/247, 0xf7}, {&(0x7f0000005c00)=""/223, 0xdf}, {&(0x7f0000005d00)=""/154, 0x9a}, {&(0x7f0000005dc0)=""/28, 0x1c}, {&(0x7f0000005e00)=""/120, 0x78}], 0x7, &(0x7f0000005f00)=""/20, 0x14}}], 0x7, 0x20010002, &(0x7f0000006140)={r5, r6+10000000}) (async) socketpair(0x31, 0x4, 0x7, &(0x7f0000006180)) (async) syz_open_dev$vcsn(&(0x7f0000000040), 0x5, 0x240600) (async) pipe(&(0x7f0000000180)) (async) socket$inet6(0xa, 0x3, 0x2c) (async) connect$inet6(r10, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) (async) setsockopt$inet6_int(r10, 0x29, 0x7, &(0x7f0000000080)=0x2, 0x4) (async) splice(r9, 0x0, r10, 0x0, 0x4ff9c, 0x0) (async) ioctl$EVIOCGBITSW(r9, 0x80404525, &(0x7f0000006380)=""/54) (async) bind$packet(r7, &(0x7f00000063c0)={0x11, 0x2, r4, 0x1, 0x0, 0x6, @multicast}, 0x14) (async) sendmsg$nl_route(r8, &(0x7f00000062c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000006280)={&(0x7f0000006240)=@RTM_GETMDB={0x18, 0x56, 0x10, 0x70bd29, 0x25dfdbfc, {}, [""]}, 0x18}, 0x1, 0x0, 0x0, 0x45}, 0x50) (async) ioctl$FS_IOC_GETVERSION(r7, 0x80087601, &(0x7f00000061c0)) (async) write$evdev(r1, &(0x7f000004d000)=[{{}, 0x0, 0x400}], 0x18) (async) splice(r8, &(0x7f0000006300)=0x5, r7, &(0x7f0000006340)=0x3, 0x9, 0x1) (async) [ 2833.128629][T27408] FAULT_INJECTION: forcing a failure. [ 2833.128629][T27408] name failslab, interval 1, probability 0, space 0, times 0 [ 2833.141309][T27408] CPU: 0 PID: 27408 Comm: syz-executor.4 Tainted: G W 5.16.0-rc6-syzkaller #0 [ 2833.151474][T27408] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2833.161536][T27408] Call Trace: [ 2833.164814][T27408] [ 2833.167742][T27408] dump_stack_lvl+0xd6/0x122 [ 2833.172413][T27408] dump_stack+0x11/0x1b 14:48:23 executing program 3: r0 = fsmount(0xffffffffffffffff, 0x1, 0x0) ioctl$SG_SET_RESERVED_SIZE(r0, 0x2275, &(0x7f0000000080)=0xff) r1 = syz_io_uring_setup(0x2de5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000fe8000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0xb2, 0x0, 0x0, 0x0, 0x7401) fsmount(0xffffffffffffffff, 0x1, 0x0) (async) ioctl$SG_SET_RESERVED_SIZE(r0, 0x2275, &(0x7f0000000080)=0xff) (async) syz_io_uring_setup(0x2de5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000fe8000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000140)) (async) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) (async) io_uring_enter(r1, 0xb2, 0x0, 0x0, 0x0, 0x7401) (async) 14:48:23 executing program 2: clone(0x80910b00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) set_mempolicy(0x3, &(0x7f0000000040), 0x0) gettid() r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x2, 0x3, 0x2d8, 0x190, 0x190, 0x95ffffff, 0x77, 0x93ffffff, 0x240, 0x240, 0x221, 0x240, 0x240, 0x3, 0x0, {[{{@uncond, 0x0, 0x130, 0x190, 0x0, {0x0, 0x54}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "bdc74c01369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa6ecab6b1d2cc05e3182f64694d7d05fb8b8c8f56627a54f905d564eeeb8334f650ca0f3c44f7fda4d20a55050342ea85ecc8838e7088de33582f36a0a375bb7008adc297a5ece1bb2df53d17bef26bb6f800", 0x7f}}]}, @common=@SET={0x60}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'veth0_to_batadv\x00', 'ip6gretap0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x338) 14:48:23 executing program 5: clone(0x80910b00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) set_mempolicy(0x3, &(0x7f0000000040)=0xffffffff80000001, 0x400) gettid() r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, &(0x7f0000000080)=ANY=[@ANYBLOB="7549f8187a2a6e40594b4473692aef0dda6d1a46f2019ed7e86b1d711c76877056283bedab9579d2125c7cad3b1f28c963b3a626ef87b075574ff5612ccc80d8e14883ad2a8e6516a15c410ce005b2e841ebacd55a1365c685244ec3b66b003e7ec96ed005906d578130183c37"]) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x2, 0x3, 0x2d8, 0x190, 0x190, 0x95ffffff, 0x77, 0x93ffffff, 0x240, 0x240, 0x221, 0x240, 0x240, 0x3, 0x0, {[{{@uncond, 0x0, 0x130, 0x190, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "bdc74c01369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa6ecab6b1d2cc05e3182f64694d7d05fb8b8c8f56627a54f905d564eeeb8334f650ca0f3c44f7fda4d20a55050342ea85ecc8838e7088de33582f36a0a375bb7008adc297a5ece1bb2df53d17bef26bb6f800", 0x7f, 0x2}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0xa0000000]}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'veth0_to_batadv\x00', 'ip6gretap0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x338) [ 2833.176577][T27408] should_fail+0x23c/0x250 [ 2833.181199][T27408] ? __iomap_dio_rw+0x143/0x1070 [ 2833.186171][T27408] __should_failslab+0x81/0x90 [ 2833.190953][T27408] should_failslab+0x5/0x20 [ 2833.195466][T27408] kmem_cache_alloc_trace+0x52/0x350 [ 2833.200822][T27408] __iomap_dio_rw+0x143/0x1070 [ 2833.205594][T27408] ? kmem_cache_free+0x65/0x110 [ 2833.210537][T27408] iomap_dio_rw+0x38/0x80 [ 2833.214934][T27408] ext4_file_write_iter+0x7eb/0xdc0 [ 2833.220189][T27408] ? save_fpregs_to_fpstate+0xf5/0x140 [ 2833.225652][T27408] do_iter_readv_writev+0x2de/0x380 [ 2833.230850][T27408] do_iter_write+0x192/0x5c0 [ 2833.235490][T27408] ? splice_from_pipe_next+0x34f/0x3b0 [ 2833.241067][T27408] ? kmalloc_array+0x2d/0x40 [ 2833.245670][T27408] vfs_iter_write+0x4c/0x70 [ 2833.250258][T27408] iter_file_splice_write+0x43a/0x790 [ 2833.255716][T27408] ? splice_from_pipe+0xd0/0xd0 [ 2833.260573][T27408] direct_splice_actor+0x80/0xa0 [ 2833.265555][T27408] splice_direct_to_actor+0x345/0x650 [ 2833.270936][T27408] ? do_splice_direct+0x190/0x190 14:48:23 executing program 3: r0 = syz_io_uring_setup(0x2de5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000fe8000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x9}, 0x0) io_uring_enter(r0, 0xb2, 0x0, 0x0, 0x0, 0x7401) 14:48:23 executing program 3: r0 = syz_io_uring_setup(0x2de5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000fe8000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x9}, 0x0) (async) io_uring_enter(r0, 0xb2, 0x0, 0x0, 0x0, 0x7401) [ 2833.275963][T27408] do_splice_direct+0x106/0x190 [ 2833.280937][T27408] do_sendfile+0x675/0xc40 [ 2833.285394][T27408] __x64_sys_sendfile64+0x102/0x140 [ 2833.290596][T27408] do_syscall_64+0x44/0xd0 [ 2833.295035][T27408] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2833.301105][T27408] RIP: 0033:0x7f2d29acae99 [ 2833.305530][T27408] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 14:48:23 executing program 3: r0 = syz_io_uring_setup(0x2de5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000fe8000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x9}, 0x0) (async) io_uring_enter(r0, 0xb2, 0x0, 0x0, 0x0, 0x7401) [ 2833.325145][T27408] RSP: 002b:00007f2d28c41168 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 2833.333566][T27408] RAX: ffffffffffffffda RBX: 00007f2d29bddf60 RCX: 00007f2d29acae99 [ 2833.341561][T27408] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 2833.349573][T27408] RBP: 00007f2d28c411d0 R08: 0000000000000000 R09: 0000000000000000 [ 2833.357555][T27408] R10: 0000000000201000 R11: 0000000000000246 R12: 0000000000000002 [ 2833.365537][T27408] R13: 00007ffcc1d93fdf R14: 00007f2d28c41300 R15: 0000000000022000 [ 2833.373519][T27408] 14:48:24 executing program 1: r0 = socket$unix(0x1, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0xee01, r1, 0xffffffffffffffff) syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000040)='./bus\x00', 0x9, 0x1, &(0x7f0000000140)=[{&(0x7f0000000080)="b0ba1b38efd1f967a05da56f955a837a31fb5cd49644a9b4d396adc54d3f4b9a12204753d0eb25b8d10d187e7879a72dd66127ddbafb5840664d3f02d79b23ab994e34209e446742b27e440b1dd22a4a53f9485bc0194f2affc3f5c632d2b295a09127ae1bba2d7d1ca75bf29a48075f257a5293101a3c65d7d9ce8ea85c16eb28e29b14e9724fe4310bba16f54671c8ddbe63c40c3f8941a7b02efa5c52a529983657cf63ba", 0xa6, 0xffffffffffffff80}], 0x10808d, &(0x7f0000000180)={[{@dots}, {@nodots}, {@dots}, {@nodots}, {@dots}], [{@permit_directio}, {@uid_gt={'uid>', r1}}]}) r2 = socket$inet6(0xa, 0x400000000001, 0x0) r3 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) ftruncate(r3, 0x2007fff) close(r2) open(&(0x7f00000002c0)='./bus\x00', 0x14d842, 0x0) sendfile(r2, r3, 0x0, 0x201000) 14:48:24 executing program 2: clone(0x80910b00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) set_mempolicy(0x3, &(0x7f0000000040), 0x0) gettid() r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x2, 0x3, 0x2d8, 0x190, 0x190, 0x95ffffff, 0x77, 0x93ffffff, 0x240, 0x240, 0x221, 0x240, 0x240, 0x3, 0x0, {[{{@uncond, 0x0, 0x130, 0x190, 0x0, {0x0, 0x55}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "bdc74c01369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa6ecab6b1d2cc05e3182f64694d7d05fb8b8c8f56627a54f905d564eeeb8334f650ca0f3c44f7fda4d20a55050342ea85ecc8838e7088de33582f36a0a375bb7008adc297a5ece1bb2df53d17bef26bb6f800", 0x7f}}]}, @common=@SET={0x60}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'veth0_to_batadv\x00', 'ip6gretap0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x338) 14:48:24 executing program 5: clone(0x80910b00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) set_mempolicy(0x3, &(0x7f0000000040)=0xffffffff80000001, 0x400) gettid() r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, &(0x7f0000000080)=ANY=[@ANYBLOB="7549f8187a2a6e40594b4473692aef0dda6d1a46f2019ed7e86b1d711c76877056283bedab9579d2125c7cad3b1f28c963b3a626ef87b075574ff5612ccc80d8e14883ad2a8e6516a15c410ce005b2e841ebacd55a1365c685244ec3b66b003e7ec96ed005906d578130183c37"]) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x2, 0x3, 0x2d8, 0x190, 0x190, 0x95ffffff, 0x77, 0x93ffffff, 0x240, 0x240, 0x221, 0x240, 0x240, 0x3, 0x0, {[{{@uncond, 0x0, 0x130, 0x190, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "bdc74c01369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa6ecab6b1d2cc05e3182f64694d7d05fb8b8c8f56627a54f905d564eeeb8334f650ca0f3c44f7fda4d20a55050342ea85ecc8838e7088de33582f36a0a375bb7008adc297a5ece1bb2df53d17bef26bb6f800", 0x7f, 0x2}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0xa0ffffff]}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'veth0_to_batadv\x00', 'ip6gretap0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x338) 14:48:24 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) (async) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x2) (async) r2 = socket$packet(0x11, 0xe03af5865097764d, 0x300) r3 = accept$packet(r2, &(0x7f0000000080)={0x11, 0x0, 0x0}, &(0x7f0000006200)=0x14) (async) clock_gettime(0x0, &(0x7f0000006100)={0x0, 0x0}) recvmmsg(r3, &(0x7f0000005f40)=[{{0x0, 0x0, &(0x7f0000001440)=[{&(0x7f0000000100)=""/138, 0x8a}, {&(0x7f0000000200)=""/137, 0x89}, {&(0x7f00000002c0)=""/76, 0x4c}, {&(0x7f0000000340)=""/19, 0x13}, {&(0x7f0000000380)=""/30, 0x1e}, {&(0x7f00000003c0)=""/50, 0x42}, {&(0x7f0000000440)=""/4096, 0x1000}], 0x7, &(0x7f00000074c0)=""/178, 0xa3}, 0xf14}, {{&(0x7f0000001580)=@nl=@unspec, 0x80, &(0x7f00000019c0)=[{&(0x7f0000001600)=""/177, 0xb1}, {&(0x7f00000055c0)=""/23, 0xd}, {&(0x7f0000001700)=""/222, 0xde}, {&(0x7f0000001800)=""/138, 0x8a}, {&(0x7f00000018c0)=""/102, 0x66}, {&(0x7f0000001940)=""/105, 0x69}, {&(0x7f00000064c0)=""/4096}], 0x6, &(0x7f0000005780)=""/109, 0x63}, 0x2}, {{&(0x7f0000001ac0)=@tipc=@name, 0x80, &(0x7f0000003c80)=[{&(0x7f0000001b40)=""/4096, 0x1000}, {&(0x7f00000016c0)=""/56, 0x32}, {&(0x7f0000002b80)=""/21, 0x15}, {&(0x7f0000002bc0)=""/189, 0xbd}, {&(0x7f0000002c80)=""/4096, 0xffffffffffffffc3}], 0x5, &(0x7f0000003d00)=""/4096, 0x1000}, 0x1}, {{&(0x7f0000004d00)=@l2tp6={0xa, 0x0, 0x0, @initdev}, 0x80, &(0x7f0000004fc0)=[{&(0x7f0000004d80)=""/74, 0x4a}, {&(0x7f0000004e00)=""/48, 0x30}, {&(0x7f0000004e40)=""/222, 0xde}, {&(0x7f0000004f40)=""/57, 0x39}, {&(0x7f0000004f80)=""/22, 0x16}], 0x5, &(0x7f0000005040)=""/163, 0xa3}, 0x15}, {{&(0x7f0000005100)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000005340)=[{&(0x7f0000005180)=""/214, 0xd6}, {&(0x7f0000005280)=""/147, 0x93}], 0x2, &(0x7f0000005380)=""/183, 0xb7}, 0x4}, {{&(0x7f0000005440)=@ethernet={0x0, @link_local}, 0x80, &(0x7f0000005900)=[{&(0x7f00000054c0)=""/226, 0xe2}, {&(0x7f0000006400)=""/30, 0x1e}, {&(0x7f0000005600)=""/24, 0x18}, {&(0x7f0000005640)=""/29, 0x1d}, {&(0x7f0000005680)=""/123, 0x7b}, {&(0x7f0000005700)=""/78, 0x4e}, {&(0x7f0000006440)=""/70, 0x46}, {&(0x7f0000005800)=""/204, 0xcc}], 0x8, &(0x7f0000005980)=""/112, 0x70}, 0x4}, {{0x0, 0x0, &(0x7f0000005e80)=[{&(0x7f0000005a00)=""/172, 0xac}, {&(0x7f0000005ac0)=""/60, 0x3c}, {&(0x7f0000005b00)=""/247, 0xf7}, {&(0x7f0000005c00)=""/223, 0xdf}, {&(0x7f0000005d00)=""/154, 0x9a}, {&(0x7f0000005dc0)=""/28, 0x1c}, {&(0x7f0000005e00)=""/120, 0x78}], 0x7, &(0x7f0000005f00)=""/20, 0x14}}], 0x7, 0x20010002, &(0x7f0000006140)={r5, r6+10000000}) (async) socketpair(0x31, 0x4, 0x7, &(0x7f0000006180)={0xffffffffffffffff}) (async) r8 = syz_open_dev$vcsn(&(0x7f0000000040), 0x5, 0x240600) (async) pipe(&(0x7f0000000180)={0xffffffffffffffff}) (async) r10 = socket$inet6(0xa, 0x3, 0x2c) connect$inet6(r10, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) (async) setsockopt$inet6_int(r10, 0x29, 0x7, &(0x7f0000000080)=0x2, 0x4) (async) splice(r9, 0x0, r10, 0x0, 0x4ff9c, 0x0) ioctl$EVIOCGBITSW(r9, 0x80404525, &(0x7f0000006380)=""/54) bind$packet(r7, &(0x7f00000063c0)={0x11, 0x2, r4, 0x1, 0x0, 0x6, @multicast}, 0x14) (async) sendmsg$nl_route(r8, &(0x7f00000062c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000006280)={&(0x7f0000006240)=@RTM_GETMDB={0x18, 0x56, 0x10, 0x70bd29, 0x25dfdbfc, {}, [""]}, 0x18}, 0x1, 0x0, 0x0, 0x45}, 0x50) (async) ioctl$FS_IOC_GETVERSION(r7, 0x80087601, &(0x7f00000061c0)) (async) write$evdev(r1, &(0x7f000004d000)=[{{}, 0x0, 0x400}], 0x18) (async) splice(r8, &(0x7f0000006300)=0x5, r7, &(0x7f0000006340)=0x3, 0x9, 0x1) 14:48:24 executing program 4: r0 = socket$inet6(0xa, 0x400000000001, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) ftruncate(r1, 0x2007fff) close(r0) open(&(0x7f00000002c0)='./bus\x00', 0x14d842, 0x0) sendfile(r0, r1, 0x0, 0x201000) (fail_nth: 73) 14:48:24 executing program 3: r0 = syz_io_uring_setup(0x2de5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000fe8000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0xb2, 0x0, 0x0, 0x0, 0x7401) 14:48:24 executing program 2: clone(0x80910b00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) set_mempolicy(0x3, &(0x7f0000000040), 0x0) gettid() r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x2, 0x3, 0x2d8, 0x190, 0x190, 0x95ffffff, 0x77, 0x93ffffff, 0x240, 0x240, 0x221, 0x240, 0x240, 0x3, 0x0, {[{{@uncond, 0x0, 0x130, 0x190, 0x0, {0x0, 0x56}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "bdc74c01369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa6ecab6b1d2cc05e3182f64694d7d05fb8b8c8f56627a54f905d564eeeb8334f650ca0f3c44f7fda4d20a55050342ea85ecc8838e7088de33582f36a0a375bb7008adc297a5ece1bb2df53d17bef26bb6f800", 0x7f}}]}, @common=@SET={0x60}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'veth0_to_batadv\x00', 'ip6gretap0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x338) 14:48:24 executing program 5: clone(0x80910b00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) set_mempolicy(0x3, &(0x7f0000000040)=0xffffffff80000001, 0x400) gettid() r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, &(0x7f0000000080)=ANY=[@ANYBLOB="7549f8187a2a6e40594b4473692aef0dda6d1a46f2019ed7e86b1d711c76877056283bedab9579d2125c7cad3b1f28c963b3a626ef87b075574ff5612ccc80d8e14883ad2a8e6516a15c410ce005b2e841ebacd55a1365c685244ec3b66b003e7ec96ed005906d578130183c37"]) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x2, 0x3, 0x2d8, 0x190, 0x190, 0x95ffffff, 0x77, 0x93ffffff, 0x240, 0x240, 0x221, 0x240, 0x240, 0x3, 0x0, {[{{@uncond, 0x0, 0x130, 0x190, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "bdc74c01369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa6ecab6b1d2cc05e3182f64694d7d05fb8b8c8f56627a54f905d564eeeb8334f650ca0f3c44f7fda4d20a55050342ea85ecc8838e7088de33582f36a0a375bb7008adc297a5ece1bb2df53d17bef26bb6f800", 0x7f, 0x2}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0xa1000000]}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'veth0_to_batadv\x00', 'ip6gretap0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x338) [ 2834.013241][T28287] FAULT_INJECTION: forcing a failure. [ 2834.013241][T28287] name failslab, interval 1, probability 0, space 0, times 0 [ 2834.025928][T28287] CPU: 0 PID: 28287 Comm: syz-executor.4 Tainted: G W 5.16.0-rc6-syzkaller #0 [ 2834.036107][T28287] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2834.046166][T28287] Call Trace: [ 2834.049516][T28287] [ 2834.052465][T28287] dump_stack_lvl+0xd6/0x122 [ 2834.057061][T28287] dump_stack+0x11/0x1b 14:48:24 executing program 5: clone(0x80910b00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) set_mempolicy(0x3, &(0x7f0000000040)=0xffffffff80000001, 0x400) gettid() r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, &(0x7f0000000080)=ANY=[@ANYBLOB="7549f8187a2a6e40594b4473692aef0dda6d1a46f2019ed7e86b1d711c76877056283bedab9579d2125c7cad3b1f28c963b3a626ef87b075574ff5612ccc80d8e14883ad2a8e6516a15c410ce005b2e841ebacd55a1365c685244ec3b66b003e7ec96ed005906d578130183c37"]) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x2, 0x3, 0x2d8, 0x190, 0x190, 0x95ffffff, 0x77, 0x93ffffff, 0x240, 0x240, 0x221, 0x240, 0x240, 0x3, 0x0, {[{{@uncond, 0x0, 0x130, 0x190, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "bdc74c01369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa6ecab6b1d2cc05e3182f64694d7d05fb8b8c8f56627a54f905d564eeeb8334f650ca0f3c44f7fda4d20a55050342ea85ecc8838e7088de33582f36a0a375bb7008adc297a5ece1bb2df53d17bef26bb6f800", 0x7f, 0x2}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0xa3ffffff]}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'veth0_to_batadv\x00', 'ip6gretap0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x338) 14:48:24 executing program 2: clone(0x80910b00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) set_mempolicy(0x3, &(0x7f0000000040), 0x0) gettid() r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x2, 0x3, 0x2d8, 0x190, 0x190, 0x95ffffff, 0x77, 0x93ffffff, 0x240, 0x240, 0x221, 0x240, 0x240, 0x3, 0x0, {[{{@uncond, 0x0, 0x130, 0x190, 0x0, {0x0, 0x58}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "bdc74c01369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa6ecab6b1d2cc05e3182f64694d7d05fb8b8c8f56627a54f905d564eeeb8334f650ca0f3c44f7fda4d20a55050342ea85ecc8838e7088de33582f36a0a375bb7008adc297a5ece1bb2df53d17bef26bb6f800", 0x7f}}]}, @common=@SET={0x60}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'veth0_to_batadv\x00', 'ip6gretap0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x338) [ 2834.061294][T28287] should_fail+0x23c/0x250 [ 2834.065754][T28287] ? kcalloc+0x32/0x50 [ 2834.069932][T28287] __should_failslab+0x81/0x90 [ 2834.074752][T28287] should_failslab+0x5/0x20 [ 2834.079263][T28287] __kmalloc+0x6f/0x370 [ 2834.083425][T28287] kcalloc+0x32/0x50 [ 2834.087414][T28287] ext4_find_extent+0x1d5/0x660 [ 2834.092317][T28287] ext4_ext_map_blocks+0xee/0x1950 [ 2834.097469][T28287] ? _raw_read_unlock+0x13/0x30 [ 2834.102343][T28287] ext4_map_blocks+0x55e/0xb60 [ 2834.107112][T28287] ext4_iomap_begin+0x40e/0x550 14:48:24 executing program 2: clone(0x80910b00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) set_mempolicy(0x3, &(0x7f0000000040), 0x0) gettid() r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x2, 0x3, 0x2d8, 0x190, 0x190, 0x95ffffff, 0x77, 0x93ffffff, 0x240, 0x240, 0x221, 0x240, 0x240, 0x3, 0x0, {[{{@uncond, 0x0, 0x130, 0x190, 0x0, {0x0, 0x59}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "bdc74c01369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa6ecab6b1d2cc05e3182f64694d7d05fb8b8c8f56627a54f905d564eeeb8334f650ca0f3c44f7fda4d20a55050342ea85ecc8838e7088de33582f36a0a375bb7008adc297a5ece1bb2df53d17bef26bb6f800", 0x7f}}]}, @common=@SET={0x60}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'veth0_to_batadv\x00', 'ip6gretap0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x338) 14:48:24 executing program 5: clone(0x80910b00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) set_mempolicy(0x3, &(0x7f0000000040)=0xffffffff80000001, 0x400) gettid() r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, &(0x7f0000000080)=ANY=[@ANYBLOB="7549f8187a2a6e40594b4473692aef0dda6d1a46f2019ed7e86b1d711c76877056283bedab9579d2125c7cad3b1f28c963b3a626ef87b075574ff5612ccc80d8e14883ad2a8e6516a15c410ce005b2e841ebacd55a1365c685244ec3b66b003e7ec96ed005906d578130183c37"]) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x2, 0x3, 0x2d8, 0x190, 0x190, 0x95ffffff, 0x77, 0x93ffffff, 0x240, 0x240, 0x221, 0x240, 0x240, 0x3, 0x0, {[{{@uncond, 0x0, 0x130, 0x190, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "bdc74c01369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa6ecab6b1d2cc05e3182f64694d7d05fb8b8c8f56627a54f905d564eeeb8334f650ca0f3c44f7fda4d20a55050342ea85ecc8838e7088de33582f36a0a375bb7008adc297a5ece1bb2df53d17bef26bb6f800", 0x7f, 0x2}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0xa4030000]}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'veth0_to_batadv\x00', 'ip6gretap0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x338) [ 2834.112075][T28287] ? ext4_alloc_da_blocks+0xd0/0xd0 [ 2834.117274][T28287] iomap_iter+0x395/0x4a0 [ 2834.121634][T28287] __iomap_dio_rw+0x695/0x1070 [ 2834.126567][T28287] iomap_dio_rw+0x38/0x80 [ 2834.130941][T28287] ext4_file_write_iter+0x7eb/0xdc0 [ 2834.136223][T28287] ? filemap_read+0x1661/0x16d0 [ 2834.141125][T28287] do_iter_readv_writev+0x2de/0x380 [ 2834.146367][T28287] do_iter_write+0x192/0x5c0 [ 2834.151018][T28287] ? splice_from_pipe_next+0x34f/0x3b0 [ 2834.156491][T28287] ? kmalloc_array+0x2d/0x40 14:48:24 executing program 1: r0 = socket$unix(0x1, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0xee01, r1, 0xffffffffffffffff) (async) syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000040)='./bus\x00', 0x9, 0x1, &(0x7f0000000140)=[{&(0x7f0000000080)="b0ba1b38efd1f967a05da56f955a837a31fb5cd49644a9b4d396adc54d3f4b9a12204753d0eb25b8d10d187e7879a72dd66127ddbafb5840664d3f02d79b23ab994e34209e446742b27e440b1dd22a4a53f9485bc0194f2affc3f5c632d2b295a09127ae1bba2d7d1ca75bf29a48075f257a5293101a3c65d7d9ce8ea85c16eb28e29b14e9724fe4310bba16f54671c8ddbe63c40c3f8941a7b02efa5c52a529983657cf63ba", 0xa6, 0xffffffffffffff80}], 0x10808d, &(0x7f0000000180)={[{@dots}, {@nodots}, {@dots}, {@nodots}, {@dots}], [{@permit_directio}, {@uid_gt={'uid>', r1}}]}) (async) r2 = socket$inet6(0xa, 0x400000000001, 0x0) r3 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) ftruncate(r3, 0x2007fff) close(r2) (async) open(&(0x7f00000002c0)='./bus\x00', 0x14d842, 0x0) sendfile(r2, r3, 0x0, 0x201000) 14:48:24 executing program 2: clone(0x80910b00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) set_mempolicy(0x3, &(0x7f0000000040), 0x0) gettid() r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x2, 0x3, 0x2d8, 0x190, 0x190, 0x95ffffff, 0x77, 0x93ffffff, 0x240, 0x240, 0x221, 0x240, 0x240, 0x3, 0x0, {[{{@uncond, 0x0, 0x130, 0x190, 0x0, {0x0, 0x5f}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "bdc74c01369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa6ecab6b1d2cc05e3182f64694d7d05fb8b8c8f56627a54f905d564eeeb8334f650ca0f3c44f7fda4d20a55050342ea85ecc8838e7088de33582f36a0a375bb7008adc297a5ece1bb2df53d17bef26bb6f800", 0x7f}}]}, @common=@SET={0x60}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'veth0_to_batadv\x00', 'ip6gretap0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x338) 14:48:24 executing program 5: clone(0x80910b00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) set_mempolicy(0x3, &(0x7f0000000040)=0xffffffff80000001, 0x400) gettid() r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, &(0x7f0000000080)=ANY=[@ANYBLOB="7549f8187a2a6e40594b4473692aef0dda6d1a46f2019ed7e86b1d711c76877056283bedab9579d2125c7cad3b1f28c963b3a626ef87b075574ff5612ccc80d8e14883ad2a8e6516a15c410ce005b2e841ebacd55a1365c685244ec3b66b003e7ec96ed005906d578130183c37"]) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x2, 0x3, 0x2d8, 0x190, 0x190, 0x95ffffff, 0x77, 0x93ffffff, 0x240, 0x240, 0x221, 0x240, 0x240, 0x3, 0x0, {[{{@uncond, 0x0, 0x130, 0x190, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "bdc74c01369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa6ecab6b1d2cc05e3182f64694d7d05fb8b8c8f56627a54f905d564eeeb8334f650ca0f3c44f7fda4d20a55050342ea85ecc8838e7088de33582f36a0a375bb7008adc297a5ece1bb2df53d17bef26bb6f800", 0x7f, 0x2}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0xa4ffffff]}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'veth0_to_batadv\x00', 'ip6gretap0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x338) [ 2834.161086][T28287] vfs_iter_write+0x4c/0x70 [ 2834.165598][T28287] iter_file_splice_write+0x43a/0x790 [ 2834.170998][T28287] ? splice_from_pipe+0xd0/0xd0 [ 2834.175919][T28287] direct_splice_actor+0x80/0xa0 [ 2834.180866][T28287] splice_direct_to_actor+0x345/0x650 [ 2834.186263][T28287] ? do_splice_direct+0x190/0x190 [ 2834.191365][T28287] do_splice_direct+0x106/0x190 [ 2834.196230][T28287] do_sendfile+0x675/0xc40 [ 2834.200678][T28287] __x64_sys_sendfile64+0x102/0x140 [ 2834.205883][T28287] do_syscall_64+0x44/0xd0 [ 2834.210300][T28287] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2834.216247][T28287] RIP: 0033:0x7f2d29acae99 [ 2834.220654][T28287] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2834.240259][T28287] RSP: 002b:00007f2d28c41168 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 2834.248673][T28287] RAX: ffffffffffffffda RBX: 00007f2d29bddf60 RCX: 00007f2d29acae99 [ 2834.256655][T28287] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 2834.264663][T28287] RBP: 00007f2d28c411d0 R08: 0000000000000000 R09: 0000000000000000 [ 2834.272631][T28287] R10: 0000000000201000 R11: 0000000000000246 R12: 0000000000000002 [ 2834.280618][T28287] R13: 00007ffcc1d93fdf R14: 00007f2d28c41300 R15: 0000000000022000 [ 2834.288569][T28287] 14:48:25 executing program 2: clone(0x80910b00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) set_mempolicy(0x3, &(0x7f0000000040), 0x0) gettid() r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x2, 0x3, 0x2d8, 0x190, 0x190, 0x95ffffff, 0x77, 0x93ffffff, 0x240, 0x240, 0x221, 0x240, 0x240, 0x3, 0x0, {[{{@uncond, 0x0, 0x130, 0x190, 0x0, {0x0, 0x62}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "bdc74c01369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa6ecab6b1d2cc05e3182f64694d7d05fb8b8c8f56627a54f905d564eeeb8334f650ca0f3c44f7fda4d20a55050342ea85ecc8838e7088de33582f36a0a375bb7008adc297a5ece1bb2df53d17bef26bb6f800", 0x7f}}]}, @common=@SET={0x60}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'veth0_to_batadv\x00', 'ip6gretap0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x338) 14:48:25 executing program 3: r0 = syz_io_uring_setup(0x2de5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000fe8000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0xb2, 0x0, 0x0, 0x0, 0x7401) syz_io_uring_setup(0x2de5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000fe8000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000140)) (async) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) (async) io_uring_enter(r0, 0xb2, 0x0, 0x0, 0x0, 0x7401) (async) 14:48:25 executing program 1: r0 = socket$unix(0x1, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0xee01, r1, 0xffffffffffffffff) (async) syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000040)='./bus\x00', 0x9, 0x1, &(0x7f0000000140)=[{&(0x7f0000000080)="b0ba1b38efd1f967a05da56f955a837a31fb5cd49644a9b4d396adc54d3f4b9a12204753d0eb25b8d10d187e7879a72dd66127ddbafb5840664d3f02d79b23ab994e34209e446742b27e440b1dd22a4a53f9485bc0194f2affc3f5c632d2b295a09127ae1bba2d7d1ca75bf29a48075f257a5293101a3c65d7d9ce8ea85c16eb28e29b14e9724fe4310bba16f54671c8ddbe63c40c3f8941a7b02efa5c52a529983657cf63ba", 0xa6, 0xffffffffffffff80}], 0x10808d, &(0x7f0000000180)={[{@dots}, {@nodots}, {@dots}, {@nodots}, {@dots}], [{@permit_directio}, {@uid_gt={'uid>', r1}}]}) r2 = socket$inet6(0xa, 0x400000000001, 0x0) r3 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) ftruncate(r3, 0x2007fff) close(r2) open(&(0x7f00000002c0)='./bus\x00', 0x14d842, 0x0) (async) sendfile(r2, r3, 0x0, 0x201000) 14:48:25 executing program 5: clone(0x80910b00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) set_mempolicy(0x3, &(0x7f0000000040)=0xffffffff80000001, 0x400) gettid() r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, &(0x7f0000000080)=ANY=[@ANYBLOB="7549f8187a2a6e40594b4473692aef0dda6d1a46f2019ed7e86b1d711c76877056283bedab9579d2125c7cad3b1f28c963b3a626ef87b075574ff5612ccc80d8e14883ad2a8e6516a15c410ce005b2e841ebacd55a1365c685244ec3b66b003e7ec96ed005906d578130183c37"]) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x2, 0x3, 0x2d8, 0x190, 0x190, 0x95ffffff, 0x77, 0x93ffffff, 0x240, 0x240, 0x221, 0x240, 0x240, 0x3, 0x0, {[{{@uncond, 0x0, 0x130, 0x190, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "bdc74c01369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa6ecab6b1d2cc05e3182f64694d7d05fb8b8c8f56627a54f905d564eeeb8334f650ca0f3c44f7fda4d20a55050342ea85ecc8838e7088de33582f36a0a375bb7008adc297a5ece1bb2df53d17bef26bb6f800", 0x7f, 0x2}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0xa5ffffff]}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'veth0_to_batadv\x00', 'ip6gretap0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x338) 14:48:25 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x2) ioctl$EXT4_IOC_GETSTATE(r1, 0x40046629, &(0x7f0000000100)) preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000040)=""/4, 0x4}, {&(0x7f0000000080)=""/32, 0x20}], 0x2, 0x800, 0x4) write$evdev(r1, &(0x7f000004d000)=[{}], 0xfffffe82) 14:48:25 executing program 4: r0 = socket$inet6(0xa, 0x400000000001, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) ftruncate(r1, 0x2007fff) close(r0) open(&(0x7f00000002c0)='./bus\x00', 0x14d842, 0x0) sendfile(r0, r1, 0x0, 0x201000) (fail_nth: 74) 14:48:25 executing program 2: clone(0x80910b00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) set_mempolicy(0x3, &(0x7f0000000040), 0x0) gettid() r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x2, 0x3, 0x2d8, 0x190, 0x190, 0x95ffffff, 0x77, 0x93ffffff, 0x240, 0x240, 0x221, 0x240, 0x240, 0x3, 0x0, {[{{@uncond, 0x0, 0x130, 0x190, 0x0, {0x0, 0x64}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "bdc74c01369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa6ecab6b1d2cc05e3182f64694d7d05fb8b8c8f56627a54f905d564eeeb8334f650ca0f3c44f7fda4d20a55050342ea85ecc8838e7088de33582f36a0a375bb7008adc297a5ece1bb2df53d17bef26bb6f800", 0x7f}}]}, @common=@SET={0x60}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'veth0_to_batadv\x00', 'ip6gretap0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x338) [ 2834.878559][T28447] FAULT_INJECTION: forcing a failure. [ 2834.878559][T28447] name failslab, interval 1, probability 0, space 0, times 0 [ 2834.891242][T28447] CPU: 0 PID: 28447 Comm: syz-executor.4 Tainted: G W 5.16.0-rc6-syzkaller #0 [ 2834.901392][T28447] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2834.911448][T28447] Call Trace: [ 2834.914729][T28447] [ 2834.917658][T28447] dump_stack_lvl+0xd6/0x122 [ 2834.922262][T28447] dump_stack+0x11/0x1b 14:48:25 executing program 3: r0 = syz_io_uring_setup(0x2de5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000fe8000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) (async) io_uring_enter(r0, 0xb2, 0x0, 0x0, 0x0, 0x7401) [ 2834.926473][T28447] should_fail+0x23c/0x250 [ 2834.930905][T28447] ? ext4_mb_new_blocks+0x1ec/0x14a0 [ 2834.936197][T28447] __should_failslab+0x81/0x90 [ 2834.940966][T28447] should_failslab+0x5/0x20 [ 2834.945555][T28447] kmem_cache_alloc+0x4f/0x320 [ 2834.950404][T28447] ext4_mb_new_blocks+0x1ec/0x14a0 [ 2834.955592][T28447] ? ext4_ext_search_right+0x22c/0x400 [ 2834.961088][T28447] ? ext4_inode_to_goal_block+0x13a/0x150 [ 2834.966813][T28447] ext4_ext_map_blocks+0x1107/0x1950 [ 2834.972191][T28447] ? _raw_read_unlock+0x13/0x30 14:48:25 executing program 2: clone(0x80910b00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) set_mempolicy(0x3, &(0x7f0000000040), 0x0) gettid() r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x2, 0x3, 0x2d8, 0x190, 0x190, 0x95ffffff, 0x77, 0x93ffffff, 0x240, 0x240, 0x221, 0x240, 0x240, 0x3, 0x0, {[{{@uncond, 0x0, 0x130, 0x190, 0x0, {0x0, 0x68}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "bdc74c01369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa6ecab6b1d2cc05e3182f64694d7d05fb8b8c8f56627a54f905d564eeeb8334f650ca0f3c44f7fda4d20a55050342ea85ecc8838e7088de33582f36a0a375bb7008adc297a5ece1bb2df53d17bef26bb6f800", 0x7f}}]}, @common=@SET={0x60}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'veth0_to_batadv\x00', 'ip6gretap0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x338) 14:48:25 executing program 1: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) ftruncate(r1, 0x2007fff) close(r0) r2 = open(&(0x7f00000002c0)='./bus\x00', 0x14d842, 0x0) sendfile(r0, r1, 0x0, 0x201000) pidfd_getfd(r2, r2, 0x0) r3 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_int(r3, 0x29, 0xd1, &(0x7f0000000000)=0x4, 0x4) setsockopt$inet6_MRT6_ADD_MFC(r3, 0x29, 0xc8, 0x0, 0x4) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r3, 0x29, 0xc9, 0x0, 0x0) setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xc8, 0x0, 0x3a) setsockopt$inet6_MRT6_ADD_MFC_PROXY(0xffffffffffffffff, 0x29, 0xc9, 0x0, 0x0) r4 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100), 0x30000, 0x0) close_range(0xffffffffffffffff, r4, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)={0x361800, 0x2, 0x12}, 0x18) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r5, &(0x7f0000000080)=ANY=[], 0x2bb98205) ioctl$PERF_EVENT_IOC_PERIOD(r5, 0x40082404, &(0x7f00000000c0)=0x7) write$binfmt_misc(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x10f2) [ 2834.977115][T28447] ext4_map_blocks+0x55e/0xb60 [ 2834.981929][T28447] ext4_iomap_begin+0x40e/0x550 [ 2834.986838][T28447] ? ext4_alloc_da_blocks+0xd0/0xd0 [ 2834.992055][T28447] iomap_iter+0x395/0x4a0 [ 2834.996396][T28447] __iomap_dio_rw+0x695/0x1070 [ 2835.001223][T28447] iomap_dio_rw+0x38/0x80 [ 2835.005618][T28447] ext4_file_write_iter+0x7eb/0xdc0 [ 2835.010922][T28447] ? filemap_read+0x1661/0x16d0 [ 2835.015796][T28447] do_iter_readv_writev+0x2de/0x380 [ 2835.021000][T28447] do_iter_write+0x192/0x5c0 14:48:25 executing program 5: clone(0x80910b00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) set_mempolicy(0x3, &(0x7f0000000040)=0xffffffff80000001, 0x400) gettid() r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, &(0x7f0000000080)=ANY=[@ANYBLOB="7549f8187a2a6e40594b4473692aef0dda6d1a46f2019ed7e86b1d711c76877056283bedab9579d2125c7cad3b1f28c963b3a626ef87b075574ff5612ccc80d8e14883ad2a8e6516a15c410ce005b2e841ebacd55a1365c685244ec3b66b003e7ec96ed005906d578130183c37"]) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x2, 0x3, 0x2d8, 0x190, 0x190, 0x95ffffff, 0x77, 0x93ffffff, 0x240, 0x240, 0x221, 0x240, 0x240, 0x3, 0x0, {[{{@uncond, 0x0, 0x130, 0x190, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "bdc74c01369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa6ecab6b1d2cc05e3182f64694d7d05fb8b8c8f56627a54f905d564eeeb8334f650ca0f3c44f7fda4d20a55050342ea85ecc8838e7088de33582f36a0a375bb7008adc297a5ece1bb2df53d17bef26bb6f800", 0x7f, 0x2}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0xa6020000]}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'veth0_to_batadv\x00', 'ip6gretap0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x338) [ 2835.025603][T28447] vfs_iter_write+0x4c/0x70 [ 2835.030170][T28447] iter_file_splice_write+0x43a/0x790 [ 2835.035557][T28447] ? splice_from_pipe+0xd0/0xd0 [ 2835.040443][T28447] direct_splice_actor+0x80/0xa0 [ 2835.045538][T28447] splice_direct_to_actor+0x345/0x650 [ 2835.050924][T28447] ? do_splice_direct+0x190/0x190 [ 2835.055965][T28447] do_splice_direct+0x106/0x190 [ 2835.055992][T28447] do_sendfile+0x675/0xc40 [ 2835.056015][T28447] __x64_sys_sendfile64+0x102/0x140 [ 2835.070447][T28447] do_syscall_64+0x44/0xd0 14:48:25 executing program 2: clone(0x80910b00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) set_mempolicy(0x3, &(0x7f0000000040), 0x0) gettid() r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x2, 0x3, 0x2d8, 0x190, 0x190, 0x95ffffff, 0x77, 0x93ffffff, 0x240, 0x240, 0x221, 0x240, 0x240, 0x3, 0x0, {[{{@uncond, 0x0, 0x130, 0x190, 0x0, {0x0, 0x69}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "bdc74c01369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa6ecab6b1d2cc05e3182f64694d7d05fb8b8c8f56627a54f905d564eeeb8334f650ca0f3c44f7fda4d20a55050342ea85ecc8838e7088de33582f36a0a375bb7008adc297a5ece1bb2df53d17bef26bb6f800", 0x7f}}]}, @common=@SET={0x60}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'veth0_to_batadv\x00', 'ip6gretap0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x338) 14:48:25 executing program 4: r0 = socket$inet6(0xa, 0x400000000001, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) ftruncate(r1, 0x2007fff) close(r0) open(&(0x7f00000002c0)='./bus\x00', 0x14d842, 0x0) sendfile(r0, r1, 0x0, 0x201000) (fail_nth: 75) [ 2835.074957][T28447] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2835.074987][T28447] RIP: 0033:0x7f2d29acae99 [ 2835.075001][T28447] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2835.075021][T28447] RSP: 002b:00007f2d28c41168 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 2835.113613][T28447] RAX: ffffffffffffffda RBX: 00007f2d29bddf60 RCX: 00007f2d29acae99 14:48:25 executing program 5: clone(0x80910b00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) set_mempolicy(0x3, &(0x7f0000000040)=0xffffffff80000001, 0x400) gettid() r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, &(0x7f0000000080)=ANY=[@ANYBLOB="7549f8187a2a6e40594b4473692aef0dda6d1a46f2019ed7e86b1d711c76877056283bedab9579d2125c7cad3b1f28c963b3a626ef87b075574ff5612ccc80d8e14883ad2a8e6516a15c410ce005b2e841ebacd55a1365c685244ec3b66b003e7ec96ed005906d578130183c37"]) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x2, 0x3, 0x2d8, 0x190, 0x190, 0x95ffffff, 0x77, 0x93ffffff, 0x240, 0x240, 0x221, 0x240, 0x240, 0x3, 0x0, {[{{@uncond, 0x0, 0x130, 0x190, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "bdc74c01369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa6ecab6b1d2cc05e3182f64694d7d05fb8b8c8f56627a54f905d564eeeb8334f650ca0f3c44f7fda4d20a55050342ea85ecc8838e7088de33582f36a0a375bb7008adc297a5ece1bb2df53d17bef26bb6f800", 0x7f, 0x2}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0xa8010000]}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'veth0_to_batadv\x00', 'ip6gretap0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x338) 14:48:25 executing program 2: clone(0x80910b00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) set_mempolicy(0x3, &(0x7f0000000040), 0x0) gettid() r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x2, 0x3, 0x2d8, 0x190, 0x190, 0x95ffffff, 0x77, 0x93ffffff, 0x240, 0x240, 0x221, 0x240, 0x240, 0x3, 0x0, {[{{@uncond, 0x0, 0x130, 0x190, 0x0, {0x0, 0x6a}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "bdc74c01369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa6ecab6b1d2cc05e3182f64694d7d05fb8b8c8f56627a54f905d564eeeb8334f650ca0f3c44f7fda4d20a55050342ea85ecc8838e7088de33582f36a0a375bb7008adc297a5ece1bb2df53d17bef26bb6f800", 0x7f}}]}, @common=@SET={0x60}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'veth0_to_batadv\x00', 'ip6gretap0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x338) [ 2835.113635][T28447] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 2835.113652][T28447] RBP: 00007f2d28c411d0 R08: 0000000000000000 R09: 0000000000000000 [ 2835.113747][T28447] R10: 0000000000201000 R11: 0000000000000246 R12: 0000000000000002 [ 2835.113763][T28447] R13: 00007ffcc1d93fdf R14: 00007f2d28c41300 R15: 0000000000022000 [ 2835.113781][T28447] [ 2835.190405][T28806] FAULT_INJECTION: forcing a failure. [ 2835.190405][T28806] name failslab, interval 1, probability 0, space 0, times 0 [ 2835.225334][T28806] CPU: 0 PID: 28806 Comm: syz-executor.4 Tainted: G W 5.16.0-rc6-syzkaller #0 [ 2835.235559][T28806] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2835.245621][T28806] Call Trace: [ 2835.248906][T28806] [ 2835.251937][T28806] dump_stack_lvl+0xd6/0x122 [ 2835.256633][T28806] dump_stack+0x11/0x1b 14:48:25 executing program 3: r0 = syz_io_uring_setup(0x2de5, &(0x7f0000000000)={0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000fe8000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) r3 = syz_io_uring_setup(0x5911, &(0x7f0000000200)={0x0, 0x5237, 0x2, 0x2, 0x34d, 0x0, r0}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000100)) syz_io_uring_submit(r4, r2, &(0x7f0000000440)=@IORING_OP_WRITEV={0x2, 0x2, 0x0, @fd_index=0x5, 0x7, &(0x7f0000000180)=[{&(0x7f0000000280)="de886960811d79e35e71cfe5abe7079223bbc9a36fa9fce9599cbb1bf8739c4f851c225672117eafff4c19eadcbdcfb079dd43b1af90fb26936d4c554438942bcdb9431a10a666879f303b04ff0c294bb3abf5742d48c5bbe5321109fa087517a3b3c3d2f9ffe9ac1f62eb3b2f180146016725c93d55e7aa43485750c88370a0ba41ad67947683a505a5524259b11cd9f91de1cd73093afe4b5379c4f16e6f2bc6614f3ffb45ba0ab281740f2cc205bab55090a4be6cfd40538c8fc8ae35ba00d38b70f5e262cc6fa7cd", 0xca}, {&(0x7f0000000380)="c11621e0d2b5197158401ff7f7f2a3a829b6f8780062d645f8822c37dfd7a88b61d61a96e88b39d347527ba93fe5fdf8e6e23ec2cb37e726cce7e4ba81f01a0232a3f6971e134f07e50ee63085089b044655f2ad3fe17ac03ea628923953db1a50a73365cd5e33365f7f5eff68af4b73ecc2b7294be423866d3b9a479b2f86c34b8353a409d8c536ec398d17590650ce3103d3092d481d", 0x97}], 0x2, 0x13}, 0x6) io_uring_enter(r0, 0xb2, 0x0, 0x0, 0x0, 0x7401) r5 = socket(0x11, 0x800000003, 0x0) bind(r5, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r5, &(0x7f00000025c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000100)=0x14) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f00000004c0)={@local, @local, 0x0}, &(0x7f0000000500)=0xc) ioctl$F2FS_IOC_MOVE_RANGE(r3, 0xc020f509, &(0x7f0000000540)={r3, 0x8, 0x8, 0x6}) sendmsg$GTP_CMD_DELPDP(r5, &(0x7f0000000600)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x2c, 0x0, 0x20, 0x70bd27, 0x25dfdbff, {}, [@GTPA_LINK={0x8, 0x1, r6}, @GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_NET_NS_FD={0x8, 0x7, r7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x41}, 0x40000) r8 = socket(0x11, 0x800000003, 0x0) bind(r8, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r8, &(0x7f00000025c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000100)=0x14) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x3c, 0x0, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x2}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5}]}, 0x3c}}, 0x0) sendmsg$IEEE802154_ASSOCIATE_RESP(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x24, 0x0, 0x200, 0x70bd29, 0x25dfdbfb, {}, [@IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa1}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x408c4}, 0x1) sendmsg$SEG6_CMD_SETHMAC(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x2c, r10, 0x1, 0x0, 0x0, {}, [@SEG6_ATTR_SECRETLEN={0x8, 0x5, 0x1}, @SEG6_ATTR_ALGID={0x8}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xd97}]}, 0x2c}, 0x1, 0x6c}, 0x0) sendmsg$SEG6_CMD_GET_TUNSRC(r8, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x34, r10, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@SEG6_ATTR_SECRET={0x10, 0x4, [0x3, 0x8, 0x3]}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x4}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0xde1f}]}, 0x34}, 0x1, 0x0, 0x0, 0x44080}, 0x8080) [ 2835.260843][T28806] should_fail+0x23c/0x250 [ 2835.265274][T28806] ? ext4_mb_new_blocks+0x47e/0x14a0 [ 2835.270635][T28806] __should_failslab+0x81/0x90 [ 2835.275428][T28806] should_failslab+0x5/0x20 [ 2835.279938][T28806] kmem_cache_alloc+0x4f/0x320 [ 2835.284726][T28806] ext4_mb_new_blocks+0x47e/0x14a0 [ 2835.289869][T28806] ? ext4_ext_search_right+0x22c/0x400 [ 2835.295422][T28806] ? ext4_inode_to_goal_block+0x13a/0x150 [ 2835.301157][T28806] ext4_ext_map_blocks+0x1107/0x1950 [ 2835.306462][T28806] ? _raw_read_unlock+0x13/0x30 [ 2835.311394][T28806] ext4_map_blocks+0x55e/0xb60 [ 2835.316279][T28806] ext4_iomap_begin+0x40e/0x550 [ 2835.321211][T28806] ? ext4_alloc_da_blocks+0xd0/0xd0 [ 2835.326445][T28806] iomap_iter+0x395/0x4a0 [ 2835.326473][T28806] __iomap_dio_rw+0x695/0x1070 [ 2835.326502][T28806] iomap_dio_rw+0x38/0x80 [ 2835.326525][T28806] ext4_file_write_iter+0x7eb/0xdc0 [ 2835.345084][T28806] ? filemap_read+0x1661/0x16d0 [ 2835.350051][T28806] do_iter_readv_writev+0x2de/0x380 [ 2835.350078][T28806] do_iter_write+0x192/0x5c0 [ 2835.350102][T28806] ? splice_from_pipe_next+0x34f/0x3b0 [ 2835.365323][T28806] ? kmalloc_array+0x2d/0x40 [ 2835.365383][T28806] vfs_iter_write+0x4c/0x70 [ 2835.374440][T28806] iter_file_splice_write+0x43a/0x790 [ 2835.379841][T28806] ? splice_from_pipe+0xd0/0xd0 [ 2835.384711][T28806] direct_splice_actor+0x80/0xa0 [ 2835.389649][T28806] splice_direct_to_actor+0x345/0x650 [ 2835.395091][T28806] ? do_splice_direct+0x190/0x190 [ 2835.400106][T28806] do_splice_direct+0x106/0x190 [ 2835.405164][T28806] do_sendfile+0x675/0xc40 [ 2835.409693][T28806] __x64_sys_sendfile64+0x102/0x140 [ 2835.414983][T28806] do_syscall_64+0x44/0xd0 [ 2835.419417][T28806] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2835.425312][T28806] RIP: 0033:0x7f2d29acae99 [ 2835.429932][T28806] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2835.449632][T28806] RSP: 002b:00007f2d28c41168 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 14:48:25 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x2) ioctl$EXT4_IOC_GETSTATE(r1, 0x40046629, &(0x7f0000000100)) preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000040)=""/4, 0x4}, {&(0x7f0000000080)=""/32, 0x20}], 0x2, 0x800, 0x4) write$evdev(r1, &(0x7f000004d000)=[{}], 0xfffffe82) openat(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/self/exe\x00', 0x0, 0x0) (async) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) (async) syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x2) (async) ioctl$EXT4_IOC_GETSTATE(r1, 0x40046629, &(0x7f0000000100)) (async) preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000040)=""/4, 0x4}, {&(0x7f0000000080)=""/32, 0x20}], 0x2, 0x800, 0x4) (async) write$evdev(r1, &(0x7f000004d000)=[{}], 0xfffffe82) (async) [ 2835.458045][T28806] RAX: ffffffffffffffda RBX: 00007f2d29bddf60 RCX: 00007f2d29acae99 [ 2835.466010][T28806] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 2835.473960][T28806] RBP: 00007f2d28c411d0 R08: 0000000000000000 R09: 0000000000000000 [ 2835.481914][T28806] R10: 0000000000201000 R11: 0000000000000246 R12: 0000000000000002 [ 2835.489986][T28806] R13: 00007ffcc1d93fdf R14: 00007f2d28c41300 R15: 0000000000022000 [ 2835.498003][T28806] 14:48:25 executing program 5: clone(0x80910b00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) set_mempolicy(0x3, &(0x7f0000000040)=0xffffffff80000001, 0x400) gettid() r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, &(0x7f0000000080)=ANY=[@ANYBLOB="7549f8187a2a6e40594b4473692aef0dda6d1a46f2019ed7e86b1d711c76877056283bedab9579d2125c7cad3b1f28c963b3a626ef87b075574ff5612ccc80d8e14883ad2a8e6516a15c410ce005b2e841ebacd55a1365c685244ec3b66b003e7ec96ed005906d578130183c37"]) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x2, 0x3, 0x2d8, 0x190, 0x190, 0x95ffffff, 0x77, 0x93ffffff, 0x240, 0x240, 0x221, 0x240, 0x240, 0x3, 0x0, {[{{@uncond, 0x0, 0x130, 0x190, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "bdc74c01369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa6ecab6b1d2cc05e3182f64694d7d05fb8b8c8f56627a54f905d564eeeb8334f650ca0f3c44f7fda4d20a55050342ea85ecc8838e7088de33582f36a0a375bb7008adc297a5ece1bb2df53d17bef26bb6f800", 0x7f, 0x2}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0xaa020000]}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'veth0_to_batadv\x00', 'ip6gretap0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x338) 14:48:25 executing program 4: r0 = socket$inet6(0xa, 0x400000000001, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) ftruncate(r1, 0x2007fff) close(r0) open(&(0x7f00000002c0)='./bus\x00', 0x14d842, 0x0) sendfile(r0, r1, 0x0, 0x201000) (fail_nth: 76) 14:48:25 executing program 3: r0 = syz_io_uring_setup(0x2de5, &(0x7f0000000000)={0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000fe8000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) r3 = syz_io_uring_setup(0x5911, &(0x7f0000000200)={0x0, 0x5237, 0x2, 0x2, 0x34d, 0x0, r0}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000100)) syz_io_uring_submit(r4, r2, &(0x7f0000000440)=@IORING_OP_WRITEV={0x2, 0x2, 0x0, @fd_index=0x5, 0x7, &(0x7f0000000180)=[{&(0x7f0000000280)="de886960811d79e35e71cfe5abe7079223bbc9a36fa9fce9599cbb1bf8739c4f851c225672117eafff4c19eadcbdcfb079dd43b1af90fb26936d4c554438942bcdb9431a10a666879f303b04ff0c294bb3abf5742d48c5bbe5321109fa087517a3b3c3d2f9ffe9ac1f62eb3b2f180146016725c93d55e7aa43485750c88370a0ba41ad67947683a505a5524259b11cd9f91de1cd73093afe4b5379c4f16e6f2bc6614f3ffb45ba0ab281740f2cc205bab55090a4be6cfd40538c8fc8ae35ba00d38b70f5e262cc6fa7cd", 0xca}, {&(0x7f0000000380)="c11621e0d2b5197158401ff7f7f2a3a829b6f8780062d645f8822c37dfd7a88b61d61a96e88b39d347527ba93fe5fdf8e6e23ec2cb37e726cce7e4ba81f01a0232a3f6971e134f07e50ee63085089b044655f2ad3fe17ac03ea628923953db1a50a73365cd5e33365f7f5eff68af4b73ecc2b7294be423866d3b9a479b2f86c34b8353a409d8c536ec398d17590650ce3103d3092d481d", 0x97}], 0x2, 0x13}, 0x6) (async) io_uring_enter(r0, 0xb2, 0x0, 0x0, 0x0, 0x7401) (async) r5 = socket(0x11, 0x800000003, 0x0) bind(r5, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) (async, rerun: 32) getsockname$packet(r5, &(0x7f00000025c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000100)=0x14) (async, rerun: 32) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f00000004c0)={@local, @local, 0x0}, &(0x7f0000000500)=0xc) ioctl$F2FS_IOC_MOVE_RANGE(r3, 0xc020f509, &(0x7f0000000540)={r3, 0x8, 0x8, 0x6}) sendmsg$GTP_CMD_DELPDP(r5, &(0x7f0000000600)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x2c, 0x0, 0x20, 0x70bd27, 0x25dfdbff, {}, [@GTPA_LINK={0x8, 0x1, r6}, @GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_NET_NS_FD={0x8, 0x7, r7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x41}, 0x40000) (async) r8 = socket(0x11, 0x800000003, 0x0) bind(r8, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) (async) getsockname$packet(r8, &(0x7f00000025c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000100)=0x14) (async) r9 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r10 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000000), 0xffffffffffffffff) (async, rerun: 32) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x3c, 0x0, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x2}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5}]}, 0x3c}}, 0x0) sendmsg$IEEE802154_ASSOCIATE_RESP(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x24, 0x0, 0x200, 0x70bd29, 0x25dfdbfb, {}, [@IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa1}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x408c4}, 0x1) sendmsg$SEG6_CMD_SETHMAC(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x2c, r10, 0x1, 0x0, 0x0, {}, [@SEG6_ATTR_SECRETLEN={0x8, 0x5, 0x1}, @SEG6_ATTR_ALGID={0x8}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xd97}]}, 0x2c}, 0x1, 0x6c}, 0x0) (async) sendmsg$SEG6_CMD_GET_TUNSRC(r8, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x34, r10, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@SEG6_ATTR_SECRET={0x10, 0x4, [0x3, 0x8, 0x3]}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x4}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0xde1f}]}, 0x34}, 0x1, 0x0, 0x0, 0x44080}, 0x8080) [ 2835.528449][T28814] netlink: 'syz-executor.3': attribute type 5 has an invalid length. [ 2835.536671][T28814] netlink: 'syz-executor.3': attribute type 6 has an invalid length. [ 2835.559061][T28818] set_target_v0_checkentry: 38 callbacks suppressed [ 2835.559076][T28818] Cannot find add_set index 0 as target [ 2835.580754][T28823] Cannot find add_set index 0 as target [ 2835.587106][T28821] FAULT_INJECTION: forcing a failure. [ 2835.587106][T28821] name failslab, interval 1, probability 0, space 0, times 0 [ 2835.600261][T28821] CPU: 0 PID: 28821 Comm: syz-executor.4 Tainted: G W 5.16.0-rc6-syzkaller #0 [ 2835.600368][T28821] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2835.620546][T28821] Call Trace: [ 2835.623818][T28821] [ 2835.626743][T28821] dump_stack_lvl+0xd6/0x122 [ 2835.631423][T28821] dump_stack+0x11/0x1b [ 2835.631509][T28821] should_fail+0x23c/0x250 [ 2835.631535][T28821] ? ext4_mb_new_blocks+0x47e/0x14a0 [ 2835.631567][T28821] __should_failslab+0x81/0x90 [ 2835.631591][T28821] should_failslab+0x5/0x20 [ 2835.631613][T28821] kmem_cache_alloc+0x4f/0x320 [ 2835.631634][T28821] ext4_mb_new_blocks+0x47e/0x14a0 [ 2835.664480][T28821] ? ext4_ext_search_right+0x22c/0x400 [ 2835.670086][T28821] ? ext4_inode_to_goal_block+0x13a/0x150 14:48:26 executing program 2: clone(0x80910b00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) set_mempolicy(0x3, &(0x7f0000000040), 0x0) gettid() r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x2, 0x3, 0x2d8, 0x190, 0x190, 0x95ffffff, 0x77, 0x93ffffff, 0x240, 0x240, 0x221, 0x240, 0x240, 0x3, 0x0, {[{{@uncond, 0x0, 0x130, 0x190, 0x0, {0x0, 0x6b}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "bdc74c01369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa6ecab6b1d2cc05e3182f64694d7d05fb8b8c8f56627a54f905d564eeeb8334f650ca0f3c44f7fda4d20a55050342ea85ecc8838e7088de33582f36a0a375bb7008adc297a5ece1bb2df53d17bef26bb6f800", 0x7f}}]}, @common=@SET={0x60}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'veth0_to_batadv\x00', 'ip6gretap0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x338) [ 2835.670117][T28821] ext4_ext_map_blocks+0x1107/0x1950 [ 2835.670229][T28821] ? _raw_read_unlock+0x13/0x30 [ 2835.670251][T28821] ext4_map_blocks+0x55e/0xb60 [ 2835.670277][T28821] ext4_iomap_begin+0x40e/0x550 [ 2835.670320][T28821] ? ext4_alloc_da_blocks+0xd0/0xd0 [ 2835.670344][T28821] iomap_iter+0x395/0x4a0 [ 2835.670369][T28821] __iomap_dio_rw+0x695/0x1070 [ 2835.670471][T28821] iomap_dio_rw+0x38/0x80 [ 2835.670572][T28821] ext4_file_write_iter+0x7eb/0xdc0 [ 2835.670592][T28821] ? filemap_read+0x1661/0x16d0 [ 2835.670665][T28821] do_iter_readv_writev+0x2de/0x380 [ 2835.670693][T28821] do_iter_write+0x192/0x5c0 [ 2835.670792][T28821] ? splice_from_pipe_next+0x34f/0x3b0 [ 2835.670874][T28821] ? kmalloc_array+0x2d/0x40 [ 2835.670889][T28821] vfs_iter_write+0x4c/0x70 [ 2835.670930][T28821] iter_file_splice_write+0x43a/0x790 [ 2835.670958][T28821] ? splice_from_pipe+0xd0/0xd0 [ 2835.670986][T28821] direct_splice_actor+0x80/0xa0 [ 2835.671008][T28821] splice_direct_to_actor+0x345/0x650 [ 2835.671105][T28821] ? do_splice_direct+0x190/0x190 [ 2835.671129][T28821] do_splice_direct+0x106/0x190 [ 2835.671151][T28821] do_sendfile+0x675/0xc40 [ 2835.671189][T28821] __x64_sys_sendfile64+0x102/0x140 [ 2835.671219][T28821] do_syscall_64+0x44/0xd0 [ 2835.671255][T28821] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2835.799909][T28821] RIP: 0033:0x7f2d29acae99 [ 2835.804363][T28821] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 14:48:26 executing program 1: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) ftruncate(r1, 0x2007fff) close(r0) (async) r2 = open(&(0x7f00000002c0)='./bus\x00', 0x14d842, 0x0) sendfile(r0, r1, 0x0, 0x201000) (async) pidfd_getfd(r2, r2, 0x0) (async) r3 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_int(r3, 0x29, 0xd1, &(0x7f0000000000)=0x4, 0x4) setsockopt$inet6_MRT6_ADD_MFC(r3, 0x29, 0xc8, 0x0, 0x4) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r3, 0x29, 0xc9, 0x0, 0x0) (async) setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xc8, 0x0, 0x3a) (async) setsockopt$inet6_MRT6_ADD_MFC_PROXY(0xffffffffffffffff, 0x29, 0xc9, 0x0, 0x0) (async) r4 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100), 0x30000, 0x0) close_range(0xffffffffffffffff, r4, 0x0) (async) openat2$dir(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)={0x361800, 0x2, 0x12}, 0x18) (async) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r5, &(0x7f0000000080)=ANY=[], 0x2bb98205) ioctl$PERF_EVENT_IOC_PERIOD(r5, 0x40082404, &(0x7f00000000c0)=0x7) (async) write$binfmt_misc(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x10f2) 14:48:26 executing program 5: clone(0x80910b00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) set_mempolicy(0x3, &(0x7f0000000040)=0xffffffff80000001, 0x400) gettid() r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, &(0x7f0000000080)=ANY=[@ANYBLOB="7549f8187a2a6e40594b4473692aef0dda6d1a46f2019ed7e86b1d711c76877056283bedab9579d2125c7cad3b1f28c963b3a626ef87b075574ff5612ccc80d8e14883ad2a8e6516a15c410ce005b2e841ebacd55a1365c685244ec3b66b003e7ec96ed005906d578130183c37"]) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x2, 0x3, 0x2d8, 0x190, 0x190, 0x95ffffff, 0x77, 0x93ffffff, 0x240, 0x240, 0x221, 0x240, 0x240, 0x3, 0x0, {[{{@uncond, 0x0, 0x130, 0x190, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "bdc74c01369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa6ecab6b1d2cc05e3182f64694d7d05fb8b8c8f56627a54f905d564eeeb8334f650ca0f3c44f7fda4d20a55050342ea85ecc8838e7088de33582f36a0a375bb7008adc297a5ece1bb2df53d17bef26bb6f800", 0x7f, 0x2}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0xaaffffff]}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'veth0_to_batadv\x00', 'ip6gretap0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x338) 14:48:26 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) (async) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x2) ioctl$EXT4_IOC_GETSTATE(r1, 0x40046629, &(0x7f0000000100)) (async) preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000040)=""/4, 0x4}, {&(0x7f0000000080)=""/32, 0x20}], 0x2, 0x800, 0x4) (async) write$evdev(r1, &(0x7f000004d000)=[{}], 0xfffffe82) 14:48:26 executing program 4: r0 = socket$inet6(0xa, 0x400000000001, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) ftruncate(r1, 0x2007fff) close(r0) open(&(0x7f00000002c0)='./bus\x00', 0x14d842, 0x0) sendfile(r0, r1, 0x0, 0x201000) (fail_nth: 77) [ 2835.824044][T28821] RSP: 002b:00007f2d28c41168 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 2835.832560][T28821] RAX: ffffffffffffffda RBX: 00007f2d29bddf60 RCX: 00007f2d29acae99 [ 2835.840611][T28821] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 2835.848574][T28821] RBP: 00007f2d28c411d0 R08: 0000000000000000 R09: 0000000000000000 [ 2835.856529][T28821] R10: 0000000000201000 R11: 0000000000000246 R12: 0000000000000002 [ 2835.864497][T28821] R13: 00007ffcc1d93fdf R14: 00007f2d28c41300 R15: 0000000000022000 [ 2835.872508][T28821] 14:48:26 executing program 2: clone(0x80910b00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) set_mempolicy(0x3, &(0x7f0000000040), 0x0) gettid() r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x2, 0x3, 0x2d8, 0x190, 0x190, 0x95ffffff, 0x77, 0x93ffffff, 0x240, 0x240, 0x221, 0x240, 0x240, 0x3, 0x0, {[{{@uncond, 0x0, 0x130, 0x190, 0x0, {0x0, 0x6e}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "bdc74c01369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa6ecab6b1d2cc05e3182f64694d7d05fb8b8c8f56627a54f905d564eeeb8334f650ca0f3c44f7fda4d20a55050342ea85ecc8838e7088de33582f36a0a375bb7008adc297a5ece1bb2df53d17bef26bb6f800", 0x7f}}]}, @common=@SET={0x60}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'veth0_to_batadv\x00', 'ip6gretap0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x338) 14:48:26 executing program 5: clone(0x80910b00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) set_mempolicy(0x3, &(0x7f0000000040)=0xffffffff80000001, 0x400) gettid() r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, &(0x7f0000000080)=ANY=[@ANYBLOB="7549f8187a2a6e40594b4473692aef0dda6d1a46f2019ed7e86b1d711c76877056283bedab9579d2125c7cad3b1f28c963b3a626ef87b075574ff5612ccc80d8e14883ad2a8e6516a15c410ce005b2e841ebacd55a1365c685244ec3b66b003e7ec96ed005906d578130183c37"]) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x2, 0x3, 0x2d8, 0x190, 0x190, 0x95ffffff, 0x77, 0x93ffffff, 0x240, 0x240, 0x221, 0x240, 0x240, 0x3, 0x0, {[{{@uncond, 0x0, 0x130, 0x190, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "bdc74c01369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa6ecab6b1d2cc05e3182f64694d7d05fb8b8c8f56627a54f905d564eeeb8334f650ca0f3c44f7fda4d20a55050342ea85ecc8838e7088de33582f36a0a375bb7008adc297a5ece1bb2df53d17bef26bb6f800", 