0007fd29b19d0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 2794.157322][ T4189] RAX: ffffffffffffffda RBX: 00007fd29bf39f80 RCX: 00007fd29be1aae9
[ 2794.165311][ T4189] RDX: 00000000fffffdef RSI: 00000000200002c0 RDI: 0000000000000003
[ 2794.173287][ T4189] RBP: 00007fd29b19d120 R08: 0000000000000000 R09: 0000000000000000
[ 2794.181292][ T4189] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 2794.189258][ T4189] R13: 000000000000000b R14: 00007fd29bf39f80 R15: 00007fffc4d1d228
[ 2794.197234][ T4189]  </TASK>
[ 2794.200252][ T4206] CPU: 1 PID: 4206 Comm: syz-executor.5 Not tainted 6.6.0-rc3-syzkaller-00165-g3b517966c561 #0
[ 2794.210699][ T4206] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/06/2023
[ 2794.220765][ T4206] Call Trace:
[ 2794.224110][ T4206]  <TASK>
[ 2794.227043][ T4206]  dump_stack_lvl+0xda/0x130
[ 2794.231674][ T4206]  dump_stack+0x15/0x20
[ 2794.235911][ T4206]  should_fail_ex+0x21f/0x230
[ 2794.240603][ T4206]  should_fail+0xb/0x10
22:46:28 executing program 2:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000580), 0xffffffffffffffff)
sendmsg$L2TP_CMD_SESSION_CREATE(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000540), 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x4c, r1, 0x200, 0x70bd2c, 0x25dfdbfb, {}, [@L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x5b}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}, @L2TP_ATTR_FD={0x8}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e21}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e24}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x24040881}, 0x20008000)
sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, r1, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp=r0}, @L2TP_ATTR_PEER_CONN_ID={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20040001}, 0x804)
r2 = openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(r2, 0x10f, 0x86)
bind$isdn_base(r2, &(0x7f0000000000)={0x22, 0x81, 0x40, 0x79, 0x8}, 0x6)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$SEG6(&(0x7f00000004c0), 0xffffffffffffffff)
sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)=ANY=[@ANYBLOB="ec", @ANYRES16=r4, @ANYBLOB="02002cbd7000fddbdf25010000000500050002000000"], 0x1c}, 0x1, 0x0, 0x0, 0x8891}, 0x11)
sendmsg$SEG6_CMD_DUMPHMAC(r3, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x50, r4, 0x400, 0x70bd25, 0x25dfdbfd, {}, [@SEG6_ATTR_ALGID={0x5, 0x6, 0x7}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x4}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x4}, @SEG6_ATTR_DST={0x14, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}}, @SEG6_ATTR_SECRETLEN={0x5}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x32}]}, 0x50}, 0x1, 0x0, 0x0, 0x24000814}, 0x1)
write$ppp(r0, &(0x7f00000002c0)="d3", 0x1)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0) (async)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000580), 0xffffffffffffffff) (async)
sendmsg$L2TP_CMD_SESSION_CREATE(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000540), 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x4c, r1, 0x200, 0x70bd2c, 0x25dfdbfb, {}, [@L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x5b}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}, @L2TP_ATTR_FD={0x8}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e21}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e24}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x24040881}, 0x20008000) (async)
sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, r1, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp=r0}, @L2TP_ATTR_PEER_CONN_ID={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20040001}, 0x804) (async)
openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0) (async)
setsockopt$TIPC_MCAST_REPLICAST(r2, 0x10f, 0x86) (async)
bind$isdn_base(r2, &(0x7f0000000000)={0x22, 0x81, 0x40, 0x79, 0x8}, 0x6) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$SEG6(&(0x7f00000004c0), 0xffffffffffffffff) (async)
sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)=ANY=[@ANYBLOB="ec", @ANYRES16=r4, @ANYBLOB="02002cbd7000fddbdf25010000000500050002000000"], 0x1c}, 0x1, 0x0, 0x0, 0x8891}, 0x11) (async)
sendmsg$SEG6_CMD_DUMPHMAC(r3, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x50, r4, 0x400, 0x70bd25, 0x25dfdbfd, {}, [@SEG6_ATTR_ALGID={0x5, 0x6, 0x7}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x4}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x4}, @SEG6_ATTR_DST={0x14, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}}, @SEG6_ATTR_SECRETLEN={0x5}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x32}]}, 0x50}, 0x1, 0x0, 0x0, 0x24000814}, 0x1) (async)
write$ppp(r0, &(0x7f00000002c0)="d3", 0x1) (async)

[ 2794.244763][ T4206]  should_fail_usercopy+0x1a/0x20
[ 2794.249925][ T4206]  copy_page_from_iter_atomic+0x21c/0xcf0
[ 2794.255669][ T4206]  ? shmem_write_begin+0xa6/0x210
[ 2794.260757][ T4206]  ? shmem_write_begin+0x16d/0x210
[ 2794.266005][ T4206]  generic_perform_write+0x20c/0x410
[ 2794.271353][ T4206]  ? shmem_write_begin+0x210/0x210
[ 2794.276498][ T4206]  shmem_file_write_iter+0xc8/0xe0
[ 2794.281748][ T4206]  vfs_write+0x4ab/0x7d0
[ 2794.286010][ T4206]  ksys_write+0xeb/0x1a0
[ 2794.290289][ T4206]  __x64_sys_write+0x42/0x50
22:46:28 executing program 4:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec03, 0x0)
write$ppp(r0, 0x0, 0x0)

[ 2794.294896][ T4206]  do_syscall_64+0x41/0xc0
[ 2794.299352][ T4206]  entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 2794.305297][ T4206] RIP: 0033:0x7f90e4a54ae9
[ 2794.309787][ T4206] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48
[ 2794.329420][ T4206] RSP: 002b:00007f90e3dd70c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 2794.337845][ T4206] RAX: ffffffffffffffda RBX: 00007f90e4b73f80 RCX: 00007f90e4a54ae9
22:46:28 executing program 3:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
write$ppp(r0, &(0x7f00000002c0)="d3", 0xfffffdef) (fail_nth: 12)

22:46:28 executing program 4:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec03, 0x0)
write$ppp(r0, 0x0, 0x0)

22:46:28 executing program 2:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(r1, 0x10f, 0x86)
syz_genetlink_get_family_id$SEG6(&(0x7f0000000000), r1)
ioctl$TUNGETFEATURES(r1, 0x800454cf, &(0x7f0000000540))
write$ppp(r0, &(0x7f00000002c0)="d3", 0x1)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000500)={0x50, 0x0, &(0x7f0000000380)=[@decrefs, @register_looper, @reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000300)={@flat=@handle={0x73682a85, 0x100}, @ptr={0x70742a85, 0x0, &(0x7f00000000c0)=""/214, 0xd6, 0x1, 0x36}, @ptr={0x70742a85, 0x0, &(0x7f00000001c0)=""/194, 0xc2, 0x1, 0x2f}}, &(0x7f0000000040)={0x0, 0x18, 0x40}}}], 0xe6, 0x0, &(0x7f0000000400)="bd2533b444b269b51985cc684629157fa88123b2dee45b52c334457816258221f779d2eba8eb7e560da8852f872b1f779f67024caef9813150c2f5f182379050f6cdf156c49ffb58643e559ad7efc8061adce92ebc09776f9c0651b7e6f441dba8b0a211d7178321a9b3e4fe664adeec4f0629fbebf3a549d5680c6815807b460dd1fd5e19d076937f05d764031f003a52e286013659f32f4bd3da61fc9c892ea017487dcce62c298415a7013f96c9aa4eee915d03cdf9103e57e17bb8cad8f52731b0d1f9fe1c1a194033da9d98926dafac45106c0e05c737614c0b66ec9682e4b06d7ff761"})

22:46:28 executing program 1:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(r1, 0x10f, 0x86)
ioctl$PPPIOCGIDLE(r1, 0x8010743f, &(0x7f0000000040))
write$ppp(r0, 0x0, 0xeffdffff)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0) (async)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0) (async)
setsockopt$TIPC_MCAST_REPLICAST(r1, 0x10f, 0x86) (async)
ioctl$PPPIOCGIDLE(r1, 0x8010743f, &(0x7f0000000040)) (async)
write$ppp(r0, 0x0, 0xeffdffff) (async)

22:46:28 executing program 0:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x7c6801, 0x0)
write$ppp(r0, 0x0, 0xeffdffffffffffff)

22:46:28 executing program 5:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
write$ppp(r0, &(0x7f00000002c0)="d3", 0x1f4f33) (fail_nth: 14)

[ 2794.345831][ T4206] RDX: 00000000001f4f33 RSI: 00000000200002c0 RDI: 0000000000000003
[ 2794.353809][ T4206] RBP: 00007f90e3dd7120 R08: 0000000000000000 R09: 0000000000000000
[ 2794.361790][ T4206] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 2794.369798][ T4206] R13: 000000000000000b R14: 00007f90e4b73f80 R15: 00007ffdb3bfd028
[ 2794.377784][ T4206]  </TASK>
22:46:28 executing program 0:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x7c6801, 0x0)
write$ppp(r0, 0x0, 0xeffdffffffffffff)

22:46:28 executing program 4:
sendmsg$AUDIT_ADD_RULE(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000040)={&(0x7f00000000c0)={0x440, 0x3f3, 0x100, 0x70bd29, 0x25dfdbff, {0x2, 0x0, 0x16, [0x8, 0x1, 0xc20f, 0xfffffffa, 0x8, 0x20, 0x3, 0x8, 0x2, 0x16, 0xf3e, 0x7fffffff, 0x0, 0x7, 0x0, 0x2, 0x0, 0xfffffffe, 0x9, 0x2, 0x1, 0x8000, 0xce, 0x3, 0x5, 0xff, 0x9, 0x40, 0x2e6c, 0x10001, 0x494f764, 0xffff, 0x20, 0x3b, 0x9, 0x3, 0x81, 0x8, 0x4, 0x4, 0x1, 0xfd, 0x1, 0x10c9, 0x1, 0x7fff, 0xa42, 0x2, 0x1bd0, 0x2, 0x6, 0x69e, 0x10001, 0x80000000, 0x4, 0x8, 0xffff, 0x8, 0x1, 0x9, 0x0, 0x9, 0xffff8000, 0xa5d1], [0x6, 0x1, 0xffffffff, 0x5, 0x91e, 0x6, 0x0, 0x8001, 0x6, 0x200, 0xfff, 0x2cd9, 0x6, 0x5, 0x6, 0xfff, 0x8, 0x80000000, 0x1, 0x0, 0x9, 0x7, 0x4, 0x8000, 0x6, 0xc69, 0x1, 0x3, 0x40, 0x101, 0x6, 0x6, 0x80000001, 0x1000, 0x3, 0x5, 0x8, 0x20, 0x1, 0x6, 0x7fffffff, 0xfffffffa, 0xffff0001, 0x7, 0x1cf2, 0x3ff, 0x81, 0x4, 0x1e2b, 0xff, 0x8, 0x2, 0x7, 0x3, 0xfe, 0xfffff917, 0x80000000, 0xd9, 0x9, 0x442, 0x9, 0x400, 0x1f, 0x2], [0x6, 0x28b7, 0x6, 0x7, 0xe8, 0x7fffffff, 0x0, 0x95f7, 0x2, 0x6, 0x50, 0x0, 0x5, 0x9, 0xd9, 0xf972, 0x3, 0x81, 0x6, 0x5, 0x4, 0x9, 0x1f, 0x2, 0x81, 0x1ffc000, 0xfffffffb, 0x7f, 0xa6, 0x6, 0xffff, 0x1, 0x7, 0x0, 0x3, 0x8, 0x35d, 0x7ead, 0x5, 0x1e1, 0xff, 0xffff, 0xffff8001, 0x101, 0x7, 0x4, 0x75b69f7f, 0x7, 0x80000000, 0x5, 0x80000000, 0x29e, 0x36a, 0x7, 0x7, 0x7fff, 0xffff, 0x3362, 0x7fffffff, 0xfff, 0x6, 0x7, 0x200, 0x43], [0x2, 0x8, 0xe8, 0x8, 0x400, 0x3f, 0x10000000, 0x8, 0x7, 0x2, 0x10001, 0x7, 0xffffb5c7, 0x9, 0x10000, 0x10000, 0x1, 0x7, 0x22, 0x1, 0x8, 0x1, 0x8, 0x1, 0x5, 0xc082, 0x9, 0xfac, 0x101, 0x4, 0x1, 0xdd33, 0x3f, 0x2, 0x9, 0x3f, 0x3, 0x0, 0xffffffc1, 0x9, 0xe68, 0x0, 0x90, 0x4, 0x2, 0xde, 0x7, 0x40, 0x1, 0x7, 0x3f, 0x4, 0x1f, 0x5bc, 0x1, 0x1, 0x8, 0x1, 0x6, 0x401, 0x0, 0x1, 0x9, 0xfffffffb], 0x1f, ['.$/@X\x00', '$).%$\x00', '/dev/bsg\x00', '\x00', '/dev/bsg\x00']}, ["", "", "", "", "", ""]}, 0x440}, 0x1, 0x0, 0x0, 0x80}, 0x0)
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
write$ppp(r0, 0x0, 0x0)

22:46:28 executing program 1:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f00000000c0), 0x8200, 0x0)
write$P9_RRENAME(r1, &(0x7f0000000180)={0x7, 0x15, 0x1}, 0x7)
write$ppp(r0, 0x0, 0xeffdffff)
sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="40160e00623e5fb84d8779f9501ed7f3400aaa8aeff35164c6df404886e03347c16191ca66b59a9fe758b419a4c62364232a57bcffa26e925d16289c9f55ffab599e13a47348fec1759ee5238448cda9000000000000000a000000", @ANYRES16=0x0, @ANYBLOB="00122cbd7000fddbdf250200000005000500020000000c000400f80000008100000010000400faffffff07000000acdd00000500050000000000"], 0x40}, 0x1, 0x0, 0x0, 0x2000010}, 0x48014)
r2 = openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(r2, 0x10f, 0x86)
r3 = openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(r3, 0x10f, 0x86)
r4 = openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(r4, 0x10f, 0x86)
sendmsg$L2TP_CMD_SESSION_GET(r4, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x34, 0x0, 0x1, 0x70bd2c, 0x25dfdbff, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x1}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x20}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x3}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x400}]}, 0x34}, 0x1, 0x0, 0x0, 0x20041000}, 0x20800)
r5 = openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(r5, 0x10f, 0x86)
sendmsg$AUDIT_GET(r0, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x10, 0x3e8, 0x1, 0x70bd28, 0x25dfdbfe, "", ["", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x20008000}, 0x4008001)
ioctl$SIOCGSTAMPNS(r5, 0x8907, &(0x7f0000000000))