0x7f, 0x2}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0xacffffff]}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'veth0_to_batadv\x00', 'ip6gretap0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x338) 14:48:26 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000001, 0x4010, r0, 0x9e31d000) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x2) write$evdev(r1, &(0x7f000004d000)=[{}], 0xfffffe82) [ 2835.910964][T28855] Cannot find add_set index 0 as target [ 2835.917523][T28840] Cannot find add_set index 0 as target [ 2835.931619][T28882] FAULT_INJECTION: forcing a failure. [ 2835.931619][T28882] name failslab, interval 1, probability 0, space 0, times 0 [ 2835.944357][T28882] CPU: 0 PID: 28882 Comm: syz-executor.4 Tainted: G W 5.16.0-rc6-syzkaller #0 14:48:26 executing program 3: r0 = syz_io_uring_setup(0x2de5, &(0x7f0000000000)={0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000fe8000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) r3 = syz_io_uring_setup(0x5911, &(0x7f0000000200)={0x0, 0x5237, 0x2, 0x2, 0x34d, 0x0, r0}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000100)) syz_io_uring_submit(r4, r2, &(0x7f0000000440)=@IORING_OP_WRITEV={0x2, 0x2, 0x0, @fd_index=0x5, 0x7, &(0x7f0000000180)=[{&(0x7f0000000280)="de886960811d79e35e71cfe5abe7079223bbc9a36fa9fce9599cbb1bf8739c4f851c225672117eafff4c19eadcbdcfb079dd43b1af90fb26936d4c554438942bcdb9431a10a666879f303b04ff0c294bb3abf5742d48c5bbe5321109fa087517a3b3c3d2f9ffe9ac1f62eb3b2f180146016725c93d55e7aa43485750c88370a0ba41ad67947683a505a5524259b11cd9f91de1cd73093afe4b5379c4f16e6f2bc6614f3ffb45ba0ab281740f2cc205bab55090a4be6cfd40538c8fc8ae35ba00d38b70f5e262cc6fa7cd", 0xca}, {&(0x7f0000000380)="c11621e0d2b5197158401ff7f7f2a3a829b6f8780062d645f8822c37dfd7a88b61d61a96e88b39d347527ba93fe5fdf8e6e23ec2cb37e726cce7e4ba81f01a0232a3f6971e134f07e50ee63085089b044655f2ad3fe17ac03ea628923953db1a50a73365cd5e33365f7f5eff68af4b73ecc2b7294be423866d3b9a479b2f86c34b8353a409d8c536ec398d17590650ce3103d3092d481d", 0x97}], 0x2, 0x13}, 0x6) io_uring_enter(r0, 0xb2, 0x0, 0x0, 0x0, 0x7401) r5 = socket(0x11, 0x800000003, 0x0) bind(r5, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r5, &(0x7f00000025c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000100)=0x14) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f00000004c0)={@local, @local, 0x0}, &(0x7f0000000500)=0xc) ioctl$F2FS_IOC_MOVE_RANGE(r3, 0xc020f509, &(0x7f0000000540)={r3, 0x8, 0x8, 0x6}) sendmsg$GTP_CMD_DELPDP(r5, &(0x7f0000000600)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x2c, 0x0, 0x20, 0x70bd27, 0x25dfdbff, {}, [@GTPA_LINK={0x8, 0x1, r6}, @GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_NET_NS_FD={0x8, 0x7, r7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x41}, 0x40000) r8 = socket(0x11, 0x800000003, 0x0) bind(r8, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r8, &(0x7f00000025c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000100)=0x14) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x3c, 0x0, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x2}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5}]}, 0x3c}}, 0x0) sendmsg$IEEE802154_ASSOCIATE_RESP(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x24, 0x0, 0x200, 0x70bd29, 0x25dfdbfb, {}, [@IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa1}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x408c4}, 0x1) sendmsg$SEG6_CMD_SETHMAC(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x2c, r10, 0x1, 0x0, 0x0, {}, [@SEG6_ATTR_SECRETLEN={0x8, 0x5, 0x1}, @SEG6_ATTR_ALGID={0x8}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xd97}]}, 0x2c}, 0x1, 0x6c}, 0x0) sendmsg$SEG6_CMD_GET_TUNSRC(r8, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x34, r10, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@SEG6_ATTR_SECRET={0x10, 0x4, [0x3, 0x8, 0x3]}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x4}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0xde1f}]}, 0x34}, 0x1, 0x0, 0x0, 0x44080}, 0x8080) syz_io_uring_setup(0x2de5, &(0x7f0000000000)={0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000fe8000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000140)) (async) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) (async) syz_io_uring_setup(0x5911, &(0x7f0000000200)={0x0, 0x5237, 0x2, 0x2, 0x34d, 0x0, r0}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f0000000100)) (async) syz_io_uring_submit(r4, r2, &(0x7f0000000440)=@IORING_OP_WRITEV={0x2, 0x2, 0x0, @fd_index=0x5, 0x7, &(0x7f0000000180)=[{&(0x7f0000000280)="de886960811d79e35e71cfe5abe7079223bbc9a36fa9fce9599cbb1bf8739c4f851c225672117eafff4c19eadcbdcfb079dd43b1af90fb26936d4c554438942bcdb9431a10a666879f303b04ff0c294bb3abf5742d48c5bbe5321109fa087517a3b3c3d2f9ffe9ac1f62eb3b2f180146016725c93d55e7aa43485750c88370a0ba41ad67947683a505a5524259b11cd9f91de1cd73093afe4b5379c4f16e6f2bc6614f3ffb45ba0ab281740f2cc205bab55090a4be6cfd40538c8fc8ae35ba00d38b70f5e262cc6fa7cd", 0xca}, {&(0x7f0000000380)="c11621e0d2b5197158401ff7f7f2a3a829b6f8780062d645f8822c37dfd7a88b61d61a96e88b39d347527ba93fe5fdf8e6e23ec2cb37e726cce7e4ba81f01a0232a3f6971e134f07e50ee63085089b044655f2ad3fe17ac03ea628923953db1a50a73365cd5e33365f7f5eff68af4b73ecc2b7294be423866d3b9a479b2f86c34b8353a409d8c536ec398d17590650ce3103d3092d481d", 0x97}], 0x2, 0x13}, 0x6) (async) io_uring_enter(r0, 0xb2, 0x0, 0x0, 0x0, 0x7401) (async) socket(0x11, 0x800000003, 0x0) (async) bind(r5, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) (async) getsockname$packet(r5, &(0x7f00000025c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000100)=0x14) (async) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f00000004c0)={@local, @local}, &(0x7f0000000500)=0xc) (async) ioctl$F2FS_IOC_MOVE_RANGE(r3, 0xc020f509, &(0x7f0000000540)={r3, 0x8, 0x8, 0x6}) (async) sendmsg$GTP_CMD_DELPDP(r5, &(0x7f0000000600)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x2c, 0x0, 0x20, 0x70bd27, 0x25dfdbff, {}, [@GTPA_LINK={0x8, 0x1, r6}, @GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_NET_NS_FD={0x8, 0x7, r7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x41}, 0x40000) (async) socket(0x11, 0x800000003, 0x0) (async) bind(r8, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) (async) getsockname$packet(r8, &(0x7f00000025c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000100)=0x14) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$SEG6(&(0x7f0000000000), 0xffffffffffffffff) (async) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x3c, 0x0, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x2}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5}]}, 0x3c}}, 0x0) (async) sendmsg$IEEE802154_ASSOCIATE_RESP(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x24, 0x0, 0x200, 0x70bd29, 0x25dfdbfb, {}, [@IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa1}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x408c4}, 0x1) (async) sendmsg$SEG6_CMD_SETHMAC(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x2c, r10, 0x1, 0x0, 0x0, {}, [@SEG6_ATTR_SECRETLEN={0x8, 0x5, 0x1}, @SEG6_ATTR_ALGID={0x8}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xd97}]}, 0x2c}, 0x1, 0x6c}, 0x0) (async) sendmsg$SEG6_CMD_GET_TUNSRC(r8, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x34, r10, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@SEG6_ATTR_SECRET={0x10, 0x4, [0x3, 0x8, 0x3]}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x4}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0xde1f}]}, 0x34}, 0x1, 0x0, 0x0, 0x44080}, 0x8080) (async) [ 2835.954556][T28882] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2835.964626][T28882] Call Trace: [ 2835.967905][T28882] [ 2835.970831][T28882] dump_stack_lvl+0xd6/0x122 [ 2835.975407][T28882] dump_stack+0x11/0x1b [ 2835.979562][T28882] should_fail+0x23c/0x250 [ 2835.984143][T28882] ? __es_insert_extent+0x43d/0xac0 [ 2835.989329][T28882] __should_failslab+0x81/0x90 [ 2835.994077][T28882] should_failslab+0x5/0x20 [ 2835.998622][T28882] kmem_cache_alloc+0x4f/0x320 [ 2836.003371][T28882] __es_insert_extent+0x43d/0xac0 [ 2836.008409][T28882] ext4_es_insert_extent+0x1bb/0x15c0 [ 2836.013759][T28882] ? _raw_read_unlock+0x13/0x30 [ 2836.018587][T28882] ? ext4_es_scan_range+0x124/0x150 [ 2836.024019][T28882] ext4_map_blocks+0x80a/0xb60 [ 2836.028798][T28882] ext4_iomap_begin+0x40e/0x550 [ 2836.033627][T28882] ? ext4_alloc_da_blocks+0xd0/0xd0 [ 2836.038832][T28882] iomap_iter+0x395/0x4a0 [ 2836.043290][T28882] __iomap_dio_rw+0x695/0x1070 [ 2836.048035][T28882] iomap_dio_rw+0x38/0x80 [ 2836.052400][T28882] ext4_file_write_iter+0x7eb/0xdc0 [ 2836.057644][T28882] ? filemap_read+0x1661/0x16d0 [ 2836.062476][T28882] do_iter_readv_writev+0x2de/0x380 [ 2836.067722][T28882] do_iter_write+0x192/0x5c0 [ 2836.072360][T28882] ? tsan.module_ctor+0x10/0x10 [ 2836.077304][T28882] vfs_iter_write+0x4c/0x70 [ 2836.081863][T28882] iter_file_splice_write+0x43a/0x790 [ 2836.087301][T28882] ? splice_from_pipe+0xd0/0xd0 [ 2836.092201][T28882] direct_splice_actor+0x80/0xa0 [ 2836.097472][T28882] splice_direct_to_actor+0x345/0x650 [ 2836.102869][T28882] ? do_splice_direct+0x190/0x190 [ 2836.107877][T28882] do_splice_direct+0x106/0x190 [ 2836.112726][T28882] do_sendfile+0x675/0xc40 [ 2836.117158][T28882] __x64_sys_sendfile64+0x102/0x140 [ 2836.122340][T28882] do_syscall_64+0x44/0xd0 [ 2836.126736][T28882] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2836.132646][T28882] RIP: 0033:0x7f2d29acae99 [ 2836.137042][T28882] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2836.156778][T28882] RSP: 002b:00007f2d28c41168 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 2836.165181][T28882] RAX: ffffffffffffffda RBX: 00007f2d29bddf60 RCX: 00007f2d29acae99 [ 2836.173146][T28882] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 2836.181104][T28882] RBP: 00007f2d28c411d0 R08: 0000000000000000 R09: 0000000000000000 [ 2836.189055][T28882] R10: 0000000000201000 R11: 0000000000000246 R12: 0000000000000002 [ 2836.197027][T28882] R13: 00007ffcc1d93fdf R14: 00007f2d28c41300 R15: 0000000000022000 [ 2836.205093][T28882] 14:48:26 executing program 2: clone(0x80910b00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) set_mempolicy(0x3, &(0x7f0000000040), 0x0) gettid() r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x2, 0x3, 0x2d8, 0x190, 0x190, 0x95ffffff, 0x77, 0x93ffffff, 0x240, 0x240, 0x221, 0x240, 0x240, 0x3, 0x0, {[{{@uncond, 0x0, 0x130, 0x190, 0x0, {0x0, 0x70}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "bdc74c01369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa6ecab6b1d2cc05e3182f64694d7d05fb8b8c8f56627a54f905d564eeeb8334f650ca0f3c44f7fda4d20a55050342ea85ecc8838e7088de33582f36a0a375bb7008adc297a5ece1bb2df53d17bef26bb6f800", 0x7f}}]}, @common=@SET={0x60}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'veth0_to_batadv\x00', 'ip6gretap0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x338) [ 2836.235788][T28976] netlink: 'syz-executor.3': attribute type 5 has an invalid length. [ 2836.243995][T28976] netlink: 'syz-executor.3': attribute type 6 has an invalid length. [ 2836.248224][T28978] Cannot find add_set index 0 as target 14:48:26 executing program 5: clone(0x80910b00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) set_mempolicy(0x3, &(0x7f0000000040)=0xffffffff80000001, 0x400) gettid() r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, &(0x7f0000000080)=ANY=[@ANYBLOB="7549f8187a2a6e40594b4473692aef0dda6d1a46f2019ed7e86b1d711c76877056283bedab9579d2125c7cad3b1f28c963b3a626ef87b075574ff5612ccc80d8e14883ad2a8e6516a15c410ce005b2e841ebacd55a1365c685244ec3b66b003e7ec96ed005906d578130183c37"]) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x2, 0x3, 0x2d8, 0x190, 0x190, 0x95ffffff, 0x77, 0x93ffffff, 0x240, 0x240, 0x221, 0x240, 0x240, 0x3, 0x0, {[{{@uncond, 0x0, 0x130, 0x190, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "bdc74c01369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa6ecab6b1d2cc05e3182f64694d7d05fb8b8c8f56627a54f905d564eeeb8334f650ca0f3c44f7fda4d20a55050342ea85ecc8838e7088de33582f36a0a375bb7008adc297a5ece1bb2df53d17bef26bb6f800", 0x7f, 0x2}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0xadffffff]}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'veth0_to_batadv\x00', 'ip6gretap0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x338) [ 2836.314469][T29043] Cannot find add_set index 0 as target [ 2836.345250][T29092] Cannot find add_set index 0 as target 14:48:26 executing program 2: clone(0x80910b00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) set_mempolicy(0x3, &(0x7f0000000040), 0x0) gettid() r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x2, 0x3, 0x2d8, 0x190, 0x190, 0x95ffffff, 0x77, 0x93ffffff, 0x240, 0x240, 0x221, 0x240, 0x240, 0x3, 0x0, {[{{@uncond, 0x0, 0x130, 0x190, 0x0, {0x0, 0x75}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "bdc74c01369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa6ecab6b1d2cc05e3182f64694d7d05fb8b8c8f56627a54f905d564eeeb8334f650ca0f3c44f7fda4d20a55050342ea85ecc8838e7088de33582f36a0a375bb7008adc297a5ece1bb2df53d17bef26bb6f800", 0x7f}}]}, @common=@SET={0x60}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'veth0_to_batadv\x00', 'ip6gretap0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x338) 14:48:26 executing program 5: clone(0x80910b00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) set_mempolicy(0x3, &(0x7f0000000040)=0xffffffff80000001, 0x400) gettid() r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, &(0x7f0000000080)=ANY=[@ANYBLOB="7549f8187a2a6e40594b4473692aef0dda6d1a46f2019ed7e86b1d711c76877056283bedab9579d2125c7cad3b1f28c963b3a626ef87b075574ff5612ccc80d8e14883ad2a8e6516a15c410ce005b2e841ebacd55a1365c685244ec3b66b003e7ec96ed005906d578130183c37"]) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x2, 0x3, 0x2d8, 0x190, 0x190, 0x95ffffff, 0x77, 0x93ffffff, 0x240, 0x240, 0x221, 0x240, 0x240, 0x3, 0x0, {[{{@uncond, 0x0, 0x130, 0x190, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "bdc74c01369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa6ecab6b1d2cc05e3182f64694d7d05fb8b8c8f56627a54f905d564eeeb8334f650ca0f3c44f7fda4d20a55050342ea85ecc8838e7088de33582f36a0a375bb7008adc297a5ece1bb2df53d17bef26bb6f800", 0x7f, 0x2}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0xae010000]}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'veth0_to_batadv\x00', 'ip6gretap0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x338) [ 2836.446287][T29098] Cannot find add_set index 0 as target 14:48:27 executing program 1: r0 = socket$inet6(0xa, 0x400000000001, 0x0) (async) r1 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) ftruncate(r1, 0x2007fff) (async) close(r0) (async, rerun: 64) r2 = open(&(0x7f00000002c0)='./bus\x00', 0x14d842, 0x0) (rerun: 64) sendfile(r0, r1, 0x0, 0x201000) (async) pidfd_getfd(r2, r2, 0x0) (async) r3 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_int(r3, 0x29, 0xd1, &(0x7f0000000000)=0x4, 0x4) (async) setsockopt$inet6_MRT6_ADD_MFC(r3, 0x29, 0xc8, 0x0, 0x4) (async) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r3, 0x29, 0xc9, 0x0, 0x0) (async) setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xc8, 0x0, 0x3a) (async) setsockopt$inet6_MRT6_ADD_MFC_PROXY(0xffffffffffffffff, 0x29, 0xc9, 0x0, 0x0) (async) r4 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100), 0x30000, 0x0) close_range(0xffffffffffffffff, r4, 0x0) (async, rerun: 32) openat2$dir(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)={0x361800, 0x2, 0x12}, 0x18) (async, rerun: 32) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r5, &(0x7f0000000080)=ANY=[], 0x2bb98205) (async) ioctl$PERF_EVENT_IOC_PERIOD(r5, 0x40082404, &(0x7f00000000c0)=0x7) (async) write$binfmt_misc(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="73797a307192c44679c8f32e884c969836f3c674792c638682b17279194fc7211556af3e9abac5826c3760918e3ab208c01b2a71fa075a0a2d4d8be35d1be800f30802ed1afa979d0385ed445e2dbb2296135f44e6f95caaaad1b934d2147e1e570a7c66135103a934e075c0b75ec828ceb1cbc855e1526760c1c6a89d6cdb925a07d50986fb5bd02be5c1559412da9118bde799e604a562d06ac3e256671552c9d4b41f640518fdbbc64c209a6ca70dc4c68ee1c1ebf105e6bf6083b2eafd2bed43e3b99e335be8f2faf96bb802d2d3e3e8da9777d537432aa399e96081a002d4562e34071a8b71685a6160cb1dfa586a7b256986544bcf9cca445a220494fe381a06823679ba27ea2028dfd4ea121e3c397dc7357eb3c22a27b919fc860a28b0b3b9b8efd7a0a92cf96e7139d2073030dcab74d1336ba3589c71e77ed7a22cb08a0da316f74d04bfc60ec174687df2f8ccd0945788a9826420f42555043484cebb6190b8df0e2d23d680645a977a8a72b067fa6ddafe8cfdeef34c9981065ca303003ac65396eddd83f6a37faaf0bd1c5c94e94d4d0c5facaff3e9c4d5e636ec399da8d8308c3e143c987c563684ed267abfef727e9216354a16d18801a7d715b8203e4072e5dec3a870d09d934641f677623e4bf01c79fd5a796d0f3ede59a5a00881114534fa915f06bc39b730603cecb7206864a1a1ce61017f00000000000000f44e1b578cafd3f9dffdc02f6da3af8fa3f67b6a696d04d97ab81ed0130592e656377a44ce8faec2584b65ba1539b2784503e3cae8c724bc3c468b6a6ebdcc4ee8264fdc849cfa4fa409594fd05ed3eb240231aa0564854637b4d984e2668b1142271bce234b574f7c6dec9d6a789530dabc1b6691df96509ab422b990e021ef01b5335c6bc45e8081874b89c677cd74fb41215dc33b696754be67abe3c51f49afe4e5eb0fe499f3511680f77c4a4c7e83a134da370fcd706a91d555dcf7a2e1d2417628c6f6aa0bce30502a7588e081762093da45a089510d3c7926a048cb81e93aa7c0485fbfaf0d80e9d0f6168c3aee86b6a8056455425c234f0afa35f10b1c2580615d681a819c18fd953683b396e8e040213d4b1057acc9fbec1db1ff682ed752635d64676f0e7c8af19cfcdf2a5e2b6fbe6f72299823d9eb678e6b68e67f5f8e5433432885885940e3d4eae335d43d721e784ee15471a99d5888eb6555219dbd5994258d641b21c6f7c11be35346c1daddf94a05704c0378144d1e314d1fb15dc5928a4d08896dbb53e96c8c96c03521d6b4083645fe5829773a5185718bf38f261c89492bdbbc3c5aa3b095b3a1378e684f30d8be49564a04c61dabdc3663af62fe0e9032cb020b5fc78c5e9d4fac400326b5eaf7a44f37accd79891a47c9b680b7c9962dd0b82d3643fcddb5cf3746066cf753a874e26720bc2fb434131e13f4bc41fdd29893a83c3074f4e17e9bb79797a87eec099dbfd5aaeea4f2d75bc51fe4e6bce0f5400f3ce29414c50000f3cb61b7ddd57e4c5ae3973d04603ba4606a50cf78e5d2db0a4ca47a23894fe30130229445d3db10cbfd098911d783f094ffce4c48c15132d90bfb377b084c9d0827c798ff071c39dadafc5402398bc105a96da80d5dbcb1bd8d4eff977751037c468cb747894e15d82a11b6bb74bd1012a573ae57da4f57a8fad60e3da973bd9d958aa2d081dfb5411ec02fc2d7dbbc06b1b3a780552c35f3b57c5b69859952c94042945e2ae7eebc9c40e97c60528209acc784356b7ef0d9fe239bee855c692779bc2130ebec386310fb62468d9ab42256ea06eba5bff4dae46a08ae38d647f94a0489b168636de98434d355c623f5c37d8d42b34c1d59c7355d8b701a126a350ac06d38c91d6e66b084ad16fd005adf3c2b2167eb56681c50fa2378f2e7f14c65cfa511d50821e5048196863faed0455f983d15e1ecd9a60180bc20f9b7c411d24adea4f48a4d1ef6bc82a0aadf9e00668b2e080d84a72b77d6dc7e6165fa7f741c96403137a7194cf9b7e616d7df57af89b43ccfe38ef8ad15f4eb8fb1302f8bf45503c983ecaf31e53b645f47301731bb1706eba2a6ac023aa4820998b59afffcb918cc59a44a41d4aea98937f6175bcb909ce898a241a608cc7f3d967359beb4fdca33c4a868134fa80c7a78ec8f4403064c0ba7289206c19116e8c4281c7286c3c434fb0af9a01d16e4e49c85aaf75894bc7d6b6fcdb0119371a47363f8ea327739589b540595afe7a6b8e4c8ebecd3569b08824aa4a9ad6263e53446614c337ec9dccebe88d980af588b10fae609a7cd77a969b05e1679757705da6667dc07162a1f7eacae50f024aff7547ce3f5b906bf9a349a89008ad04853c9d36a621e6904865adf8bc2b5db3db906c565d044947b130d41f3bdc71d4035fad9107943ce8817e0ae8c023626cc6e80462ffdd73c1655fb5cf8ab686144fafc5058decaba1e23257d81a9563cde0dca9e5f07a80a17d47d173298416b26fa8cb33ca312131aeafd70cd525cc4413d4da819cd6d0cd71a8b6da33f228c527f37158119e6d3872bc0e94653368369f1a4cbdad01a0618f16aefc076fc869c7d3665c6ec8cb7bfa36b280b0e998df3c3277c0fc06f67e3b849745229309d6c03210b42a70e04418741e55ba00bf4effd99579c4b521f2489d1a8a2f3e12fe82ed30a44ea935835db17523492e9cf3c9afa9ee3f51ebb62477846e10bdc603ec1618a87a363f1d0dc089b4b0eaea1ce48aea80f968785545aef773086e52dcd24ab532b3475556a8334f24675534d5cef054038a8b759b074f186af0cbf5620833291187adc7c31a1a21a53b42e090b234ffcb6e40cd2c8a3cb50f55886d59e43084a137b9ee83b4e7b97632c502782fddab9bccc4c4fe2fd79f61de2474753f36d7d330d2270d55b073b9e897b86eb9ab04e473c31edbf2ad26deb81f7b88c02a73fcbd78932d37196b5319524a50f09000000000000005745acce14db19ca8937813bc4bd399ba8e4efb14f45ad5a10e9b0d4ec1c3222dcb425b6ca230f17542094ca49bf09c61384b37d019d7f4fd5a14be50246255a74b0fef388166c5814fe9c7edc91f38219238a4c775bfafffa5327ad45f9701186038f0ff443144d6223187750b0353eb8de1f915cd201edffd3349208bfebcb5237556c1c40bfe1782f209fd69f316e4d75001687d1819b16663c2b1bdd85765dd4f6ba5fd44d115922825612aa33c38ea4096d1a570f19fb48906f542a49905d7dd7ea5da695e067c2ab05f8530913b6d3399c7b0b4939c5d1b8ffe607eabf37e7ea092d11f64f10e4a8541742bdd6c657a0064773e1a1065089c84e72004a9f9c87b1f0d4a596139dc713ff2bd81c561831504ea8d09554271604f0aa2e25bc4ffa71cb35193586d0d2f727229f9c13817f0086e42a2808be1054414546a6444ae97a6a8d543ef241c956f39cd3191e9b2d0eb3f77e50105d73efa80c2e5f863a2ecdf3855f3c863b39824e51ed5f0f205a2b5b466239d633ccbb6a31e01e6c8be8637cef2b37c917256925f28f27664dd539613bfc2229f17602abb3007030aeff87b9ebc252781f018739ca7f53be0b7c0650e25aa26b4899b2dcf8d701e83af834a290ad7a9c303bd7e4a878a67f62bd109315ff465458485b12b7aa2996e965521757887bda67ec0bb41410f5e286e4a0ed3ae4bef3dc359dac9d175c19cfa1b481e55c1def82e8ecf59e9a83487a80ea78482387948d93e4f646732c10c496655e7018a6f05b62b48d6b301abf6d9e41adfc22d95f583ebe781fdb2c9ebac14bd71016fd9a9e7441ea65ea567ab898ab0ce7b6f39638ed986bceb59ea2561c68d370311af9710efb917b49464475ec7d12a1df6f25370f269f8073ca1435d6254f6a5db6596bfe157b74f8f3a22009ea01fc3f01d814fc28af4a4d03d865415e4fce931021c57052939e361993bafb76e3b4eabda59fcc4680aadc05564e1b7149652fbcc583bfe963123690df07cc5407a37eac4dd1c34496d074caddd5cfda5052f6787575f71ffb4326f89e9600ec2398f39ee1169307e9398b6ecad94043753a4b3de175324847e060a600233dbc0b91fe586680f23c173f2ff7011f64de900d288a4a3f938c38ff592a004a601170a8aade78a95a49bc772a6702a976cb53a44c33bd07ad550136f5a2833fc108beb9b11d4e2367c2b4eab08af20169887fb27eca915d4bedc344eb0cb7d4a76a10a40685410f75ffa6c0a106963ee7b7b32cd66540f82e37483f1d874b93355d097993667569bf3f5bc11a3c3e8b9b7478553a3142a26aefc483636b9f0573f455ce1fa36d94b5195ec2febc54c187effb43f071f8de221a986d09eb26b17977b8ab9e06f0923f2a1b4330a31cc86b484432db47c3733ae83725f7db18b30e31154d751f69eb77a2d3fbb356a79d1eb9d8e6ea6bbde29ecdd2688d4a7947e09126cfddb6867a270f401fe149e0f958df4db90b9b89a157d7e58fe5ae5abe2ff8f38f547de2939ba544e328f014669c7869f823844664b40f5ecd6d0deee64a630537633f0ff3a459f218920f7125f342ed1bd6a19f360f5d604f6ef90472ebe1d1a23a1257244241333670fbd04e3a05db294af6e1a4c4036bd6db6073348094b3d60536be7eb6a657266bbb410dde0d6e20762d05e9aba9a5451895f5d637a85c2e49d0692f3ad6be7a2206c2bb6d476587e918157c904795a8094332403f9a90dab316a80804c19b0b381e20fcd6c9e11662f771efa7ba9f1437d3c325b26c448433b35bc09be9338429d04059115effa95e4611a214026dc2a3900b8a291e77ae6ee49895b829f6558ca23a45648b2277afc150ac4d5f83cb65596c4ce6eea7595ac3832999804be907c9f2dab396e96bdbc6871452bf105c97049bd96c9e48ea3b38e72f2abf9e507544b4423bec3953be9332aee1ffd4ec733c229173279c90466f1969507beffa2d8552eab17b068d617145315faaad8508c2a03bee807a963edd0aeaffd339ff0ac33d6bd4b7dc4cc6eefb03159dc6203dc4506dac5f9456d00a965e5fb65adaf9da2eb51cfd1aa986d9db69267eeb6b0d2b288b7c360736ae9f8219f7f3c76740f30ed6404d00b89283b15559e042747cd761312f027cba5075575e9a2ac27fb57555c6af606c96f0c8d5b44e672c1e4dcc2a9af39ccd3fc66a0899910f455e339c6f2da5c18c81999495120c71d5955c7d34797080ce531bcb8abcf592915e1229cca6341d149f347376925aafcec00971b5697c86929cc18264a6ce2ba6fbc855e739a63e07d634b57fc7c0508e7b06fbbfdc527c0c1b9c9f8c8a8e2eb8df88fcde796858b7813ea12e4861430b43771018ed90f55e697d75d7e2a9c9a3d10a4e26554a4d4de8a32dc4554d050b9c3e1ab7e2c5c7d06e5c3813ee4503b89cc1ddfa60ca0daf034fd57d8240305994ed50ff71f750348ba55628156f02a83562eecfec8ee70de39721d302aeabc9cc9dfe72c57c97726b74d4919062c800b9a282c00cdbd448944f454b9606f6590b501fa58f9c6eda8e9db28343fbb4ef16376248bae28944d682f8aa473422eaf874dca473ef41cdc49fba906cdbee87378ccd6cdc330f940626def13d283916c5126dea689067a23d6f75cc88f05a582c56ef4cf375be90a7e3d32478a83ced498bd4e011581eed75bacc4a38f0b720631e4141236774f4bbdded4cdaea12faff38f448c46710b21144c2cac7c9ac2d130d69eacb837960393004892aa20000000000000000e30e41e3303756c89aa7ea8e3cddcd26d748bef58054da2f66c3bc322cffcf020ff43ec10b0715f7a03b22c5507841f875945b37fb74535b14624686f66e60c24f77f8bee0c370a6118ce7823c74139474c96019e322f92e5ba1c424fcd86a92f7f7e85baa71e19acd184b36b18599b393bd15cdda6b8e50c69c9cdd6abd4c18c8bd7dd4ea65bdbe956771efe7dbc29f04408202c060410855248fd0eadfb5307b48fa595e9f607857fbea7069eaa73b65546dbff50db88c58eb1e48c9a89f045111f0be621f1cf361d3302e60c3033b982629f58c4d6f5306c239b7efc4f27a02ecf037d8060f5707917cd1b9b071c0599a8d33e8"], 0x10f2) 14:48:27 executing program 3: r0 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0xd1, &(0x7f0000000000)=0x4, 0x4) setsockopt$inet6_MRT6_ADD_MFC(r0, 0x29, 0xc8, 0x0, 0x4) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r0, 0x29, 0xc9, 0x0, 0x0) ioctl$VFAT_IOCTL_READDIR_SHORT(r0, 0x82307202, &(0x7f0000000200)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) r1 = syz_io_uring_setup(0x2de2, &(0x7f0000000a40)={0x0, 0x1d86}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000fe8000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f00000005c0)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0xb2, 0x0, 0x0, 0x0, 0x7401) syz_io_uring_submit(r2, 0x0, &(0x7f0000000180)=@IORING_OP_STATX={0x15, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000440), &(0x7f0000000100)='./file0\x00', 0x100, 0x4000, 0x1}, 0x7) r4 = syz_io_uring_setup(0x5d64, &(0x7f0000000540)={0x0, 0xfffffffc, 0x20, 0x0, 0xfffffffc}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000002000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000600)=0x0) syz_io_uring_submit(r5, r6, &(0x7f00000000c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f00000003c0)}, 0x1010001) r7 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r4, 0x10000000) syz_io_uring_submit(r5, r7, &(0x7f0000000340)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd_index}, 0x0) syz_emit_ethernet(0x3b6, &(0x7f0000001680)=ANY=[@ANYBLOB="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"], 0x0) syz_io_uring_submit(r5, r7, &(0x7f0000000000)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r5, r7, &(0x7f0000004040)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r5, 0x0, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL={0xe, 0x5, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x1}, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_CLOSE, 0x0) syz_io_uring_submit(r5, r7, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE, 0x0) syz_io_uring_complete(r5) 14:48:27 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000001, 0x4010, r0, 0x9e31d000) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x2) write$evdev(r1, &(0x7f000004d000)=[{}], 0xfffffe82) openat(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/self/exe\x00', 0x0, 0x0) (async) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000001, 0x4010, r0, 0x9e31d000) (async) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) (async) syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x2) (async) write$evdev(r1, &(0x7f000004d000)=[{}], 0xfffffe82) (async) 14:48:27 executing program 5: clone(0x80910b00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) set_mempolicy(0x3, &(0x7f0000000040)=0xffffffff80000001, 0x400) gettid() r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, &(0x7f0000000080)=ANY=[@ANYBLOB="7549f8187a2a6e40594b4473692aef0dda6d1a46f2019ed7e86b1d711c76877056283bedab9579d2125c7cad3b1f28c963b3a626ef87b075574ff5612ccc80d8e14883ad2a8e6516a15c410ce005b2e841ebacd55a1365c685244ec3b66b003e7ec96ed005906d578130183c37"]) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x2, 0x3, 0x2d8, 0x190, 0x190, 0x95ffffff, 0x77, 0x93ffffff, 0x240, 0x240, 0x221, 0x240, 0x240, 0x3, 0x0, {[{{@uncond, 0x0, 0x130, 0x190, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "bdc74c01369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa6ecab6b1d2cc05e3182f64694d7d05fb8b8c8f56627a54f905d564eeeb8334f650ca0f3c44f7fda4d20a55050342ea85ecc8838e7088de33582f36a0a375bb7008adc297a5ece1bb2df53d17bef26bb6f800", 0x7f, 0x2}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0xaf010000]}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'veth0_to_batadv\x00', 'ip6gretap0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x338) 14:48:27 executing program 2: clone(0x80910b00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) set_mempolicy(0x3, &(0x7f0000000040), 0x0) gettid() r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x2, 0x3, 0x2d8, 0x190, 0x190, 0x95ffffff, 0x77, 0x93ffffff, 0x240, 0x240, 0x221, 0x240, 0x240, 0x3, 0x0, {[{{@uncond, 0x0, 0x130, 0x190, 0x0, {0x0, 0x76}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "bdc74c01369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa6ecab6b1d2cc05e3182f64694d7d05fb8b8c8f56627a54f905d564eeeb8334f650ca0f3c44f7fda4d20a55050342ea85ecc8838e7088de33582f36a0a375bb7008adc297a5ece1bb2df53d17bef26bb6f800", 0x7f}}]}, @common=@SET={0x60}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'veth0_to_batadv\x00', 'ip6gretap0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x338) 14:48:27 executing program 4: r0 = socket$inet6(0xa, 0x400000000001, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) ftruncate(r1, 0x2007fff) close(r0) open(&(0x7f00000002c0)='./bus\x00', 0x14d842, 0x0) sendfile(r0, r1, 0x0, 0x201000) (fail_nth: 78) [ 2836.792524][T29104] FAULT_INJECTION: forcing a failure. [ 2836.792524][T29104] name failslab, interval 1, probability 0, space 0, times 0 [ 2836.800882][T29110] Cannot find add_set index 0 as target [ 2836.805211][T29104] CPU: 0 PID: 29104 Comm: syz-executor.4 Tainted: G W 5.16.0-rc6-syzkaller #0 [ 2836.820887][T29104] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2836.820902][T29104] Call Trace: [ 2836.820908][T29104] [ 2836.820915][T29104] dump_stack_lvl+0xd6/0x122 14:48:27 executing program 5: clone(0x80910b00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) set_mempolicy(0x3, &(0x7f0000000040)=0xffffffff80000001, 0x400) gettid() r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, &(0x7f0000000080)=ANY=[@ANYBLOB="7549f8187a2a6e40594b4473692aef0dda6d1a46f2019ed7e86b1d711c76877056283bedab9579d2125c7cad3b1f28c963b3a626ef87b075574ff5612ccc80d8e14883ad2a8e6516a15c410ce005b2e841ebacd55a1365c685244ec3b66b003e7ec96ed005906d578130183c37"]) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x2, 0x3, 0x2d8, 0x190, 0x190, 0x95ffffff, 0x77, 0x93ffffff, 0x240, 0x240, 0x221, 0x240, 0x240, 0x3, 0x0, {[{{@uncond, 0x0, 0x130, 0x190, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "bdc74c01369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa6ecab6b1d2cc05e3182f64694d7d05fb8b8c8f56627a54f905d564eeeb8334f650ca0f3c44f7fda4d20a55050342ea85ecc8838e7088de33582f36a0a375bb7008adc297a5ece1bb2df53d17bef26bb6f800", 0x7f, 0x2}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0xb0000000]}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'veth0_to_batadv\x00', 'ip6gretap0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x338) [ 2836.820938][T29104] dump_stack+0x11/0x1b [ 2836.820958][T29104] should_fail+0x23c/0x250 [ 2836.850284][T29104] ? mempool_alloc_slab+0x16/0x20 [ 2836.850314][T29104] __should_failslab+0x81/0x90 14:48:27 executing program 2: clone(0x80910b00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) set_mempolicy(0x3, &(0x7f0000000040), 0x0) gettid() r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x2, 0x3, 0x2d8, 0x190, 0x190, 0x95ffffff, 0x77, 0x93ffffff, 0x240, 0x240, 0x221, 0x240, 0x240, 0x3, 0x0, {[{{@uncond, 0x0, 0x130, 0x190, 0x0, {0x0, 0x7a}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "bdc74c01369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa6ecab6b1d2cc05e3182f64694d7d05fb8b8c8f56627a54f905d564eeeb8334f650ca0f3c44f7fda4d20a55050342ea85ecc8838e7088de33582f36a0a375bb7008adc297a5ece1bb2df53d17bef26bb6f800", 0x7f}}]}, @common=@SET={0x60}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'veth0_to_batadv\x00', 'ip6gretap0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x338) [ 2836.850403][T29104] should_failslab+0x5/0x20 14:48:27 executing program 1: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) ftruncate(r1, 0x2007fff) close(r0) open(&(0x7f00000002c0)='./bus\x00', 0x14d842, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0x0) sendfile(r0, r1, 0x0, 0x201000) r2 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MFC(r2, 0x29, 0xc8, 0x0, 0x4) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r2, 0x29, 0xc9, 0x0, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e21, 0xc83, @ipv4={'\x00', '\xff\xff', @private=0xa010102}, 0x4}, 0x1c) close(r0) socketpair(0x3, 0x3, 0x22b, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f00000000c0)=0x20810, 0x4) [ 2836.850425][T29104] kmem_cache_alloc+0x4f/0x320 14:48:27 executing program 5: clone(0x80910b00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) set_mempolicy(0x3, &(0x7f0000000040)=0xffffffff80000001, 0x400) gettid() r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, &(0x7f0000000080)=ANY=[@ANYBLOB="7549f8187a2a6e40594b4473692aef0dda6d1a46f2019ed7e86b1d711c76877056283bedab9579d2125c7cad3b1f28c963b3a626ef87b075574ff5612ccc80d8e14883ad2a8e6516a15c410ce005b2e841ebacd55a1365c685244ec3b66b003e7ec96ed005906d578130183c37"]) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x2, 0x3, 0x2d8, 0x190, 0x190, 0x95ffffff, 0x77, 0x93ffffff, 0x240, 0x240, 0x221, 0x240, 0x240, 0x3, 0x0, {[{{@uncond, 0x0, 0x130, 0x190, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "bdc74c01369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa6ecab6b1d2cc05e3182f64694d7d05fb8b8c8f56627a54f905d564eeeb8334f650ca0f3c44f7fda4d20a55050342ea85ecc8838e7088de33582f36a0a375bb7008adc297a5ece1bb2df53d17bef26bb6f800", 0x7f, 0x2}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0xb0020000]}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'veth0_to_batadv\x00', 'ip6gretap0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x338) 14:48:27 executing program 2: clone(0x80910b00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) set_mempolicy(0x3, &(0x7f0000000040), 0x0) gettid() r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x2, 0x3, 0x2d8, 0x190, 0x190, 0x95ffffff, 0x77, 0x93ffffff, 0x240, 0x240, 0x221, 0x240, 0x240, 0x3, 0x0, {[{{@uncond, 0x0, 0x130, 0x190, 0x0, {0x0, 0x7d}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "bdc74c01369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa6ecab6b1d2cc05e3182f64694d7d05fb8b8c8f56627a54f905d564eeeb8334f650ca0f3c44f7fda4d20a55050342ea85ecc8838e7088de33582f36a0a375bb7008adc297a5ece1bb2df53d17bef26bb6f800", 0x7f}}]}, @common=@SET={0x60}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'veth0_to_batadv\x00', 'ip6gretap0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x338) [ 2836.850480][T29104] mempool_alloc_slab+0x16/0x20 [ 2836.850507][T29104] ? mempool_free+0x130/0x130 14:48:27 executing program 1: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) ftruncate(r1, 0x2007fff) close(r0) open(&(0x7f00000002c0)='./bus\x00', 0x14d842, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0x0) sendfile(r0, r1, 0x0, 0x201000) r2 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MFC(r2, 0x29, 0xc8, 0x0, 0x4) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r2, 0x29, 0xc9, 0x0, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e21, 0xc83, @ipv4={'\x00', '\xff\xff', @private=0xa010102}, 0x4}, 0x1c) close(r0) socketpair(0x3, 0x3, 0x22b, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f00000000c0)=0x20810, 0x4) socket$inet6(0xa, 0x400000000001, 0x0) (async) open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) (async) ftruncate(r1, 0x2007fff) (async) close(r0) (async) open(&(0x7f00000002c0)='./bus\x00', 0x14d842, 0x0) (async) creat(&(0x7f0000000040)='./bus\x00', 0x0) (async) sendfile(r0, r1, 0x0, 0x201000) (async) socket$inet6(0xa, 0x3, 0x3a) (async) setsockopt$inet6_MRT6_ADD_MFC(r2, 0x29, 0xc8, 0x0, 0x4) (async) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r2, 0x29, 0xc9, 0x0, 0x0) (async) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e21, 0xc83, @ipv4={'\x00', '\xff\xff', @private=0xa010102}, 0x4}, 0x1c) (async) close(r0) (async) socketpair(0x3, 0x3, 0x22b, &(0x7f0000000080)) (async) setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f00000000c0)=0x20810, 0x4) (async) 14:48:27 executing program 2: clone(0x80910b00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) set_mempolicy(0x3, &(0x7f0000000040), 0x0) gettid() r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x2, 0x3, 0x2d8, 0x190, 0x190, 0x95ffffff, 0x77, 0x93ffffff, 0x240, 0x240, 0x221, 0x240, 0x240, 0x3, 0x0, {[{{@uncond, 0x0, 0x130, 0x190, 0x0, {0x0, 0x82}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "bdc74c01369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa6ecab6b1d2cc05e3182f64694d7d05fb8b8c8f56627a54f905d564eeeb8334f650ca0f3c44f7fda4d20a55050342ea85ecc8838e7088de33582f36a0a375bb7008adc297a5ece1bb2df53d17bef26bb6f800", 0x7f}}]}, @common=@SET={0x60}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'veth0_to_batadv\x00', 'ip6gretap0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x338) [ 2836.850532][T29104] mempool_alloc+0x9d/0x310 [ 2836.850555][T29104] ? jbd2_journal_stop+0x3bf/0x4c0 [ 2836.850668][T29104] ? preempt_count_add+0x4e/0x90 [ 2836.850695][T29104] bio_alloc_bioset+0xcc/0x560 [ 2836.850716][T29104] ? iov_iter_alignment+0x34b/0x370 [ 2836.850741][T29104] iomap_dio_bio_iter+0x5ed/0xc70 [ 2836.850830][T29104] ? ext4_alloc_da_blocks+0xd0/0xd0 [ 2836.850856][T29104] __iomap_dio_rw+0x8b5/0x1070 [ 2836.850896][T29104] iomap_dio_rw+0x38/0x80 [ 2836.850920][T29104] ext4_file_write_iter+0x7eb/0xdc0 [ 2836.850944][T29104] ? filemap_read+0x1661/0x16d0 [ 2836.850972][T29104] do_iter_readv_writev+0x2de/0x380 [ 2836.850995][T29104] do_iter_write+0x192/0x5c0 [ 2836.851019][T29104] ? splice_from_pipe_next+0x34f/0x3b0 [ 2836.851045][T29104] ? kmalloc_array+0x2d/0x40 [ 2836.851082][T29104] vfs_iter_write+0x4c/0x70 [ 2836.851122][T29104] iter_file_splice_write+0x43a/0x790 [ 2836.851148][T29104] ? splice_from_pipe+0xd0/0xd0 [ 2836.851169][T29104] direct_splice_actor+0x80/0xa0 [ 2836.851191][T29104] splice_direct_to_actor+0x345/0x650 [ 2836.851245][T29104] ? do_splice_direct+0x190/0x190 [ 2836.851268][T29104] do_splice_direct+0x106/0x190 [ 2836.851291][T29104] do_sendfile+0x675/0xc40 [ 2836.851311][T29104] __x64_sys_sendfile64+0x102/0x140 [ 2836.851331][T29104] do_syscall_64+0x44/0xd0 [ 2836.851427][T29104] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2836.851453][T29104] RIP: 0033:0x7f2d29acae99 [ 2836.851469][T29104] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2836.851489][T29104] RSP: 002b:00007f2d28c41168 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 2836.851533][T29104] RAX: ffffffffffffffda RBX: 00007f2d29bddf60 RCX: 00007f2d29acae99 [ 2836.851586][T29104] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 2836.851603][T29104] RBP: 00007f2d28c411d0 R08: 0000000000000000 R09: 0000000000000000 [ 2836.851618][T29104] R10: 0000000000201000 R11: 0000000000000246 R12: 0000000000000002 [ 2836.851633][T29104] R13: 00007ffcc1d93fdf R14: 00007f2d28c41300 R15: 0000000000022000 14:48:27 executing program 3: r0 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0xd1, &(0x7f0000000000)=0x4, 0x4) setsockopt$inet6_MRT6_ADD_MFC(r0, 0x29, 0xc8, 0x0, 0x4) (async) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r0, 0x29, 0xc9, 0x0, 0x0) (async) ioctl$VFAT_IOCTL_READDIR_SHORT(r0, 0x82307202, &(0x7f0000000200)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) (async, rerun: 32) r1 = syz_io_uring_setup(0x2de2, &(0x7f0000000a40)={0x0, 0x1d86}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000fe8000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f00000005c0)=0x0) (rerun: 32) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0xb2, 0x0, 0x0, 0x0, 0x7401) (async) syz_io_uring_submit(r2, 0x0, &(0x7f0000000180)=@IORING_OP_STATX={0x15, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000440), &(0x7f0000000100)='./file0\x00', 0x100, 0x4000, 0x1}, 0x7) r4 = syz_io_uring_setup(0x5d64, &(0x7f0000000540)={0x0, 0xfffffffc, 0x20, 0x0, 0xfffffffc}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000002000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000600)=0x0) syz_io_uring_submit(r5, r6, &(0x7f00000000c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f00000003c0)}, 0x1010001) (async, rerun: 32) r7 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r4, 0x10000000) (rerun: 32) syz_io_uring_submit(r5, r7, &(0x7f0000000340)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd_index}, 0x0) (async) syz_emit_ethernet(0x3b6, &(0x7f0000001680)=ANY=[@ANYBLOB="ffffffffffffbbbbbbbbbbbb86dd6008000003803afffe800000000000000000000000000000ff02000000000000000000000000000186009078000000000000000000000000000aa78ce540b259808000000000000023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1f4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c11b37adac15084dbaf736b41e5af18020001ffffefffa0f8ca1cc80008001818fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92326a7051e460a13ddde25a5b85b9d93090d625d8a049b92804cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716aaef2915d17a4e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978001d06aa85616177c61bc943afcb84619755403946b0730a00d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808891f0000002367bc591dd8611e822ff0822a18b79f7c5eba31fb68b2d734a6671e27182a7a267afb9c165406fc2e5af390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3141123f5acaa556b9f30dcab2b90aa235a670670ffc5dc49dfb58d89310000000000180b17dcea46805d6309c20547c06b18901b0aeff04cdb95f3c75dc2d21da83b89483b1084928bcb74024bc2de16ffce57d232740075671545e65eb2e9e9946a3f0e2bc4619f91394c0420dad16338641ba29e5d02630000007d75138537d68e2d2c6393a9f3be2107fcf98a102ec1876d4e6fa3b20519bbaa8a029cee00b8d3485e4163ed09bdb581c9fe68a356f542b043059f46f6d7161016a80b05000000000000140d14a12426c42ef0e74d2d42cfb3f27fafb6c6905bbc94d33e1ea71a28105f543e868a8a53b381a9d33e2b1e26fb1d18065daa7628cf9ef083611c9f6ae2e1eb3d8bf9c6ab2642c4808288ea6ab3beb5fdc5fdaabc2c676d8800871a6aa54155dea2d995cb22c9924e0ad38c6967052cc7786d779b8353aac33a53d79b05613a12328f61524d17fb632dbf04542188e213408c258a6f0005d517eb4cdce9674a1fda018dff16e70b8b14c4b7a94fe18e88605aa6be1a02a326a6bce65f81ed00000000000000d5dd569ee2a61ec4cddc16040d4bd3f987903b3d9e45b500ae92a3696ca25582383863799a1935f90115de8f6ff48f87acd9df5aac0fd190996d59aab4d023c6f7bfa6f98b9bca96e44076e42de5566b07dd5cb921caacbfae950c17ae0cf1fcab2237f6c04f3d1344e64705c6a034b6a83ef64d70734abe59356f750040666500003e2b1ec318f2799e3f3621e5a31b14ced5d6366f5f7b6b7e84cfaf7cf18a3497bf2254c2bd6f902bf2a2707e00d95c32780e2cef63f67dc862e5c80d4c7dd915941ca532a8e80e8fb0daa467beafc4304be9e0917b1216364757890ddcb7af16e86e9b18d9817b8a12ef3a581f43418c8b9a86759d59da3a3aeca26516705dc88786c24870522582237129aac3dfbbf8d569878ee6d18fad4b7eb33f0a382b3af0b19032058d3c992e9c01eed1394351d7b18a9b3123ec2180bf232515c1da2b302896434934599d1729761965cb3959e5a8ba876b1f6e61f25f51e9921aa7a920f92ae1b03dcdc6fa87bd85ea7643347e757e086796e17d1d78a6de4675745e6558408b3b4e0ff4ead7f4ca8c1d32ce70e32472c6980a13cc91188e0469f2cdccefa025d7f61e9dc2042e6648180ea7fd4c144dc77c4803d3850216ebb6a25c5e55c2e58f0f3e6dca7793f2d885d4ba0ab109fdd8257d05f24e4940d76e853665a02c561d7ca085707d12e24a39e00b6b3d875f81479f5d8dcf79f878a96ce31e50342b302ab09b26eebf1ebfc76e781286b436a092f079d3ef194aa201dbb5c8c68971c5f940e04d429102324e67cb716b"], 0x0) (async) syz_io_uring_submit(r5, r7, &(0x7f0000000000)=@IORING_OP_SYNC_FILE_RANGE, 0x0) (async) syz_io_uring_submit(r5, r7, &(0x7f0000004040)=@IORING_OP_SYNC_FILE_RANGE, 0x0) (async) syz_io_uring_submit(r5, 0x0, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL={0xe, 0x5, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x1}, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_CLOSE, 0x0) (async) syz_io_uring_submit(r5, r7, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE, 0x0) (async, rerun: 32) syz_io_uring_complete(r5) (rerun: 32) 14:48:27 executing program 5: clone(0x80910b00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) set_mempolicy(0x3, &(0x7f0000000040)=0xffffffff80000001, 0x400) gettid() r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, &(0x7f0000000080)=ANY=[@ANYBLOB="7549f8187a2a6e40594b4473692aef0dda6d1a46f2019ed7e86b1d711c76877056283bedab9579d2125c7cad3b1f28c963b3a626ef87b075574ff5612ccc80d8e14883ad2a8e6516a15c410ce005b2e841ebacd55a1365c685244ec3b66b003e7ec96ed005906d578130183c37"]) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x2, 0x3, 0x2d8, 0x190, 0x190, 0x95ffffff, 0x77, 0x93ffffff, 0x240, 0x240, 0x221, 0x240, 0x240, 0x3, 0x0, {[{{@uncond, 0x0, 0x130, 0x190, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "bdc74c01369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa6ecab6b1d2cc05e3182f64694d7d05fb8b8c8f56627a54f905d564eeeb8334f650ca0f3c44f7fda4d20a55050342ea85ecc8838e7088de33582f36a0a375bb7008adc297a5ece1bb2df53d17bef26bb6f800", 0x7f, 0x2}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0xb1000000]}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'veth0_to_batadv\x00', 'ip6gretap0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x338) 14:48:27 executing program 2: clone(0x80910b00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) set_mempolicy(0x3, &(0x7f0000000040), 0x0) gettid() r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x2, 0x3, 0x2d8, 0x190, 0x190, 0x95ffffff, 0x77, 0x93ffffff, 0x240, 0x240, 0x221, 0x240, 0x240, 0x3, 0x0, {[{{@uncond, 0x0, 0x130, 0x190, 0x0, {0x0, 0x86}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "bdc74c01369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa6ecab6b1d2cc05e3182f64694d7d05fb8b8c8f56627a54f905d564eeeb8334f650ca0f3c44f7fda4d20a55050342ea85ecc8838e7088de33582f36a0a375bb7008adc297a5ece1bb2df53d17bef26bb6f800", 0x7f}}]}, @common=@SET={0x60}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'veth0_to_batadv\x00', 'ip6gretap0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x338) 14:48:27 executing program 1: r0 = socket$inet6(0xa, 0x400000000001, 0x0) (async) r1 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) ftruncate(r1, 0x2007fff) close(r0) (async, rerun: 32) open(&(0x7f00000002c0)='./bus\x00', 0x14d842, 0x0) (async, rerun: 32) creat(&(0x7f0000000040)='./bus\x00', 0x0) sendfile(r0, r1, 0x0, 0x201000) (async) r2 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MFC(r2, 0x29, 0xc8, 0x0, 0x4) (async, rerun: 64) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r2, 0x29, 0xc9, 0x0, 0x0) (async, rerun: 64) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e21, 0xc83, @ipv4={'\x00', '\xff\xff', @private=0xa010102}, 0x4}, 0x1c) (async, rerun: 32) close(r0) (async, rerun: 32) socketpair(0x3, 0x3, 0x22b, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f00000000c0)=0x20810, 0x4) 14:48:27 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000001, 0x4010, r0, 0x9e31d000) (async) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) (async) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x2) write$evdev(r1, &(0x7f000004d000)=[{}], 0xfffffe82) 14:48:27 executing program 4: r0 = socket$inet6(0xa, 0x400000000001, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) ftruncate(r1, 0x2007fff) close(r0) open(&(0x7f00000002c0)='./bus\x00', 0x14d842, 0x0) sendfile(r0, r1, 0x0, 0x201000) (fail_nth: 79) 14:48:27 executing program 5: clone(0x80910b00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) set_mempolicy(0x3, &(0x7f0000000040)=0xffffffff80000001, 0x400) gettid() r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, &(0x7f0000000080)=ANY=[@ANYBLOB="7549f8187a2a6e40594b4473692aef0dda6d1a46f2019ed7e86b1d711c76877056283bedab9579d2125c7cad3b1f28c963b3a626ef87b075574ff5612ccc80d8e14883ad2a8e6516a15c410ce005b2e841ebacd55a1365c685244ec3b66b003e7ec96ed005906d578130183c37"]) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x2, 0x3, 0x2d8, 0x190, 0x190, 0x95ffffff, 0x77, 0x93ffffff, 0x240, 0x240, 0x221, 0x240, 0x240, 0x3, 0x0, {[{{@uncond, 0x0, 0x130, 0x190, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "bdc74c01369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa6ecab6b1d2cc05e3182f64694d7d05fb8b8c8f56627a54f905d564eeeb8334f650ca0f3c44f7fda4d20a55050342ea85ecc8838e7088de33582f36a0a375bb7008adc297a5ece1bb2df53d17bef26bb6f800", 0x7f, 0x2}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0xb1ffffff]}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'veth0_to_batadv\x00', 'ip6gretap0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x338) 14:48:27 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/self/exe\x00', 0x0, 0x100) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x2) ioctl$AUTOFS_DEV_IOCTL_FAIL(r0, 0xc0189377, &(0x7f0000000100)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB='\x00'/16]) r3 = accept(r0, &(0x7f0000000140), &(0x7f0000000200)=0x80) sendfile(r2, r3, &(0x7f0000000240)=0xd71c, 0xba59) r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x100, 0x0) r5 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_int(r5, 0x29, 0xd1, &(0x7f0000000000)=0x4, 0x4) setsockopt$inet6_MRT6_ADD_MFC(r5, 0x29, 0xc8, 0x0, 0x4) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r5, 0x29, 0xc9, 0x0, 0x0) ioctl$INCFS_IOC_PERMIT_FILL(r4, 0x40046721, &(0x7f0000000080)={r5}) setsockopt$inet6_MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xc8, 0x0, 0x4) setsockopt$inet6_MRT6_ADD_MFC_PROXY(0xffffffffffffffff, 0x29, 0xc9, 0x0, 0x0) accept(0xffffffffffffffff, &(0x7f0000000300)=@ethernet={0x0, @broadcast}, &(0x7f0000000380)=0x80) r6 = socket$inet6_dccp(0xa, 0x6, 0x0) setsockopt$inet6_int(r6, 0x29, 0x16, &(0x7f00000000c0)=0x100, 0x4) write$evdev(r1, &(0x7f000004d000)=[{}], 0xfffffe82) fcntl$getownex(r5, 0x10, &(0x7f0000000280)={0x0, 0x0}) ioctl$sock_SIOCSPGRP(r0, 0x8902, &(0x7f00000002c0)=r7) [ 2836.851651][T29104] [ 2836.874555][T29118] Cannot find add_set index 0 as target 14:48:27 executing program 2: clone(0x80910b00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) set_mempolicy(0x3, &(0x7f0000000040), 0x0) gettid() r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x2, 0x3, 0x2d8, 0x190, 0x190, 0x95ffffff, 0x77, 0x93ffffff, 0x240, 0x240, 0x221, 0x240, 0x240, 0x3, 0x0, {[{{@uncond, 0x0, 0x130, 0x190, 0x0, {0x0, 0x88}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "bdc74c01369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa6ecab6b1d2cc05e3182f64694d7d05fb8b8c8f56627a54f905d564eeeb8334f650ca0f3c44f7fda4d20a55050342ea85ecc8838e7088de33582f36a0a375bb7008adc297a5ece1bb2df53d17bef26bb6f800", 0x7f}}]}, @common=@SET={0x60}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'veth0_to_batadv\x00', 'ip6gretap0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x338) 14:48:27 executing program 5: clone(0x80910b00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) set_mempolicy(0x3, &(0x7f0000000040)=0xffffffff80000001, 0x400) gettid() r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, &(0x7f0000000080)=ANY=[@ANYBLOB="7549f8187a2a6e40594b4473692aef0dda6d1a46f2019ed7e86b1d711c76877056283bedab9579d2125c7cad3b1f28c963b3a626ef87b075574ff5612ccc80d8e14883ad2a8e6516a15c410ce005b2e841ebacd55a1365c685244ec3b66b003e7ec96ed005906d578130183c37"]) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x2, 0x3, 0x2d8, 0x190, 0x190, 0x95ffffff, 0x77, 0x93ffffff, 0x240, 0x240, 0x221, 0x240, 0x240, 0x3, 0x0, {[{{@uncond, 0x0, 0x130, 0x190, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "bdc74c01369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa6ecab6b1d2cc05e3182f64694d7d05fb8b8c8f56627a54f905d564eeeb8334f650ca0f3c44f7fda4d20a55050342ea85ecc8838e7088de33582f36a0a375bb7008adc297a5ece1bb2df53d17bef26bb6f800", 0x7f, 0x2}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0xb2010000]}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'veth0_to_batadv\x00', 'ip6gretap0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x338) [ 2837.312559][T29185] FAULT_INJECTION: forcing a failure. [ 2837.312559][T29185] name failslab, interval 1, probability 0, space 0, times 0 [ 2837.325319][T29185] CPU: 0 PID: 29185 Comm: syz-executor.4 Tainted: G W 5.16.0-rc6-syzkaller #0 [ 2837.335506][T29185] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2837.345640][T29185] Call Trace: [ 2837.348918][T29185] [ 2837.351847][T29185] dump_stack_lvl+0xd6/0x122 [ 2837.356478][T29185] dump_stack+0x11/0x1b 14:48:27 executing program 1: r0 = socket$inet6(0xa, 0x400000000001, 0x0) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r0, 0x89f9, &(0x7f0000000180)={'syztnl2\x00', &(0x7f0000000100)={'ip6gre0\x00', 0x0, 0x4, 0x1, 0x8, 0x400, 0x50, @local, @loopback, 0x80, 0x80, 0x800, 0xffffffff}}) ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f00000001c0)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x20, r1}) r2 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) ftruncate(r2, 0x2007fff) close(r0) io_uring_register$IORING_REGISTER_FILES(r2, 0x2, &(0x7f0000000000)=[r0], 0x1) open(&(0x7f00000002c0)='./bus\x00', 0x14d842, 0x0) r3 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_int(r3, 0x29, 0xd1, &(0x7f0000000000)=0x4, 0x4) setsockopt$inet6_MRT6_ADD_MFC(r3, 0x29, 0xc8, 0x0, 0x4) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r3, 0x29, 0xc9, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r0, 0x89f4, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000040)={'ip6tnl0\x00', r1, 0x38, 0x7, 0xe4, 0x5, 0x20, @dev={0xfe, 0x80, '\x00', 0x36}, @remote, 0x700, 0x7, 0xff, 0x8001}}) ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000200)={@dev={0xfe, 0x80, '\x00', 0x24}, 0x7, r4}) sendfile(r0, r2, 0x0, 0x201000) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r5, &(0x7f0000000080)=ANY=[], 0x2bb98205) openat$cgroup_ro(r5, &(0x7f0000000240)='cpuset.effective_cpus\x00', 0x0, 0x0) 14:48:27 executing program 5: clone(0x80910b00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) set_mempolicy(0x3, &(0x7f0000000040)=0xffffffff80000001, 0x400) gettid() r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, &(0x7f0000000080)=ANY=[@ANYBLOB="7549f8187a2a6e40594b4473692aef0dda6d1a46f2019ed7e86b1d711c76877056283bedab9579d2125c7cad3b1f28c963b3a626ef87b075574ff5612ccc80d8e14883ad2a8e6516a15c410ce005b2e841ebacd55a1365c685244ec3b66b003e7ec96ed005906d578130183c37"]) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x2, 0x3, 0x2d8, 0x190, 0x190, 0x95ffffff, 0x77, 0x93ffffff, 0x240, 0x240, 0x221, 0x240, 0x240, 0x3, 0x0, {[{{@uncond, 0x0, 0x130, 0x190, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "bdc74c01369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa6ecab6b1d2cc05e3182f64694d7d05fb8b8c8f56627a54f905d564eeeb8334f650ca0f3c44f7fda4d20a55050342ea85ecc8838e7088de33582f36a0a375bb7008adc297a5ece1bb2df53d17bef26bb6f800", 0x7f, 0x2}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0xb2ffffff]}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'veth0_to_batadv\x00', 'ip6gretap0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x338) [ 2837.360629][T29185] should_fail+0x23c/0x250 [ 2837.365091][T29185] __should_failslab+0x81/0x90 [ 2837.369861][T29185] should_failslab+0x5/0x20 [ 2837.374467][T29185] kmem_cache_alloc_node+0x61/0x2d0 [ 2837.379724][T29185] ? create_task_io_context+0x36/0x1e0 [ 2837.385192][T29185] ? __blk_queue_split+0xb2f/0xc60 [ 2837.390304][T29185] create_task_io_context+0x36/0x1e0 [ 2837.395658][T29185] submit_bio_checks+0x828/0x8e0 [ 2837.400603][T29185] ? __rcu_read_unlock+0x5c/0x290 [ 2837.405628][T29185] blk_mq_submit_bio+0x2e1/0x1470 14:48:27 executing program 3: r0 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0xd1, &(0x7f0000000000)=0x4, 0x4) (async) setsockopt$inet6_MRT6_ADD_MFC(r0, 0x29, 0xc8, 0x0, 0x4) (async) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r0, 0x29, 0xc9, 0x0, 0x0) ioctl$VFAT_IOCTL_READDIR_SHORT(r0, 0x82307202, &(0x7f0000000200)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) (async) r1 = syz_io_uring_setup(0x2de2, &(0x7f0000000a40)={0x0, 0x1d86}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000fe8000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f00000005c0)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0xb2, 0x0, 0x0, 0x0, 0x7401) syz_io_uring_submit(r2, 0x0, &(0x7f0000000180)=@IORING_OP_STATX={0x15, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000440), &(0x7f0000000100)='./file0\x00', 0x100, 0x4000, 0x1}, 0x7) r4 = syz_io_uring_setup(0x5d64, &(0x7f0000000540)={0x0, 0xfffffffc, 0x20, 0x0, 0xfffffffc}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000002000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000600)=0x0) syz_io_uring_submit(r5, r6, &(0x7f00000000c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f00000003c0)}, 0x1010001) (async) r7 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r4, 0x10000000) syz_io_uring_submit(r5, r7, &(0x7f0000000340)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd_index}, 0x0) (async) syz_emit_ethernet(0x3b6, &(0x7f0000001680)=ANY=[@ANYBLOB="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"], 0x0) syz_io_uring_submit(r5, r7, &(0x7f0000000000)=@IORING_OP_SYNC_FILE_RANGE, 0x0) (async) syz_io_uring_submit(r5, r7, &(0x7f0000004040)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r5, 0x0, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL={0xe, 0x5, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x1}, 0x0) (async) syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_CLOSE, 0x0) (async) syz_io_uring_submit(r5, r7, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE, 0x0) (async) syz_io_uring_complete(r5) [ 2837.410664][T29185] ? mempool_alloc_slab+0x16/0x20 [ 2837.415786][T29185] __submit_bio+0x131/0x340 [ 2837.420336][T29185] ? bio_iov_iter_get_pages+0xda8/0xe40 [ 2837.426045][T29185] submit_bio_noacct+0x418/0x4e0 [ 2837.431072][T29185] submit_bio+0x10c/0x180 [ 2837.435505][T29185] iomap_dio_bio_iter+0x9ed/0xc70 [ 2837.440652][T29185] __iomap_dio_rw+0x8b5/0x1070 [ 2837.440686][T29185] iomap_dio_rw+0x38/0x80 [ 2837.440709][T29185] ext4_file_write_iter+0x7eb/0xdc0 14:48:27 executing program 5: clone(0x80910b00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) set_mempolicy(0x3, &(0x7f0000000040)=0xffffffff80000001, 0x400) gettid() r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, &(0x7f0000000080)=ANY=[@ANYBLOB="7549f8187a2a6e40594b4473692aef0dda6d1a46f2019ed7e86b1d711c76877056283bedab9579d2125c7cad3b1f28c963b3a626ef87b075574ff5612ccc80d8e14883ad2a8e6516a15c410ce005b2e841ebacd55a1365c685244ec3b66b003e7ec96ed005906d578130183c37"]) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x2, 0x3, 0x2d8, 0x190, 0x190, 0x95ffffff, 0x77, 0x93ffffff, 0x240, 0x240, 0x221, 0x240, 0x240, 0x3, 0x0, {[{{@uncond, 0x0, 0x130, 0x190, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "bdc74c01369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa6ecab6b1d2cc05e3182f64694d7d05fb8b8c8f56627a54f905d564eeeb8334f650ca0f3c44f7fda4d20a55050342ea85ecc8838e7088de33582f36a0a375bb7008adc297a5ece1bb2df53d17bef26bb6f800", 0x7f, 0x2}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0xb6010000]}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'veth0_to_batadv\x00', 'ip6gretap0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x338) 14:48:27 executing program 2: clone(0x80910b00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) set_mempolicy(0x3, &(0x7f0000000040), 0x0) gettid() r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x2, 0x3, 0x2d8, 0x190, 0x190, 0x95ffffff, 0x77, 0x93ffffff, 0x240, 0x240, 0x221, 0x240, 0x240, 0x3, 0x0, {[{{@uncond, 0x0, 0x130, 0x190, 0x0, {0x0, 0x90}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "bdc74c01369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa6ecab6b1d2cc05e3182f64694d7d05fb8b8c8f56627a54f905d564eeeb8334f650ca0f3c44f7fda4d20a55050342ea85ecc8838e7088de33582f36a0a375bb7008adc297a5ece1bb2df53d17bef26bb6f800", 0x7f}}]}, @common=@SET={0x60}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'veth0_to_batadv\x00', 'ip6gretap0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x338) 14:48:27 executing program 3: r0 = syz_io_uring_setup(0x2de5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000fe8000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0xb2, 0x0, 0x0, 0x0, 0x7401) r3 = syz_io_uring_setup(0x5d66, &(0x7f00000002c0), &(0x7f0000ee7000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r4, r5, &(0x7f00000000c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f00000003c0)}, 0x1010001) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r3, 0x10000000) syz_io_uring_submit(r4, r6, &(0x7f0000000340)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r4, r6, &(0x7f0000000000)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r4, r6, &(0x7f0000004040)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000140)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_CLOSE, 0x0) syz_io_uring_submit(r4, r6, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE, 0x0) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r4, 0x0, &(0x7f0000000100)=@IORING_OP_LINK_TIMEOUT={0xf, 0x4, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x1, 0x1, 0x1, {0x0, r7}}, 0x5) 14:48:27 executing program 5: clone(0x80910b00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) set_mempolicy(0x3, &(0x7f0000000040)=0xffffffff80000001, 0x400) gettid() r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, &(0x7f0000000080)=ANY=[@ANYBLOB="7549f8187a2a6e40594b4473692aef0dda6d1a46f2019ed7e86b1d711c76877056283bedab9579d2125c7cad3b1f28c963b3a626ef87b075574ff5612ccc80d8e14883ad2a8e6516a15c410ce005b2e841ebacd55a1365c685244ec3b66b003e7ec96ed005906d578130183c37"]) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x2, 0x3, 0x2d8, 0x190, 0x190, 0x95ffffff, 0x77, 0x93ffffff, 0x240, 0x240, 0x221, 0x240, 0x240, 0x3, 0x0, {[{{@uncond, 0x0, 0x130, 0x190, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "bdc74c01369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa6ecab6b1d2cc05e3182f64694d7d05fb8b8c8f56627a54f905d564eeeb8334f650ca0f3c44f7fda4d20a55050342ea85ecc8838e7088de33582f36a0a375bb7008adc297a5ece1bb2df53d17bef26bb6f800", 0x7f, 0x2}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0xb6ffffff]}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'veth0_to_batadv\x00', 'ip6gretap0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x338) [ 2837.440735][T29185] ? filemap_read+0x1661/0x16d0 [ 2837.440761][T29185] do_iter_readv_writev+0x2de/0x380 [ 2837.440863][T29185] do_iter_write+0x192/0x5c0 [ 2837.440888][T29185] ? splice_from_pipe_next+0x34f/0x3b0 [ 2837.440912][T29185] ? kmalloc_array+0x2d/0x40 [ 2837.440997][T29185] vfs_iter_write+0x4c/0x70 [ 2837.441076][T29185] iter_file_splice_write+0x43a/0x790 [ 2837.441104][T29185] ? splice_from_pipe+0xd0/0xd0 [ 2837.441126][T29185] direct_splice_actor+0x80/0xa0 [ 2837.441161][T29185] splice_direct_to_actor+0x345/0x650 [ 2837.441218][T29185] ? do_splice_direct+0x190/0x190 [ 2837.441243][T29185] do_splice_direct+0x106/0x190 [ 2837.441337][T29185] do_sendfile+0x675/0xc40 [ 2837.441420][T29185] __x64_sys_sendfile64+0x102/0x140 [ 2837.441441][T29185] do_syscall_64+0x44/0xd0 [ 2837.441464][T29185] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2837.441487][T29185] RIP: 0033:0x7f2d29acae99 [ 2837.441502][T29185] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2837.441574][T29185] RSP: 002b:00007f2d28c41168 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 14:48:28 executing program 4: r0 = socket$inet6(0xa, 0x400000000001, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) ftruncate(r1, 0x2007fff) close(r0) open(&(0x7f00000002c0)='./bus\x00', 0x14d842, 0x0) sendfile(r0, r1, 0x0, 0x201000) (fail_nth: 80) 14:48:28 executing program 2: clone(0x80910b00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) set_mempolicy(0x3, &(0x7f0000000040), 0x0) gettid() r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x2, 0x3, 0x2d8, 0x190, 0x190, 0x95ffffff, 0x77, 0x93ffffff, 0x240, 0x240, 0x221, 0x240, 0x240, 0x3, 0x0, {[{{@uncond, 0x0, 0x130, 0x190, 0x0, {0x0, 0x94}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "bdc74c01369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa6ecab6b1d2cc05e3182f64694d7d05fb8b8c8f56627a54f905d564eeeb8334f650ca0f3c44f7fda4d20a55050342ea85ecc8838e7088de33582f36a0a375bb7008adc297a5ece1bb2df53d17bef26bb6f800", 0x7f}}]}, @common=@SET={0x60}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'veth0_to_batadv\x00', 'ip6gretap0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x338) 14:48:28 executing program 5: clone(0x80910b00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) set_mempolicy(0x3, &(0x7f0000000040)=0xffffffff80000001, 0x400) gettid() r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, &(0x7f0000000080)=ANY=[@ANYBLOB="7549f8187a2a6e40594b4473692aef0dda6d1a46f2019ed7e86b1d711c76877056283bedab9579d2125c7cad3b1f28c963b3a626ef87b075574ff5612ccc80d8e14883ad2a8e6516a15c410ce005b2e841ebacd55a1365c685244ec3b66b003e7ec96ed005906d578130183c37"]) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x2, 0x3, 0x2d8, 0x190, 0x190, 0x95ffffff, 0x77, 0x93ffffff, 0x240, 0x240, 0x221, 0x240, 0x240, 0x3, 0x0, {[{{@uncond, 0x0, 0x130, 0x190, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "bdc74c01369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa6ecab6b1d2cc05e3182f64694d7d05fb8b8c8f56627a54f905d564eeeb8334f650ca0f3c44f7fda4d20a55050342ea85ecc8838e7088de33582f36a0a375bb7008adc297a5ece1bb2df53d17bef26bb6f800", 0x7f, 0x2}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0xb7ffffff]}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'veth0_to_batadv\x00', 'ip6gretap0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x338) 14:48:28 executing program 3: r0 = syz_io_uring_setup(0x2de5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000fe8000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0xb2, 0x0, 0x0, 0x0, 0x7401) r3 = syz_io_uring_setup(0x5d66, &(0x7f00000002c0), &(0x7f0000ee7000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r4, r5, &(0x7f00000000c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f00000003c0)}, 0x1010001) (async) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r3, 0x10000000) syz_io_uring_submit(r4, r6, &(0x7f0000000340)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd_index}, 0x0) (async) syz_io_uring_submit(r4, r6, &(0x7f0000000000)=@IORING_OP_SYNC_FILE_RANGE, 0x0) (async) syz_io_uring_submit(r4, r6, &(0x7f0000004040)=@IORING_OP_SYNC_FILE_RANGE, 0x0) (async) syz_io_uring_submit(r4, r5, &(0x7f0000000140)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_CLOSE, 0x0) (async) syz_io_uring_submit(r4, r6, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE, 0x0) (async) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r4, 0x0, &(0x7f0000000100)=@IORING_OP_LINK_TIMEOUT={0xf, 0x4, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x1, 0x1, 0x1, {0x0, r7}}, 0x5) 14:48:28 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/self/exe\x00', 0x0, 0x100) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) (async) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x2) (async) ioctl$AUTOFS_DEV_IOCTL_FAIL(r0, 0xc0189377, &(0x7f0000000100)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB='\x00'/16]) (async) r3 = accept(r0, &(0x7f0000000140), &(0x7f0000000200)=0x80) sendfile(r2, r3, &(0x7f0000000240)=0xd71c, 0xba59) r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x100, 0x0) (async) r5 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_int(r5, 0x29, 0xd1, &(0x7f0000000000)=0x4, 0x4) (async) setsockopt$inet6_MRT6_ADD_MFC(r5, 0x29, 0xc8, 0x0, 0x4) (async) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r5, 0x29, 0xc9, 0x0, 0x0) (async) ioctl$INCFS_IOC_PERMIT_FILL(r4, 0x40046721, &(0x7f0000000080)={r5}) (async) setsockopt$inet6_MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xc8, 0x0, 0x4) setsockopt$inet6_MRT6_ADD_MFC_PROXY(0xffffffffffffffff, 0x29, 0xc9, 0x0, 0x0) (async) accept(0xffffffffffffffff, &(0x7f0000000300)=@ethernet={0x0, @broadcast}, &(0x7f0000000380)=0x80) r6 = socket$inet6_dccp(0xa, 0x6, 0x0) setsockopt$inet6_int(r6, 0x29, 0x16, &(0x7f00000000c0)=0x100, 0x4) write$evdev(r1, &(0x7f000004d000)=[{}], 0xfffffe82) (async) fcntl$getownex(r5, 0x10, &(0x7f0000000280)={0x0, 0x0}) ioctl$sock_SIOCSPGRP(r0, 0x8902, &(0x7f00000002c0)=r7) [ 2837.441595][T29185] RAX: ffffffffffffffda RBX: 00007f2d29bddf60 RCX: 00007f2d29acae99 [ 2837.441609][T29185] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 2837.441624][T29185] RBP: 00007f2d28c411d0 R08: 0000000000000000 R09: 0000000000000000 [ 2837.441636][T29185] R10: 0000000000201000 R11: 0000000000000246 R12: 0000000000000002 [ 2837.441648][T29185] R13: 00007ffcc1d93fdf R14: 00007f2d28c41300 R15: 0000000000022000 [ 2837.441664][T29185] [ 2837.854526][T29828] FAULT_INJECTION: forcing a failure. [ 2837.854526][T29828] name failslab, interval 1, probability 0, space 0, times 0 [ 2837.867227][T29828] CPU: 0 PID: 29828 Comm: syz-executor.4 Tainted: G W 5.16.0-rc6-syzkaller #0 [ 2837.877442][T29828] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2837.887491][T29828] Call Trace: [ 2837.890766][T29828] [ 2837.893690][T29828] dump_stack_lvl+0xd6/0x122 [ 2837.898301][T29828] dump_stack+0x11/0x1b [ 2837.902459][T29828] should_fail+0x23c/0x250 [ 2837.906922][T29828] ? jbd2__journal_start+0xa1/0x290 [ 2837.912116][T29828] __should_failslab+0x81/0x90 [ 2837.916891][T29828] should_failslab+0x5/0x20 [ 2837.921516][T29828] kmem_cache_alloc+0x4f/0x320 [ 2837.926290][T29828] ? io_schedule+0x3b/0x50 [ 2837.930720][T29828] jbd2__journal_start+0xa1/0x290 [ 2837.935750][T29828] __ext4_journal_start_sb+0x10f/0x290 [ 2837.941213][T29828] ext4_convert_unwritten_extents+0xf6/0x270 [ 2837.947198][T29828] ext4_dio_write_end_io+0x6b/0xd0 [ 2837.952310][T29828] ? ext4_buffered_write_iter+0x290/0x290 [ 2837.958023][T29828] iomap_dio_complete+0xb8/0x3e0 [ 2837.962983][T29828] iomap_dio_rw+0x56/0x80 [ 2837.967318][T29828] ext4_file_write_iter+0x7eb/0xdc0 [ 2837.972553][T29828] ? filemap_read+0x1661/0x16d0 [ 2837.977423][T29828] do_iter_readv_writev+0x2de/0x380 [ 2837.982649][T29828] do_iter_write+0x192/0x5c0 [ 2837.987261][T29828] ? splice_from_pipe_next+0x34f/0x3b0 [ 2837.992724][T29828] ? kmalloc_array+0x2d/0x40 [ 2837.997320][T29828] vfs_iter_write+0x4c/0x70 [ 2838.001857][T29828] iter_file_splice_write+0x43a/0x790 [ 2838.007230][T29828] ? splice_from_pipe+0xd0/0xd0 [ 2838.012149][T29828] direct_splice_actor+0x80/0xa0 [ 2838.017106][T29828] splice_direct_to_actor+0x345/0x650 [ 2838.022521][T29828] ? do_splice_direct+0x190/0x190 [ 2838.027543][T29828] do_splice_direct+0x106/0x190 [ 2838.032394][T29828] do_sendfile+0x675/0xc40 [ 2838.036811][T29828] __x64_sys_sendfile64+0x102/0x140 [ 2838.042008][T29828] do_syscall_64+0x44/0xd0 [ 2838.046615][T29828] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2838.052514][T29828] RIP: 0033:0x7f2d29acae99 [ 2838.056936][T29828] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2838.076578][T29828] RSP: 002b:00007f2d28c41168 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 2838.085153][T29828] RAX: ffffffffffffffda RBX: 00007f2d29bddf60 RCX: 00007f2d29acae99 [ 2838.093646][T29828] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 2838.101623][T29828] RBP: 00007f2d28c411d0 R08: 0000000000000000 R09: 0000000000000000 [ 2838.109637][T29828] R10: 0000000000201000 R11: 0000000000000246 R12: 0000000000000002 [ 2838.117604][T29828] R13: 00007ffcc1d93fdf R14: 00007f2d28c41300 R15: 0000000000022000 [ 2838.125651][T29828] 14:48:28 executing program 1: r0 = socket$inet6(0xa, 0x400000000001, 0x0) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r0, 0x89f9, &(0x7f0000000180)={'syztnl2\x00', &(0x7f0000000100)={'ip6gre0\x00', 0x0, 0x4, 0x1, 0x8, 0x400, 0x50, @local, @loopback, 0x80, 0x80, 0x800, 0xffffffff}}) ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f00000001c0)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x20, r1}) (async) r2 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) ftruncate(r2, 0x2007fff) (async, rerun: 64) close(r0) (async, rerun: 64) io_uring_register$IORING_REGISTER_FILES(r2, 0x2, &(0x7f0000000000)=[r0], 0x1) (async, rerun: 32) open(&(0x7f00000002c0)='./bus\x00', 0x14d842, 0x0) (async, rerun: 32) r3 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_int(r3, 0x29, 0xd1, &(0x7f0000000000)=0x4, 0x4) setsockopt$inet6_MRT6_ADD_MFC(r3, 0x29, 0xc8, 0x0, 0x4) (async) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r3, 0x29, 0xc9, 0x0, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r0, 0x89f4, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000040)={'ip6tnl0\x00', r1, 0x38, 0x7, 0xe4, 0x5, 0x20, @dev={0xfe, 0x80, '\x00', 0x36}, @remote, 0x700, 0x7, 0xff, 0x8001}}) ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000200)={@dev={0xfe, 0x80, '\x00', 0x24}, 0x7, r4}) (async) sendfile(r0, r2, 0x0, 0x201000) (async, rerun: 32) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 32) write$binfmt_misc(r5, &(0x7f0000000080)=ANY=[], 0x2bb98205) openat$cgroup_ro(r5, &(0x7f0000000240)='cpuset.effective_cpus\x00', 0x0, 0x0) 14:48:28 executing program 2: clone(0x80910b00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) set_mempolicy(0x3, &(0x7f0000000040), 0x0) gettid() r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x2, 0x3, 0x2d8, 0x190, 0x190, 0x95ffffff, 0x77, 0x93ffffff, 0x240, 0x240, 0x221, 0x240, 0x240, 0x3, 0x0, {[{{@uncond, 0x0, 0x130, 0x190, 0x0, {0x0, 0x98}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "bdc74c01369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa6ecab6b1d2cc05e3182f64694d7d05fb8b8c8f56627a54f905d564eeeb8334f650ca0f3c44f7fda4d20a55050342ea85ecc8838e7088de33582f36a0a375bb7008adc297a5ece1bb2df53d17bef26bb6f800", 0x7f}}]}, @common=@SET={0x60}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'veth0_to_batadv\x00', 'ip6gretap0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x338) 14:48:28 executing program 5: clone(0x80910b00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) set_mempolicy(0x3, &(0x7f0000000040)=0xffffffff80000001, 0x400) gettid() r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, &(0x7f0000000080)=ANY=[@ANYBLOB="7549f8187a2a6e40594b4473692aef0dda6d1a46f2019ed7e86b1d711c76877056283bedab9579d2125c7cad3b1f28c963b3a626ef87b075574ff5612ccc80d8e14883ad2a8e6516a15c410ce005b2e841ebacd55a1365c685244ec3b66b003e7ec96ed005906d578130183c37"]) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x2, 0x3, 0x2d8, 0x190, 0x190, 0x95ffffff, 0x77, 0x93ffffff, 0x240, 0x240, 0x221, 0x240, 0x240, 0x3, 0x0, {[{{@uncond, 0x0, 0x130, 0x190, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "bdc74c01369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa6ecab6b1d2cc05e3182f64694d7d05fb8b8c8f56627a54f905d564eeeb8334f650ca0f3c44f7fda4d20a55050342ea85ecc8838e7088de33582f36a0a375bb7008adc297a5ece1bb2df53d17bef26bb6f800", 0x7f, 0x2}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0xb8020000]}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'veth0_to_batadv\x00', 'ip6gretap0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x338) 14:48:28 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/self/exe\x00', 0x0, 0x100) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) (async) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x2) (async) ioctl$AUTOFS_DEV_IOCTL_FAIL(r0, 0xc0189377, &(0x7f0000000100)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB='\x00'/16]) r3 = accept(r0, &(0x7f0000000140), &(0x7f0000000200)=0x80) sendfile(r2, r3, &(0x7f0000000240)=0xd71c, 0xba59) r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x100, 0x0) (async, rerun: 32) r5 = socket$inet6(0xa, 0x3, 0x3a) (rerun: 32) setsockopt$inet6_int(r5, 0x29, 0xd1, &(0x7f0000000000)=0x4, 0x4) (async) setsockopt$inet6_MRT6_ADD_MFC(r5, 0x29, 0xc8, 0x0, 0x4) (async, rerun: 64) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r5, 0x29, 0xc9, 0x0, 0x0) (rerun: 64) ioctl$INCFS_IOC_PERMIT_FILL(r4, 0x40046721, &(0x7f0000000080)={r5}) (async, rerun: 32) setsockopt$inet6_MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xc8, 0x0, 0x4) (async, rerun: 32) setsockopt$inet6_MRT6_ADD_MFC_PROXY(0xffffffffffffffff, 0x29, 0xc9, 0x0, 0x0) (async, rerun: 64) accept(0xffffffffffffffff, &(0x7f0000000300)=@ethernet={0x0, @broadcast}, &(0x7f0000000380)=0x80) (async, rerun: 64) r6 = socket$inet6_dccp(0xa, 0x6, 0x0) setsockopt$inet6_int(r6, 0x29, 0x16, &(0x7f00000000c0)=0x100, 0x4) (async) write$evdev(r1, &(0x7f000004d000)=[{}], 0xfffffe82) fcntl$getownex(r5, 0x10, &(0x7f0000000280)={0x0, 0x0}) ioctl$sock_SIOCSPGRP(r0, 0x8902, &(0x7f00000002c0)=r7) 14:48:28 executing program 4: r0 = socket$inet6(0xa, 0x400000000001, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) ftruncate(r1, 0x2007fff) close(r0) open(&(0x7f00000002c0)='./bus\x00', 0x14d842, 0x0) sendfile(r0, r1, 0x0, 0x201000) (fail_nth: 81) 14:48:28 executing program 3: r0 = syz_io_uring_setup(0x2de5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000fe8000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) (async) io_uring_enter(r0, 0xb2, 0x0, 0x0, 0x0, 0x7401) r3 = syz_io_uring_setup(0x5d66, &(0x7f00000002c0), &(0x7f0000ee7000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r4, r5, &(0x7f00000000c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f00000003c0)}, 0x1010001) (async) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r3, 0x10000000) syz_io_uring_submit(r4, r6, &(0x7f0000000340)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd_index}, 0x0) (async) syz_io_uring_submit(r4, r6, &(0x7f0000000000)=@IORING_OP_SYNC_FILE_RANGE, 0x0) (async) syz_io_uring_submit(r4, r6, &(0x7f0000004040)=@IORING_OP_SYNC_FILE_RANGE, 0x0) (async) syz_io_uring_submit(r4, r5, &(0x7f0000000140)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_CLOSE, 0x0) syz_io_uring_submit(r4, r6, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE, 0x0) (async) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r4, 0x0, &(0x7f0000000100)=@IORING_OP_LINK_TIMEOUT={0xf, 0x4, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x1, 0x1, 0x1, {0x0, r7}}, 0x5) 14:48:28 executing program 2: clone(0x80910b00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) set_mempolicy(0x3, &(0x7f0000000040), 0x0) gettid() r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x2, 0x3, 0x2d8, 0x190, 0x190, 0x95ffffff, 0x77, 0x93ffffff, 0x240, 0x240, 0x221, 0x240, 0x240, 0x3, 0x0, {[{{@uncond, 0x0, 0x130, 0x190, 0x0, {0x0, 0xa0}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "bdc74c01369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa6ecab6b1d2cc05e3182f64694d7d05fb8b8c8f56627a54f905d564eeeb8334f650ca0f3c44f7fda4d20a55050342ea85ecc8838e7088de33582f36a0a375bb7008adc297a5ece1bb2df53d17bef26bb6f800", 0x7f}}]}, @common=@SET={0x60}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'veth0_to_batadv\x00', 'ip6gretap0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x338) 14:48:28 executing program 5: clone(0x80910b00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) set_mempolicy(0x3, &(0x7f0000000040)=0xffffffff80000001, 0x400) gettid() r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, &(0x7f0000000080)=ANY=[@ANYBLOB="7549f8187a2a6e40594b4473692aef0dda6d1a46f2019ed7e86b1d711c76877056283bedab9579d2125c7cad3b1f28c963b3a626ef87b075574ff5612ccc80d8e14883ad2a8e6516a15c410ce005b2e841ebacd55a1365c685244ec3b66b003e7ec96ed005906d578130183c37"]) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x2, 0x3, 0x2d8, 0x190, 0x190, 0x95ffffff, 0x77, 0x93ffffff, 0x240, 0x240, 0x221, 0x240, 0x240, 0x3, 0x0, {[{{@uncond, 0x0, 0x130, 0x190, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "bdc74c01369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa6ecab6b1d2cc05e3182f64694d7d05fb8b8c8f56627a54f905d564eeeb8334f650ca0f3c44f7fda4d20a55050342ea85ecc8838e7088de33582f36a0a375bb7008adc297a5ece1bb2df53d17bef26bb6f800", 0x7f, 0x2}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0xb8030000]}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'veth0_to_batadv\x00', 'ip6gretap0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x338) [ 2838.252812][T32380] FAULT_INJECTION: forcing a failure. [ 2838.252812][T32380] name failslab, interval 1, probability 0, space 0, times 0 [ 2838.265694][T32380] CPU: 0 PID: 32380 Comm: syz-executor.4 Tainted: G W 5.16.0-rc6-syzkaller #0 [ 2838.265738][T32380] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2838.265751][T32380] Call Trace: [ 2838.265757][T32380] [ 2838.265765][T32380] dump_stack_lvl+0xd6/0x122 [ 2838.297065][T32380] dump_stack+0x11/0x1b 14:48:28 executing program 2: clone(0x80910b00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) set_mempolicy(0x3, &(0x7f0000000040), 0x0) gettid() r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x2, 0x3, 0x2d8, 0x190, 0x190, 0x95ffffff, 0x77, 0x93ffffff, 0x240, 0x240, 0x221, 0x240, 0x240, 0x3, 0x0, {[{{@uncond, 0x0, 0x130, 0x190, 0x0, {0x0, 0xa2}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "bdc74c01369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa6ecab6b1d2cc05e3182f64694d7d05fb8b8c8f56627a54f905d564eeeb8334f650ca0f3c44f7fda4d20a55050342ea85ecc8838e7088de33582f36a0a375bb7008adc297a5ece1bb2df53d17bef26bb6f800", 0x7f}}]}, @common=@SET={0x60}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'veth0_to_batadv\x00', 'ip6gretap0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x338) 14:48:28 executing program 5: clone(0x80910b00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) set_mempolicy(0x3, &(0x7f0000000040)=0xffffffff80000001, 0x400) gettid() r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, &(0x7f0000000080)=ANY=[@ANYBLOB="7549f8187a2a6e40594b4473692aef0dda6d1a46f2019ed7e86b1d711c76877056283bedab9579d2125c7cad3b1f28c963b3a626ef87b075574ff5612ccc80d8e14883ad2a8e6516a15c410ce005b2e841ebacd55a1365c685244ec3b66b003e7ec96ed005906d578130183c37"]) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x2, 0x3, 0x2d8, 0x190, 0x190, 0x95ffffff, 0x77, 0x93ffffff, 0x240, 0x240, 0x221, 0x240, 0x240, 0x3, 0x0, {[{{@uncond, 0x0, 0x130, 0x190, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "bdc74c01369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa6ecab6b1d2cc05e3182f64694d7d05fb8b8c8f56627a54f905d564eeeb8334f650ca0f3c44f7fda4d20a55050342ea85ecc8838e7088de33582f36a0a375bb7008adc297a5ece1bb2df53d17bef26bb6f800", 0x7f, 0x2}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0xba010000]}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'veth0_to_batadv\x00', 'ip6gretap0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x338) [ 2838.301223][T32380] should_fail+0x23c/0x250 [ 2838.305702][T32380] ? jbd2__journal_start+0xa1/0x290 [ 2838.310911][T32380] __should_failslab+0x81/0x90 [ 2838.315699][T32380] should_failslab+0x5/0x20 [ 2838.320283][T32380] kmem_cache_alloc+0x4f/0x320 [ 2838.325103][T32380] ? io_schedule+0x3b/0x50 [ 2838.329574][T32380] jbd2__journal_start+0xa1/0x290 [ 2838.334634][T32380] __ext4_journal_start_sb+0x10f/0x290 [ 2838.340101][T32380] ext4_convert_unwritten_extents+0xf6/0x270 [ 2838.346165][T32380] ext4_dio_write_end_io+0x6b/0xd0 14:48:28 executing program 2: clone(0x80910b00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) set_mempolicy(0x3, &(0x7f0000000040), 0x0) gettid() r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x2, 0x3, 0x2d8, 0x190, 0x190, 0x95ffffff, 0x77, 0x93ffffff, 0x240, 0x240, 0x221, 0x240, 0x240, 0x3, 0x0, {[{{@uncond, 0x0, 0x130, 0x190, 0x0, {0x0, 0xa4}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "bdc74c01369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa6ecab6b1d2cc05e3182f64694d7d05fb8b8c8f56627a54f905d564eeeb8334f650ca0f3c44f7fda4d20a55050342ea85ecc8838e7088de33582f36a0a375bb7008adc297a5ece1bb2df53d17bef26bb6f800", 0x7f}}]}, @common=@SET={0x60}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'veth0_to_batadv\x00', 'ip6gretap0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x338) 14:48:28 executing program 5: clone(0x80910b00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) set_mempolicy(0x3, &(0x7f0000000040)=0xffffffff80000001, 0x400) gettid() r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, &(0x7f0000000080)=ANY=[@ANYBLOB="7549f8187a2a6e40594b4473692aef0dda6d1a46f2019ed7e86b1d711c76877056283bedab9579d2125c7cad3b1f28c963b3a626ef87b075574ff5612ccc80d8e14883ad2a8e6516a15c410ce005b2e841ebacd55a1365c685244ec3b66b003e7ec96ed005906d578130183c37"]) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x2, 0x3, 0x2d8, 0x190, 0x190, 0x95ffffff, 0x77, 0x93ffffff, 0x240, 0x240, 0x221, 0x240, 0x240, 0x3, 0x0, {[{{@uncond, 0x0, 0x130, 0x190, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "bdc74c01369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa6ecab6b1d2cc05e3182f64694d7d05fb8b8c8f56627a54f905d564eeeb8334f650ca0f3c44f7fda4d20a55050342ea85ecc8838e7088de33582f36a0a375bb7008adc297a5ece1bb2df53d17bef26bb6f800", 0x7f, 0x2}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0xba020000]}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'veth0_to_batadv\x00', 'ip6gretap0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x338) [ 2838.351283][T32380] ? ext4_buffered_write_iter+0x290/0x290 [ 2838.357073][T32380] iomap_dio_complete+0xb8/0x3e0 [ 2838.362084][T32380] iomap_dio_rw+0x56/0x80 [ 2838.366420][T32380] ext4_file_write_iter+0x7eb/0xdc0 [ 2838.371623][T32380] ? filemap_read+0x1661/0x16d0 [ 2838.376497][T32380] do_iter_readv_writev+0x2de/0x380 [ 2838.381754][T32380] do_iter_write+0x192/0x5c0 [ 2838.386387][T32380] ? splice_from_pipe_next+0x34f/0x3b0 [ 2838.391888][T32380] ? kmalloc_array+0x2d/0x40 [ 2838.396494][T32380] vfs_iter_write+0x4c/0x70 [ 2838.401094][T32380] iter_file_splice_write+0x43a/0x790 [ 2838.406481][T32380] ? splice_from_pipe+0xd0/0xd0 [ 2838.411336][T32380] direct_splice_actor+0x80/0xa0 [ 2838.416290][T32380] splice_direct_to_actor+0x345/0x650 [ 2838.421742][T32380] ? do_splice_direct+0x190/0x190 [ 2838.426799][T32380] do_splice_direct+0x106/0x190 [ 2838.431656][T32380] do_sendfile+0x675/0xc40 [ 2838.436079][T32380] __x64_sys_sendfile64+0x102/0x140 [ 2838.441304][T32380] do_syscall_64+0x44/0xd0 [ 2838.445724][T32380] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2838.451665][T32380] RIP: 0033:0x7f2d29acae99 [ 2838.456074][T32380] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2838.475795][T32380] RSP: 002b:00007f2d28c41168 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 2838.484214][T32380] RAX: ffffffffffffffda RBX: 00007f2d29bddf60 RCX: 00007f2d29acae99 [ 2838.492251][T32380] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 2838.500263][T32380] RBP: 00007f2d28c411d0 R08: 0000000000000000 R09: 0000000000000000 [ 2838.508228][T32380] R10: 0000000000201000 R11: 0000000000000246 R12: 0000000000000002 [ 2838.516295][T32380] R13: 00007ffcc1d93fdf R14: 00007f2d28c41300 R15: 0000000000022000 [ 2838.524277][T32380] 14:48:29 executing program 5: clone(0x80910b00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) set_mempolicy(0x3, &(0x7f0000000040)=0xffffffff80000001, 0x400) gettid() r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, &(0x7f0000000080)=ANY=[@ANYBLOB="7549f8187a2a6e40594b4473692aef0dda6d1a46f2019ed7e86b1d711c76877056283bedab9579d2125c7cad3b1f28c963b3a626ef87b075574ff5612ccc80d8e14883ad2a8e6516a15c410ce005b2e841ebacd55a1365c685244ec3b66b003e7ec96ed005906d578130183c37"]) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x2, 0x3, 0x2d8, 0x190, 0x190, 0x95ffffff, 0x77, 0x93ffffff, 0x240, 0x240, 0x221, 0x240, 0x240, 0x3, 0x0, {[{{@uncond, 0x0, 0x130, 0x190, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "bdc74c01369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa6ecab6b1d2cc05e3182f64694d7d05fb8b8c8f56627a54f905d564eeeb8334f650ca0f3c44f7fda4d20a55050342ea85ecc8838e7088de33582f36a0a375bb7008adc297a5ece1bb2df53d17bef26bb6f800", 0x7f, 0x2}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0xbbffffff]}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'veth0_to_batadv\x00', 'ip6gretap0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x338) 14:48:29 executing program 1: r0 = socket$inet6(0xa, 0x400000000001, 0x0) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r0, 0x89f9, &(0x7f0000000180)={'syztnl2\x00', &(0x7f0000000100)={'ip6gre0\x00', 0x0, 0x4, 0x1, 0x8, 0x400, 0x50, @local, @loopback, 0x80, 0x80, 0x800, 0xffffffff}}) ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f00000001c0)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x20, r1}) r2 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) ftruncate(r2, 0x2007fff) close(r0) io_uring_register$IORING_REGISTER_FILES(r2, 0x2, &(0x7f0000000000)=[r0], 0x1) open(&(0x7f00000002c0)='./bus\x00', 0x14d842, 0x0) r3 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_int(r3, 0x29, 0xd1, &(0x7f0000000000)=0x4, 0x4) setsockopt$inet6_MRT6_ADD_MFC(r3, 0x29, 0xc8, 0x0, 0x4) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r3, 0x29, 0xc9, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r0, 0x89f4, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000040)={'ip6tnl0\x00', r1, 0x38, 0x7, 0xe4, 0x5, 0x20, @dev={0xfe, 0x80, '\x00', 0x36}, @remote, 0x700, 0x7, 0xff, 0x8001}}) ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000200)={@dev={0xfe, 0x80, '\x00', 0x24}, 0x7, r4}) sendfile(r0, r2, 0x0, 0x201000) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r5, &(0x7f0000000080)=ANY=[], 0x2bb98205) openat$cgroup_ro(r5, &(0x7f0000000240)='cpuset.effective_cpus\x00', 0x0, 0x0) socket$inet6(0xa, 0x400000000001, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r0, 0x89f9, &(0x7f0000000180)={'syztnl2\x00', &(0x7f0000000100)={'ip6gre0\x00', 0x0, 0x4, 0x1, 0x8, 0x400, 0x50, @local, @loopback, 0x80, 0x80, 0x800, 0xffffffff}}) (async) ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f00000001c0)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x20, r1}) (async) open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) (async) ftruncate(r2, 0x2007fff) (async) close(r0) (async) io_uring_register$IORING_REGISTER_FILES(r2, 0x2, &(0x7f0000000000)=[r0], 0x1) (async) open(&(0x7f00000002c0)='./bus\x00', 0x14d842, 0x0) (async) socket$inet6(0xa, 0x3, 0x3a) (async) setsockopt$inet6_int(r3, 0x29, 0xd1, &(0x7f0000000000)=0x4, 0x4) (async) setsockopt$inet6_MRT6_ADD_MFC(r3, 0x29, 0xc8, 0x0, 0x4) (async) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r3, 0x29, 0xc9, 0x0, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r0, 0x89f4, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000040)={'ip6tnl0\x00', r1, 0x38, 0x7, 0xe4, 0x5, 0x20, @dev={0xfe, 0x80, '\x00', 0x36}, @remote, 0x700, 0x7, 0xff, 0x8001}}) (async) ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000200)={@dev={0xfe, 0x80, '\x00', 0x24}, 0x7, r4}) (async) sendfile(r0, r2, 0x0, 0x201000) (async) pipe(&(0x7f0000000180)) (async) write$binfmt_misc(r5, &(0x7f0000000080)=ANY=[], 0x2bb98205) (async) openat$cgroup_ro(r5, &(0x7f0000000240)='cpuset.effective_cpus\x00', 0x0, 0x0) (async) 14:48:29 executing program 2: clone(0x80910b00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) set_mempolicy(0x3, &(0x7f0000000040), 0x0) gettid() r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x2, 0x3, 0x2d8, 0x190, 0x190, 0x95ffffff, 0x77, 0x93ffffff, 0x240, 0x240, 0x221, 0x240, 0x240, 0x3, 0x0, {[{{@uncond, 0x0, 0x130, 0x190, 0x0, {0x0, 0xa8}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "bdc74c01369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa6ecab6b1d2cc05e3182f64694d7d05fb8b8c8f56627a54f905d564eeeb8334f650ca0f3c44f7fda4d20a55050342ea85ecc8838e7088de33582f36a0a375bb7008adc297a5ece1bb2df53d17bef26bb6f800", 0x7f}}]}, @common=@SET={0x60}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'veth0_to_batadv\x00', 'ip6gretap0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x338) 14:48:29 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x110, r0, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x2) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x101000, 0x0) sendfile(r4, r1, &(0x7f0000000100)=0x6f, 0x8) write$evdev(r1, &(0x7f0000000040)=[{{r2, r3/1000+10000}}], 0x18) 14:48:29 executing program 3: r0 = syz_io_uring_setup(0x2de5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000fe8000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_ACCEPT={0xd, 0x4, 0x0, 0xffffffffffffffff, &(0x7f0000000100)=0x80, &(0x7f0000000200)=@alg, 0x0, 0x800}, 0x6) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_CLOSE={0x13, 0x6, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r3}}, 0x6) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0xb2, 0x0, 0x0, 0x0, 0x7401) 14:48:29 executing program 4: r0 = socket$inet6(0xa, 0x400000000001, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) ftruncate(r1, 0x2007fff) close(r0) open(&(0x7f00000002c0)='./bus\x00', 0x14d842, 0x0) sendfile(r0, r1, 0x0, 0x201000) (fail_nth: 82) 14:48:29 executing program 2: clone(0x80910b00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) set_mempolicy(0x3, &(0x7f0000000040), 0x0) gettid() r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x2, 0x3, 0x2d8, 0x190, 0x190, 0x95ffffff, 0x77, 0x93ffffff, 0x240, 0x240, 0x221, 0x240, 0x240, 0x3, 0x0, {[{{@uncond, 0x0, 0x130, 0x190, 0x0, {0x0, 0xaa}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "bdc74c01369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa6ecab6b1d2cc05e3182f64694d7d05fb8b8c8f56627a54f905d564eeeb8334f650ca0f3c44f7fda4d20a55050342ea85ecc8838e7088de33582f36a0a375bb7008adc297a5ece1bb2df53d17bef26bb6f800", 0x7f}}]}, @common=@SET={0x60}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'veth0_to_batadv\x00', 'ip6gretap0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x338) 14:48:29 executing program 5: clone(0x80910b00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) set_mempolicy(0x3, &(0x7f0000000040)=0xffffffff80000001, 0x400) gettid() r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, &(0x7f0000000080)=ANY=[@ANYBLOB="7549f8187a2a6e40594b4473692aef0dda6d1a46f2019ed7e86b1d711c76877056283bedab9579d2125c7cad3b1f28c963b3a626ef87b075574ff5612ccc80d8e14883ad2a8e6516a15c410ce005b2e841ebacd55a1365c685244ec3b66b003e7ec96ed005906d578130183c37"]) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x2, 0x3, 0x2d8, 0x190, 0x190, 0x95ffffff, 0x77, 0x93ffffff, 0x240, 0x240, 0x221, 0x240, 0x240, 0x3, 0x0, {[{{@uncond, 0x0, 0x130, 0x190, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "bdc74c01369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa6ecab6b1d2cc05e3182f64694d7d05fb8b8c8f56627a54f905d564eeeb8334f650ca0f3c44f7fda4d20a55050342ea85ecc8838e7088de33582f36a0a375bb7008adc297a5ece1bb2df53d17bef26bb6f800", 0x7f, 0x2}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0xbcffffff]}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'veth0_to_batadv\x00', 'ip6gretap0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x338) 14:48:29 executing program 5: clone(0x80910b00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) set_mempolicy(0x3, &(0x7f0000000040)=0xffffffff80000001, 0x400) gettid() r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, &(0x7f0000000080)=ANY=[@ANYBLOB="7549f8187a2a6e40594b4473692aef0dda6d1a46f2019ed7e86b1d711c76877056283bedab9579d2125c7cad3b1f28c963b3a626ef87b075574ff5612ccc80d8e14883ad2a8e6516a15c410ce005b2e841ebacd55a1365c685244ec3b66b003e7ec96ed005906d578130183c37"]) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x2, 0x3, 0x2d8, 0x190, 0x190, 0x95ffffff, 0x77, 0x93ffffff, 0x240, 0x240, 0x221, 0x240, 0x240, 0x3, 0x0, {[{{@uncond, 0x0, 0x130, 0x190, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "bdc74c01369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa6ecab6b1d2cc05e3182f64694d7d05fb8b8c8f56627a54f905d564eeeb8334f650ca0f3c44f7fda4d20a55050342ea85ecc8838e7088de33582f36a0a375bb7008adc297a5ece1bb2df53d17bef26bb6f800", 0x7f, 0x2}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0xbdffffff]}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'veth0_to_batadv\x00', 'ip6gretap0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x338) [ 2839.310067][T32526] FAULT_INJECTION: forcing a failure. [ 2839.310067][T32526] name failslab, interval 1, probability 0, space 0, times 0 [ 2839.322766][T32526] CPU: 0 PID: 32526 Comm: syz-executor.4 Tainted: G W 5.16.0-rc6-syzkaller #0 [ 2839.332933][T32526] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2839.346721][T32526] Call Trace: [ 2839.350002][T32526] [ 2839.352933][T32526] dump_stack_lvl+0xd6/0x122 14:48:29 executing program 2: clone(0x80910b00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) set_mempolicy(0x3, &(0x7f0000000040), 0x0) gettid() r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x2, 0x3, 0x2d8, 0x190, 0x190, 0x95ffffff, 0x77, 0x93ffffff, 0x240, 0x240, 0x221, 0x240, 0x240, 0x3, 0x0, {[{{@uncond, 0x0, 0x130, 0x190, 0x0, {0x0, 0xb2}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "bdc74c01369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa6ecab6b1d2cc05e3182f64694d7d05fb8b8c8f56627a54f905d564eeeb8334f650ca0f3c44f7fda4d20a55050342ea85ecc8838e7088de33582f36a0a375bb7008adc297a5ece1bb2df53d17bef26bb6f800", 0x7f}}]}, @common=@SET={0x60}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'veth0_to_batadv\x00', 'ip6gretap0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x338) 14:48:29 executing program 5: clone(0x80910b00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) set_mempolicy(0x3, &(0x7f0000000040)=0xffffffff80000001, 0x400) gettid() r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, &(0x7f0000000080)=ANY=[@ANYBLOB="7549f8187a2a6e40594b4473692aef0dda6d1a46f2019ed7e86b1d711c76877056283bedab9579d2125c7cad3b1f28c963b3a626ef87b075574ff5612ccc80d8e14883ad2a8e6516a15c410ce005b2e841ebacd55a1365c685244ec3b66b003e7ec96ed005906d578130183c37"]) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x2, 0x3, 0x2d8, 0x190, 0x190, 0x95ffffff, 0x77, 0x93ffffff, 0x240, 0x240, 0x221, 0x240, 0x240, 0x3, 0x0, {[{{@uncond, 0x0, 0x130, 0x190, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "bdc74c01369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa6ecab6b1d2cc05e3182f64694d7d05fb8b8c8f56627a54f905d564eeeb8334f650ca0f3c44f7fda4d20a55050342ea85ecc8838e7088de33582f36a0a375bb7008adc297a5ece1bb2df53d17bef26bb6f800", 0x7f, 0x2}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0xbeffffff]}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'veth0_to_batadv\x00', 'ip6gretap0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x338) [ 2839.357533][T32526] dump_stack+0x11/0x1b [ 2839.361692][T32526] should_fail+0x23c/0x250 [ 2839.366203][T32526] ? kcalloc+0x32/0x50 [ 2839.370344][T32526] __should_failslab+0x81/0x90 [ 2839.375110][T32526] should_failslab+0x5/0x20 [ 2839.379838][T32526] __kmalloc+0x6f/0x370 [ 2839.384179][T32526] kcalloc+0x32/0x50 [ 2839.388076][T32526] ext4_find_extent+0x1d5/0x660 [ 2839.392941][T32526] ? save_fpregs_to_fpstate+0xf5/0x140 [ 2839.398408][T32526] ext4_ext_map_blocks+0xee/0x1950 [ 2839.403540][T32526] ? _raw_spin_unlock+0x2e/0x50 14:48:29 executing program 5: clone(0x80910b00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) set_mempolicy(0x3, &(0x7f0000000040)=0xffffffff80000001, 0x400) gettid() r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, &(0x7f0000000080)=ANY=[@ANYBLOB="7549f8187a2a6e40594b4473692aef0dda6d1a46f2019ed7e86b1d711c76877056283bedab9579d2125c7cad3b1f28c963b3a626ef87b075574ff5612ccc80d8e14883ad2a8e6516a15c410ce005b2e841ebacd55a1365c685244ec3b66b003e7ec96ed005906d578130183c37"]) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x2, 0x3, 0x2d8, 0x190, 0x190, 0x95ffffff, 0x77, 0x93ffffff, 0x240, 0x240, 0x221, 0x240, 0x240, 0x3, 0x0, {[{{@uncond, 0x0, 0x130, 0x190, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "bdc74c01369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa6ecab6b1d2cc05e3182f64694d7d05fb8b8c8f56627a54f905d564eeeb8334f650ca0f3c44f7fda4d20a55050342ea85ecc8838e7088de33582f36a0a375bb7008adc297a5ece1bb2df53d17bef26bb6f800", 0x7f, 0x2}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0xc0030000]}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'veth0_to_batadv\x00', 'ip6gretap0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x338) 14:48:29 executing program 2: clone(0x80910b00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) set_mempolicy(0x3, &(0x7f0000000040), 0x0) gettid() r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x2, 0x3, 0x2d8, 0x190, 0x190, 0x95ffffff, 0x77, 0x93ffffff, 0x240, 0x240, 0x221, 0x240, 0x240, 0x3, 0x0, {[{{@uncond, 0x0, 0x130, 0x190, 0x0, {0x0, 0xc0}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "bdc74c01369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa6ecab6b1d2cc05e3182f64694d7d05fb8b8c8f56627a54f905d564eeeb8334f650ca0f3c44f7fda4d20a55050342ea85ecc8838e7088de33582f36a0a375bb7008adc297a5ece1bb2df53d17bef26bb6f800", 0x7f}}]}, @common=@SET={0x60}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'veth0_to_batadv\x00', 'ip6gretap0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x338) [ 2839.408406][T32526] ? finish_task_switch+0xd0/0x280 [ 2839.413532][T32526] ? _raw_read_unlock+0x13/0x30 [ 2839.418408][T32526] ext4_map_blocks+0x55e/0xb60 [ 2839.423208][T32526] ext4_convert_unwritten_extents+0x12a/0x270 [ 2839.429315][T32526] ext4_dio_write_end_io+0x6b/0xd0 [ 2839.434475][T32526] ? ext4_buffered_write_iter+0x290/0x290 [ 2839.440238][T32526] iomap_dio_complete+0xb8/0x3e0 [ 2839.445184][T32526] iomap_dio_rw+0x56/0x80 [ 2839.449528][T32526] ext4_file_write_iter+0x7eb/0xdc0 [ 2839.454734][T32526] ? filemap_read+0x1661/0x16d0 [ 2839.459597][T32526] do_iter_readv_writev+0x2de/0x380 [ 2839.464826][T32526] do_iter_write+0x192/0x5c0 [ 2839.469505][T32526] ? splice_from_pipe_next+0x34f/0x3b0 [ 2839.474971][T32526] ? kmalloc_array+0x2d/0x40 [ 2839.479572][T32526] vfs_iter_write+0x4c/0x70 [ 2839.484129][T32526] iter_file_splice_write+0x43a/0x790 [ 2839.489517][T32526] ? splice_from_pipe+0xd0/0xd0 [ 2839.494884][T32526] direct_splice_actor+0x80/0xa0 [ 2839.499829][T32526] splice_direct_to_actor+0x345/0x650 [ 2839.505238][T32526] ? do_splice_direct+0x190/0x190 [ 2839.510275][T32526] do_splice_direct+0x106/0x190 [ 2839.515171][T32526] do_sendfile+0x675/0xc40 [ 2839.519593][T32526] __x64_sys_sendfile64+0x102/0x140 [ 2839.524799][T32526] do_syscall_64+0x44/0xd0 [ 2839.529281][T32526] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2839.535159][T32526] RIP: 0033:0x7f2d29acae99 [ 2839.539556][T32526] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2839.559164][T32526] RSP: 002b:00007f2d28c41168 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 2839.567566][T32526] RAX: ffffffffffffffda RBX: 00007f2d29bddf60 RCX: 00007f2d29acae99 [ 2839.575691][T32526] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 2839.583820][T32526] RBP: 00007f2d28c411d0 R08: 0000000000000000 R09: 0000000000000000 [ 2839.591886][T32526] R10: 0000000000201000 R11: 0000000000000246 R12: 0000000000000002 [ 2839.599839][T32526] R13: 00007ffcc1d93fdf R14: 00007f2d28c41300 R15: 0000000000022000 [ 2839.607798][T32526] 14:48:29 executing program 2: clone(0x80910b00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) set_mempolicy(0x3, &(0x7f0000000040), 0x0) gettid() r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x2, 0x3, 0x2d8, 0x190, 0x190, 0x95ffffff, 0x77, 0x93ffffff, 0x240, 0x240, 0x221, 0x240, 0x240, 0x3, 0x0, {[{{@uncond, 0x0, 0x130, 0x190, 0x0, {0x0, 0xc4}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "bdc74c01369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa6ecab6b1d2cc05e3182f64694d7d05fb8b8c8f56627a54f905d564eeeb8334f650ca0f3c44f7fda4d20a55050342ea85ecc8838e7088de33582f36a0a375bb7008adc297a5ece1bb2df53d17bef26bb6f800", 0x7f}}]}, @common=@SET={0x60}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'veth0_to_batadv\x00', 'ip6gretap0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x338) 14:48:29 executing program 5: clone(0x80910b00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) set_mempolicy(0x3, &(0x7f0000000040)=0xffffffff80000001, 0x400) gettid() r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, &(0x7f0000000080)=ANY=[@ANYBLOB="7549f8187a2a6e40594b4473692aef0dda6d1a46f2019ed7e86b1d711c76877056283bedab9579d2125c7cad3b1f28c963b3a626ef87b075574ff5612ccc80d8e14883ad2a8e6516a15c410ce005b2e841ebacd55a1365c685244ec3b66b003e7ec96ed005906d578130183c37"]) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x2, 0x3, 0x2d8, 0x190, 0x190, 0x95ffffff, 0x77, 0x93ffffff, 0x240, 0x240, 0x221, 0x240, 0x240, 0x3, 0x0, {[{{@uncond, 0x0, 0x130, 0x190, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "bdc74c01369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa6ecab6b1d2cc05e3182f64694d7d05fb8b8c8f56627a54f905d564eeeb8334f650ca0f3c44f7fda4d20a55050342ea85ecc8838e7088de33582f36a0a375bb7008adc297a5ece1bb2df53d17bef26bb6f800", 0x7f, 0x2}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0xc1ffffff]}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'veth0_to_batadv\x00', 'ip6gretap0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x338) 14:48:29 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x110, r0, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x2) (async) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x101000, 0x0) sendfile(r4, r1, &(0x7f0000000100)=0x6f, 0x8) (async) write$evdev(r1, &(0x7f0000000040)=[{{r2, r3/1000+10000}}], 0x18) 14:48:29 executing program 3: r0 = syz_io_uring_setup(0x2de5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000fe8000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_ACCEPT={0xd, 0x4, 0x0, 0xffffffffffffffff, &(0x7f0000000100)=0x80, &(0x7f0000000200)=@alg, 0x0, 0x800}, 0x6) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_CLOSE={0x13, 0x6, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r3}}, 0x6) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0xb2, 0x0, 0x0, 0x0, 0x7401) 14:48:29 executing program 4: r0 = socket$inet6(0xa, 0x400000000001, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) ftruncate(r1, 0x2007fff) close(r0) open(&(0x7f00000002c0)='./bus\x00', 0x14d842, 0x0) sendfile(r0, r1, 0x0, 0x201000) (fail_nth: 83) 14:48:29 executing program 1: r0 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000000)={0x0, {{0xa, 0x4e23, 0x2967, @private2, 0x3}}}, 0x88) r1 = open(&(0x7f0000002000)='./bus\x00', 0x246042, 0x110) ftruncate(r1, 0x2007fff) r2 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_int(r2, 0x29, 0xd1, &(0x7f0000000000)=0x4, 0x4) setsockopt$inet6_MRT6_ADD_MFC(r2, 0x29, 0xc8, 0x0, 0x4) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r2, 0x29, 0xc9, 0x0, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000000, 0x110, r2, 0x1350000) close(r0) open(&(0x7f00000002c0)='./bus\x00', 0x14d842, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x7, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x5}, 0x1c) ioctl$BTRFS_IOC_SUBVOL_CREATE(r1, 0x5000940e, &(0x7f0000000300)={{r0}, "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"}) sendfile(r0, r1, 0x0, 0x201000) r3 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_int(r3, 0x29, 0xd1, &(0x7f0000000000)=0x4, 0x4) setsockopt$inet6_MRT6_ADD_MFC(r3, 0x29, 0xc8, 0x0, 0x4) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r3, 0x29, 0xc9, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000140)=0x4) write$9p(r1, &(0x7f0000000100)="1541e06bbc751d99e8926f6f6b5044c4266d5913faa6cabb8c964d2a037be59365fcc3dda148d226d256235cd10e5fb091f853", 0x33) [ 2839.610849][T32526] EXT4-fs warning (device sda1): ext4_convert_unwritten_extents:4815: inode #1233: block 0: len 16: ext4_ext_map_blocks returned -12 14:48:29 executing program 3: r0 = syz_io_uring_setup(0x2de5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000fe8000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_ACCEPT={0xd, 0x4, 0x0, 0xffffffffffffffff, &(0x7f0000000100)=0x80, &(0x7f0000000200)=@alg, 0x0, 0x800}, 0x6) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_CLOSE={0x13, 0x6, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r3}}, 0x6) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) (async) io_uring_enter(r0, 0xb2, 0x0, 0x0, 0x0, 0x7401) 14:48:29 executing program 1: r0 = socket$inet6(0xa, 0x400000000001, 0x0) (async, rerun: 64) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000000)={0x0, {{0xa, 0x4e23, 0x2967, @private2, 0x3}}}, 0x88) (rerun: 64) r1 = open(&(0x7f0000002000)='./bus\x00', 0x246042, 0x110) ftruncate(r1, 0x2007fff) (async) r2 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_int(r2, 0x29, 0xd1, &(0x7f0000000000)=0x4, 0x4) (async, rerun: 32) setsockopt$inet6_MRT6_ADD_MFC(r2, 0x29, 0xc8, 0x0, 0x4) (async, rerun: 32) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r2, 0x29, 0xc9, 0x0, 0x0) (async, rerun: 32) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000000, 0x110, r2, 0x1350000) (async, rerun: 32) close(r0) (async) open(&(0x7f00000002c0)='./bus\x00', 0x14d842, 0x0) (async) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x7, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x5}, 0x1c) (async) ioctl$BTRFS_IOC_SUBVOL_CREATE(r1, 0x5000940e, &(0x7f0000000300)={{r0}, "92d2b84b5a74f8a731d8d892223ee34193b9e13baf3d2d8f1291880ed30970e07f89488be08b2317cb3368318a157ca5032e523a08463681b5e88515cc1f87ceccb5b134b935ef1a4b11de0091456290d4abfc056f61484101a52a9dbb42e7284f810c5a2e1fa75c5b93dc08f104db0292e2246bcedc0d79e55f6b9453ba2af38337c973e1687d43d1c00438fc9a573ab5a3e9dd323e4568f009e7ab23529044e8cf1e1d2d132afd7d59a5acaa4d724d9339cc2d64aa04bd9620bb0f9a2bfd362e3c05b14e8207583c1e672856e07512eb5044a659551077f42fb2d1dcd57cce06f8b9fed3f34c95bb9e8c1c32425a178bcbdfc7bb25142dcf4b8fafdaea0a4fd736827df514bf685fe2d280d621b96dc321267e9fdaf9148b21502762f2b91842bc61f36bc5fa3743cdf39fb2cfaf3f90375ca45daf613891a6eb70984a514ad5ff9318b6aae1b020b2c4f50e6b7043494252a15fbbd9ca1e9ef03ce3eaa4b36a009b63980bfc1a7f5e4fae2d2cec3363e32a65e11cf40cd29533bb5175340e591cadc6864c79c341cdff34328fd1d1ec133bcf5dedd11eb14452c8cbf23fd3e615a43bb470d3ad2de7218879772affaac9d1963b20cd68872007622b2054e16382c7f7b227f09449f2783634a37b5c31de17550f8249e4743cff9681bc2c2bd17ee40dee6e3515104a118a356f4aa35e523364bf7ae954735428af499386f89b16081710942ed0d8bad267b10f12a62daea9aef796a9a3b68c5ffab27c03ae7d69ef219a382a278de56dd93ad5f8bfac37cd8e1f090bcf75be29ea69ee3ff809dcd49b6876ef0522a267030e9b5c7770f3332e3b25f730b153df4bd02a690215018ead1657630aa2f731127ac72b386c4b3b4ba1c69b0fac076c23b79e0d6bbcac6e0af10433c03f3bc6bed1ce1a373dac57b50dbdcd2fabc7e3cc53b95e9e879d48f4044c071c2f9045e30d2e82147ee31a139cfcb1d4535884dccb619f7980b72300b6e27d29fc6328f9670722e6c387ee95d4bfa0d5f4b486ccf15f97fe93fa52f9be8dc51aa57974fb30d9f6e2cfbb5b164c33d6261ff7f635dcc6b332727d706077ea7767ad1801d3fdbbe11a3267446cc11451c4f193c96d93af4540e23360f730ffefe6c21db4b6da278feeffc1104977abaf1f563fb74aaeb6a3ffb76636a1826c9fc66d02da5b2cc305cbc4e8a38fc07da4be50b15142ee18ea34aef2702842fa8d561284d3b56c89972c243b7f2d880f6cee2cf21e930433df6ef4ce3ea7119cfddedc9fa61ef266dd9da21950cbba533cc5662aab5f082319ef36d0c40d60ee6deee270bcf137c4fca7e1d93ea7b0de1625bb1fcc29ceb2e1ec141a47b31f99173033a307b108b794035caa1d041caaee50be301f7a6e9b167c03704e75e14d82e2a2f3e9b95bc2318312cec9b0e68fab775ff74140ed70adddf773f60f861fe0040d40806fac07c55efb4413ab814552ff87b57b2df3519d449df95ff694b2a99ab66acafe100e0b771ffa89707979e36423c1b336720753606ce3cffeb7adc0c06a68c9edbaf8590252eacaf51c6cc0121b96b224efb3bca0e1ccffb424ee4d7c782218035100be18e357a068beec9d43e3727e86326f381596135d1a66b236f9d49acc5969fdf28ca6c25d5eb11c6c739c058a0f0d325ee77977b4b941a9585e67cd2eb9fa659b89e269ffff33571f1f41c1bb8d1ca0c612a96f8754fe13e9b91ded3246f0f9ea4e385065e97abaa8c338a0c6be4f162351afcbb50e09506b2e8b85eef04988d353285a265b32af7d2ea985bf3d72ba61b8205ac3cefcedacda07a5da4f6f70842cc11287930c38f4335d911c4cd04c8045161f44c98dfe6f4f62b0aee334163860cc8b8f33b635889d4f3d36bb5da70c9e7272f347fd3f9388dd98bce31069e9221cc8f91c328ed3e0b8609da6b36d2bcc7fc24b42df93d36e2b1c6aafe0d0ceee082638c1c875b23f10428fabb29741a14c434ed067aed36061982859adc15e37d7a65cd5c516d28d398be57a100dfcaaf2dc63dfca50e3da767761b6d313fd23d01d077436e668a80fb80f1cd2e59a497c539242f9c0ad32a315772716b4cdea4e299d0f646b0215ac3b81367ad068df1c76f8768577988563dfbeb9252db4c56aff966f614515d15837e5f71463780a24ec6886499f9e5f9e6677f7016f6242925f0173ac131367fad4cea901505d994708c5a62c246828d664432503644fddef332461747c4f2d7f812b1d7f4b923bd11a00718139172b9138f6927e8f2a1e6d3c22dad7a8b6f2801fd8aa53bd47e19612d8803c1392e12039cf4aad78cc2610936ecc8832935b23a6495d017d156be8671dcd74720f69a9db40a0babd0e619bd5b3c84a4b12f62114ce9b610021cb1ba7a5138286d63cf503789f72690f4e95bcd27f4b8b62fe70299b506a8fb3dfefcfd12b628363e0cb28bc601d90fe7da11dbc502f970491a4229ba9974fc963fdac4303c29a65d6b07895ea336d5d0ea17ad5a993f2eb358bedeecceb84142e3c1eb8d819b9a47d9e87f0df5cafed5b7424eb9bdd68bfe0205af39397c8820bb219b4ff8696cd30542c1abfa2ec9e95e9adf13f60d5e7a0c89d23933c26b6fea9a4422db2dfaadab36d7175a5539ebb96f7753320fe68c1b15175694ce0474b78300a1fc78383be975b6e481bd7e908f31da5e4b83047f0733d85a0962ebde246555dfccbf781f50bd28a7d743adde1f6779ad402fc0f5fa6df969e47c65b80d38f1db007ddd4f08edef8df044b233d9315c3d7a156668e9d93aa2c0d9e368f11e0ffb2131ff98d1adbd97c21387ebc0628919aa015c273225bd46ef75f314ac0efee24ff02f76529cc7b496af687a10a5a81091a95289e6295f3a5f830184fea05599ff976cc62aceda4c2dfe9a7e54c4493eebf8162b436aea3c2c5f7f969ae0666e55c8b9a62f698820a4764b3d0354f29186a89ac796cd66395900acbbb0be12377b7f85b4b7f875648c1f0ec20fe4014a473c8b10311986486d81e5dc3a7fe7dbfd3bf5d0628284877d9af22d9ab7aa3b733dbeb7e926604709878703011b9c4d20921581e54b6628805e60cad166bb7d1781a25017637ef0ac90775aefbf7e81c0d1a27a1979d72152d72e5c8bcf66af459bed0541067894b9c4b2cb9506c96ffea343786c76ddd57a4d9c447227fac87e5a67a1c346339dbf937a3662323f5050db07e6c4e63fb8e2b06c0cd2074b8386f11f8197af867dd498cc1a248b06d038ff0d21da2db35660e087ead0cbc84a52b5b743d8b483d0f5293c996b51d6ff67222622edcf20fc053c3749a876b57957d611d3f859142195a11c8b17c7953ecb3cf605cf201c09702ed186d35e08ab76aa32de6396e5342ccd61f293fb7182d5d1745508a0278c135c579d1e8939a5b28929f7e611bbcdf3f5bbad4f35f792a4d000b40aaad25a65c370d5add03f924a7f1c221bb784a9fafbbe5b552589969b122f4d86ee8ac955d68c20ca6712b091a75dcd8f20d07bff574bd5ef9c7163178dc7d67b07fafa423855420d7f5514e303124aac44c0d738662bc0b9c7f7b777e679b86eebfe1ad15d7189adebef7f8021d0f244ce50143558686945d3e25c015440287f772d76c286cca55b80c880e5af67f6fb14c07420445978f8d0c6f97c524e98e1865c45f47d04fcfbe46b80f0b35958589b0600620850e358a758f569875c7460c01dbad0fe1b3d30bfd826d81dc6ec2f2e5a6b8c71a3c03728f80842d3605dad3dd31322c74bb6b6dd2a6d8afc0cb7cfe2dc53db82e2f28d84e79f7e7c2f59516e3260444f22cf0241c78e4b4f97a78160e42b6b128f3193c017bb01d033c42a812c10b8f9bdce3f567fc0c3163250671d26e84b3ba2b690b2330fec8777c04013a84e06e184d68d89c7e490c635a0fceb4ef481d94b665d99cc75a70894f796126d5125a9210d2775451f392a36812bddec9aab48b861492c6da05132abea7c2befb2fb53b4f438bc7337e7ee59812ee81be73b854261bc14e0c7343917d47dc8ea4ac1cc88cba0f3a93543e3f411df25140be96eb3773f3b44cc5c089a1e4e8853f8b0ce0522faa42adfe68908e413f74de243ad184fb837801125e53fa109e274bb5c046c749c0f735abdfa173912311ec83c5f50a7089dcc918fa11eea86e0dee18012cc9b7932fe4f65904027a2758fd80150da3a86978092cb414566d79d7a545a3ca9628fac7b8e5544be975b1fb548ee1afc41b9b0e955a2477b3b009ea94a44a2d8c13fda67f589068f5de20bd1ac43c28ed40c852c7cc4918a405bcf35b4c7f2aef9369d2c06f4b32aa0bf1abc584ce3f48622b10be0316877cd6fa6a74261276972c86bdd0f57bef02b0b4c97df0a37399480aa1f9ab5bfc4d48919e26e2f90c75fe10129d3ca5673c4194ea012a0ed9d4293a8ab112bbdac630dcd4fe5595af861532ebac4ee2d0aeedc9eac894129375af6dcf02c3426a1886b417e0069104263c080b875b09dec3ab5da66a4ffa58d555552f8ffad0c8308cf7e771345415c5c9b642ecd44d90967858cf140e9d1062532c22857c6c204b0e7b02050c62c9e0aea6ece68b0823d64852208f6c5fe0ce09b87a4be61b5a26bd53e22d81029d1a32ee41e6441af0f3b2ddce284cd27a556462779d661b85fe0cc146c25fb66819115d41377bc6c490ba13ffaa0c7573442c95e483de728875521db2b75520aa233dca271def663c8deea969ee27e03ee0a24fb6bb986cf8f404eb39aaeb09f1dc72e589ea060fb60b1bfd81e64376af724e9ad86c0dc6f5e19e6869fc5cbc1fab4b7d8b7e43b623ec840ea57eb3e01bc418dc0df1bf78a07771abc4197ecf61d60077a04e81a9db7d0707728b995bb720e88a147ecaed86259f39015287188712e58fe983cd3a11e622dd37a608208c88b87d0307ac5eef747ffd985a21eff0400c96da21ed0dfa618b8259273fdee6c46327a8ff44df023375709ed650b2272a8e00ed262b878feb49cf4066f3770c0da40eb759e056099861c0cce72a799b31e893476ef66b1d002664bec7d86c5a108289676deb901c310a91b8444dd70b9b3ef34dc9d72a5cfd264e72409905e5c6be4b5f8142661aec96d83d0d39546d52de48cf0f4c0161d614c205fde614f632a4c5ad56341eb3bbc80f58ce666e6643db205b48b8407100d24a2eeecb9b0482d65c3b8f94ca32fae6ee82cc912978484ad6ac026caf7b512c3a29b5bdf169aae1a1704ca97df7240fa52e5484a5d0b631fa275123322ac7b9893b2b6161edb04c6f41fb3ea70041c3f6dc8d3bb8a6a1baa42a51ea7c0cdc3e69c62c6db464a0addb999d6458258116a26360b8440423cc6faf040823a2ad901bdbeed1a9887d7fbe90e7f7f4b81be3314075ba083cd6c4e6fb8ca770ed81f130d4db853adbef5d0b19c4da17b62b7b296acb2aa14c09b76f6ff3760e6665832a2125a42ea51454b93f34e531501951097bf343362017b5ff32a39c325accca65008adfb4aad1b555e6352ad2006d975b8464b44e2d0790e6fc291cf8ae6ecfc8b96543d9b292d8c0a439bb40b5c41e8501830e75bf424cfe7a2bf5d05821a34fddaaadd00a1b980192456e64a37f3c65e415beaecedc8f6b8c765c5f891321908c71cb34181f50096735171813c82f238697e8800c392dd8ee85b16294854f69758f6e577cbe7ec795eaca8bf47d88028344fccf8b65174e291a4740d52c89882dfcbc7064edade1ee79f28e4842e7926d630658bc6d0d68415d2108dbdbf8"}) (async) sendfile(r0, r1, 0x0, 0x201000) (async) r3 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_int(r3, 0x29, 0xd1, &(0x7f0000000000)=0x4, 0x4) (async) setsockopt$inet6_MRT6_ADD_MFC(r3, 0x29, 0xc8, 0x0, 0x4) (async) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r3, 0x29, 0xc9, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000140)=0x4) (async, rerun: 32) write$9p(r1, &(0x7f0000000100)="1541e06bbc751d99e8926f6f6b5044c4266d5913faa6cabb8c964d2a037be59365fcc3dda148d226d256235cd10e5fb091f853", 0x33) (rerun: 32) 14:48:29 executing program 2: clone(0x80910b00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) set_mempolicy(0x3, &(0x7f0000000040), 0x0) gettid() r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x2, 0x3, 0x2d8, 0x190, 0x190, 0x95ffffff, 0x77, 0x93ffffff, 0x240, 0x240, 0x221, 0x240, 0x240, 0x3, 0x0, {[{{@uncond, 0x0, 0x130, 0x190, 0x0, {0x0, 0xd0}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "bdc74c01369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa6ecab6b1d2cc05e3182f64694d7d05fb8b8c8f56627a54f905d564eeeb8334f650ca0f3c44f7fda4d20a55050342ea85ecc8838e7088de33582f36a0a375bb7008adc297a5ece1bb2df53d17bef26bb6f800", 0x7f}}]}, @common=@SET={0x60}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'veth0_to_batadv\x00', 'ip6gretap0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x338) 14:48:29 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x110, r0, 0x0) (async) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x2) (async) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) (async) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x101000, 0x0) sendfile(r4, r1, &(0x7f0000000100)=0x6f, 0x8) (async, rerun: 32) write$evdev(r1, &(0x7f0000000040)=[{{r2, r3/1000+10000}}], 0x18) (rerun: 32) 14:48:29 executing program 5: clone(0x80910b00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) set_mempolicy(0x3, &(0x7f0000000040)=0xffffffff80000001, 0x400) gettid() r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, &(0x7f0000000080)=ANY=[@ANYBLOB="7549f8187a2a6e40594b4473692aef0dda6d1a46f2019ed7e86b1d711c76877056283bedab9579d2125c7cad3b1f28c963b3a626ef87b075574ff5612ccc80d8e14883ad2a8e6516a15c410ce005b2e841ebacd55a1365c685244ec3b66b003e7ec96ed005906d578130183c37"]) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x2, 0x3, 0x2d8, 0x190, 0x190, 0x95ffffff, 0x77, 0x93ffffff, 0x240, 0x240, 0x221, 0x240, 0x240, 0x3, 0x0, {[{{@uncond, 0x0, 0x130, 0x190, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "bdc74c01369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa6ecab6b1d2cc05e3182f64694d7d05fb8b8c8f56627a54f905d564eeeb8334f650ca0f3c44f7fda4d20a55050342ea85ecc8838e7088de33582f36a0a375bb7008adc297a5ece1bb2df53d17bef26bb6f800", 0x7f, 0x2}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0xc2020000]}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'veth0_to_batadv\x00', 'ip6gretap0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x338) [ 2839.680109][T32580] FAULT_INJECTION: forcing a failure. [ 2839.680109][T32580] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2839.693394][T32580] CPU: 0 PID: 32580 Comm: syz-executor.4 Tainted: G W 5.16.0-rc6-syzkaller #0 [ 2839.703621][T32580] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2839.713671][T32580] Call Trace: [ 2839.716945][T32580] [ 2839.719874][T32580] dump_stack_lvl+0xd6/0x122 [ 2839.724468][T32580] dump_stack+0x11/0x1b 14:48:30 executing program 3: r0 = syz_io_uring_setup(0x2de5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000fe8000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) r3 = openat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x80, 0x1) r4 = syz_io_uring_setup(0x5d66, &(0x7f00000002c0), &(0x7f0000ee7000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r5, r6, &(0x7f00000000c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f00000003c0)}, 0x1010001) r7 