[ 2794.447321][ T4234] FAULT_INJECTION: forcing a failure.
[ 2794.447321][ T4234] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[ 2794.460628][ T4234] CPU: 1 PID: 4234 Comm: syz-executor.5 Not tainted 6.6.0-rc3-syzkaller-00165-g3b517966c561 #0
[ 2794.471011][ T4234] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/06/2023
[ 2794.479167][ T4241] FAULT_INJECTION: forcing a failure.
[ 2794.479167][ T4241] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[ 2794.481058][ T4234] Call Trace:
[ 2794.481069][ T4234]  <TASK>
[ 2794.481079][ T4234]  dump_stack_lvl+0xda/0x130
[ 2794.505130][ T4234]  dump_stack+0x15/0x20
[ 2794.509360][ T4234]  should_fail_ex+0x21f/0x230
[ 2794.514047][ T4234]  __should_fail_alloc_page+0xfd/0x110
[ 2794.519530][ T4234]  __alloc_pages+0x108/0x340
[ 2794.524130][ T4234]  vma_alloc_folio+0x6a3/0x8c0
[ 2794.528987][ T4234]  ? shmem_inode_acct_block+0x1ee/0x220
[ 2794.534567][ T4234]  shmem_get_folio_gfp+0x579/0xc30
[ 2794.539698][ T4234]  shmem_write_begin+0xa6/0x210
[ 2794.544564][ T4234]  generic_perform_write+0x1c9/0x410
[ 2794.549853][ T4234]  ? shmem_write_begin+0x210/0x210
[ 2794.554994][ T4234]  shmem_file_write_iter+0xc8/0xe0
[ 2794.560138][ T4234]  vfs_write+0x4ab/0x7d0
[ 2794.564390][ T4234]  ksys_write+0xeb/0x1a0
[ 2794.568635][ T4234]  __x64_sys_write+0x42/0x50
[ 2794.573296][ T4234]  do_syscall_64+0x41/0xc0
[ 2794.577761][ T4234]  entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 2794.583746][ T4234] RIP: 0033:0x7f90e4a54ae9
[ 2794.588156][ T4234] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48
[ 2794.608049][ T4234] RSP: 002b:00007f90e3dd70c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 2794.616516][ T4234] RAX: ffffffffffffffda RBX: 00007f90e4b73f80 RCX: 00007f90e4a54ae9
[ 2794.624498][ T4234] RDX: 00000000001f4f33 RSI: 00000000200002c0 RDI: 0000000000000003
[ 2794.632490][ T4234] RBP: 00007f90e3dd7120 R08: 0000000000000000 R09: 0000000000000000
[ 2794.640474][ T4234] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 2794.648469][ T4234] R13: 000000000000000b R14: 00007f90e4b73f80 R15: 00007ffdb3bfd028
[ 2794.656443][ T4234]  </TASK>
[ 2794.659461][ T4241] CPU: 0 PID: 4241 Comm: syz-executor.3 Not tainted 6.6.0-rc3-syzkaller-00165-g3b517966c561 #0
[ 2794.669813][ T4241] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/06/2023
[ 2794.679881][ T4241] Call Trace:
[ 2794.683185][ T4241]  <TASK>
[ 2794.686196][ T4241]  dump_stack_lvl+0xda/0x130
[ 2794.690831][ T4241]  dump_stack+0x15/0x20
[ 2794.695035][ T4241]  should_fail_ex+0x21f/0x230
[ 2794.699773][ T4241]  __should_fail_alloc_page+0xfd/0x110
[ 2794.704762][ T4248] FAULT_INJECTION: forcing a failure.
[ 2794.704762][ T4248] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 2794.705290][ T4241]  __alloc_pages+0x108/0x340
[ 2794.722961][ T4241]  vma_alloc_folio+0x6a3/0x8c0
[ 2794.727883][ T4241]  ? shmem_inode_acct_block+0x1ee/0x220
[ 2794.733500][ T4241]  shmem_get_folio_gfp+0x579/0xc30
[ 2794.738653][ T4241]  shmem_write_begin+0xa6/0x210
[ 2794.743553][ T4241]  generic_perform_write+0x1c9/0x410
[ 2794.748866][ T4241]  ? shmem_write_begin+0x210/0x210
[ 2794.754093][ T4241]  shmem_file_write_iter+0xc8/0xe0
[ 2794.759259][ T4241]  vfs_write+0x4ab/0x7d0
[ 2794.763511][ T4241]  ksys_write+0xeb/0x1a0
[ 2794.767832][ T4241]  __x64_sys_write+0x42/0x50
[ 2794.772423][ T4241]  do_syscall_64+0x41/0xc0
[ 2794.776844][ T4241]  entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 2794.782773][ T4241] RIP: 0033:0x7fd29be1aae9
[ 2794.787226][ T4241] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48
[ 2794.806835][ T4241] RSP: 002b:00007fd29b19d0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 2794.815323][ T4241] RAX: ffffffffffffffda RBX: 00007fd29bf39f80 RCX: 00007fd29be1aae9
[ 2794.823393][ T4241] RDX: 00000000fffffdef RSI: 00000000200002c0 RDI: 0000000000000003
[ 2794.831379][ T4241] RBP: 00007fd29b19d120 R08: 0000000000000000 R09: 0000000000000000
[ 2794.839435][ T4241] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
22:46:28 executing program 2:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(r1, 0x10f, 0x86)
syz_genetlink_get_family_id$SEG6(&(0x7f0000000000), r1)
ioctl$TUNGETFEATURES(r1, 0x800454cf, &(0x7f0000000540))
write$ppp(r0, &(0x7f00000002c0)="d3", 0x1)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000500)={0x50, 0x0, &(0x7f0000000380)=[@decrefs, @register_looper, @reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000300)={@flat=@handle={0x73682a85, 0x100}, @ptr={0x70742a85, 0x0, &(0x7f00000000c0)=""/214, 0xd6, 0x1, 0x36}, @ptr={0x70742a85, 0x0, &(0x7f00000001c0)=""/194, 0xc2, 0x1, 0x2f}}, &(0x7f0000000040)={0x0, 0x18, 0x40}}}], 0xe6, 0x0, &(0x7f0000000400)="bd2533b444b269b51985cc684629157fa88123b2dee45b52c334457816258221f779d2eba8eb7e560da8852f872b1f779f67024caef9813150c2f5f182379050f6cdf156c49ffb58643e559ad7efc8061adce92ebc09776f9c0651b7e6f441dba8b0a211d7178321a9b3e4fe664adeec4f0629fbebf3a549d5680c6815807b460dd1fd5e19d076937f05d764031f003a52e286013659f32f4bd3da61fc9c892ea017487dcce62c298415a7013f96c9aa4eee915d03cdf9103e57e17bb8cad8f52731b0d1f9fe1c1a194033da9d98926dafac45106c0e05c737614c0b66ec9682e4b06d7ff761"})
openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0) (async)
openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0) (async)
setsockopt$TIPC_MCAST_REPLICAST(r1, 0x10f, 0x86) (async)
syz_genetlink_get_family_id$SEG6(&(0x7f0000000000), r1) (async)
ioctl$TUNGETFEATURES(r1, 0x800454cf, &(0x7f0000000540)) (async)
write$ppp(r0, &(0x7f00000002c0)="d3", 0x1) (async)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000500)={0x50, 0x0, &(0x7f0000000380)=[@decrefs, @register_looper, @reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000300)={@flat=@handle={0x73682a85, 0x100}, @ptr={0x70742a85, 0x0, &(0x7f00000000c0)=""/214, 0xd6, 0x1, 0x36}, @ptr={0x70742a85, 0x0, &(0x7f00000001c0)=""/194, 0xc2, 0x1, 0x2f}}, &(0x7f0000000040)={0x0, 0x18, 0x40}}}], 0xe6, 0x0, &(0x7f0000000400)="bd2533b444b269b51985cc684629157fa88123b2dee45b52c334457816258221f779d2eba8eb7e560da8852f872b1f779f67024caef9813150c2f5f182379050f6cdf156c49ffb58643e559ad7efc8061adce92ebc09776f9c0651b7e6f441dba8b0a211d7178321a9b3e4fe664adeec4f0629fbebf3a549d5680c6815807b460dd1fd5e19d076937f05d764031f003a52e286013659f32f4bd3da61fc9c892ea017487dcce62c298415a7013f96c9aa4eee915d03cdf9103e57e17bb8cad8f52731b0d1f9fe1c1a194033da9d98926dafac45106c0e05c737614c0b66ec9682e4b06d7ff761"}) (async)

22:46:28 executing program 5:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
write$ppp(r0, &(0x7f00000002c0)="d3", 0x1f4f33) (fail_nth: 15)

[ 2794.847418][ T4241] R13: 000000000000000b R14: 00007fd29bf39f80 R15: 00007fffc4d1d228
[ 2794.855397][ T4241]  </TASK>
[ 2794.858416][ T4248] CPU: 1 PID: 4248 Comm: syz-executor.5 Not tainted 6.6.0-rc3-syzkaller-00165-g3b517966c561 #0
[ 2794.868843][ T4248] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/06/2023
[ 2794.878909][ T4248] Call Trace:
[ 2794.882189][ T4248]  <TASK>
[ 2794.885119][ T4248]  dump_stack_lvl+0xda/0x130
[ 2794.889735][ T4248]  dump_stack+0x15/0x20
[ 2794.893905][ T4248]  should_fail_ex+0x21f/0x230
22:46:28 executing program 4:
sendmsg$AUDIT_ADD_RULE(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000040)={&(0x7f00000000c0)={0x440, 0x3f3, 0x100, 0x70bd29, 0x25dfdbff, {0x2, 0x0, 0x16, [0x8, 0x1, 0xc20f, 0xfffffffa, 0x8, 0x20, 0x3, 0x8, 0x2, 0x16, 0xf3e, 0x7fffffff, 0x0, 0x7, 0x0, 0x2, 0x0, 0xfffffffe, 0x9, 0x2, 0x1, 0x8000, 0xce, 0x3, 0x5, 0xff, 0x9, 0x40, 0x2e6c, 0x10001, 0x494f764, 0xffff, 0x20, 0x3b, 0x9, 0x3, 0x81, 0x8, 0x4, 0x4, 0x1, 0xfd, 0x1, 0x10c9, 0x1, 0x7fff, 0xa42, 0x2, 0x1bd0, 0x2, 0x6, 0x69e, 0x10001, 0x80000000, 0x4, 0x8, 0xffff, 0x8, 0x1, 0x9, 0x0, 0x9, 0xffff8000, 0xa5d1], [0x6, 0x1, 0xffffffff, 0x5, 0x91e, 0x6, 0x0, 0x8001, 0x6, 0x200, 0xfff, 0x2cd9, 0x6, 0x5, 0x6, 0xfff, 0x8, 0x80000000, 0x1, 0x0, 0x9, 0x7, 0x4, 0x8000, 0x6, 0xc69, 0x1, 0x3, 0x40, 0x101, 0x6, 0x6, 0x80000001, 0x1000, 0x3, 0x5, 0x8, 0x20, 0x1, 0x6, 0x7fffffff, 0xfffffffa, 0xffff0001, 0x7, 0x1cf2, 0x3ff, 0x81, 0x4, 0x1e2b, 0xff, 0x8, 0x2, 0x7, 0x3, 0xfe, 0xfffff917, 0x80000000, 0xd9, 0x9, 0x442, 0x9, 0x400, 0x1f, 0x2], [0x6, 0x28b7, 0x6, 0x7, 0xe8, 0x7fffffff, 0x0, 0x95f7, 0x2, 0x6, 0x50, 0x0, 0x5, 0x9, 0xd9, 0xf972, 0x3, 0x81, 0x6, 0x5, 0x4, 0x9, 0x1f, 0x2, 0x81, 0x1ffc000, 0xfffffffb, 0x7f, 0xa6, 0x6, 0xffff, 0x1, 0x7, 0x0, 0x3, 0x8, 0x35d, 0x7ead, 0x5, 0x1e1, 0xff, 0xffff, 0xffff8001, 0x101, 0x7, 0x4, 0x75b69f7f, 0x7, 0x80000000, 0x5, 0x80000000, 0x29e, 0x36a, 0x7, 0x7, 0x7fff, 0xffff, 0x3362, 0x7fffffff, 0xfff, 0x6, 0x7, 0x200, 0x43], [0x2, 0x8, 0xe8, 0x8, 0x400, 0x3f, 0x10000000, 0x8, 0x7, 0x2, 0x10001, 0x7, 0xffffb5c7, 0x9, 0x10000, 0x10000, 0x1, 0x7, 0x22, 0x1, 0x8, 0x1, 0x8, 0x1, 0x5, 0xc082, 0x9, 0xfac, 0x101, 0x4, 0x1, 0xdd33, 0x3f, 0x2, 0x9, 0x3f, 0x3, 0x0, 0xffffffc1, 0x9, 0xe68, 0x0, 0x90, 0x4, 0x2, 0xde, 0x7, 0x40, 0x1, 0x7, 0x3f, 0x4, 0x1f, 0x5bc, 0x1, 0x1, 0x8, 0x1, 0x6, 0x401, 0x0, 0x1, 0x9, 0xfffffffb], 0x1f, ['.$/@X\x00', '$).%$\x00', '/dev/bsg\x00', '\x00', '/dev/bsg\x00']}, ["", "", "", "", "", ""]}, 0x440}, 0x1, 0x0, 0x0, 0x80}, 0x0) (async)
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
write$ppp(r0, 0x0, 0x0)

22:46:28 executing program 0:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x7c6801, 0x0)
write$ppp(r0, 0x0, 0xeffdffffffffffff)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x7c6801, 0x0) (async)
write$ppp(r0, 0x0, 0xeffdffffffffffff) (async)

22:46:28 executing program 3:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
write$ppp(r0, &(0x7f00000002c0)="d3", 0xfffffdef) (fail_nth: 13)

22:46:28 executing program 2:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(r1, 0x10f, 0x86)
syz_genetlink_get_family_id$SEG6(&(0x7f0000000000), r1)
ioctl$TUNGETFEATURES(r1, 0x800454cf, &(0x7f0000000540))
write$ppp(r0, &(0x7f00000002c0)="d3", 0x1)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000500)={0x50, 0x0, &(0x7f0000000380)=[@decrefs, @register_looper, @reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000300)={@flat=@handle={0x73682a85, 0x100}, @ptr={0x70742a85, 0x0, &(0x7f00000000c0)=""/214, 0xd6, 0x1, 0x36}, @ptr={0x70742a85, 0x0, &(0x7f00000001c0)=""/194, 0xc2, 0x1, 0x2f}}, &(0x7f0000000040)={0x0, 0x18, 0x40}}}], 0xe6, 0x0, &(0x7f0000000400)="bd2533b444b269b51985cc684629157fa88123b2dee45b52c334457816258221f779d2eba8eb7e560da8852f872b1f779f67024caef9813150c2f5f182379050f6cdf156c49ffb58643e559ad7efc8061adce92ebc09776f9c0651b7e6f441dba8b0a211d7178321a9b3e4fe664adeec4f0629fbebf3a549d5680c6815807b460dd1fd5e19d076937f05d764031f003a52e286013659f32f4bd3da61fc9c892ea017487dcce62c298415a7013f96c9aa4eee915d03cdf9103e57e17bb8cad8f52731b0d1f9fe1c1a194033da9d98926dafac45106c0e05c737614c0b66ec9682e4b06d7ff761"})
openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0) (async)
openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0) (async)
setsockopt$TIPC_MCAST_REPLICAST(r1, 0x10f, 0x86) (async)
syz_genetlink_get_family_id$SEG6(&(0x7f0000000000), r1) (async)
ioctl$TUNGETFEATURES(r1, 0x800454cf, &(0x7f0000000540)) (async)
write$ppp(r0, &(0x7f00000002c0)="d3", 0x1) (async)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000500)={0x50, 0x0, &(0x7f0000000380)=[@decrefs, @register_looper, @reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000300)={@flat=@handle={0x73682a85, 0x100}, @ptr={0x70742a85, 0x0, &(0x7f00000000c0)=""/214, 0xd6, 0x1, 0x36}, @ptr={0x70742a85, 0x0, &(0x7f00000001c0)=""/194, 0xc2, 0x1, 0x2f}}, &(0x7f0000000040)={0x0, 0x18, 0x40}}}], 0xe6, 0x0, &(0x7f0000000400)="bd2533b444b269b51985cc684629157fa88123b2dee45b52c334457816258221f779d2eba8eb7e560da8852f872b1f779f67024caef9813150c2f5f182379050f6cdf156c49ffb58643e559ad7efc8061adce92ebc09776f9c0651b7e6f441dba8b0a211d7178321a9b3e4fe664adeec4f0629fbebf3a549d5680c6815807b460dd1fd5e19d076937f05d764031f003a52e286013659f32f4bd3da61fc9c892ea017487dcce62c298415a7013f96c9aa4eee915d03cdf9103e57e17bb8cad8f52731b0d1f9fe1c1a194033da9d98926dafac45106c0e05c737614c0b66ec9682e4b06d7ff761"}) (async)

22:46:28 executing program 1:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0) (async)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f00000000c0), 0x8200, 0x0)
write$P9_RRENAME(r1, &(0x7f0000000180)={0x7, 0x15, 0x1}, 0x7) (async)
write$ppp(r0, 0x0, 0xeffdffff) (async)
sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="40160e00623e5fb84d8779f9501ed7f3400aaa8aeff35164c6df404886e03347c16191ca66b59a9fe758b419a4c62364232a57bcffa26e925d16289c9f55ffab599e13a47348fec1759ee5238448cda9000000000000000a000000", @ANYRES16=0x0, @ANYBLOB="00122cbd7000fddbdf250200000005000500020000000c000400f80000008100000010000400faffffff07000000acdd00000500050000000000"], 0x40}, 0x1, 0x0, 0x0, 0x2000010}, 0x48014)
r2 = openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(r2, 0x10f, 0x86) (async, rerun: 64)
r3 = openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0) (rerun: 64)
setsockopt$TIPC_MCAST_REPLICAST(r3, 0x10f, 0x86)
r4 = openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(r4, 0x10f, 0x86) (async)
sendmsg$L2TP_CMD_SESSION_GET(r4, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x34, 0x0, 0x1, 0x70bd2c, 0x25dfdbff, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x1}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x20}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x3}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x400}]}, 0x34}, 0x1, 0x0, 0x0, 0x20041000}, 0x20800)
r5 = openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(r5, 0x10f, 0x86) (async)
sendmsg$AUDIT_GET(r0, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x10, 0x3e8, 0x1, 0x70bd28, 0x25dfdbfe, "", ["", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x20008000}, 0x4008001)
ioctl$SIOCGSTAMPNS(r5, 0x8907, &(0x7f0000000000))

[ 2794.898610][ T4248]  should_fail+0xb/0x10
[ 2794.902858][ T4248]  should_fail_usercopy+0x1a/0x20
[ 2794.907936][ T4248]  copy_page_from_iter_atomic+0x21c/0xcf0
[ 2794.913705][ T4248]  ? shmem_write_begin+0xa6/0x210
[ 2794.918756][ T4248]  ? shmem_write_begin+0x16d/0x210
[ 2794.923966][ T4248]  generic_perform_write+0x20c/0x410
[ 2794.929363][ T4248]  ? shmem_write_begin+0x210/0x210
[ 2794.934500][ T4248]  shmem_file_write_iter+0xc8/0xe0
[ 2794.939671][ T4248]  vfs_write+0x4ab/0x7d0
[ 2794.943951][ T4248]  ksys_write+0xeb/0x1a0
[ 2794.945564][ T4257] FAULT_INJECTION: forcing a failure.
[ 2794.945564][ T4257] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 2794.948267][ T4248]  __x64_sys_write+0x42/0x50
[ 2794.965930][ T4248]  do_syscall_64+0x41/0xc0
[ 2794.970358][ T4248]  entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 2794.976270][ T4248] RIP: 0033:0x7f90e4a54ae9
[ 2794.980687][ T4248] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48
[ 2795.000351][ T4248] RSP: 002b:00007f90e3dd70c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 2795.008775][ T4248] RAX: ffffffffffffffda RBX: 00007f90e4b73f80 RCX: 00007f90e4a54ae9
[ 2795.016823][ T4248] RDX: 00000000001f4f33 RSI: 00000000200002c0 RDI: 0000000000000003
[ 2795.024798][ T4248] RBP: 00007f90e3dd7120 R08: 0000000000000000 R09: 0000000000000000
[ 2795.032849][ T4248] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 2795.040891][ T4248] R13: 000000000000000b R14: 00007f90e4b73f80 R15: 00007ffdb3bfd028
[ 2795.048889][ T4248]  </TASK>
[ 2795.051931][ T4257] CPU: 0 PID: 4257 Comm: syz-executor.3 Not tainted 6.6.0-rc3-syzkaller-00165-g3b517966c561 #0
[ 2795.062280][ T4257] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/06/2023
[ 2795.072338][ T4257] Call Trace:
[ 2795.075626][ T4257]  <TASK>
[ 2795.078564][ T4257]  dump_stack_lvl+0xda/0x130
[ 2795.083179][ T4257]  dump_stack+0x15/0x20
[ 2795.087428][ T4257]  should_fail_ex+0x21f/0x230
[ 2795.092218][ T4257]  should_fail+0xb/0x10
[ 2795.096412][ T4257]  should_fail_usercopy+0x1a/0x20
[ 2795.101451][ T4257]  copy_page_from_iter_atomic+0x21c/0xcf0
[ 2795.107250][ T4257]  ? shmem_write_begin+0xa6/0x210
[ 2795.112364][ T4257]  ? shmem_write_begin+0x16d/0x210
[ 2795.117576][ T4257]  generic_perform_write+0x20c/0x410
[ 2795.122888][ T4257]  ? shmem_write_begin+0x210/0x210
[ 2795.128032][ T4257]  shmem_file_write_iter+0xc8/0xe0
[ 2795.133231][ T4257]  vfs_write+0x4ab/0x7d0
[ 2795.137571][ T4257]  ksys_write+0xeb/0x1a0
[ 2795.141885][ T4257]  __x64_sys_write+0x42/0x50
[ 2795.146498][ T4257]  do_syscall_64+0x41/0xc0
22:46:29 executing program 4:
sendmsg$AUDIT_ADD_RULE(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000040)={&(0x7f00000000c0)={0x440, 0x3f3, 0x100, 0x70bd29, 0x25dfdbff, {0x2, 0x0, 0x16, [0x8, 0x1, 0xc20f, 0xfffffffa, 0x8, 0x20, 0x3, 0x8, 0x2, 0x16, 0xf3e, 0x7fffffff, 0x0, 0x7, 0x0, 0x2, 0x0, 0xfffffffe, 0x9, 0x2, 0x1, 0x8000, 0xce, 0x3, 0x5, 0xff, 0x9, 0x40, 0x2e6c, 0x10001, 0x494f764, 0xffff, 0x20, 0x3b, 0x9, 0x3, 0x81, 0x8, 0x4, 0x4, 0x1, 0xfd, 0x1, 0x10c9, 0x1, 0x7fff, 0xa42, 0x2, 0x1bd0, 0x2, 0x6, 0x69e, 0x10001, 0x80000000, 0x4, 0x8, 0xffff, 0x8, 0x1, 0x9, 0x0, 0x9, 0xffff8000, 0xa5d1], [0x6, 0x1, 0xffffffff, 0x5, 0x91e, 0x6, 0x0, 0x8001, 0x6, 0x200, 0xfff, 0x2cd9, 0x6, 0x5, 0x6, 0xfff, 0x8, 0x80000000, 0x1, 0x0, 0x9, 0x7, 0x4, 0x8000, 0x6, 0xc69, 0x1, 0x3, 0x40, 0x101, 0x6, 0x6, 0x80000001, 0x1000, 0x3, 0x5, 0x8, 0x20, 0x1, 0x6, 0x7fffffff, 0xfffffffa, 0xffff0001, 0x7, 0x1cf2, 0x3ff, 0x81, 0x4, 0x1e2b, 0xff, 0x8, 0x2, 0x7, 0x3, 0xfe, 0xfffff917, 0x80000000, 0xd9, 0x9, 0x442, 0x9, 0x400, 0x1f, 0x2], [0x6, 0x28b7, 0x6, 0x7, 0xe8, 0x7fffffff, 0x0, 0x95f7, 0x2, 0x6, 0x50, 0x0, 0x5, 0x9, 0xd9, 0xf972, 0x3, 0x81, 0x6, 0x5, 0x4, 0x9, 0x1f, 0x2, 0x81, 0x1ffc000, 0xfffffffb, 0x7f, 0xa6, 0x6, 0xffff, 0x1, 0x7, 0x0, 0x3, 0x8, 0x35d, 0x7ead, 0x5, 0x1e1, 0xff, 0xffff, 0xffff8001, 0x101, 0x7, 0x4, 0x75b69f7f, 0x7, 0x80000000, 0x5, 0x80000000, 0x29e, 0x36a, 0x7, 0x7, 0x7fff, 0xffff, 0x3362, 0x7fffffff, 0xfff, 0x6, 0x7, 0x200, 0x43], [0x2, 0x8, 0xe8, 0x8, 0x400, 0x3f, 0x10000000, 0x8, 0x7, 0x2, 0x10001, 0x7, 0xffffb5c7, 0x9, 0x10000, 0x10000, 0x1, 0x7, 0x22, 0x1, 0x8, 0x1, 0x8, 0x1, 0x5, 0xc082, 0x9, 0xfac, 0x101, 0x4, 0x1, 0xdd33, 0x3f, 0x2, 0x9, 0x3f, 0x3, 0x0, 0xffffffc1, 0x9, 0xe68, 0x0, 0x90, 0x4, 0x2, 0xde, 0x7, 0x40, 0x1, 0x7, 0x3f, 0x4, 0x1f, 0x5bc, 0x1, 0x1, 0x8, 0x1, 0x6, 0x401, 0x0, 0x1, 0x9, 0xfffffffb], 0x1f, ['.$/@X\x00', '$).%$\x00', '/dev/bsg\x00', '\x00', '/dev/bsg\x00']}, ["", "", "", "", "", ""]}, 0x440}, 0x1, 0x0, 0x0, 0x80}, 0x0)
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
write$ppp(r0, 0x0, 0x0)

22:46:29 executing program 0:
sendmsg(0xffffffffffffffff, &(0x7f0000001640)={&(0x7f0000000040)=@qipcrtr={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0x80, &(0x7f0000001480)=[{&(0x7f00000000c0)="9f8b87aa11b7e36b793d45432e69995c183913c4dc47a831da1b6fb80071f0601f2ea6e7858564ea64bac91be1f1c885613187c9544d5e761701f465918b53d4f550fde56cdf089283b71bb154d98c2d8be7ebdd2efb5b89c0361f30db5a202c32f1fac32daeea8a884d", 0x6a}, {&(0x7f0000000140)="b14080ebf39650610754dbaf31a1244bcc3b8f5d749740be8eade3dc29f343", 0x1f}, {&(0x7f0000000180)="5e9e4d86d18328cc286491210763f089f0f49016610367178bec0e2d0f66f8cdf3c94959224356b94ab9062294ef67007c57dde37651af2a02601e123194232c9e9ad658e29672ccbdd90fa4b77548520d70be14d38ff7b752fe61241c5ec4e65177f137441a80dd3a9e9d0536f1cf065cef5c39bb7b4e86427ae3178e3b035234e5cd0527a4c03f9ec8e5e993b9b201d8dc6c04d5e4de18bf74aeaea5efd7833e1fa3e5a8d3e9461b49a8f7", 0xac}, {&(0x7f0000000240)="ce10a6b1754db7c96cd49f2568a7483dc928a2c05c4de0cfe60045724f2a82d859c3c8526ac0d0dc8e4b8c8f65e71086cb66ca74d4479b25f189addca7e656f2ca565ca030a5f432798410497b64779dc38b389b4fec0818bcdc60257eafecc3ff735b1f545c54b5fd11d43f9324ff7f9546f9ea4b4dc750411496e4e3c9863ea9d2eed0cec62cf38f53a6de9d2592a3a7dcf6422136284650ffe2bda823debd0d6d29604e37ef73f34a03eecf4880ceaabc85c3262c3ea78ac0112f83a578d362c030ea9ceebe17d2ea3062df1c9b5dcce25784e360369a032c9ac6d6cb14fdc15a1a03445accf97a4461f52e50cd0d075ef3", 0xf3}, {&(0x7f0000000340)="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", 0x1000}, {&(0x7f0000001340)="ea76a975bbb165f065767152d79119d31461a79ea6617d637f11e2f53ccb13b383da9403607dac6a9e3c664235e04e8bc2e43886736d83657785617f02f91cd8e5077f82bda16c93b0a8517852d13b8facf6b893580b2b28d012c282e9226fc51c9ec161239250c9b7bd51f762ce761037b5277d8c69fe9fb0f47ecef1d72a292f9145d59dace061bf5a748874310efec0c3bc507be67c769d10d9438472498f98d25216b553", 0xa6}, {&(0x7f0000001400)="896a855660fcae988a8d5e519535055e964cacf4581a89bdb09df5cace7568ee7a66908e16be773bc90da787b3e37fd5a0d3953cf4d51109067b44114269f8dd9bd44aac99ad5125307be4faef859eb3759caec727fda821dd8bf47784e3b98bc4c9e84c213a14a574c7", 0x6a}], 0x7, &(0x7f0000001500)=[{0xa8, 0x114, 0x5, "70a904950b4e23f5f09a4b32406b33d0aaadc7bb7a51334c02cec409d1e281cb605fd583304acc9a4dc1fd3514934b156ace9e87d463775a4832627a442c8798d4e8fe0715ad91fd42cf993fb73b72920730eab1a2550e5a717caa46d37270a0d3ae38da4c8e3ff5be3cf239add514cb5a4b2924cee3e0b99d36f07754a385899a15dbba496c516a3bb98890f244f0e1790ecc8b062d3821"}, {0x80, 0x0, 0x3, "334d80bda32e68ad5e83867521edc0b3eb9ef43f313105bf6865e902d287f0f273f7f24d333c5c9f8984749c5a0f1690a7c8cbcbfa69610c7027f988d13f77f4c20790f2a612b4a21506423268911692d0f01e3f9a371e8243903b88bbcbf380dc1318e21978e152e7"}], 0x128}, 0x24004084)
write$ppp(0xffffffffffffffff, 0x0, 0x56df70c34d56499a)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000), 0x4)

22:46:29 executing program 2:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
write$ppp(r0, &(0x7f00000002c0)="d3", 0x1)

22:46:29 executing program 1:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0) (async)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f00000000c0), 0x8200, 0x0)
write$P9_RRENAME(r1, &(0x7f0000000180)={0x7, 0x15, 0x1}, 0x7) (async)
write$ppp(r0, 0x0, 0xeffdffff)
sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="40160e00623e5fb84d8779f9501ed7f3400aaa8aeff35164c6df404886e03347c16191ca66b59a9fe758b419a4c62364232a57bcffa26e925d16289c9f55ffab599e13a47348fec1759ee5238448cda9000000000000000a000000", @ANYRES16=0x0, @ANYBLOB="00122cbd7000fddbdf250200000005000500020000000c000400f80000008100000010000400faffffff07000000acdd00000500050000000000"], 0x40}, 0x1, 0x0, 0x0, 0x2000010}, 0x48014) (async)
r2 = openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(r2, 0x10f, 0x86) (async)
r3 = openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(r3, 0x10f, 0x86)
r4 = openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(r4, 0x10f, 0x86)
sendmsg$L2TP_CMD_SESSION_GET(r4, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x34, 0x0, 0x1, 0x70bd2c, 0x25dfdbff, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x1}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x20}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x3}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x400}]}, 0x34}, 0x1, 0x0, 0x0, 0x20041000}, 0x20800)
r5 = openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(r5, 0x10f, 0x86) (async)
sendmsg$AUDIT_GET(r0, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x10, 0x3e8, 0x1, 0x70bd28, 0x25dfdbfe, "", ["", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x20008000}, 0x4008001) (async)
ioctl$SIOCGSTAMPNS(r5, 0x8907, &(0x7f0000000000))

22:46:29 executing program 5:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
write$ppp(r0, &(0x7f00000002c0)="d3", 0x1f4f33) (fail_nth: 16)

[ 2795.150927][ T4257]  entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 2795.156940][ T4257] RIP: 0033:0x7fd29be1aae9
[ 2795.161421][ T4257] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48
[ 2795.181057][ T4257] RSP: 002b:00007fd29b19d0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 2795.189490][ T4257] RAX: ffffffffffffffda RBX: 00007fd29bf39f80 RCX: 00007fd29be1aae9
22:46:29 executing program 0:
sendmsg(0xffffffffffffffff, &(0x7f0000001640)={&(0x7f0000000040)=@qipcrtr={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0x80, &(0x7f0000001480)=[{&(0x7f00000000c0)="9f8b87aa11b7e36b793d45432e69995c183913c4dc47a831da1b6fb80071f0601f2ea6e7858564ea64bac91be1f1c885613187c9544d5e761701f465918b53d4f550fde56cdf089283b71bb154d98c2d8be7ebdd2efb5b89c0361f30db5a202c32f1fac32daeea8a884d", 0x6a}, {&(0x7f0000000140)="b14080ebf39650610754dbaf31a1244bcc3b8f5d749740be8eade3dc29f343", 0x1f}, {&(0x7f0000000180)="5e9e4d86d18328cc286491210763f089f0f49016610367178bec0e2d0f66f8cdf3c94959224356b94ab9062294ef67007c57dde37651af2a02601e123194232c9e9ad658e29672ccbdd90fa4b77548520d70be14d38ff7b752fe61241c5ec4e65177f137441a80dd3a9e9d0536f1cf065cef5c39bb7b4e86427ae3178e3b035234e5cd0527a4c03f9ec8e5e993b9b201d8dc6c04d5e4de18bf74aeaea5efd7833e1fa3e5a8d3e9461b49a8f7", 0xac}, {&(0x7f0000000240)="ce10a6b1754db7c96cd49f2568a7483dc928a2c05c4de0cfe60045724f2a82d859c3c8526ac0d0dc8e4b8c8f65e71086cb66ca74d4479b25f189addca7e656f2ca565ca030a5f432798410497b64779dc38b389b4fec0818bcdc60257eafecc3ff735b1f545c54b5fd11d43f9324ff7f9546f9ea4b4dc750411496e4e3c9863ea9d2eed0cec62cf38f53a6de9d2592a3a7dcf6422136284650ffe2bda823debd0d6d29604e37ef73f34a03eecf4880ceaabc85c3262c3ea78ac0112f83a578d362c030ea9ceebe17d2ea3062df1c9b5dcce25784e360369a032c9ac6d6cb14fdc15a1a03445accf97a4461f52e50cd0d075ef3", 0xf3}, {&(0x7f0000000340)="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", 0x1000}, {&(0x7f0000001340)="ea76a975bbb165f065767152d79119d31461a79ea6617d637f11e2f53ccb13b383da9403607dac6a9e3c664235e04e8bc2e43886736d83657785617f02f91cd8e5077f82bda16c93b0a8517852d13b8facf6b893580b2b28d012c282e9226fc51c9ec161239250c9b7bd51f762ce761037b5277d8c69fe9fb0f47ecef1d72a292f9145d59dace061bf5a748874310efec0c3bc507be67c769d10d9438472498f98d25216b553", 0xa6}, {&(0x7f0000001400)="896a855660fcae988a8d5e519535055e964cacf4581a89bdb09df5cace7568ee7a66908e16be773bc90da787b3e37fd5a0d3953cf4d51109067b44114269f8dd9bd44aac99ad5125307be4faef859eb3759caec727fda821dd8bf47784e3b98bc4c9e84c213a14a574c7", 0x6a}], 0x7, &(0x7f0000001500)=[{0xa8, 0x114, 0x5, "70a904950b4e23f5f09a4b32406b33d0aaadc7bb7a51334c02cec409d1e281cb605fd583304acc9a4dc1fd3514934b156ace9e87d463775a4832627a442c8798d4e8fe0715ad91fd42cf993fb73b72920730eab1a2550e5a717caa46d37270a0d3ae38da4c8e3ff5be3cf239add514cb5a4b2924cee3e0b99d36f07754a385899a15dbba496c516a3bb98890f244f0e1790ecc8b062d3821"}, {0x80, 0x0, 0x3, "334d80bda32e68ad5e83867521edc0b3eb9ef43f313105bf6865e902d287f0f273f7f24d333c5c9f8984749c5a0f1690a7c8cbcbfa69610c7027f988d13f77f4c20790f2a612b4a21506423268911692d0f01e3f9a371e8243903b88bbcbf380dc1318e21978e152e7"}], 0x128}, 0x24004084) (async, rerun: 64)
write$ppp(0xffffffffffffffff, 0x0, 0x56df70c34d56499a) (async, rerun: 64)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000), 0x4)

22:46:29 executing program 0:
sendmsg(0xffffffffffffffff, &(0x7f0000001640)={&(0x7f0000000040)=@qipcrtr={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0x80, &(0x7f0000001480)=[{&(0x7f00000000c0)="9f8b87aa11b7e36b793d45432e69995c183913c4dc47a831da1b6fb80071f0601f2ea6e7858564ea64bac91be1f1c885613187c9544d5e761701f465918b53d4f550fde56cdf089283b71bb154d98c2d8be7ebdd2efb5b89c0361f30db5a202c32f1fac32daeea8a884d", 0x6a}, {&(0x7f0000000140)="b14080ebf39650610754dbaf31a1244bcc3b8f5d749740be8eade3dc29f343", 0x1f}, {&(0x7f0000000180)="5e9e4d86d18328cc286491210763f089f0f49016610367178bec0e2d0f66f8cdf3c94959224356b94ab9062294ef67007c57dde37651af2a02601e123194232c9e9ad658e29672ccbdd90fa4b77548520d70be14d38ff7b752fe61241c5ec4e65177f137441a80dd3a9e9d0536f1cf065cef5c39bb7b4e86427ae3178e3b035234e5cd0527a4c03f9ec8e5e993b9b201d8dc6c04d5e4de18bf74aeaea5efd7833e1fa3e5a8d3e9461b49a8f7", 0xac}, {&(0x7f0000000240)="ce10a6b1754db7c96cd49f2568a7483dc928a2c05c4de0cfe60045724f2a82d859c3c8526ac0d0dc8e4b8c8f65e71086cb66ca74d4479b25f189addca7e656f2ca565ca030a5f432798410497b64779dc38b389b4fec0818bcdc60257eafecc3ff735b1f545c54b5fd11d43f9324ff7f9546f9ea4b4dc750411496e4e3c9863ea9d2eed0cec62cf38f53a6de9d2592a3a7dcf6422136284650ffe2bda823debd0d6d29604e37ef73f34a03eecf4880ceaabc85c3262c3ea78ac0112f83a578d362c030ea9ceebe17d2ea3062df1c9b5dcce25784e360369a032c9ac6d6cb14fdc15a1a03445accf97a4461f52e50cd0d075ef3", 0xf3}, {&(0x7f0000000340)="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", 0x1000}, {&(0x7f0000001340)="ea76a975bbb165f065767152d79119d31461a79ea6617d637f11e2f53ccb13b383da9403607dac6a9e3c664235e04e8bc2e43886736d83657785617f02f91cd8e5077f82bda16c93b0a8517852d13b8facf6b893580b2b28d012c282e9226fc51c9ec161239250c9b7bd51f762ce761037b5277d8c69fe9fb0f47ecef1d72a292f9145d59dace061bf5a748874310efec0c3bc507be67c769d10d9438472498f98d25216b553", 0xa6}, {&(0x7f0000001400)="896a855660fcae988a8d5e519535055e964cacf4581a89bdb09df5cace7568ee7a66908e16be773bc90da787b3e37fd5a0d3953cf4d51109067b44114269f8dd9bd44aac99ad5125307be4faef859eb3759caec727fda821dd8bf47784e3b98bc4c9e84c213a14a574c7", 0x6a}], 0x7, &(0x7f0000001500)=[{0xa8, 0x114, 0x5, "70a904950b4e23f5f09a4b32406b33d0aaadc7bb7a51334c02cec409d1e281cb605fd583304acc9a4dc1fd3514934b156ace9e87d463775a4832627a442c8798d4e8fe0715ad91fd42cf993fb73b72920730eab1a2550e5a717caa46d37270a0d3ae38da4c8e3ff5be3cf239add514cb5a4b2924cee3e0b99d36f07754a385899a15dbba496c516a3bb98890f244f0e1790ecc8b062d3821"}, {0x80, 0x0, 0x3, "334d80bda32e68ad5e83867521edc0b3eb9ef43f313105bf6865e902d287f0f273f7f24d333c5c9f8984749c5a0f1690a7c8cbcbfa69610c7027f988d13f77f4c20790f2a612b4a21506423268911692d0f01e3f9a371e8243903b88bbcbf380dc1318e21978e152e7"}], 0x128}, 0x24004084) (async)
write$ppp(0xffffffffffffffff, 0x0, 0x56df70c34d56499a) (async)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000), 0x4)