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r4, 0x10000000) syz_io_uring_submit(r5, r7, &(0x7f0000000340)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r5, r7, &(0x7f0000000000)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r5, r7, &(0x7f0000004040)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000140)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_CLOSE, 0x0) syz_io_uring_submit(r5, r7, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE, 0x0) bind(0xffffffffffffffff, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(0xffffffffffffffff, &(0x7f00000025c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000100)=0x14) r9 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x12c, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0xfc, 0x2, {{}, [@TCA_NETEM_DELAY_DIST={0x45, 0x2, "7d2b1c2d7e6ca128a9bbe2e203b4ebed6de920ef368c1be6e4b441ddd94bd6f70cea6c3c03e9950fbeec369a9bf99b7c20753ccd678fd6dd5dc072a1419b7876d3"}, @TCA_NETEM_ECN={0x8}, @TCA_NETEM_SLOT={0x2c, 0xc, {0x759, 0x7fff, 0x1000, 0x67bf, 0x3}}, @TCA_NETEM_LATENCY64={0xc, 0xa, 0x2}, @TCA_NETEM_DELAY_DIST={0x44, 0x2, "e8d3252fd15001026ede6b9425341d1864d90de6424d24104db908874fa42a71a7b3fe2c9999b68845c67be19d7cadbea6c3a19a7c146349660bfd8664ad8faf"}, @TCA_NETEM_RATE={0x14, 0x6, {0x10001, 0x0, 0x52e, 0x6}}]}}}]}, 0x12c}}, 0x0) setsockopt$packet_add_memb(r9, 0x107, 0x1, &(0x7f00000003c0)={0x0, 0x1, 0x6, @broadcast}, 0x10) syz_io_uring_submit(r5, 0x0, &(0x7f00000002c0)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x1, 0x0, 0x0, 0x0, 0x1}, 0x7) sendmsg$FOU_CMD_GET(r3, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)={0x74, 0x0, 0x100, 0x70bd2b, 0x25dfdbff, {}, [@FOU_ATTR_LOCAL_V4={0x8, 0x6, @remote}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @mcast1}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @remote}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x2c}, @FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x3a}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0xc}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @private2={0xfc, 0x2, '\x00', 0x1}}]}, 0x74}, 0x1, 0x0, 0x0, 0x40801}, 0x20040810) io_uring_enter(r0, 0xb2, 0x0, 0x0, 0x0, 0x7401) [ 2839.728631][T32580] should_fail+0x23c/0x250 [ 2839.733052][T32580] __alloc_pages+0x102/0x330 [ 2839.737653][T32580] alloc_pages+0x382/0x3d0 [ 2839.742130][T32580] folio_alloc+0x1a/0x20 [ 2839.746375][T32580] filemap_alloc_folio+0x53/0xf0 [ 2839.751317][T32580] page_cache_ra_unbounded+0x1c0/0x430 [ 2839.756866][T32580] ondemand_readahead+0x4f8/0x700 [ 2839.762232][T32580] ? filemap_get_read_batch+0x3e2/0x410 [ 2839.767798][T32580] page_cache_async_ra+0xed/0x120 [ 2839.772834][T32580] filemap_read+0x500/0x16d0 14:48:30 executing program 1: r0 = socket$inet6(0xa, 0x400000000001, 0x0) (async) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000000)={0x0, {{0xa, 0x4e23, 0x2967, @private2, 0x3}}}, 0x88) (async) r1 = open(&(0x7f0000002000)='./bus\x00', 0x246042, 0x110) ftruncate(r1, 0x2007fff) r2 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_int(r2, 0x29, 0xd1, &(0x7f0000000000)=0x4, 0x4) (async) setsockopt$inet6_MRT6_ADD_MFC(r2, 0x29, 0xc8, 0x0, 0x4) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r2, 0x29, 0xc9, 0x0, 0x0) (async) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000000, 0x110, r2, 0x1350000) close(r0) open(&(0x7f00000002c0)='./bus\x00', 0x14d842, 0x0) (async) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x7, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x5}, 0x1c) (async) ioctl$BTRFS_IOC_SUBVOL_CREATE(r1, 0x5000940e, &(0x7f0000000300)={{r0}, "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"}) sendfile(r0, r1, 0x0, 0x201000) (async) r3 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_int(r3, 0x29, 0xd1, &(0x7f0000000000)=0x4, 0x4) setsockopt$inet6_MRT6_ADD_MFC(r3, 0x29, 0xc8, 0x0, 0x4) (async) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r3, 0x29, 0xc9, 0x0, 0x0) (async) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000140)=0x4) (async) write$9p(r1, &(0x7f0000000100)="1541e06bbc751d99e8926f6f6b5044c4266d5913faa6cabb8c964d2a037be59365fcc3dda148d226d256235cd10e5fb091f853", 0x33) [ 2839.777450][T32580] ? __rcu_read_unlock+0x5c/0x290 [ 2839.782486][T32580] generic_file_read_iter+0x72/0x2a0 [ 2839.787831][T32580] ? iov_iter_pipe+0x100/0x150 [ 2839.792639][T32580] ? ext4_file_read_iter+0x7a/0x1f0 [ 2839.797894][T32580] generic_file_splice_read+0x24f/0x330 [ 2839.803451][T32580] ? splice_shrink_spd+0x60/0x60 [ 2839.808553][T32580] splice_direct_to_actor+0x2aa/0x650 [ 2839.814017][T32580] ? do_splice_direct+0x190/0x190 [ 2839.819048][T32580] do_splice_direct+0x106/0x190 [ 2839.824059][T32580] do_sendfile+0x675/0xc40 14:48:30 executing program 1: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) ftruncate(r1, 0x2007fff) socket$inet6(0xa, 0xa, 0x20) close(r0) creat(&(0x7f0000000000)='./bus\x00', 0x54) sendmsg$inet6(r0, &(0x7f00000014c0)={&(0x7f0000000040)={0xa, 0x4e22, 0x80, @mcast1, 0xe864}, 0x1c, &(0x7f00000013c0)=[{&(0x7f0000000080)="1e1b0e7677ceb1034a634118408633c5f3dace1ec2f795657ddb66f961695b5e1f5fa99e1b63104281b8b7a1fdd62e9a73edf5f02c5e08b153aede54f9e0c47376edad96ba6b083446cbf46e9a4cea0dbfb1dc186bf2851a4866c26093781628333a69464b06a6d9063df96e2a7ccd9749e036756f46d395eeeabc0750b551cd83cac3ec31e3b9f78e9845ea8847dcc2a9aca7ad9b0f00098484b38a49da1faa8e850a6d2af4ceeff7d3f39cb1247544800c2f4934eeae0a8ad2dfe48bc1e1e759b010b7cb1fe27970a9789622a34cedd861d0b857f3659ee577", 0xda}, {&(0x7f0000000300)="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", 0x1000}, {&(0x7f0000000180)="10260ad599b65a618b2217d3c784eba79189c484dfa99388eabf89ad9bbc3803d0a4b9c147cbb60eecea639a9cf9c176c1bae17bcdb71d447feffbde090fe12a0fcd8d649fa3374bb80f457f2b92e8ae4018811efbe3a7a4ad9c09ef4c62267b0801307672f9a06ef5a6ee5e579a840f18068ab535c2da241e47978fd514a29408a2ba02aed71993d99863b3b00118e950ec501c929c8b75a0108cffca49dfaa78cfc99cf05da35d62ee8532f53580254e1da5e57d9f92a2ec3b", 0xba}, {&(0x7f0000001300)="322dc66a8887655ab1fa8d83d282a2c18cd1ed9ef6125f5a1ae309d17e52e7df12c72153c6d4af9d409d219c3a5dc4fe842683f7f59509374a2b6a4bec5671b55a038d4148d3a97ce03f50eabef97dc182e9215452a8dc7aaae31219427e94c7a551ad250bd121b1d7bfb18ee7668a3fc43546cfde97b931fda7f9bcbb21c14e95d2339e38566b59d805da04dcee721618760e0843b0def28ffbf67fea3f60c5bcc77995689ef78f61f2991353", 0xad}, {&(0x7f0000000240)="bdd395f314203d9380a0a6a54e74d3101973dcd12540067086c39b6ba67a6e96d045be20e87ce7f64d313d11aadf69432457b0c3549cde0b1b064695d2e77fa37f5b05c7d1", 0x45}], 0x5, &(0x7f0000001440)=[@rthdr={{0x48, 0x29, 0x39, {0x67, 0x6, 0x2, 0x6, 0x0, [@local, @dev={0xfe, 0x80, '\x00', 0x3d}, @remote]}}}], 0x48}, 0x800) open(&(0x7f00000002c0)='./bus\x00', 0x14d842, 0x0) sendfile(r0, r1, 0x0, 0x201000) [ 2839.828540][T32580] __x64_sys_sendfile64+0x102/0x140 [ 2839.833832][T32580] do_syscall_64+0x44/0xd0 [ 2839.838256][T32580] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2839.844228][T32580] RIP: 0033:0x7f2d29acae99 [ 2839.848641][T32580] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2839.868248][T32580] RSP: 002b:00007f2d28c41168 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 14:48:30 executing program 5: clone(0x80910b00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) set_mempolicy(0x3, &(0x7f0000000040)=0xffffffff80000001, 0x400) gettid() r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, &(0x7f0000000080)=ANY=[@ANYBLOB="7549f8187a2a6e40594b4473692aef0dda6d1a46f2019ed7e86b1d711c76877056283bedab9579d2125c7cad3b1f28c963b3a626ef87b075574ff5612ccc80d8e14883ad2a8e6516a15c410ce005b2e841ebacd55a1365c685244ec3b66b003e7ec96ed005906d578130183c37"]) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x2, 0x3, 0x2d8, 0x190, 0x190, 0x95ffffff, 0x77, 0x93ffffff, 0x240, 0x240, 0x221, 0x240, 0x240, 0x3, 0x0, {[{{@uncond, 0x0, 0x130, 0x190, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "bdc74c01369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa6ecab6b1d2cc05e3182f64694d7d05fb8b8c8f56627a54f905d564eeeb8334f650ca0f3c44f7fda4d20a55050342ea85ecc8838e7088de33582f36a0a375bb7008adc297a5ece1bb2df53d17bef26bb6f800", 0x7f, 0x2}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0xc2ffffff]}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'veth0_to_batadv\x00', 'ip6gretap0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x338) [ 2839.876666][T32580] RAX: ffffffffffffffda RBX: 00007f2d29bddf60 RCX: 00007f2d29acae99 [ 2839.884642][T32580] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 2839.892677][T32580] RBP: 00007f2d28c411d0 R08: 0000000000000000 R09: 0000000000000000 [ 2839.900675][T32580] R10: 0000000000201000 R11: 0000000000000246 R12: 0000000000000002 [ 2839.908643][T32580] R13: 00007ffcc1d93fdf R14: 00007f2d28c41300 R15: 0000000000022000 [ 2839.916617][T32580] 14:48:30 executing program 1: r0 = socket$inet6(0xa, 0x400000000001, 0x0) (async) r1 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) ftruncate(r1, 0x2007fff) (async) socket$inet6(0xa, 0xa, 0x20) (async) close(r0) creat(&(0x7f0000000000)='./bus\x00', 0x54) (async) sendmsg$inet6(r0, &(0x7f00000014c0)={&(0x7f0000000040)={0xa, 0x4e22, 0x80, @mcast1, 0xe864}, 0x1c, &(0x7f00000013c0)=[{&(0x7f0000000080)="1e1b0e7677ceb1034a634118408633c5f3dace1ec2f795657ddb66f961695b5e1f5fa99e1b63104281b8b7a1fdd62e9a73edf5f02c5e08b153aede54f9e0c47376edad96ba6b083446cbf46e9a4cea0dbfb1dc186bf2851a4866c26093781628333a69464b06a6d9063df96e2a7ccd9749e036756f46d395eeeabc0750b551cd83cac3ec31e3b9f78e9845ea8847dcc2a9aca7ad9b0f00098484b38a49da1faa8e850a6d2af4ceeff7d3f39cb1247544800c2f4934eeae0a8ad2dfe48bc1e1e759b010b7cb1fe27970a9789622a34cedd861d0b857f3659ee577", 0xda}, {&(0x7f0000000300)="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", 0x1000}, {&(0x7f0000000180)="10260ad599b65a618b2217d3c784eba79189c484dfa99388eabf89ad9bbc3803d0a4b9c147cbb60eecea639a9cf9c176c1bae17bcdb71d447feffbde090fe12a0fcd8d649fa3374bb80f457f2b92e8ae4018811efbe3a7a4ad9c09ef4c62267b0801307672f9a06ef5a6ee5e579a840f18068ab535c2da241e47978fd514a29408a2ba02aed71993d99863b3b00118e950ec501c929c8b75a0108cffca49dfaa78cfc99cf05da35d62ee8532f53580254e1da5e57d9f92a2ec3b", 0xba}, {&(0x7f0000001300)="322dc66a8887655ab1fa8d83d282a2c18cd1ed9ef6125f5a1ae309d17e52e7df12c72153c6d4af9d409d219c3a5dc4fe842683f7f59509374a2b6a4bec5671b55a038d4148d3a97ce03f50eabef97dc182e9215452a8dc7aaae31219427e94c7a551ad250bd121b1d7bfb18ee7668a3fc43546cfde97b931fda7f9bcbb21c14e95d2339e38566b59d805da04dcee721618760e0843b0def28ffbf67fea3f60c5bcc77995689ef78f61f2991353", 0xad}, {&(0x7f0000000240)="bdd395f314203d9380a0a6a54e74d3101973dcd12540067086c39b6ba67a6e96d045be20e87ce7f64d313d11aadf69432457b0c3549cde0b1b064695d2e77fa37f5b05c7d1", 0x45}], 0x5, &(0x7f0000001440)=[@rthdr={{0x48, 0x29, 0x39, {0x67, 0x6, 0x2, 0x6, 0x0, [@local, @dev={0xfe, 0x80, '\x00', 0x3d}, @remote]}}}], 0x48}, 0x800) (async) open(&(0x7f00000002c0)='./bus\x00', 0x14d842, 0x0) (async) sendfile(r0, r1, 0x0, 0x201000) 14:48:30 executing program 4: r0 = socket$inet6(0xa, 0x400000000001, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) ftruncate(r1, 0x2007fff) close(r0) open(&(0x7f00000002c0)='./bus\x00', 0x14d842, 0x0) sendfile(r0, r1, 0x0, 0x201000) (fail_nth: 84) 14:48:30 executing program 5: clone(0x80910b00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) set_mempolicy(0x3, &(0x7f0000000040)=0xffffffff80000001, 0x400) gettid() r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, &(0x7f0000000080)=ANY=[@ANYBLOB="7549f8187a2a6e40594b4473692aef0dda6d1a46f2019ed7e86b1d711c76877056283bedab9579d2125c7cad3b1f28c963b3a626ef87b075574ff5612ccc80d8e14883ad2a8e6516a15c410ce005b2e841ebacd55a1365c685244ec3b66b003e7ec96ed005906d578130183c37"]) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x2, 0x3, 0x2d8, 0x190, 0x190, 0x95ffffff, 0x77, 0x93ffffff, 0x240, 0x240, 0x221, 0x240, 0x240, 0x3, 0x0, {[{{@uncond, 0x0, 0x130, 0x190, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "bdc74c01369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa6ecab6b1d2cc05e3182f64694d7d05fb8b8c8f56627a54f905d564eeeb8334f650ca0f3c44f7fda4d20a55050342ea85ecc8838e7088de33582f36a0a375bb7008adc297a5ece1bb2df53d17bef26bb6f800", 0x7f, 0x2}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0xc3ffffff]}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'veth0_to_batadv\x00', 'ip6gretap0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x338) 14:48:30 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x1c0000, 0x100) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0, 0x0}, &(0x7f0000000000)=0xc) msgctl$IPC_SET(0x0, 0x1, &(0x7f00000001c0)={{0x3, 0x0, r2}}) r3 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_int(r3, 0x29, 0xd1, &(0x7f0000000000)=0x4, 0x4) setsockopt$inet6_MRT6_ADD_MFC(r3, 0x29, 0xc8, 0x0, 0x4) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r3, 0x29, 0xc9, 0x0, 0x0) r4 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_int(r4, 0x29, 0xd1, &(0x7f0000000000)=0x4, 0x4) setsockopt$inet6_MRT6_ADD_MFC(r4, 0x29, 0xc8, 0x0, 0x4) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r4, 0x29, 0xc9, 0x0, 0x0) sendmmsg$unix(r0, &(0x7f0000000b00)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000001c0)="3772f732125bd6522769a31bad12aa29d735265499830c94ca0c818a746a45181d79334983ff71eda99888224e7467470f276eeb288010f1cd16b357bf74e272afcf28c0e6e7278070dd0cebbfea5f25c2d96841f8b08eea8b13b201cc758cffc58bdeddcc764b4477a54415f1d3db3bff1619a1a9e99c380a7ce5f3ed4cfb4701e11b07a2a814245c3f362d57bc7dd0b1f07678d4ce4cd2179676adc071206b0d234cfa126cccf096bb8a85415231b035febcd3f33241e638ca6e0547561897", 0xc0}, {&(0x7f0000000280)="42ec640ee3f1ee70e2c39a741114dfdb6ab6534452ffb222f9986e89162616bddc09794ce10b0691370738dd8e085b98b84d7b3715098e8f57091458eaaba9c7af7c27373ba9cfd38690f56cc42dbca1bf0dc4ccffed1d1c49480a3a9ae29393cb81f24f3cf91acc986d39564bd8cb646134dc2e2328bdac69271d5ad9b4ab30f4092969c04bf6c925061cb8cec55536fd755a513b63c5362ff14df6c80c627f099b934ca32f1bb155ca658138a875e979c1498e7d1ac707ad2704501429c2ca4e8ceb24396b51da58a0f2b20dfd5317b8b1d44548", 0xd5}], 0x2, &(0x7f0000000980)=[@cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee01}}}, @rights={{0x14, 0x1, 0x1, [r0]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee01}}}, @rights={{0x24, 0x1, 0x1, [r0, 0xffffffffffffffff, 0xffffffffffffffff, r0, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r0, r0]}}, @rights={{0x14, 0x1, 0x1, [r0]}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0xee01}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, r2}}}, @rights={{0x1c, 0x1, 0x1, [r0, r3, r4]}}], 0x148, 0x2002c800}}], 0x1, 0x44004) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) openat(r0, &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x40) newfstatat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) lchown(&(0x7f0000000040)='./file0\x00', r5, 0x0) r6 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x2) write$evdev(r6, &(0x7f000004d000)=[{}], 0xfffffe82) 14:48:30 executing program 2: clone(0x80910b00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) set_mempolicy(0x3, &(0x7f0000000040), 0x0) gettid() r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x2, 0x3, 0x2d8, 0x190, 0x190, 0x95ffffff, 0x77, 0x93ffffff, 0x240, 0x240, 0x221, 0x240, 0x240, 0x3, 0x0, {[{{@uncond, 0x0, 0x130, 0x190, 0x0, {0x0, 0xd7}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "bdc74c01369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa6ecab6b1d2cc05e3182f64694d7d05fb8b8c8f56627a54f905d564eeeb8334f650ca0f3c44f7fda4d20a55050342ea85ecc8838e7088de33582f36a0a375bb7008adc297a5ece1bb2df53d17bef26bb6f800", 0x7f}}]}, @common=@SET={0x60}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'veth0_to_batadv\x00', 'ip6gretap0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x338) 14:48:30 executing program 1: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) ftruncate(r1, 0x2007fff) (async) socket$inet6(0xa, 0xa, 0x20) (async) close(r0) (async) creat(&(0x7f0000000000)='./bus\x00', 0x54) sendmsg$inet6(r0, &(0x7f00000014c0)={&(0x7f0000000040)={0xa, 0x4e22, 0x80, @mcast1, 0xe864}, 0x1c, &(0x7f00000013c0)=[{&(0x7f0000000080)="1e1b0e7677ceb1034a634118408633c5f3dace1ec2f795657ddb66f961695b5e1f5fa99e1b63104281b8b7a1fdd62e9a73edf5f02c5e08b153aede54f9e0c47376edad96ba6b083446cbf46e9a4cea0dbfb1dc186bf2851a4866c26093781628333a69464b06a6d9063df96e2a7ccd9749e036756f46d395eeeabc0750b551cd83cac3ec31e3b9f78e9845ea8847dcc2a9aca7ad9b0f00098484b38a49da1faa8e850a6d2af4ceeff7d3f39cb1247544800c2f4934eeae0a8ad2dfe48bc1e1e759b010b7cb1fe27970a9789622a34cedd861d0b857f3659ee577", 0xda}, {&(0x7f0000000300)="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", 0x1000}, {&(0x7f0000000180)="10260ad599b65a618b2217d3c784eba79189c484dfa99388eabf89ad9bbc3803d0a4b9c147cbb60eecea639a9cf9c176c1bae17bcdb71d447feffbde090fe12a0fcd8d649fa3374bb80f457f2b92e8ae4018811efbe3a7a4ad9c09ef4c62267b0801307672f9a06ef5a6ee5e579a840f18068ab535c2da241e47978fd514a29408a2ba02aed71993d99863b3b00118e950ec501c929c8b75a0108cffca49dfaa78cfc99cf05da35d62ee8532f53580254e1da5e57d9f92a2ec3b", 0xba}, {&(0x7f0000001300)="322dc66a8887655ab1fa8d83d282a2c18cd1ed9ef6125f5a1ae309d17e52e7df12c72153c6d4af9d409d219c3a5dc4fe842683f7f59509374a2b6a4bec5671b55a038d4148d3a97ce03f50eabef97dc182e9215452a8dc7aaae31219427e94c7a551ad250bd121b1d7bfb18ee7668a3fc43546cfde97b931fda7f9bcbb21c14e95d2339e38566b59d805da04dcee721618760e0843b0def28ffbf67fea3f60c5bcc77995689ef78f61f2991353", 0xad}, {&(0x7f0000000240)="bdd395f314203d9380a0a6a54e74d3101973dcd12540067086c39b6ba67a6e96d045be20e87ce7f64d313d11aadf69432457b0c3549cde0b1b064695d2e77fa37f5b05c7d1", 0x45}], 0x5, &(0x7f0000001440)=[@rthdr={{0x48, 0x29, 0x39, {0x67, 0x6, 0x2, 0x6, 0x0, [@local, @dev={0xfe, 0x80, '\x00', 0x3d}, @remote]}}}], 0x48}, 0x800) (async) open(&(0x7f00000002c0)='./bus\x00', 0x14d842, 0x0) sendfile(r0, r1, 0x0, 0x201000) 14:48:30 executing program 3: r0 = syz_io_uring_setup(0x2de5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000fe8000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) r3 = openat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x80, 0x1) r4 = syz_io_uring_setup(0x5d66, &(0x7f00000002c0), &(0x7f0000ee7000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r5, r6, &(0x7f00000000c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f00000003c0)}, 0x1010001) r7 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r4, 0x10000000) syz_io_uring_submit(r5, r7, &(0x7f0000000340)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r5, r7, &(0x7f0000000000)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r5, r7, &(0x7f0000004040)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000140)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_CLOSE, 0x0) syz_io_uring_submit(r5, r7, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE, 0x0) bind(0xffffffffffffffff, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(0xffffffffffffffff, &(0x7f00000025c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000100)=0x14) r9 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x12c, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0xfc, 0x2, {{}, [@TCA_NETEM_DELAY_DIST={0x45, 0x2, "7d2b1c2d7e6ca128a9bbe2e203b4ebed6de920ef368c1be6e4b441ddd94bd6f70cea6c3c03e9950fbeec369a9bf99b7c20753ccd678fd6dd5dc072a1419b7876d3"}, @TCA_NETEM_ECN={0x8}, @TCA_NETEM_SLOT={0x2c, 0xc, {0x759, 0x7fff, 0x1000, 0x67bf, 0x3}}, @TCA_NETEM_LATENCY64={0xc, 0xa, 0x2}, @TCA_NETEM_DELAY_DIST={0x44, 0x2, "e8d3252fd15001026ede6b9425341d1864d90de6424d24104db908874fa42a71a7b3fe2c9999b68845c67be19d7cadbea6c3a19a7c146349660bfd8664ad8faf"}, @TCA_NETEM_RATE={0x14, 0x6, {0x10001, 0x0, 0x52e, 0x6}}]}}}]}, 0x12c}}, 0x0) setsockopt$packet_add_memb(r9, 0x107, 0x1, &(0x7f00000003c0)={0x0, 0x1, 0x6, @broadcast}, 0x10) syz_io_uring_submit(r5, 0x0, &(0x7f00000002c0)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x1, 0x0, 0x0, 0x0, 0x1}, 0x7) sendmsg$FOU_CMD_GET(r3, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)={0x74, 0x0, 0x100, 0x70bd2b, 0x25dfdbff, {}, [@FOU_ATTR_LOCAL_V4={0x8, 0x6, @remote}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @mcast1}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @remote}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x2c}, @FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x3a}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0xc}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @private2={0xfc, 0x2, '\x00', 0x1}}]}, 0x74}, 0x1, 0x0, 0x0, 0x40801}, 0x20040810) io_uring_enter(r0, 0xb2, 0x0, 0x0, 0x0, 0x7401) syz_io_uring_setup(0x2de5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000fe8000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000140)) (async) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) (async) openat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x80, 0x1) (async) syz_io_uring_setup(0x5d66, &(0x7f00000002c0), &(0x7f0000ee7000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380), &(0x7f00000001c0)) (async) syz_io_uring_submit(r5, r6, &(0x7f00000000c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f00000003c0)}, 0x1010001) (async) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r4, 0x10000000) (async) syz_io_uring_submit(r5, r7, &(0x7f0000000340)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd_index}, 0x0) (async) syz_io_uring_submit(r5, r7, &(0x7f0000000000)=@IORING_OP_SYNC_FILE_RANGE, 0x0) (async) syz_io_uring_submit(r5, r7, &(0x7f0000004040)=@IORING_OP_SYNC_FILE_RANGE, 0x0) (async) syz_io_uring_submit(r5, r6, &(0x7f0000000140)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) (async) syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_CLOSE, 0x0) (async) syz_io_uring_submit(r5, r7, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE, 0x0) (async) bind(0xffffffffffffffff, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) (async) getsockname$packet(0xffffffffffffffff, &(0x7f00000025c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000100)=0x14) (async) socket(0x10, 0x3, 0x0) (async) sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x12c, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0xfc, 0x2, {{}, [@TCA_NETEM_DELAY_DIST={0x45, 0x2, "7d2b1c2d7e6ca128a9bbe2e203b4ebed6de920ef368c1be6e4b441ddd94bd6f70cea6c3c03e9950fbeec369a9bf99b7c20753ccd678fd6dd5dc072a1419b7876d3"}, @TCA_NETEM_ECN={0x8}, @TCA_NETEM_SLOT={0x2c, 0xc, {0x759, 0x7fff, 0x1000, 0x67bf, 0x3}}, @TCA_NETEM_LATENCY64={0xc, 0xa, 0x2}, @TCA_NETEM_DELAY_DIST={0x44, 0x2, "e8d3252fd15001026ede6b9425341d1864d90de6424d24104db908874fa42a71a7b3fe2c9999b68845c67be19d7cadbea6c3a19a7c146349660bfd8664ad8faf"}, @TCA_NETEM_RATE={0x14, 0x6, {0x10001, 0x0, 0x52e, 0x6}}]}}}]}, 0x12c}}, 0x0) (async) setsockopt$packet_add_memb(r9, 0x107, 0x1, &(0x7f00000003c0)={0x0, 0x1, 0x6, @broadcast}, 0x10) (async) syz_io_uring_submit(r5, 0x0, &(0x7f00000002c0)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x1, 0x0, 0x0, 0x0, 0x1}, 0x7) (async) sendmsg$FOU_CMD_GET(r3, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)={0x74, 0x0, 0x100, 0x70bd2b, 0x25dfdbff, {}, [@FOU_ATTR_LOCAL_V4={0x8, 0x6, @remote}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @mcast1}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @remote}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x2c}, @FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x3a}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0xc}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @private2={0xfc, 0x2, '\x00', 0x1}}]}, 0x74}, 0x1, 0x0, 0x0, 0x40801}, 0x20040810) (async) io_uring_enter(r0, 0xb2, 0x0, 0x0, 0x0, 0x7401) (async) 14:48:30 executing program 5: clone(0x80910b00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) set_mempolicy(0x3, &(0x7f0000000040)=0xffffffff80000001, 0x400) gettid() r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, &(0x7f0000000080)=ANY=[@ANYBLOB="7549f8187a2a6e40594b4473692aef0dda6d1a46f2019ed7e86b1d711c76877056283bedab9579d2125c7cad3b1f28c963b3a626ef87b075574ff5612ccc80d8e14883ad2a8e6516a15c410ce005b2e841ebacd55a1365c685244ec3b66b003e7ec96ed005906d578130183c37"]) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x2, 0x3, 0x2d8, 0x190, 0x190, 0x95ffffff, 0x77, 0x93ffffff, 0x240, 0x240, 0x221, 0x240, 0x240, 0x3, 0x0, {[{{@uncond, 0x0, 0x130, 0x190, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "bdc74c01369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa6ecab6b1d2cc05e3182f64694d7d05fb8b8c8f56627a54f905d564eeeb8334f650ca0f3c44f7fda4d20a55050342ea85ecc8838e7088de33582f36a0a375bb7008adc297a5ece1bb2df53d17bef26bb6f800", 0x7f, 0x2}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0xc4000000]}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'veth0_to_batadv\x00', 'ip6gretap0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x338) [ 2840.234713][ T1172] FAULT_INJECTION: forcing a failure. [ 2840.234713][ T1172] name failslab, interval 1, probability 0, space 0, times 0 [ 2840.247373][ T1172] CPU: 0 PID: 1172 Comm: syz-executor.4 Tainted: G W 5.16.0-rc6-syzkaller #0 [ 2840.257437][ T1172] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2840.267486][ T1172] Call Trace: [ 2840.270810][ T1172] [ 2840.273736][ T1172] dump_stack_lvl+0xd6/0x122 [ 2840.278335][ T1172] dump_stack+0x11/0x1b [ 2840.282495][ T1172] should_fail+0x23c/0x250 [ 2840.286977][ T1172] ? xas_create+0x3fb/0xb10 [ 2840.291488][ T1172] __should_failslab+0x81/0x90 [ 2840.296294][ T1172] should_failslab+0x5/0x20 [ 2840.300799][ T1172] kmem_cache_alloc+0x4f/0x320 [ 2840.305563][ T1172] xas_create+0x3fb/0xb10 [ 2840.309942][ T1172] xas_store+0x70/0xca0 [ 2840.314095][ T1172] ? xas_find_conflict+0x422/0x4c0 [ 2840.319236][ T1172] __filemap_add_folio+0x1e8/0x4d0 [ 2840.324419][ T1172] ? workingset_activation+0x2b0/0x2b0 [ 2840.329900][ T1172] filemap_add_folio+0x6b/0x150 [ 2840.334748][ T1172] add_to_page_cache_lru+0x4e/0x70 [ 2840.339861][ T1172] page_cache_ra_unbounded+0x274/0x430 [ 2840.345360][ T1172] ondemand_readahead+0x4f8/0x700 [ 2840.350383][ T1172] ? filemap_get_read_batch+0x3e2/0x410 [ 2840.355967][ T1172] page_cache_async_ra+0xed/0x120 [ 2840.360994][ T1172] filemap_read+0x500/0x16d0 [ 2840.365583][ T1172] ? __rcu_read_unlock+0x5c/0x290 [ 2840.370647][ T1172] generic_file_read_iter+0x72/0x2a0 [ 2840.376016][ T1172] ? iov_iter_pipe+0x100/0x150 [ 2840.380880][ T1172] ? ext4_file_read_iter+0x7a/0x1f0 [ 2840.386080][ T1172] generic_file_splice_read+0x24f/0x330 [ 2840.391704][ T1172] ? splice_shrink_spd+0x60/0x60 [ 2840.396696][ T1172] splice_direct_to_actor+0x2aa/0x650 [ 2840.402128][ T1172] ? do_splice_direct+0x190/0x190 [ 2840.407265][ T1172] do_splice_direct+0x106/0x190 [ 2840.412181][ T1172] do_sendfile+0x675/0xc40 [ 2840.416605][ T1172] __x64_sys_sendfile64+0x102/0x140 [ 2840.421800][ T1172] do_syscall_64+0x44/0xd0 [ 2840.426219][ T1172] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2840.432113][ T1172] RIP: 0033:0x7f2d29acae99 [ 2840.436521][ T1172] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2840.456121][ T1172] RSP: 002b:00007f2d28c41168 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 2840.464523][ T1172] RAX: ffffffffffffffda RBX: 00007f2d29bddf60 RCX: 00007f2d29acae99 [ 2840.472523][ T1172] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 14:48:30 executing program 5: clone(0x80910b00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) set_mempolicy(0x3, &(0x7f0000000040)=0xffffffff80000001, 0x400) gettid() r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, &(0x7f0000000080)=ANY=[@ANYBLOB="7549f8187a2a6e40594b4473692aef0dda6d1a46f2019ed7e86b1d711c76877056283bedab9579d2125c7cad3b1f28c963b3a626ef87b075574ff5612ccc80d8e14883ad2a8e6516a15c410ce005b2e841ebacd55a1365c685244ec3b66b003e7ec96ed005906d578130183c37"]) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x2, 0x3, 0x2d8, 0x190, 0x190, 0x95ffffff, 0x77, 0x93ffffff, 0x240, 0x240, 0x221, 0x240, 0x240, 0x3, 0x0, {[{{@uncond, 0x0, 0x130, 0x190, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "bdc74c01369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa6ecab6b1d2cc05e3182f64694d7d05fb8b8c8f56627a54f905d564eeeb8334f650ca0f3c44f7fda4d20a55050342ea85ecc8838e7088de33582f36a0a375bb7008adc297a5ece1bb2df53d17bef26bb6f800", 0x7f, 0x2}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0xc4010000]}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'veth0_to_batadv\x00', 'ip6gretap0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x338) 14:48:30 executing program 2: clone(0x80910b00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) set_mempolicy(0x3, &(0x7f0000000040), 0x0) gettid() r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x2, 0x3, 0x2d8, 0x190, 0x190, 0x95ffffff, 0x77, 0x93ffffff, 0x240, 0x240, 0x221, 0x240, 0x240, 0x3, 0x0, {[{{@uncond, 0x0, 0x130, 0x190, 0x0, {0x0, 0xde}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "bdc74c01369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa6ecab6b1d2cc05e3182f64694d7d05fb8b8c8f56627a54f905d564eeeb8334f650ca0f3c44f7fda4d20a55050342ea85ecc8838e7088de33582f36a0a375bb7008adc297a5ece1bb2df53d17bef26bb6f800", 0x7f}}]}, @common=@SET={0x60}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'veth0_to_batadv\x00', 'ip6gretap0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x338) [ 2840.480490][ T1172] RBP: 00007f2d28c411d0 R08: 0000000000000000 R09: 0000000000000000 [ 2840.488452][ T1172] R10: 0000000000201000 R11: 0000000000000246 R12: 0000000000000002 [ 2840.496417][ T1172] R13: 00007ffcc1d93fdf R14: 00007f2d28c41300 R15: 0000000000022000 [ 2840.504388][ T1172] 14:48:30 executing program 1: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) ftruncate(r1, 0x2007fff) close(r0) r2 = syz_open_dev$vcsu(&(0x7f0000000000), 0x8f1, 0x200) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000040)={@dev={0xfe, 0x80, '\x00', 0x19}, 0x95, 0x2, 0x1, 0x1, 0xf801, 0x8}, 0x20) open(&(0x7f00000002c0)='./bus\x00', 0x14d842, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)=@deltaction={0xb4, 0x31, 0x8, 0x70bd2b, 0x25dfdbfe, {}, [@TCA_ACT_TAB={0x6c, 0x1, [{0xc, 0x9, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xe982}}, {0xc, 0x1f, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}, {0xc, 0x5, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x800}}, {0x10, 0x13, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}, {0x10, 0xc, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}, {0xc, 0x10, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0xc, 0x9, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x401}}]}, @TCA_ACT_TAB={0x34, 0x1, [{0xc, 0x14, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}, {0xc, 0x1a, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xe0e}}, {0xc, 0x1f, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}, {0xc, 0x1a, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x41000}, 0xc0) r3 = accept$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x0, 0x0, @private2}, &(0x7f0000000240)=0x1c) r4 = socket(0x11, 0x800000003, 0x0) bind(r4, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r4, &(0x7f00000025c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000100)=0x14) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x12c, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0xfc, 0x2, {{}, [@TCA_NETEM_DELAY_DIST={0x45, 0x2, "7d2b1c2d7e6ca128a9bbe2e203b4ebed6de920ef368c1be6e4b441ddd94bd6f70cea6c3c03e9950fbeec369a9bf99b7c20753ccd678fd6dd5dc072a1419b7876d3"}, @TCA_NETEM_ECN={0x8}, @TCA_NETEM_SLOT={0x2c, 0xc, {0x759, 0x7fff, 0x1000, 0x67bf, 0x3}}, @TCA_NETEM_LATENCY64={0xc, 0xa, 0x2}, @TCA_NETEM_DELAY_DIST={0x44, 0x2, "e8d3252fd15001026ede6b9425341d1864d90de6424d24104db908874fa42a71a7b3fe2c9999b68845c67be19d7cadbea6c3a19a7c146349660bfd8664ad8faf"}, @TCA_NETEM_RATE={0x14, 0x6, {0x10001, 0x0, 0x52e, 0x6}}]}}}]}, 0x12c}}, 0x0) setsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000300)={{{@in6=@private0, @in=@broadcast, 0x4e23, 0x8, 0x4e23, 0x3, 0xa, 0x90, 0x40, 0x3b, r5, 0xee00}, {0x8, 0x4, 0x3, 0x43, 0x20, 0x401, 0x7, 0xfffffffffffffff7}, {0x9, 0x8000, 0x944}, 0x1, 0x0, 0x1, 0x1, 0x3, 0x2}, {{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x4d6, 0xff}, 0xa, @in=@empty, 0x3505, 0x3, 0x1, 0x0, 0x2, 0x2, 0x1}}, 0xe8) sendfile(r0, r1, 0x0, 0x201000) 14:48:30 executing program 5: clone(0x80910b00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) set_mempolicy(0x3, &(0x7f0000000040)=0xffffffff80000001, 0x400) gettid() r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, &(0x7f0000000080)=ANY=[@ANYBLOB="7549f8187a2a6e40594b4473692aef0dda6d1a46f2019ed7e86b1d711c76877056283bedab9579d2125c7cad3b1f28c963b3a626ef87b075574ff5612ccc80d8e14883ad2a8e6516a15c410ce005b2e841ebacd55a1365c685244ec3b66b003e7ec96ed005906d578130183c37"]) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x2, 0x3, 0x2d8, 0x190, 0x190, 0x95ffffff, 0x77, 0x93ffffff, 0x240, 0x240, 0x221, 0x240, 0x240, 0x3, 0x0, {[{{@uncond, 0x0, 0x130, 0x190, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "bdc74c01369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa6ecab6b1d2cc05e3182f64694d7d05fb8b8c8f56627a54f905d564eeeb8334f650ca0f3c44f7fda4d20a55050342ea85ecc8838e7088de33582f36a0a375bb7008adc297a5ece1bb2df53d17bef26bb6f800", 0x7f, 0x2}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0xc7ffffff]}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'veth0_to_batadv\x00', 'ip6gretap0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x338) 14:48:30 executing program 2: clone(0x80910b00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) set_mempolicy(0x3, &(0x7f0000000040), 0x0) gettid() r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x2, 0x3, 0x2d8, 0x190, 0x190, 0x95ffffff, 0x77, 0x93ffffff, 0x240, 0x240, 0x221, 0x240, 0x240, 0x3, 0x0, {[{{@uncond, 0x0, 0x130, 0x190, 0x0, {0x0, 0xe8}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "bdc74c01369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa6ecab6b1d2cc05e3182f64694d7d05fb8b8c8f56627a54f905d564eeeb8334f650ca0f3c44f7fda4d20a55050342ea85ecc8838e7088de33582f36a0a375bb7008adc297a5ece1bb2df53d17bef26bb6f800", 0x7f}}]}, @common=@SET={0x60}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'veth0_to_batadv\x00', 'ip6gretap0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x338) 14:48:31 executing program 4: r0 = socket$inet6(0xa, 0x400000000001, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) ftruncate(r1, 0x2007fff) close(r0) open(&(0x7f00000002c0)='./bus\x00', 0x14d842, 0x0) sendfile(r0, r1, 0x0, 0x201000) (fail_nth: 85) 14:48:31 executing program 2: clone(0x80910b00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) set_mempolicy(0x3, &(0x7f0000000040), 0x0) gettid() r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x2, 0x3, 0x2d8, 0x190, 0x190, 0x95ffffff, 0x77, 0x93ffffff, 0x240, 0x240, 0x221, 0x240, 0x240, 0x3, 0x0, {[{{@uncond, 0x0, 0x130, 0x190, 0x0, {0x0, 0xea}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "bdc74c01369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa6ecab6b1d2cc05e3182f64694d7d05fb8b8c8f56627a54f905d564eeeb8334f650ca0f3c44f7fda4d20a55050342ea85ecc8838e7088de33582f36a0a375bb7008adc297a5ece1bb2df53d17bef26bb6f800", 0x7f}}]}, @common=@SET={0x60}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'veth0_to_batadv\x00', 'ip6gretap0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x338) [ 2840.809049][ T1844] set_target_v0_checkentry: 43 callbacks suppressed [ 2840.809066][ T1844] Cannot find add_set index 0 as target [ 2840.836216][ T1847] FAULT_INJECTION: forcing a failure. [ 2840.836216][ T1847] name failslab, interval 1, probability 0, space 0, times 0 [ 2840.849101][ T1847] CPU: 0 PID: 1847 Comm: syz-executor.4 Tainted: G W 5.16.0-rc6-syzkaller #0 [ 2840.859206][ T1847] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2840.869270][ T1847] Call Trace: [ 2840.872538][ T1847] [ 2840.875462][ T1847] dump_stack_lvl+0xd6/0x122 [ 2840.880098][ T1847] dump_stack+0x11/0x1b [ 2840.884248][ T1847] should_fail+0x23c/0x250 [ 2840.888721][ T1847] ? xas_create+0x94b/0xb10 [ 2840.893228][ T1847] __should_failslab+0x81/0x90 [ 2840.898138][ T1847] should_failslab+0x5/0x20 [ 2840.902652][ T1847] kmem_cache_alloc+0x4f/0x320 [ 2840.907617][ T1847] ? xas_create+0x3fb/0xb10 [ 2840.912119][ T1847] xas_create+0x94b/0xb10 [ 2840.916455][ T1847] xas_store+0x70/0xca0 [ 2840.920690][ T1847] ? xas_find_conflict+0x422/0x4c0 [ 2840.925800][ T1847] __filemap_add_folio+0x1e8/0x4d0 [ 2840.930912][ T1847] ? workingset_activation+0x2b0/0x2b0 [ 2840.936371][ T1847] filemap_add_folio+0x6b/0x150 [ 2840.941238][ T1847] add_to_page_cache_lru+0x4e/0x70 [ 2840.946397][ T1847] page_cache_ra_unbounded+0x274/0x430 [ 2840.951857][ T1847] ondemand_readahead+0x4f8/0x700 [ 2840.956930][ T1847] ? filemap_get_read_batch+0x3e2/0x410 [ 2840.962494][ T1847] page_cache_async_ra+0xed/0x120 [ 2840.967643][ T1847] filemap_read+0x500/0x16d0 [ 2840.972238][ T1847] ? __rcu_read_unlock+0x5c/0x290 [ 2840.977276][ T1847] generic_file_read_iter+0x72/0x2a0 [ 2840.982559][ T1847] ? iov_iter_pipe+0x100/0x150 [ 2840.987320][ T1847] ? ext4_file_read_iter+0x7a/0x1f0 [ 2840.992568][ T1847] generic_file_splice_read+0x24f/0x330 [ 2840.998312][ T1847] ? splice_shrink_spd+0x60/0x60 [ 2841.003246][ T1847] splice_direct_to_actor+0x2aa/0x650 [ 2841.008698][ T1847] ? do_splice_direct+0x190/0x190 [ 2841.014505][ T1847] do_splice_direct+0x106/0x190 [ 2841.019425][ T1847] do_sendfile+0x675/0xc40 [ 2841.023843][ T1847] __x64_sys_sendfile64+0x102/0x140 [ 2841.029110][ T1847] do_syscall_64+0x44/0xd0 [ 2841.033536][ T1847] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2841.039425][ T1847] RIP: 0033:0x7f2d29acae99 [ 2841.043831][ T1847] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2841.063520][ T1847] RSP: 002b:00007f2d28c41168 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 2841.071927][ T1847] RAX: ffffffffffffffda RBX: 00007f2d29bddf60 RCX: 00007f2d29acae99 [ 2841.079893][ T1847] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 2841.087855][ T1847] RBP: 00007f2d28c411d0 R08: 0000000000000000 R09: 0000000000000000 [ 2841.095828][ T1847] R10: 0000000000201000 R11: 0000000000000246 R12: 0000000000000002 [ 2841.103845][ T1847] R13: 00007ffcc1d93fdf R14: 00007f2d28c41300 R15: 0000000000022000 [ 2841.111813][ T1847] 14:48:31 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x1c0000, 0x100) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0, 0x0}, &(0x7f0000000000)=0xc) msgctl$IPC_SET(0x0, 0x1, &(0x7f00000001c0)={{0x3, 0x0, r2}}) (async) r3 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_int(r3, 0x29, 0xd1, &(0x7f0000000000)=0x4, 0x4) (async) setsockopt$inet6_MRT6_ADD_MFC(r3, 0x29, 0xc8, 0x0, 0x4) (async) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r3, 0x29, 0xc9, 0x0, 0x0) (async) r4 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_int(r4, 0x29, 0xd1, &(0x7f0000000000)=0x4, 0x4) (async) setsockopt$inet6_MRT6_ADD_MFC(r4, 0x29, 0xc8, 0x0, 0x4) (async) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r4, 0x29, 0xc9, 0x0, 0x0) sendmmsg$unix(r0, &(0x7f0000000b00)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000001c0)="3772f732125bd6522769a31bad12aa29d735265499830c94ca0c818a746a45181d79334983ff71eda99888224e7467470f276eeb288010f1cd16b357bf74e272afcf28c0e6e7278070dd0cebbfea5f25c2d96841f8b08eea8b13b201cc758cffc58bdeddcc764b4477a54415f1d3db3bff1619a1a9e99c380a7ce5f3ed4cfb4701e11b07a2a814245c3f362d57bc7dd0b1f07678d4ce4cd2179676adc071206b0d234cfa126cccf096bb8a85415231b035febcd3f33241e638ca6e0547561897", 0xc0}, {&(0x7f0000000280)="42ec640ee3f1ee70e2c39a741114dfdb6ab6534452ffb222f9986e89162616bddc09794ce10b0691370738dd8e085b98b84d7b3715098e8f57091458eaaba9c7af7c27373ba9cfd38690f56cc42dbca1bf0dc4ccffed1d1c49480a3a9ae29393cb81f24f3cf91acc986d39564bd8cb646134dc2e2328bdac69271d5ad9b4ab30f4092969c04bf6c925061cb8cec55536fd755a513b63c5362ff14df6c80c627f099b934ca32f1bb155ca658138a875e979c1498e7d1ac707ad2704501429c2ca4e8ceb24396b51da58a0f2b20dfd5317b8b1d44548", 0xd5}], 0x2, &(0x7f0000000980)=[@cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee01}}}, @rights={{0x14, 0x1, 0x1, [r0]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee01}}}, @rights={{0x24, 0x1, 0x1, [r0, 0xffffffffffffffff, 0xffffffffffffffff, r0, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r0, r0]}}, @rights={{0x14, 0x1, 0x1, [r0]}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0xee01}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, r2}}}, @rights={{0x1c, 0x1, 0x1, [r0, r3, r4]}}], 0x148, 0x2002c800}}], 0x1, 0x44004) (async, rerun: 64) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) (async, rerun: 64) openat(r0, &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x40) newfstatat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) lchown(&(0x7f0000000040)='./file0\x00', r5, 0x0) (async) r6 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x2) write$evdev(r6, &(0x7f000004d000)=[{}], 0xfffffe82) 14:48:31 executing program 5: clone(0x80910b00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) set_mempolicy(0x3, &(0x7f0000000040)=0xffffffff80000001, 0x400) gettid() r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, &(0x7f0000000080)=ANY=[@ANYBLOB="7549f8187a2a6e40594b4473692aef0dda6d1a46f2019ed7e86b1d711c76877056283bedab9579d2125c7cad3b1f28c963b3a626ef87b075574ff5612ccc80d8e14883ad2a8e6516a15c410ce005b2e841ebacd55a1365c685244ec3b66b003e7ec96ed005906d578130183c37"]) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x2, 0x3, 0x2d8, 0x190, 0x190, 0x95ffffff, 0x77, 0x93ffffff, 0x240, 0x240, 0x221, 0x240, 0x240, 0x3, 0x0, {[{{@uncond, 0x0, 0x130, 0x190, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "bdc74c01369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa6ecab6b1d2cc05e3182f64694d7d05fb8b8c8f56627a54f905d564eeeb8334f650ca0f3c44f7fda4d20a55050342ea85ecc8838e7088de33582f36a0a375bb7008adc297a5ece1bb2df53d17bef26bb6f800", 0x7f, 0x2}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0xc8010000]}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'veth0_to_batadv\x00', 'ip6gretap0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x338) 14:48:31 executing program 3: r0 = syz_io_uring_setup(0x2de5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000fe8000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) (async) r3 = openat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x80, 0x1) (async) r4 = syz_io_uring_setup(0x5d66, &(0x7f00000002c0), &(0x7f0000ee7000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r5, r6, &(0x7f00000000c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f00000003c0)}, 0x1010001) r7 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r4, 0x10000000) syz_io_uring_submit(r5, r7, &(0x7f0000000340)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd_index}, 0x0) (async) syz_io_uring_submit(r5, r7, &(0x7f0000000000)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r5, r7, &(0x7f0000004040)=@IORING_OP_SYNC_FILE_RANGE, 0x0) (async) syz_io_uring_submit(r5, r6, &(0x7f0000000140)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) (async) syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_CLOSE, 0x0) syz_io_uring_submit(r5, r7, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE, 0x0) (async) bind(0xffffffffffffffff, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) (async) getsockname$packet(0xffffffffffffffff, &(0x7f00000025c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000100)=0x14) (async) r9 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x12c, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0xfc, 0x2, {{}, [@TCA_NETEM_DELAY_DIST={0x45, 0x2, "7d2b1c2d7e6ca128a9bbe2e203b4ebed6de920ef368c1be6e4b441ddd94bd6f70cea6c3c03e9950fbeec369a9bf99b7c20753ccd678fd6dd5dc072a1419b7876d3"}, @TCA_NETEM_ECN={0x8}, @TCA_NETEM_SLOT={0x2c, 0xc, {0x759, 0x7fff, 0x1000, 0x67bf, 0x3}}, @TCA_NETEM_LATENCY64={0xc, 0xa, 0x2}, @TCA_NETEM_DELAY_DIST={0x44, 0x2, "e8d3252fd15001026ede6b9425341d1864d90de6424d24104db908874fa42a71a7b3fe2c9999b68845c67be19d7cadbea6c3a19a7c146349660bfd8664ad8faf"}, @TCA_NETEM_RATE={0x14, 0x6, {0x10001, 0x0, 0x52e, 0x6}}]}}}]}, 0x12c}}, 0x0) setsockopt$packet_add_memb(r9, 0x107, 0x1, &(0x7f00000003c0)={0x0, 0x1, 0x6, @broadcast}, 0x10) syz_io_uring_submit(r5, 0x0, &(0x7f00000002c0)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x1, 0x0, 0x0, 0x0, 0x1}, 0x7) (async) sendmsg$FOU_CMD_GET(r3, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)={0x74, 0x0, 0x100, 0x70bd2b, 0x25dfdbff, {}, [@FOU_ATTR_LOCAL_V4={0x8, 0x6, @remote}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @mcast1}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @remote}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x2c}, @FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x3a}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0xc}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @private2={0xfc, 0x2, '\x00', 0x1}}]}, 0x74}, 0x1, 0x0, 0x0, 0x40801}, 0x20040810) (async) io_uring_enter(r0, 0xb2, 0x0, 0x0, 0x0, 0x7401) 14:48:31 executing program 1: r0 = socket$inet6(0xa, 0x400000000001, 0x0) (async) r1 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) ftruncate(r1, 0x2007fff) (async) close(r0) r2 = syz_open_dev$vcsu(&(0x7f0000000000), 0x8f1, 0x200) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000040)={@dev={0xfe, 0x80, '\x00', 0x19}, 0x95, 0x2, 0x1, 0x1, 0xf801, 0x8}, 0x20) (async, rerun: 64) open(&(0x7f00000002c0)='./bus\x00', 0x14d842, 0x0) (rerun: 64) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)=@deltaction={0xb4, 0x31, 0x8, 0x70bd2b, 0x25dfdbfe, {}, [@TCA_ACT_TAB={0x6c, 0x1, [{0xc, 0x9, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xe982}}, {0xc, 0x1f, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}, {0xc, 0x5, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x800}}, {0x10, 0x13, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}, {0x10, 0xc, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}, {0xc, 0x10, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0xc, 0x9, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x401}}]}, @TCA_ACT_TAB={0x34, 0x1, [{0xc, 0x14, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}, {0xc, 0x1a, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xe0e}}, {0xc, 0x1f, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}, {0xc, 0x1a, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x41000}, 0xc0) (async) r3 = accept$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x0, 0x0, @private2}, &(0x7f0000000240)=0x1c) (async) r4 = socket(0x11, 0x800000003, 0x0) bind(r4, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) (async) getsockname$packet(r4, &(0x7f00000025c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000100)=0x14) (async) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x12c, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0xfc, 0x2, {{}, [@TCA_NETEM_DELAY_DIST={0x45, 0x2, "7d2b1c2d7e6ca128a9bbe2e203b4ebed6de920ef368c1be6e4b441ddd94bd6f70cea6c3c03e9950fbeec369a9bf99b7c20753ccd678fd6dd5dc072a1419b7876d3"}, @TCA_NETEM_ECN={0x8}, @TCA_NETEM_SLOT={0x2c, 0xc, {0x759, 0x7fff, 0x1000, 0x67bf, 0x3}}, @TCA_NETEM_LATENCY64={0xc, 0xa, 0x2}, @TCA_NETEM_DELAY_DIST={0x44, 0x2, "e8d3252fd15001026ede6b9425341d1864d90de6424d24104db908874fa42a71a7b3fe2c9999b68845c67be19d7cadbea6c3a19a7c146349660bfd8664ad8faf"}, @TCA_NETEM_RATE={0x14, 0x6, {0x10001, 0x0, 0x52e, 0x6}}]}}}]}, 0x12c}}, 0x0) (async) setsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000300)={{{@in6=@private0, @in=@broadcast, 0x4e23, 0x8, 0x4e23, 0x3, 0xa, 0x90, 0x40, 0x3b, r5, 0xee00}, {0x8, 0x4, 0x3, 0x43, 0x20, 0x401, 0x7, 0xfffffffffffffff7}, {0x9, 0x8000, 0x944}, 0x1, 0x0, 0x1, 0x1, 0x3, 0x2}, {{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x4d6, 0xff}, 0xa, @in=@empty, 0x3505, 0x3, 0x1, 0x0, 0x2, 0x2, 0x1}}, 0xe8) sendfile(r0, r1, 0x0, 0x201000) 14:48:31 executing program 2: clone(0x80910b00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) set_mempolicy(0x3, &(0x7f0000000040), 0x0) gettid() r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x2, 0x3, 0x2d8, 0x190, 0x190, 0x95ffffff, 0x77, 0x93ffffff, 0x240, 0x240, 0x221, 0x240, 0x240, 0x3, 0x0, {[{{@uncond, 0x0, 0x130, 0x190, 0x0, {0x0, 0xf0}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "bdc74c01369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa6ecab6b1d2cc05e3182f64694d7d05fb8b8c8f56627a54f905d564eeeb8334f650ca0f3c44f7fda4d20a55050342ea85ecc8838e7088de33582f36a0a375bb7008adc297a5ece1bb2df53d17bef26bb6f800", 0x7f}}]}, @common=@SET={0x60}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'veth0_to_batadv\x00', 'ip6gretap0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x338) 14:48:31 executing program 4: r0 = socket$inet6(0xa, 0x400000000001, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) ftruncate(r1, 0x2007fff) close(r0) open(&(0x7f00000002c0)='./bus\x00', 0x14d842, 0x0) sendfile(r0, r1, 0x0, 0x201000) (fail_nth: 86) 14:48:31 executing program 1: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) ftruncate(r1, 0x2007fff) close(r0) r2 = syz_open_dev$vcsu(&(0x7f0000000000), 0x8f1, 0x200) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000040)={@dev={0xfe, 0x80, '\x00', 0x19}, 0x95, 0x2, 0x1, 0x1, 0xf801, 0x8}, 0x20) open(&(0x7f00000002c0)='./bus\x00', 0x14d842, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)=@deltaction={0xb4, 0x31, 0x8, 0x70bd2b, 0x25dfdbfe, {}, [@TCA_ACT_TAB={0x6c, 0x1, [{0xc, 0x9, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xe982}}, {0xc, 0x1f, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}, {0xc, 0x5, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x800}}, {0x10, 0x13, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}, {0x10, 0xc, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}, {0xc, 0x10, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0xc, 0x9, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x401}}]}, @TCA_ACT_TAB={0x34, 0x1, [{0xc, 0x14, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}, {0xc, 0x1a, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xe0e}}, {0xc, 0x1f, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}, {0xc, 0x1a, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x41000}, 0xc0) r3 = accept$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x0, 0x0, @private2}, &(0x7f0000000240)=0x1c) r4 = socket(0x11, 0x800000003, 0x0) bind(r4, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r4, &(0x7f00000025c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000100)=0x14) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x12c, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0xfc, 0x2, {{}, [@TCA_NETEM_DELAY_DIST={0x45, 0x2, "7d2b1c2d7e6ca128a9bbe2e203b4ebed6de920ef368c1be6e4b441ddd94bd6f70cea6c3c03e9950fbeec369a9bf99b7c20753ccd678fd6dd5dc072a1419b7876d3"}, @TCA_NETEM_ECN={0x8}, @TCA_NETEM_SLOT={0x2c, 0xc, {0x759, 0x7fff, 0x1000, 0x67bf, 0x3}}, @TCA_NETEM_LATENCY64={0xc, 0xa, 0x2}, @TCA_NETEM_DELAY_DIST={0x44, 0x2, "e8d3252fd15001026ede6b9425341d1864d90de6424d24104db908874fa42a71a7b3fe2c9999b68845c67be19d7cadbea6c3a19a7c146349660bfd8664ad8faf"}, @TCA_NETEM_RATE={0x14, 0x6, {0x10001, 0x0, 0x52e, 0x6}}]}}}]}, 0x12c}}, 0x0) setsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000300)={{{@in6=@private0, @in=@broadcast, 0x4e23, 0x8, 0x4e23, 0x3, 0xa, 0x90, 0x40, 0x3b, r5, 0xee00}, {0x8, 0x4, 0x3, 0x43, 0x20, 0x401, 0x7, 0xfffffffffffffff7}, {0x9, 0x8000, 0x944}, 0x1, 0x0, 0x1, 0x1, 0x3, 0x2}, {{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x4d6, 0xff}, 0xa, @in=@empty, 0x3505, 0x3, 0x1, 0x0, 0x2, 0x2, 0x1}}, 0xe8) sendfile(r0, r1, 0x0, 0x201000) socket$inet6(0xa, 0x400000000001, 0x0) (async) open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) (async) ftruncate(r1, 0x2007fff) (async) close(r0) (async) syz_open_dev$vcsu(&(0x7f0000000000), 0x8f1, 0x200) (async) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000040)={@dev={0xfe, 0x80, '\x00', 0x19}, 0x95, 0x2, 0x1, 0x1, 0xf801, 0x8}, 0x20) (async) open(&(0x7f00000002c0)='./bus\x00', 0x14d842, 0x0) (async) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)=@deltaction={0xb4, 0x31, 0x8, 0x70bd2b, 0x25dfdbfe, {}, [@TCA_ACT_TAB={0x6c, 0x1, [{0xc, 0x9, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xe982}}, {0xc, 0x1f, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}, {0xc, 0x5, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x800}}, {0x10, 0x13, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}, {0x10, 0xc, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}, {0xc, 0x10, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0xc, 0x9, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x401}}]}, @TCA_ACT_TAB={0x34, 0x1, [{0xc, 0x14, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}, {0xc, 0x1a, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xe0e}}, {0xc, 0x1f, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}, {0xc, 0x1a, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x41000}, 0xc0) (async) accept$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x0, 0x0, @private2}, &(0x7f0000000240)=0x1c) (async) socket(0x11, 0x800000003, 0x0) (async) bind(r4, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) (async) getsockname$packet(r4, &(0x7f00000025c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000100)=0x14) (async) socket(0x10, 0x3, 0x0) (async) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x12c, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0xfc, 0x2, {{}, [@TCA_NETEM_DELAY_DIST={0x45, 0x2, "7d2b1c2d7e6ca128a9bbe2e203b4ebed6de920ef368c1be6e4b441ddd94bd6f70cea6c3c03e9950fbeec369a9bf99b7c20753ccd678fd6dd5dc072a1419b7876d3"}, @TCA_NETEM_ECN={0x8}, @TCA_NETEM_SLOT={0x2c, 0xc, {0x759, 0x7fff, 0x1000, 0x67bf, 0x3}}, @TCA_NETEM_LATENCY64={0xc, 0xa, 0x2}, @TCA_NETEM_DELAY_DIST={0x44, 0x2, "e8d3252fd15001026ede6b9425341d1864d90de6424d24104db908874fa42a71a7b3fe2c9999b68845c67be19d7cadbea6c3a19a7c146349660bfd8664ad8faf"}, @TCA_NETEM_RATE={0x14, 0x6, {0x10001, 0x0, 0x52e, 0x6}}]}}}]}, 0x12c}}, 0x0) (async) setsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000300)={{{@in6=@private0, @in=@broadcast, 0x4e23, 0x8, 0x4e23, 0x3, 0xa, 0x90, 0x40, 0x3b, r5, 0xee00}, {0x8, 0x4, 0x3, 0x43, 0x20, 0x401, 0x7, 0xfffffffffffffff7}, {0x9, 0x8000, 0x944}, 0x1, 0x0, 0x1, 0x1, 0x3, 0x2}, {{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x4d6, 0xff}, 0xa, @in=@empty, 0x3505, 0x3, 0x1, 0x0, 0x2, 0x2, 0x1}}, 0xe8) (async) sendfile(r0, r1, 0x0, 0x201000) (async) [ 2841.343831][ T1852] Cannot find add_set index 0 as target [ 2841.356198][ T1861] Cannot find add_set index 0 as target [ 2841.375457][ T1892] FAULT_INJECTION: forcing a failure. [ 2841.375457][ T1892] name failslab, interval 1, probability 0, space 0, times 0 [ 2841.388213][ T1892] CPU: 0 PID: 1892 Comm: syz-executor.4 Tainted: G W 5.16.0-rc6-syzkaller #0 [ 2841.398284][ T1892] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2841.404160][ T1951] Cannot find add_set index 0 as target [ 2841.408391][ T1892] Call Trace: [ 2841.408400][ T1892] [ 2841.408406][ T1892] dump_stack_lvl+0xd6/0x122 [ 2841.408432][ T1892] dump_stack+0x11/0x1b [ 2841.429051][ T1892] should_fail+0x23c/0x250 [ 2841.433495][ T1892] ? xas_create+0x3fb/0xb10 [ 2841.438002][ T1892] __should_failslab+0x81/0x90 [ 2841.442813][ T1892] should_failslab+0x5/0x20 [ 2841.447346][ T1892] kmem_cache_alloc+0x4f/0x320 [ 2841.452192][ T1892] xas_create+0x3fb/0xb10 [ 2841.456548][ T1892] xas_store+0x70/0xca0 [ 2841.460707][ T1892] ? xas_find_conflict+0x422/0x4c0 [ 2841.465828][ T1892] __filemap_add_folio+0x1e8/0x4d0 [ 2841.467222][ T1977] Cannot find add_set index 0 as target [ 2841.471022][ T1892] ? workingset_activation+0x2b0/0x2b0 [ 2841.471048][ T1892] filemap_add_folio+0x6b/0x150 [ 2841.487098][ T1892] add_to_page_cache_lru+0x4e/0x70 [ 2841.492335][ T1892] page_cache_ra_unbounded+0x274/0x430 [ 2841.497834][ T1892] ondemand_readahead+0x4f8/0x700 [ 2841.502952][ T1892] ? filemap_get_read_batch+0x3e2/0x410 [ 2841.508556][ T1892] page_cache_async_ra+0xed/0x120 [ 2841.513585][ T1892] filemap_read+0x500/0x16d0 [ 2841.518226][ T1892] ? __rcu_read_unlock+0x5c/0x290 [ 2841.523344][ T1892] generic_file_read_iter+0x72/0x2a0 [ 2841.526289][ T1980] Cannot find add_set index 0 as target [ 2841.528676][ T1892] ? iov_iter_pipe+0x100/0x150 [ 2841.538960][ T1892] ? ext4_file_read_iter+0x7a/0x1f0 [ 2841.544170][ T1892] generic_file_splice_read+0x24f/0x330 [ 2841.549763][ T1892] ? splice_shrink_spd+0x60/0x60 [ 2841.554704][ T1892] splice_direct_to_actor+0x2aa/0x650 [ 2841.560084][ T1892] ? do_splice_direct+0x190/0x190 [ 2841.565111][ T1892] do_splice_direct+0x106/0x190 [ 2841.570004][ T1892] do_sendfile+0x675/0xc40 [ 2841.574426][ T1892] __x64_sys_sendfile64+0x102/0x140 [ 2841.579802][ T1892] do_syscall_64+0x44/0xd0 [ 2841.584221][ T1892] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2841.588526][ T1983] Cannot find add_set index 0 as target [ 2841.590160][ T1892] RIP: 0033:0x7f2d29acae99 [ 2841.590179][ T1892] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2841.619773][ T1892] RSP: 002b:00007f2d28c41168 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 2841.628191][ T1892] RAX: ffffffffffffffda RBX: 00007f2d29bddf60 RCX: 00007f2d29acae99 [ 2841.636168][ T1892] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 14:48:31 executing program 2: clone(0x80910b00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) set_mempolicy(0x3, &(0x7f0000000040), 0x0) gettid() r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x2, 0x3, 0x2d8, 0x190, 0x190, 0x95ffffff, 0x77, 0x93ffffff, 0x240, 0x240, 0x221, 0x240, 0x240, 0x3, 0x0, {[{{@uncond, 0x0, 0x130, 0x190, 0x0, {0x0, 0xf6}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "bdc74c01369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa6ecab6b1d2cc05e3182f64694d7d05fb8b8c8f56627a54f905d564eeeb8334f650ca0f3c44f7fda4d20a55050342ea85ecc8838e7088de33582f36a0a375bb7008adc297a5ece1bb2df53d17bef26bb6f800", 0x7f}}]}, @common=@SET={0x60}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'veth0_to_batadv\x00', 'ip6gretap0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x338) 14:48:31 executing program 2: clone(0x80910b00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) set_mempolicy(0x3, &(0x7f0000000040), 0x0) gettid() r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x2, 0x3, 0x2d8, 0x190, 0x190, 0x95ffffff, 0x77, 0x93ffffff, 0x240, 0x240, 0x221, 0x240, 0x240, 0x3, 0x0, {[{{@uncond, 0x0, 0x130, 0x190, 0x0, {0x0, 0xfe}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "bdc74c01369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa6ecab6b1d2cc05e3182f64694d7d05fb8b8c8f56627a54f905d564eeeb8334f650ca0f3c44f7fda4d20a55050342ea85ecc8838e7088de33582f36a0a375bb7008adc297a5ece1bb2df53d17bef26bb6f800", 0x7f}}]}, @common=@SET={0x60}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'veth0_to_batadv\x00', 'ip6gretap0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x338) 14:48:31 executing program 2: clone(0x80910b00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) set_mempolicy(0x3, &(0x7f0000000040), 0x0) gettid() r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x2, 0x3, 0x2d8, 0x190, 0x190, 0x95ffffff, 0x77, 0x93ffffff, 0x240, 0x240, 0x221, 0x240, 0x240, 0x3, 0x0, {[{{@uncond, 0x0, 0x130, 0x190, 0x0, {0x0, 0x106}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "bdc74c01369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa6ecab6b1d2cc05e3182f64694d7d05fb8b8c8f56627a54f905d564eeeb8334f650ca0f3c44f7fda4d20a55050342ea85ecc8838e7088de33582f36a0a375bb7008adc297a5ece1bb2df53d17bef26bb6f800", 0x7f}}]}, @common=@SET={0x60}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'veth0_to_batadv\x00', 'ip6gretap0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x338) 14:48:31 executing program 2: clone(0x80910b00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) set_mempolicy(0x3, &(0x7f0000000040), 0x0) gettid() r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x2, 0x3, 0x2d8, 0x190, 0x190, 0x95ffffff, 0x77, 0x93ffffff, 0x240, 0x240, 0x221, 0x240, 0x240, 0x3, 0x0, {[{{@uncond, 0x0, 0x130, 0x190, 0x0, {0x0, 0x10d}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "bdc74c01369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa6ecab6b1d2cc05e3182f64694d7d05fb8b8c8f56627a54f905d564eeeb8334f650ca0f3c44f7fda4d20a55050342ea85ecc8838e7088de33582f36a0a375bb7008adc297a5ece1bb2df53d17bef26bb6f800", 0x7f}}]}, @common=@SET={0x60}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'veth0_to_batadv\x00', 'ip6gretap0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x338) 14:48:31 executing program 2: clone(0x80910b00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) set_mempolicy(0x3, &(0x7f0000000040), 