22:46:29 executing program 2:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
write$ppp(r0, &(0x7f00000002c0)="d3", 0x1) (async)
write$ppp(r0, &(0x7f00000002c0)="d3", 0x1)

22:46:29 executing program 1:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(r0, 0x10f, 0x86)
ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r0)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(r1, 0x10f, 0x86)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000640), r1)
sendmsg$AUDIT_DEL_RULE(r0, &(0x7f0000000540)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000040)={&(0x7f00000000c0)={0x444, 0x3f4, 0x4, 0x70bd28, 0x25dfdbfe, {0x6, 0x1, 0x33, [0x9, 0x2, 0x8001, 0x1f, 0x94fc, 0x9, 0x4, 0x8000, 0x6, 0x10001, 0x9, 0x5, 0x6f576a1e, 0x1, 0x40000000, 0x6, 0x80000000, 0xffffffc4, 0x10000, 0x7fff, 0xfffffffa, 0x8001, 0x2, 0x9, 0x0, 0x80c, 0x400, 0x1, 0x8, 0x7, 0x8, 0x0, 0x6, 0xfdd8, 0x8000, 0x4, 0x6, 0x8321, 0x1, 0x81, 0x7, 0x5, 0x7fff, 0x3, 0x3f, 0x80000000, 0x4, 0x0, 0x400, 0x8, 0x7fff, 0x0, 0x6, 0xe7, 0x1ff, 0x3, 0x8, 0x7, 0x1, 0x89e5, 0x400, 0xffff, 0xfffffffd, 0x6], [0x0, 0x3, 0x9, 0x7ff, 0x10000, 0x8, 0x0, 0x0, 0x800, 0x2, 0x2, 0x0, 0x4, 0x2, 0x0, 0xffffffff, 0xff, 0x1, 0xbacf, 0x10001, 0x5, 0xfffffffe, 0x1, 0x6, 0x401, 0x8, 0x1b, 0x9, 0x3, 0x5, 0x5, 0x9, 0x8, 0x6, 0x1ff, 0x7, 0x8, 0xf3, 0x200, 0x8, 0x1, 0x40, 0x8e, 0x8, 0x5, 0x6, 0x4, 0x5, 0x7, 0x8, 0x30cedc7a, 0x7, 0x38, 0x401, 0x6, 0x0, 0x6, 0x101, 0x10000, 0x8000, 0x1, 0x3f, 0x4, 0xffffffff], [0x1, 0x8, 0x5, 0x7, 0x101, 0x1f, 0xfffff801, 0xffffffe1, 0x3, 0x1000, 0x216, 0x6, 0x3a, 0x2, 0x3, 0x81, 0x200, 0x8000, 0x2, 0x200, 0x7ff, 0x7ff, 0xffff0001, 0xfff, 0x7daf, 0xb77, 0x2be080, 0xffffffff, 0xf13c, 0x9, 0x800, 0x40, 0x4, 0x0, 0x400, 0x3, 0x7, 0x7ff, 0x5, 0x3, 0x1, 0x142, 0x200, 0x3, 0x8, 0x2, 0x101, 0x40, 0xffffffff, 0x272, 0xffffffff, 0x7, 0x0, 0xb7f1, 0xfffff800, 0x4, 0x1ff, 0x2, 0x8001, 0x0, 0x3, 0x5, 0x2, 0xaa], [0x0, 0x5, 0x1286, 0x200, 0x6, 0x0, 0x3, 0x7fff, 0x1, 0x2, 0x1f, 0x7, 0xfffff801, 0x10000, 0xab0, 0x10000, 0x8001, 0x7e, 0x4, 0x0, 0x4, 0xad8, 0x1f, 0x6, 0x9, 0x5, 0x5, 0x3ff, 0x21, 0x5315, 0x5, 0x9e7b, 0xffffffff, 0x2, 0x1, 0x1d2, 0x8, 0x1, 0x3, 0x1, 0x437, 0x7, 0x6, 0x9, 0x80, 0x9623, 0x6d6, 0xffffff5d, 0x400, 0x7, 0x2, 0x7f, 0x400, 0xdf5, 0x2, 0xdd94, 0x8db, 0x2, 0x2, 0xae, 0x12f, 0xfffffffd, 0x800, 0x2], 0x23, ['/dev/bsg\x00', '/dev/bsg\x00', '.:\x00', '-!#{\x00', '/dev/bsg\x00']}, ["", "", "", "", "", ""]}, 0x444}, 0x1, 0x0, 0x0, 0x5}, 0x8000)
r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
getsockopt$TIPC_SRC_DROPPABLE(r0, 0x10f, 0x80, &(0x7f0000000580), &(0x7f0000000600)=0x4)
r3 = openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(r3, 0x10f, 0x86)
ioctl$TUNSETVNETLE(r3, 0x400454dc, &(0x7f0000000680)=0x1)
write$ppp(r2, 0x0, 0xeffdffff)

[ 2795.197493][ T4257] RDX: 00000000fffffdef RSI: 00000000200002c0 RDI: 0000000000000003
[ 2795.205484][ T4257] RBP: 00007fd29b19d120 R08: 0000000000000000 R09: 0000000000000000
[ 2795.213476][ T4257] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 2795.221455][ T4257] R13: 000000000000000b R14: 00007fd29bf39f80 R15: 00007fffc4d1d228
[ 2795.229434][ T4257]  </TASK>
[ 2795.240920][ T4290] FAULT_INJECTION: forcing a failure.
[ 2795.240920][ T4290] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[ 2795.254218][ T4290] CPU: 1 PID: 4290 Comm: syz-executor.5 Not tainted 6.6.0-rc3-syzkaller-00165-g3b517966c561 #0
[ 2795.264598][ T4290] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/06/2023
[ 2795.274669][ T4290] Call Trace:
[ 2795.277945][ T4290]  <TASK>
[ 2795.280876][ T4290]  dump_stack_lvl+0xda/0x130
[ 2795.285562][ T4290]  dump_stack+0x15/0x20
[ 2795.289754][ T4290]  should_fail_ex+0x21f/0x230
[ 2795.294483][ T4290]  __should_fail_alloc_page+0xfd/0x110
[ 2795.300058][ T4290]  __alloc_pages+0x108/0x340
[ 2795.304667][ T4290]  vma_alloc_folio+0x6a3/0x8c0
[ 2795.309594][ T4290]  ? shmem_inode_acct_block+0x1ee/0x220
[ 2795.315171][ T4290]  shmem_get_folio_gfp+0x579/0xc30
[ 2795.320378][ T4290]  shmem_write_begin+0xa6/0x210
[ 2795.325355][ T4290]  generic_perform_write+0x1c9/0x410
[ 2795.330721][ T4290]  ? shmem_write_begin+0x210/0x210
[ 2795.335876][ T4290]  shmem_file_write_iter+0xc8/0xe0
[ 2795.341009][ T4290]  vfs_write+0x4ab/0x7d0
[ 2795.345300][ T4290]  ksys_write+0xeb/0x1a0
[ 2795.349564][ T4290]  __x64_sys_write+0x42/0x50
[ 2795.354170][ T4290]  do_syscall_64+0x41/0xc0
[ 2795.358602][ T4290]  entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 2795.364571][ T4290] RIP: 0033:0x7f90e4a54ae9
[ 2795.369056][ T4290] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48
[ 2795.388683][ T4290] RSP: 002b:00007f90e3dd70c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
22:46:29 executing program 3:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
write$ppp(r0, &(0x7f00000002c0)="d3", 0xfffffdef) (fail_nth: 14)

22:46:29 executing program 4:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
write$ppp(r0, 0x0, 0x0)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x8040, 0x0)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(r1, 0x10f, 0x86)
ioctl$USBDEVFS_SETINTERFACE(r1, 0x80085504, &(0x7f00000000c0)={0x3, 0x7c})

22:46:29 executing program 0:
sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x58, 0x0, 0x100, 0x70bd2b, 0x25dfdbfc, {}, [@SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x7}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x5}, @SEG6_ATTR_DST={0x14, 0x1, @mcast1}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x4}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x3}, @SEG6_ATTR_SECRETLEN={0x5}, @SEG6_ATTR_SECRET={0x8, 0x4, [0xfff]}]}, 0x58}, 0x1, 0x0, 0x0, 0x40010}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'vxcan0\x00', <r0=>0x0})
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000140)={'syztnl1\x00', &(0x7f00000000c0)={'syztnl2\x00', r0, 0x29, 0x5, 0xe1, 0xfff, 0x0, @mcast1, @loopback, 0x7, 0x8, 0x7, 0x76b7}})
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x440, 0x0)
r2 = openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(r2, 0x10f, 0x86)
socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000000)=0x1, 0x4)
write$ppp(r1, 0x0, 0xeffdffffffffffff)

22:46:29 executing program 1:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(r0, 0x10f, 0x86)
ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r0)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(r1, 0x10f, 0x86)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000640), r1)
sendmsg$AUDIT_DEL_RULE(r0, &(0x7f0000000540)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000040)={&(0x7f00000000c0)={0x444, 0x3f4, 0x4, 0x70bd28, 0x25dfdbfe, {0x6, 0x1, 0x33, [0x9, 0x2, 0x8001, 0x1f, 0x94fc, 0x9, 0x4, 0x8000, 0x6, 0x10001, 0x9, 0x5, 0x6f576a1e, 0x1, 0x40000000, 0x6, 0x80000000, 0xffffffc4, 0x10000, 0x7fff, 0xfffffffa, 0x8001, 0x2, 0x9, 0x0, 0x80c, 0x400, 0x1, 0x8, 0x7, 0x8, 0x0, 0x6, 0xfdd8, 0x8000, 0x4, 0x6, 0x8321, 0x1, 0x81, 0x7, 0x5, 0x7fff, 0x3, 0x3f, 0x80000000, 0x4, 0x0, 0x400, 0x8, 0x7fff, 0x0, 0x6, 0xe7, 0x1ff, 0x3, 0x8, 0x7, 0x1, 0x89e5, 0x400, 0xffff, 0xfffffffd, 0x6], [0x0, 0x3, 0x9, 0x7ff, 0x10000, 0x8, 0x0, 0x0, 0x800, 0x2, 0x2, 0x0, 0x4, 0x2, 0x0, 0xffffffff, 0xff, 0x1, 0xbacf, 0x10001, 0x5, 0xfffffffe, 0x1, 0x6, 0x401, 0x8, 0x1b, 0x9, 0x3, 0x5, 0x5, 0x9, 0x8, 0x6, 0x1ff, 0x7, 0x8, 0xf3, 0x200, 0x8, 0x1, 0x40, 0x8e, 0x8, 0x5, 0x6, 0x4, 0x5, 0x7, 0x8, 0x30cedc7a, 0x7, 0x38, 0x401, 0x6, 0x0, 0x6, 0x101, 0x10000, 0x8000, 0x1, 0x3f, 0x4, 0xffffffff], [0x1, 0x8, 0x5, 0x7, 0x101, 0x1f, 0xfffff801, 0xffffffe1, 0x3, 0x1000, 0x216, 0x6, 0x3a, 0x2, 0x3, 0x81, 0x200, 0x8000, 0x2, 0x200, 0x7ff, 0x7ff, 0xffff0001, 0xfff, 0x7daf, 0xb77, 0x2be080, 0xffffffff, 0xf13c, 0x9, 0x800, 0x40, 0x4, 0x0, 0x400, 0x3, 0x7, 0x7ff, 0x5, 0x3, 0x1, 0x142, 0x200, 0x3, 0x8, 0x2, 0x101, 0x40, 0xffffffff, 0x272, 0xffffffff, 0x7, 0x0, 0xb7f1, 0xfffff800, 0x4, 0x1ff, 0x2, 0x8001, 0x0, 0x3, 0x5, 0x2, 0xaa], [0x0, 0x5, 0x1286, 0x200, 0x6, 0x0, 0x3, 0x7fff, 0x1, 0x2, 0x1f, 0x7, 0xfffff801, 0x10000, 0xab0, 0x10000, 0x8001, 0x7e, 0x4, 0x0, 0x4, 0xad8, 0x1f, 0x6, 0x9, 0x5, 0x5, 0x3ff, 0x21, 0x5315, 0x5, 0x9e7b, 0xffffffff, 0x2, 0x1, 0x1d2, 0x8, 0x1, 0x3, 0x1, 0x437, 0x7, 0x6, 0x9, 0x80, 0x9623, 0x6d6, 0xffffff5d, 0x400, 0x7, 0x2, 0x7f, 0x400, 0xdf5, 0x2, 0xdd94, 0x8db, 0x2, 0x2, 0xae, 0x12f, 0xfffffffd, 0x800, 0x2], 0x23, ['/dev/bsg\x00', '/dev/bsg\x00', '.:\x00', '-!#{\x00', '/dev/bsg\x00']}, ["", "", "", "", "", ""]}, 0x444}, 0x1, 0x0, 0x0, 0x5}, 0x8000)
r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
getsockopt$TIPC_SRC_DROPPABLE(r0, 0x10f, 0x80, &(0x7f0000000580), &(0x7f0000000600)=0x4)
r3 = openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(r3, 0x10f, 0x86)
ioctl$TUNSETVNETLE(r3, 0x400454dc, &(0x7f0000000680)=0x1)
write$ppp(r2, 0x0, 0xeffdffff)
openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0) (async)
setsockopt$TIPC_MCAST_REPLICAST(r0, 0x10f, 0x86) (async)
ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r0) (async)
openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0) (async)
setsockopt$TIPC_MCAST_REPLICAST(r1, 0x10f, 0x86) (async)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000640), r1) (async)
sendmsg$AUDIT_DEL_RULE(r0, &(0x7f0000000540)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000040)={&(0x7f00000000c0)={0x444, 0x3f4, 0x4, 0x70bd28, 0x25dfdbfe, {0x6, 0x1, 0x33, [0x9, 0x2, 0x8001, 0x1f, 0x94fc, 0x9, 0x4, 0x8000, 0x6, 0x10001, 0x9, 0x5, 0x6f576a1e, 0x1, 0x40000000, 0x6, 0x80000000, 0xffffffc4, 0x10000, 0x7fff, 0xfffffffa, 0x8001, 0x2, 0x9, 0x0, 0x80c, 0x400, 0x1, 0x8, 0x7, 0x8, 0x0, 0x6, 0xfdd8, 0x8000, 0x4, 0x6, 0x8321, 0x1, 0x81, 0x7, 0x5, 0x7fff, 0x3, 0x3f, 0x80000000, 0x4, 0x0, 0x400, 0x8, 0x7fff, 0x0, 0x6, 0xe7, 0x1ff, 0x3, 0x8, 0x7, 0x1, 0x89e5, 0x400, 0xffff, 0xfffffffd, 0x6], [0x0, 0x3, 0x9, 0x7ff, 0x10000, 0x8, 0x0, 0x0, 0x800, 0x2, 0x2, 0x0, 0x4, 0x2, 0x0, 0xffffffff, 0xff, 0x1, 0xbacf, 0x10001, 0x5, 0xfffffffe, 0x1, 0x6, 0x401, 0x8, 0x1b, 0x9, 0x3, 0x5, 0x5, 0x9, 0x8, 0x6, 0x1ff, 0x7, 0x8, 0xf3, 0x200, 0x8, 0x1, 0x40, 0x8e, 0x8, 0x5, 0x6, 0x4, 0x5, 0x7, 0x8, 0x30cedc7a, 0x7, 0x38, 0x401, 0x6, 0x0, 0x6, 0x101, 0x10000, 0x8000, 0x1, 0x3f, 0x4, 0xffffffff], [0x1, 0x8, 0x5, 0x7, 0x101, 0x1f, 0xfffff801, 0xffffffe1, 0x3, 0x1000, 0x216, 0x6, 0x3a, 0x2, 0x3, 0x81, 0x200, 0x8000, 0x2, 0x200, 0x7ff, 0x7ff, 0xffff0001, 0xfff, 0x7daf, 0xb77, 0x2be080, 0xffffffff, 0xf13c, 0x9, 0x800, 0x40, 0x4, 0x0, 0x400, 0x3, 0x7, 0x7ff, 0x5, 0x3, 0x1, 0x142, 0x200, 0x3, 0x8, 0x2, 0x101, 0x40, 0xffffffff, 0x272, 0xffffffff, 0x7, 0x0, 0xb7f1, 0xfffff800, 0x4, 0x1ff, 0x2, 0x8001, 0x0, 0x3, 0x5, 0x2, 0xaa], [0x0, 0x5, 0x1286, 0x200, 0x6, 0x0, 0x3, 0x7fff, 0x1, 0x2, 0x1f, 0x7, 0xfffff801, 0x10000, 0xab0, 0x10000, 0x8001, 0x7e, 0x4, 0x0, 0x4, 0xad8, 0x1f, 0x6, 0x9, 0x5, 0x5, 0x3ff, 0x21, 0x5315, 0x5, 0x9e7b, 0xffffffff, 0x2, 0x1, 0x1d2, 0x8, 0x1, 0x3, 0x1, 0x437, 0x7, 0x6, 0x9, 0x80, 0x9623, 0x6d6, 0xffffff5d, 0x400, 0x7, 0x2, 0x7f, 0x400, 0xdf5, 0x2, 0xdd94, 0x8db, 0x2, 0x2, 0xae, 0x12f, 0xfffffffd, 0x800, 0x2], 0x23, ['/dev/bsg\x00', '/dev/bsg\x00', '.:\x00', '-!#{\x00', '/dev/bsg\x00']}, ["", "", "", "", "", ""]}, 0x444}, 0x1, 0x0, 0x0, 0x5}, 0x8000) (async)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0) (async)
getsockopt$TIPC_SRC_DROPPABLE(r0, 0x10f, 0x80, &(0x7f0000000580), &(0x7f0000000600)=0x4) (async)
openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0) (async)
setsockopt$TIPC_MCAST_REPLICAST(r3, 0x10f, 0x86) (async)
ioctl$TUNSETVNETLE(r3, 0x400454dc, &(0x7f0000000680)=0x1) (async)
write$ppp(r2, 0x0, 0xeffdffff) (async)

22:46:29 executing program 2:
openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async)
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
write$ppp(r0, &(0x7f00000002c0)="d3", 0x1)

22:46:29 executing program 1:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(r0, 0x10f, 0x86)
ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r0)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(r1, 0x10f, 0x86)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000640), r1)
sendmsg$AUDIT_DEL_RULE(r0, &(0x7f0000000540)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000040)={&(0x7f00000000c0)={0x444, 0x3f4, 0x4, 0x70bd28, 0x25dfdbfe, {0x6, 0x1, 0x33, [0x9, 0x2, 0x8001, 0x1f, 0x94fc, 0x9, 0x4, 0x8000, 0x6, 0x10001, 0x9, 0x5, 0x6f576a1e, 0x1, 0x40000000, 0x6, 0x80000000, 0xffffffc4, 0x10000, 0x7fff, 0xfffffffa, 0x8001, 0x2, 0x9, 0x0, 0x80c, 0x400, 0x1, 0x8, 0x7, 0x8, 0x0, 0x6, 0xfdd8, 0x8000, 0x4, 0x6, 0x8321, 0x1, 0x81, 0x7, 0x5, 0x7fff, 0x3, 0x3f, 0x80000000, 0x4, 0x0, 0x400, 0x8, 0x7fff, 0x0, 0x6, 0xe7, 0x1ff, 0x3, 0x8, 0x7, 0x1, 0x89e5, 0x400, 0xffff, 0xfffffffd, 0x6], [0x0, 0x3, 0x9, 0x7ff, 0x10000, 0x8, 0x0, 0x0, 0x800, 0x2, 0x2, 0x0, 0x4, 0x2, 0x0, 0xffffffff, 0xff, 0x1, 0xbacf, 0x10001, 0x5, 0xfffffffe, 0x1, 0x6, 0x401, 0x8, 0x1b, 0x9, 0x3, 0x5, 0x5, 0x9, 0x8, 0x6, 0x1ff, 0x7, 0x8, 0xf3, 0x200, 0x8, 0x1, 0x40, 0x8e, 0x8, 0x5, 0x6, 0x4, 0x5, 0x7, 0x8, 0x30cedc7a, 0x7, 0x38, 0x401, 0x6, 0x0, 0x6, 0x101, 0x10000, 0x8000, 0x1, 0x3f, 0x4, 0xffffffff], [0x1, 0x8, 0x5, 0x7, 0x101, 0x1f, 0xfffff801, 0xffffffe1, 0x3, 0x1000, 0x216, 0x6, 0x3a, 0x2, 0x3, 0x81, 0x200, 0x8000, 0x2, 0x200, 0x7ff, 0x7ff, 0xffff0001, 0xfff, 0x7daf, 0xb77, 0x2be080, 0xffffffff, 0xf13c, 0x9, 0x800, 0x40, 0x4, 0x0, 0x400, 0x3, 0x7, 0x7ff, 0x5, 0x3, 0x1, 0x142, 0x200, 0x3, 0x8, 0x2, 0x101, 0x40, 0xffffffff, 0x272, 0xffffffff, 0x7, 0x0, 0xb7f1, 0xfffff800, 0x4, 0x1ff, 0x2, 0x8001, 0x0, 0x3, 0x5, 0x2, 0xaa], [0x0, 0x5, 0x1286, 0x200, 0x6, 0x0, 0x3, 0x7fff, 0x1, 0x2, 0x1f, 0x7, 0xfffff801, 0x10000, 0xab0, 0x10000, 0x8001, 0x7e, 0x4, 0x0, 0x4, 0xad8, 0x1f, 0x6, 0x9, 0x5, 0x5, 0x3ff, 0x21, 0x5315, 0x5, 0x9e7b, 0xffffffff, 0x2, 0x1, 0x1d2, 0x8, 0x1, 0x3, 0x1, 0x437, 0x7, 0x6, 0x9, 0x80, 0x9623, 0x6d6, 0xffffff5d, 0x400, 0x7, 0x2, 0x7f, 0x400, 0xdf5, 0x2, 0xdd94, 0x8db, 0x2, 0x2, 0xae, 0x12f, 0xfffffffd, 0x800, 0x2], 0x23, ['/dev/bsg\x00', '/dev/bsg\x00', '.:\x00', '-!#{\x00', '/dev/bsg\x00']}, ["", "", "", "", "", ""]}, 0x444}, 0x1, 0x0, 0x0, 0x5}, 0x8000)
r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
getsockopt$TIPC_SRC_DROPPABLE(r0, 0x10f, 0x80, &(0x7f0000000580), &(0x7f0000000600)=0x4)
r3 = openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(r3, 0x10f, 0x86)
ioctl$TUNSETVNETLE(r3, 0x400454dc, &(0x7f0000000680)=0x1)
write$ppp(r2, 0x0, 0xeffdffff)
openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0) (async)
setsockopt$TIPC_MCAST_REPLICAST(r0, 0x10f, 0x86) (async)
ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r0) (async)
openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0) (async)
setsockopt$TIPC_MCAST_REPLICAST(r1, 0x10f, 0x86) (async)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000640), r1) (async)
sendmsg$AUDIT_DEL_RULE(r0, &(0x7f0000000540)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000040)={&(0x7f00000000c0)={0x444, 0x3f4, 0x4, 0x70bd28, 0x25dfdbfe, {0x6, 0x1, 0x33, [0x9, 0x2, 0x8001, 0x1f, 0x94fc, 0x9, 0x4, 0x8000, 0x6, 0x10001, 0x9, 0x5, 0x6f576a1e, 0x1, 0x40000000, 0x6, 0x80000000, 0xffffffc4, 0x10000, 0x7fff, 0xfffffffa, 0x8001, 0x2, 0x9, 0x0, 0x80c, 0x400, 0x1, 0x8, 0x7, 0x8, 0x0, 0x6, 0xfdd8, 0x8000, 0x4, 0x6, 0x8321, 0x1, 0x81, 0x7, 0x5, 0x7fff, 0x3, 0x3f, 0x80000000, 0x4, 0x0, 0x400, 0x8, 0x7fff, 0x0, 0x6, 0xe7, 0x1ff, 0x3, 0x8, 0x7, 0x1, 0x89e5, 0x400, 0xffff, 0xfffffffd, 0x6], [0x0, 0x3, 0x9, 0x7ff, 0x10000, 0x8, 0x0, 0x0, 0x800, 0x2, 0x2, 0x0, 0x4, 0x2, 0x0, 0xffffffff, 0xff, 0x1, 0xbacf, 0x10001, 0x5, 0xfffffffe, 0x1, 0x6, 0x401, 0x8, 0x1b, 0x9, 0x3, 0x5, 0x5, 0x9, 0x8, 0x6, 0x1ff, 0x7, 0x8, 0xf3, 0x200, 0x8, 0x1, 0x40, 0x8e, 0x8, 0x5, 0x6, 0x4, 0x5, 0x7, 0x8, 0x30cedc7a, 0x7, 0x38, 0x401, 0x6, 0x0, 0x6, 0x101, 0x10000, 0x8000, 0x1, 0x3f, 0x4, 0xffffffff], [0x1, 0x8, 0x5, 0x7, 0x101, 0x1f, 0xfffff801, 0xffffffe1, 0x3, 0x1000, 0x216, 0x6, 0x3a, 0x2, 0x3, 0x81, 0x200, 0x8000, 0x2, 0x200, 0x7ff, 0x7ff, 0xffff0001, 0xfff, 0x7daf, 0xb77, 0x2be080, 0xffffffff, 0xf13c, 0x9, 0x800, 0x40, 0x4, 0x0, 0x400, 0x3, 0x7, 0x7ff, 0x5, 0x3, 0x1, 0x142, 0x200, 0x3, 0x8, 0x2, 0x101, 0x40, 0xffffffff, 0x272, 0xffffffff, 0x7, 0x0, 0xb7f1, 0xfffff800, 0x4, 0x1ff, 0x2, 0x8001, 0x0, 0x3, 0x5, 0x2, 0xaa], [0x0, 0x5, 0x1286, 0x200, 0x6, 0x0, 0x3, 0x7fff, 0x1, 0x2, 0x1f, 0x7, 0xfffff801, 0x10000, 0xab0, 0x10000, 0x8001, 0x7e, 0x4, 0x0, 0x4, 0xad8, 0x1f, 0x6, 0x9, 0x5, 0x5, 0x3ff, 0x21, 0x5315, 0x5, 0x9e7b, 0xffffffff, 0x2, 0x1, 0x1d2, 0x8, 0x1, 0x3, 0x1, 0x437, 0x7, 0x6, 0x9, 0x80, 0x9623, 0x6d6, 0xffffff5d, 0x400, 0x7, 0x2, 0x7f, 0x400, 0xdf5, 0x2, 0xdd94, 0x8db, 0x2, 0x2, 0xae, 0x12f, 0xfffffffd, 0x800, 0x2], 0x23, ['/dev/bsg\x00', '/dev/bsg\x00', '.:\x00', '-!#{\x00', '/dev/bsg\x00']}, ["", "", "", "", "", ""]}, 0x444}, 0x1, 0x0, 0x0, 0x5}, 0x8000) (async)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0) (async)
getsockopt$TIPC_SRC_DROPPABLE(r0, 0x10f, 0x80, &(0x7f0000000580), &(0x7f0000000600)=0x4) (async)
openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0) (async)
setsockopt$TIPC_MCAST_REPLICAST(r3, 0x10f, 0x86) (async)
ioctl$TUNSETVNETLE(r3, 0x400454dc, &(0x7f0000000680)=0x1) (async)
write$ppp(r2, 0x0, 0xeffdffff) (async)

22:46:29 executing program 0:
sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x58, 0x0, 0x100, 0x70bd2b, 0x25dfdbfc, {}, [@SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x7}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x5}, @SEG6_ATTR_DST={0x14, 0x1, @mcast1}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x4}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x3}, @SEG6_ATTR_SECRETLEN={0x5}, @SEG6_ATTR_SECRET={0x8, 0x4, [0xfff]}]}, 0x58}, 0x1, 0x0, 0x0, 0x40010}, 0x0) (async)
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'vxcan0\x00', <r0=>0x0})
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000140)={'syztnl1\x00', &(0x7f00000000c0)={'syztnl2\x00', r0, 0x29, 0x5, 0xe1, 0xfff, 0x0, @mcast1, @loopback, 0x7, 0x8, 0x7, 0x76b7}}) (async)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x440, 0x0)
r2 = openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(r2, 0x10f, 0x86) (async)
socket$inet_mptcp(0x2, 0x1, 0x106) (async)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000000)=0x1, 0x4) (async)
write$ppp(r1, 0x0, 0xeffdffffffffffff)

[ 2795.397167][ T4290] RAX: ffffffffffffffda RBX: 00007f90e4b73f80 RCX: 00007f90e4a54ae9
[ 2795.405145][ T4290] RDX: 00000000001f4f33 RSI: 00000000200002c0 RDI: 0000000000000003
[ 2795.413124][ T4290] RBP: 00007f90e3dd7120 R08: 0000000000000000 R09: 0000000000000000
[ 2795.421275][ T4290] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 2795.429286][ T4290] R13: 000000000000000b R14: 00007f90e4b73f80 R15: 00007ffdb3bfd028
[ 2795.437274][ T4290]  </TASK>
22:46:29 executing program 5:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
write$ppp(r0, &(0x7f00000002c0)="d3", 0x1f4f33) (fail_nth: 17)

22:46:29 executing program 4:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
write$ppp(r0, 0x0, 0x0) (async)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x8040, 0x0) (async)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(r1, 0x10f, 0x86) (async)
ioctl$USBDEVFS_SETINTERFACE(r1, 0x80085504, &(0x7f00000000c0)={0x3, 0x7c})

22:46:29 executing program 2:
openat$bsg(0xffffffffffffff9c, &(0x7f0000000200), 0x52d406, 0x0)
openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080), 0x323802, 0x0)
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(r0, 0x10f, 0x86)
write$ppp(r0, &(0x7f0000000300)="6435345ec3e24455a66c7f84b7c9b1d65cc56812d97f0fa51a169e3de4108ad90e00ec623aaa945d7b32ce02f806fcab8884ff91f814b33c7a3a3b0a8c22108b51f1422498719f9bb8a057793e48a49638717402110c02f0216707540b8ae6ffe36cb9c907b0296f75c09ae64cdb90ee194bf667b4e08fa9adb4001d6caa0097a19700996fa7d0625edeb2bc64f4c282b83c1a10c530a55c6f1ace08b08b3875a141802f944100"/177, 0x83)
r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x12000, 0x0)
sendmsg$can_j1939(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)="a836cc5996b8471a6087e9fdabcc19c7d50b1baf3bb0d13e4778dfe2f27c6aed010197719177b6b9f012afd5fea0e35055ee5126ecdc58a38ea2e38dd64185c23e51301f25cd24bcbf6de4b50fe6f63202cb9ef3396a29970f159a74f660c884d67ead995a493df3d8a382f0925b6188b5048093d1a77d16bd2a673113e665bf2a0d7c1085d54fcdb8c5cb78be42b21a71c901c6d595eb9da60638414ae66c26f66240a18366f59e95189355c44968b28aa7d1f1229a11e8be143c2ad263e006e0b4fb5b9285485f85a7df03fd08778f75413c107076d4de", 0xd8}, 0x1, 0x0, 0x0, 0x11}, 0xd4)

22:46:29 executing program 1:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
write$ppp(r0, 0x0, 0xeffdffff)

22:46:29 executing program 4:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
write$ppp(r0, 0x0, 0x0)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x8040, 0x0)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(r1, 0x10f, 0x86)
ioctl$USBDEVFS_SETINTERFACE(r1, 0x80085504, &(0x7f00000000c0)={0x3, 0x7c})
openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async)
write$ppp(r0, 0x0, 0x0) (async)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x8040, 0x0) (async)
openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0) (async)
setsockopt$TIPC_MCAST_REPLICAST(r1, 0x10f, 0x86) (async)
ioctl$USBDEVFS_SETINTERFACE(r1, 0x80085504, &(0x7f00000000c0)={0x3, 0x7c}) (async)

[ 2795.474591][ T4314] FAULT_INJECTION: forcing a failure.
[ 2795.474591][ T4314] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[ 2795.487861][ T4314] CPU: 1 PID: 4314 Comm: syz-executor.3 Not tainted 6.6.0-rc3-syzkaller-00165-g3b517966c561 #0
[ 2795.498192][ T4314] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/06/2023
[ 2795.505761][ T4322] FAULT_INJECTION: forcing a failure.
[ 2795.505761][ T4322] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 2795.508426][ T4314] Call Trace:
[ 2795.508436][ T4314]  <TASK>
[ 2795.508445][ T4314]  dump_stack_lvl+0xda/0x130
[ 2795.532274][ T4314]  dump_stack+0x15/0x20
[ 2795.536455][ T4314]  should_fail_ex+0x21f/0x230
[ 2795.541190][ T4314]  __should_fail_alloc_page+0xfd/0x110
[ 2795.546792][ T4314]  __alloc_pages+0x108/0x340
[ 2795.551510][ T4314]  vma_alloc_folio+0x6a3/0x8c0
[ 2795.556345][ T4314]  ? shmem_inode_acct_block+0x1ee/0x220
[ 2795.561927][ T4314]  shmem_get_folio_gfp+0x579/0xc30
[ 2795.567061][ T4314]  shmem_write_begin+0xa6/0x210
[ 2795.572024][ T4314]  generic_perform_write+0x1c9/0x410
[ 2795.577453][ T4314]  ? shmem_write_begin+0x210/0x210
[ 2795.582575][ T4314]  shmem_file_write_iter+0xc8/0xe0
[ 2795.587760][ T4314]  vfs_write+0x4ab/0x7d0
[ 2795.592024][ T4314]  ksys_write+0xeb/0x1a0
[ 2795.596350][ T4314]  __x64_sys_write+0x42/0x50
[ 2795.600954][ T4314]  do_syscall_64+0x41/0xc0
[ 2795.605372][ T4314]  entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 2795.611276][ T4314] RIP: 0033:0x7fd29be1aae9
[ 2795.615712][ T4314] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48
[ 2795.635386][ T4314] RSP: 002b:00007fd29b19d0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 2795.643800][ T4314] RAX: ffffffffffffffda RBX: 00007fd29bf39f80 RCX: 00007fd29be1aae9
[ 2795.651902][ T4314] RDX: 00000000fffffdef RSI: 00000000200002c0 RDI: 0000000000000003
[ 2795.659947][ T4314] RBP: 00007fd29b19d120 R08: 0000000000000000 R09: 0000000000000000
[ 2795.667996][ T4314] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 2795.675983][ T4314] R13: 000000000000000b R14: 00007fd29bf39f80 R15: 00007fffc4d1d228
[ 2795.683985][ T4314]  </TASK>
[ 2795.687034][ T4322] CPU: 0 PID: 4322 Comm: syz-executor.5 Not tainted 6.6.0-rc3-syzkaller-00165-g3b517966c561 #0
[ 2795.697576][ T4322] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/06/2023
[ 2795.707640][ T4322] Call Trace:
[ 2795.710976][ T4322]  <TASK>
[ 2795.713954][ T4322]  dump_stack_lvl+0xda/0x130
[ 2795.718557][ T4322]  dump_stack+0x15/0x20
22:46:29 executing program 3:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
write$ppp(r0, &(0x7f00000002c0)="d3", 0xfffffdef) (fail_nth: 15)