0x0) gettid() r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x2, 0x3, 0x2d8, 0x190, 0x190, 0x95ffffff, 0x77, 0x93ffffff, 0x240, 0x240, 0x221, 0x240, 0x240, 0x3, 0x0, {[{{@uncond, 0x0, 0x130, 0x190, 0x0, {0x0, 0x10e}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "bdc74c01369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa6ecab6b1d2cc05e3182f64694d7d05fb8b8c8f56627a54f905d564eeeb8334f650ca0f3c44f7fda4d20a55050342ea85ecc8838e7088de33582f36a0a375bb7008adc297a5ece1bb2df53d17bef26bb6f800", 0x7f}}]}, @common=@SET={0x60}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'veth0_to_batadv\x00', 'ip6gretap0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x338) [ 2841.642844][ T1986] Cannot find add_set index 0 as target [ 2841.644173][ T1892] RBP: 00007f2d28c411d0 R08: 0000000000000000 R09: 0000000000000000 [ 2841.644188][ T1892] R10: 0000000000201000 R11: 0000000000000246 R12: 0000000000000002 [ 2841.665622][ T1892] R13: 00007ffcc1d93fdf R14: 00007f2d28c41300 R15: 0000000000022000 [ 2841.673703][ T1892] 14:48:32 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x1c0000, 0x100) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0, 0x0}, &(0x7f0000000000)=0xc) msgctl$IPC_SET(0x0, 0x1, &(0x7f00000001c0)={{0x3, 0x0, r2}}) r3 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_int(r3, 0x29, 0xd1, &(0x7f0000000000)=0x4, 0x4) setsockopt$inet6_MRT6_ADD_MFC(r3, 0x29, 0xc8, 0x0, 0x4) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r3, 0x29, 0xc9, 0x0, 0x0) r4 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_int(r4, 0x29, 0xd1, &(0x7f0000000000)=0x4, 0x4) setsockopt$inet6_MRT6_ADD_MFC(r4, 0x29, 0xc8, 0x0, 0x4) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r4, 0x29, 0xc9, 0x0, 0x0) sendmmsg$unix(r0, &(0x7f0000000b00)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000001c0)="3772f732125bd6522769a31bad12aa29d735265499830c94ca0c818a746a45181d79334983ff71eda99888224e7467470f276eeb288010f1cd16b357bf74e272afcf28c0e6e7278070dd0cebbfea5f25c2d96841f8b08eea8b13b201cc758cffc58bdeddcc764b4477a54415f1d3db3bff1619a1a9e99c380a7ce5f3ed4cfb4701e11b07a2a814245c3f362d57bc7dd0b1f07678d4ce4cd2179676adc071206b0d234cfa126cccf096bb8a85415231b035febcd3f33241e638ca6e0547561897", 0xc0}, {&(0x7f0000000280)="42ec640ee3f1ee70e2c39a741114dfdb6ab6534452ffb222f9986e89162616bddc09794ce10b0691370738dd8e085b98b84d7b3715098e8f57091458eaaba9c7af7c27373ba9cfd38690f56cc42dbca1bf0dc4ccffed1d1c49480a3a9ae29393cb81f24f3cf91acc986d39564bd8cb646134dc2e2328bdac69271d5ad9b4ab30f4092969c04bf6c925061cb8cec55536fd755a513b63c5362ff14df6c80c627f099b934ca32f1bb155ca658138a875e979c1498e7d1ac707ad2704501429c2ca4e8ceb24396b51da58a0f2b20dfd5317b8b1d44548", 0xd5}], 0x2, &(0x7f0000000980)=[@cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee01}}}, @rights={{0x14, 0x1, 0x1, [r0]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee01}}}, @rights={{0x24, 0x1, 0x1, [r0, 0xffffffffffffffff, 0xffffffffffffffff, r0, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r0, r0]}}, @rights={{0x14, 0x1, 0x1, [r0]}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0xee01}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, r2}}}, @rights={{0x1c, 0x1, 0x1, [r0, r3, r4]}}], 0x148, 0x2002c800}}], 0x1, 0x44004) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) openat(r0, &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x40) newfstatat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) lchown(&(0x7f0000000040)='./file0\x00', r5, 0x0) r6 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x2) write$evdev(r6, &(0x7f000004d000)=[{}], 0xfffffe82) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x1c0000, 0x100) (async) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) (async) socket$inet_udplite(0x2, 0x2, 0x88) (async) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000000)=0xc) (async) msgctl$IPC_SET(0x0, 0x1, &(0x7f00000001c0)={{0x3, 0x0, r2}}) (async) socket$inet6(0xa, 0x3, 0x3a) (async) setsockopt$inet6_int(r3, 0x29, 0xd1, &(0x7f0000000000)=0x4, 0x4) (async) setsockopt$inet6_MRT6_ADD_MFC(r3, 0x29, 0xc8, 0x0, 0x4) (async) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r3, 0x29, 0xc9, 0x0, 0x0) (async) socket$inet6(0xa, 0x3, 0x3a) (async) setsockopt$inet6_int(r4, 0x29, 0xd1, &(0x7f0000000000)=0x4, 0x4) (async) setsockopt$inet6_MRT6_ADD_MFC(r4, 0x29, 0xc8, 0x0, 0x4) (async) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r4, 0x29, 0xc9, 0x0, 0x0) (async) sendmmsg$unix(r0, &(0x7f0000000b00)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000001c0)="3772f732125bd6522769a31bad12aa29d735265499830c94ca0c818a746a45181d79334983ff71eda99888224e7467470f276eeb288010f1cd16b357bf74e272afcf28c0e6e7278070dd0cebbfea5f25c2d96841f8b08eea8b13b201cc758cffc58bdeddcc764b4477a54415f1d3db3bff1619a1a9e99c380a7ce5f3ed4cfb4701e11b07a2a814245c3f362d57bc7dd0b1f07678d4ce4cd2179676adc071206b0d234cfa126cccf096bb8a85415231b035febcd3f33241e638ca6e0547561897", 0xc0}, {&(0x7f0000000280)="42ec640ee3f1ee70e2c39a741114dfdb6ab6534452ffb222f9986e89162616bddc09794ce10b0691370738dd8e085b98b84d7b3715098e8f57091458eaaba9c7af7c27373ba9cfd38690f56cc42dbca1bf0dc4ccffed1d1c49480a3a9ae29393cb81f24f3cf91acc986d39564bd8cb646134dc2e2328bdac69271d5ad9b4ab30f4092969c04bf6c925061cb8cec55536fd755a513b63c5362ff14df6c80c627f099b934ca32f1bb155ca658138a875e979c1498e7d1ac707ad2704501429c2ca4e8ceb24396b51da58a0f2b20dfd5317b8b1d44548", 0xd5}], 0x2, &(0x7f0000000980)=[@cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee01}}}, @rights={{0x14, 0x1, 0x1, [r0]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee01}}}, @rights={{0x24, 0x1, 0x1, [r0, 0xffffffffffffffff, 0xffffffffffffffff, r0, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r0, r0]}}, @rights={{0x14, 0x1, 0x1, [r0]}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0xee01}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, r2}}}, @rights={{0x1c, 0x1, 0x1, [r0, r3, r4]}}], 0x148, 0x2002c800}}], 0x1, 0x44004) (async) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) (async) openat(r0, &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x40) (async) newfstatat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0) (async) lchown(&(0x7f0000000040)='./file0\x00', r5, 0x0) (async) syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x2) (async) write$evdev(r6, &(0x7f000004d000)=[{}], 0xfffffe82) (async) 14:48:32 executing program 2: clone(0x80910b00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) set_mempolicy(0x3, &(0x7f0000000040), 0x0) gettid() r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x2, 0x3, 0x2d8, 0x190, 0x190, 0x95ffffff, 0x77, 0x93ffffff, 0x240, 0x240, 0x221, 0x240, 0x240, 0x3, 0x0, {[{{@uncond, 0x0, 0x130, 0x190, 0x0, {0x0, 0x110}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "bdc74c01369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa6ecab6b1d2cc05e3182f64694d7d05fb8b8c8f56627a54f905d564eeeb8334f650ca0f3c44f7fda4d20a55050342ea85ecc8838e7088de33582f36a0a375bb7008adc297a5ece1bb2df53d17bef26bb6f800", 0x7f}}]}, @common=@SET={0x60}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'veth0_to_batadv\x00', 'ip6gretap0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x338) 14:48:32 executing program 5: clone(0x80910b00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) set_mempolicy(0x3, &(0x7f0000000040)=0xffffffff80000001, 0x400) gettid() r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, &(0x7f0000000080)=ANY=[@ANYBLOB="7549f8187a2a6e40594b4473692aef0dda6d1a46f2019ed7e86b1d711c76877056283bedab9579d2125c7cad3b1f28c963b3a626ef87b075574ff5612ccc80d8e14883ad2a8e6516a15c410ce005b2e841ebacd55a1365c685244ec3b66b003e7ec96ed005906d578130183c37"]) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x2, 0x3, 0x2d8, 0x190, 0x190, 0x95ffffff, 0x77, 0x93ffffff, 0x240, 0x240, 0x221, 0x240, 0x240, 0x3, 0x0, {[{{@uncond, 0x0, 0x130, 0x190, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "bdc74c01369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa6ecab6b1d2cc05e3182f64694d7d05fb8b8c8f56627a54f905d564eeeb8334f650ca0f3c44f7fda4d20a55050342ea85ecc8838e7088de33582f36a0a375bb7008adc297a5ece1bb2df53d17bef26bb6f800", 0x7f, 0x2}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0xc8020000]}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'veth0_to_batadv\x00', 'ip6gretap0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x338) 14:48:32 executing program 1: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) ftruncate(r1, 0x2007fff) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, &(0x7f0000000080)=ANY=[], 0x2bb98205) ioctl$RTC_RD_TIME(r2, 0x80247009, &(0x7f0000000000)) close(r0) open(&(0x7f00000002c0)='./bus\x00', 0x14d842, 0x0) sendfile(r0, r1, 0x0, 0x201000) 14:48:32 executing program 3: r0 = syz_io_uring_setup(0x2de5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000fe8000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0xb2, 0x0, 0x0, 0x0, 0x7401) r3 = io_uring_setup(0x2096, &(0x7f0000000000)) r4 = syz_io_uring_setup(0x5d66, &(0x7f00000002c0), &(0x7f0000ee7000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380), &(0x7f00000001c0)) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r4, 0x10000000) io_uring_enter(r4, 0x7443, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000fe8000/0x1000)=nil, 0x1000, 0xc, 0x80010, r4, 0x10000000) io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{0x34, 0x0, 0x0, 0x7}, {0x74}, {0x6, 0x0, 0x0, 0x7fff7ffa}]}) socket$nl_xfrm(0x10, 0x3, 0x6) io_uring_register$IORING_UNREGISTER_PERSONALITY(r3, 0x13, 0x20000000, r5) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_SEND={0x1a, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000200)="acddb5aeb75799ce892aeb4c56cb991bf854f26a915b604956f0cc83a83d68e2fcd84f4906c82c4c15ba00ff8ff9f5690fd9bf7e569745206a36731e2dc6e80068abe7a82d1ffa6a4fe8ec5b146c7291aececf64dbeb881bc8ac9c199b4ddbd92293e2956ae31b33d799a039547f44fff5aa9538c76d998954d6818631f4f930b4b1dbfa7b2d2729f9d4ef", 0x8b, 0x44, 0x1, {0x0, r5}}, 0x1382) 14:48:32 executing program 4: r0 = socket$inet6(0xa, 0x400000000001, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) ftruncate(r1, 0x2007fff) close(r0) open(&(0x7f00000002c0)='./bus\x00', 0x14d842, 0x0) sendfile(r0, r1, 0x0, 0x201000) (fail_nth: 87) 14:48:32 executing program 2: clone(0x80910b00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) set_mempolicy(0x3, &(0x7f0000000040), 0x0) gettid() r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x2, 0x3, 0x2d8, 0x190, 0x190, 0x95ffffff, 0x77, 0x93ffffff, 0x240, 0x240, 0x221, 0x240, 0x240, 0x3, 0x0, {[{{@uncond, 0x0, 0x130, 0x190, 0x0, {0x0, 0x118}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "bdc74c01369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa6ecab6b1d2cc05e3182f64694d7d05fb8b8c8f56627a54f905d564eeeb8334f650ca0f3c44f7fda4d20a55050342ea85ecc8838e7088de33582f36a0a375bb7008adc297a5ece1bb2df53d17bef26bb6f800", 0x7f}}]}, @common=@SET={0x60}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'veth0_to_batadv\x00', 'ip6gretap0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x338) [ 2842.346713][ T2009] Cannot find add_set index 0 as target [ 2842.352773][ T2011] FAULT_INJECTION: forcing a failure. [ 2842.352773][ T2011] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2842.366051][ T2011] CPU: 0 PID: 2011 Comm: syz-executor.4 Tainted: G W 5.16.0-rc6-syzkaller #0 [ 2842.376210][ T2011] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2842.386263][ T2011] Call Trace: [ 2842.389656][ T2011] [ 2842.392586][ T2011] dump_stack_lvl+0xd6/0x122 [ 2842.397300][ T2011] dump_stack+0x11/0x1b [ 2842.401463][ T2011] should_fail+0x23c/0x250 [ 2842.405901][ T2011] __alloc_pages+0x102/0x330 [ 2842.409649][ T2187] Cannot find add_set index 0 as target [ 2842.410514][ T2011] alloc_pages+0x382/0x3d0 [ 2842.420541][ T2011] folio_alloc+0x1a/0x20 [ 2842.424864][ T2011] filemap_alloc_folio+0x53/0xf0 [ 2842.429800][ T2011] page_cache_ra_unbounded+0x1c0/0x430 [ 2842.435262][ T2011] ondemand_readahead+0x4f8/0x700 [ 2842.440395][ T2011] ? filemap_get_read_batch+0x3e2/0x410 [ 2842.445960][ T2011] page_cache_async_ra+0xed/0x120 [ 2842.450985][ T2011] filemap_read+0x500/0x16d0 [ 2842.455657][ T2011] ? __rcu_read_unlock+0x5c/0x290 [ 2842.460709][ T2011] generic_file_read_iter+0x72/0x2a0 [ 2842.466022][ T2011] ? iov_iter_pipe+0x100/0x150 [ 2842.470792][ T2011] ? ext4_file_read_iter+0x7a/0x1f0 [ 2842.476089][ T2011] generic_file_splice_read+0x24f/0x330 [ 2842.481703][ T2011] ? splice_shrink_spd+0x60/0x60 [ 2842.486833][ T2011] splice_direct_to_actor+0x2aa/0x650 [ 2842.492234][ T2011] ? do_splice_direct+0x190/0x190 [ 2842.497263][ T2011] do_splice_direct+0x106/0x190 [ 2842.502122][ T2011] do_sendfile+0x675/0xc40 [ 2842.506546][ T2011] __x64_sys_sendfile64+0x102/0x140 [ 2842.512045][ T2011] do_syscall_64+0x44/0xd0 [ 2842.516514][ T2011] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2842.522451][ T2011] RIP: 0033:0x7f2d29acae99 [ 2842.526860][ T2011] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2842.546635][ T2011] RSP: 002b:00007f2d28c41168 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 2842.555043][ T2011] RAX: ffffffffffffffda RBX: 00007f2d29bddf60 RCX: 00007f2d29acae99 [ 2842.563057][ T2011] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 2842.571024][ T2011] RBP: 00007f2d28c411d0 R08: 0000000000000000 R09: 0000000000000000 [ 2842.578990][ T2011] R10: 0000000000201000 R11: 0000000000000246 R12: 0000000000000002 [ 2842.586997][ T2011] R13: 00007ffcc1d93fdf R14: 00007f2d28c41300 R15: 0000000000022000 [ 2842.594968][ T2011] 14:48:32 executing program 3: r0 = syz_io_uring_setup(0x2de5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000fe8000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) (async) io_uring_enter(r0, 0xb2, 0x0, 0x0, 0x0, 0x7401) r3 = io_uring_setup(0x2096, &(0x7f0000000000)) (async) r4 = syz_io_uring_setup(0x5d66, &(0x7f00000002c0), &(0x7f0000ee7000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380), &(0x7f00000001c0)) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r4, 0x10000000) (async) io_uring_enter(r4, 0x7443, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000fe8000/0x1000)=nil, 0x1000, 0xc, 0x80010, r4, 0x10000000) io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{0x34, 0x0, 0x0, 0x7}, {0x74}, {0x6, 0x0, 0x0, 0x7fff7ffa}]}) socket$nl_xfrm(0x10, 0x3, 0x6) (async, rerun: 64) io_uring_register$IORING_UNREGISTER_PERSONALITY(r3, 0x13, 0x20000000, r5) (rerun: 64) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_SEND={0x1a, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000200)="acddb5aeb75799ce892aeb4c56cb991bf854f26a915b604956f0cc83a83d68e2fcd84f4906c82c4c15ba00ff8ff9f5690fd9bf7e569745206a36731e2dc6e80068abe7a82d1ffa6a4fe8ec5b146c7291aececf64dbeb881bc8ac9c199b4ddbd92293e2956ae31b33d799a039547f44fff5aa9538c76d998954d6818631f4f930b4b1dbfa7b2d2729f9d4ef", 0x8b, 0x44, 0x1, {0x0, r5}}, 0x1382) 14:48:32 executing program 2: clone(0x80910b00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) set_mempolicy(0x3, &(0x7f0000000040), 0x0) gettid() r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x2, 0x3, 0x2d8, 0x190, 0x190, 0x95ffffff, 0x77, 0x93ffffff, 0x240, 0x240, 0x221, 0x240, 0x240, 0x3, 0x0, {[{{@uncond, 0x0, 0x130, 0x190, 0x0, {0x0, 0x11a}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "bdc74c01369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa6ecab6b1d2cc05e3182f64694d7d05fb8b8c8f56627a54f905d564eeeb8334f650ca0f3c44f7fda4d20a55050342ea85ecc8838e7088de33582f36a0a375bb7008adc297a5ece1bb2df53d17bef26bb6f800", 0x7f}}]}, @common=@SET={0x60}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'veth0_to_batadv\x00', 'ip6gretap0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x338) 14:48:32 executing program 5: clone(0x80910b00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) set_mempolicy(0x3, &(0x7f0000000040)=0xffffffff80000001, 0x400) gettid() r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, &(0x7f0000000080)=ANY=[@ANYBLOB="7549f8187a2a6e40594b4473692aef0dda6d1a46f2019ed7e86b1d711c76877056283bedab9579d2125c7cad3b1f28c963b3a626ef87b075574ff5612ccc80d8e14883ad2a8e6516a15c410ce005b2e841ebacd55a1365c685244ec3b66b003e7ec96ed005906d578130183c37"]) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x2, 0x3, 0x2d8, 0x190, 0x190, 0x95ffffff, 0x77, 0x93ffffff, 0x240, 0x240, 0x221, 0x240, 0x240, 0x3, 0x0, {[{{@uncond, 0x0, 0x130, 0x190, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "bdc74c01369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa6ecab6b1d2cc05e3182f64694d7d05fb8b8c8f56627a54f905d564eeeb8334f650ca0f3c44f7fda4d20a55050342ea85ecc8838e7088de33582f36a0a375bb7008adc297a5ece1bb2df53d17bef26bb6f800", 0x7f, 0x2}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0xc8ffffff]}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'veth0_to_batadv\x00', 'ip6gretap0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x338) 14:48:32 executing program 2: clone(0x80910b00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) set_mempolicy(0x3, &(0x7f0000000040), 0x0) gettid() r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x2, 0x3, 0x2d8, 0x190, 0x190, 0x95ffffff, 0x77, 0x93ffffff, 0x240, 0x240, 0x221, 0x240, 0x240, 0x3, 0x0, {[{{@uncond, 0x0, 0x130, 0x190, 0x0, {0x0, 0x121}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "bdc74c01369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa6ecab6b1d2cc05e3182f64694d7d05fb8b8c8f56627a54f905d564eeeb8334f650ca0f3c44f7fda4d20a55050342ea85ecc8838e7088de33582f36a0a375bb7008adc297a5ece1bb2df53d17bef26bb6f800", 0x7f}}]}, @common=@SET={0x60}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'veth0_to_batadv\x00', 'ip6gretap0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x338) 14:48:32 executing program 3: r0 = syz_io_uring_setup(0x2de5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000fe8000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0xb2, 0x0, 0x0, 0x0, 0x7401) r3 = io_uring_setup(0x2096, &(0x7f0000000000)) (async) r4 = syz_io_uring_setup(0x5d66, &(0x7f00000002c0), &(0x7f0000ee7000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380), &(0x7f00000001c0)) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r4, 0x10000000) (async) io_uring_enter(r4, 0x7443, 0x0, 0x0, 0x0, 0x0) (async) mmap$IORING_OFF_SQES(&(0x7f0000fe8000/0x1000)=nil, 0x1000, 0xc, 0x80010, r4, 0x10000000) (async) io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) (async) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{0x34, 0x0, 0x0, 0x7}, {0x74}, {0x6, 0x0, 0x0, 0x7fff7ffa}]}) (async) socket$nl_xfrm(0x10, 0x3, 0x6) (async) io_uring_register$IORING_UNREGISTER_PERSONALITY(r3, 0x13, 0x20000000, r5) (async) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_SEND={0x1a, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000200)="acddb5aeb75799ce892aeb4c56cb991bf854f26a915b604956f0cc83a83d68e2fcd84f4906c82c4c15ba00ff8ff9f5690fd9bf7e569745206a36731e2dc6e80068abe7a82d1ffa6a4fe8ec5b146c7291aececf64dbeb881bc8ac9c199b4ddbd92293e2956ae31b33d799a039547f44fff5aa9538c76d998954d6818631f4f930b4b1dbfa7b2d2729f9d4ef", 0x8b, 0x44, 0x1, {0x0, r5}}, 0x1382) 14:48:33 executing program 2: clone(0x80910b00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) set_mempolicy(0x3, &(0x7f0000000040), 0x0) gettid() r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x2, 0x3, 0x2d8, 0x190, 0x190, 0x95ffffff, 0x77, 0x93ffffff, 0x240, 0x240, 0x221, 0x240, 0x240, 0x3, 0x0, {[{{@uncond, 0x0, 0x130, 0x190, 0x0, {0x0, 0x130}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "bdc74c01369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa6ecab6b1d2cc05e3182f64694d7d05fb8b8c8f56627a54f905d564eeeb8334f650ca0f3c44f7fda4d20a55050342ea85ecc8838e7088de33582f36a0a375bb7008adc297a5ece1bb2df53d17bef26bb6f800", 0x7f}}]}, @common=@SET={0x60}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'veth0_to_batadv\x00', 'ip6gretap0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x338) 14:48:33 executing program 5: clone(0x80910b00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) set_mempolicy(0x3, &(0x7f0000000040)=0xffffffff80000001, 0x400) gettid() r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, &(0x7f0000000080)=ANY=[@ANYBLOB="7549f8187a2a6e40594b4473692aef0dda6d1a46f2019ed7e86b1d711c76877056283bedab9579d2125c7cad3b1f28c963b3a626ef87b075574ff5612ccc80d8e14883ad2a8e6516a15c410ce005b2e841ebacd55a1365c685244ec3b66b003e7ec96ed005906d578130183c37"]) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x2, 0x3, 0x2d8, 0x190, 0x190, 0x95ffffff, 0x77, 0x93ffffff, 0x240, 0x240, 0x221, 0x240, 0x240, 0x3, 0x0, {[{{@uncond, 0x0, 0x130, 0x190, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "bdc74c01369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa6ecab6b1d2cc05e3182f64694d7d05fb8b8c8f56627a54f905d564eeeb8334f650ca0f3c44f7fda4d20a55050342ea85ecc8838e7088de33582f36a0a375bb7008adc297a5ece1bb2df53d17bef26bb6f800", 0x7f, 0x2}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0xc9010000]}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'veth0_to_batadv\x00', 'ip6gretap0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x338) 14:48:33 executing program 3: r0 = syz_io_uring_setup(0x2de6, &(0x7f0000000000)={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000fe6000/0x1000)=nil, &(0x7f0000fe8000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0xb2, 0x0, 0x0, 0x0, 0x0) 14:48:33 executing program 4: r0 = socket$inet6(0xa, 0x400000000001, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) ftruncate(r1, 0x2007fff) close(r0) open(&(0x7f00000002c0)='./bus\x00', 0x14d842, 0x0) sendfile(r0, r1, 0x0, 0x201000) (fail_nth: 88) 14:48:33 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x2201, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x2) write$evdev(r1, &(0x7f000004d000)=[{}], 0xfffffe82) r2 = syz_io_uring_setup(0x5d66, &(0x7f00000002c0), &(0x7f0000ee7000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f00000000c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f00000003c0)}, 0x1010001) r5 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r2, 0x10000000) syz_io_uring_submit(r3, r5, &(0x7f0000000340)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r3, r5, &(0x7f0000000000)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r3, r5, &(0x7f0000004040)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000140)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_CLOSE, 0x0) syz_io_uring_submit(r3, r5, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE, 0x0) syz_io_uring_submit(0x0, r5, &(0x7f0000000040)=@IORING_OP_MADVISE={0x19, 0x3, 0x0, 0x0, 0x0, &(0x7f0000189000/0x2000)=nil, 0x2000, 0x15}, 0x7) 14:48:33 executing program 1: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) ftruncate(r1, 0x2007fff) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, &(0x7f0000000080)=ANY=[], 0x2bb98205) (async, rerun: 32) ioctl$RTC_RD_TIME(r2, 0x80247009, &(0x7f0000000000)) (async, rerun: 32) close(r0) (async) open(&(0x7f00000002c0)='./bus\x00', 0x14d842, 0x0) (async) sendfile(r0, r1, 0x0, 0x201000) [ 2843.352546][ T3036] FAULT_INJECTION: forcing a failure. [ 2843.352546][ T3036] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2843.365918][ T3036] CPU: 0 PID: 3036 Comm: syz-executor.4 Tainted: G W 5.16.0-rc6-syzkaller #0 [ 2843.375990][ T3036] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2843.386052][ T3036] Call Trace: [ 2843.389378][ T3036] [ 2843.392649][ T3036] dump_stack_lvl+0xd6/0x122 [ 2843.397325][ T3036] dump_stack+0x11/0x1b [ 2843.401482][ T3036] should_fail+0x23c/0x250 [ 2843.405906][ T3036] __alloc_pages+0x102/0x330 [ 2843.410547][ T3036] alloc_pages+0x382/0x3d0 [ 2843.415065][ T3036] folio_alloc+0x1a/0x20 [ 2843.419308][ T3036] filemap_alloc_folio+0x53/0xf0 [ 2843.424248][ T3036] page_cache_ra_unbounded+0x1c0/0x430 [ 2843.429925][ T3036] ondemand_readahead+0x4f8/0x700 [ 2843.434985][ T3036] ? filemap_get_read_batch+0x3e2/0x410 [ 2843.440606][ T3036] page_cache_async_ra+0xed/0x120 [ 2843.445637][ T3036] filemap_read+0x500/0x16d0 [ 2843.450242][ T3036] ? __rcu_read_unlock+0x5c/0x290 [ 2843.455420][ T3036] generic_file_read_iter+0x72/0x2a0 [ 2843.460844][ T3036] ? iov_iter_pipe+0x100/0x150 [ 2843.465678][ T3036] ? ext4_file_read_iter+0x7a/0x1f0 [ 2843.470947][ T3036] generic_file_splice_read+0x24f/0x330 [ 2843.476503][ T3036] ? splice_shrink_spd+0x60/0x60 [ 2843.481452][ T3036] splice_direct_to_actor+0x2aa/0x650 [ 2843.486874][ T3036] ? do_splice_direct+0x190/0x190 [ 2843.491988][ T3036] do_splice_direct+0x106/0x190 [ 2843.497217][ T3036] do_sendfile+0x675/0xc40 [ 2843.501897][ T3036] __x64_sys_sendfile64+0x102/0x140 [ 2843.507169][ T3036] do_syscall_64+0x44/0xd0 [ 2843.511634][ T3036] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2843.517530][ T3036] RIP: 0033:0x7f2d29acae99 [ 2843.521943][ T3036] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2843.541700][ T3036] RSP: 002b:00007f2d28c41168 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 14:48:33 executing program 2: clone(0x80910b00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) set_mempolicy(0x3, &(0x7f0000000040), 0x0) gettid() r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x2, 0x3, 0x2d8, 0x190, 0x190, 0x95ffffff, 0x77, 0x93ffffff, 0x240, 0x240, 0x221, 0x240, 0x240, 0x3, 0x0, {[{{@uncond, 0x0, 0x130, 0x190, 0x0, {0x0, 0x132}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "bdc74c01369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa6ecab6b1d2cc05e3182f64694d7d05fb8b8c8f56627a54f905d564eeeb8334f650ca0f3c44f7fda4d20a55050342ea85ecc8838e7088de33582f36a0a375bb7008adc297a5ece1bb2df53d17bef26bb6f800", 0x7f}}]}, @common=@SET={0x60}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'veth0_to_batadv\x00', 'ip6gretap0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x338) 14:48:33 executing program 3: r0 = syz_io_uring_setup(0x2de6, &(0x7f0000000000)={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000fe6000/0x1000)=nil, &(0x7f0000fe8000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) (async) io_uring_enter(r0, 0xb2, 0x0, 0x0, 0x0, 0x0) 14:48:33 executing program 1: r0 = socket$inet6(0xa, 0x400000000001, 0x0) (async) r1 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) ftruncate(r1, 0x2007fff) (async) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, &(0x7f0000000080)=ANY=[], 0x2bb98205) (async) ioctl$RTC_RD_TIME(r2, 0x80247009, &(0x7f0000000000)) (async) close(r0) open(&(0x7f00000002c0)='./bus\x00', 0x14d842, 0x0) sendfile(r0, r1, 0x0, 0x201000) 14:48:33 executing program 2: clone(0x80910b00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) set_mempolicy(0x3, &(0x7f0000000040), 0x0) gettid() r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x2, 0x3, 0x2d8, 0x190, 0x190, 0x95ffffff, 0x77, 0x93ffffff, 0x240, 0x240, 0x221, 0x240, 0x240, 0x3, 0x0, {[{{@uncond, 0x0, 0x130, 0x190, 0x0, {0x0, 0x133}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "bdc74c01369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa6ecab6b1d2cc05e3182f64694d7d05fb8b8c8f56627a54f905d564eeeb8334f650ca0f3c44f7fda4d20a55050342ea85ecc8838e7088de33582f36a0a375bb7008adc297a5ece1bb2df53d17bef26bb6f800", 0x7f}}]}, @common=@SET={0x60}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'veth0_to_batadv\x00', 'ip6gretap0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x338) 14:48:33 executing program 2: clone(0x80910b00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) set_mempolicy(0x3, &(0x7f0000000040), 0x0) gettid() r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x2, 0x3, 0x2d8, 0x190, 0x190, 0x95ffffff, 0x77, 0x93ffffff, 0x240, 0x240, 0x221, 0x240, 0x240, 0x3, 0x0, {[{{@uncond, 0x0, 0x130, 0x190, 0x0, {0x0, 0x139}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "bdc74c01369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa6ecab6b1d2cc05e3182f64694d7d05fb8b8c8f56627a54f905d564eeeb8334f650ca0f3c44f7fda4d20a55050342ea85ecc8838e7088de33582f36a0a375bb7008adc297a5ece1bb2df53d17bef26bb6f800", 0x7f}}]}, @common=@SET={0x60}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'veth0_to_batadv\x00', 'ip6gretap0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x338) 14:48:33 executing program 3: r0 = syz_io_uring_setup(0x2de6, &(0x7f0000000000)={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000fe6000/0x1000)=nil, &(0x7f0000fe8000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) (async) io_uring_enter(r0, 0xb2, 0x0, 0x0, 0x0, 0x0) 14:48:33 executing program 2: clone(0x80910b00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) set_mempolicy(0x3, &(0x7f0000000040), 0x0) gettid() r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x2, 0x3, 0x2d8, 0x190, 0x190, 0x95ffffff, 0x77, 0x93ffffff, 0x240, 0x240, 0x221, 0x240, 0x240, 0x3, 0x0, {[{{@uncond, 0x0, 0x130, 0x190, 0x0, {0x0, 0x140}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "bdc74c01369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa6ecab6b1d2cc05e3182f64694d7d05fb8b8c8f56627a54f905d564eeeb8334f650ca0f3c44f7fda4d20a55050342ea85ecc8838e7088de33582f36a0a375bb7008adc297a5ece1bb2df53d17bef26bb6f800", 0x7f}}]}, @common=@SET={0x60}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'veth0_to_batadv\x00', 'ip6gretap0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x338) 14:48:33 executing program 5: clone(0x80910b00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) set_mempolicy(0x3, &(0x7f0000000040)=0xffffffff80000001, 0x400) gettid() r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, &(0x7f0000000080)=ANY=[@ANYBLOB="7549f8187a2a6e40594b4473692aef0dda6d1a46f2019ed7e86b1d711c76877056283bedab9579d2125c7cad3b1f28c963b3a626ef87b075574ff5612ccc80d8e14883ad2a8e6516a15c410ce005b2e841ebacd55a1365c685244ec3b66b003e7ec96ed005906d578130183c37"]) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x2, 0x3, 0x2d8, 0x190, 0x190, 0x95ffffff, 0x77, 0x93ffffff, 0x240, 0x240, 0x221, 0x240, 0x240, 0x3, 0x0, {[{{@uncond, 0x0, 0x130, 0x190, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "bdc74c01369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa6ecab6b1d2cc05e3182f64694d7d05fb8b8c8f56627a54f905d564eeeb8334f650ca0f3c44f7fda4d20a55050342ea85ecc8838e7088de33582f36a0a375bb7008adc297a5ece1bb2df53d17bef26bb6f800", 0x7f, 0x2}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0xcaffffff]}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'veth0_to_batadv\x00', 'ip6gretap0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x338) 14:48:33 executing program 2: clone(0x80910b00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) set_mempolicy(0x3, &(0x7f0000000040), 0x0) gettid() r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x2, 0x3, 0x2d8, 0x190, 0x190, 0x95ffffff, 0x77, 0x93ffffff, 0x240, 0x240, 0x221, 0x240, 0x240, 0x3, 0x0, {[{{@uncond, 0x0, 0x130, 0x190, 0x0, {0x0, 0x141}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "bdc74c01369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa6ecab6b1d2cc05e3182f64694d7d05fb8b8c8f56627a54f905d564eeeb8334f650ca0f3c44f7fda4d20a55050342ea85ecc8838e7088de33582f36a0a375bb7008adc297a5ece1bb2df53d17bef26bb6f800", 0x7f}}]}, @common=@SET={0x60}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'veth0_to_batadv\x00', 'ip6gretap0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x338) [ 2843.550150][ T3036] RAX: ffffffffffffffda RBX: 00007f2d29bddf60 RCX: 00007f2d29acae99 [ 2843.558132][ T3036] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 2843.566202][ T3036] RBP: 00007f2d28c411d0 R08: 0000000000000000 R09: 0000000000000000 [ 2843.574173][ T3036] R10: 0000000000201000 R11: 0000000000000246 R12: 0000000000000002 [ 2843.582149][ T3036] R13: 00007ffcc1d93fdf R14: 00007f2d28c41300 R15: 0000000000022000 [ 2843.590166][ T3036] 14:48:33 executing program 4: r0 = socket$inet6(0xa, 0x400000000001, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) ftruncate(r1, 0x2007fff) close(r0) open(&(0x7f00000002c0)='./bus\x00', 0x14d842, 0x0) sendfile(r0, r1, 0x0, 0x201000) (fail_nth: 89) [ 2843.791079][ T3279] FAULT_INJECTION: forcing a failure. [ 2843.791079][ T3279] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2843.804522][ T3279] CPU: 0 PID: 3279 Comm: syz-executor.4 Tainted: G W 5.16.0-rc6-syzkaller #0 [ 2843.814606][ T3279] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2843.824743][ T3279] Call Trace: [ 2843.828015][ T3279] [ 2843.830936][ T3279] dump_stack_lvl+0xd6/0x122 [ 2843.835522][ T3279] dump_stack+0x11/0x1b [ 2843.839673][ T3279] should_fail+0x23c/0x250 [ 2843.844109][ T3279] __alloc_pages+0x102/0x330 [ 2843.848705][ T3279] alloc_pages+0x382/0x3d0 [ 2843.853113][ T3279] folio_alloc+0x1a/0x20 [ 2843.857350][ T3279] filemap_alloc_folio+0x53/0xf0 [ 2843.862318][ T3279] page_cache_ra_unbounded+0x1c0/0x430 [ 2843.867801][ T3279] ondemand_readahead+0x4f8/0x700 [ 2843.872873][ T3279] ? filemap_get_read_batch+0x3e2/0x410 [ 2843.878429][ T3279] page_cache_async_ra+0xed/0x120 [ 2843.883452][ T3279] filemap_read+0x500/0x16d0 [ 2843.888109][ T3279] ? __rcu_read_unlock+0x5c/0x290 [ 2843.893174][ T3279] generic_file_read_iter+0x72/0x2a0 [ 2843.898458][ T3279] ? iov_iter_pipe+0x100/0x150 [ 2843.903250][ T3279] ? ext4_file_read_iter+0x7a/0x1f0 [ 2843.908552][ T3279] generic_file_splice_read+0x24f/0x330 [ 2843.914151][ T3279] ? splice_shrink_spd+0x60/0x60 [ 2843.919092][ T3279] splice_direct_to_actor+0x2aa/0x650 [ 2843.924505][ T3279] ? do_splice_direct+0x190/0x190 [ 2843.929645][ T3279] do_splice_direct+0x106/0x190 [ 2843.934497][ T3279] do_sendfile+0x675/0xc40 [ 2843.938912][ T3279] __x64_sys_sendfile64+0x102/0x140 [ 2843.944109][ T3279] do_syscall_64+0x44/0xd0 [ 2843.948538][ T3279] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2843.954431][ T3279] RIP: 0033:0x7f2d29acae99 [ 2843.958840][ T3279] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2843.978525][ T3279] RSP: 002b:00007f2d28c41168 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 2843.986977][ T3279] RAX: ffffffffffffffda RBX: 00007f2d29bddf60 RCX: 00007f2d29acae99 [ 2843.995380][ T3279] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 2844.003353][ T3279] RBP: 00007f2d28c411d0 R08: 0000000000000000 R09: 0000000000000000 [ 2844.011322][ T3279] R10: 0000000000201000 R11: 0000000000000246 R12: 0000000000000002 [ 2844.019541][ T3279] R13: 00007ffcc1d93fdf R14: 00007f2d28c41300 R15: 0000000000022000 [ 2844.027586][ T3279] 14:48:34 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x2201, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) (async, rerun: 32) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x2) (rerun: 32) write$evdev(r1, &(0x7f000004d000)=[{}], 0xfffffe82) (async) r2 = syz_io_uring_setup(0x5d66, &(0x7f00000002c0), &(0x7f0000ee7000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f00000000c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f00000003c0)}, 0x1010001) (async) r5 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r2, 0x10000000) syz_io_uring_submit(r3, r5, &(0x7f0000000340)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd_index}, 0x0) (async, rerun: 64) syz_io_uring_submit(r3, r5, &(0x7f0000000000)=@IORING_OP_SYNC_FILE_RANGE, 0x0) (async, rerun: 64) syz_io_uring_submit(r3, r5, &(0x7f0000004040)=@IORING_OP_SYNC_FILE_RANGE, 0x0) (async) syz_io_uring_submit(r3, r4, &(0x7f0000000140)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) (async) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_CLOSE, 0x0) syz_io_uring_submit(r3, r5, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE, 0x0) syz_io_uring_submit(0x0, r5, &(0x7f0000000040)=@IORING_OP_MADVISE={0x19, 0x3, 0x0, 0x0, 0x0, &(0x7f0000189000/0x2000)=nil, 0x2000, 0x15}, 0x7) 14:48:34 executing program 2: clone(0x80910b00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) set_mempolicy(0x3, &(0x7f0000000040), 0x0) gettid() r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x2, 0x3, 0x2d8, 0x190, 0x190, 0x95ffffff, 0x77, 0x93ffffff, 0x240, 0x240, 0x221, 0x240, 0x240, 0x3, 0x0, {[{{@uncond, 0x0, 0x130, 0x190, 0x0, {0x0, 0x142}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "bdc74c01369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa6ecab6b1d2cc05e3182f64694d7d05fb8b8c8f56627a54f905d564eeeb8334f650ca0f3c44f7fda4d20a55050342ea85ecc8838e7088de33582f36a0a375bb7008adc297a5ece1bb2df53d17bef26bb6f800", 0x7f}}]}, @common=@SET={0x60}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'veth0_to_batadv\x00', 'ip6gretap0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x338) 14:48:34 executing program 5: clone(0x80910b00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) set_mempolicy(0x3, &(0x7f0000000040)=0xffffffff80000001, 0x400) gettid() r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, &(0x7f0000000080)=ANY=[@ANYBLOB="7549f8187a2a6e40594b4473692aef0dda6d1a46f2019ed7e86b1d711c76877056283bedab9579d2125c7cad3b1f28c963b3a626ef87b075574ff5612ccc80d8e14883ad2a8e6516a15c410ce005b2e841ebacd55a1365c685244ec3b66b003e7ec96ed005906d578130183c37"]) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x2, 0x3, 0x2d8, 0x190, 0x190, 0x95ffffff, 0x77, 0x93ffffff, 0x240, 0x240, 0x221, 0x240, 0x240, 0x3, 0x0, {[{{@uncond, 0x0, 0x130, 0x190, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "bdc74c01369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa6ecab6b1d2cc05e3182f64694d7d05fb8b8c8f56627a54f905d564eeeb8334f650ca0f3c44f7fda4d20a55050342ea85ecc8838e7088de33582f36a0a375bb7008adc297a5ece1bb2df53d17bef26bb6f800", 0x7f, 0x2}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0xcbffffff]}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'veth0_to_batadv\x00', 'ip6gretap0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x338) 14:48:34 executing program 3: execveat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', &(0x7f0000000280)=[&(0x7f0000000100)='\x00', &(0x7f0000000180)='\x00', &(0x7f0000000200)='\x00', &(0x7f0000000240)='8\x00'], &(0x7f0000000300)=[&(0x7f00000002c0)='\x00'], 0x1000) r0 = syz_io_uring_setup(0x2de5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000fe8000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x1, 0x0, 0x0, 0x0, 0x13}, 0x0) io_uring_enter(r0, 0xb2, 0x0, 0x0, 0x0, 0x7401) 14:48:34 executing program 4: r0 = socket$inet6(0xa, 0x400000000001, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) ftruncate(r1, 0x2007fff) close(r0) open(&(0x7f00000002c0)='./bus\x00', 0x14d842, 0x0) sendfile(r0, r1, 0x0, 0x201000) (fail_nth: 90) 14:48:34 executing program 1: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) ftruncate(r1, 0x2007fff) close(r0) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000140)={0x20000001}) getsockname$packet(r2, &(0x7f00000025c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000100)=0x14) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x12c, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0xfc, 0x2, {{}, [@TCA_NETEM_DELAY_DIST={0x45, 0x2, "7d2b1c2d7e6ca128a9bbe2e203b4ebed6de920ef368c1be6e4b441ddd94bd6f70cea6c3c03e9950fbeec369a9bf99b7c20753ccd678fd6dd5dc072a1419b7876d3"}, @TCA_NETEM_ECN={0x8}, @TCA_NETEM_SLOT={0x2c, 0xc, {0x759, 0x7fff, 0x1000, 0x67bf, 0x3}}, @TCA_NETEM_LATENCY64={0xc, 0xa, 0x2}, @TCA_NETEM_DELAY_DIST={0x44, 0x2, "e8d3252fd15001026ede6b9425341d1864d90de6424d24104db908874fa42a71a7b3fe2c9999b68845c67be19d7cadbea6c3a19a7c146349660bfd8664ad8faf"}, @TCA_NETEM_RATE={0x14, 0x6, {0x10001, 0x0, 0x52e, 0x6}}]}}}]}, 0x12c}}, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000040)={&(0x7f0000002040)={0x3310, 0x3e, 0x800, 0x70bd25, 0x25dfdbfe, {0x9}, [@nested={0x2058, 0x62, 0x0, 0x1, [@typed={0x8, 0x19, 0x0, 0x0, @u32=0x8}, @typed={0x14, 0x2e, 0x0, 0x0, @ipv6=@empty}, @typed={0x8, 0x61, 0x0, 0x0, @pid}, @generic="e0e068e90b320e981cd817b244854da4128c7062a1988067f3b89a831e236a4f9a7965d8d0227051b1574f5db4437c59d8df49fc9091530548ab7c6861e71e69128b69d62e5d60f9640168316f2f2364bc76d15a33e788b85b1bb57b999f33240112b61753a1da3d253022cecf5225e9d4cb831d3b66360e7cdae32de228688c8ef41a1dfc607d7cb74afb3567407df4640f9e26650613c6889a8df929ea16dfaa99e8ec9102be93f19ece6ea3fe4bd41d753e1f2c0a128467d9ffd4b0b8a2b3d098797cf81293910d8c9860165918ef575f3843ced8d1024caee38d63531b72251691fa57f519d40f9f0b309cdbfec645975f26f3dd5c270c399117045afc2c60dcf8f32f56eb95cd89c2611742d0e95602f8962574cc341995b348e7b0a1c6116a646904c0de60d7fbb05b96af64b389c2360eb38e5375846927c05255a7795384b72dadab4e73741401f0c4725712780e1364dde67b70c8b50ed220769d4831b98c46ea3d1f6e15f5db61096aa3d64d9fd2cdf5fb9b75cc10d65fde04d3b06e4241147fe76593c4dd5ce78b5ec86a76496dc40c69140a46d398d509458a5d30a9551201f58186d614ac51e211217aca3cd65b20cf0aaf759cc5871fd307f107779af3c705d574b0a749dc7a6fc32bc21bd267fbca4cc653233ae47946445e9b957aa866abd12ac7f94a13a38f7b4b45a5d4f6be133d253954b124e76f0692cdae9e544df0ba8c8b1a30fd5a1112a0bd3ea1690f2213b6f27235e90304bdf3469ba9f88e98f5e02b32ab8ba90c4b3134b15539e22f138127c692ea2930467ea2279eb184a6f87c07f987959db696bba98c9d37f22da32d15e7beb0de4f2f37f2e1f81e97ec7f9848e06753586d1ab0d5a11b2edf6aa51226b078fa8474b93e50b278a2f0654c4ccc1b6d8aa25b5eac8fb73fd1a6d3edae3f4146bdcea9c8dbf6df1f9b216c63790caf0408042ca946d3010489f98aaedca18c9046f11536238d81532afcfa0d30e0986a95d944bddbbc8a94d659fe13524e93d42c04e2fc521fdd39cec8794604114f58a225f63aa86d39bce0ae7a7259c454f274fdba6f26e42d9266f87ca72fc407c35423334323080ccecb5e5f7521668befe0b5fcc5e33837ba997ca3b321438ad24c431bf414527ede77d15f9b418f0ec00fdec57f7147c5acac2ffb03232132f62ec528f78b16014e928fe1ce05b598118cef9ae2f698a180cc8ddec371b6d848d6f3ae38853aeb771e926321982dfc284f03f9332c1a390b20efbdca7d0ed70b0fa9e927430087c12b3043dad1b6f3dcbfe04ad4b13146e5ed7df44661c241310b3026bb40e90944fd829ddd2b2e1a81257ea274db005f48eec619f8c3d27ded9ab095eb83c35f4e4926976fd940b6f84999adf42b1efd9e14bdbf92d830aa7b5f8bcd4d729b8ca14637dd848cd7aa2462e7b0536a51c34cbdd63000486e71a6d4861f343962bb88b236032b1dcb898ee2272a244a9aa3ff96d034d425c8af676950792787ff0a9eb663c96a07447d6f4c9287798faacd274523a28a623ad921639f5910c4171cbc6ac06d213d78d257de9eccbac53ab4569c82496d5a20e6956b9e023aa035390b8feea194b5e3ecc24bdab0a27f21e4e406b687444ccad987d25b4e2a67dd6f73ee4f023ff244a0c2353ff067c96b9f3946d229c0e2ca3d89797677067d3ece7dd81a21215b4881f1105a5f5eae22e227dbea0135260b966ed99299534a7c1c8e27586c2b1f744b78720f6ad33c363b013faf72e43cf5ae419aa4f75a84e35ecf45e7aa6ed21976684a0853a84352ba28c3b29a56903cdcb3298e91f7276c554c4548840ca2d4ffb798eabc43c2bbb6e685ad43330bb5361e6826e406e1d42f795994e38723b99cdc6c4c4dcb476439d96730aacd7c579d1f9542cd30e7c966aed5bf95fc4eb72d4e1f1d0e80f5f1a983b4e6689ce5443b277a12e1efc3d1087fb4fbf76bd4e50fc74b6863e573d7f0d28833a2c2d740b6380567cec5f5feff5bb56651c9d35a8be86697dabf722d8a1ca2e9532660243acf885d377b7ecbb931c827a02e757bdcca7914596e9e1fbe9b0bb6dd92d8349057e4bf92e598999900ba3e0b9a622234e571d3c5c56d83873c7de422ea39f77f5a225b36add4c3f867328289439a30d16e21e578a98bcac94b4c392d0c31134b829970c494924c96b8ab608fc685abbd0131cc036cf787b443125e4048df20c29a672dd64006210aff0c1d1c1c74c2ad7fb8151b1024de7343371926bcb7ce34fc673999bf66d4057f1044b437a4277cff0746963781aa15248405c0de6bc05d02d43f5247e2b17a5bb9b81285676ed21d4fa5372c8a66d19e4fe8d01d33834d7917c490eae47e76a736519eaa0655af02cb8de05e6fc225457f58f0b404ad7cee88bfa79fd68fe9f4dd0f0b909e337c196d5418fcb6322156b41295fa4e5c1048687b4ff9a3d72a4e8aac4b9376c4f6dc32956212067c7da0b7418258653caa0641c0fd2da3ddf7758c8024142edab9b49912c3001873fc3e395b426c0ed8b94be498ebf6e75a48a1666e5b8955b3055cdcf8ce72b6747472a3ad96b6d21c199793ca1f4de81415db9c7f8a5fbc2a9834a9d2001277412349ae7f01581122034823af70a0f383aeb82ae287f9d62e367f05bae2dd1221fcc931ab9b447381daa58e983dbda4d7f65b6c081262b26a77f5ed918214039997ff08fdeb1e3b9d8d3b4433ab1801badf2b333370f3d6d05fbac56490d74f1d57ddd7e01f1a01a375454598bdc828d671fb0515543f6b32fb9b0c963f9c9080129edb45acf0d4d95af72b4f44dbcdbeb2d552ac7d69e05e235cb0cb61c2d094aab2812c6e23d32dfdfb43015b571006d83306090b56b2f025119e1c7f705a2df99a5fdfa6843969a94211d08e41cbd2a4c565da8ab8e7eba2335f3d068915a6f55358440133bde50aea1c6fde670c50752eb0ae47f8d906028b6a59908dd1705192c0be69c4573b84ba90df7fd5d56fa955cc38c29c88e390252e9c58fb6abccefbf258eeb90c22b0cfefc94e7429a8daa829c17221f030820c7291043544581b09baad50f2827404df23c3d288360d98a31d25195fe0e91d45515f44d0f775fd16445af027c20bccc7f45f24f6ab559d67218b17c4427da37c8bdcd03f723efaf500c5f3bf00c934cfdb5fde224d0bdccc56edcb145ea7f7a99c627ccf419f5d02be22c9b0ec2ed73a2140b64640473be10420d77578832fc9892460cb1a354c588bf7bd0f032edfadd045bb56ff4321d7a96a6f45b7b68217962acd4474ec2859d7fbd5d914f8330aaeae36aa613ff47f00a3d777f8b3c23d7f7e81e5e389f02c703306ad35830d434b6886336ac8e6dd13e4d3979e11f01ecc54df9848d2aee2b10fa4d175422e74be19934056b35e35694de1436c117e8cc8be3c05e99d1a7d55bf77443d09c816d692dfed495a33b788450d0c1c1ba9adb124d549ca5a5747221e7e2b82e43240f5c1ff3853a52e28f8cc53c655f98ad181d63c3618a81ece13bdcf8b451c233114c89a7417689a67fd1328a62a77bf21615d74e1bce50be5c9420c06b2ece33bdd477b7d8920ca90362e16a0814ce89d9fb1180564972412c2233ad819edc8756146ec88a18b30516ddf372941fecaec4310e24cd712e1fd1c565b441f12adae66db059a0327c27a055464b5373854e3d61071073f0cf276ac6fc6aaa4f5af053edad692ecbcbdf7367b8ab99e5a94ac60cbd8e160646246bcb9680d00475301ee5a96ab6aed9714bc3cc78cbc17758db2c5a3a8e64c07b6796a819f2977fb9bfca72548565ecbcb2c9db8514b4094326f6620b05d9aedf476f1096448a0d53a8d31f9abb973af2380e5bb070e120960dd4ebd6af522a02081e7855fe805c87a9bd04a66dff351489085debfbbc72896c219fedfcd327154144d05ab1a2e57e2e533e6abef5588280ae3a2edf0cf31349a211872f387370eeb2656d8ac4d14dcfdc4a8c45a01ff469ddae77c56bc6a545132865ec79c803116619f37f276cea54c21333057b3de38ebe86ab9ec16bc4a11e3aa463a612a809dcf0551e40f7375248c56b24e7aedf69684e43f2ed4bf38299ea5f0c7381448eef38b8de77d0765f11b22d824823b0cb12cff20c3835fea2cbc9f0a9793466f0f9215dc84f022243ce86f05e8dacc075a50e27a52ebb47a197e8c08d2468b3cff324beed45983df9bf69a8a79447800d84989a87538bea28e6dc9427d6756613225b730493c86c77a708e131d53570a6e622bf27067929138d7d63404fa70a60708ca1cc984ddff28a106483900eaf99a215a22c6c4dc0906ba7cb105469cab47880e24d1221026f59a5a6b1721b030db3eedabd1371f96b23afbc16d78d013036d652c9979ee7f1deba79dc661037e453f07c9afb1982f02c003f0156398a87af7ef1ca5cf5199928c61346704f260afb370879eccac12263d91ba4a738db01ad15cfe2df749207f1527477bf8898228251ccd8bb26a4b76d468f9ea067f58630c701e337131c5c53156a232590d4cc473474c14d8d4f834aef0ae11db51797620fb867002f1f355f01079c58f3ec2b789ece9486905e3aa74d7faeedc8a34ba415789f0c83aadfd2418342f157b139dfab17448beca388c1d197560250ad075f00254696b028f395d1f2c92d0c69c44c059155c5eb74d66485264e226f461eba485a2c29cfe6a3b00663625b5691c91038f1d36db83ed75b2054f8eb8423118619dd5b19ab2bb66fda0dab4bec06099e12d21f4c20fb0981bca74d038b617cc4aea22f706937d63e96bf2459e8ba38b1ce4dfebd703ecbbaafe54bb9f13dd87058b1cd5b2a8aad6cf01ecbb4ab92b8a014eb2ba974b9b530674eee3fc29a0e3c75d0f445a57b66caa04bfacc93e6b40cdc55d35efbb42a9707891035cdaaa1bcac52c5b874ef8858b603f29ffd2e7fd5b60295a2f3b1a91fbe0d8b1dad72db54317d4674fcff7ffcc4cfc7d2ae93b61b9621a0c4fb366699c2fb0c776848ba5b3d635646ae30721fc2201502c2c6421576a54401ee61c0dc566f1731e0cc6cf8fae2e6ee03e524400d3cca85b26cdaa744cfbda813e8dd80542e49d7b169b424933d95abda3fd5d03c623a3e5c3b19443530e3d432cea923d31a5d52465c86963fef7a5d2c138529e630475ba325039266cb1e6d4109a38e09a7038e14ad32b9a40b602fbfef986151616766bcfee1b74b15d54f5485be4d1906e658b5dbc98ef2ee72ca8166987faa33b50e67a6ee0ea900cc0dc8a5a76709a1a234571b8622fe96b2d86894dce0aa4df95f5bc8a5e8b5163f8089a75361645abb2b6afecb85a598d20a44fbb30b9425cd03b5cff53d210a286d19b46cb67c63602fd824c47d2d8958c3e157897c03f610ad5c248ffedffeb0e386317b612ab34dda1a5a2851cddda5731113c0c1d3f2b80b1e0c44fbb79f79873c4e9c61bfbc2a8328fe00e02fe3cc4142f3cb2f13971f9198eb496f3bd7c9825f62f1a77792648adb638a19697bd793fd26548b269c4759bc0a989c3785a555c202881a502462a6a1b1ef4bec82f4de53f4c9a9f16bf26a2fedbd6bbb7769185e973ab8b65a4cfb89ce74fb84a62f706b0af5984ac442c25ecf69ec61122aa3c59af85516e737306fe46b9ca0d8813545aed44e262dfb8afe8fcd5470ed542307245f8cd5f5f7ea9d24490e9a82615a1b27144370301f56be139ee060c14246c3fa3c1a4a82558fadc40c6b0e254fdde8807f1d02772ff4168c3190d2f0d854780bee80f5243bd", @typed={0x8, 0x71, 0x0, 0x0, @pid}, @generic="924ca337edf6f00558", @generic="668fe047686bc3", @generic="78ed916ef09a701c0b8b777a99d8e1a101e77ea534676c28", @generic="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"]}, @typed={0x8, 0x7b, 0x0, 0x0, @ipv4=@rand_addr=0x64010102}, @generic="a294184f3b2f46f183e4697b458ebd191f442075f5e3a29c44056d0ef2b05045", @nested={0x18, 0x65, 0x0, 0x1, [@typed={0x14, 0x28, 0x0, 0x0, @ipv6=@remote}]}, @nested={0x242, 0x1b, 0x0, 0x1, [@generic="9572adb602b18a6e4b8fdd2f4a8d", @generic="9f5194af0c415c379f364a0f837ec6", @generic="ab7bc3dbe085d279ba3def830f801300d0d1e09b47f5dc383e603f105786e2e92ac438ce2858161906ac41f46acbe18ef57ffcd30fd6bd0e36cb23673dddf20969989574f4459339192a1b55ba37ec9e3f51aa54c783c1d07ec810a9747d6d4d485b62013fca9c0d18bdbbe6751553d6aa21e0e9fe70b1cdbfd40d57328719c84abb623a7e7824e734aa4a9f23c94c5b02e4d7f1b7286e7484c6a4abd852806dbabc55ed08e6c8654c9c1ae76dc0d84280734e7cbcdd204a6a4f76250ea18d5087aa8d4cf9cb018b80cb093feb7b9065", @generic="0f1ac32419dab62bf5977015f52f259b089cef8238051c9c361c2774b81238f8f1c7a4477af2cb91d99a945752430ab837f640ebd044ca63cd7ac19a168bcab21c087a284f7ea1da5828f87eca1c68743bd405a064b5ac08bd35557f06daf53422a52404ec6e2ec31e7f0824f33bdda2e167e42f0cfad5c7c524719a93d008558bd9ae333bb46189d77dc365839d763ccf316c0cac3bf119925f62180057a14b3201ece1608f6deddd5224e1d243411c4a75b80c7c09787534ae46c32c76432f30204321fe28aa94aefa62b81f39b9f799424b64f931b9b9200d0d62b1c4d5146db90e", @typed={0x4, 0x7d}, @typed={0x8, 0x75, 0x0, 0x0, @uid=0xee01}, @generic="4b84d0c405c5220aa1ec52e66ceb5a80728e8baf0df0c7a448c457da1758a7b0b5855756baaa961c626d0c3204931210b24f8f77faee870f2646e8f13b169118142eb35b67e5dc4b6160cbe689695677531749c116f2", @generic="38506eb521e4b41653a80235"]}, @nested={0x1018, 0x45, 0x0, 0x1, [@typed={0xc, 0x1c, 0x0, 0x0, @u64=0x8000}, @typed={0x8, 0x7a, 0x0, 0x0, @ipv4=@remote}, @generic="1283c40da54b0c7a017019424c43c58f70748a1705e70cd16157a833b3d6513f142c2132c642472ce0b312a14f2cc50cb82476b47d3b2844004ee5e700f870e30dbe1d041be2c242622d9e7a5bab0d26d75337551c61a63058fef86f9ba699d1805602e99ab7f5e851344e4704b5a622ea5d4f087353a92edb7a15d12cc6e99d14c1c95ac76b328f0659c40ef969c945b4ad2e8dbd27b4728f1e765e9ad72ef813d93f8d569d540a371f54dde0ffa57cd409f2487371061fd0038fbf199fb2c8ec662584e4c13f944b0fc32c3ff03c8e4328fcbb8873d1be1ad13dc761156e027d4847b5aff4ffc9d5179886719dc45b7f153f04d75f447f4bce4f4b24cd10c1afedb03afba78e53fc0d91d55be09ec9b9e78864725bf7143837c698492638f9b116998f047416d0efe160cd27eeb4f3207b11503fc0180ff10424ac3420351a9891d3a9f0319cb21b7d124a6a9d6eadb33e2b29b056d3dbd4c290b67bb24c5859d83f19b5abce940eab23d941dee8b61cf60e0e65a4306a1dff7b12737bf9d6530ba170079cfd3dddd6dccef0657fe037570d2e54f925ecaf136627c0be3eddb26dbb7776329a3c54abe372d58c6e878a4ba637af329657d1655bbfc8a0ae8453b895104658ad5d6b55d454c4dfc2bc69d8b90cf0d01bc007d99a723a2fb7e0d60780d7d2e11b8273a02994820bac8b64ea547ab94306107b25a710806025d482c5fd303fedf15c937a82abb309aa5c220fb896c464fd05a7135752ec4d1b2ad6f137f71a933fab2b8be0c8ce52b2b99d1e4b9ac33b7094d41d00ba87ca35d4f239822ccb5a3e6d9da31266f342b31951aa3efc9669d5814b720ed780bf1b8131774cd174bdd1d54cee04dcf94041bccde3f04501c27d30ebb6ded6b0921dfce23d29d551add1101e2fa1cb3e3888b1fac9bf1eab30e0fe8cc3bdddc661498d9f545b2810163b871a4d8ec2d2cde51531eac3d7d91d62f33b4d1b7e186f5eefdd8c3441eea51ae78b20ad60756fc299e2a2c10863ef8789d88026001aad7cd67e33338178235f2119cbe894dc03746c8d04943dff8653aba1eafec46bb104bf64a478ab170e4d3e30d002880f26dcfadd740d71a1460cc26023399b4a65d196c248939d5703f949146a40964328db5e53d3adbf6aec51597d685341de3c553001e5d3fb8fc30546ac6ca371584b26b5e9313e598c10d98a3cecef36340404630701e439a325bdd28fdc486ab81e89d468badcbe2c6bd2090d12864d03313af2d26673f4b918936d114b8405c465863e78f38e68966abcc31442dcd5eb73532043cd72b05048e2fb7c9f0e287a350efccbcb7e0c7ee3f11049aa0409741e263eee71047983a8b1709e5e265c5c00257ae6ec9b9ae61e1037e7073220db6e4616a48413c8a4612d645fb54e16669a8eb32d8b61877a9d0f0e3480f2a9521be027da497c0b7099c3a856845cd450da388e0b0bdb27deae651fa38c90cb28beab2fb2728554c94fa377173577fe7b0d223b6f7c54846d73c40022afdd7ac5fa09b166d3aa80a0866fc5f9a6fdd64c8ac7b91b565f8d3e95d4806b537d24d17e1fa97ae7617e477d6c6c04be97a240de602673c098a89ea12a64e5e62e35b7d34960c6a0b1f7526b17fd95eddb54a0b5ebd7111e01373029ac678a12060bd0fa397878fa205ac3d4d7596627a9cf189f8da4ca81c9091926ca2d6e8a768fe896b63f74189cf2ca50b93efe4e86fd4ab5dbf422deb6063c00d89d277d34d7ef7afd08b80fc1ed47b72f2e6788d27159632040df64a2bef9855fb9271d921577b0272d0789b3729eb624295cc342c577373112129d215528d28cfef571027543aec9161b404dcaccf895f13f51ec053beb578ed2747be94450d87cf83d3691abf7e4a06fa2fdcca7cc94decc0b44ba7e396796b6fb11a906f43110aff86b6887514a2b5d9302779c8cd305516ddc8c4bae78fd1d885803c4533fcd8f3e5ae2081274236f075df0ac97ea3fcf267d715e93329c3373601ce3a3c59466e82eba91f5e6ecbce51990fb357058d42e845e57f7af23a9b654ac6a9c5f1346565eddd31c0395a5afba6d2ed6f85a0ab7f42ead726a1ff951d7c85e9c59c651859b892f84a8ae5a95d2701ecf6de9e9ac82f93c75b875fb47785857047a4370445ebee4ac84630e5214f307db81db5935460d4a86acf3f88696325690c66ed360ccb7e39e751f831717a4feda432a5c1cce5f766829b002b6da33e9dc307cf87272c8748102fc12e53c204a71b5383147549c2c39ab122bd12a7869b7dbc95fbfb496d55f6141df32068143ca9d87940cccbc42bfdf563739bbe02501ac7791e138044af6de2b70a3dc225368cb5702063cd5f02a4ee49fc38bca6370980defada0426c67459870def301a25268bf3b63be7b4558af01421c735726d0b6dbac515355dc77a0290b0b349b2ad70964d2def99ebc344376553e58590f593bdd4138edac02f7d231bfab482934759aeeb42cd93c3f1a5cbacc5ccd039acb37f8fbefb853f376ee31701ca13b2c2f5ee16b1a13765d72514fe5d85c2e19d109f066cfc42fa301c6210b947860820fcec5bc595e166cbf9297fd3a1d53a5d6776ba791f4bdda7370e2c0c4a321eb180a9805cbe3cb2c94c2e161b5a336a6aa2bdd56c35ccc4c5367b39cdf44c92e8ee0388ca2842cce067173df00882f54cfc893f997810f6a0cd5fa96840488d9baf2ecc97ee673f0a184b09feb8c20732be4c4943898e8ccd4cbbd869d903397f84f641833671f7cd3fefb948188faf5d36318b7a7cc45cc90840d9544930fe4fad5074988dd9f045574bdb2640ff8ef6aa498a22cc101b03157b27db22f04f0fa980a04beaa4c3f359305a51fc72cccf90a01d7e2e76a31250619a0e5edc9380a230c277f4e0f4aa39998e7c5c80bd88c43a538c9f8e7936007f7fea0468a05112b13a85bfe72a10e20bf72e35dd7fddcd51f4a58e38d9b156ded2dd0aa3b2313c061172a8a313393e86c2a381cfb26665c7bdc6389c878b0f8d03475a8ab11278684129cd0a652f9465f3932129a59f4fcb499595968ca4425f58af6a5860997fa25afc7f6f77894bcd8b170b8ed650937eb5e3b465bf5f29e9795dc0cd7922863150be8d5c42177e6f68fb115faea73c2ae23cdc93c7ede15de2e9a03cbc5935bf82483630f05ace6bb465124b811907267e9828d2896e280e4608e866261bbc1a79fdf01b12bff15f776097d9275890787b7a50017b385cd03e49920697f35b94664955e2cc3e1274935133d139aefe5d05d7bd52b86eacca4a31b61f3e2e1f015833168b41bd7d75d3556f955e340ef6c4c95080169733fe06abb0c914c98ca894c239422a8f7cf3a49fbd344075a0cbb50cf7d7ea721c45988cb74492b8447c896f0dae73bc9ffdda990a4c17c1b17ed54d7cb74a8181a52f4b19395a928b9b80ef770c6275ddb232fa84a4b5d8102a1b6a485d06be8777c9d5592a30670a23db6410672efb7d4ff4c3912b282be05bad967b42218892a82d6d37b4388caab4e50a7fa9843f052f4deb7c9579a8e26548fa693ce1bdba77c404bd9fd73047c3be5d0f67dca1b921fcfedaff98d458055e038c7ce85f6bc9c95073c158bc5ed20bb1ec47deab28061856c94163ce24d70ed30db2bbc48eebd8dc823220e6ff72f583b1bda80faa87f08b314515d877a9342443219e6738a550f645be94f7c4bf32bf7e14736fd79e5ff32e8d98b5799a16c338ec648af10701f37c50c4e2a67343b9fdec82140b9ab1e51d74dd66e297f928fd76d4842c1fe7def1ba9d3a82ebf49534a6c82c9d88d35518891717f480411f1850bdb954a09f3d9e46e5f1de21acc41d5b8645455a1b5ba50b80963eb7ea0400a7f23e8880875f5e423d909431856aa0e071b5ee964b5e86ed438847f45a8a910c4dc68e5ddeb843ed3ee94b4d61c869d0b62d8b458edf8393e07aaefdb762b2beb7068b228fbdcc44222f15b8b3eb6fde8466ced4c4daa0127884d7311ee855b435b0090affc883859a998da72f45040e0d8a304350eb28135b381d6e0b1e664b1bc01df090d8f15760c1e2e1a7244f65e18fb6b005e8df7d173570402982c0e95cc04015d7e1f9b670e449dfe37cb6051a770f845845d4b5ffb34fbc4b011cb65b2eee55dc77f44ba2fc684adb1fa43f3451fa0f6557644ffeac2157a555155b4e0c2a9434941e2d5293b099427a5142d02abcf9405c61debc86cd933e94abf7cda28adde6d2a047c3d512b826e7b27454923c5319919b7613ff1f698f0221eb71f36b0dd15487d17fcf23d8d3d186f3721b88c148536d09b55f1366b7aa25708f4da5551ad7f9b3faea9e7a61d7d9e1ba24467ff610d8e470127ac34f2f2d8167271efc420c9ee89f2349cc4b9e81d9e33adf46f66c6dfd2e8cfed6a18871e5bbc7f1f4480e7b0f4392fbcbcb0a7632ecc4f20aff6bd88a3bb8c740f5339127c55d59701089ba283966078bf215da9f9474d6686ca1236d84a5cb58a2f12f71d99952d850ea77f59cef2635400cbeb4c605b6dee10dcd1a141a959c7f2e3142a67cf74af5bb160947b35b6407236998bb159a7a975311a6e2dc2dd76c8b66c5cdc131befcbcad36c1630a014d3c812e0bd93d4cc2f4477daeb67d1bd1145e96f880a214320b4c28a096db13fec3a8fa180f7c4e62f9edaef9744f64e7ec2234bcc6cc17fed69a42fb8380b03ac4f5bbb5c497b0b0cfe38a5a29a2788e627fdc2032a4dddf446316850444002de01f9f4745bd5a4ad8e9d270e7179446dc9acf907188ae0f4a49ace679ca509f0b693813470d70c3db926b79e290b33e7dc93d4967f771c8bbbffaa951718b2c5512259e84322e5ac09c22bd10a7266447da005f9d8fc620e026cdf7025cea9db6ff3cfc09dcb3b388fdd32daa5d3153a657da84d3f647b7d2552ddbf70c4cb0be8412d25d3d0d33d5382d3ec80384f6c80cc6690b3b725c9109929b2cac01541290813cdd559a04d162acea111f451269e2dc5cea2f09b4c73ffa6a06f1482b855392e8f280177ba65b3ad4d1fe8069041ee6f63293b0d271274032ba1d91ef492f026f79c00c7460b546d9b916bf54d6ccc35e30a27e835107a76f6ce1d96030e6d46e5c95ce7f6aba7705946dc3025fdb8192a2538ebed2ba69a194bfeb65ddd01ceb1932c1016c440efc09e0720ac47bf885b89c2858cd9f9d46186cf28b186f73519fe7ed92a190301d2414b0ba49d6794cad80743ae9a93b55f6dce2c4f621bd3b3ee476329eed554ae5d8fe731f9caaf4ee0e24b23e8831662976184bc9e934af86dee5b3806c80e6a348017051e659702bcd4d86fe0d61934643f5aac167913b3f6398238ffe8e3856755ef273946a2a9fa5b6748cc70f9c10565f51c12ea8e203c9100771d154150fa360765cc7fa0fd03d85c281afa2fe204605a3d29cda0c90bd3b03f4280a1c60817a2d460efcd39138ccc9219776a9d3ca63fbd5f4c89c9b7d6572dadea65ddc88b2edcec7df550070d7d9cb936b1de0b86c96ab49e3811ef0c688ac71a3edf0f9a7d798029ce3a73131a79baf3f827cba1b37007021cd2d695ce84c47e9c6f890fb550ae48fb6066db731f5c82534512432a0c9e92dcefa07db4d14bc1a126d9b23cf6fc5b23ec3dce3b08c3bc3df054677f9dc57aff2026ec1f0549a0223f6dcb49604f722ac9708a791738b05e2583e6456927774eda25a180e1310ba723a7cb84d74d1b73ecb0594884a4de58095411305f1b080740743693f725ff4b9e951a9f5a9aba37cd85b70e"]}, @typed={0x8, 0x8d, 0x0, 0x0, @u32=0x9}]}, 0x3310}, 0x1, 0x0, 0x0, 0x80}, 0x10) open(&(0x7f00000002c0)='./bus\x00', 0x14d842, 0x0) sendfile(r0, r1, 0x0, 0x201000) [ 2844.563797][ T3283] FAULT_INJECTION: forcing a failure. [ 2844.563797][ T3283] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2844.577195][ T3283] CPU: 0 PID: 3283 Comm: syz-executor.4 Tainted: G W 5.16.0-rc6-syzkaller #0 [ 2844.587337][ T3283] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2844.597406][ T3283] Call Trace: [ 2844.600695][ T3283] [ 2844.603619][ T3283] dump_stack_lvl+0xd6/0x122 [ 2844.608264][ T3283] dump_stack+0x11/0x1b 14:48:34 executing program 3: execveat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', &(0x7f0000000280)=[&(0x7f0000000100)='\x00', &(0x7f0000000180)='\x00', &(0x7f0000000200)='\x00', &(0x7f0000000240)='8\x00'], &(0x7f0000000300)=[&(0x7f00000002c0)='\x00'], 0x1000) (async) r0 = syz_io_uring_setup(0x2de5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000fe8000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x1, 0x0, 0x0, 0x0, 0x13}, 0x0) (async) io_uring_enter(r0, 0xb2, 0x0, 0x0, 0x0, 0x7401) 14:48:34 executing program 2: clone(0x80910b00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) set_mempolicy(0x3, &(0x7f0000000040), 0x0) gettid() r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x2, 0x3, 0x2d8, 0x190, 0x190, 0x95ffffff, 0x77, 0x93ffffff, 0x240, 0x240, 0x221, 0x240, 0x240, 0x3, 0x0, {[{{@uncond, 0x0, 0x130, 0x190, 0x0, {0x0, 0x147}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "bdc74c01369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa6ecab6b1d2cc05e3182f64694d7d05fb8b8c8f56627a54f905d564eeeb8334f650ca0f3c44f7fda4d20a55050342ea85ecc8838e7088de33582f36a0a375bb7008adc297a5ece1bb2df53d17bef26bb6f800", 0x7f}}]}, @common=@SET={0x60}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'veth0_to_batadv\x00', 'ip6gretap0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x338) 14:48:34 executing program 5: clone(0x80910b00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) set_mempolicy(0x3, &(0x7f0000000040)=0xffffffff80000001, 0x400) gettid() r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, &(0x7f0000000080)=ANY=[@ANYBLOB="7549f8187a2a6e40594b4473692aef0dda6d1a46f2019ed7e86b1d711c76877056283bedab9579d2125c7cad3b1f28c963b3a626ef87b075574ff5612ccc80d8e14883ad2a8e6516a15c410ce005b2e841ebacd55a1365c685244ec3b66b003e7ec96ed005906d578130183c37"]) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x2, 0x3, 0x2d8, 0x190, 0x190, 0x95ffffff, 0x77, 0x93ffffff, 0x240, 0x240, 0x221, 0x240, 0x240, 0x3, 0x0, {[{{@uncond, 0x0, 0x130, 