22:46:29 executing program 0:
sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x58, 0x0, 0x100, 0x70bd2b, 0x25dfdbfc, {}, [@SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x7}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x5}, @SEG6_ATTR_DST={0x14, 0x1, @mcast1}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x4}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x3}, @SEG6_ATTR_SECRETLEN={0x5}, @SEG6_ATTR_SECRET={0x8, 0x4, [0xfff]}]}, 0x58}, 0x1, 0x0, 0x0, 0x40010}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'vxcan0\x00', <r0=>0x0})
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000140)={'syztnl1\x00', &(0x7f00000000c0)={'syztnl2\x00', r0, 0x29, 0x5, 0xe1, 0xfff, 0x0, @mcast1, @loopback, 0x7, 0x8, 0x7, 0x76b7}})
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x440, 0x0) (async)
r2 = openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(r2, 0x10f, 0x86)
socket$inet_mptcp(0x2, 0x1, 0x106) (async)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000000)=0x1, 0x4) (async, rerun: 32)
write$ppp(r1, 0x0, 0xeffdffffffffffff) (rerun: 32)

22:46:29 executing program 2:
openat$bsg(0xffffffffffffff9c, &(0x7f0000000200), 0x52d406, 0x0) (async)
openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080), 0x323802, 0x0) (async, rerun: 64)
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0) (rerun: 64)
setsockopt$TIPC_MCAST_REPLICAST(r0, 0x10f, 0x86) (async)
write$ppp(r0, &(0x7f0000000300)="6435345ec3e24455a66c7f84b7c9b1d65cc56812d97f0fa51a169e3de4108ad90e00ec623aaa945d7b32ce02f806fcab8884ff91f814b33c7a3a3b0a8c22108b51f1422498719f9bb8a057793e48a49638717402110c02f0216707540b8ae6ffe36cb9c907b0296f75c09ae64cdb90ee194bf667b4e08fa9adb4001d6caa0097a19700996fa7d0625edeb2bc64f4c282b83c1a10c530a55c6f1ace08b08b3875a141802f944100"/177, 0x83)
r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x12000, 0x0)
sendmsg$can_j1939(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)="a836cc5996b8471a6087e9fdabcc19c7d50b1baf3bb0d13e4778dfe2f27c6aed010197719177b6b9f012afd5fea0e35055ee5126ecdc58a38ea2e38dd64185c23e51301f25cd24bcbf6de4b50fe6f63202cb9ef3396a29970f159a74f660c884d67ead995a493df3d8a382f0925b6188b5048093d1a77d16bd2a673113e665bf2a0d7c1085d54fcdb8c5cb78be42b21a71c901c6d595eb9da60638414ae66c26f66240a18366f59e95189355c44968b28aa7d1f1229a11e8be143c2ad263e006e0b4fb5b9285485f85a7df03fd08778f75413c107076d4de", 0xd8}, 0x1, 0x0, 0x0, 0x11}, 0xd4)

22:46:29 executing program 1:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
write$ppp(r0, 0x0, 0xeffdffff)

22:46:29 executing program 1:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
write$ppp(r0, 0x0, 0xeffdffff)

[ 2795.722728][ T4322]  should_fail_ex+0x21f/0x230
[ 2795.727430][ T4322]  should_fail+0xb/0x10
[ 2795.731710][ T4322]  should_fail_usercopy+0x1a/0x20
[ 2795.736749][ T4322]  copy_page_from_iter_atomic+0x21c/0xcf0
[ 2795.742500][ T4322]  ? shmem_write_begin+0xa6/0x210
[ 2795.747585][ T4322]  ? shmem_write_begin+0x16d/0x210
[ 2795.752745][ T4322]  generic_perform_write+0x20c/0x410
[ 2795.758112][ T4322]  ? shmem_write_begin+0x210/0x210
[ 2795.763252][ T4322]  shmem_file_write_iter+0xc8/0xe0
[ 2795.768410][ T4322]  vfs_write+0x4ab/0x7d0
[ 2795.772726][ T4322]  ksys_write+0xeb/0x1a0
[ 2795.773809][ T4336] FAULT_INJECTION: forcing a failure.
[ 2795.773809][ T4336] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 2795.776962][ T4322]  __x64_sys_write+0x42/0x50
[ 2795.794619][ T4322]  do_syscall_64+0x41/0xc0
[ 2795.799086][ T4322]  entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 2795.805023][ T4322] RIP: 0033:0x7f90e4a54ae9
[ 2795.809544][ T4322] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48
[ 2795.829225][ T4322] RSP: 002b:00007f90e3dd70c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 2795.837647][ T4322] RAX: ffffffffffffffda RBX: 00007f90e4b73f80 RCX: 00007f90e4a54ae9
[ 2795.845617][ T4322] RDX: 00000000001f4f33 RSI: 00000000200002c0 RDI: 0000000000000003
[ 2795.853604][ T4322] RBP: 00007f90e3dd7120 R08: 0000000000000000 R09: 0000000000000000
[ 2795.861599][ T4322] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 2795.869565][ T4322] R13: 000000000000000b R14: 00007f90e4b73f80 R15: 00007ffdb3bfd028
[ 2795.877560][ T4322]  </TASK>
[ 2795.880652][ T4336] CPU: 1 PID: 4336 Comm: syz-executor.3 Not tainted 6.6.0-rc3-syzkaller-00165-g3b517966c561 #0
[ 2795.891046][ T4336] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/06/2023
[ 2795.901114][ T4336] Call Trace:
[ 2795.904412][ T4336]  <TASK>
[ 2795.907344][ T4336]  dump_stack_lvl+0xda/0x130
[ 2795.911946][ T4336]  dump_stack+0x15/0x20
[ 2795.916181][ T4336]  should_fail_ex+0x21f/0x230
[ 2795.920928][ T4336]  should_fail+0xb/0x10
[ 2795.925092][ T4336]  should_fail_usercopy+0x1a/0x20
[ 2795.930183][ T4336]  copy_page_from_iter_atomic+0x21c/0xcf0
[ 2795.936028][ T4336]  ? shmem_write_begin+0xa6/0x210
[ 2795.941133][ T4336]  ? shmem_write_begin+0x16d/0x210
[ 2795.946286][ T4336]  generic_perform_write+0x20c/0x410
[ 2795.947643][ T4346] FAULT_INJECTION: forcing a failure.
[ 2795.947643][ T4346] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[ 2795.951589][ T4336]  ? shmem_write_begin+0x210/0x210
[ 2795.969912][ T4336]  shmem_file_write_iter+0xc8/0xe0
[ 2795.975049][ T4336]  vfs_write+0x4ab/0x7d0
[ 2795.979305][ T4336]  ksys_write+0xeb/0x1a0
[ 2795.983618][ T4336]  __x64_sys_write+0x42/0x50
[ 2795.988213][ T4336]  do_syscall_64+0x41/0xc0
[ 2795.992648][ T4336]  entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 2795.998583][ T4336] RIP: 0033:0x7fd29be1aae9
[ 2796.003000][ T4336] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48
[ 2796.022683][ T4336] RSP: 002b:00007fd29b19d0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 2796.031199][ T4336] RAX: ffffffffffffffda RBX: 00007fd29bf39f80 RCX: 00007fd29be1aae9
[ 2796.039212][ T4336] RDX: 00000000fffffdef RSI: 00000000200002c0 RDI: 0000000000000003
[ 2796.047183][ T4336] RBP: 00007fd29b19d120 R08: 0000000000000000 R09: 0000000000000000
[ 2796.055245][ T4336] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 2796.063220][ T4336] R13: 000000000000000b R14: 00007fd29bf39f80 R15: 00007fffc4d1d228
[ 2796.071196][ T4336]  </TASK>
22:46:29 executing program 5:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
write$ppp(r0, &(0x7f00000002c0)="d3", 0x1f4f33) (fail_nth: 18)

22:46:29 executing program 1:
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000000)={'sit0\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x12}})
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
syz_genetlink_get_family_id$SEG6(&(0x7f0000000040), r0)
write$ppp(r0, 0x0, 0xeffdffff)

22:46:29 executing program 4:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
ioctl$SIOCGSKNS(r0, 0x894c, &(0x7f0000000000)={'syzkaller1\x00', 0xa00})
write$ppp(r0, 0x0, 0x0)
getsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f00000000c0), &(0x7f0000000100)=0x4)

22:46:30 executing program 4:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
ioctl$SIOCGSKNS(r0, 0x894c, &(0x7f0000000000)={'syzkaller1\x00', 0xa00}) (async)
write$ppp(r0, 0x0, 0x0) (async)
getsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f00000000c0), &(0x7f0000000100)=0x4)

22:46:30 executing program 1:
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000000)={'sit0\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x12}})
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
syz_genetlink_get_family_id$SEG6(&(0x7f0000000040), r0) (async)
write$ppp(r0, 0x0, 0xeffdffff)

[ 2796.074212][ T4346] CPU: 0 PID: 4346 Comm: syz-executor.5 Not tainted 6.6.0-rc3-syzkaller-00165-g3b517966c561 #0
[ 2796.084567][ T4346] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/06/2023
[ 2796.094630][ T4346] Call Trace:
[ 2796.097966][ T4346]  <TASK>
[ 2796.100919][ T4346]  dump_stack_lvl+0xda/0x130
[ 2796.105600][ T4346]  dump_stack+0x15/0x20
[ 2796.109824][ T4346]  should_fail_ex+0x21f/0x230
[ 2796.114518][ T4346]  __should_fail_alloc_page+0xfd/0x110
[ 2796.120014][ T4346]  __alloc_pages+0x108/0x340
[ 2796.124662][ T4346]  vma_alloc_folio+0x6a3/0x8c0
[ 2796.129520][ T4346]  ? shmem_inode_acct_block+0x1ee/0x220
[ 2796.135097][ T4346]  shmem_get_folio_gfp+0x579/0xc30
[ 2796.140333][ T4346]  shmem_write_begin+0xa6/0x210
[ 2796.145236][ T4346]  generic_perform_write+0x1c9/0x410
[ 2796.150561][ T4346]  ? shmem_write_begin+0x210/0x210
[ 2796.155801][ T4346]  shmem_file_write_iter+0xc8/0xe0
[ 2796.160935][ T4346]  vfs_write+0x4ab/0x7d0
[ 2796.165204][ T4346]  ksys_write+0xeb/0x1a0
[ 2796.169538][ T4346]  __x64_sys_write+0x42/0x50
[ 2796.174136][ T4346]  do_syscall_64+0x41/0xc0
[ 2796.178563][ T4346]  entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 2796.184559][ T4346] RIP: 0033:0x7f90e4a54ae9
[ 2796.189063][ T4346] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48
[ 2796.208758][ T4346] RSP: 002b:00007f90e3dd70c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 2796.217186][ T4346] RAX: ffffffffffffffda RBX: 00007f90e4b73f80 RCX: 00007f90e4a54ae9
22:46:30 executing program 4:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
ioctl$SIOCGSKNS(r0, 0x894c, &(0x7f0000000000)={'syzkaller1\x00', 0xa00})
write$ppp(r0, 0x0, 0x0) (async)
getsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f00000000c0), &(0x7f0000000100)=0x4)

22:46:30 executing program 2:
openat$bsg(0xffffffffffffff9c, &(0x7f0000000200), 0x52d406, 0x0) (async, rerun: 32)
openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080), 0x323802, 0x0) (rerun: 32)
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(r0, 0x10f, 0x86)
write$ppp(r0, &(0x7f0000000300)="6435345ec3e24455a66c7f84b7c9b1d65cc56812d97f0fa51a169e3de4108ad90e00ec623aaa945d7b32ce02f806fcab8884ff91f814b33c7a3a3b0a8c22108b51f1422498719f9bb8a057793e48a49638717402110c02f0216707540b8ae6ffe36cb9c907b0296f75c09ae64cdb90ee194bf667b4e08fa9adb4001d6caa0097a19700996fa7d0625edeb2bc64f4c282b83c1a10c530a55c6f1ace08b08b3875a141802f944100"/177, 0x83)
r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x12000, 0x0)
sendmsg$can_j1939(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)="a836cc5996b8471a6087e9fdabcc19c7d50b1baf3bb0d13e4778dfe2f27c6aed010197719177b6b9f012afd5fea0e35055ee5126ecdc58a38ea2e38dd64185c23e51301f25cd24bcbf6de4b50fe6f63202cb9ef3396a29970f159a74f660c884d67ead995a493df3d8a382f0925b6188b5048093d1a77d16bd2a673113e665bf2a0d7c1085d54fcdb8c5cb78be42b21a71c901c6d595eb9da60638414ae66c26f66240a18366f59e95189355c44968b28aa7d1f1229a11e8be143c2ad263e006e0b4fb5b9285485f85a7df03fd08778f75413c107076d4de", 0xd8}, 0x1, 0x0, 0x0, 0x11}, 0xd4)

[ 2796.225262][ T4346] RDX: 00000000001f4f33 RSI: 00000000200002c0 RDI: 0000000000000003
[ 2796.233269][ T4346] RBP: 00007f90e3dd7120 R08: 0000000000000000 R09: 0000000000000000
[ 2796.241333][ T4346] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 2796.249348][ T4346] R13: 000000000000000b R14: 00007f90e4b73f80 R15: 00007ffdb3bfd028
[ 2796.257375][ T4346]  </TASK>
22:46:30 executing program 3:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
write$ppp(r0, &(0x7f00000002c0)="d3", 0xfffffdef) (fail_nth: 16)

22:46:30 executing program 0:
r0 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$L2TP_CMD_SESSION_CREATE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x38, r0, 0x1, 0x70bd2c, 0x25dfdbfc, {}, [@L2TP_ATTR_OFFSET={0x6, 0x3, 0x5}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x9}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x1}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x8040}, 0x20000000)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
write$ppp(r1, 0x0, 0xeffdffffffffffff)

22:46:30 executing program 4:
openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)

22:46:30 executing program 2:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(r1, 0x10f, 0x86)
write$ppp(r1, &(0x7f0000000000)="d3", 0x1)
syz_io_uring_setup(0x4b31, &(0x7f0000000280)={0x0, 0x9bb0, 0x0, 0x0, 0x16e}, &(0x7f0000000300)=<r2=>0x0, &(0x7f0000000340))
r3 = openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(r3, 0x10f, 0x86)
sendmsg$AUDIT_ADD_RULE(r3, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x440}, 0x1, 0x0, 0x0, 0x4000}, 0x20004084)
r4 = syz_open_dev$loop(&(0x7f0000000380), 0x6, 0x80000)
syz_io_uring_submit(r2, 0x0, &(0x7f00000003c0)=@IORING_OP_FSYNC={0x3, 0x20, 0x0, @fd=r4, 0x0, 0x0, 0x0, 0x0, 0x1})
r5 = mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xb, 0x10, r0, 0x10000000)
r6 = openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(r6, 0x10f, 0x86)
syz_io_uring_submit(r2, r5, &(0x7f0000000040)=@IORING_OP_WRITE_FIXED={0x5, 0x20, 0x4004, @fd=r6, 0x7, 0x7a, 0xffffffff, 0x10, 0x1, {0x2}})
epoll_create(0x3f)
connect$can_j1939(0xffffffffffffffff, &(0x7f00000001c0)={0x1d, 0x0, 0x3, {0x2, 0x1, 0x1}, 0xff}, 0x18)
r7 = openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(r7, 0x10f, 0x86)
ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000180)={'vxcan0\x00'})

22:46:30 executing program 1:
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000000)={'sit0\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x12}}) (async)
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
syz_genetlink_get_family_id$SEG6(&(0x7f0000000040), r0) (async)
write$ppp(r0, 0x0, 0xeffdffff)

22:46:30 executing program 5:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
write$ppp(r0, &(0x7f00000002c0)="d3", 0x1f4f33) (fail_nth: 19)

22:46:30 executing program 1:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x5dec01, 0x0)
write$ppp(r0, 0x0, 0xeffdffff)

22:46:30 executing program 4:
openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)

22:46:30 executing program 0:
r0 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$L2TP_CMD_SESSION_CREATE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x38, r0, 0x1, 0x70bd2c, 0x25dfdbfc, {}, [@L2TP_ATTR_OFFSET={0x6, 0x3, 0x5}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x9}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x1}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x8040}, 0x20000000) (async, rerun: 32)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0) (rerun: 32)
write$ppp(r1, 0x0, 0xeffdffffffffffff)

22:46:30 executing program 2:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0) (async)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(r1, 0x10f, 0x86)
write$ppp(r1, &(0x7f0000000000)="d3", 0x1)
syz_io_uring_setup(0x4b31, &(0x7f0000000280)={0x0, 0x9bb0, 0x0, 0x0, 0x16e}, &(0x7f0000000300)=<r2=>0x0, &(0x7f0000000340)) (async)
r3 = openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(r3, 0x10f, 0x86) (async, rerun: 64)
sendmsg$AUDIT_ADD_RULE(r3, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x440}, 0x1, 0x0, 0x0, 0x4000}, 0x20004084) (async, rerun: 64)
r4 = syz_open_dev$loop(&(0x7f0000000380), 0x6, 0x80000)
syz_io_uring_submit(r2, 0x0, &(0x7f00000003c0)=@IORING_OP_FSYNC={0x3, 0x20, 0x0, @fd=r4, 0x0, 0x0, 0x0, 0x0, 0x1}) (async)
r5 = mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xb, 0x10, r0, 0x10000000) (async, rerun: 64)
r6 = openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0) (rerun: 64)
setsockopt$TIPC_MCAST_REPLICAST(r6, 0x10f, 0x86) (async)
syz_io_uring_submit(r2, r5, &(0x7f0000000040)=@IORING_OP_WRITE_FIXED={0x5, 0x20, 0x4004, @fd=r6, 0x7, 0x7a, 0xffffffff, 0x10, 0x1, {0x2}}) (async)
epoll_create(0x3f) (async, rerun: 64)
connect$can_j1939(0xffffffffffffffff, &(0x7f00000001c0)={0x1d, 0x0, 0x3, {0x2, 0x1, 0x1}, 0xff}, 0x18) (async, rerun: 64)
r7 = openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(r7, 0x10f, 0x86)
ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000180)={'vxcan0\x00'})