0x190, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "bdc74c01369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa6ecab6b1d2cc05e3182f64694d7d05fb8b8c8f56627a54f905d564eeeb8334f650ca0f3c44f7fda4d20a55050342ea85ecc8838e7088de33582f36a0a375bb7008adc297a5ece1bb2df53d17bef26bb6f800", 0x7f, 0x2}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0xccffffff]}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'veth0_to_batadv\x00', 'ip6gretap0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x338) 14:48:34 executing program 3: execveat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', &(0x7f0000000280)=[&(0x7f0000000100)='\x00', &(0x7f0000000180)='\x00', &(0x7f0000000200)='\x00', &(0x7f0000000240)='8\x00'], &(0x7f0000000300)=[&(0x7f00000002c0)='\x00'], 0x1000) r0 = syz_io_uring_setup(0x2de5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000fe8000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x1, 0x0, 0x0, 0x0, 0x13}, 0x0) (async) io_uring_enter(r0, 0xb2, 0x0, 0x0, 0x0, 0x7401) [ 2844.612449][ T3283] should_fail+0x23c/0x250 [ 2844.616948][ T3283] __alloc_pages+0x102/0x330 [ 2844.621611][ T3283] alloc_pages+0x382/0x3d0 [ 2844.626024][ T3283] folio_alloc+0x1a/0x20 [ 2844.630269][ T3283] filemap_alloc_folio+0x53/0xf0 [ 2844.635258][ T3283] page_cache_ra_unbounded+0x1c0/0x430 [ 2844.640770][ T3283] ondemand_readahead+0x4f8/0x700 [ 2844.645798][ T3283] ? filemap_get_read_batch+0x3e2/0x410 [ 2844.651444][ T3283] page_cache_async_ra+0xed/0x120 [ 2844.656939][ T3283] filemap_read+0x500/0x16d0 14:48:34 executing program 2: clone(0x80910b00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) set_mempolicy(0x3, &(0x7f0000000040), 0x0) gettid() r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x2, 0x3, 0x2d8, 0x190, 0x190, 0x95ffffff, 0x77, 0x93ffffff, 0x240, 0x240, 0x221, 0x240, 0x240, 0x3, 0x0, {[{{@uncond, 0x0, 0x130, 0x190, 0x0, {0x0, 0x149}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "bdc74c01369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa6ecab6b1d2cc05e3182f64694d7d05fb8b8c8f56627a54f905d564eeeb8334f650ca0f3c44f7fda4d20a55050342ea85ecc8838e7088de33582f36a0a375bb7008adc297a5ece1bb2df53d17bef26bb6f800", 0x7f}}]}, @common=@SET={0x60}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'veth0_to_batadv\x00', 'ip6gretap0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x338) [ 2844.661536][ T3283] ? __perf_event_task_sched_in+0x898/0x8d0 [ 2844.667438][ T3283] generic_file_read_iter+0x72/0x2a0 [ 2844.672732][ T3283] ? iov_iter_pipe+0x100/0x150 [ 2844.677499][ T3283] ? ext4_file_read_iter+0x7a/0x1f0 [ 2844.682756][ T3283] generic_file_splice_read+0x24f/0x330 [ 2844.688318][ T3283] ? splice_shrink_spd+0x60/0x60 [ 2844.693361][ T3283] splice_direct_to_actor+0x2aa/0x650 [ 2844.698744][ T3283] ? do_splice_direct+0x190/0x190 [ 2844.703820][ T3283] do_splice_direct+0x106/0x190 [ 2844.708673][ T3283] do_sendfile+0x675/0xc40 14:48:34 executing program 5: clone(0x80910b00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) set_mempolicy(0x3, &(0x7f0000000040)=0xffffffff80000001, 0x400) gettid() r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, &(0x7f0000000080)=ANY=[@ANYBLOB="7549f8187a2a6e40594b4473692aef0dda6d1a46f2019ed7e86b1d711c76877056283bedab9579d2125c7cad3b1f28c963b3a626ef87b075574ff5612ccc80d8e14883ad2a8e6516a15c410ce005b2e841ebacd55a1365c685244ec3b66b003e7ec96ed005906d578130183c37"]) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x2, 0x3, 0x2d8, 0x190, 0x190, 0x95ffffff, 0x77, 0x93ffffff, 0x240, 0x240, 0x221, 0x240, 0x240, 0x3, 0x0, {[{{@uncond, 0x0, 0x130, 0x190, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "bdc74c01369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa6ecab6b1d2cc05e3182f64694d7d05fb8b8c8f56627a54f905d564eeeb8334f650ca0f3c44f7fda4d20a55050342ea85ecc8838e7088de33582f36a0a375bb7008adc297a5ece1bb2df53d17bef26bb6f800", 0x7f, 0x2}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0xcd000000]}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'veth0_to_batadv\x00', 'ip6gretap0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x338) [ 2844.713097][ T3283] __x64_sys_sendfile64+0x102/0x140 [ 2844.718358][ T3283] do_syscall_64+0x44/0xd0 [ 2844.722856][ T3283] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2844.728750][ T3283] RIP: 0033:0x7f2d29acae99 [ 2844.733160][ T3283] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2844.752838][ T3283] RSP: 002b:00007f2d28c41168 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 14:48:34 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x2201, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x2) write$evdev(r1, &(0x7f000004d000)=[{}], 0xfffffe82) r2 = syz_io_uring_setup(0x5d66, &(0x7f00000002c0), &(0x7f0000ee7000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f00000000c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f00000003c0)}, 0x1010001) r5 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r2, 0x10000000) syz_io_uring_submit(r3, r5, &(0x7f0000000340)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r3, r5, &(0x7f0000000000)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r3, r5, &(0x7f0000004040)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000140)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_CLOSE, 0x0) syz_io_uring_submit(r3, r5, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE, 0x0) syz_io_uring_submit(0x0, r5, &(0x7f0000000040)=@IORING_OP_MADVISE={0x19, 0x3, 0x0, 0x0, 0x0, &(0x7f0000189000/0x2000)=nil, 0x2000, 0x15}, 0x7) openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x2201, 0x0) (async) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) (async) syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x2) (async) write$evdev(r1, &(0x7f000004d000)=[{}], 0xfffffe82) (async) syz_io_uring_setup(0x5d66, &(0x7f00000002c0), &(0x7f0000ee7000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380), &(0x7f00000001c0)) (async) syz_io_uring_submit(r3, r4, &(0x7f00000000c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f00000003c0)}, 0x1010001) (async) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r2, 0x10000000) (async) syz_io_uring_submit(r3, r5, &(0x7f0000000340)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd_index}, 0x0) (async) syz_io_uring_submit(r3, r5, &(0x7f0000000000)=@IORING_OP_SYNC_FILE_RANGE, 0x0) (async) syz_io_uring_submit(r3, r5, &(0x7f0000004040)=@IORING_OP_SYNC_FILE_RANGE, 0x0) (async) syz_io_uring_submit(r3, r4, &(0x7f0000000140)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) (async) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_CLOSE, 0x0) (async) syz_io_uring_submit(r3, r5, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE, 0x0) (async) syz_io_uring_submit(0x0, r5, &(0x7f0000000040)=@IORING_OP_MADVISE={0x19, 0x3, 0x0, 0x0, 0x0, &(0x7f0000189000/0x2000)=nil, 0x2000, 0x15}, 0x7) (async) 14:48:34 executing program 2: clone(0x80910b00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) set_mempolicy(0x3, &(0x7f0000000040), 0x0) gettid() r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x2, 0x3, 0x2d8, 0x190, 0x190, 0x95ffffff, 0x77, 0x93ffffff, 0x240, 0x240, 0x221, 0x240, 0x240, 0x3, 0x0, {[{{@uncond, 0x0, 0x130, 0x190, 0x0, {0x0, 0x156}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "bdc74c01369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa6ecab6b1d2cc05e3182f64694d7d05fb8b8c8f56627a54f905d564eeeb8334f650ca0f3c44f7fda4d20a55050342ea85ecc8838e7088de33582f36a0a375bb7008adc297a5ece1bb2df53d17bef26bb6f800", 0x7f}}]}, @common=@SET={0x60}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'veth0_to_batadv\x00', 'ip6gretap0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x338) 14:48:34 executing program 5: clone(0x80910b00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) set_mempolicy(0x3, &(0x7f0000000040)=0xffffffff80000001, 0x400) gettid() r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, &(0x7f0000000080)=ANY=[@ANYBLOB="7549f8187a2a6e40594b4473692aef0dda6d1a46f2019ed7e86b1d711c76877056283bedab9579d2125c7cad3b1f28c963b3a626ef87b075574ff5612ccc80d8e14883ad2a8e6516a15c410ce005b2e841ebacd55a1365c685244ec3b66b003e7ec96ed005906d578130183c37"]) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x2, 0x3, 0x2d8, 0x190, 0x190, 0x95ffffff, 0x77, 0x93ffffff, 0x240, 0x240, 0x221, 0x240, 0x240, 0x3, 0x0, {[{{@uncond, 0x0, 0x130, 0x190, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "bdc74c01369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa6ecab6b1d2cc05e3182f64694d7d05fb8b8c8f56627a54f905d564eeeb8334f650ca0f3c44f7fda4d20a55050342ea85ecc8838e7088de33582f36a0a375bb7008adc297a5ece1bb2df53d17bef26bb6f800", 0x7f, 0x2}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0xceffffff]}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'veth0_to_batadv\x00', 'ip6gretap0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x338) 14:48:34 executing program 3: r0 = syz_io_uring_setup(0x2de5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000fe8000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x0) r3 = syz_io_uring_setup(0x5d66, &(0x7f00000002c0), &(0x7f0000ee7000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f00000001c0)) r5 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r3, 0x10000000) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r5, &(0x7f0000000080)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x4, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1, {0x0, r6}}, 0x10001) io_uring_enter(r3, 0x7443, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000003000/0x3000)=nil, 0x3000, 0x200000a, 0x100010, r3, 0x10000000) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000100)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x1, {0x0, r7}}, 0xfffffff8) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0xb2, 0x0, 0x0, 0x0, 0x7401) [ 2844.761259][ T3283] RAX: ffffffffffffffda RBX: 00007f2d29bddf60 RCX: 00007f2d29acae99 [ 2844.769236][ T3283] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 2844.777214][ T3283] RBP: 00007f2d28c411d0 R08: 0000000000000000 R09: 0000000000000000 [ 2844.785315][ T3283] R10: 0000000000201000 R11: 0000000000000246 R12: 0000000000000002 [ 2844.793266][ T3283] R13: 00007ffcc1d93fdf R14: 00007f2d28c41300 R15: 0000000000022000 [ 2844.801356][ T3283] 14:48:35 executing program 4: r0 = socket$inet6(0xa, 0x400000000001, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) ftruncate(r1, 0x2007fff) close(r0) open(&(0x7f00000002c0)='./bus\x00', 0x14d842, 0x0) sendfile(r0, r1, 0x0, 0x201000) (fail_nth: 91) 14:48:35 executing program 1: r0 = socket$inet6(0xa, 0x400000000001, 0x0) (async) r1 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) ftruncate(r1, 0x2007fff) (async) close(r0) (async) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) (async) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000140)={0x20000001}) getsockname$packet(r2, &(0x7f00000025c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000100)=0x14) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x12c, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0xfc, 0x2, {{}, [@TCA_NETEM_DELAY_DIST={0x45, 0x2, "7d2b1c2d7e6ca128a9bbe2e203b4ebed6de920ef368c1be6e4b441ddd94bd6f70cea6c3c03e9950fbeec369a9bf99b7c20753ccd678fd6dd5dc072a1419b7876d3"}, @TCA_NETEM_ECN={0x8}, @TCA_NETEM_SLOT={0x2c, 0xc, {0x759, 0x7fff, 0x1000, 0x67bf, 0x3}}, @TCA_NETEM_LATENCY64={0xc, 0xa, 0x2}, @TCA_NETEM_DELAY_DIST={0x44, 0x2, "e8d3252fd15001026ede6b9425341d1864d90de6424d24104db908874fa42a71a7b3fe2c9999b68845c67be19d7cadbea6c3a19a7c146349660bfd8664ad8faf"}, @TCA_NETEM_RATE={0x14, 0x6, {0x10001, 0x0, 0x52e, 0x6}}]}}}]}, 0x12c}}, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000040)={&(0x7f0000002040)={0x3310, 0x3e, 0x800, 0x70bd25, 0x25dfdbfe, {0x9}, [@nested={0x2058, 0x62, 0x0, 0x1, [@typed={0x8, 0x19, 0x0, 0x0, @u32=0x8}, @typed={0x14, 0x2e, 0x0, 0x0, @ipv6=@empty}, @typed={0x8, 0x61, 0x0, 0x0, @pid}, @generic="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", @typed={0x8, 0x71, 0x0, 0x0, @pid}, @generic="924ca337edf6f00558", @generic="668fe047686bc3", @generic="78ed916ef09a701c0b8b777a99d8e1a101e77ea534676c28", @generic="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"]}, @typed={0x8, 0x7b, 0x0, 0x0, @ipv4=@rand_addr=0x64010102}, @generic="a294184f3b2f46f183e4697b458ebd191f442075f5e3a29c44056d0ef2b05045", @nested={0x18, 0x65, 0x0, 0x1, [@typed={0x14, 0x28, 0x0, 0x0, @ipv6=@remote}]}, @nested={0x242, 0x1b, 0x0, 0x1, [@generic="9572adb602b18a6e4b8fdd2f4a8d", @generic="9f5194af0c415c379f364a0f837ec6", @generic="ab7bc3dbe085d279ba3def830f801300d0d1e09b47f5dc383e603f105786e2e92ac438ce2858161906ac41f46acbe18ef57ffcd30fd6bd0e36cb23673dddf20969989574f4459339192a1b55ba37ec9e3f51aa54c783c1d07ec810a9747d6d4d485b62013fca9c0d18bdbbe6751553d6aa21e0e9fe70b1cdbfd40d57328719c84abb623a7e7824e734aa4a9f23c94c5b02e4d7f1b7286e7484c6a4abd852806dbabc55ed08e6c8654c9c1ae76dc0d84280734e7cbcdd204a6a4f76250ea18d5087aa8d4cf9cb018b80cb093feb7b9065", @generic="0f1ac32419dab62bf5977015f52f259b089cef8238051c9c361c2774b81238f8f1c7a4477af2cb91d99a945752430ab837f640ebd044ca63cd7ac19a168bcab21c087a284f7ea1da5828f87eca1c68743bd405a064b5ac08bd35557f06daf53422a52404ec6e2ec31e7f0824f33bdda2e167e42f0cfad5c7c524719a93d008558bd9ae333bb46189d77dc365839d763ccf316c0cac3bf119925f62180057a14b3201ece1608f6deddd5224e1d243411c4a75b80c7c09787534ae46c32c76432f30204321fe28aa94aefa62b81f39b9f799424b64f931b9b9200d0d62b1c4d5146db90e", @typed={0x4, 0x7d}, @typed={0x8, 0x75, 0x0, 0x0, @uid=0xee01}, @generic="4b84d0c405c5220aa1ec52e66ceb5a80728e8baf0df0c7a448c457da1758a7b0b5855756baaa961c626d0c3204931210b24f8f77faee870f2646e8f13b169118142eb35b67e5dc4b6160cbe689695677531749c116f2", @generic="38506eb521e4b41653a80235"]}, @nested={0x1018, 0x45, 0x0, 0x1, [@typed={0xc, 0x1c, 0x0, 0x0, @u64=0x8000}, @typed={0x8, 0x7a, 0x0, 0x0, @ipv4=@remote}, @generic="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"]}, @typed={0x8, 0x8d, 0x0, 0x0, @u32=0x9}]}, 0x3310}, 0x1, 0x0, 0x0, 0x80}, 0x10) (async) open(&(0x7f00000002c0)='./bus\x00', 0x14d842, 0x0) (async) sendfile(r0, r1, 0x0, 0x201000) 14:48:35 executing program 3: r0 = syz_io_uring_setup(0x2de5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000fe8000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x0) r3 = syz_io_uring_setup(0x5d66, &(0x7f00000002c0), &(0x7f0000ee7000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f00000001c0)) r5 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r3, 0x10000000) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r5, &(0x7f0000000080)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x4, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1, {0x0, r6}}, 0x10001) io_uring_enter(r3, 0x7443, 0x0, 0x0, 0x0, 0x0) (async) mmap$IORING_OFF_SQES(&(0x7f0000003000/0x3000)=nil, 0x3000, 0x200000a, 0x100010, r3, 0x10000000) (async) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000100)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x1, {0x0, r7}}, 0xfffffff8) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) (async) io_uring_enter(r0, 0xb2, 0x0, 0x0, 0x0, 0x7401) 14:48:35 executing program 5: clone(0x80910b00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) set_mempolicy(0x3, &(0x7f0000000040)=0xffffffff80000001, 0x400) gettid() r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, &(0x7f0000000080)=ANY=[@ANYBLOB="7549f8187a2a6e40594b4473692aef0dda6d1a46f2019ed7e86b1d711c76877056283bedab9579d2125c7cad3b1f28c963b3a626ef87b075574ff5612ccc80d8e14883ad2a8e6516a15c410ce005b2e841ebacd55a1365c685244ec3b66b003e7ec96ed005906d578130183c37"]) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x2, 0x3, 0x2d8, 0x190, 0x190, 0x95ffffff, 0x77, 0x93ffffff, 0x240, 0x240, 0x221, 0x240, 0x240, 0x3, 0x0, {[{{@uncond, 0x0, 0x130, 0x190, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "bdc74c01369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa6ecab6b1d2cc05e3182f64694d7d05fb8b8c8f56627a54f905d564eeeb8334f650ca0f3c44f7fda4d20a55050342ea85ecc8838e7088de33582f36a0a375bb7008adc297a5ece1bb2df53d17bef26bb6f800", 0x7f, 0x2}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0xd1ffffff]}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'veth0_to_batadv\x00', 'ip6gretap0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x338) 14:48:35 executing program 2: clone(0x80910b00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) set_mempolicy(0x3, &(0x7f0000000040), 0x0) gettid() r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x2, 0x3, 0x2d8, 0x190, 0x190, 0x95ffffff, 0x77, 0x93ffffff, 0x240, 0x240, 0x221, 0x240, 0x240, 0x3, 0x0, {[{{@uncond, 0x0, 0x130, 0x190, 0x0, {0x0, 0x158}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "bdc74c01369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa6ecab6b1d2cc05e3182f64694d7d05fb8b8c8f56627a54f905d564eeeb8334f650ca0f3c44f7fda4d20a55050342ea85ecc8838e7088de33582f36a0a375bb7008adc297a5ece1bb2df53d17bef26bb6f800", 0x7f}}]}, @common=@SET={0x60}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'veth0_to_batadv\x00', 'ip6gretap0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x338) 14:48:35 executing program 2: clone(0x80910b00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) set_mempolicy(0x3, &(0x7f0000000040), 0x0) gettid() r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x2, 0x3, 0x2d8, 0x190, 0x190, 0x95ffffff, 0x77, 0x93ffffff, 0x240, 0x240, 0x221, 0x240, 0x240, 0x3, 0x0, {[{{@uncond, 0x0, 0x130, 0x190, 0x0, {0x0, 0x15e}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "bdc74c01369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa6ecab6b1d2cc05e3182f64694d7d05fb8b8c8f56627a54f905d564eeeb8334f650ca0f3c44f7fda4d20a55050342ea85ecc8838e7088de33582f36a0a375bb7008adc297a5ece1bb2df53d17bef26bb6f800", 0x7f}}]}, @common=@SET={0x60}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'veth0_to_batadv\x00', 'ip6gretap0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x338) 14:48:35 executing program 5: clone(0x80910b00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) set_mempolicy(0x3, &(0x7f0000000040)=0xffffffff80000001, 0x400) gettid() r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, &(0x7f0000000080)=ANY=[@ANYBLOB="7549f8187a2a6e40594b4473692aef0dda6d1a46f2019ed7e86b1d711c76877056283bedab9579d2125c7cad3b1f28c963b3a626ef87b075574ff5612ccc80d8e14883ad2a8e6516a15c410ce005b2e841ebacd55a1365c685244ec3b66b003e7ec96ed005906d578130183c37"]) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x2, 0x3, 0x2d8, 0x190, 0x190, 0x95ffffff, 0x77, 0x93ffffff, 0x240, 0x240, 0x221, 0x240, 0x240, 0x3, 0x0, {[{{@uncond, 0x0, 0x130, 0x190, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "bdc74c01369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa6ecab6b1d2cc05e3182f64694d7d05fb8b8c8f56627a54f905d564eeeb8334f650ca0f3c44f7fda4d20a55050342ea85ecc8838e7088de33582f36a0a375bb7008adc297a5ece1bb2df53d17bef26bb6f800", 0x7f, 0x2}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0xd2ffffff]}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'veth0_to_batadv\x00', 'ip6gretap0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x338) 14:48:35 executing program 1: r0 = socket$inet6(0xa, 0x400000000001, 0x0) (async) r1 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) ftruncate(r1, 0x2007fff) (async) close(r0) (async) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) (async) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000140)={0x20000001}) (async) getsockname$packet(r2, &(0x7f00000025c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000100)=0x14) (async) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x12c, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0xfc, 0x2, {{}, [@TCA_NETEM_DELAY_DIST={0x45, 0x2, "7d2b1c2d7e6ca128a9bbe2e203b4ebed6de920ef368c1be6e4b441ddd94bd6f70cea6c3c03e9950fbeec369a9bf99b7c20753ccd678fd6dd5dc072a1419b7876d3"}, @TCA_NETEM_ECN={0x8}, @TCA_NETEM_SLOT={0x2c, 0xc, {0x759, 0x7fff, 0x1000, 0x67bf, 0x3}}, @TCA_NETEM_LATENCY64={0xc, 0xa, 0x2}, @TCA_NETEM_DELAY_DIST={0x44, 0x2, "e8d3252fd15001026ede6b9425341d1864d90de6424d24104db908874fa42a71a7b3fe2c9999b68845c67be19d7cadbea6c3a19a7c146349660bfd8664ad8faf"}, @TCA_NETEM_RATE={0x14, 0x6, {0x10001, 0x0, 0x52e, 0x6}}]}}}]}, 0x12c}}, 0x0) (async) sendmsg$nl_generic(r4, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000040)={&(0x7f0000002040)={0x3310, 0x3e, 0x800, 0x70bd25, 0x25dfdbfe, {0x9}, [@nested={0x2058, 0x62, 0x0, 0x1, [@typed={0x8, 0x19, 0x0, 0x0, @u32=0x8}, @typed={0x14, 0x2e, 0x0, 0x0, @ipv6=@empty}, @typed={0x8, 0x61, 0x0, 0x0, @pid}, @generic="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", @typed={0x8, 0x71, 0x0, 0x0, @pid}, @generic="924ca337edf6f00558", @generic="668fe047686bc3", @generic="78ed916ef09a701c0b8b777a99d8e1a101e77ea534676c28", @generic="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"]}, @typed={0x8, 0x7b, 0x0, 0x0, @ipv4=@rand_addr=0x64010102}, @generic="a294184f3b2f46f183e4697b458ebd191f442075f5e3a29c44056d0ef2b05045", @nested={0x18, 0x65, 0x0, 0x1, [@typed={0x14, 0x28, 0x0, 0x0, @ipv6=@remote}]}, @nested={0x242, 0x1b, 0x0, 0x1, [@generic="9572adb602b18a6e4b8fdd2f4a8d", @generic="9f5194af0c415c379f364a0f837ec6", @generic="ab7bc3dbe085d279ba3def830f801300d0d1e09b47f5dc383e603f105786e2e92ac438ce2858161906ac41f46acbe18ef57ffcd30fd6bd0e36cb23673dddf20969989574f4459339192a1b55ba37ec9e3f51aa54c783c1d07ec810a9747d6d4d485b62013fca9c0d18bdbbe6751553d6aa21e0e9fe70b1cdbfd40d57328719c84abb623a7e7824e734aa4a9f23c94c5b02e4d7f1b7286e7484c6a4abd852806dbabc55ed08e6c8654c9c1ae76dc0d84280734e7cbcdd204a6a4f76250ea18d5087aa8d4cf9cb018b80cb093feb7b9065", @generic="0f1ac32419dab62bf5977015f52f259b089cef8238051c9c361c2774b81238f8f1c7a4477af2cb91d99a945752430ab837f640ebd044ca63cd7ac19a168bcab21c087a284f7ea1da5828f87eca1c68743bd405a064b5ac08bd35557f06daf53422a52404ec6e2ec31e7f0824f33bdda2e167e42f0cfad5c7c524719a93d008558bd9ae333bb46189d77dc365839d763ccf316c0cac3bf119925f62180057a14b3201ece1608f6deddd5224e1d243411c4a75b80c7c09787534ae46c32c76432f30204321fe28aa94aefa62b81f39b9f799424b64f931b9b9200d0d62b1c4d5146db90e", @typed={0x4, 0x7d}, @typed={0x8, 0x75, 0x0, 0x0, @uid=0xee01}, @generic="4b84d0c405c5220aa1ec52e66ceb5a80728e8baf0df0c7a448c457da1758a7b0b5855756baaa961c626d0c3204931210b24f8f77faee870f2646e8f13b169118142eb35b67e5dc4b6160cbe689695677531749c116f2", @generic="38506eb521e4b41653a80235"]}, @nested={0x1018, 0x45, 0x0, 0x1, [@typed={0xc, 0x1c, 0x0, 0x0, @u64=0x8000}, @typed={0x8, 0x7a, 0x0, 0x0, @ipv4=@remote}, @generic="1283c40da54b0c7a017019424c43c58f70748a1705e70cd16157a833b3d6513f142c2132c642472ce0b312a14f2cc50cb82476b47d3b2844004ee5e700f870e30dbe1d041be2c242622d9e7a5bab0d26d75337551c61a63058fef86f9ba699d1805602e99ab7f5e851344e4704b5a622ea5d4f087353a92edb7a15d12cc6e99d14c1c95ac76b328f0659c40ef969c945b4ad2e8dbd27b4728f1e765e9ad72ef813d93f8d569d540a371f54dde0ffa57cd409f2487371061fd0038fbf199fb2c8ec662584e4c13f944b0fc32c3ff03c8e4328fcbb8873d1be1ad13dc761156e027d4847b5aff4ffc9d5179886719dc45b7f153f04d75f447f4bce4f4b24cd10c1afedb03afba78e53fc0d91d55be09ec9b9e78864725bf7143837c698492638f9b116998f047416d0efe160cd27eeb4f3207b11503fc0180ff10424ac3420351a9891d3a9f0319cb21b7d124a6a9d6eadb33e2b29b056d3dbd4c290b67bb24c5859d83f19b5abce940eab23d941dee8b61cf60e0e65a4306a1dff7b12737bf9d6530ba170079cfd3dddd6dccef0657fe037570d2e54f925ecaf136627c0be3eddb26dbb7776329a3c54abe372d58c6e878a4ba637af329657d1655bbfc8a0ae8453b895104658ad5d6b55d454c4dfc2bc69d8b90cf0d01bc007d99a723a2fb7e0d60780d7d2e11b8273a02994820bac8b64ea547ab94306107b25a710806025d482c5fd303fedf15c937a82abb309aa5c220fb896c464fd05a7135752ec4d1b2ad6f137f71a933fab2b8be0c8ce52b2b99d1e4b9ac33b7094d41d00ba87ca35d4f239822ccb5a3e6d9da31266f342b31951aa3efc9669d5814b720ed780bf1b8131774cd174bdd1d54cee04dcf94041bccde3f04501c27d30ebb6ded6b0921dfce23d29d551add1101e2fa1cb3e3888b1fac9bf1eab30e0fe8cc3bdddc661498d9f545b2810163b871a4d8ec2d2cde51531eac3d7d91d62f33b4d1b7e186f5eefdd8c3441eea51ae78b20ad60756fc299e2a2c10863ef8789d88026001aad7cd67e33338178235f2119cbe894dc03746c8d04943dff8653aba1eafec46bb104bf64a478ab170e4d3e30d002880f26dcfadd740d71a1460cc26023399b4a65d196c248939d5703f949146a40964328db5e53d3adbf6aec51597d685341de3c553001e5d3fb8fc30546ac6ca371584b26b5e9313e598c10d98a3cecef36340404630701e439a325bdd28fdc486ab81e89d468badcbe2c6bd2090d12864d03313af2d26673f4b918936d114b8405c465863e78f38e68966abcc31442dcd5eb73532043cd72b05048e2fb7c9f0e287a350efccbcb7e0c7ee3f11049aa0409741e263eee71047983a8b1709e5e265c5c00257ae6ec9b9ae61e1037e7073220db6e4616a48413c8a4612d645fb54e16669a8eb32d8b61877a9d0f0e3480f2a9521be027da497c0b7099c3a856845cd450da388e0b0bdb27deae651fa38c90cb28beab2fb2728554c94fa377173577fe7b0d223b6f7c54846d73c40022afdd7ac5fa09b166d3aa80a0866fc5f9a6fdd64c8ac7b91b565f8d3e95d4806b537d24d17e1fa97ae7617e477d6c6c04be97a240de602673c098a89ea12a64e5e62e35b7d34960c6a0b1f7526b17fd95eddb54a0b5ebd7111e01373029ac678a12060bd0fa397878fa205ac3d4d7596627a9cf189f8da4ca81c9091926ca2d6e8a768fe896b63f74189cf2ca50b93efe4e86fd4ab5dbf422deb6063c00d89d277d34d7ef7afd08b80fc1ed47b72f2e6788d27159632040df64a2bef9855fb9271d921577b0272d0789b3729eb624295cc342c577373112129d215528d28cfef571027543aec9161b404dcaccf895f13f51ec053beb578ed2747be94450d87cf83d3691abf7e4a06fa2fdcca7cc94decc0b44ba7e396796b6fb11a906f43110aff86b6887514a2b5d9302779c8cd305516ddc8c4bae78fd1d885803c4533fcd8f3e5ae2081274236f075df0ac97ea3fcf267d715e93329c3373601ce3a3c59466e82eba91f5e6ecbce51990fb357058d42e845e57f7af23a9b654ac6a9c5f1346565eddd31c0395a5afba6d2ed6f85a0ab7f42ead726a1ff951d7c85e9c59c651859b892f84a8ae5a95d2701ecf6de9e9ac82f93c75b875fb47785857047a4370445ebee4ac84630e5214f307db81db5935460d4a86acf3f88696325690c66ed360ccb7e39e751f831717a4feda432a5c1cce5f766829b002b6da33e9dc307cf87272c8748102fc12e53c204a71b5383147549c2c39ab122bd12a7869b7dbc95fbfb496d55f6141df32068143ca9d87940cccbc42bfdf563739bbe02501ac7791e138044af6de2b70a3dc225368cb5702063cd5f02a4ee49fc38bca6370980defada0426c67459870def301a25268bf3b63be7b4558af01421c735726d0b6dbac515355dc77a0290b0b349b2ad70964d2def99ebc344376553e58590f593bdd4138edac02f7d231bfab482934759aeeb42cd93c3f1a5cbacc5ccd039acb37f8fbefb853f376ee31701ca13b2c2f5ee16b1a13765d72514fe5d85c2e19d109f066cfc42fa301c6210b947860820fcec5bc595e166cbf9297fd3a1d53a5d6776ba791f4bdda7370e2c0c4a321eb180a9805cbe3cb2c94c2e161b5a336a6aa2bdd56c35ccc4c5367b39cdf44c92e8ee0388ca2842cce067173df00882f54cfc893f997810f6a0cd5fa96840488d9baf2ecc97ee673f0a184b09feb8c20732be4c4943898e8ccd4cbbd869d903397f84f641833671f7cd3fefb948188faf5d36318b7a7cc45cc90840d9544930fe4fad5074988dd9f045574bdb2640ff8ef6aa498a22cc101b03157b27db22f04f0fa980a04beaa4c3f359305a51fc72cccf90a01d7e2e76a31250619a0e5edc9380a230c277f4e0f4aa39998e7c5c80bd88c43a538c9f8e7936007f7fea0468a05112b13a85bfe72a10e20bf72e35dd7fddcd51f4a58e38d9b156ded2dd0aa3b2313c061172a8a313393e86c2a381cfb26665c7bdc6389c878b0f8d03475a8ab11278684129cd0a652f9465f3932129a59f4fcb499595968ca4425f58af6a5860997fa25afc7f6f77894bcd8b170b8ed650937eb5e3b465bf5f29e9795dc0cd7922863150be8d5c42177e6f68fb115faea73c2ae23cdc93c7ede15de2e9a03cbc5935bf82483630f05ace6bb465124b811907267e9828d2896e280e4608e866261bbc1a79fdf01b12bff15f776097d9275890787b7a50017b385cd03e49920697f35b94664955e2cc3e1274935133d139aefe5d05d7bd52b86eacca4a31b61f3e2e1f015833168b41bd7d75d3556f955e340ef6c4c95080169733fe06abb0c914c98ca894c239422a8f7cf3a49fbd344075a0cbb50cf7d7ea721c45988cb74492b8447c896f0dae73bc9ffdda990a4c17c1b17ed54d7cb74a8181a52f4b19395a928b9b80ef770c6275ddb232fa84a4b5d8102a1b6a485d06be8777c9d5592a30670a23db6410672efb7d4ff4c3912b282be05bad967b42218892a82d6d37b4388caab4e50a7fa9843f052f4deb7c9579a8e26548fa693ce1bdba77c404bd9fd73047c3be5d0f67dca1b921fcfedaff98d458055e038c7ce85f6bc9c95073c158bc5ed20bb1ec47deab28061856c94163ce24d70ed30db2bbc48eebd8dc823220e6ff72f583b1bda80faa87f08b314515d877a9342443219e6738a550f645be94f7c4bf32bf7e14736fd79e5ff32e8d98b5799a16c338ec648af10701f37c50c4e2a67343b9fdec82140b9ab1e51d74dd66e297f928fd76d4842c1fe7def1ba9d3a82ebf49534a6c82c9d88d35518891717f480411f1850bdb954a09f3d9e46e5f1de21acc41d5b8645455a1b5ba50b80963eb7ea0400a7f23e8880875f5e423d909431856aa0e071b5ee964b5e86ed438847f45a8a910c4dc68e5ddeb843ed3ee94b4d61c869d0b62d8b458edf8393e07aaefdb762b2beb7068b228fbdcc44222f15b8b3eb6fde8466ced4c4daa0127884d7311ee855b435b0090affc883859a998da72f45040e0d8a304350eb28135b381d6e0b1e664b1bc01df090d8f15760c1e2e1a7244f65e18fb6b005e8df7d173570402982c0e95cc04015d7e1f9b670e449dfe37cb6051a770f845845d4b5ffb34fbc4b011cb65b2eee55dc77f44ba2fc684adb1fa43f3451fa0f6557644ffeac2157a555155b4e0c2a9434941e2d5293b099427a5142d02abcf9405c61debc86cd933e94abf7cda28adde6d2a047c3d512b826e7b27454923c5319919b7613ff1f698f0221eb71f36b0dd15487d17fcf23d8d3d186f3721b88c148536d09b55f1366b7aa25708f4da5551ad7f9b3faea9e7a61d7d9e1ba24467ff610d8e470127ac34f2f2d8167271efc420c9ee89f2349cc4b9e81d9e33adf46f66c6dfd2e8cfed6a18871e5bbc7f1f4480e7b0f4392fbcbcb0a7632ecc4f20aff6bd88a3bb8c740f5339127c55d59701089ba283966078bf215da9f9474d6686ca1236d84a5cb58a2f12f71d99952d850ea77f59cef2635400cbeb4c605b6dee10dcd1a141a959c7f2e3142a67cf74af5bb160947b35b6407236998bb159a7a975311a6e2dc2dd76c8b66c5cdc131befcbcad36c1630a014d3c812e0bd93d4cc2f4477daeb67d1bd1145e96f880a214320b4c28a096db13fec3a8fa180f7c4e62f9edaef9744f64e7ec2234bcc6cc17fed69a42fb8380b03ac4f5bbb5c497b0b0cfe38a5a29a2788e627fdc2032a4dddf446316850444002de01f9f4745bd5a4ad8e9d270e7179446dc9acf907188ae0f4a49ace679ca509f0b693813470d70c3db926b79e290b33e7dc93d4967f771c8bbbffaa951718b2c5512259e84322e5ac09c22bd10a7266447da005f9d8fc620e026cdf7025cea9db6ff3cfc09dcb3b388fdd32daa5d3153a657da84d3f647b7d2552ddbf70c4cb0be8412d25d3d0d33d5382d3ec80384f6c80cc6690b3b725c9109929b2cac01541290813cdd559a04d162acea111f451269e2dc5cea2f09b4c73ffa6a06f1482b855392e8f280177ba65b3ad4d1fe8069041ee6f63293b0d271274032ba1d91ef492f026f79c00c7460b546d9b916bf54d6ccc35e30a27e835107a76f6ce1d96030e6d46e5c95ce7f6aba7705946dc3025fdb8192a2538ebed2ba69a194bfeb65ddd01ceb1932c1016c440efc09e0720ac47bf885b89c2858cd9f9d46186cf28b186f73519fe7ed92a190301d2414b0ba49d6794cad80743ae9a93b55f6dce2c4f621bd3b3ee476329eed554ae5d8fe731f9caaf4ee0e24b23e8831662976184bc9e934af86dee5b3806c80e6a348017051e659702bcd4d86fe0d61934643f5aac167913b3f6398238ffe8e3856755ef273946a2a9fa5b6748cc70f9c10565f51c12ea8e203c9100771d154150fa360765cc7fa0fd03d85c281afa2fe204605a3d29cda0c90bd3b03f4280a1c60817a2d460efcd39138ccc9219776a9d3ca63fbd5f4c89c9b7d6572dadea65ddc88b2edcec7df550070d7d9cb936b1de0b86c96ab49e3811ef0c688ac71a3edf0f9a7d798029ce3a73131a79baf3f827cba1b37007021cd2d695ce84c47e9c6f890fb550ae48fb6066db731f5c82534512432a0c9e92dcefa07db4d14bc1a126d9b23cf6fc5b23ec3dce3b08c3bc3df054677f9dc57aff2026ec1f0549a0223f6dcb49604f722ac9708a791738b05e2583e6456927774eda25a180e1310ba723a7cb84d74d1b73ecb0594884a4de58095411305f1b080740743693f725ff4b9e951a9f5a9aba37cd85b70e"]}, @typed={0x8, 0x8d, 0x0, 0x0, @u32=0x9}]}, 0x3310}, 0x1, 0x0, 0x0, 0x80}, 0x10) (async) open(&(0x7f00000002c0)='./bus\x00', 0x14d842, 0x0) sendfile(r0, r1, 0x0, 0x201000) [ 2845.035706][ T3574] FAULT_INJECTION: forcing a failure. [ 2845.035706][ T3574] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2845.048987][ T3574] CPU: 0 PID: 3574 Comm: syz-executor.4 Tainted: G W 5.16.0-rc6-syzkaller #0 [ 2845.059126][ T3574] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2845.069170][ T3574] Call Trace: [ 2845.072443][ T3574] [ 2845.075367][ T3574] dump_stack_lvl+0xd6/0x122 [ 2845.079963][ T3574] dump_stack+0x11/0x1b [ 2845.084263][ T3574] should_fail+0x23c/0x250 [ 2845.088759][ T3574] __alloc_pages+0x102/0x330 [ 2845.093871][ T3574] alloc_pages+0x382/0x3d0 [ 2845.098336][ T3574] folio_alloc+0x1a/0x20 [ 2845.102573][ T3574] filemap_alloc_folio+0x53/0xf0 [ 2845.107505][ T3574] page_cache_ra_unbounded+0x1c0/0x430 [ 2845.112970][ T3574] ondemand_readahead+0x4f8/0x700 [ 2845.118005][ T3574] ? filemap_get_read_batch+0x3e2/0x410 [ 2845.123637][ T3574] page_cache_async_ra+0xed/0x120 [ 2845.128665][ T3574] filemap_read+0x500/0x16d0 [ 2845.133251][ T3574] ? __rcu_read_unlock+0x5c/0x290 [ 2845.138279][ T3574] generic_file_read_iter+0x72/0x2a0 [ 2845.143610][ T3574] ? iov_iter_pipe+0x100/0x150 [ 2845.148365][ T3574] ? ext4_file_read_iter+0x7a/0x1f0 [ 2845.153573][ T3574] generic_file_splice_read+0x24f/0x330 [ 2845.159119][ T3574] ? splice_shrink_spd+0x60/0x60 [ 2845.164058][ T3574] splice_direct_to_actor+0x2aa/0x650 [ 2845.169474][ T3574] ? do_splice_direct+0x190/0x190 [ 2845.174501][ T3574] do_splice_direct+0x106/0x190 [ 2845.179353][ T3574] do_sendfile+0x675/0xc40 [ 2845.183807][ T3574] __x64_sys_sendfile64+0x102/0x140 [ 2845.188997][ T3574] do_syscall_64+0x44/0xd0 [ 2845.193408][ T3574] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2845.199466][ T3574] RIP: 0033:0x7f2d29acae99 [ 2845.203884][ T3574] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2845.223756][ T3574] RSP: 002b:00007f2d28c41168 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 2845.232173][ T3574] RAX: ffffffffffffffda RBX: 00007f2d29bddf60 RCX: 00007f2d29acae99 [ 2845.240231][ T3574] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 2845.248194][ T3574] RBP: 00007f2d28c411d0 R08: 0000000000000000 R09: 0000000000000000 [ 2845.256153][ T3574] R10: 0000000000201000 R11: 0000000000000246 R12: 0000000000000002 [ 2845.264174][ T3574] R13: 00007ffcc1d93fdf R14: 00007f2d28c41300 R15: 0000000000022000 [ 2845.272169][ T3574] 14:48:35 executing program 5: clone(0x80910b00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) set_mempolicy(0x3, &(0x7f0000000040)=0xffffffff80000001, 0x400) gettid() r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, &(0x7f0000000080)=ANY=[@ANYBLOB="7549f8187a2a6e40594b4473692aef0dda6d1a46f2019ed7e86b1d711c76877056283bedab9579d2125c7cad3b1f28c963b3a626ef87b075574ff5612ccc80d8e14883ad2a8e6516a15c410ce005b2e841ebacd55a1365c685244ec3b66b003e7ec96ed005906d578130183c37"]) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x2, 0x3, 0x2d8, 0x190, 0x190, 0x95ffffff, 0x77, 0x93ffffff, 0x240, 0x240, 0x221, 0x240, 0x240, 0x3, 0x0, {[{{@uncond, 0x0, 0x130, 0x190, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "bdc74c01369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa6ecab6b1d2cc05e3182f64694d7d05fb8b8c8f56627a54f905d564eeeb8334f650ca0f3c44f7fda4d20a55050342ea85ecc8838e7088de33582f36a0a375bb7008adc297a5ece1bb2df53d17bef26bb6f800", 0x7f, 0x2}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0xd5ffffff]}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'veth0_to_batadv\x00', 'ip6gretap0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x338) 14:48:35 executing program 2: clone(0x80910b00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) set_mempolicy(0x3, &(0x7f0000000040), 0x0) gettid() r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x2, 0x3, 0x2d8, 0x190, 0x190, 0x95ffffff, 0x77, 0x93ffffff, 0x240, 0x240, 0x221, 0x240, 0x240, 0x3, 0x0, {[{{@uncond, 0x0, 0x130, 0x190, 0x0, {0x0, 0x16d}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "bdc74c01369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa6ecab6b1d2cc05e3182f64694d7d05fb8b8c8f56627a54f905d564eeeb8334f650ca0f3c44f7fda4d20a55050342ea85ecc8838e7088de33582f36a0a375bb7008adc297a5ece1bb2df53d17bef26bb6f800", 0x7f}}]}, @common=@SET={0x60}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'veth0_to_batadv\x00', 'ip6gretap0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x338) 14:48:35 executing program 1: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) ftruncate(r1, 0x800000002007ffb) close(r0) open(&(0x7f0000000140)='./bus\x00', 0x4c0ac3, 0x100) sendfile(r0, r1, 0x0, 0x201000) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f00000025c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000100)=0x14) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x5936472f}]}, 0x2c}}, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x4e20, @loopback}, @in6={0xa, 0x4e21, 0xfffffff8, @private0, 0x8947}], 0x2c) 14:48:35 executing program 3: r0 = syz_io_uring_setup(0x2de5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000fe8000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x0) (async) r3 = syz_io_uring_setup(0x5d66, &(0x7f00000002c0), &(0x7f0000ee7000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f00000001c0)) r5 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r3, 0x10000000) (async) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r5, &(0x7f0000000080)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x4, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1, {0x0, r6}}, 0x10001) (async) io_uring_enter(r3, 0x7443, 0x0, 0x0, 0x0, 0x0) (async) mmap$IORING_OFF_SQES(&(0x7f0000003000/0x3000)=nil, 0x3000, 0x200000a, 0x100010, r3, 0x10000000) (async) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000100)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x1, {0x0, r7}}, 0xfffffff8) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) (async) io_uring_enter(r0, 0xb2, 0x0, 0x0, 0x0, 0x7401) 14:48:35 executing program 4: r0 = socket$inet6(0xa, 0x400000000001, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) ftruncate(r1, 0x2007fff) close(r0) open(&(0x7f00000002c0)='./bus\x00', 0x14d842, 0x0) sendfile(r0, r1, 0x0, 0x201000) (fail_nth: 92) 14:48:35 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/self/exe\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x3, 0x3a) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) setsockopt$inet6_int(r2, 0x29, 0xd1, &(0x7f0000000000)=0x4, 0x4) setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xc8, 0x0, 0x4) openat$cgroup_ro(r2, &(0x7f0000000240)='hugetlb.1GB.usage_in_bytes\x00', 0x0, 0x0) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r1, 0x29, 0xc9, 0x0, 0x0) mmap(&(0x7f000013c000/0x2000)=nil, 0x2000, 0x5000005, 0x8010, r1, 0xf7306000) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) r3 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x2) r4 = pidfd_getfd(r0, r3, 0x0) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000100)={'syztnl2\x00', &(0x7f0000000080)={'ip6tnl0\x00', 0x0, 0x4, 0x5, 0x1, 0x4, 0x40, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private0, 0x7800, 0x1, 0x6, 0x1}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r4, 0x89fa, &(0x7f0000000200)={'sit0\x00', &(0x7f0000000140)={'ip6gre0\x00', r5, 0x2f, 0x80, 0x7, 0x7, 0x50, @loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x80, 0x8, 0x9, 0xbc9}}) write$evdev(r3, &(0x7f000004d000)=[{}], 0xfffffe82) 14:48:35 executing program 1: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) ftruncate(r1, 0x800000002007ffb) close(r0) open(&(0x7f0000000140)='./bus\x00', 0x4c0ac3, 0x100) sendfile(r0, r1, 0x0, 0x201000) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f00000025c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000100)=0x14) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x5936472f}]}, 0x2c}}, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x4e20, @loopback}, @in6={0xa, 0x4e21, 0xfffffff8, @private0, 0x8947}], 0x2c) socket$inet6(0xa, 0x400000000001, 0x0) (async) open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) (async) ftruncate(r1, 0x800000002007ffb) (async) close(r0) (async) open(&(0x7f0000000140)='./bus\x00', 0x4c0ac3, 0x100) (async) sendfile(r0, r1, 0x0, 0x201000) (async) socket(0x11, 0x800000003, 0x0) (async) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) (async) getsockname$packet(r2, &(0x7f00000025c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000100)=0x14) (async) socket(0x10, 0x3, 0x0) (async) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x5936472f}]}, 0x2c}}, 0x0) (async) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x4e20, @loopback}, @in6={0xa, 0x4e21, 0xfffffff8, @private0, 0x8947}], 0x2c) (async) [ 2845.833979][ T3684] FAULT_INJECTION: forcing a failure. [ 2845.833979][ T3684] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2845.847305][ T3684] CPU: 0 PID: 3684 Comm: syz-executor.4 Tainted: G W 5.16.0-rc6-syzkaller #0 [ 2845.857371][ T3684] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2845.867471][ T3684] Call Trace: [ 2845.870749][ T3684] [ 2845.873703][ T3684] dump_stack_lvl+0xd6/0x122 [ 2845.878299][ T3684] dump_stack+0x11/0x1b [ 2845.882457][ T3684] should_fail+0x23c/0x250 [ 2845.886892][ T3684] __alloc_pages+0x102/0x330 [ 2845.891500][ T3684] alloc_pages+0x382/0x3d0 [ 2845.895910][ T3684] folio_alloc+0x1a/0x20 [ 2845.900154][ T3684] filemap_alloc_folio+0x53/0xf0 [ 2845.905099][ T3684] page_cache_ra_unbounded+0x1c0/0x430 [ 2845.910567][ T3684] ondemand_readahead+0x4f8/0x700 [ 2845.915604][ T3684] ? filemap_get_read_batch+0x3e2/0x410 [ 2845.921158][ T3684] page_cache_async_ra+0xed/0x120 [ 2845.926203][ T3684] filemap_read+0x500/0x16d0 [ 2845.930844][ T3684] ? __rcu_read_unlock+0x5c/0x290 [ 2845.936073][ T3684] generic_file_read_iter+0x72/0x2a0 [ 2845.941382][ T3684] ? iov_iter_pipe+0x100/0x150 [ 2845.946190][ T3684] ? ext4_file_read_iter+0x7a/0x1f0 [ 2845.951414][ T3684] generic_file_splice_read+0x24f/0x330 [ 2845.956967][ T3684] ? splice_shrink_spd+0x60/0x60 [ 2845.961971][ T3684] splice_direct_to_actor+0x2aa/0x650 [ 2845.967438][ T3684] ? do_splice_direct+0x190/0x190 [ 2845.972518][ T3684] do_splice_direct+0x106/0x190 [ 2845.977383][ T3684] do_sendfile+0x675/0xc40 [ 2845.981816][ T3684] __x64_sys_sendfile64+0x102/0x140 [ 2845.987027][ T3684] do_syscall_64+0x44/0xd0 [ 2845.991443][ T3684] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2845.997347][ T3684] RIP: 0033:0x7f2d29acae99 [ 2846.001776][ T3684] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2846.021386][ T3684] RSP: 002b:00007f2d28c41168 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 14:48:35 executing program 2: clone(0x80910b00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) set_mempolicy(0x3, &(0x7f0000000040), 0x0) gettid() r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x2, 0x3, 0x2d8, 0x190, 0x190, 0x95ffffff, 0x77, 0x93ffffff, 0x240, 0x240, 0x221, 0x240, 0x240, 0x3, 0x0, {[{{@uncond, 0x0, 0x130, 0x190, 0x0, {0x0, 0x17b}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "bdc74c01369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa6ecab6b1d2cc05e3182f64694d7d05fb8b8c8f56627a54f905d564eeeb8334f650ca0f3c44f7fda4d20a55050342ea85ecc8838e7088de33582f36a0a375bb7008adc297a5ece1bb2df53d17bef26bb6f800", 0x7f}}]}, @common=@SET={0x60}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'veth0_to_batadv\x00', 'ip6gretap0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x338) 14:48:35 executing program 3: r0 = syz_io_uring_setup(0x2de5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000fe8000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0xb2, 0x0, 0x0, 0x0, 0x7401) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) getsockname(r3, &(0x7f0000000200)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, &(0x7f0000000080)=0x80) 14:48:35 executing program 2: clone(0x80910b00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) set_mempolicy(0x3, &(0x7f0000000040), 0x0) gettid() r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x2, 0x3, 0x2d8, 0x190, 0x190, 0x95ffffff, 0x77, 0x93ffffff, 0x240, 0x240, 0x221, 0x240, 0x240, 0x3, 0x0, {[{{@uncond, 0x0, 0x130, 0x190, 0x0, {0x0, 0x17c}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "bdc74c01369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa6ecab6b1d2cc05e3182f64694d7d05fb8b8c8f56627a54f905d564eeeb8334f650ca0f3c44f7fda4d20a55050342ea85ecc8838e7088de33582f36a0a375bb7008adc297a5ece1bb2df53d17bef26bb6f800", 0x7f}}]}, @common=@SET={0x60}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'veth0_to_batadv\x00', 'ip6gretap0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x338) 14:48:36 executing program 2: clone(0x80910b00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) set_mempolicy(0x3, &(0x7f0000000040), 0x0) gettid() r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x2, 0x3, 0x2d8, 0x190, 0x190, 0x95ffffff, 0x77, 0x93ffffff, 0x240, 0x240, 0x221, 0x240, 0x240, 0x3, 0x0, {[{{@uncond, 0x0, 0x130, 0x190, 0x0, {0x0, 0x17d}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "bdc74c01369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa6ecab6b1d2cc05e3182f64694d7d05fb8b8c8f56627a54f905d564eeeb8334f650ca0f3c44f7fda4d20a55050342ea85ecc8838e7088de33582f36a0a375bb7008adc297a5ece1bb2df53d17bef26bb6f800", 0x7f}}]}, @common=@SET={0x60}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'veth0_to_batadv\x00', 'ip6gretap0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x338) 14:48:36 executing program 2: clone(0x80910b00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) set_mempolicy(0x3, &(0x7f0000000040), 0x0) gettid() r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x2, 0x3, 0x2d8, 0x190, 0x190, 0x95ffffff, 0x77, 0x93ffffff, 0x240, 0x240, 0x221, 0x240, 0x240, 0x3, 0x0, {[{{@uncond, 0x0, 0x130, 0x190, 0x0, {0x0, 0x184}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "bdc74c01369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa6ecab6b1d2cc05e3182f64694d7d05fb8b8c8f56627a54f905d564eeeb8334f650ca0f3c44f7fda4d20a55050342ea85ecc8838e7088de33582f36a0a375bb7008adc297a5ece1bb2df53d17bef26bb6f800", 0x7f}}]}, @common=@SET={0x60}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'veth0_to_batadv\x00', 'ip6gretap0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x338) 14:48:36 executing program 5: clone(0x80910b00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) set_mempolicy(0x3, &(0x7f0000000040)=0xffffffff80000001, 0x400) gettid() r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, &(0x7f0000000080)=ANY=[@ANYBLOB="7549f8187a2a6e40594b4473692aef0dda6d1a46f2019ed7e86b1d711c76877056283bedab9579d2125c7cad3b1f28c963b3a626ef87b075574ff5612ccc80d8e14883ad2a8e6516a15c410ce005b2e841ebacd55a1365c685244ec3b66b003e7ec96ed005906d578130183c37"]) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x2, 0x3, 0x2d8, 0x190, 0x190, 0x95ffffff, 0x77, 0x93ffffff, 0x240, 0x240, 0x221, 0x240, 0x240, 0x3, 0x0, {[{{@uncond, 0x0, 0x130, 0x190, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "bdc74c01369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa6ecab6b1d2cc05e3182f64694d7d05fb8b8c8f56627a54f905d564eeeb8334f650ca0f3c44f7fda4d20a55050342ea85ecc8838e7088de33582f36a0a375bb7008adc297a5ece1bb2df53d17bef26bb6f800", 0x7f, 0x2}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0xd6000000]}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'veth0_to_batadv\x00', 'ip6gretap0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x338) 14:48:36 executing program 3: r0 = syz_io_uring_setup(0x2de5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000fe8000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) (async) io_uring_enter(r0, 0xb2, 0x0, 0x0, 0x0, 0x7401) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) getsockname(r3, &(0x7f0000000200)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, &(0x7f0000000080)=0x80) 14:48:36 executing program 2: clone(0x80910b00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) set_mempolicy(0x3, &(0x7f0000000040), 0x0) gettid() r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x2, 0x3, 0x2d8, 0x190, 0x190, 0x95ffffff, 0x77, 0x93ffffff, 0x240, 0x240, 0x221, 0x240, 0x240, 0x3, 0x0, {[{{@uncond, 0x0, 0x130, 0x190, 0x0, {0x0, 0x190}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "bdc74c01369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa6ecab6b1d2cc05e3182f64694d7d05fb8b8c8f56627a54f905d564eeeb8334f650ca0f3c44f7fda4d20a55050342ea85ecc8838e7088de33582f36a0a375bb7008adc297a5ece1bb2df53d17bef26bb6f800", 0x7f}}]}, @common=@SET={0x60}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'veth0_to_batadv\x00', 'ip6gretap0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x338) [ 2846.029803][ T3684] RAX: ffffffffffffffda RBX: 00007f2d29bddf60 RCX: 00007f2d29acae99 [ 2846.037778][ T3684] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 2846.045751][ T3684] RBP: 00007f2d28c411d0 R08: 0000000000000000 R09: 0000000000000000 [ 2846.053768][ T3684] R10: 0000000000201000 R11: 0000000000000246 R12: 0000000000000002 [ 2846.061741][ T3684] R13: 00007ffcc1d93fdf R14: 00007f2d28c41300 R15: 0000000000022000 [ 2846.069717][ T3684] 14:48:36 executing program 1: r0 = socket$inet6(0xa, 0x400000000001, 0x0) (async, rerun: 64) r1 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) (rerun: 64) ftruncate(r1, 0x800000002007ffb) (async) close(r0) open(&(0x7f0000000140)='./bus\x00', 0x4c0ac3, 0x100) sendfile(r0, r1, 0x0, 0x201000) (async) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) (async) getsockname$packet(r2, &(0x7f00000025c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000100)=0x14) (async) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x5936472f}]}, 0x2c}}, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x4e20, @loopback}, @in6={0xa, 0x4e21, 0xfffffff8, @private0, 0x8947}], 0x2c) [ 2846.107906][ T4172] set_target_v0_checkentry: 27 callbacks suppressed [ 2846.107922][ T4172] Cannot find add_set index 0 as target [ 2846.131639][ T4178] Cannot find add_set index 0 as target 14:48:36 executing program 4: r0 = socket$inet6(0xa, 0x400000000001, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) ftruncate(r1, 0x2007fff) close(r0) open(&(0x7f00000002c0)='./bus\x00', 0x14d842, 0x0) sendfile(r0, r1, 0x0, 0x201000) (fail_nth: 93) [ 2846.297877][ T4291] FAULT_INJECTION: forcing a failure. [ 2846.297877][ T4291] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2846.311179][ T4291] CPU: 0 PID: 4291 Comm: syz-executor.4 Tainted: G W 5.16.0-rc6-syzkaller #0 [ 2846.321236][ T4291] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2846.331296][ T4291] Call Trace: [ 2846.334674][ T4291] [ 2846.337598][ T4291] dump_stack_lvl+0xd6/0x122 [ 2846.342200][ T4291] dump_stack+0x11/0x1b [ 2846.346358][ T4291] should_fail+0x23c/0x250 [ 2846.350775][ T4291] __alloc_pages+0x102/0x330 [ 2846.355441][ T4291] alloc_pages+0x382/0x3d0 [ 2846.359922][ T4291] folio_alloc+0x1a/0x20 [ 2846.364157][ T4291] filemap_alloc_folio+0x53/0xf0 [ 2846.369242][ T4291] page_cache_ra_unbounded+0x1c0/0x430 [ 2846.374775][ T4291] ondemand_readahead+0x4f8/0x700 [ 2846.379804][ T4291] ? filemap_get_read_batch+0x3e2/0x410 [ 2846.385366][ T4291] page_cache_async_ra+0xed/0x120 [ 2846.390479][ T4291] filemap_read+0x500/0x16d0 [ 2846.395071][ T4291] ? __rcu_read_unlock+0x5c/0x290 [ 2846.400139][ T4291] generic_file_read_iter+0x72/0x2a0 [ 2846.405430][ T4291] ? iov_iter_pipe+0x100/0x150 [ 2846.410261][ T4291] ? ext4_file_read_iter+0x7a/0x1f0 [ 2846.415463][ T4291] generic_file_splice_read+0x24f/0x330 [ 2846.421263][ T4291] ? splice_shrink_spd+0x60/0x60 [ 2846.426213][ T4291] splice_direct_to_actor+0x2aa/0x650 [ 2846.431670][ T4291] ? do_splice_direct+0x190/0x190 [ 2846.436741][ T4291] do_splice_direct+0x106/0x190 [ 2846.441652][ T4291] do_sendfile+0x675/0xc40 [ 2846.446065][ T4291] __x64_sys_sendfile64+0x102/0x140 [ 2846.451342][ T4291] do_syscall_64+0x44/0xd0 [ 2846.455788][ T4291] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2846.461720][ T4291] RIP: 0033:0x7f2d29acae99 [ 2846.466282][ T4291] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2846.486012][ T4291] RSP: 002b:00007f2d28c41168 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 2846.494432][ T4291] RAX: ffffffffffffffda RBX: 00007f2d29bddf60 RCX: 00007f2d29acae99 [ 2846.502410][ T4291] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 2846.510395][ T4291] RBP: 00007f2d28c411d0 R08: 0000000000000000 R09: 0000000000000000 [ 2846.518387][ T4291] R10: 0000000000201000 R11: 0000000000000246 R12: 0000000000000002 [ 2846.526350][ T4291] R13: 00007ffcc1d93fdf R14: 00007f2d28c41300 R15: 0000000000022000 [ 2846.534342][ T4291] 14:48:36 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/self/exe\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x3, 0x3a) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) setsockopt$inet6_int(r2, 0x29, 0xd1, &(0x7f0000000000)=0x4, 0x4) setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xc8, 0x0, 0x4) openat$cgroup_ro(r2, &(0x7f0000000240)='hugetlb.1GB.usage_in_bytes\x00', 0x0, 0x0) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r1, 0x29, 0xc9, 0x0, 0x0) mmap(&(0x7f000013c000/0x2000)=nil, 0x2000, 0x5000005, 0x8010, r1, 0xf7306000) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) r3 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x2) r4 = pidfd_getfd(r0, r3, 0x0) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000100)={'syztnl2\x00', &(0x7f0000000080)={'ip6tnl0\x00', 0x0, 0x4, 0x5, 0x1, 0x4, 0x40, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private0, 0x7800, 0x1, 0x6, 0x1}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r4, 0x89fa, &(0x7f0000000200)={'sit0\x00', &(0x7f0000000140)={'ip6gre0\x00', r5, 0x2f, 0x80, 0x7, 0x7, 0x50, @loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x80, 0x8, 0x9, 0xbc9}}) write$evdev(r3, &(0x7f000004d000)=[{}], 0xfffffe82) openat(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/self/exe\x00', 0x0, 0x0) (async) socket$inet6(0xa, 0x3, 0x3a) (async) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) (async) setsockopt$inet6_int(r2, 0x29, 0xd1, &(0x7f0000000000)=0x4, 0x4) (async) setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xc8, 0x0, 0x4) (async) openat$cgroup_ro(r2, &(0x7f0000000240)='hugetlb.1GB.usage_in_bytes\x00', 0x0, 0x0) (async) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r1, 0x29, 0xc9, 0x0, 0x0) (async) mmap(&(0x7f000013c000/0x2000)=nil, 0x2000, 0x5000005, 0x8010, r1, 0xf7306000) (async) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) (async) syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x2) (async) pidfd_getfd(r0, r3, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000100)={'syztnl2\x00', &(0x7f0000000080)={'ip6tnl0\x00', 0x0, 0x4, 0x5, 0x1, 0x4, 0x40, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private0, 0x7800, 0x1, 0x6, 0x1}}) (async) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r4, 0x89fa, &(0x7f0000000200)={'sit0\x00', &(0x7f0000000140)={'ip6gre0\x00', r5, 0x2f, 0x80, 0x7, 0x7, 0x50, @loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x80, 0x8, 0x9, 0xbc9}}) (async) write$evdev(r3, &(0x7f000004d000)=[{}], 0xfffffe82) (async) 14:48:36 executing program 2: clone(0x80910b00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) set_mempolicy(0x3, &(0x7f0000000040), 0x0) gettid() r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x2, 0x3, 0x2d8, 0x190, 0x190, 0x95ffffff, 0x77, 0x93ffffff, 0x240, 0x240, 0x221, 0x240, 0x240, 0x3, 0x0, {[{{@uncond, 0x0, 0x130, 0x190, 0x0, {0x0, 0x199}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "bdc74c01369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa6ecab6b1d2cc05e3182f64694d7d05fb8b8c8f56627a54f905d564eeeb8334f650ca0f3c44f7fda4d20a55050342ea85ecc8838e7088de33582f36a0a375bb7008adc297a5ece1bb2df53d17bef26bb6f800", 0x7f}}]}, @common=@SET={0x60}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'veth0_to_batadv\x00', 'ip6gretap0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x338) 14:48:36 executing program 1: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) r2 = socket$nl_sock_diag(0x10, 0x3, 0x4) ftruncate(r2, 0x2008000) close(r0) open(&(0x7f00000002c0)='./bus\x00', 0x14d842, 0x0) sendfile(r0, r1, 0x0, 0x201000) 14:48:36 executing program 3: r0 = syz_io_uring_setup(0x2de5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000fe8000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) (async) io_uring_enter(r0, 0xb2, 0x0, 0x0, 0x0, 0x7401) (async) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) getsockname(r3, &(0x7f0000000200)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, &(0x7f0000000080)=0x80) 14:48:36 executing program 5: clone(0x80910b00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) set_mempolicy(0x3, &(0x7f0000000040)=0xffffffff80000001, 0x400) gettid() r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, &(0x7f0000000080)=ANY=[@ANYBLOB="7549f8187a2a6e40594b4473692aef0dda6d1a46f2019ed7e86b1d711c76877056283bedab9579d2125c7cad3b1f28c963b3a626ef87b075574ff5612ccc80d8e14883ad2a8e6516a15c410ce005b2e841ebacd55a1365c685244ec3b66b003e7ec96ed005906d578130183c37"]) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x2, 0x3, 0x2d8, 0x190, 0x190, 0x95ffffff, 0x77, 0x93ffffff, 0x240, 0x240, 0x221, 0x240, 0x240, 0x3, 0x0, {[{{@uncond, 0x0, 0x130, 0x190, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "bdc74c01369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa6ecab6b1d2cc05e3182f64694d7d05fb8b8c8f56627a54f905d564eeeb8334f650ca0f3c44f7fda4d20a55050342ea85ecc8838e7088de33582f36a0a375bb7008adc297a5ece1bb2df53d17bef26bb6f800", 0x7f, 0x2}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0xd6ffffff]}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'veth0_to_batadv\x00', 'ip6gretap0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x338) 14:48:36 executing program 4: r0 = socket$inet6(0xa, 0x400000000001, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) ftruncate(r1, 0x2007fff) close(r0) open(&(0x7f00000002c0)='./bus\x00', 0x14d842, 0x0) sendfile(r0, r1, 0x0, 0x201000) (fail_nth: 94) 14:48:37 executing program 1: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) (async) r2 = socket$nl_sock_diag(0x10, 0x3, 0x4) ftruncate(r2, 0x2008000) (async) close(r0) (async) open(&(0x7f00000002c0)='./bus\x00', 0x14d842, 0x0) sendfile(r0, r1, 0x0, 0x201000) [ 2846.940303][ T4303] Cannot find add_set index 0 as target [ 2846.946524][ T4298] Cannot find add_set index 0 as target [ 2846.952908][ T4296] FAULT_INJECTION: forcing a failure. [ 2846.952908][ T4296] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2846.966485][ T4296] CPU: 0 PID: 4296 Comm: syz-executor.4 Tainted: G W 5.16.0-rc6-syzkaller #0 [ 2846.976578][ T4296] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2846.976616][ T4296] Call Trace: 14:48:37 executing program 2: clone(0x80910b00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) set_mempolicy(0x3, &(0x7f0000000040), 0x0) gettid() r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x2, 0x3, 0x2d8, 0x190, 0x190, 0x95ffffff, 0x77, 0x93ffffff, 0x240, 0x240, 0x221, 0x240, 0x240, 0x3, 0x0, {[{{@uncond, 0x0, 0x130, 0x190, 0x0, {0x0, 0x19a}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "bdc74c01369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa6ecab6b1d2cc05e3182f64694d7d05fb8b8c8f56627a54f905d564eeeb8334f650ca0f3c44f7fda4d20a55050342ea85ecc8838e7088de33582f36a0a375bb7008adc297a5ece1bb2df53d17bef26bb6f800", 0x7f}}]}, @common=@SET={0x60}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'veth0_to_batadv\x00', 'ip6gretap0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x338) 14:48:37 executing program 1: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) r2 = socket$nl_sock_diag(0x10, 0x3, 0x4) ftruncate(r2, 0x2008000) close(r0) open(&(0x7f00000002c0)='./bus\x00', 0x14d842, 0x0) sendfile(r0, r1, 0x0, 0x201000) socket$inet6(0xa, 0x400000000001, 0x0) (async) open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) (async) socket$nl_sock_diag(0x10, 0x3, 0x4) (async) ftruncate(r2, 0x2008000) (async) close(r0) (async) open(&(0x7f00000002c0)='./bus\x00', 0x14d842, 0x0) (async) sendfile(r0, r1, 0x0, 0x201000) (async) [ 2846.976624][ T4296] [ 2846.976631][ T4296] dump_stack_lvl+0xd6/0x122 [ 2846.976660][ T4296] dump_stack+0x11/0x1b [ 2846.976678][ T4296] should_fail+0x23c/0x250 [ 2846.976703][ T4296] __alloc_pages+0x102/0x330 [ 2846.976733][ T4296] alloc_pages+0x382/0x3d0 [ 2846.976757][ T4296] folio_alloc+0x1a/0x20 [ 2846.976773][ T4296] filemap_alloc_folio+0x53/0xf0 [ 2846.976796][ T4296] page_cache_ra_unbounded+0x1c0/0x430 [ 2846.976824][ T4296] ondemand_readahead+0x4f8/0x700 [ 2846.976899][ T4296] ? filemap_get_read_batch+0x3e2/0x410 14:48:37 executing program 1: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) ftruncate(r1, 0x2007fff) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000000)) close(r0) open(&(0x7f00000002c0)='./bus\x00', 0x14d842, 0x0) sendfile(r0, r1, 0x0, 0x201000) r2 = accept(0xffffffffffffffff, 0x0, &(0x7f0000000200)) ioctl$BTRFS_IOC_START_SYNC(r2, 0x80089418, &(0x7f0000000240)) 14:48:37 executing program 2: clone(0x80910b00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) set_mempolicy(0x3, &(0x7f0000000040), 0x0) gettid() r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x2, 0x3, 0x2d8, 0x190, 0x190, 0x95ffffff, 0x77, 0x93ffffff, 0x240, 0x240, 0x221, 0x240, 0x240, 0x3, 0x0, {[{{@uncond, 0x0, 0x130, 0x190, 0x0, {0x0, 0x1a0}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "bdc74c01369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa6ecab6b1d2cc05e3182f64694d7d05fb8b8c8f56627a54f905d564eeeb8334f650ca0f3c44f7fda4d20a55050342ea85ecc8838e7088de33582f36a0a375bb7008adc297a5ece1bb2df53d17bef26bb6f800", 0x7f}}]}, @common=@SET={0x60}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'veth0_to_batadv\x00', 'ip6gretap0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x338) [ 2846.976923][ T4296] page_cache_async_ra+0xed/0x120 [ 2846.976944][ T4296] filemap_read+0x500/0x16d0 [ 2846.976967][ T4296] ? __rcu_read_unlock+0x5c/0x290 [ 2846.977056][ T4296] generic_file_read_iter+0x72/0x2a0 [ 2846.977080][ T4296] ? iov_iter_pipe+0x100/0x150 [ 2846.977098][ T4296] ? ext4_file_read_iter+0x7a/0x1f0 [ 2846.977154][ T4296] generic_file_splice_read+0x24f/0x330 [ 2846.977179][ T4296] ? splice_shrink_spd+0x60/0x60 [ 2846.977199][ T4296] splice_direct_to_actor+0x2aa/0x650 [ 2846.977232][ T4296] ? do_splice_direct+0x190/0x190 [ 2846.977255][ T4296] do_splice_direct+0x106/0x190 [ 2846.977276][ T4296] do_sendfile+0x675/0xc40 [ 2847.034138][ T4335] Cannot find add_set index 0 as target [ 2847.035250][ T4296] __x64_sys_sendfile64+0x102/0x140 [ 2847.035278][ T4296] do_syscall_64+0x44/0xd0 [ 2847.105506][ T4347] Cannot find add_set index 0 as target [ 2847.106814][ T4296] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2847.128249][ T4296] RIP: 0033:0x7f2d29acae99 14:48:37 executing program 2: clone(0x80910b00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) set_mempolicy(0x3, &(0x7f0000000040), 0x0) gettid() r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x2, 0x3, 0x2d8, 0x190, 0x190, 0x95ffffff, 0x77, 0x93ffffff, 0x240, 0x240, 0x221, 0x240, 0x240, 0x3, 0x0, {[{{@uncond, 0x0, 0x130, 0x190, 0x0, {0x0, 0x1a4}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "bdc74c01369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa6ecab6b1d2cc05e3182f64694d7d05fb8b8c8f56627a54f905d564eeeb8334f650ca0f3c44f7fda4d20a55050342ea85ecc8838e7088de33582f36a0a375bb7008adc297a5ece1bb2df53d17bef26bb6f800", 0x7f}}]}, @common=@SET={0x60}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'veth0_to_batadv\x00', 'ip6gretap0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x338) [ 2847.128270][ T4296] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2847.128307][ T4296] RSP: 002b:00007f2d28c41168 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 2847.128403][ T4296] RAX: ffffffffffffffda RBX: 00007f2d29bddf60 RCX: 00007f2d29acae99 [ 2847.169121][ T4296] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 14:48:37 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/self/exe\x00', 0x0, 0x0) (async) r1 = socket$inet6(0xa, 0x3, 0x3a) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) setsockopt$inet6_int(r2, 0x29, 0xd1, &(0x7f0000000000)=0x4, 0x4) (async) setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xc8, 0x0, 0x4) (async) openat$cgroup_ro(r2, &(0x7f0000000240)='hugetlb.1GB.usage_in_bytes\x00', 0x0, 0x0) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r1, 0x29, 0xc9, 0x0, 0x0) (async) mmap(&(0x7f000013c000/0x2000)=nil, 0x2000, 0x5000005, 0x8010, r1, 0xf7306000) (async) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) r3 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x2) r4 = pidfd_getfd(r0, r3, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000100)={'syztnl2\x00', &(0x7f0000000080)={'ip6tnl0\x00', 0x0, 0x4, 0x5, 0x1, 0x4, 0x40, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private0, 0x7800, 0x1, 0x6, 0x1}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r4, 0x89fa, &(0x7f0000000200)={'sit0\x00', &(0x7f0000000140)={'ip6gre0\x00', r5, 0x2f, 0x80, 0x7, 0x7, 0x50, @loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x80, 0x8, 0x9, 0xbc9}}) (async) write$evdev(r3, &(0x7f000004d000)=[{}], 0xfffffe82) 14:48:37 executing program 5: clone(0x80910b00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) set_mempolicy(0x3, &(0x7f0000000040)=0xffffffff80000001, 0x400) gettid() r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, &(0x7f0000000080)=ANY=[@ANYBLOB="7549f8187a2a6e40594b4473692aef0dda6d1a46f2019ed7e86b1d711c76877056283bedab9579d2125c7cad3b1f28c963b3a626ef87b075574ff5612ccc80d8e14883ad2a8e6516a15c410ce005b2e841ebacd55a1365c685244ec3b66b003e7ec96ed005906d578130183c37"]) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x2, 0x3, 0x2d8, 0x190, 0x190, 0x95ffffff, 0x77, 0x93ffffff, 0x240, 0x240, 0x221, 0x240, 0x240, 0x3, 0x0, {[{{@uncond, 0x0, 0x130, 0x190, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "bdc74c01369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa6ecab6b1d2cc05e3182f64694d7d05fb8b8c8f56627a54f905d564eeeb8334f650ca0f3c44f7fda4d20a55050342ea85ecc8838e7088de33582f36a0a375bb7008adc297a5ece1bb2df53d17bef26bb6f800", 0x7f, 0x2}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0xd8ffffff]}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'veth0_to_batadv\x00', 'ip6gretap0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x338) 14:48:37 executing program 3: getsockopt$EBT_SO_GET_INIT_INFO(0xffffffffffffffff, 0x0, 0x82, &(0x7f0000000200)={'broute\x00', 0x0, 0x0, 0x0, [0x9a7, 0xffffffffffffffff, 0xffffffff, 0x6, 0x1d4b, 0x3]}, &(0x7f0000000080)=0x78) r0 = syz_io_uring_setup(0x2de5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000fe8000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_setup(0x7b96, &(0x7f0000000280)={0x0, 0xd590, 0xb, 0x1, 0x23c, 0x0, r0}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000300)=@IORING_OP_POLL_REMOVE={0x7, 0x3, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x20004) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0xb2, 0x0, 0x0, 0x0, 0x7401) 14:48:37 executing program 2: clone(0x80910b00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) set_mempolicy(0x3, &(0x7f0000000040), 0x0) gettid() r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x2, 0x3, 0x2d8, 0x190, 0x190, 0x95ffffff, 0x77, 0x93ffffff, 0x240, 0x240, 0x221, 0x240, 0x240, 0x3, 0x0, {[{{@uncond, 0x0, 0x130, 0x190, 0x0, {0x0, 0x1a9}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "bdc74c01369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa6ecab6b1d2cc05e3182f64694d7d05fb8b8c8f56627a54f905d564eeeb8334f650ca0f3c44f7fda4d20a55050342ea85ecc8838e7088de33582f36a0a375bb7008adc297a5ece1bb2df53d17bef26bb6f800", 0x7f}}]}, @common=@SET={0x60}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'veth0_to_batadv\x00', 'ip6gretap0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x338) [ 2847.169165][ T4296] RBP: 00007f2d28c411d0 R08: 0000000000000000 R09: 0000000000000000 [ 2847.169179][ T4296] R10: 0000000000201000 R11: 0000000000000246 R12: 0000000000000002 [ 2847.169193][ T4296] R13: 00007ffcc1d93fdf R14: 00007f2d28c41300 R15: 0000000000022000 [ 2847.169211][ T4296] [ 2847.230566][ T4432] Cannot find add_set index 0 as target 14:48:37 executing program 5: clone(0x80910b00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) set_mempolicy(0x3, &(0x7f0000000040)=0xffffffff80000001, 0x400) gettid() r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, &(0x7f0000000080)=ANY=[@ANYBLOB="7549f8187a2a6e40594b4473692aef0dda6d1a46f2019ed7e86b1d711c76877056283bedab9579d2125c7cad3b1f28c963b3a626ef87b075574ff5612ccc80d8e14883ad2a8e6516a15c410ce005b2e841ebacd55a1365c685244ec3b66b003e7ec96ed005906d578130183c37"]) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x2, 0x3, 0x2d8, 0x190, 0x190, 0x95ffffff, 0x77, 0x93ffffff, 0x240, 0x240, 0x221, 0x240, 0x240, 0x3, 0x0, {[{{@uncond, 0x0, 0x130, 0x190, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "bdc74c01369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa6ecab6b1d2cc05e3182f64694d7d05fb8b8c8f56627a54f905d564eeeb8334f650ca0f3c44f7fda4d20a55050342ea85ecc8838e7088de33582f36a0a375bb7008adc297a5ece1bb2df53d17bef26bb6f800", 0x7f, 0x2}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0xd9ffffff]}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'veth0_to_batadv\x00', 'ip6gretap0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x338) [ 2847.272713][ T4459] Cannot find add_set index 0 as target [ 2847.300377][ T4490] Cannot find add_set index 0 as target [ 2847.321756][ T4493] Cannot find add_set index 0 as target [ 2847.373358][ T1424] ================================================================== [ 2847.381460][ T1424] BUG: KCSAN: data-race in evdev_pass_values / evdev_poll [ 2847.381482][ T1424] [ 2847.381487][ T1424] write to 0xffff888103aab008 of 4 bytes by task 4455 on cpu 0: [ 2847.398674][ T1424] evdev_pass_values+0x402/0x550 [ 2847.398699][ T1424] evdev_events+0x91/0xd0 [ 2847.408028][ T1424] input_pass_values+0x37a/0x8f0 [ 2847.408052][ T1424] input_handle_event+0x8d3/0xd50 [ 2847.408075][ T1424] input_inject_event+0xbc/0xe0 [ 2847.423559][ T1424] evdev_write+0x326/0x400 [ 2847.427960][ T1424] vfs_write+0x2af/0x950 [ 2847.432183][ T1424] ksys_write+0xd9/0x190 [ 2847.436404][ T1424] __x64_sys_write+0x3e/0x50 [ 2847.440978][ T1424] do_syscall_64+0x44/0xd0 [ 2847.445380][ T1424] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2847.451259][ T1424] [ 2847.453564][ T1424] read to 0xffff888103aab008 of 4 bytes by task 1424 on cpu 1: [ 2847.461096][ T1424] evdev_poll+0xdd/0x110 [ 2847.465315][ T1424] do_select+0x797/0xea0 [ 2847.469536][ T1424] core_sys_select+0x440/0x6d0 [ 2847.474278][ T1424] __do_sys_pselect6+0x1ea/0x250 [ 2847.479198][ T1424] __x64_sys_pselect6+0x74/0x80 [ 2847.484036][ T1424] do_syscall_64+0x44/0xd0 [ 2847.488432][ T1424] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2847.494303][ T1424] [ 2847.496694][ T1424] value changed: 0x00000026 -> 0x00000028 [ 2847.502384][ T1424] [ 2847.504690][ T1424] Reported by Kernel Concurrency Sanitizer on: [ 2847.510813][ T1424] CPU: 1 PID: 1424 Comm: acpid Tainted: G W 5.16.0-rc6-syzkaller #0 [ 2847.520076][ T1424] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2847.530108][ T1424] ================================================================== 14:48:37 executing program 4: r0 = socket$inet6(0xa, 0x400000000001, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) ftruncate(r1, 0x2007fff) close(r0) open(&(0x7f00000002c0)='./bus\x00', 0x14d842, 0x0) sendfile(r0, r1, 0x0, 0x201000) (fail_nth: 95) 14:48:37 executing program 3: getsockopt$EBT_SO_GET_INIT_INFO(0xffffffffffffffff, 0x0, 0x82, &(0x7f0000000200)={'broute\x00', 0x0, 0x0, 0x0, [0x9a7, 0xffffffffffffffff, 0xffffffff, 0x6, 0x1d4b, 0x3]}, &(0x7f0000000080)=0x78) (async) r0 = syz_io_uring_setup(0x2de5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000fe8000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_setup(0x7b96, &(0x7f0000000280)={0x0, 0xd590, 0xb, 0x1, 0x23c, 0x0, r0}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000300)=@IORING_OP_POLL_REMOVE={0x7, 0x3, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x20004) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) (async) io_uring_enter(r0, 0xb2, 0x0, 0x0, 0x0, 0x7401) 14:48:37 executing program 1: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) ftruncate(r1, 0x2007fff) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000000)) close(r0) open(&(0x7f00000002c0)='./bus\x00', 0x14d842, 0x0) sendfile(r0, r1, 0x0, 0x201000) r2 = accept(0xffffffffffffffff, 0x0, &(0x7f0000000200)) ioctl$BTRFS_IOC_START_SYNC(r2, 0x80089418, &(0x7f0000000240)) socket$inet6(0xa, 0x400000000001, 0x0) (async) open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) (async) ftruncate(r1, 0x2007fff) (async) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000000)) (async) close(r0) (async) open(&(0x7f00000002c0)='./bus\x00', 0x14d842, 0x0) (async) sendfile(r0, r1, 0x0, 0x201000) (async) accept(0xffffffffffffffff, 0x0, &(0x7f0000000200)) (async) ioctl$BTRFS_IOC_START_SYNC(r2, 0x80089418, &(0x7f0000000240)) (async) 14:48:37 executing program 2: clone(0x80910b00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) set_mempolicy(0x3, &(0x7f0000000040), 0x0) gettid() r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x2, 0x3, 0x2d8, 0x190, 0x190, 0x95ffffff, 0x77, 0x93ffffff, 0x240, 0x240, 0x221, 0x240, 0x240, 0x3, 0x0, {[{{@uncond, 0x0, 0x130, 0x190, 0x0, {0x0, 0x1b0}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "bdc74c01369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa6ecab6b1d2cc05e3182f64694d7d05fb8b8c8f56627a54f905d564eeeb8334f650ca0f3c44f7fda4d20a55050342ea85ecc8838e7088de33582f36a0a375bb7008adc297a5ece1bb2df53d17bef26bb6f800", 0x7f}}]}, @common=@SET={0x60}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'veth0_to_batadv\x00', 'ip6gretap0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x338) 14:48:37 executing program 5: clone(0x80910b00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) set_mempolicy(0x3, &(0x7f0000000040)=0xffffffff80000001, 0x400) gettid() r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, &(0x7f0000000080)=ANY=[@ANYBLOB="7549f8187a2a6e40594b4473692aef0dda6d1a46f2019ed7e86b1d711c76877056283bedab9579d2125c7cad3b1f28c963b3a626ef87b075574ff5612ccc80d8e14883ad2a8e6516a15c410ce005b2e841ebacd55a1365c685244ec3b66b003e7ec96ed005906d578130183c37"]) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x2, 0x3, 0x2d8, 0x190, 0x190, 0x95ffffff, 0x77, 0x93ffffff, 0x240, 0x240, 0x221, 0x240, 0x240, 0x3, 0x0, {[{{@uncond, 0x0, 0x130, 0x190, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "bdc74c01369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa6ecab6b1d2cc05e3182f64694d7d05fb8b8c8f56627a54f905d564eeeb8334f650ca0f3c44f7fda4d20a55050342ea85ecc8838e7088de33582f36a0a375bb7008adc297a5ece1bb2df53d17bef26bb6f800", 0x7f, 0x2}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0xda000000]}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'veth0_to_batadv\x00', 'ip6gretap0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x338) 14:48:37 executing program 0: openat(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/self/exe\x00', 0x0, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x2) write$evdev(r0, &(0x7f000004d000)=[{}], 0xfffffe82) 14:48:37 executing program 2: clone(0x80910b00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) set_mempolicy(0x3, &(0x7f0000000040), 0x0) gettid() r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x2, 0x3, 0x2d8, 0x190, 0x190, 0x95ffffff, 0x77, 0x93ffffff, 0x240, 0x240, 0x221, 0x240, 0x240, 0x3, 0x0, {[{{@uncond, 0x0, 0x130, 0x190, 0x0, {0x0, 0x1b2}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "bdc74c01369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa6ecab6b1d2cc05e3182f64694d7d05fb8b8c8f56627a54f905d564eeeb8334f650ca0f3c44f7fda4d20a55050342ea85ecc8838e7088de33582f36a0a375bb7008adc297a5ece1bb2df53d17bef26bb6f800", 0x7f}}]}, @common=@SET={0x60}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'veth0_to_batadv\x00', 'ip6gretap0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x338) 14:48:37 executing program 5: clone(0x80910b00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) set_mempolicy(0x3, &(0x7f0000000040)=0xffffffff80000001, 0x400) gettid() r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, &(0x7f0000000080)=ANY=[@ANYBLOB="7549f8187a2a6e40594b4473692aef0dda6d1a46f2019ed7e86b1d711c76877056283bedab9579d2125c7cad3b1f28c963b3a626ef87b075574ff5612ccc80d8e14883ad2a8e6516a15c410ce005b2e841ebacd55a1365c685244ec3b66b003e7ec96ed005906d578130183c37"]) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x2, 0x3, 0x2d8, 0x190, 0x190, 0x95ffffff, 0x77, 0x93ffffff, 0x240, 0x240, 0x221, 0x240, 0x240, 0x3, 0x0, {[{{@uncond, 0x0, 0x130, 0x190, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "bdc74c01369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa6ecab6b1d2cc05e3182f64694d7d05fb8b8c8f56627a54f905d564eeeb8334f650ca0f3c44f7fda4d20a55050342ea85ecc8838e7088de33582f36a0a375bb7008adc297a5ece1bb2df53d17bef26bb6f800", 0x7f, 0x2}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0xda020000]}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'veth0_to_batadv\x00', 'ip6gretap0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x338) [ 2847.669222][ T4557] FAULT_INJECTION: forcing a failure. [ 2847.669222][ T4557] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2847.682746][ T4557] CPU: 0 PID: 4557 Comm: syz-executor.4 Tainted: G W 5.16.0-rc6-syzkaller #0 [ 2847.693174][ T4557] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2847.703229][ T4557] Call Trace: [ 2847.706505][ T4557] [ 2847.709430][ T4557] dump_stack_lvl+0xd6/0x122 [ 2847.714120][ T4557] dump_stack+0x11/0x1b [ 2847.718287][ T4557] should_fail+0x23c/0x250 [ 2847.722767][ T4557] __alloc_pages+0x102/0x330 [ 2847.727502][ T4557] alloc_pages+0x382/0x3d0 [ 2847.731910][ T4557] folio_alloc+0x1a/0x20 [ 2847.736214][ T4557] filemap_alloc_folio+0x53/0xf0 [ 2847.741166][ T4557] page_cache_ra_unbounded+0x1c0/0x430 [ 2847.746688][ T4557] ondemand_readahead+0x4f8/0x700 [ 2847.751714][ T4557] ? filemap_get_read_batch+0x3e2/0x410 [ 2847.757275][ T4557] page_cache_async_ra+0xed/0x120 [ 2847.762309][ T4557] filemap_read+0x500/0x16d0 [ 2847.766911][ T4557] ? __rcu_read_unlock+0x5c/0x290 [ 2847.771935][ T4557] generic_file_read_iter+0x72/0x2a0 [ 2847.777226][ T4557] ? iov_iter_pipe+0x100/0x150 [ 2847.781994][ T4557] ? ext4_file_read_iter+0x7a/0x1f0 [ 2847.787473][ T4557] generic_file_splice_read+0x24f/0x330 [ 2847.793032][ T4557] ? splice_shrink_spd+0x60/0x60 [ 2847.798157][ T4557] splice_direct_to_actor+0x2aa/0x650 [ 2847.803552][ T4557] ? do_splice_direct+0x190/0x190 [ 2847.808616][ T4557] do_splice_direct+0x106/0x190 [ 2847.813525][ T4557] do_sendfile+0x675/0xc40 [ 2847.817943][ T4557] __x64_sys_sendfile64+0x102/0x140 [ 2847.823143][ T4557] do_syscall_64+0x44/0xd0 [ 2847.827553][ T4557] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2847.833443][ T4557] RIP: 0033:0x7f2d29acae99 [ 2847.837859][ T4557] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2847.857723][ T4557] RSP: 002b:00007f2d28c41168 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 14:48:37 executing program 2: clone(0x80910b00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) set_mempolicy(0x3, &(0x7f0000000040), 0x0) gettid() r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x2, 0x3, 0x2d8, 0x190, 0x190, 0x95ffffff, 0x77, 0x93ffffff, 0x240, 0x240, 0x221, 0x240, 0x240, 0x3, 0x0, {[{{@uncond, 0x0, 0x130, 0x190, 0x0, {0x0, 0x1b6}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "bdc74c01369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa6ecab6b1d2cc05e3182f64694d7d05fb8b8c8f56627a54f905d564eeeb8334f650ca0f3c44f7fda4d20a55050342ea85ecc8838e7088de33582f36a0a375bb7008adc297a5ece1bb2df53d17bef26bb6f800", 0x7f}}]}, @common=@SET={0x60}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'veth0_to_batadv\x00', 'ip6gretap0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x338) 14:48:37 executing program 1: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) ftruncate(r1, 0x2007fff) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000000)) close(r0) open(&(0x7f00000002c0)='./bus\x00', 0x14d842, 0x0) sendfile(r0, r1, 0x0, 0x201000) r2 = accept(0xffffffffffffffff, 0x0, &(0x7f0000000200)) ioctl$BTRFS_IOC_START_SYNC(r2, 0x80089418, &(0x7f0000000240)) socket$inet6(0xa, 0x400000000001, 0x0) (async) open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) (async) ftruncate(r1, 0x2007fff) (async) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000000)) (async) close(r0) (async) open(&(0x7f00000002c0)='./bus\x00', 0x14d842, 0x0) (async) sendfile(r0, r1, 0x0, 0x201000) (async) accept(0xffffffffffffffff, 0x0, &(0x7f0000000200)) (async) ioctl$BTRFS_IOC_START_SYNC(r2, 0x80089418, &(0x7f0000000240)) (async) 14:48:37 executing program 3: getsockopt$EBT_SO_GET_INIT_INFO(0xffffffffffffffff, 0x0, 0x82, &(0x7f0000000200)={'broute\x00', 0x0, 0x0, 0x0, [0x9a7, 0xffffffffffffffff, 0xffffffff, 0x6, 0x1d4b, 0x3]}, &(0x7f0000000080)=0x78) (async, rerun: 32) r0 = syz_io_uring_setup(0x2de5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000fe8000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x0) (rerun: 32) syz_io_uring_setup(0x7b96, &(0x7f0000000280)={0x0, 0xd590, 0xb, 0x1, 0x23c, 0x0, r0}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000300)=@IORING_OP_POLL_REMOVE={0x7, 0x3, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x20004) (async, rerun: 32) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) (async, rerun: 32) io_uring_enter(r0, 0xb2, 0x0, 0x0, 0x0, 0x7401) 14:48:37 executing program 2: clone(0x80910b00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) set_mempolicy(0x3, &(0x7f0000000040), 0x0) gettid() r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x2, 0x3, 0x2d8, 0x190, 0x190, 0x95ffffff, 0x77, 0x93ffffff, 0x240, 0x240, 0x221, 0x240, 0x240, 0x3, 0x0, {[{{@uncond, 0x0, 0x130, 0x190, 0x0, {0x0, 0x1c0}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "bdc74c01369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa6ecab6b1d2cc05e3182f64694d7d05fb8b8c8f56627a54f905d564eeeb8334f650ca0f3c44f7fda4d20a55050342ea85ecc8838e7088de33582f36a0a375bb7008adc297a5ece1bb2df53d17bef26bb6f800", 0x7f}}]}, @common=@SET={0x60}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'veth0_to_batadv\x00', 'ip6gretap0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x338) [ 2847.866143][ T4557] RAX: ffffffffffffffda RBX: 00007f2d29bddf60 RCX: 00007f2d29acae99 [ 2847.874162][ T4557] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 2847.882134][ T4557] RBP: 00007f2d28c411d0 R08: 0000000000000000 R09: 0000000000000000 [ 2847.890160][ T4557] R10: 0000000000201000 R11: 0000000000000246 R12: 0000000000000002 [ 2847.898180][ T4557] R13: 00007ffcc1d93fdf R14: 00007f2d28c41300 R15: 0000000000022000 [ 2847.906304][ T4557] 14:48:38 executing program 4: r0 = socket$inet6(0xa, 0x400000000001, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) ftruncate(r1, 0x2007fff) close(r0) open(&(0x7f00000002c0)='./bus\x00', 0x14d842, 0x0) sendfile(r0, r1, 0x0, 0x201000) (fail_nth: 96) 14:48:38 executing program 5: clone(0x80910b00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) set_mempolicy(0x3, &(0x7f0000000040)=0xffffffff80000001, 0x400) gettid() r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, &(0x7f0000000080)=ANY=[@ANYBLOB="7549f8187a2a6e40594b4473692aef0dda6d1a46f2019ed7e86b1d711c76877056283bedab9579d2125c7cad3b1f28c963b3a626ef87b075574ff5612ccc80d8e14883ad2a8e6516a15c410ce005b2e841ebacd55a1365c685244ec3b66b003e7ec96ed005906d578130183c37"]) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x2, 0x3, 0x2d8, 0x190, 0x190, 0x95ffffff, 0x77, 0x93ffffff, 0x240, 0x240, 0x221, 0x240, 0x240, 0x3, 0x0, {[{{@uncond, 0x0, 0x130, 0x190, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "bdc74c01369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa6ecab6b1d2cc05e3182f64694d7d05fb8b8c8f56627a54f905d564eeeb8334f650ca0f3c44f7fda4d20a55050342ea85ecc8838e7088de33582f36a0a375bb7008adc297a5ece1bb2df53d17bef26bb6f800", 0x7f, 0x2}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0xdaffffff]}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'veth0_to_batadv\x00', 'ip6gretap0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x338) 14:48:38 executing program 3: r0 = syz_io_uring_setup(0x2de5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000fe8000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000fe8000/0x4000)=nil, 0x4000, 0x200000f, 0x40010, r0, 0x0) r4 = syz_io_uring_setup(0x5d66, &(0x7f00000002c0)={0x0, 0x0, 0x6, 0x0, 0x14b}, &(0x7f0000ee7000/0x1000)=nil, &(0x7f0000fe6000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r5, r6, &(0x7f00000000c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f00000003c0)}, 0x1010001) r7 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r4, 0x10000000) syz_io_uring_submit(r5, r7, &(0x7f0000000340)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r5, r7, &(0x7f0000000000)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r5, r7, &(0x7f0000004040)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000140)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_CLOSE, 0x0) syz_io_uring_submit(r5, r7, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE, 0x0) syz_io_uring_submit(r3, r7, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, 0xffffffffffffffff, 0x80, &(0x7f0000000200)=@l2tp6={0xa, 0x0, 0x6000000, @ipv4={'\x00', '\xff\xff', @empty}, 0x8, 0x3}}, 0x3) r8 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_int(r8, 0x29, 0xd1, &(0x7f0000000000)=0x4, 0x4) setsockopt$inet6_MRT6_ADD_MFC(r8, 0x29, 0xc8, 0x0, 0x4) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r8, 0x29, 0xc9, 0x0, 0x0) fgetxattr(r8, &(0x7f0000000100)=@random={'os2.', '&#}\x00'}, &(0x7f00000003c0)=""/4096, 0x1000) io_uring_enter(r0, 0xb2, 0x0, 0x0, 0x0, 0x7401) 14:48:38 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) r1 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) ftruncate(r1, 0x2007fff) close(r0) getsockopt$IP6T_SO_GET_INFO(r0, 0x29, 0x40, &(0x7f0000000000)={'nat\x00', 0x0, [0x6, 0xa3, 0x8, 0x5490, 0x1]}, &(0x7f0000000080)=0x54) open(&(0x7f00000002c0)='./bus\x00', 0x14d842, 0x0) sendfile(r0, r1, 0x0, 0x201000) 14:48:38 executing program 2: clone(0x80910b00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) set_mempolicy(0x3, &(0x7f0000000040), 0x0) gettid() r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x2, 0x3, 0x2d8, 0x190, 0x190, 0x95ffffff, 0x77, 0x93ffffff, 0x240, 0x240, 0x221, 0x240, 0x240, 0x3, 0x0, {[{{@uncond, 0x0, 0x130, 0x190, 0x0, {0x0, 0x1c1}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "bdc74c01369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa6ecab6b1d2cc05e3182f64694d7d05fb8b8c8f56627a54f905d564eeeb8334f650ca0f3c44f7fda4d20a55050342ea85ecc8838e7088de33582f36a0a375bb7008adc297a5ece1bb2df53d17bef26bb6f800", 0x7f}}]}, @common=@SET={0x60}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'veth0_to_batadv\x00', 'ip6gretap0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x338) [ 2848.177985][ T4798] FAULT_INJECTION: forcing a failure. [ 2848.177985][ T4798] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2848.191437][ T4798] CPU: 0 PID: 4798 Comm: syz-executor.4 Tainted: G W 5.16.0-rc6-syzkaller #0 [ 2848.201542][ T4798] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2848.211623][ T4798] Call Trace: [ 2848.214903][ T4798] [ 2848.217840][ T4798] dump_stack_lvl+0xd6/0x122 [ 2848.222439][ T4798] dump_stack+0x11/0x1b [ 2848.226642][ T4798] should_fail+0x23c/0x250 [ 2848.231071][ T4798] __alloc_pages+0x102/0x330 [ 2848.235707][ T4798] alloc_pages+0x382/0x3d0 [ 2848.240131][ T4798] folio_alloc+0x1a/0x20 [ 2848.244384][ T4798] filemap_alloc_folio+0x53/0xf0 [ 2848.249377][ T4798] page_cache_ra_unbounded+0x1c0/0x430 [ 2848.254929][ T4798] ondemand_readahead+0x4f8/0x700 [ 2848.260038][ T4798] ? filemap_get_read_batch+0x3e2/0x410 [ 2848.265640][ T4798] page_cache_async_ra+0xed/0x120 [ 2848.270675][ T4798] filemap_read+0x500/0x16d0 [ 2848.275268][ T4798] ? __rcu_read_unlock+0x5c/0x290 [ 2848.280306][ T4798] generic_file_read_iter+0x72/0x2a0 [ 2848.285822][ T4798] ? iov_iter_pipe+0x100/0x150 [ 2848.290587][ T4798] ? ext4_file_read_iter+0x7a/0x1f0 [ 2848.295951][ T4798] generic_file_splice_read+0x24f/0x330 [ 2848.301584][ T4798] ? splice_shrink_spd+0x60/0x60 [ 2848.306522][ T4798] splice_direct_to_actor+0x2aa/0x650 [ 2848.311897][ T4798] ? do_splice_direct+0x190/0x190 [ 2848.317133][ T4798] do_splice_direct+0x106/0x190 [ 2848.321987][ T4798] do_sendfile+0x675/0xc40 [ 2848.326404][ T4798] __x64_sys_sendfile64+0x102/0x140 [ 2848.331766][ T4798] do_syscall_64+0x44/0xd0 [ 2848.336179][ T4798] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2848.342136][ T4798] RIP: 0033:0x7f2d29acae99 [ 2848.346593][ T4798] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2848.366407][ T4798] RSP: 002b:00007f2d28c41168 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 2848.374929][ T4798] RAX: ffffffffffffffda RBX: 00007f2d29bddf60 RCX: 00007f2d29acae99 [ 2848.382905][ T4798] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 2848.390923][ T4798] RBP: 00007f2d28c411d0 R08: 0000000000000000 R09: 0000000000000000 [ 2848.398887][ T4798] R10: 0000000000201000 R11: 0000000000000246 R12: 0000000000000002 [ 2848.406863][ T4798] R13: 00007ffcc1d93fdf R14: 00007f2d28c41300 R15: 0000000000022000 [ 2848.414968][ T4798] 14:48:38 executing program 0: openat(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/self/exe\x00', 0x0, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x2) write$evdev(r0, &(0x7f000004d000)=[{}], 0xfffffe82) openat(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/self/exe\x00', 0x0, 0x0) (async) syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x2) (async) write$evdev(r0, &(0x7f000004d000)=[{}], 0xfffffe82) (async) 14:48:38 executing program 2: clone(0x80910b00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) set_mempolicy(0x3, &(0x7f0000000040), 0x0) gettid() r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x2, 0x3, 0x2d8, 0x190, 0x190, 0x95ffffff, 0x77, 0x93ffffff, 0x240, 0x240, 0x221, 0x240, 0x240, 0x3, 0x0, {[{{@uncond, 0x0, 0x130, 0x190, 0x0, {0x0, 0x1c9}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "bdc74c01369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa6ecab6b1d2cc05e3182f64694d7d05fb8b8c8f56627a54f905d564eeeb8334f650ca0f3c44f7fda4d20a55050342ea85ecc8838e7088de33582f36a0a375bb7008adc297a5ece1bb2df53d17bef26bb6f800", 0x7f}}]}, @common=@SET={0x60}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'veth0_to_batadv\x00', 'ip6gretap0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x338) 14:48:38 executing program 5: clone(0x80910b00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) set_mempolicy(0x3, &(0x7f0000000040)=0xffffffff80000001, 0x400) gettid() r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, &(0x7f0000000080)=ANY=[@ANYBLOB="7549f8187a2a6e40594b4473692aef0dda6d1a46f2019ed7e86b1d711c76877056283bedab9579d2125c7cad3b1f28c963b3a626ef87b075574ff5612ccc80d8e14883ad2a8e6516a15c410ce005b2e841ebacd55a1365c685244ec3b66b003e7ec96ed005906d578130183c37"]) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x2, 0x3, 0x2d8, 0x190, 0x190, 0x95ffffff, 0x77, 0x93ffffff, 0x240, 0x240, 0x221, 0x240, 0x240, 0x3, 0x0, {[{{@uncond, 0x0, 0x130, 0x190, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "bdc74c01369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa6ecab6b1d2cc05e3182f64694d7d05fb8b8c8f56627a54f905d564eeeb8334f650ca0f3c44f7fda4d20a55050342ea85ecc8838e7088de33582f36a0a375bb7008adc297a5ece1bb2df53d17bef26bb6f800", 0x7f, 0x2}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0xdbffffff]}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'veth0_to_batadv\x00', 'ip6gretap0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x338) 14:48:38 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) r1 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) ftruncate(r1, 0x2007fff) close(r0) getsockopt$IP6T_SO_GET_INFO(r0, 0x29, 0x40, &(0x7f0000000000)={'nat\x00', 0x0, [0x6, 0xa3, 0x8, 0x5490, 0x1]}, &(0x7f0000000080)=0x54) open(&(0x7f00000002c0)='./bus\x00', 0x14d842, 0x0) sendfile(r0, r1, 0x0, 0x201000) socket$inet6(0xa, 0x1, 0x0) (async) open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) (async) ftruncate(r1, 0x2007fff) (async) close(r0) (async) getsockopt$IP6T_SO_GET_INFO(r0, 0x29, 0x40, &(0x7f0000000000)={'nat\x00', 0x0, [0x6, 0xa3, 0x8, 0x5490, 0x1]}, &(0x7f0000000080)=0x54) (async) open(&(0x7f00000002c0)='./bus\x00', 0x14d842, 0x0) (async) sendfile(r0, r1, 0x0, 0x201000) (async) 14:48:38 executing program 3: r0 = syz_io_uring_setup(0x2de5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000fe8000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000fe8000/0x4000)=nil, 0x4000, 0x200000f, 0x40010, r0, 0x0) (async) r4 = syz_io_uring_setup(0x5d66, &(0x7f00000002c0)={0x0, 0x0, 0x6, 0x0, 0x14b}, &(0x7f0000ee7000/0x1000)=nil, &(0x7f0000fe6000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r5, r6, &(0x7f00000000c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f00000003c0)}, 0x1010001) (async, rerun: 64) r7 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r4, 0x10000000) (rerun: 64) syz_io_uring_submit(r5, r7, &(0x7f0000000340)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd_index}, 0x0) (async) syz_io_uring_submit(r5, r7, &(0x7f0000000000)=@IORING_OP_SYNC_FILE_RANGE, 0x0) (async) syz_io_uring_submit(r5, r7, &(0x7f0000004040)=@IORING_OP_SYNC_FILE_RANGE, 0x0) (async) syz_io_uring_submit(r5, r6, &(0x7f0000000140)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) (async) syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_CLOSE, 0x0) (async, rerun: 32) syz_io_uring_submit(r5, r7, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE, 0x0) (rerun: 32) syz_io_uring_submit(r3, r7, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, 0xffffffffffffffff, 0x80, &(0x7f0000000200)=@l2tp6={0xa, 0x0, 0x6000000, @ipv4={'\x00', '\xff\xff', @empty}, 0x8, 0x3}}, 0x3) r8 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_int(r8, 0x29, 0xd1, &(0x7f0000000000)=0x4, 0x4) (async, rerun: 32) setsockopt$inet6_MRT6_ADD_MFC(r8, 0x29, 0xc8, 0x0, 0x4) (async, rerun: 32) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r8, 0x29, 0xc9, 0x0, 0x0) fgetxattr(r8, &(0x7f0000000100)=@random={'os2.', '&#}\x00'}, &(0x7f00000003c0)=""/4096, 0x1000) (async, rerun: 64) io_uring_enter(r0, 0xb2, 0x0, 0x0, 0x0, 0x7401) (rerun: 64) 14:48:38 executing program 4: r0 = socket$inet6(0xa, 0x400000000001, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) ftruncate(r1, 0x2007fff) close(r0) open(&(0x7f00000002c0)='./bus\x00', 0x14d842, 0x0) sendfile(r0, r1, 0x0, 0x201000) (fail_nth: 97) 14:48:38 executing program 5: clone(0x80910b00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) set_mempolicy(0x3, &(0x7f0000000040)=0xffffffff80000001, 0x400) gettid() r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, &(0x7f0000000080)=ANY=[@ANYBLOB="7549f8187a2a6e40594b4473692aef0dda6d1a46f2019ed7e86b1d711c76877056283bedab9579d2125c7cad3b1f28c963b3a626ef87b075574ff5612ccc80d8e14883ad2a8e6516a15c410ce005b2e841ebacd55a1365c685244ec3b66b003e7ec96ed005906d578130183c37"]) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x2, 0x3, 0x2d8, 0x190, 0x190, 0x95ffffff, 0x77, 0x93ffffff, 0x240, 0x240, 0x221, 0x240, 0x240, 0x3, 0x0, {[{{@uncond, 0x0, 0x130, 0x190, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "bdc74c01369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa6ecab6b1d2cc05e3182f64694d7d05fb8b8c8f56627a54f905d564eeeb8334f650ca0f3c44f7fda4d20a55050342ea85ecc8838e7088de33582f36a0a375bb7008adc297a5ece1bb2df53d17bef26bb6f800", 0x7f, 0x2}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0xdc010000]}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'veth0_to_batadv\x00', 'ip6gretap0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x338) 14:48:38 executing program 2: clone(0x80910b00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) set_mempolicy(0x3, &(0x7f0000000040), 0x0) gettid() r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x2, 0x3, 0x2d8, 0x190, 0x190, 0x95ffffff, 0x77, 0x93ffffff, 0x240, 0x240, 0x221, 0x240, 0x240, 0x3, 0x0, {[{{@uncond, 0x0, 0x130, 0x190, 0x0, {0x0, 0x1ce}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "bdc74c01369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa6ecab6b1d2cc05e3182f64694d7d05fb8b8c8f56627a54f905d564eeeb8334f650ca0f3c44f7fda4d20a55050342ea85ecc8838e7088de33582f36a0a375bb7008adc297a5ece1bb2df53d17bef26bb6f800", 0x7f}}]}, @common=@SET={0x60}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'veth0_to_batadv\x00', 'ip6gretap0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x338) [ 2848.714640][ T4851] FAULT_INJECTION: forcing a failure. [ 2848.714640][ T4851] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2848.728013][ T4851] CPU: 0 PID: 4851 Comm: syz-executor.4 Tainted: G W 5.16.0-rc6-syzkaller #0 [ 2848.738203][ T4851] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2848.748260][ T4851] Call Trace: [ 2848.751617][ T4851] [ 2848.754548][ T4851] dump_stack_lvl+0xd6/0x122 [ 2848.759158][ T4851] dump_stack+0x11/0x1b 14:48:38 executing program 5: clone(0x80910b00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) set_mempolicy(0x3, &(0x7f0000000040)=0xffffffff80000001, 0x400) gettid() r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, &(0x7f0000000080)=ANY=[@ANYBLOB="7549f8187a2a6e40594b4473692aef0dda6d1a46f2019ed7e86b1d711c76877056283bedab9579d2125c7cad3b1f28c963b3a626ef87b075574ff5612ccc80d8e14883ad2a8e6516a15c410ce005b2e841ebacd55a1365c685244ec3b66b003e7ec96ed005906d578130183c37"]) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x2, 0x3, 0x2d8, 0x190, 0x190, 0x95ffffff, 0x77, 0x93ffffff, 0x240, 0x240, 0x221, 0x240, 0x240, 0x3, 0x0, {[{{@uncond, 0x0, 0x130, 0x190, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "bdc74c01369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa6ecab6b1d2cc05e3182f64694d7d05fb8b8c8f56627a54f905d564eeeb8334f650ca0f3c44f7fda4d20a55050342ea85ecc8838e7088de33582f36a0a375bb7008adc297a5ece1bb2df53d17bef26bb6f800", 0x7f, 0x2}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0xddffffff]}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'veth0_to_batadv\x00', 'ip6gretap0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x338) [ 2848.763430][ T4851] should_fail+0x23c/0x250 [ 2848.768000][ T4851] __alloc_pages+0x102/0x330 [ 2848.772619][ T4851] alloc_pages+0x382/0x3d0 [ 2848.777128][ T4851] folio_alloc+0x1a/0x20 [ 2848.781394][ T4851] filemap_alloc_folio+0x53/0xf0 [ 2848.786425][ T4851] page_cache_ra_unbounded+0x1c0/0x430 [ 2848.791908][ T4851] ondemand_readahead+0x4f8/0x700 [ 2848.796950][ T4851] ? filemap_get_read_batch+0x3e2/0x410 [ 2848.802506][ T4851] page_cache_async_ra+0xed/0x120 [ 2848.807567][ T4851] filemap_read+0x500/0x16d0 14:48:38 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) (async) r1 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) ftruncate(r1, 0x2007fff) (async) close(r0) (async) getsockopt$IP6T_SO_GET_INFO(r0, 0x29, 0x40, &(0x7f0000000000)={'nat\x00', 0x0, [0x6, 0xa3, 0x8, 0x5490, 0x1]}, &(0x7f0000000080)=0x54) (async) open(&(0x7f00000002c0)='./bus\x00', 0x14d842, 0x0) (async) sendfile(r0, r1, 0x0, 0x201000) 14:48:38 executing program 3: r0 = syz_io_uring_setup(0x2de5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000fe8000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000fe8000/0x4000)=nil, 0x4000, 0x200000f, 0x40010, r0, 0x0) r4 = syz_io_uring_setup(0x5d66, &(0x7f00000002c0)={0x0, 0x0, 0x6, 0x0, 0x14b}, &(0x7f0000ee7000/0x1000)=nil, &(0x7f0000fe6000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r5, r6, &(0x7f00000000c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f00000003c0)}, 0x1010001) (async) r7 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r4, 0x10000000) syz_io_uring_submit(r5, r7, &(0x7f0000000340)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd_index}, 0x0) (async) syz_io_uring_submit(r5, r7, &(0x7f0000000000)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r5, r7, &(0x7f0000004040)=@IORING_OP_SYNC_FILE_RANGE, 0x0) (async) syz_io_uring_submit(r5, r6, &(0x7f0000000140)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_CLOSE, 0x0) (async) syz_io_uring_submit(r5, r7, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE, 0x0) syz_io_uring_submit(r3, r7, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, 0xffffffffffffffff, 0x80, &(0x7f0000000200)=@l2tp6={0xa, 0x0, 0x6000000, @ipv4={'\x00', '\xff\xff', @empty}, 0x8, 0x3}}, 0x3) (async) r8 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_int(r8, 0x29, 0xd1, &(0x7f0000000000)=0x4, 0x4) (async) setsockopt$inet6_MRT6_ADD_MFC(r8, 0x29, 0xc8, 0x0, 0x4) (async) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r8, 0x29, 0xc9, 0x0, 0x0) fgetxattr(r8, &(0x7f0000000100)=@random={'os2.', '&#}\x00'}, &(0x7f00000003c0)=""/4096, 0x1000) (async) io_uring_enter(r0, 0xb2, 0x0, 0x0, 0x0, 0x7401) [ 2848.812174][ T4851] ? __rcu_read_unlock+0x5c/0x290 [ 2848.817252][ T4851] generic_file_read_iter+0x72/0x2a0 [ 2848.822599][ T4851] ? iov_iter_pipe+0x100/0x150 [ 2848.827364][ T4851] ? ext4_file_read_iter+0x7a/0x1f0 [ 2848.832612][ T4851] generic_file_splice_read+0x24f/0x330 [ 2848.838169][ T4851] ? splice_shrink_spd+0x60/0x60 [ 2848.843266][ T4851] splice_direct_to_actor+0x2aa/0x650 [ 2848.848692][ T4851] ? do_splice_direct+0x190/0x190 [ 2848.853769][ T4851] do_splice_direct+0x106/0x190 [ 2848.858624][ T4851] do_sendfile+0x675/0xc40 [ 2848.863045][ T4851] __x64_sys_sendfile64+0x102/0x140 [ 2848.868244][ T4851] do_syscall_64+0x44/0xd0 [ 2848.872659][ T4851] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2848.878555][ T4851] RIP: 0033:0x7f2d29acae99 [ 2848.882979][ T4851] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2848.902762][ T4851] RSP: 002b:00007f2d28c41168 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 14:48:38 executing program 5: clone(0x80910b00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) set_mempolicy(0x3, &(0x7f0000000040)=0xffffffff80000001, 0x400) gettid() r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, &(0x7f0000000080)=ANY=[@ANYBLOB="7549f8187a2a6e40594b4473692aef0dda6d1a46f2019ed7e86b1d711c76877056283bedab9579d2125c7cad3b1f28c963b3a626ef87b075574ff5612ccc80d8e14883ad2a8e6516a15c410ce005b2e841ebacd55a1365c685244ec3b66b003e7ec96ed005906d578130183c37"]) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x2, 0x3, 0x2d8, 0x190, 0x190, 0x95ffffff, 0x77, 0x93ffffff, 0x240, 0x240, 0x221, 0x240, 0x240, 0x3, 0x0, {[{{@uncond, 0x0, 0x130, 0x190, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "bdc74c01369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa6ecab6b1d2cc05e3182f64694d7d05fb8b8c8f56627a54f905d564eeeb8334f650ca0f3c44f7fda4d20a55050342ea85ecc8838e7088de33582f36a0a375bb7008adc297a5ece1bb2df53d17bef26bb6f800", 0x7f, 0x2}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0xdeffffff]}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'veth0_to_batadv\x00', 'ip6gretap0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x338) [ 2848.911278][ T4851] RAX: ffffffffffffffda RBX: 00007f2d29bddf60 RCX: 00007f2d29acae99 [ 2848.919255][ T4851] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 2848.927218][ T4851] RBP: 00007f2d28c411d0 R08: 0000000000000000 R09: 0000000000000000 [ 2848.935186][ T4851] R10: 0000000000201000 R11: 0000000000000246 R12: 0000000000000002 [ 2848.943211][ T4851] R13: 00007ffcc1d93fdf R14: 00007f2d28c41300 R15: 0000000000022000 [ 2848.951178][ T4851] 14:48:39 executing program 0: openat(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/self/exe\x00', 0x0, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x2) write$evdev(r0, &(0x7f000004d000)=[{}], 0xfffffe82) 14:48:39 executing program 2: clone(0x80910b00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) set_mempolicy(0x3, &(0x7f0000000040), 0x0) gettid() r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x2, 0x3, 0x2d8, 0x190, 0x190, 0x95ffffff, 0x77, 0x93ffffff, 0x240, 0x240, 0x221, 0x240, 0x240, 0x3, 0x0, {[{{@uncond, 0x0, 0x130, 0x190, 0x0, {0x0, 0x1d1}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "bdc74c01369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa6ecab6b1d2cc05e3182f64694d7d05fb8b8c8f56627a54f905d564eeeb8334f650ca0f3c44f7fda4d20a55050342ea85ecc8838e7088de33582f36a0a375bb7008adc297a5ece1bb2df53d17bef26bb6f800", 0x7f}}]}, @common=@SET={0x60}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'veth0_to_batadv\x00', 'ip6gretap0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x338) 14:48:39 executing program 5: clone(0x80910b00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) set_mempolicy(0x3, &(0x7f0000000040)=0xffffffff80000001, 0x400) gettid() r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, &(0x7f0000000080)=ANY=[@ANYBLOB="7549f8187a2a6e40594b4473692aef0dda6d1a46f2019ed7e86b1d711c76877056283bedab9579d2125c7cad3b1f28c963b3a626ef87b075574ff5612ccc80d8e14883ad2a8e6516a15c410ce005b2e841ebacd55a1365c685244ec3b66b003e7ec96ed005906d578130183c37"]) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x2, 0x3, 0x2d8, 0x190, 0x190, 0x95ffffff, 0x77, 0x93ffffff, 0x240, 0x240, 0x221, 0x240, 0x240, 0x3, 0x0, {[{{@uncond, 0x0, 0x130, 0x190, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "bdc74c01369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa6ecab6b1d2cc05e3182f64694d7d05fb8b8c8f56627a54f905d564eeeb8334f650ca0f3c44f7fda4d20a55050342ea85ecc8838e7088de33582f36a0a375bb7008adc297a5ece1bb2df53d17bef26bb6f800", 0x7f, 0x2}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0xdf020000]}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'veth0_to_batadv\x00', 'ip6gretap0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x338) 14:48:39 executing program 3: r0 = syz_io_uring_setup(0x2de5, &(0x7f0000000000)={0x0, 0x10000, 0x0, 0x0, 0x4, 0x0, 0x0}, &(0x7f0000001000/0x3000)=nil, &(0x7f0000fe8000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_EPOLL_CTL=@del={0x1d, 0x5, 0x0, 0xffffffffffffffff, 0x0, r0, 0x2, 0x0, 0x1}, 0x0) syz_io_uring_setup(0x4b1e, &(0x7f0000000140)={0x0, 0x7c32, 0x14, 0x0, 0x2b7}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000200)=0x0) r5 = syz_io_uring_setup(0x5350, &(0x7f0000000240)={0x0, 0xffab, 0x10, 0x2, 0x207, 0x0, r0}, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000002c0), &(0x7f0000000300)=0x0) syz_io_uring_submit(r3, r6, &(0x7f0000000340)=@IORING_OP_POLL_ADD={0x6, 0x1, 0x0, @fd_index=0x8, 0x0, 0x0, 0x0, {0x1010}}, 0x27b) syz_io_uring_setup(0x5e0, &(0x7f0000000380)={0x0, 0x381f, 0x1, 0x3, 0x21f, 0x0, r0}, &(0x7f0000000000/0x3000)=nil, &(0x7f0000fe8000/0x4000)=nil, &(0x7f0000000400)=0x0, &(0x7f0000000440)) syz_mount_image$nfs4(&(0x7f0000000480), &(0x7f00000004c0)='./file0\x00', 0xa2, 0x3, &(0x7f0000000700)=[{&(0x7f0000000500)="b0ef2b1ffd8e7218668e43384a0420322a29", 0x12, 0x2}, {&(0x7f0000000540)="29a473d665d5cb09a5395e5f98cd78749fa8d8dd51d937fca8c937c4b92cfa33748374a2f707d129fd84da1d69e197c5b630c45b00868eb8b3d62eedf497465301929b08c9c1841ae6b60dd23228afee5956d6f787b9ed817d35ae546b7735999070450ca732c35bc7e1454d97b65b26d9bcba626590d0f591e9eba31574bcb9b6a1f0ae35e6f2db3b028a601696935d08e8da6e9d6c15120d149931562d407b9b4ad6a93f417986fb776687c122508d9809e376f54a85f6801ea8732f45827013b02a7d68665f8c782b33fb04321b00586a2a2e8343d4c483a8454d", 0xdc, 0xffff}, {&(0x7f0000000640)="4485dae48c65a0f8444fffda1eb5599c0e898bc7903dcd859ee211c7da42768653b08155b5c22d20eee329b70893d0795db268f4a56591e9a3ab4bbdc87a1e87e19cd14f6cabdad1daaf671d9ccf1640dab52f23547df8b3a47849396a02be4f66652d1643f0ffb3b5524e58a9a6a6eb4b751a4a8dcfaf06fe0f6e4c00c4c809ded3b4658c7c3506635aa26a4e4f401eec46ef5447c7a303bd0b530a1d097672fe22359ed25d30f74abff540f96a452060c496", 0xb3, 0x5}], 0x80000, &(0x7f0000000840)=ANY=[@ANYBLOB="2c0060c23c2c002c00"]) io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r9 = socket$inet6(0xa, 0x3, 0x2c) connect$inet6(r9, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r9, 0x29, 0x7, &(0x7f0000000080)=0x2, 0x4) splice(r8, 0x0, r9, 0x0, 0x4ff9c, 0x0) r10 = io_uring_setup(0x2096, &(0x7f00000007c0)={0x0, 0xfffffffc, 0x20, 0x3ffe, 0x269}) io_uring_register$IORING_REGISTER_PERSONALITY(r10, 0x9, 0x0, 0x0) r11 = io_uring_register$IORING_REGISTER_PERSONALITY(r10, 0x9, 0x0, 0x0) getsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000009680), 0x10) io_uring_register$IORING_UNREGISTER_PERSONALITY(r10, 0x13, 0x20000000, r11) syz_io_uring_submit(r7, r4, &(0x7f0000000900)=@IORING_OP_FALLOCATE={0x11, 0x3, 0x0, @fd_index=0x6, 0x0, 0x0, 0x9, 0x0, 0x0, {0x0, r11}}, 0x401) io_uring_enter(r0, 0xb2, 0x0, 0x0, 0x0, 0x7401) 14:48:39 executing program 1: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) ftruncate(r1, 0x2007fff) socketpair(0x0, 0x1, 0x6, &(0x7f00000001c0)={0xffffffffffffffff}) recvmsg(r2, &(0x7f0000000740)={&(0x7f0000000200)=@l2, 0x80, &(0x7f0000000280)=[{&(0x7f0000000300)=""/117, 0x75}, {&(0x7f0000000380)=""/214, 0xd6}, {&(0x7f0000000480)=""/197, 0xc5}, {&(0x7f0000000580)=""/179, 0xb3}], 0x4, &(0x7f0000000640)=""/233, 0xe9}, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e24, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7ff}, 0x1c) close(r0) open(&(0x7f00000002c0)='./bus\x00', 0x14d842, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000000)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4, 0x1, 0x0, 0x9, 0x6}, 0x20) sendfile(r0, r1, 0x0, 0x201000) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0xa20000, 0x0) r4 = socket$unix(0x1, 0x2, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0xee01, r5, 0xffffffffffffffff) setsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f00000000c0)={{{@in6=@remote, @in6=@local, 0x4e20, 0x6, 0x4e22, 0xff81, 0xa, 0x80, 0x80, 0xc, 0x0, r5}, {0xffff, 0x1, 0x4, 0xffffffff, 0xdfc, 0x972, 0xec, 0x1}, {0x400000000000, 0x7, 0x5, 0x7}, 0x2, 0x6e6bb4, 0x1, 0x1, 0x3, 0x1}, {{@in6=@private0, 0x4d5, 0xfe}, 0x2, @in=@multicast1, 0x3500, 0x6, 0x1, 0xfc, 0x0, 0x8, 0x1ff}}, 0xe8) 14:48:39 executing program 4: r0 = socket$inet6(0xa, 0x400000000001, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) ftruncate(r1, 0x2007fff) close(r0) open(&(0x7f00000002c0)='./bus\x00', 0x14d842, 0x0) sendfile(r0, r1, 0x0, 0x201000) (fail_nth: 98) 14:48:39 executing program 5: clone(0x80910b00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) set_mempolicy(0x3, &(0x7f0000000040)=0xffffffff80000001, 0x400) gettid() r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, &(0x7f0000000080)=ANY=[@ANYBLOB="7549f8187a2a6e40594b4473692aef0dda6d1a46f2019ed7e86b1d711c76877056283bedab9579d2125c7cad3b1f28c963b3a626ef87b075574ff5612ccc80d8e14883ad2a8e6516a15c410ce005b2e841ebacd55a1365c685244ec3b66b003e7ec96ed005906d578130183c37"]) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x2, 0x3, 0x2d8, 0x190, 0x190, 0x95ffffff, 0x77, 0x93ffffff, 0x240, 0x240, 0x221, 0x240, 0x240, 0x3, 0x0, {[{{@uncond, 0x0, 0x130, 0x190, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "bdc74c01369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa6ecab6b1d2cc05e3182f64694d7d05fb8b8c8f56627a54f905d564eeeb8334f650ca0f3c44f7fda4d20a55050342ea85ecc8838e7088de33582f36a0a375bb7008adc297a5ece1bb2df53d17bef26bb6f800", 0x7f, 0x2}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0xe0000000]}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'veth0_to_batadv\x00', 'ip6gretap0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x338) 14:48:39 executing program 2: clone(0x80910b00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) set_mempolicy(0x3, &(0x7f0000000040), 0x0) gettid() r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x2, 0x3, 0x2d8, 0x190, 0x190, 0x95ffffff, 0x77, 0x93ffffff, 0x240, 0x240, 0x221, 0x240, 0x240, 0x3, 0x0, {[{{@uncond, 0x0, 0x130, 0x190, 0x0, {0x0, 0x1d2}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "bdc74c01369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa6ecab6b1d2cc05e3182f64694d7d05fb8b8c8f56627a54f905d564eeeb8334f650ca0f3c44f7fda4d20a55050342ea85ecc8838e7088de33582f36a0a375bb7008adc297a5ece1bb2df53d17bef26bb6f800", 0x7f}}]}, @common=@SET={0x60}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'veth0_to_batadv\x00', 'ip6gretap0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x338) [ 2849.723995][ T5106] FAULT_INJECTION: forcing a failure. [ 2849.723995][ T5106] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2849.737309][ T5106] CPU: 0 PID: 5106 Comm: syz-executor.4 Tainted: G W 5.16.0-rc6-syzkaller #0 [ 2849.747384][ T5106] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2849.757503][ T5106] Call Trace: [ 2849.760861][ T5106] [ 2849.763803][ T5106] dump_stack_lvl+0xd6/0x122 [ 2849.768438][ T5106] dump_stack+0x11/0x1b [ 2849.772596][ T5106] should_fail+0x23c/0x250 [ 2849.777136][ T5106] __alloc_pages+0x102/0x330 [ 2849.781758][ T5106] alloc_pages+0x382/0x3d0 [ 2849.786177][ T5106] folio_alloc+0x1a/0x20 [ 2849.790463][ T5106] filemap_alloc_folio+0x53/0xf0 [ 2849.795431][ T5106] page_cache_ra_unbounded+0x1c0/0x430 [ 2849.800898][ T5106] ondemand_readahead+0x4f8/0x700 [ 2849.805935][ T5106] ? filemap_get_read_batch+0x3e2/0x410 [ 2849.811540][ T5106] page_cache_async_ra+0xed/0x120 [ 2849.816622][ T5106] filemap_read+0x500/0x16d0 14:48:39 executing program 3: r0 = syz_io_uring_setup(0x2de5, &(0x7f0000000000)={0x0, 0x10000, 0x0, 0x0, 0x4, 0x0, 0x0}, &(0x7f0000001000/0x3000)=nil, &(0x7f0000fe8000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_EPOLL_CTL=@del={0x1d, 0x5, 0x0, 0xffffffffffffffff, 0x0, r0, 0x2, 0x0, 0x1}, 0x0) syz_io_uring_setup(0x4b1e, &(0x7f0000000140)={0x0, 0x7c32, 0x14, 0x0, 0x2b7}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000200)=0x0) r5 = syz_io_uring_setup(0x5350, &(0x7f0000000240)={0x0, 0xffab, 0x10, 0x2, 0x207, 0x0, r0}, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000002c0), &(0x7f0000000300)=0x0) syz_io_uring_submit(r3, r6, &(0x7f0000000340)=@IORING_OP_POLL_ADD={0x6, 0x1, 0x0, @fd_index=0x8, 0x0, 0x0, 0x0, {0x1010}}, 0x27b) syz_io_uring_setup(0x5e0, &(0x7f0000000380)={0x0, 0x381f, 0x1, 0x3, 0x21f, 0x0, r0}, &(0x7f0000000000/0x3000)=nil, &(0x7f0000fe8000/0x4000)=nil, &(0x7f0000000400)=0x0, &(0x7f0000000440)) syz_mount_image$nfs4(&(0x7f0000000480), &(0x7f00000004c0)='./file0\x00', 0xa2, 0x3, &(0x7f0000000700)=[{&(0x7f0000000500)="b0ef2b1ffd8e7218668e43384a0420322a29", 0x12, 0x2}, {&(0x7f0000000540)="29a473d665d5cb09a5395e5f98cd78749fa8d8dd51d937fca8c937c4b92cfa33748374a2f707d129fd84da1d69e197c5b630c45b00868eb8b3d62eedf497465301929b08c9c1841ae6b60dd23228afee5956d6f787b9ed817d35ae546b7735999070450ca732c35bc7e1454d97b65b26d9bcba626590d0f591e9eba31574bcb9b6a1f0ae35e6f2db3b028a601696935d08e8da6e9d6c15120d149931562d407b9b4ad6a93f417986fb776687c122508d9809e376f54a85f6801ea8732f45827013b02a7d68665f8c782b33fb04321b00586a2a2e8343d4c483a8454d", 0xdc, 0xffff}, {&(0x7f0000000640)="4485dae48c65a0f8444fffda1eb5599c0e898bc7903dcd859ee211c7da42768653b08155b5c22d20eee329b70893d0795db268f4a56591e9a3ab4bbdc87a1e87e19cd14f6cabdad1daaf671d9ccf1640dab52f23547df8b3a47849396a02be4f66652d1643f0ffb3b5524e58a9a6a6eb4b751a4a8dcfaf06fe0f6e4c00c4c809ded3b4658c7c3506635aa26a4e4f401eec46ef5447c7a303bd0b530a1d097672fe22359ed25d30f74abff540f96a452060c496", 0xb3, 0x5}], 0x80000, &(0x7f0000000840)=ANY=[@ANYBLOB="2c0060c23c2c002c00"]) io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r9 = socket$inet6(0xa, 0x3, 0x2c) connect$inet6(r9, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r9, 0x29, 0x7, &(0x7f0000000080)=0x2, 0x4) splice(r8, 0x0, r9, 0x0, 0x4ff9c, 0x0) r10 = io_uring_setup(0x2096, &(0x7f00000007c0)={0x0, 0xfffffffc, 0x20, 0x3ffe, 0x269}) io_uring_register$IORING_REGISTER_PERSONALITY(r10, 0x9, 0x0, 0x0) r11 = io_uring_register$IORING_REGISTER_PERSONALITY(r10, 0x9, 0x0, 0x0) getsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000009680), 0x10) io_uring_register$IORING_UNREGISTER_PERSONALITY(r10, 0x13, 0x20000000, r11) syz_io_uring_submit(r7, r4, &(0x7f0000000900)=@IORING_OP_FALLOCATE={0x11, 0x3, 0x0, @fd_index=0x6, 0x0, 0x0, 0x9, 0x0, 0x0, {0x0, r11}}, 0x401) io_uring_enter(r0, 0xb2, 0x0, 0x0, 0x0, 0x7401) syz_io_uring_setup(0x2de5, &(0x7f0000000000)={0x0, 0x10000, 0x0, 0x0, 0x4, 0x0, 0x0}, &(0x7f0000001000/0x3000)=nil, &(0x7f0000fe8000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) (async) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_EPOLL_CTL=@del={0x1d, 0x5, 0x0, 0xffffffffffffffff, 0x0, r0, 0x2, 0x0, 0x1}, 0x0) (async) syz_io_uring_setup(0x4b1e, &(0x7f0000000140)={0x0, 0x7c32, 0x14, 0x0, 0x2b7}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000200)) (async) syz_io_uring_setup(0x5350, &(0x7f0000000240)={0x0, 0xffab, 0x10, 0x2, 0x207, 0x0, r0}, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000002c0), &(0x7f0000000300)) (async) syz_io_uring_submit(r3, r6, &(0x7f0000000340)=@IORING_OP_POLL_ADD={0x6, 0x1, 0x0, @fd_index=0x8, 0x0, 0x0, 0x0, {0x1010}}, 0x27b) (async) syz_io_uring_setup(0x5e0, &(0x7f0000000380)={0x0, 0x381f, 0x1, 0x3, 0x21f, 0x0, r0}, &(0x7f0000000000/0x3000)=nil, &(0x7f0000fe8000/0x4000)=nil, &(0x7f0000000400), &(0x7f0000000440)) (async) syz_mount_image$nfs4(&(0x7f0000000480), &(0x7f00000004c0)='./file0\x00', 0xa2, 0x3, &(0x7f0000000700)=[{&(0x7f0000000500)="b0ef2b1ffd8e7218668e43384a0420322a29", 0x12, 0x2}, {&(0x7f0000000540)="29a473d665d5cb09a5395e5f98cd78749fa8d8dd51d937fca8c937c4b92cfa33748374a2f707d129fd84da1d69e197c5b630c45b00868eb8b3d62eedf497465301929b08c9c1841ae6b60dd23228afee5956d6f787b9ed817d35ae546b7735999070450ca732c35bc7e1454d97b65b26d9bcba626590d0f591e9eba31574bcb9b6a1f0ae35e6f2db3b028a601696935d08e8da6e9d6c15120d149931562d407b9b4ad6a93f417986fb776687c122508d9809e376f54a85f6801ea8732f45827013b02a7d68665f8c782b33fb04321b00586a2a2e8343d4c483a8454d", 0xdc, 0xffff}, {&(0x7f0000000640)="4485dae48c65a0f8444fffda1eb5599c0e898bc7903dcd859ee211c7da42768653b08155b5c22d20eee329b70893d0795db268f4a56591e9a3ab4bbdc87a1e87e19cd14f6cabdad1daaf671d9ccf1640dab52f23547df8b3a47849396a02be4f66652d1643f0ffb3b5524e58a9a6a6eb4b751a4a8dcfaf06fe0f6e4c00c4c809ded3b4658c7c3506635aa26a4e4f401eec46ef5447c7a303bd0b530a1d097672fe22359ed25d30f74abff540f96a452060c496", 0xb3, 0x5}], 0x80000, &(0x7f0000000840)=ANY=[@ANYBLOB="2c0060c23c2c002c00"]) (async) io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) (async) pipe(&(0x7f0000000180)) (async) socket$inet6(0xa, 0x3, 0x2c) (async) connect$inet6(r9, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) (async) setsockopt$inet6_int(r9, 0x29, 0x7, &(0x7f0000000080)=0x2, 0x4) (async) splice(r8, 0x0, r9, 0x0, 0x4ff9c, 0x0) (async) io_uring_setup(0x2096, &(0x7f00000007c0)={0x0, 0xfffffffc, 0x20, 0x3ffe, 0x269}) (async) io_uring_register$IORING_REGISTER_PERSONALITY(r10, 0x9, 0x0, 0x0) (async) io_uring_register$IORING_REGISTER_PERSONALITY(r10, 0x9, 0x0, 0x0) (async) getsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000009680), 0x10) (async) io_uring_register$IORING_UNREGISTER_PERSONALITY(r10, 0x13, 0x20000000, r11) (async) syz_io_uring_submit(r7, r4, &(0x7f0000000900)=@IORING_OP_FALLOCATE={0x11, 0x3, 0x0, @fd_index=0x6, 0x0, 0x0, 0x9, 0x0, 0x0, {0x0, r11}}, 0x401) (async) io_uring_enter(r0, 0xb2, 0x0, 0x0, 0x0, 0x7401) (async) [ 2849.821216][ T5106] ? __rcu_read_unlock+0x5c/0x290 [ 2849.826240][ T5106] generic_file_read_iter+0x72/0x2a0 [ 2849.831529][ T5106] ? iov_iter_pipe+0x100/0x150 [ 2849.836340][ T5106] ? ext4_file_read_iter+0x7a/0x1f0 [ 2849.841537][ T5106] generic_file_splice_read+0x24f/0x330 [ 2849.847090][ T5106] ? splice_shrink_spd+0x60/0x60 [ 2849.852038][ T5106] splice_direct_to_actor+0x2aa/0x650 [ 2849.857434][ T5106] ? do_splice_direct+0x190/0x190 [ 2849.862505][ T5106] do_splice_direct+0x106/0x190 [ 2849.867425][ T5106] do_sendfile+0x675/0xc40 [ 2849.871979][ T5106] __x64_sys_sendfile64+0x102/0x140 [ 2849.877178][ T5106] do_syscall_64+0x44/0xd0 [ 2849.881733][ T5106] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2849.887632][ T5106] RIP: 0033:0x7f2d29acae99 [ 2849.892060][ T5106] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2849.911739][ T5106] RSP: 002b:00007f2d28c41168 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 14:48:39 executing program 5: clone(0x80910b00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) set_mempolicy(0x3, &(0x7f0000000040)=0xffffffff80000001, 0x400) gettid() r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, &(0x7f0000000080)=ANY=[@ANYBLOB="7549f8187a2a6e40594b4473692aef0dda6d1a46f2019ed7e86b1d711c76877056283bedab9579d2125c7cad3b1f28c963b3a626ef87b075574ff5612ccc80d8e14883ad2a8e6516a15c410ce005b2e841ebacd55a1365c685244ec3b66b003e7ec96ed005906d578130183c37"]) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x2, 0x3, 0x2d8, 0x190, 0x190, 0x95ffffff, 0x77, 0x93ffffff, 0x240, 0x240, 0x221, 0x240, 0x240, 0x3, 0x0, {[{{@uncond, 0x0, 0x130, 0x190, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "bdc74c01369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa6ecab6b1d2cc05e3182f64694d7d05fb8b8c8f56627a54f905d564eeeb8334f650ca0f3c44f7fda4d20a55050342ea85ecc8838e7088de33582f36a0a375bb7008adc297a5ece1bb2df53d17bef26bb6f800", 0x7f, 0x2}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0xe2020000]}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'veth0_to_batadv\x00', 'ip6gretap0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x338) 14:48:39 executing program 2: clone(0x80910b00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) set_mempolicy(0x3, &(0x7f0000000040), 0x0) gettid() r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x2, 0x3, 0x2d8, 0x190, 0x190, 0x95ffffff, 0x77, 0x93ffffff, 0x240, 0x240, 0x221, 0x240, 0x240, 0x3, 0x0, {[{{@uncond, 0x0, 0x130, 0x190, 0x0, {0x0, 0x1d6}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "bdc74c01369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa6ecab6b1d2cc05e3182f64694d7d05fb8b8c8f56627a54f905d564eeeb8334f650ca0f3c44f7fda4d20a55050342ea85ecc8838e7088de33582f36a0a375bb7008adc297a5ece1bb2df53d17bef26bb6f800", 0x7f}}]}, @common=@SET={0x60}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'veth0_to_batadv\x00', 