[ 2796.353999][ T4372] FAULT_INJECTION: forcing a failure.
[ 2796.353999][ T4372] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 2796.367219][ T4372] CPU: 0 PID: 4372 Comm: syz-executor.5 Not tainted 6.6.0-rc3-syzkaller-00165-g3b517966c561 #0
[ 2796.377652][ T4372] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/06/2023
[ 2796.379348][ T4381] FAULT_INJECTION: forcing a failure.
[ 2796.379348][ T4381] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[ 2796.387698][ T4372] Call Trace:
[ 2796.387706][ T4372]  <TASK>
[ 2796.387714][ T4372]  dump_stack_lvl+0xda/0x130
[ 2796.387748][ T4372]  dump_stack+0x15/0x20
[ 2796.416509][ T4372]  should_fail_ex+0x21f/0x230
[ 2796.421199][ T4372]  should_fail+0xb/0x10
[ 2796.425364][ T4372]  should_fail_usercopy+0x1a/0x20
[ 2796.430434][ T4372]  copy_page_from_iter_atomic+0x21c/0xcf0
[ 2796.436202][ T4372]  ? shmem_write_begin+0xa6/0x210
[ 2796.441247][ T4372]  ? shmem_write_begin+0x16d/0x210
[ 2796.446363][ T4372]  generic_perform_write+0x20c/0x410
[ 2796.451654][ T4372]  ? shmem_write_begin+0x210/0x210
[ 2796.456779][ T4372]  shmem_file_write_iter+0xc8/0xe0
[ 2796.461976][ T4372]  vfs_write+0x4ab/0x7d0
[ 2796.466236][ T4372]  ksys_write+0xeb/0x1a0
[ 2796.470494][ T4372]  __x64_sys_write+0x42/0x50
[ 2796.475144][ T4372]  do_syscall_64+0x41/0xc0
[ 2796.479645][ T4372]  entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 2796.485624][ T4372] RIP: 0033:0x7f90e4a54ae9
[ 2796.490041][ T4372] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48
[ 2796.509677][ T4372] RSP: 002b:00007f90e3dd70c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 2796.518092][ T4372] RAX: ffffffffffffffda RBX: 00007f90e4b73f80 RCX: 00007f90e4a54ae9
[ 2796.526069][ T4372] RDX: 00000000001f4f33 RSI: 00000000200002c0 RDI: 0000000000000003
[ 2796.534129][ T4372] RBP: 00007f90e3dd7120 R08: 0000000000000000 R09: 0000000000000000
[ 2796.542099][ T4372] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
22:46:30 executing program 1:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x5dec01, 0x0)
write$ppp(r0, 0x0, 0xeffdffff)

22:46:30 executing program 4:
openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)

[ 2796.550078][ T4372] R13: 000000000000000b R14: 00007f90e4b73f80 R15: 00007ffdb3bfd028
[ 2796.558052][ T4372]  </TASK>
[ 2796.561097][ T4381] CPU: 1 PID: 4381 Comm: syz-executor.3 Not tainted 6.6.0-rc3-syzkaller-00165-g3b517966c561 #0
[ 2796.571446][ T4381] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/06/2023
[ 2796.581579][ T4381] Call Trace:
[ 2796.584960][ T4381]  <TASK>
[ 2796.587898][ T4381]  dump_stack_lvl+0xda/0x130
[ 2796.592533][ T4381]  dump_stack+0x15/0x20
[ 2796.596777][ T4381]  should_fail_ex+0x21f/0x230
[ 2796.601531][ T4381]  __should_fail_alloc_page+0xfd/0x110
[ 2796.607015][ T4381]  __alloc_pages+0x108/0x340
[ 2796.611632][ T4381]  vma_alloc_folio+0x6a3/0x8c0
[ 2796.616470][ T4381]  ? shmem_inode_acct_block+0x1ee/0x220
[ 2796.622081][ T4381]  shmem_get_folio_gfp+0x579/0xc30
[ 2796.627222][ T4381]  shmem_write_begin+0xa6/0x210
[ 2796.632090][ T4381]  generic_perform_write+0x1c9/0x410
[ 2796.637382][ T4381]  ? shmem_write_begin+0x210/0x210
[ 2796.642584][ T4381]  shmem_file_write_iter+0xc8/0xe0
[ 2796.647776][ T4381]  vfs_write+0x4ab/0x7d0
[ 2796.652044][ T4381]  ksys_write+0xeb/0x1a0
[ 2796.656389][ T4381]  __x64_sys_write+0x42/0x50
[ 2796.661045][ T4381]  do_syscall_64+0x41/0xc0
[ 2796.665473][ T4381]  entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 2796.671436][ T4381] RIP: 0033:0x7fd29be1aae9
[ 2796.675841][ T4381] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48
[ 2796.695498][ T4381] RSP: 002b:00007fd29b19d0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
22:46:30 executing program 3:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
write$ppp(r0, &(0x7f00000002c0)="d3", 0xfffffdef) (fail_nth: 17)

22:46:30 executing program 5:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
write$ppp(r0, &(0x7f00000002c0)="d3", 0x1f4f33) (fail_nth: 20)

22:46:30 executing program 1:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x5dec01, 0x0)
write$ppp(r0, 0x0, 0xeffdffff) (async)
write$ppp(r0, 0x0, 0xeffdffff)

22:46:30 executing program 4:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
sendmsg$AUDIT_USER_TTY(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000040)={&(0x7f00000000c0)={0x100, 0x464, 0x2, 0x70bd25, 0x25dfdbf8, "100e6cc154fe328c0b6c36831ad541888a6629e7ae5b343c838cab211904255b1e9a9f1b9ce8a10032092dca227c9487c8c09d10c23308557e7a5fe390bce1cdc448af429961684585c253b7cb5c383de789db373f9e8220c4e1863c97f85ffc018665fb6f7750bd8827b94b62465368bf088722aaa6a8c912b9ec98180b7bec25a721b5f8e9e782f52de198ab399c83719408acc7af80bcf6405111c83db021ba93c046af32783f1de3b37e00eeff4d62392d73661f7cc901805514094ae0fa592c3d183bfae38b1831308f4e93da9bc7acd5ad22f01ec7aa3d0d2b424254c3880b921f4f4e4512b23570a966", ["", ""]}, 0x100}, 0x1, 0x0, 0x0, 0x4040005}, 0x0)
write$ppp(r0, 0x0, 0x0)

22:46:30 executing program 2:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(r1, 0x10f, 0x86)
write$ppp(r1, &(0x7f0000000000)="d3", 0x1) (async)
syz_io_uring_setup(0x4b31, &(0x7f0000000280)={0x0, 0x9bb0, 0x0, 0x0, 0x16e}, &(0x7f0000000300)=<r2=>0x0, &(0x7f0000000340))
r3 = openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(r3, 0x10f, 0x86)
sendmsg$AUDIT_ADD_RULE(r3, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000600)=ANY=[@ANYBLOB="40040000f30300012abd7000fedbdf25030000000200000019000000010000000500000005000000cf00000001000000000000c00500000001000000ffffffff0100008000800000e4000000030000008100000001000000ff01000007000000ff0f00000100000016000000010400001f00000009000000000000001d7200000500000001010000f8ffffff80000000030000000400000004000000ff0f00000000010026cd0000008000000000000005000000f7fffffffdffffff03000000c204000002000000b800000009000000840000000700000001040000001000000600000007000000000000007f000000030000000700000000000000080000000200000003000000870a000005000000460000000600000005000000000000000500000001000000010000007e359e0c05000000090000006796000001000000160f00000300000004000000ffff0000000400009c000000c7ffffff0a02000003000000070000000400000007000000060000000700000001000000008000002000000003ea0000e600000008000000a771000004000000000000c808000000070000000800000002000000008000000900000096ce972a080000007a000000010000000200000005000000090000000002000009000000060000000300000009000000ff7f000006000000000000000300000006000000070000000100008039d90000060000000000010000000000a50000000500000002000000ffffffff04000000010000000000040002000000f7ffffff00000100ab460000080000000500000006000000c3000000000000100000000007000000edfaffff030000000700000008000000ffffff7f0101000008000000080000001900000004000000010400000600000002000000e1000000080000000900000000000080ff0f0000feffffff400000000400000000800000010000000700000001000100020000001f000000090000007e0000000500000002000000080000000800000000080000080000002d88000008000000000000000000000002000000000200007f0000000800000005000000ff7f000005000000000000000300000000000000020000000300000001000000000800007b0900000000000007000000000400000200000008000000409b00000010000033000000ffffff7f01000000050000000500000008000000000800000900000002000000e7000000200000000200000001000000ffffff7f00010000090000000001000001000000fffeffff03000000018000000900000004000000070000000300000008000000ff7f000081ffffff030000000200000001000000ffffff7f0eb2b01702000000237d0000803c000001040000ba17fe08e9000000070000000000c0ff040000002100000001010000fffffe7f040000000700000009000000e1afb641000000001f000000010000001f000000002f6465762f627367002f6465762f6c6f6f702300a740592d003a2a2f3a0000"], 0x440}, 0x1, 0x0, 0x0, 0x4000}, 0x20004084) (async)
r4 = syz_open_dev$loop(&(0x7f0000000380), 0x6, 0x80000)
syz_io_uring_submit(r2, 0x0, &(0x7f00000003c0)=@IORING_OP_FSYNC={0x3, 0x20, 0x0, @fd=r4, 0x0, 0x0, 0x0, 0x0, 0x1}) (async, rerun: 32)
r5 = mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xb, 0x10, r0, 0x10000000) (async, rerun: 32)
r6 = openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(r6, 0x10f, 0x86) (async)
syz_io_uring_submit(r2, r5, &(0x7f0000000040)=@IORING_OP_WRITE_FIXED={0x5, 0x20, 0x4004, @fd=r6, 0x7, 0x7a, 0xffffffff, 0x10, 0x1, {0x2}}) (async)
epoll_create(0x3f)
connect$can_j1939(0xffffffffffffffff, &(0x7f00000001c0)={0x1d, 0x0, 0x3, {0x2, 0x1, 0x1}, 0xff}, 0x18)
r7 = openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(r7, 0x10f, 0x86)
ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000180)={'vxcan0\x00'})

22:46:30 executing program 0:
r0 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$L2TP_CMD_SESSION_CREATE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x38, r0, 0x1, 0x70bd2c, 0x25dfdbfc, {}, [@L2TP_ATTR_OFFSET={0x6, 0x3, 0x5}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x9}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x1}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x8040}, 0x20000000) (async)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
write$ppp(r1, 0x0, 0xeffdffffffffffff)

[ 2796.703925][ T4381] RAX: ffffffffffffffda RBX: 00007fd29bf39f80 RCX: 00007fd29be1aae9
[ 2796.711995][ T4381] RDX: 00000000fffffdef RSI: 00000000200002c0 RDI: 0000000000000003
[ 2796.719964][ T4381] RBP: 00007fd29b19d120 R08: 0000000000000000 R09: 0000000000000000
[ 2796.727959][ T4381] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 2796.735926][ T4381] R13: 000000000000000b R14: 00007fd29bf39f80 R15: 00007fffc4d1d228
[ 2796.743899][ T4381]  </TASK>
[ 2796.783442][ T4399] FAULT_INJECTION: forcing a failure.
[ 2796.783442][ T4399] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[ 2796.784588][ T4407] FAULT_INJECTION: forcing a failure.
[ 2796.784588][ T4407] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 2796.796701][ T4399] CPU: 0 PID: 4399 Comm: syz-executor.5 Not tainted 6.6.0-rc3-syzkaller-00165-g3b517966c561 #0
[ 2796.820027][ T4399] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/06/2023
[ 2796.830122][ T4399] Call Trace:
[ 2796.833400][ T4399]  <TASK>
[ 2796.836390][ T4399]  dump_stack_lvl+0xda/0x130
[ 2796.840985][ T4399]  dump_stack+0x15/0x20
[ 2796.845138][ T4399]  should_fail_ex+0x21f/0x230
[ 2796.849849][ T4399]  __should_fail_alloc_page+0xfd/0x110
[ 2796.855355][ T4399]  __alloc_pages+0x108/0x340
[ 2796.859963][ T4399]  vma_alloc_folio+0x6a3/0x8c0
[ 2796.864741][ T4399]  ? shmem_inode_acct_block+0x1ee/0x220
[ 2796.870338][ T4399]  shmem_get_folio_gfp+0x579/0xc30
[ 2796.875477][ T4399]  shmem_write_begin+0xa6/0x210
[ 2796.880337][ T4399]  generic_perform_write+0x1c9/0x410
[ 2796.885651][ T4399]  ? shmem_write_begin+0x210/0x210
[ 2796.890824][ T4399]  shmem_file_write_iter+0xc8/0xe0
[ 2796.896118][ T4399]  vfs_write+0x4ab/0x7d0
[ 2796.900429][ T4399]  ksys_write+0xeb/0x1a0
[ 2796.904799][ T4399]  __x64_sys_write+0x42/0x50
[ 2796.909505][ T4399]  do_syscall_64+0x41/0xc0
[ 2796.913921][ T4399]  entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 2796.919847][ T4399] RIP: 0033:0x7f90e4a54ae9
[ 2796.924299][ T4399] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48
[ 2796.943914][ T4399] RSP: 002b:00007f90e3dd70c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 2796.952326][ T4399] RAX: ffffffffffffffda RBX: 00007f90e4b73f80 RCX: 00007f90e4a54ae9
[ 2796.960347][ T4399] RDX: 00000000001f4f33 RSI: 00000000200002c0 RDI: 0000000000000003
[ 2796.968317][ T4399] RBP: 00007f90e3dd7120 R08: 0000000000000000 R09: 0000000000000000
[ 2796.976411][ T4399] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
22:46:31 executing program 4:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
sendmsg$AUDIT_USER_TTY(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000040)={&(0x7f00000000c0)={0x100, 0x464, 0x2, 0x70bd25, 0x25dfdbf8, "100e6cc154fe328c0b6c36831ad541888a6629e7ae5b343c838cab211904255b1e9a9f1b9ce8a10032092dca227c9487c8c09d10c23308557e7a5fe390bce1cdc448af429961684585c253b7cb5c383de789db373f9e8220c4e1863c97f85ffc018665fb6f7750bd8827b94b62465368bf088722aaa6a8c912b9ec98180b7bec25a721b5f8e9e782f52de198ab399c83719408acc7af80bcf6405111c83db021ba93c046af32783f1de3b37e00eeff4d62392d73661f7cc901805514094ae0fa592c3d183bfae38b1831308f4e93da9bc7acd5ad22f01ec7aa3d0d2b424254c3880b921f4f4e4512b23570a966", ["", ""]}, 0x100}, 0x1, 0x0, 0x0, 0x4040005}, 0x0)
write$ppp(r0, 0x0, 0x0)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0) (async)
sendmsg$AUDIT_USER_TTY(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000040)={&(0x7f00000000c0)={0x100, 0x464, 0x2, 0x70bd25, 0x25dfdbf8, "100e6cc154fe328c0b6c36831ad541888a6629e7ae5b343c838cab211904255b1e9a9f1b9ce8a10032092dca227c9487c8c09d10c23308557e7a5fe390bce1cdc448af429961684585c253b7cb5c383de789db373f9e8220c4e1863c97f85ffc018665fb6f7750bd8827b94b62465368bf088722aaa6a8c912b9ec98180b7bec25a721b5f8e9e782f52de198ab399c83719408acc7af80bcf6405111c83db021ba93c046af32783f1de3b37e00eeff4d62392d73661f7cc901805514094ae0fa592c3d183bfae38b1831308f4e93da9bc7acd5ad22f01ec7aa3d0d2b424254c3880b921f4f4e4512b23570a966", ["", ""]}, 0x100}, 0x1, 0x0, 0x0, 0x4040005}, 0x0) (async)
write$ppp(r0, 0x0, 0x0) (async)

[ 2796.984400][ T4399] R13: 000000000000000b R14: 00007f90e4b73f80 R15: 00007ffdb3bfd028
[ 2796.992432][ T4399]  </TASK>
[ 2796.995448][ T4407] CPU: 1 PID: 4407 Comm: syz-executor.3 Not tainted 6.6.0-rc3-syzkaller-00165-g3b517966c561 #0
[ 2797.005881][ T4407] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/06/2023
[ 2797.015956][ T4407] Call Trace:
[ 2797.019313][ T4407]  <TASK>
[ 2797.022373][ T4407]  dump_stack_lvl+0xda/0x130
[ 2797.026986][ T4407]  dump_stack+0x15/0x20
22:46:31 executing program 1:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
write$ppp(r0, 0x0, 0xeffdffff)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(0xffffffffffffffff, 0x10f, 0x86)
openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000040), 0x2, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(r1, 0x10f, 0x86)
ioctl$PPPIOCBRIDGECHAN(r1, 0x40047435, &(0x7f0000000000)=0x1000)
ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000000c0))

22:46:31 executing program 5:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
write$ppp(r0, &(0x7f00000002c0)="d3", 0x1f4f33) (fail_nth: 21)

22:46:31 executing program 0:
r0 = socket$l2tp6(0xa, 0x2, 0x73)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(r1, 0x10f, 0x86)
getsockopt$TIPC_NODE_RECVQ_DEPTH(r1, 0x10f, 0x83, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
ioctl$USBDEVFS_ALLOW_SUSPEND(0xffffffffffffffff, 0x5522)
sendto$l2tp6(r0, 0x0, 0x0, 0x4000810, &(0x7f0000000180)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x25}, 0x1b5f, 0x1}, 0x20)
r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
write$ppp(r2, 0x0, 0xeffdffffffffffff)
getsockopt$TIPC_IMPORTANCE(r2, 0x10f, 0x7f, &(0x7f0000000000), &(0x7f0000000040)=0x4)

22:46:31 executing program 2:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0xb012c2, 0x0)
write$ppp(r0, &(0x7f0000000040)="d3", 0xff63)