'ip6gretap0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x338) [ 2849.920145][ T5106] RAX: ffffffffffffffda RBX: 00007f2d29bddf60 RCX: 00007f2d29acae99 [ 2849.928144][ T5106] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 2849.936150][ T5106] RBP: 00007f2d28c411d0 R08: 0000000000000000 R09: 0000000000000000 [ 2849.944117][ T5106] R10: 0000000000201000 R11: 0000000000000246 R12: 0000000000000002 [ 2849.952083][ T5106] R13: 00007ffcc1d93fdf R14: 00007f2d28c41300 R15: 0000000000022000 [ 2849.960164][ T5106] 14:48:40 executing program 2: clone(0x80910b00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) set_mempolicy(0x3, &(0x7f0000000040), 0x0) gettid() r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x2, 0x3, 0x2d8, 0x190, 0x190, 0x95ffffff, 0x77, 0x93ffffff, 0x240, 0x240, 0x221, 0x240, 0x240, 0x3, 0x0, {[{{@uncond, 0x0, 0x130, 0x190, 0x0, {0x0, 0x1d8}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "bdc74c01369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa6ecab6b1d2cc05e3182f64694d7d05fb8b8c8f56627a54f905d564eeeb8334f650ca0f3c44f7fda4d20a55050342ea85ecc8838e7088de33582f36a0a375bb7008adc297a5ece1bb2df53d17bef26bb6f800", 0x7f}}]}, @common=@SET={0x60}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'veth0_to_batadv\x00', 'ip6gretap0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x338) 14:48:40 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/self/exe\x00', 0x0, 0x0) ioctl$AUTOFS_IOC_EXPIRE(r0, 0x810c9365, &(0x7f0000000200)={{0x6, 0x8da4}, 0x100, './file0\x00'}) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r2 = socket$inet6(0xa, 0x3, 0x2c) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r2, 0x29, 0x7, &(0x7f0000000080)=0x2, 0x4) splice(r1, 0x0, r2, 0x0, 0x4ff9c, 0x0) fchmodat(r1, &(0x7f0000000040)='./file0\x00', 0x20) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x2) pipe2(&(0x7f0000000100)={0xffffffffffffffff}, 0x0) r4 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_int(r4, 0x29, 0xd1, &(0x7f0000000000)=0x4, 0x4) setsockopt$inet6_MRT6_ADD_MFC(r4, 0x29, 0xc8, 0x0, 0x4) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r4, 0x29, 0xc9, 0x0, 0x0) setsockopt$inet6_int(r4, 0x29, 0x11, &(0x7f0000000140)=0x2, 0x4) write$evdev(r3, &(0x7f00000000c0)=[{}, {{}, 0x1f, 0x5, 0x80000000}], 0x30) 14:48:40 executing program 2: clone(0x80910b00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) set_mempolicy(0x3, &(0x7f0000000040), 0x0) gettid() r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x2, 0x3, 0x2d8, 0x190, 0x190, 0x95ffffff, 0x77, 0x93ffffff, 0x240, 0x240, 0x221, 0x240, 0x240, 0x3, 0x0, {[{{@uncond, 0x0, 0x130, 0x190, 0x0, {0x0, 0x1d9}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "bdc74c01369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa6ecab6b1d2cc05e3182f64694d7d05fb8b8c8f56627a54f905d564eeeb8334f650ca0f3c44f7fda4d20a55050342ea85ecc8838e7088de33582f36a0a375bb7008adc297a5ece1bb2df53d17bef26bb6f800", 0x7f}}]}, @common=@SET={0x60}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'veth0_to_batadv\x00', 'ip6gretap0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x338) 14:48:40 executing program 5: clone(0x80910b00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) set_mempolicy(0x3, &(0x7f0000000040)=0xffffffff80000001, 0x400) gettid() r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, &(0x7f0000000080)=ANY=[@ANYBLOB="7549f8187a2a6e40594b4473692aef0dda6d1a46f2019ed7e86b1d711c76877056283bedab9579d2125c7cad3b1f28c963b3a626ef87b075574ff5612ccc80d8e14883ad2a8e6516a15c410ce005b2e841ebacd55a1365c685244ec3b66b003e7ec96ed005906d578130183c37"]) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x2, 0x3, 0x2d8, 0x190, 0x190, 0x95ffffff, 0x77, 0x93ffffff, 0x240, 0x240, 0x221, 0x240, 0x240, 0x3, 0x0, {[{{@uncond, 0x0, 0x130, 0x190, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "bdc74c01369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa6ecab6b1d2cc05e3182f64694d7d05fb8b8c8f56627a54f905d564eeeb8334f650ca0f3c44f7fda4d20a55050342ea85ecc8838e7088de33582f36a0a375bb7008adc297a5ece1bb2df53d17bef26bb6f800", 0x7f, 0x2}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0xe8010000]}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'veth0_to_batadv\x00', 'ip6gretap0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x338) 14:48:40 executing program 1: r0 = socket$inet6(0xa, 0x400000000001, 0x0) (async) r1 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) ftruncate(r1, 0x2007fff) (async) socketpair(0x0, 0x1, 0x6, &(0x7f00000001c0)={0xffffffffffffffff}) recvmsg(r2, &(0x7f0000000740)={&(0x7f0000000200)=@l2, 0x80, &(0x7f0000000280)=[{&(0x7f0000000300)=""/117, 0x75}, {&(0x7f0000000380)=""/214, 0xd6}, {&(0x7f0000000480)=""/197, 0xc5}, {&(0x7f0000000580)=""/179, 0xb3}], 0x4, &(0x7f0000000640)=""/233, 0xe9}, 0x0) (async) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e24, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7ff}, 0x1c) (async) close(r0) (async) open(&(0x7f00000002c0)='./bus\x00', 0x14d842, 0x0) (async) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000000)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4, 0x1, 0x0, 0x9, 0x6}, 0x20) (async) sendfile(r0, r1, 0x0, 0x201000) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0xa20000, 0x0) r4 = socket$unix(0x1, 0x2, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0xee01, r5, 0xffffffffffffffff) setsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f00000000c0)={{{@in6=@remote, @in6=@local, 0x4e20, 0x6, 0x4e22, 0xff81, 0xa, 0x80, 0x80, 0xc, 0x0, r5}, {0xffff, 0x1, 0x4, 0xffffffff, 0xdfc, 0x972, 0xec, 0x1}, {0x400000000000, 0x7, 0x5, 0x7}, 0x2, 0x6e6bb4, 0x1, 0x1, 0x3, 0x1}, {{@in6=@private0, 0x4d5, 0xfe}, 0x2, @in=@multicast1, 0x3500, 0x6, 0x1, 0xfc, 0x0, 0x8, 0x1ff}}, 0xe8) 14:48:40 executing program 4: r0 = socket$inet6(0xa, 0x400000000001, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) ftruncate(r1, 0x2007fff) close(r0) open(&(0x7f00000002c0)='./bus\x00', 0x14d842, 0x0) sendfile(r0, r1, 0x0, 0x201000) (fail_nth: 99) 14:48:40 executing program 3: r0 = syz_io_uring_setup(0x2de5, &(0x7f0000000000)={0x0, 0x10000, 0x0, 0x0, 0x4, 0x0, 0x0}, &(0x7f0000001000/0x3000)=nil, &(0x7f0000fe8000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_EPOLL_CTL=@del={0x1d, 0x5, 0x0, 0xffffffffffffffff, 0x0, r0, 0x2, 0x0, 0x1}, 0x0) syz_io_uring_setup(0x4b1e, &(0x7f0000000140)={0x0, 0x7c32, 0x14, 0x0, 0x2b7}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000200)=0x0) r5 = syz_io_uring_setup(0x5350, &(0x7f0000000240)={0x0, 0xffab, 0x10, 0x2, 0x207, 0x0, r0}, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000002c0), &(0x7f0000000300)=0x0) syz_io_uring_submit(r3, r6, &(0x7f0000000340)=@IORING_OP_POLL_ADD={0x6, 0x1, 0x0, @fd_index=0x8, 0x0, 0x0, 0x0, {0x1010}}, 0x27b) syz_io_uring_setup(0x5e0, &(0x7f0000000380)={0x0, 0x381f, 0x1, 0x3, 0x21f, 0x0, r0}, &(0x7f0000000000/0x3000)=nil, &(0x7f0000fe8000/0x4000)=nil, &(0x7f0000000400)=0x0, &(0x7f0000000440)) syz_mount_image$nfs4(&(0x7f0000000480), &(0x7f00000004c0)='./file0\x00', 0xa2, 0x3, &(0x7f0000000700)=[{&(0x7f0000000500)="b0ef2b1ffd8e7218668e43384a0420322a29", 0x12, 0x2}, {&(0x7f0000000540)="29a473d665d5cb09a5395e5f98cd78749fa8d8dd51d937fca8c937c4b92cfa33748374a2f707d129fd84da1d69e197c5b630c45b00868eb8b3d62eedf497465301929b08c9c1841ae6b60dd23228afee5956d6f787b9ed817d35ae546b7735999070450ca732c35bc7e1454d97b65b26d9bcba626590d0f591e9eba31574bcb9b6a1f0ae35e6f2db3b028a601696935d08e8da6e9d6c15120d149931562d407b9b4ad6a93f417986fb776687c122508d9809e376f54a85f6801ea8732f45827013b02a7d68665f8c782b33fb04321b00586a2a2e8343d4c483a8454d", 0xdc, 0xffff}, {&(0x7f0000000640)="4485dae48c65a0f8444fffda1eb5599c0e898bc7903dcd859ee211c7da42768653b08155b5c22d20eee329b70893d0795db268f4a56591e9a3ab4bbdc87a1e87e19cd14f6cabdad1daaf671d9ccf1640dab52f23547df8b3a47849396a02be4f66652d1643f0ffb3b5524e58a9a6a6eb4b751a4a8dcfaf06fe0f6e4c00c4c809ded3b4658c7c3506635aa26a4e4f401eec46ef5447c7a303bd0b530a1d097672fe22359ed25d30f74abff540f96a452060c496", 0xb3, 0x5}], 0x80000, &(0x7f0000000840)=ANY=[@ANYBLOB="2c0060c23c2c002c00"]) io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r9 = socket$inet6(0xa, 0x3, 0x2c) connect$inet6(r9, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r9, 0x29, 0x7, &(0x7f0000000080)=0x2, 0x4) splice(r8, 0x0, r9, 0x0, 0x4ff9c, 0x0) r10 = io_uring_setup(0x2096, &(0x7f00000007c0)={0x0, 0xfffffffc, 0x20, 0x3ffe, 0x269}) io_uring_register$IORING_REGISTER_PERSONALITY(r10, 0x9, 0x0, 0x0) r11 = io_uring_register$IORING_REGISTER_PERSONALITY(r10, 0x9, 0x0, 0x0) getsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000009680), 0x10) io_uring_register$IORING_UNREGISTER_PERSONALITY(r10, 0x13, 0x20000000, r11) syz_io_uring_submit(r7, r4, &(0x7f0000000900)=@IORING_OP_FALLOCATE={0x11, 0x3, 0x0, @fd_index=0x6, 0x0, 0x0, 0x9, 0x0, 0x0, {0x0, r11}}, 0x401) io_uring_enter(r0, 0xb2, 0x0, 0x0, 0x0, 0x7401) syz_io_uring_setup(0x2de5, &(0x7f0000000000)={0x0, 0x10000, 0x0, 0x0, 0x4, 0x0, 0x0}, &(0x7f0000001000/0x3000)=nil, &(0x7f0000fe8000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) (async) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_EPOLL_CTL=@del={0x1d, 0x5, 0x0, 0xffffffffffffffff, 0x0, r0, 0x2, 0x0, 0x1}, 0x0) (async) syz_io_uring_setup(0x4b1e, &(0x7f0000000140)={0x0, 0x7c32, 0x14, 0x0, 0x2b7}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000200)) (async) syz_io_uring_setup(0x5350, &(0x7f0000000240)={0x0, 0xffab, 0x10, 0x2, 0x207, 0x0, r0}, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000002c0), &(0x7f0000000300)) (async) syz_io_uring_submit(r3, r6, &(0x7f0000000340)=@IORING_OP_POLL_ADD={0x6, 0x1, 0x0, @fd_index=0x8, 0x0, 0x0, 0x0, {0x1010}}, 0x27b) (async) syz_io_uring_setup(0x5e0, &(0x7f0000000380)={0x0, 0x381f, 0x1, 0x3, 0x21f, 0x0, r0}, &(0x7f0000000000/0x3000)=nil, &(0x7f0000fe8000/0x4000)=nil, &(0x7f0000000400), &(0x7f0000000440)) (async) syz_mount_image$nfs4(&(0x7f0000000480), &(0x7f00000004c0)='./file0\x00', 0xa2, 0x3, &(0x7f0000000700)=[{&(0x7f0000000500)="b0ef2b1ffd8e7218668e43384a0420322a29", 0x12, 0x2}, {&(0x7f0000000540)="29a473d665d5cb09a5395e5f98cd78749fa8d8dd51d937fca8c937c4b92cfa33748374a2f707d129fd84da1d69e197c5b630c45b00868eb8b3d62eedf497465301929b08c9c1841ae6b60dd23228afee5956d6f787b9ed817d35ae546b7735999070450ca732c35bc7e1454d97b65b26d9bcba626590d0f591e9eba31574bcb9b6a1f0ae35e6f2db3b028a601696935d08e8da6e9d6c15120d149931562d407b9b4ad6a93f417986fb776687c122508d9809e376f54a85f6801ea8732f45827013b02a7d68665f8c782b33fb04321b00586a2a2e8343d4c483a8454d", 0xdc, 0xffff}, {&(0x7f0000000640)="4485dae48c65a0f8444fffda1eb5599c0e898bc7903dcd859ee211c7da42768653b08155b5c22d20eee329b70893d0795db268f4a56591e9a3ab4bbdc87a1e87e19cd14f6cabdad1daaf671d9ccf1640dab52f23547df8b3a47849396a02be4f66652d1643f0ffb3b5524e58a9a6a6eb4b751a4a8dcfaf06fe0f6e4c00c4c809ded3b4658c7c3506635aa26a4e4f401eec46ef5447c7a303bd0b530a1d097672fe22359ed25d30f74abff540f96a452060c496", 0xb3, 0x5}], 0x80000, &(0x7f0000000840)=ANY=[@ANYBLOB="2c0060c23c2c002c00"]) (async) io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) (async) pipe(&(0x7f0000000180)) (async) socket$inet6(0xa, 0x3, 0x2c) (async) connect$inet6(r9, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) (async) setsockopt$inet6_int(r9, 0x29, 0x7, &(0x7f0000000080)=0x2, 0x4) (async) splice(r8, 0x0, r9, 0x0, 0x4ff9c, 0x0) (async) io_uring_setup(0x2096, &(0x7f00000007c0)={0x0, 0xfffffffc, 0x20, 0x3ffe, 0x269}) (async) io_uring_register$IORING_REGISTER_PERSONALITY(r10, 0x9, 0x0, 0x0) (async) io_uring_register$IORING_REGISTER_PERSONALITY(r10, 0x9, 0x0, 0x0) (async) getsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000009680), 0x10) (async) io_uring_register$IORING_UNREGISTER_PERSONALITY(r10, 0x13, 0x20000000, r11) (async) syz_io_uring_submit(r7, r4, &(0x7f0000000900)=@IORING_OP_FALLOCATE={0x11, 0x3, 0x0, @fd_index=0x6, 0x0, 0x0, 0x9, 0x0, 0x0, {0x0, r11}}, 0x401) (async) io_uring_enter(r0, 0xb2, 0x0, 0x0, 0x0, 0x7401) (async) 14:48:40 executing program 2: clone(0x80910b00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) set_mempolicy(0x3, &(0x7f0000000040), 0x0) gettid() r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x2, 0x3, 0x2d8, 0x190, 0x190, 0x95ffffff, 0x77, 0x93ffffff, 0x240, 0x240, 0x221, 0x240, 0x240, 0x3, 0x0, {[{{@uncond, 0x0, 0x130, 0x190, 0x0, {0x0, 0x1db}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "bdc74c01369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa6ecab6b1d2cc05e3182f64694d7d05fb8b8c8f56627a54f905d564eeeb8334f650ca0f3c44f7fda4d20a55050342ea85ecc8838e7088de33582f36a0a375bb7008adc297a5ece1bb2df53d17bef26bb6f800", 0x7f}}]}, @common=@SET={0x60}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'veth0_to_batadv\x00', 'ip6gretap0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x338) 14:48:40 executing program 5: clone(0x80910b00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) set_mempolicy(0x3, &(0x7f0000000040)=0xffffffff80000001, 0x400) gettid() r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, &(0x7f0000000080)=ANY=[@ANYBLOB="7549f8187a2a6e40594b4473692aef0dda6d1a46f2019ed7e86b1d711c76877056283bedab9579d2125c7cad3b1f28c963b3a626ef87b075574ff5612ccc80d8e14883ad2a8e6516a15c410ce005b2e841ebacd55a1365c685244ec3b66b003e7ec96ed005906d578130183c37"]) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x2, 0x3, 0x2d8, 0x190, 0x190, 0x95ffffff, 0x77, 0x93ffffff, 0x240, 0x240, 0x221, 0x240, 0x240, 0x3, 0x0, {[{{@uncond, 0x0, 0x130, 0x190, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "bdc74c01369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa6ecab6b1d2cc05e3182f64694d7d05fb8b8c8f56627a54f905d564eeeb8334f650ca0f3c44f7fda4d20a55050342ea85ecc8838e7088de33582f36a0a375bb7008adc297a5ece1bb2df53d17bef26bb6f800", 0x7f, 0x2}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0xe9010000]}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'veth0_to_batadv\x00', 'ip6gretap0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x338) [ 2850.717402][ T5353] FAULT_INJECTION: forcing a failure. [ 2850.717402][ T5353] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2850.730699][ T5353] CPU: 0 PID: 5353 Comm: syz-executor.4 Tainted: G W 5.16.0-rc6-syzkaller #0 [ 2850.740834][ T5353] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2850.750895][ T5353] Call Trace: [ 2850.754191][ T5353] [ 2850.757120][ T5353] dump_stack_lvl+0xd6/0x122 [ 2850.761720][ T5353] dump_stack+0x11/0x1b 14:48:40 executing program 2: clone(0x80910b00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) set_mempolicy(0x3, &(0x7f0000000040), 0x0) gettid() r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x2, 0x3, 0x2d8, 0x190, 0x190, 0x95ffffff, 0x77, 0x93ffffff, 0x240, 0x240, 0x221, 0x240, 0x240, 0x3, 0x0, {[{{@uncond, 0x0, 0x130, 0x190, 0x0, {0x0, 0x1e0}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "bdc74c01369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa6ecab6b1d2cc05e3182f64694d7d05fb8b8c8f56627a54f905d564eeeb8334f650ca0f3c44f7fda4d20a55050342ea85ecc8838e7088de33582f36a0a375bb7008adc297a5ece1bb2df53d17bef26bb6f800", 0x7f}}]}, @common=@SET={0x60}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'veth0_to_batadv\x00', 'ip6gretap0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x338) [ 2850.765961][ T5353] should_fail+0x23c/0x250 [ 2850.770389][ T5353] __alloc_pages+0x102/0x330 [ 2850.775073][ T5353] alloc_pages+0x382/0x3d0 [ 2850.779496][ T5353] folio_alloc+0x1a/0x20 [ 2850.783744][ T5353] filemap_alloc_folio+0x53/0xf0 [ 2850.788737][ T5353] page_cache_ra_unbounded+0x1c0/0x430 [ 2850.794215][ T5353] ondemand_readahead+0x4f8/0x700 [ 2850.799251][ T5353] ? filemap_get_read_batch+0x3e2/0x410 [ 2850.804853][ T5353] page_cache_async_ra+0xed/0x120 [ 2850.809989][ T5353] filemap_read+0x500/0x16d0 14:48:40 executing program 2: clone(0x80910b00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) set_mempolicy(0x3, &(0x7f0000000040), 0x0) gettid() r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x2, 0x3, 0x2d8, 0x190, 0x190, 0x95ffffff, 0x77, 0x93ffffff, 0x240, 0x240, 0x221, 0x240, 0x240, 0x3, 0x0, {[{{@uncond, 0x0, 0x130, 0x190, 0x0, {0x0, 0x1e1}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "bdc74c01369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa6ecab6b1d2cc05e3182f64694d7d05fb8b8c8f56627a54f905d564eeeb8334f650ca0f3c44f7fda4d20a55050342ea85ecc8838e7088de33582f36a0a375bb7008adc297a5ece1bb2df53d17bef26bb6f800", 0x7f}}]}, @common=@SET={0x60}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'veth0_to_batadv\x00', 'ip6gretap0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x338) [ 2850.814601][ T5353] ? __rcu_read_unlock+0x5c/0x290 [ 2850.819639][ T5353] generic_file_read_iter+0x72/0x2a0 [ 2850.824963][ T5353] ? iov_iter_pipe+0x100/0x150 [ 2850.829764][ T5353] ? ext4_file_read_iter+0x7a/0x1f0 [ 2850.835048][ T5353] generic_file_splice_read+0x24f/0x330 [ 2850.840602][ T5353] ? splice_shrink_spd+0x60/0x60 [ 2850.845540][ T5353] splice_direct_to_actor+0x2aa/0x650 [ 2850.850918][ T5353] ? do_splice_direct+0x190/0x190 [ 2850.855980][ T5353] do_splice_direct+0x106/0x190 [ 2850.860841][ T5353] do_sendfile+0x675/0xc40 14:48:40 executing program 3: r0 = syz_io_uring_setup(0x80002de5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000fe8000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0xb2, 0x0, 0x0, 0x0, 0x7401) 14:48:40 executing program 5: clone(0x80910b00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) set_mempolicy(0x3, &(0x7f0000000040)=0xffffffff80000001, 0x400) gettid() r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, &(0x7f0000000080)=ANY=[@ANYBLOB="7549f8187a2a6e40594b4473692aef0dda6d1a46f2019ed7e86b1d711c76877056283bedab9579d2125c7cad3b1f28c963b3a626ef87b075574ff5612ccc80d8e14883ad2a8e6516a15c410ce005b2e841ebacd55a1365c685244ec3b66b003e7ec96ed005906d578130183c37"]) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x2, 0x3, 0x2d8, 0x190, 0x190, 0x95ffffff, 0x77, 0x93ffffff, 0x240, 0x240, 0x221, 0x240, 0x240, 0x3, 0x0, {[{{@uncond, 0x0, 0x130, 0x190, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "bdc74c01369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa6ecab6b1d2cc05e3182f64694d7d05fb8b8c8f56627a54f905d564eeeb8334f650ca0f3c44f7fda4d20a55050342ea85ecc8838e7088de33582f36a0a375bb7008adc297a5ece1bb2df53d17bef26bb6f800", 0x7f, 0x2}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0xea020000]}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'veth0_to_batadv\x00', 'ip6gretap0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x338) [ 2850.865259][ T5353] __x64_sys_sendfile64+0x102/0x140 [ 2850.870461][ T5353] do_syscall_64+0x44/0xd0 [ 2850.874926][ T5353] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2850.880828][ T5353] RIP: 0033:0x7f2d29acae99 [ 2850.885245][ T5353] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2850.904863][ T5353] RSP: 002b:00007f2d28c41168 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 2850.913378][ T5353] RAX: ffffffffffffffda RBX: 00007f2d29bddf60 RCX: 00007f2d29acae99 [ 2850.921446][ T5353] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 2850.929508][ T5353] RBP: 00007f2d28c411d0 R08: 0000000000000000 R09: 0000000000000000 [ 2850.937664][ T5353] R10: 0000000000201000 R11: 0000000000000246 R12: 0000000000000002 [ 2850.945643][ T5353] R13: 00007ffcc1d93fdf R14: 00007f2d28c41300 R15: 0000000000022000 [ 2850.953706][ T5353] 14:48:41 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/self/exe\x00', 0x0, 0x0) ioctl$AUTOFS_IOC_EXPIRE(r0, 0x810c9365, &(0x7f0000000200)={{0x6, 0x8da4}, 0x100, './file0\x00'}) (async, rerun: 32) pipe(&(0x7f0000000180)={0xffffffffffffffff}) (rerun: 32) r2 = socket$inet6(0xa, 0x3, 0x2c) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r2, 0x29, 0x7, &(0x7f0000000080)=0x2, 0x4) (async) splice(r1, 0x0, r2, 0x0, 0x4ff9c, 0x0) (async) fchmodat(r1, &(0x7f0000000040)='./file0\x00', 0x20) (async) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) (async) syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x2) pipe2(&(0x7f0000000100)={0xffffffffffffffff}, 0x0) (async, rerun: 32) r4 = socket$inet6(0xa, 0x3, 0x3a) (rerun: 32) setsockopt$inet6_int(r4, 0x29, 0xd1, &(0x7f0000000000)=0x4, 0x4) (async, rerun: 64) setsockopt$inet6_MRT6_ADD_MFC(r4, 0x29, 0xc8, 0x0, 0x4) (async, rerun: 64) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r4, 0x29, 0xc9, 0x0, 0x0) setsockopt$inet6_int(r4, 0x29, 0x11, &(0x7f0000000140)=0x2, 0x4) write$evdev(r3, &(0x7f00000000c0)=[{}, {{}, 0x1f, 0x5, 0x80000000}], 0x30) 14:48:41 executing program 1: r0 = socket$inet6(0xa, 0x400000000001, 0x0) (async) r1 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) ftruncate(r1, 0x2007fff) (async) socketpair(0x0, 0x1, 0x6, &(0x7f00000001c0)={0xffffffffffffffff}) recvmsg(r2, &(0x7f0000000740)={&(0x7f0000000200)=@l2, 0x80, &(0x7f0000000280)=[{&(0x7f0000000300)=""/117, 0x75}, {&(0x7f0000000380)=""/214, 0xd6}, {&(0x7f0000000480)=""/197, 0xc5}, {&(0x7f0000000580)=""/179, 0xb3}], 0x4, &(0x7f0000000640)=""/233, 0xe9}, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e24, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7ff}, 0x1c) (async) close(r0) open(&(0x7f00000002c0)='./bus\x00', 0x14d842, 0x0) (async) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000000)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4, 0x1, 0x0, 0x9, 0x6}, 0x20) (async) sendfile(r0, r1, 0x0, 0x201000) (async) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0xa20000, 0x0) (async) r4 = socket$unix(0x1, 0x2, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0xee01, r5, 0xffffffffffffffff) (async) setsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f00000000c0)={{{@in6=@remote, @in6=@local, 0x4e20, 0x6, 0x4e22, 0xff81, 0xa, 0x80, 0x80, 0xc, 0x0, r5}, {0xffff, 0x1, 0x4, 0xffffffff, 0xdfc, 0x972, 0xec, 0x1}, {0x400000000000, 0x7, 0x5, 0x7}, 0x2, 0x6e6bb4, 0x1, 0x1, 0x3, 0x1}, {{@in6=@private0, 0x4d5, 0xfe}, 0x2, @in=@multicast1, 0x3500, 0x6, 0x1, 0xfc, 0x0, 0x8, 0x1ff}}, 0xe8) 14:48:41 executing program 3: r0 = syz_io_uring_setup(0x80002de5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000fe8000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0xb2, 0x0, 0x0, 0x0, 0x7401) syz_io_uring_setup(0x80002de5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000fe8000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000140)) (async) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) (async) io_uring_enter(r0, 0xb2, 0x0, 0x0, 0x0, 0x7401) (async) 14:48:41 executing program 5: clone(0x80910b00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) set_mempolicy(0x3, &(0x7f0000000040)=0xffffffff80000001, 0x400) gettid() r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, &(0x7f0000000080)=ANY=[@ANYBLOB="7549f8187a2a6e40594b4473692aef0dda6d1a46f2019ed7e86b1d711c76877056283bedab9579d2125c7cad3b1f28c963b3a626ef87b075574ff5612ccc80d8e14883ad2a8e6516a15c410ce005b2e841ebacd55a1365c685244ec3b66b003e7ec96ed005906d578130183c37"]) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x2, 0x3, 0x2d8, 0x190, 0x190, 0x95ffffff, 0x77, 0x93ffffff, 0x240, 0x240, 0x221, 0x240, 0x240, 0x3, 0x0, {[{{@uncond, 0x0, 0x130, 0x190, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "bdc74c01369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa6ecab6b1d2cc05e3182f64694d7d05fb8b8c8f56627a54f905d564eeeb8334f650ca0f3c44f7fda4d20a55050342ea85ecc8838e7088de33582f36a0a375bb7008adc297a5ece1bb2df53d17bef26bb6f800", 0x7f, 0x2}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0xec000000]}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'veth0_to_batadv\x00', 'ip6gretap0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x338) 14:48:41 executing program 2: clone(0x80910b00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) set_mempolicy(0x3, &(0x7f0000000040), 0x0) gettid() r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x2, 0x3, 0x2d8, 0x190, 0x190, 0x95ffffff, 0x77, 0x93ffffff, 0x240, 0x240, 0x221, 0x240, 0x240, 0x3, 0x0, {[{{@uncond, 0x0, 0x130, 0x190, 0x0, {0x0, 0x1e2}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "bdc74c01369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa6ecab6b1d2cc05e3182f64694d7d05fb8b8c8f56627a54f905d564eeeb8334f650ca0f3c44f7fda4d20a55050342ea85ecc8838e7088de33582f36a0a375bb7008adc297a5ece1bb2df53d17bef26bb6f800", 0x7f}}]}, @common=@SET={0x60}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'veth0_to_batadv\x00', 'ip6gretap0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x338) 14:48:41 executing program 4: r0 = socket$inet6(0xa, 0x400000000001, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) ftruncate(r1, 0x2007fff) close(r0) open(&(0x7f00000002c0)='./bus\x00', 0x14d842, 0x0) sendfile(r0, r1, 0x0, 0x201000) (fail_nth: 100) [ 2851.610250][ T5493] set_target_v0_checkentry: 27 callbacks suppressed [ 2851.610298][ T5493] Cannot find add_set index 0 as target [ 2851.623174][ T5491] FAULT_INJECTION: forcing a failure. [ 2851.623174][ T5491] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2851.632182][ T5494] Cannot find add_set index 0 as target [ 2851.636724][ T5491] CPU: 0 PID: 5491 Comm: syz-executor.4 Tainted: G W 5.16.0-rc6-syzkaller #0 14:48:41 executing program 3: r0 = syz_io_uring_setup(0x80002de5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000fe8000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0xb2, 0x0, 0x0, 0x0, 0x7401) syz_io_uring_setup(0x80002de5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000fe8000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000140)) (async) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) (async) io_uring_enter(r0, 0xb2, 0x0, 0x0, 0x0, 0x7401) (async) 14:48:41 executing program 2: clone(0x80910b00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) set_mempolicy(0x3, &(0x7f0000000040), 0x0) gettid() r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x2, 0x3, 0x2d8, 0x190, 0x190, 0x95ffffff, 0x77, 0x93ffffff, 0x240, 0x240, 0x221, 0x240, 0x240, 0x3, 0x0, {[{{@uncond, 0x0, 0x130, 0x190, 0x0, {0x0, 0x1e3}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "bdc74c01369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa6ecab6b1d2cc05e3182f64694d7d05fb8b8c8f56627a54f905d564eeeb8334f650ca0f3c44f7fda4d20a55050342ea85ecc8838e7088de33582f36a0a375bb7008adc297a5ece1bb2df53d17bef26bb6f800", 0x7f}}]}, @common=@SET={0x60}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'veth0_to_batadv\x00', 'ip6gretap0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x338) [ 2851.652402][ T5491] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2851.662547][ T5491] Call Trace: [ 2851.665828][ T5491] [ 2851.668757][ T5491] dump_stack_lvl+0xd6/0x122 [ 2851.673439][ T5491] dump_stack+0x11/0x1b [ 2851.677605][ T5491] should_fail+0x23c/0x250 [ 2851.682039][ T5491] __alloc_pages+0x102/0x330 [ 2851.686703][ T5491] alloc_pages+0x382/0x3d0 [ 2851.691128][ T5491] folio_alloc+0x1a/0x20 [ 2851.695411][ T5491] filemap_alloc_folio+0x53/0xf0 [ 2851.700430][ T5491] page_cache_ra_unbounded+0x1c0/0x430 14:48:41 executing program 5: clone(0x80910b00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) set_mempolicy(0x3, &(0x7f0000000040)=0xffffffff80000001, 0x400) gettid() r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, &(0x7f0000000080)=ANY=[@ANYBLOB="7549f8187a2a6e40594b4473692aef0dda6d1a46f2019ed7e86b1d711c76877056283bedab9579d2125c7cad3b1f28c963b3a626ef87b075574ff5612ccc80d8e14883ad2a8e6516a15c410ce005b2e841ebacd55a1365c685244ec3b66b003e7ec96ed005906d578130183c37"]) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x2, 0x3, 0x2d8, 0x190, 0x190, 0x95ffffff, 0x77, 0x93ffffff, 0x240, 0x240, 0x221, 0x240, 0x240, 0x3, 0x0, {[{{@uncond, 0x0, 0x130, 0x190, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "bdc74c01369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa6ecab6b1d2cc05e3182f64694d7d05fb8b8c8f56627a54f905d564eeeb8334f650ca0f3c44f7fda4d20a55050342ea85ecc8838e7088de33582f36a0a375bb7008adc297a5ece1bb2df53d17bef26bb6f800", 0x7f, 0x2}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0xec030000]}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'veth0_to_batadv\x00', 'ip6gretap0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x338) [ 2851.705961][ T5491] ondemand_readahead+0x4f8/0x700 [ 2851.710993][ T5491] ? filemap_get_read_batch+0x3e2/0x410 [ 2851.716556][ T5491] page_cache_async_ra+0xed/0x120 [ 2851.721607][ T5491] filemap_read+0x500/0x16d0 [ 2851.726217][ T5491] ? __rcu_read_unlock+0x5c/0x290 [ 2851.731304][ T5491] generic_file_read_iter+0x72/0x2a0 [ 2851.736594][ T5491] ? iov_iter_pipe+0x100/0x150 [ 2851.741392][ T5491] ? ext4_file_read_iter+0x7a/0x1f0 [ 2851.746645][ T5491] generic_file_splice_read+0x24f/0x330 [ 2851.752197][ T5491] ? splice_shrink_spd+0x60/0x60 [ 2851.757180][ T5491] splice_direct_to_actor+0x2aa/0x650 [ 2851.762563][ T5491] ? do_splice_direct+0x190/0x190 [ 2851.767706][ T5491] do_splice_direct+0x106/0x190 [ 2851.772631][ T5491] do_sendfile+0x675/0xc40 [ 2851.774463][ T5644] Cannot find add_set index 0 as target [ 2851.777165][ T5491] __x64_sys_sendfile64+0x102/0x140 [ 2851.777230][ T5491] do_syscall_64+0x44/0xd0 [ 2851.792339][ T5491] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2851.798313][ T5491] RIP: 0033:0x7f2d29acae99 14:48:41 executing program 1: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) ftruncate(r1, 0x2007fff) close(r0) open(&(0x7f00000002c0)='./bus\x00', 0x510ba4d2ac8dc2a7, 0x12) sendfile(r0, r1, 0x0, 0x201000) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000000)={r1}, 0x8) write$binfmt_elf64(r2, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0xa5, 0x1, 0x0, 0x1, 0x2, 0x3, 0x3e, 0x4, 0x35, 0x40, 0x52, 0xffff, 0xad9, 0x38, 0x2, 0x6, 0x5, 0x2}, [{0x6, 0x2, 0x401, 0x4, 0x8, 0x30a8, 0x214}], "eb942de30889a269762b2413a580149743f79a1d7598eba0a8a521d2166806721500724743703ef13930b896d0e631208890bd45e8cb7ead22d8ff01f475961b5a609c1bcca47edac7d9e5424bef0c2318a25d742f9b505a4ac25e2e1ce9abf160116e2819a6d1d71b46d8c7fab9c9d8", ['\x00', '\x00', '\x00', '\x00', '\x00']}, 0x5e8) 14:48:41 executing program 3: r0 = syz_io_uring_setup(0x2de5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000fe8000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x0) r3 = mmap$IORING_OFF_SQES(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3000001, 0x40010, r0, 0x10000000) r4 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_int(r4, 0x29, 0xd1, &(0x7f0000000000)=0x4, 0x4) setsockopt$inet6_MRT6_ADD_MFC(r4, 0x29, 0xc8, 0x0, 0x4) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r4, 0x29, 0xc9, 0x0, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000080)={r0, 0x4, 0x100000001, 0x80000001}) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r4, 0x29, 0xd2, &(0x7f0000000200)={{0xa, 0x4e22, 0x9d, @dev={0xfe, 0x80, '\x00', 0x2e}, 0x1}, {0xa, 0x4e20, 0x7f, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x101}, 0xfffe, [0x9, 0x81, 0x1ff, 0x1, 0x6, 0x8, 0x3, 0x5]}, 0x5c) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000100)=@IORING_OP_SPLICE={0x1e, 0x4, 0x0, @fd=r4, 0xf4a8, {0x0, r5}, 0xd759, 0x4, 0x1, {0x0, r6, r0}}, 0x7) r7 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000300)='/proc/sys/net/ipv4/vs/conn_reuse_mode\x00', 0x2, 0x0) sendto$inet6(r7, &(0x7f0000000340)="c7252a3b4f1b3073066518853be175237d645b40a96c1fa20b369f8a4d5311da92a72c1bf8ba3db3029b959ef3d7afc2d78292ff40d7bca40c0057694d3b40013359431d16a3b71d713c4ee6bbb11b419be7562c3a361a8105aed69fa8fe06adda595504a5ce5a586421fb3434928b1256a68f", 0x73, 0x0, &(0x7f00000003c0)={0xa, 0x4e20, 0x1, @dev={0xfe, 0x80, '\x00', 0x29}, 0x18000}, 0x1c) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0xb2, 0x0, 0x0, 0x0, 0x7401) [ 2851.802730][ T5491] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2851.822337][ T5491] RSP: 002b:00007f2d28c41168 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 2851.830754][ T5491] RAX: ffffffffffffffda RBX: 00007f2d29bddf60 RCX: 00007f2d29acae99 [ 2851.838756][ T5491] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 2851.846805][ T5491] RBP: 00007f2d28c411d0 R08: 0000000000000000 R09: 0000000000000000 14:48:41 executing program 2: clone(0x80910b00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) set_mempolicy(0x3, &(0x7f0000000040), 0x0) gettid() r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x2, 0x3, 0x2d8, 0x190, 0x190, 0x95ffffff, 0x77, 0x93ffffff, 0x240, 0x240, 0x221, 0x240, 0x240, 0x3, 0x0, {[{{@uncond, 0x0, 0x130, 0x190, 0x0, {0x0, 0x1f3}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "bdc74c01369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa6ecab6b1d2cc05e3182f64694d7d05fb8b8c8f56627a54f905d564eeeb8334f650ca0f3c44f7fda4d20a55050342ea85ecc8838e7088de33582f36a0a375bb7008adc297a5ece1bb2df53d17bef26bb6f800", 0x7f}}]}, @common=@SET={0x60}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'veth0_to_batadv\x00', 'ip6gretap0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x338) 14:48:41 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/self/exe\x00', 0x0, 0x0) ioctl$AUTOFS_IOC_EXPIRE(r0, 0x810c9365, &(0x7f0000000200)={{0x6, 0x8da4}, 0x100, './file0\x00'}) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r2 = socket$inet6(0xa, 0x3, 0x2c) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r2, 0x29, 0x7, &(0x7f0000000080)=0x2, 0x4) splice(r1, 0x0, r2, 0x0, 0x4ff9c, 0x0) fchmodat(r1, &(0x7f0000000040)='./file0\x00', 0x20) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x2) pipe2(&(0x7f0000000100)={0xffffffffffffffff}, 0x0) r4 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_int(r4, 0x29, 0xd1, &(0x7f0000000000)=0x4, 0x4) setsockopt$inet6_MRT6_ADD_MFC(r4, 0x29, 0xc8, 0x0, 0x4) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r4, 0x29, 0xc9, 0x0, 0x0) setsockopt$inet6_int(r4, 0x29, 0x11, &(0x7f0000000140)=0x2, 0x4) write$evdev(r3, &(0x7f00000000c0)=[{}, {{}, 0x1f, 0x5, 0x80000000}], 0x30) openat(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/self/exe\x00', 0x0, 0x0) (async) ioctl$AUTOFS_IOC_EXPIRE(r0, 0x810c9365, &(0x7f0000000200)={{0x6, 0x8da4}, 0x100, './file0\x00'}) (async) pipe(&(0x7f0000000180)) (async) socket$inet6(0xa, 0x3, 0x2c) (async) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) (async) setsockopt$inet6_int(r2, 0x29, 0x7, &(0x7f0000000080)=0x2, 0x4) (async) splice(r1, 0x0, r2, 0x0, 0x4ff9c, 0x0) (async) fchmodat(r1, &(0x7f0000000040)='./file0\x00', 0x20) (async) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) (async) syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x2) (async) pipe2(&(0x7f0000000100), 0x0) (async) socket$inet6(0xa, 0x3, 0x3a) (async) setsockopt$inet6_int(r4, 0x29, 0xd1, &(0x7f0000000000)=0x4, 0x4) (async) setsockopt$inet6_MRT6_ADD_MFC(r4, 0x29, 0xc8, 0x0, 0x4) (async) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r4, 0x29, 0xc9, 0x0, 0x0) (async) setsockopt$inet6_int(r4, 0x29, 0x11, &(0x7f0000000140)=0x2, 0x4) (async) write$evdev(r3, &(0x7f00000000c0)=[{}, {{}, 0x1f, 0x5, 0x80000000}], 0x30) (async) 14:48:41 executing program 5: clone(0x80910b00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) set_mempolicy(0x3, &(0x7f0000000040)=0xffffffff80000001, 0x400) gettid() r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, &(0x7f0000000080)=ANY=[@ANYBLOB="7549f8187a2a6e40594b4473692aef0dda6d1a46f2019ed7e86b1d711c76877056283bedab9579d2125c7cad3b1f28c963b3a626ef87b075574ff5612ccc80d8e14883ad2a8e6516a15c410ce005b2e841ebacd55a1365c685244ec3b66b003e7ec96ed005906d578130183c37"]) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x2, 0x3, 0x2d8, 0x190, 0x190, 0x95ffffff, 0x77, 0x93ffffff, 0x240, 0x240, 0x221, 0x240, 0x240, 0x3, 0x0, {[{{@uncond, 0x0, 0x130, 0x190, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "bdc74c01369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa6ecab6b1d2cc05e3182f64694d7d05fb8b8c8f56627a54f905d564eeeb8334f650ca0f3c44f7fda4d20a55050342ea85ecc8838e7088de33582f36a0a375bb7008adc297a5ece1bb2df53d17bef26bb6f800", 0x7f, 0x2}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0xee020000]}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'veth0_to_batadv\x00', 'ip6gretap0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x338) [ 2851.854832][ T5491] R10: 0000000000201000 R11: 0000000000000246 R12: 0000000000000003 [ 2851.862802][ T5491] R13: 00007ffcc1d93fdf R14: 00007f2d28c41300 R15: 0000000000022000 [ 2851.870853][ T5491] [ 2851.888310][ T5665] Cannot find add_set index 0 as target 14:48:41 executing program 1: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) ftruncate(r1, 0x2007fff) close(r0) open(&(0x7f00000002c0)='./bus\x00', 0x510ba4d2ac8dc2a7, 0x12) (async) sendfile(r0, r1, 0x0, 0x201000) (async) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000000)={r1}, 0x8) write$binfmt_elf64(r2, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0xa5, 0x1, 0x0, 0x1, 0x2, 0x3, 0x3e, 0x4, 0x35, 0x40, 0x52, 0xffff, 0xad9, 0x38, 0x2, 0x6, 0x5, 0x2}, [{0x6, 0x2, 0x401, 0x4, 0x8, 0x30a8, 0x214}], "eb942de30889a269762b2413a580149743f79a1d7598eba0a8a521d2166806721500724743703ef13930b896d0e631208890bd45e8cb7ead22d8ff01f475961b5a609c1bcca47edac7d9e5424bef0c2318a25d742f9b505a4ac25e2e1ce9abf160116e2819a6d1d71b46d8c7fab9c9d8", ['\x00', '\x00', '\x00', '\x00', '\x00']}, 0x5e8) 14:48:41 executing program 5: clone(0x80910b00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) set_mempolicy(0x3, &(0x7f0000000040)=0xffffffff80000001, 0x400) gettid() r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, &(0x7f0000000080)=ANY=[@ANYBLOB="7549f8187a2a6e40594b4473692aef0dda6d1a46f2019ed7e86b1d711c76877056283bedab9579d2125c7cad3b1f28c963b3a626ef87b075574ff5612ccc80d8e14883ad2a8e6516a15c410ce005b2e841ebacd55a1365c685244ec3b66b003e7ec96ed005906d578130183c37"]) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x2, 0x3, 0x2d8, 0x190, 0x190, 0x95ffffff, 0x77, 0x93ffffff, 0x240, 0x240, 0x221, 0x240, 0x240, 0x3, 0x0, {[{{@uncond, 0x0, 0x130, 0x190, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "bdc74c01369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa6ecab6b1d2cc05e3182f64694d7d05fb8b8c8f56627a54f905d564eeeb8334f650ca0f3c44f7fda4d20a55050342ea85ecc8838e7088de33582f36a0a375bb7008adc297a5ece1bb2df53d17bef26bb6f800", 0x7f, 0x2}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0xef000000]}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'veth0_to_batadv\x00', 'ip6gretap0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x338) 14:48:41 executing program 2: clone(0x80910b00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) set_mempolicy(0x3, &(0x7f0000000040), 0x0) gettid() r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x2, 0x3, 0x2d8, 0x190, 0x190, 0x95ffffff, 0x77, 0x93ffffff, 0x240, 0x240, 0x221, 0x240, 0x240, 0x3, 0x0, {[{{@uncond, 0x0, 0x130, 0x190, 0x0, {0x0, 0x1f8}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "bdc74c01369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa6ecab6b1d2cc05e3182f64694d7d05fb8b8c8f56627a54f905d564eeeb8334f650ca0f3c44f7fda4d20a55050342ea85ecc8838e7088de33582f36a0a375bb7008adc297a5ece1bb2df53d17bef26bb6f800", 0x7f}}]}, @common=@SET={0x60}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'veth0_to_batadv\x00', 'ip6gretap0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x338) [ 2851.909382][ T5925] Cannot find add_set index 0 as target [ 2851.921842][ T5946] Cannot find add_set index 0 as target [ 2851.979330][ T6187] Cannot find add_set index 0 as target [ 2851.981117][ T6190] Cannot find add_set index 0 as target 14:48:42 executing program 4: r0 = socket$inet6(0xa, 0x400000000001, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) ftruncate(r1, 0x2007fff) close(r0) open(&(0x7f00000002c0)='./bus\x00', 0x14d842, 0x0) sendfile(r0, r1, 0x0, 0x201000) 14:48:42 executing program 3: r0 = syz_io_uring_setup(0x2de5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000fe8000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x0) r3 = mmap$IORING_OFF_SQES(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3000001, 0x40010, r0, 0x10000000) r4 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_int(r4, 0x29, 0xd1, &(0x7f0000000000)=0x4, 0x4) setsockopt$inet6_MRT6_ADD_MFC(r4, 0x29, 0xc8, 0x0, 0x4) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r4, 0x29, 0xc9, 0x0, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000080)={r0, 0x4, 0x100000001, 0x80000001}) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r4, 0x29, 0xd2, &(0x7f0000000200)={{0xa, 0x4e22, 0x9d, @dev={0xfe, 0x80, '\x00', 0x2e}, 0x1}, {0xa, 0x4e20, 0x7f, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x101}, 0xfffe, [0x9, 0x81, 0x1ff, 0x1, 0x6, 0x8, 0x3, 0x5]}, 0x5c) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000100)=@IORING_OP_SPLICE={0x1e, 0x4, 0x0, @fd=r4, 0xf4a8, {0x0, r5}, 0xd759, 0x4, 0x1, {0x0, r6, r0}}, 0x7) r7 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000300)='/proc/sys/net/ipv4/vs/conn_reuse_mode\x00', 0x2, 0x0) sendto$inet6(r7, &(0x7f0000000340)="c7252a3b4f1b3073066518853be175237d645b40a96c1fa20b369f8a4d5311da92a72c1bf8ba3db3029b959ef3d7afc2d78292ff40d7bca40c0057694d3b40013359431d16a3b71d713c4ee6bbb11b419be7562c3a361a8105aed69fa8fe06adda595504a5ce5a586421fb3434928b1256a68f", 0x73, 0x0, &(0x7f00000003c0)={0xa, 0x4e20, 0x1, @dev={0xfe, 0x80, '\x00', 0x29}, 0x18000}, 0x1c) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0xb2, 0x0, 0x0, 0x0, 0x7401) syz_io_uring_setup(0x2de5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000fe8000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000140)) (async) mmap$IORING_OFF_SQES(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3000001, 0x40010, r0, 0x10000000) (async) socket$inet6(0xa, 0x3, 0x3a) (async) setsockopt$inet6_int(r4, 0x29, 0xd1, &(0x7f0000000000)=0x4, 0x4) (async) setsockopt$inet6_MRT6_ADD_MFC(r4, 0x29, 0xc8, 0x0, 0x4) (async) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r4, 0x29, 0xc9, 0x0, 0x0) (async) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000080)={r0, 0x4, 0x100000001, 0x80000001}) (async) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r4, 0x29, 0xd2, &(0x7f0000000200)={{0xa, 0x4e22, 0x9d, @dev={0xfe, 0x80, '\x00', 0x2e}, 0x1}, {0xa, 0x4e20, 0x7f, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x101}, 0xfffe, [0x9, 0x81, 0x1ff, 0x1, 0x6, 0x8, 0x3, 0x5]}, 0x5c) (async) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) (async) syz_io_uring_submit(r1, r3, &(0x7f0000000100)=@IORING_OP_SPLICE={0x1e, 0x4, 0x0, @fd=r4, 0xf4a8, {0x0, r5}, 0xd759, 0x4, 0x1, {0x0, r6, r0}}, 0x7) (async) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000300)='/proc/sys/net/ipv4/vs/conn_reuse_mode\x00', 0x2, 0x0) (async) sendto$inet6(r7, &(0x7f0000000340)="c7252a3b4f1b3073066518853be175237d645b40a96c1fa20b369f8a4d5311da92a72c1bf8ba3db3029b959ef3d7afc2d78292ff40d7bca40c0057694d3b40013359431d16a3b71d713c4ee6bbb11b419be7562c3a361a8105aed69fa8fe06adda595504a5ce5a586421fb3434928b1256a68f", 0x73, 0x0, &(0x7f00000003c0)={0xa, 0x4e20, 0x1, @dev={0xfe, 0x80, '\x00', 0x29}, 0x18000}, 0x1c) (async) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) (async) io_uring_enter(r0, 0xb2, 0x0, 0x0, 0x0, 0x7401) (async) 14:48:42 executing program 1: r0 = socket$inet6(0xa, 0x400000000001, 0x0) (async) r1 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) ftruncate(r1, 0x2007fff) close(r0) (async) open(&(0x7f00000002c0)='./bus\x00', 0x510ba4d2ac8dc2a7, 0x12) (async) sendfile(r0, r1, 0x0, 0x201000) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000000)={r1}, 0x8) write$binfmt_elf64(r2, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0xa5, 0x1, 0x0, 0x1, 0x2, 0x3, 0x3e, 0x4, 0x35, 0x40, 0x52, 0xffff, 0xad9, 0x38, 0x2, 0x6, 0x5, 0x2}, [{0x6, 0x2, 0x401, 0x4, 0x8, 0x30a8, 0x214}], "eb942de30889a269762b2413a580149743f79a1d7598eba0a8a521d2166806721500724743703ef13930b896d0e631208890bd45e8cb7ead22d8ff01f475961b5a609c1bcca47edac7d9e5424bef0c2318a25d742f9b505a4ac25e2e1ce9abf160116e2819a6d1d71b46d8c7fab9c9d8", ['\x00', '\x00', '\x00', '\x00', '\x00']}, 0x5e8) 14:48:42 executing program 5: clone(0x80910b00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) set_mempolicy(0x3, &(0x7f0000000040)=0xffffffff80000001, 0x400) gettid() r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, &(0x7f0000000080)=ANY=[@ANYBLOB="7549f8187a2a6e40594b4473692aef0dda6d1a46f2019ed7e86b1d711c76877056283bedab9579d2125c7cad3b1f28c963b3a626ef87b075574ff5612ccc80d8e14883ad2a8e6516a15c410ce005b2e841ebacd55a1365c685244ec3b66b003e7ec96ed005906d578130183c37"]) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x2, 0x3, 0x2d8, 0x190, 0x190, 0x95ffffff, 0x77, 0x93ffffff, 0x240, 0x240, 0x221, 0x240, 0x240, 0x3, 0x0, {[{{@uncond, 0x0, 0x130, 0x190, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "bdc74c01369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa6ecab6b1d2cc05e3182f64694d7d05fb8b8c8f56627a54f905d564eeeb8334f650ca0f3c44f7fda4d20a55050342ea85ecc8838e7088de33582f36a0a375bb7008adc297a5ece1bb2df53d17bef26bb6f800", 0x7f, 0x2}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0xf0000000]}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'veth0_to_batadv\x00', 'ip6gretap0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x338) 14:48:42 executing program 2: clone(0x80910b00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) set_mempolicy(0x3, &(0x7f0000000040), 0x0) gettid() r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x2, 0x3, 0x2d8, 0x190, 0x190, 0x95ffffff, 0x77, 0x93ffffff, 0x240, 0x240, 0x221, 0x240, 0x240, 0x3, 0x0, {[{{@uncond, 0x0, 0x130, 0x190, 0x0, {0x0, 0x1fa}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "bdc74c01369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa6ecab6b1d2cc05e3182f64694d7d05fb8b8c8f56627a54f905d564eeeb8334f650ca0f3c44f7fda4d20a55050342ea85ecc8838e7088de33582f36a0a375bb7008adc297a5ece1bb2df53d17bef26bb6f800", 0x7f}}]}, @common=@SET={0x60}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'veth0_to_batadv\x00', 'ip6gretap0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x338) 14:48:42 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x2) ioctl$BTRFS_IOC_GET_FEATURES(r0, 0x80189439, &(0x7f0000000140)) ioctl$EVIOCGREP(r1, 0x80084503, &(0x7f0000000040)=""/214) write$evdev(r1, &(0x7f000004d000)=[{}], 0xfffffe82) 14:48:42 executing program 2: clone(0x80910b00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) set_mempolicy(0x3, &(0x7f0000000040), 0x0) gettid() r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x2, 0x3, 0x2d8, 0x190, 0x190, 0x95ffffff, 0x77, 0x93ffffff, 0x240, 0x240, 0x221, 0x240, 0x240, 0x3, 0x0, {[{{@uncond, 0x0, 0x130, 0x190, 0x0, {0x0, 0x213}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "bdc74c01369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa6ecab6b1d2cc05e3182f64694d7d05fb8b8c8f56627a54f905d564eeeb8334f650ca0f3c44f7fda4d20a55050342ea85ecc8838e7088de33582f36a0a375bb7008adc297a5ece1bb2df53d17bef26bb6f800", 0x7f}}]}, @common=@SET={0x60}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'veth0_to_batadv\x00', 'ip6gretap0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x338) 14:48:42 executing program 1: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_int(r1, 0x29, 0xd1, &(0x7f00000000c0)=0x4, 0x4) setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xc8, 0x0, 0x4) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r1, 0x29, 0xc9, 0x0, 0x0) setsockopt$inet6_int(r1, 0x29, 0x57, &(0x7f0000000080)=0x5, 0x4) r2 = open(&(0x7f0000002000)='./bus\x00', 0x408000, 0x0) ftruncate(r2, 0x2007fff) close(r0) open(&(0x7f00000002c0)='./bus\x00', 0x14d842, 0x1) r3 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_int(r3, 0x29, 0xd1, &(0x7f0000000000)=0x4, 0x4) setsockopt$inet6_MRT6_ADD_MFC(r3, 0x29, 0xc8, 0x0, 0x4) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r3, 0x29, 0xc9, 0x0, 0x0) fcntl$notify(r3, 0x402, 0x20) sendfile(r0, r2, 0x0, 0x201000) r4 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendfile(r2, r3, 0x0, 0x3) sendfile(r4, 0xffffffffffffffff, &(0x7f0000000040)=0x80, 0x81) [ 2852.140445][ T6285] Cannot find add_set index 0 as target 14:48:42 executing program 1: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_int(r1, 0x29, 0xd1, &(0x7f00000000c0)=0x4, 0x4) (async) setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xc8, 0x0, 0x4) (async) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r1, 0x29, 0xc9, 0x0, 0x0) (async) setsockopt$inet6_int(r1, 0x29, 0x57, &(0x7f0000000080)=0x5, 0x4) r2 = open(&(0x7f0000002000)='./bus\x00', 0x408000, 0x0) ftruncate(r2, 0x2007fff) close(r0) open(&(0x7f00000002c0)='./bus\x00', 0x14d842, 0x1) (async) r3 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_int(r3, 0x29, 0xd1, &(0x7f0000000000)=0x4, 0x4) setsockopt$inet6_MRT6_ADD_MFC(r3, 0x29, 0xc8, 0x0, 0x4) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r3, 0x29, 0xc9, 0x0, 0x0) fcntl$notify(r3, 0x402, 0x20) sendfile(r0, r2, 0x0, 0x201000) (async) r4 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendfile(r2, r3, 0x0, 0x3) (async) sendfile(r4, 0xffffffffffffffff, &(0x7f0000000040)=0x80, 0x81) 14:48:42 executing program 5: clone(0x80910b00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) set_mempolicy(0x3, &(0x7f0000000040)=0xffffffff80000001, 0x400) gettid() r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, &(0x7f0000000080)=ANY=[@ANYBLOB="7549f8187a2a6e40594b4473692aef0dda6d1a46f2019ed7e86b1d711c76877056283bedab9579d2125c7cad3b1f28c963b3a626ef87b075574ff5612ccc80d8e14883ad2a8e6516a15c410ce005b2e841ebacd55a1365c685244ec3b66b003e7ec96ed005906d578130183c37"]) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x2, 0x3, 0x2d8, 0x190, 0x190, 0x95ffffff, 0x77, 0x93ffffff, 0x240, 0x240, 0x221, 0x240, 0x240, 0x3, 0x0, {[{{@uncond, 0x0, 0x130, 0x190, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "bdc74c01369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa6ecab6b1d2cc05e3182f64694d7d05fb8b8c8f56627a54f905d564eeeb8334f650ca0f3c44f7fda4d20a55050342ea85ecc8838e7088de33582f36a0a375bb7008adc297a5ece1bb2df53d17bef26bb6f800", 0x7f, 0x2}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0xf0010000]}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'veth0_to_batadv\x00', 'ip6gretap0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x338) 14:48:42 executing program 3: r0 = syz_io_uring_setup(0x2de5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000fe8000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x0) r3 = mmap$IORING_OFF_SQES(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3000001, 0x40010, r0, 0x10000000) r4 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_int(r4, 0x29, 0xd1, &(0x7f0000000000)=0x4, 0x4) setsockopt$inet6_MRT6_ADD_MFC(r4, 0x29, 0xc8, 0x0, 0x4) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r4, 0x29, 0xc9, 0x0, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000080)={r0, 0x4, 0x100000001, 0x80000001}) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r4, 0x29, 0xd2, &(0x7f0000000200)={{0xa, 0x4e22, 0x9d, @dev={0xfe, 0x80, '\x00', 0x2e}, 0x1}, {0xa, 0x4e20, 0x7f, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x101}, 0xfffe, [0x9, 0x81, 0x1ff, 0x1, 0x6, 0x8, 0x3, 0x5]}, 0x5c) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000100)=@IORING_OP_SPLICE={0x1e, 0x4, 0x0, @fd=r4, 0xf4a8, {0x0, r5}, 0xd759, 0x4, 0x1, {0x0, r6, r0}}, 0x7) r7 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000300)='/proc/sys/net/ipv4/vs/conn_reuse_mode\x00', 0x2, 0x0) sendto$inet6(r7, &(0x7f0000000340)="c7252a3b4f1b3073066518853be175237d645b40a96c1fa20b369f8a4d5311da92a72c1bf8ba3db3029b959ef3d7afc2d78292ff40d7bca40c0057694d3b40013359431d16a3b71d713c4ee6bbb11b419be7562c3a361a8105aed69fa8fe06adda595504a5ce5a586421fb3434928b1256a68f", 0x73, 0x0, &(0x7f00000003c0)={0xa, 0x4e20, 0x1, @dev={0xfe, 0x80, '\x00', 0x29}, 0x18000}, 0x1c) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0xb2, 0x0, 0x0, 0x0, 0x7401) syz_io_uring_setup(0x2de5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000fe8000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000140)) (async) mmap$IORING_OFF_SQES(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3000001, 0x40010, r0, 0x10000000) (async) socket$inet6(0xa, 0x3, 0x3a) (async) setsockopt$inet6_int(r4, 0x29, 0xd1, &(0x7f0000000000)=0x4, 0x4) (async) setsockopt$inet6_MRT6_ADD_MFC(r4, 0x29, 0xc8, 0x0, 0x4) (async) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r4, 0x29, 0xc9, 0x0, 0x0) (async) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000080)={r0, 0x4, 0x100000001, 0x80000001}) (async) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r4, 0x29, 0xd2, &(0x7f0000000200)={{0xa, 0x4e22, 0x9d, @dev={0xfe, 0x80, '\x00', 0x2e}, 0x1}, {0xa, 0x4e20, 0x7f, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x101}, 0xfffe, [0x9, 0x81, 0x1ff, 0x1, 0x6, 0x8, 0x3, 0x5]}, 0x5c) (async) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) (async) syz_io_uring_submit(r1, r3, &(0x7f0000000100)=@IORING_OP_SPLICE={0x1e, 0x4, 0x0, @fd=r4, 0xf4a8, {0x0, r5}, 0xd759, 0x4, 0x1, {0x0, r6, r0}}, 0x7) (async) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000300)='/proc/sys/net/ipv4/vs/conn_reuse_mode\x00', 0x2, 0x0) (async) sendto$inet6(r7, &(0x7f0000000340)="c7252a3b4f1b3073066518853be175237d645b40a96c1fa20b369f8a4d5311da92a72c1bf8ba3db3029b959ef3d7afc2d78292ff40d7bca40c0057694d3b40013359431d16a3b71d713c4ee6bbb11b419be7562c3a361a8105aed69fa8fe06adda595504a5ce5a586421fb3434928b1256a68f", 0x73, 0x0, &(0x7f00000003c0)={0xa, 0x4e20, 0x1, @dev={0xfe, 0x80, '\x00', 0x29}, 0x18000}, 0x1c) (async) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) (async) io_uring_enter(r0, 0xb2, 0x0, 0x0, 0x0, 0x7401) (async) 14:48:42 executing program 1: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_int(r1, 0x29, 0xd1, &(0x7f00000000c0)=0x4, 0x4) setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xc8, 0x0, 0x4) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r1, 0x29, 0xc9, 0x0, 0x0) setsockopt$inet6_int(r1, 0x29, 0x57, &(0x7f0000000080)=0x5, 0x4) r2 = open(&(0x7f0000002000)='./bus\x00', 0x408000, 0x0) ftruncate(r2, 0x2007fff) close(r0) open(&(0x7f00000002c0)='./bus\x00', 0x14d842, 0x1) r3 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_int(r3, 0x29, 0xd1, &(0x7f0000000000)=0x4, 0x4) setsockopt$inet6_MRT6_ADD_MFC(r3, 0x29, 0xc8, 0x0, 0x4) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r3, 0x29, 0xc9, 0x0, 0x0) fcntl$notify(r3, 0x402, 0x20) sendfile(r0, r2, 0x0, 0x201000) r4 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendfile(r2, r3, 0x0, 0x3) sendfile(r4, 0xffffffffffffffff, &(0x7f0000000040)=0x80, 0x81) socket$inet6(0xa, 0x400000000001, 0x0) (async) socket$inet6(0xa, 0x3, 0x3a) (async) setsockopt$inet6_int(r1, 0x29, 0xd1, &(0x7f00000000c0)=0x4, 0x4) (async) setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xc8, 0x0, 0x4) (async) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r1, 0x29, 0xc9, 0x0, 0x0) (async) setsockopt$inet6_int(r1, 0x29, 0x57, &(0x7f0000000080)=0x5, 0x4) (async) open(&(0x7f0000002000)='./bus\x00', 0x408000, 0x0) (async) ftruncate(r2, 0x2007fff) (async) close(r0) (async) open(&(0x7f00000002c0)='./bus\x00', 0x14d842, 0x1) (async) socket$inet6(0xa, 0x3, 0x3a) (async) setsockopt$inet6_int(r3, 0x29, 0xd1, &(0x7f0000000000)=0x4, 0x4) (async) setsockopt$inet6_MRT6_ADD_MFC(r3, 0x29, 0xc8, 0x0, 0x4) (async) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r3, 0x29, 0xc9, 0x0, 0x0) (async) fcntl$notify(r3, 0x402, 0x20) (async) sendfile(r0, r2, 0x0, 0x201000) (async) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) (async) sendfile(r2, r3, 0x0, 0x3) (async) sendfile(r4, 0xffffffffffffffff, &(0x7f0000000040)=0x80, 0x81) (async) [ 2852.214981][ T6705] Cannot find add_set index 0 as target 14:48:42 executing program 4: r0 = socket$inet6(0xa, 0x400000000001, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) ftruncate(r1, 0x2007fff) close(r0) open(&(0x7f00000002c0)='./bus\x00', 0x14d842, 0x0) sendfile(r0, r1, 0x0, 0x200002) 14:48:42 executing program 2: clone(0x80910b00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) set_mempolicy(0x3, &(0x7f0000000040), 0x0) gettid() r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x2, 0x3, 0x2d8, 0x190, 0x190, 0x95ffffff, 0x77, 0x93ffffff, 0x240, 0x240, 0x221, 0x240, 0x240, 0x3, 0x0, {[{{@uncond, 0x0, 0x130, 0x190, 0x0, {0x0, 0x216}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "bdc74c01369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa6ecab6b1d2cc05e3182f64694d7d05fb8b8c8f56627a54f905d564eeeb8334f650ca0f3c44f7fda4d20a55050342ea85ecc8838e7088de33582f36a0a375bb7008adc297a5ece1bb2df53d17bef26bb6f800", 0x7f}}]}, @common=@SET={0x60}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'veth0_to_batadv\x00', 'ip6gretap0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x338) 14:48:42 executing program 5: clone(0x80910b00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) set_mempolicy(0x3, &(0x7f0000000040)=0xffffffff80000001, 0x400) gettid() r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, &(0x7f0000000080)=ANY=[@ANYBLOB="7549f8187a2a6e40594b4473692aef0dda6d1a46f2019ed7e86b1d711c76877056283bedab9579d2125c7cad3b1f28c963b3a626ef87b075574ff5612ccc80d8e14883ad2a8e6516a15c410ce005b2e841ebacd55a1365c685244ec3b66b003e7ec96ed005906d578130183c37"]) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x2, 0x3, 0x2d8, 0x190, 0x190, 0x95ffffff, 0x77, 0x93ffffff, 0x240, 0x240, 0x221, 0x240, 0x240, 0x3, 0x0, {[{{@uncond, 0x0, 0x130, 0x190, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "bdc74c01369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa6ecab6b1d2cc05e3182f64694d7d05fb8b8c8f56627a54f905d564eeeb8334f650ca0f3c44f7fda4d20a55050342ea85ecc8838e7088de33582f36a0a375bb7008adc297a5ece1bb2df53d17bef26bb6f800", 0x7f, 0x2}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0xf0030000]}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'veth0_to_batadv\x00', 'ip6gretap0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x338) 14:48:42 executing program 1: socket$inet6(0xa, 0x2, 0x0) r0 = open(&(0x7f0000000040)='./bus\x00', 0x743042, 0x14c) ftruncate(r0, 0x2007fff) close(r0) open(&(0x7f00000002c0)='./bus\x00', 0x14d842, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/cgroup', 0x0, 0x100) 14:48:42 executing program 3: r0 = syz_io_uring_setup(0x2de5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000fe8000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) r3 = syz_io_uring_setup(0x5d66, &(0x7f00000002c0), &(0x7f0000ee7000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r4, r5, &(0x7f00000000c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f00000003c0)}, 0x1010001) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r3, 0x10000000) syz_io_uring_submit(r4, r6, &(0x7f0000000340)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r4, r6, &(0x7f0000000000)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r4, r6, &(0x7f0000004040)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000140)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_CLOSE, 0x0) syz_io_uring_submit(r4, r6, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE, 0x0) r7 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_int(r7, 0x29, 0xd1, &(0x7f0000000000)=0x4, 0x4) setsockopt$inet6_MRT6_ADD_MFC(r7, 0x29, 0xc8, 0x0, 0x4) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r7, 0x29, 0xc9, 0x0, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000180)=@IORING_OP_WRITEV={0x2, 0x0, 0x6000, @fd=r7, 0x5, &(0x7f0000000100)=[{&(0x7f0000000200)="6a819dc1f88d1f3f19b68229c3b5fa3ceca7878f8aa7f1b7e561ca5a27e54c5a526fa4192fafa5c970170970bf8276c6550e6563221413188e3a6355b7d09e4e1f8aca", 0x43}, {&(0x7f0000000280)="de1aae8debe389ee8adf8a5a9a7048b3595cc96d37a3bf498bee42197fff483b40f7f7ab86aceece0e404b1950843a809cf36b164e06ec0935ac67febebbf7dcf5b79629fbe570d6a6afa74f4f37f9ad2cdbceb4bd4927a447cf26636b20ff333d2dbbbc39b99978ad7710f49f13410e515b2f652472a2a0168c7e26ca3ec1a8a4cd3d0ee743490fa25f3a09013de08897b298abce3683567abab8ccb902e6559b593a1d5405c1a9f519555c86b5c8701a69af5d57c23c14c7a65a8f91079b05fa8237f047a3f3d0", 0xc8}, {&(0x7f0000000380)="c9469f10fb3692268c271a7d3adfc7dcb6291c80b5cc01191bd703b16e755967cbd70f895161fe9f2f05547c0c90ba363eb235d77d89867bc06af4c6ebc8795de14103e926415035e747614214c678", 0x4f}], 0x3, 0x8, 0x1}, 0x7fff) accept$packet(0xffffffffffffffff, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r8 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000080), 0x214202, 0x0) io_uring_register$IORING_UNREGISTER_FILES(r8, 0x3, 0x0, 0x0) io_uring_enter(r0, 0xb2, 0x0, 0x0, 0x0, 0x7401) 14:48:42 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x2) (async) ioctl$BTRFS_IOC_GET_FEATURES(r0, 0x80189439, &(0x7f0000000140)) ioctl$EVIOCGREP(r1, 0x80084503, &(0x7f0000000040)=""/214) write$evdev(r1, &(0x7f000004d000)=[{}], 0xfffffe82) 1