[ 2797.031157][ T4407]  should_fail_ex+0x21f/0x230
[ 2797.035919][ T4407]  should_fail+0xb/0x10
[ 2797.040087][ T4407]  should_fail_usercopy+0x1a/0x20
[ 2797.045145][ T4407]  copy_page_from_iter_atomic+0x21c/0xcf0
[ 2797.050893][ T4407]  ? shmem_write_begin+0xa6/0x210
[ 2797.055993][ T4407]  ? shmem_write_begin+0x16d/0x210
[ 2797.061294][ T4407]  generic_perform_write+0x20c/0x410
[ 2797.066615][ T4407]  ? shmem_write_begin+0x210/0x210
[ 2797.071890][ T4407]  shmem_file_write_iter+0xc8/0xe0
[ 2797.077032][ T4407]  vfs_write+0x4ab/0x7d0
22:46:31 executing program 0:
r0 = socket$l2tp6(0xa, 0x2, 0x73) (async, rerun: 64)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0) (rerun: 64)
setsockopt$TIPC_MCAST_REPLICAST(r1, 0x10f, 0x86) (async)
getsockopt$TIPC_NODE_RECVQ_DEPTH(r1, 0x10f, 0x83, &(0x7f00000000c0), &(0x7f0000000100)=0x4) (async)
ioctl$USBDEVFS_ALLOW_SUSPEND(0xffffffffffffffff, 0x5522) (async, rerun: 32)
sendto$l2tp6(r0, 0x0, 0x0, 0x4000810, &(0x7f0000000180)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x25}, 0x1b5f, 0x1}, 0x20) (async, rerun: 32)
r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
write$ppp(r2, 0x0, 0xeffdffffffffffff) (async)
getsockopt$TIPC_IMPORTANCE(r2, 0x10f, 0x7f, &(0x7f0000000000), &(0x7f0000000040)=0x4)

[ 2797.081388][ T4407]  ksys_write+0xeb/0x1a0
[ 2797.085647][ T4407]  __x64_sys_write+0x42/0x50
[ 2797.090263][ T4407]  do_syscall_64+0x41/0xc0
[ 2797.094690][ T4407]  entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 2797.100649][ T4407] RIP: 0033:0x7fd29be1aae9
[ 2797.105067][ T4407] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48
[ 2797.124783][ T4407] RSP: 002b:00007fd29b19d0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 2797.133225][ T4407] RAX: ffffffffffffffda RBX: 00007fd29bf39f80 RCX: 00007fd29be1aae9
[ 2797.141202][ T4407] RDX: 00000000fffffdef RSI: 00000000200002c0 RDI: 0000000000000003
[ 2797.145947][ T4425] FAULT_INJECTION: forcing a failure.
[ 2797.145947][ T4425] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 2797.149218][ T4407] RBP: 00007fd29b19d120 R08: 0000000000000000 R09: 0000000000000000
[ 2797.149236][ T4407] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 2797.178230][ T4407] R13: 000000000000000b R14: 00007fd29bf39f80 R15: 00007fffc4d1d228
[ 2797.186308][ T4407]  </TASK>
[ 2797.189419][ T4425] CPU: 0 PID: 4425 Comm: syz-executor.5 Not tainted 6.6.0-rc3-syzkaller-00165-g3b517966c561 #0
[ 2797.199835][ T4425] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/06/2023
[ 2797.209894][ T4425] Call Trace:
[ 2797.213177][ T4425]  <TASK>
[ 2797.216117][ T4425]  dump_stack_lvl+0xda/0x130
[ 2797.220719][ T4425]  dump_stack+0x15/0x20
[ 2797.224900][ T4425]  should_fail_ex+0x21f/0x230
[ 2797.229679][ T4425]  should_fail+0xb/0x10
[ 2797.233936][ T4425]  should_fail_usercopy+0x1a/0x20
[ 2797.239039][ T4425]  copy_page_from_iter_atomic+0x21c/0xcf0
[ 2797.244860][ T4425]  ? shmem_write_begin+0xa6/0x210
[ 2797.249920][ T4425]  ? shmem_write_begin+0x16d/0x210
[ 2797.255056][ T4425]  generic_perform_write+0x20c/0x410
[ 2797.260386][ T4425]  ? shmem_write_begin+0x210/0x210
[ 2797.265540][ T4425]  shmem_file_write_iter+0xc8/0xe0
[ 2797.270676][ T4425]  vfs_write+0x4ab/0x7d0
[ 2797.275023][ T4425]  ksys_write+0xeb/0x1a0
[ 2797.279340][ T4425]  __x64_sys_write+0x42/0x50
[ 2797.284050][ T4425]  do_syscall_64+0x41/0xc0
[ 2797.288491][ T4425]  entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 2797.294426][ T4425] RIP: 0033:0x7f90e4a54ae9
[ 2797.298855][ T4425] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48
[ 2797.318557][ T4425] RSP: 002b:00007f90e3dd70c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 2797.326995][ T4425] RAX: ffffffffffffffda RBX: 00007f90e4b73f80 RCX: 00007f90e4a54ae9
22:46:31 executing program 3:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
write$ppp(r0, &(0x7f00000002c0)="d3", 0xfffffdef) (fail_nth: 18)

22:46:31 executing program 0:
r0 = socket$l2tp6(0xa, 0x2, 0x73) (async)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(r1, 0x10f, 0x86)
getsockopt$TIPC_NODE_RECVQ_DEPTH(r1, 0x10f, 0x83, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
ioctl$USBDEVFS_ALLOW_SUSPEND(0xffffffffffffffff, 0x5522)
sendto$l2tp6(r0, 0x0, 0x0, 0x4000810, &(0x7f0000000180)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x25}, 0x1b5f, 0x1}, 0x20) (async, rerun: 64)
r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0) (rerun: 64)
write$ppp(r2, 0x0, 0xeffdffffffffffff)
getsockopt$TIPC_IMPORTANCE(r2, 0x10f, 0x7f, &(0x7f0000000000), &(0x7f0000000040)=0x4)

22:46:31 executing program 4:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
sendmsg$AUDIT_USER_TTY(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000040)={&(0x7f00000000c0)={0x100, 0x464, 0x2, 0x70bd25, 0x25dfdbf8, "100e6cc154fe328c0b6c36831ad541888a6629e7ae5b343c838cab211904255b1e9a9f1b9ce8a10032092dca227c9487c8c09d10c23308557e7a5fe390bce1cdc448af429961684585c253b7cb5c383de789db373f9e8220c4e1863c97f85ffc018665fb6f7750bd8827b94b62465368bf088722aaa6a8c912b9ec98180b7bec25a721b5f8e9e782f52de198ab399c83719408acc7af80bcf6405111c83db021ba93c046af32783f1de3b37e00eeff4d62392d73661f7cc901805514094ae0fa592c3d183bfae38b1831308f4e93da9bc7acd5ad22f01ec7aa3d0d2b424254c3880b921f4f4e4512b23570a966", ["", ""]}, 0x100}, 0x1, 0x0, 0x0, 0x4040005}, 0x0) (async)
sendmsg$AUDIT_USER_TTY(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000040)={&(0x7f00000000c0)={0x100, 0x464, 0x2, 0x70bd25, 0x25dfdbf8, "100e6cc154fe328c0b6c36831ad541888a6629e7ae5b343c838cab211904255b1e9a9f1b9ce8a10032092dca227c9487c8c09d10c23308557e7a5fe390bce1cdc448af429961684585c253b7cb5c383de789db373f9e8220c4e1863c97f85ffc018665fb6f7750bd8827b94b62465368bf088722aaa6a8c912b9ec98180b7bec25a721b5f8e9e782f52de198ab399c83719408acc7af80bcf6405111c83db021ba93c046af32783f1de3b37e00eeff4d62392d73661f7cc901805514094ae0fa592c3d183bfae38b1831308f4e93da9bc7acd5ad22f01ec7aa3d0d2b424254c3880b921f4f4e4512b23570a966", ["", ""]}, 0x100}, 0x1, 0x0, 0x0, 0x4040005}, 0x0)
write$ppp(r0, 0x0, 0x0)

22:46:31 executing program 1:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
write$ppp(r0, 0x0, 0xeffdffff)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(0xffffffffffffffff, 0x10f, 0x86)
openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000040), 0x2, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(r1, 0x10f, 0x86)
ioctl$PPPIOCBRIDGECHAN(r1, 0x40047435, &(0x7f0000000000)=0x1000)
ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000000c0))
openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0) (async)
write$ppp(r0, 0x0, 0xeffdffff) (async)
openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0) (async)
setsockopt$TIPC_MCAST_REPLICAST(0xffffffffffffffff, 0x10f, 0x86) (async)
openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000040), 0x2, 0x0) (async)
setsockopt$TIPC_MCAST_REPLICAST(r1, 0x10f, 0x86) (async)
ioctl$PPPIOCBRIDGECHAN(r1, 0x40047435, &(0x7f0000000000)=0x1000) (async)
ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000000c0)) (async)

22:46:31 executing program 2:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0xb012c2, 0x0)
write$ppp(r0, &(0x7f0000000040)="d3", 0xff63)

22:46:31 executing program 2:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0xb012c2, 0x0)
write$ppp(r0, &(0x7f0000000040)="d3", 0xff63)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0xb012c2, 0x0) (async)
write$ppp(r0, &(0x7f0000000040)="d3", 0xff63) (async)

22:46:31 executing program 2:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x5da401, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000140)={0x8, 0x0, &(0x7f0000000040)=[@release={0x40046306, 0x1}], 0xbf, 0x0, &(0x7f0000000080)="8b4908784cde5c3110d97a6de7fe670f6063643a5ea4bbc5c687ec13d12cb210bf9c362d660a422a47e86b1d12c9144f0961bdc7e4d8d7d34dd0a4d70b97175dc38fc910e8d479c5627738ef1aa2fb5560ed6692f325b5831d21c1c17f7124b67b4291d59ec8c612e352b827632a636321f2e469817285a8cfa8b3aa6c30326a99e9db1badb7bab3447511a7a8f3de2219ad48c284cbeaa90dedfcb66c380a1324581ed674cf48d04652a0144397a1814741859667119133966a7bb6d076fa"})
write$ppp(r0, &(0x7f00000002c0)="d3", 0x1)

[ 2797.335000][ T4425] RDX: 00000000001f4f33 RSI: 00000000200002c0 RDI: 0000000000000003
[ 2797.342992][ T4425] RBP: 00007f90e3dd7120 R08: 0000000000000000 R09: 0000000000000000
[ 2797.350961][ T4425] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 2797.358970][ T4425] R13: 000000000000000b R14: 00007f90e4b73f80 R15: 00007ffdb3bfd028
[ 2797.366982][ T4425]  </TASK>
[ 2797.372784][ T4433] FAULT_INJECTION: forcing a failure.
[ 2797.372784][ T4433] name fail_page_alloc, interval 1, probability 0, space 0, times 0
22:46:31 executing program 2:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x5da401, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000140)={0x8, 0x0, &(0x7f0000000040)=[@release={0x40046306, 0x1}], 0xbf, 0x0, &(0x7f0000000080)="8b4908784cde5c3110d97a6de7fe670f6063643a5ea4bbc5c687ec13d12cb210bf9c362d660a422a47e86b1d12c9144f0961bdc7e4d8d7d34dd0a4d70b97175dc38fc910e8d479c5627738ef1aa2fb5560ed6692f325b5831d21c1c17f7124b67b4291d59ec8c612e352b827632a636321f2e469817285a8cfa8b3aa6c30326a99e9db1badb7bab3447511a7a8f3de2219ad48c284cbeaa90dedfcb66c380a1324581ed674cf48d04652a0144397a1814741859667119133966a7bb6d076fa"})
write$ppp(r0, &(0x7f00000002c0)="d3", 0x1)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x5da401, 0x0) (async)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000140)={0x8, 0x0, &(0x7f0000000040)=[@release={0x40046306, 0x1}], 0xbf, 0x0, &(0x7f0000000080)="8b4908784cde5c3110d97a6de7fe670f6063643a5ea4bbc5c687ec13d12cb210bf9c362d660a422a47e86b1d12c9144f0961bdc7e4d8d7d34dd0a4d70b97175dc38fc910e8d479c5627738ef1aa2fb5560ed6692f325b5831d21c1c17f7124b67b4291d59ec8c612e352b827632a636321f2e469817285a8cfa8b3aa6c30326a99e9db1badb7bab3447511a7a8f3de2219ad48c284cbeaa90dedfcb66c380a1324581ed674cf48d04652a0144397a1814741859667119133966a7bb6d076fa"}) (async)
write$ppp(r0, &(0x7f00000002c0)="d3", 0x1) (async)

[ 2797.386043][ T4433] CPU: 0 PID: 4433 Comm: syz-executor.3 Not tainted 6.6.0-rc3-syzkaller-00165-g3b517966c561 #0
[ 2797.396395][ T4433] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/06/2023
[ 2797.406464][ T4433] Call Trace:
[ 2797.409765][ T4433]  <TASK>
[ 2797.412698][ T4433]  dump_stack_lvl+0xda/0x130
[ 2797.417380][ T4433]  dump_stack+0x15/0x20
[ 2797.421550][ T4433]  should_fail_ex+0x21f/0x230
[ 2797.426253][ T4433]  __should_fail_alloc_page+0xfd/0x110
[ 2797.431760][ T4433]  __alloc_pages+0x108/0x340
[ 2797.436455][ T4433]  vma_alloc_folio+0x6a3/0x8c0
[ 2797.441248][ T4433]  ? shmem_inode_acct_block+0x1ee/0x220
[ 2797.446811][ T4433]  shmem_get_folio_gfp+0x579/0xc30
[ 2797.452028][ T4433]  shmem_write_begin+0xa6/0x210
[ 2797.456912][ T4433]  generic_perform_write+0x1c9/0x410
[ 2797.462273][ T4433]  ? shmem_write_begin+0x210/0x210
[ 2797.467459][ T4433]  shmem_file_write_iter+0xc8/0xe0
[ 2797.472705][ T4433]  vfs_write+0x4ab/0x7d0
[ 2797.477041][ T4433]  ksys_write+0xeb/0x1a0
[ 2797.481381][ T4433]  __x64_sys_write+0x42/0x50
22:46:31 executing program 5:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
write$ppp(r0, &(0x7f00000002c0)="d3", 0x1f4f33) (fail_nth: 22)

22:46:31 executing program 2:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x5da401, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000140)={0x8, 0x0, &(0x7f0000000040)=[@release={0x40046306, 0x1}], 0xbf, 0x0, &(0x7f0000000080)="8b4908784cde5c3110d97a6de7fe670f6063643a5ea4bbc5c687ec13d12cb210bf9c362d660a422a47e86b1d12c9144f0961bdc7e4d8d7d34dd0a4d70b97175dc38fc910e8d479c5627738ef1aa2fb5560ed6692f325b5831d21c1c17f7124b67b4291d59ec8c612e352b827632a636321f2e469817285a8cfa8b3aa6c30326a99e9db1badb7bab3447511a7a8f3de2219ad48c284cbeaa90dedfcb66c380a1324581ed674cf48d04652a0144397a1814741859667119133966a7bb6d076fa"}) (async, rerun: 32)
write$ppp(r0, &(0x7f00000002c0)="d3", 0x1) (rerun: 32)

[ 2797.486050][ T4433]  do_syscall_64+0x41/0xc0
[ 2797.490496][ T4433]  entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 2797.496487][ T4433] RIP: 0033:0x7fd29be1aae9
[ 2797.500918][ T4433] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48
[ 2797.520529][ T4433] RSP: 002b:00007fd29b19d0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 2797.525136][ T4447] FAULT_INJECTION: forcing a failure.
[ 2797.525136][ T4447] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[ 2797.528934][ T4433] RAX: ffffffffffffffda RBX: 00007fd29bf39f80 RCX: 00007fd29be1aae9
[ 2797.528951][ T4433] RDX: 00000000fffffdef RSI: 00000000200002c0 RDI: 0000000000000003
[ 2797.558051][ T4433] RBP: 00007fd29b19d120 R08: 0000000000000000 R09: 0000000000000000
[ 2797.566078][ T4433] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 2797.574119][ T4433] R13: 000000000000000b R14: 00007fd29bf39f80 R15: 00007fffc4d1d228
[ 2797.582105][ T4433]  </TASK>
[ 2797.585116][ T4447] CPU: 1 PID: 4447 Comm: syz-executor.5 Not tainted 6.6.0-rc3-syzkaller-00165-g3b517966c561 #0
[ 2797.595509][ T4447] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/06/2023
[ 2797.605579][ T4447] Call Trace:
[ 2797.608930][ T4447]  <TASK>
[ 2797.611855][ T4447]  dump_stack_lvl+0xda/0x130
[ 2797.616466][ T4447]  dump_stack+0x15/0x20
[ 2797.620650][ T4447]  should_fail_ex+0x21f/0x230
[ 2797.625404][ T4447]  __should_fail_alloc_page+0xfd/0x110
[ 2797.630888][ T4447]  __alloc_pages+0x108/0x340
22:46:31 executing program 4:
r0 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000580), 0xffffffffffffffff)
sendmsg$L2TP_CMD_SESSION_CREATE(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000540), 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x4c, r0, 0x200, 0x70bd2c, 0x25dfdbfb, {}, [@L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x5b}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}, @L2TP_ATTR_FD={0x8}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e21}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e24}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x24040881}, 0x20008000)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(r1, 0x10f, 0x86)
sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x74, r0, 0x1, 0x70bd26, 0x25dfdbff, {}, [@L2TP_ATTR_IP6_DADDR={0x14, 0x20, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x3}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x1}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x3}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x800}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x4}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x1}, @L2TP_ATTR_FD={0x8, 0x17, @udp6=r1}]}, 0x74}}, 0x805)
r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
ioctl$TUNSETVNETLE(r2, 0x400454dc, &(0x7f0000000040)=0x1)
write$ppp(r2, 0x0, 0x0)
r3 = openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(r3, 0x10f, 0x86)
quotactl_fd$Q_QUOTAON(r3, 0xffffffff80000202, 0xee01, &(0x7f0000000000)='./file0\x00')

22:46:31 executing program 3:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
write$ppp(r0, &(0x7f00000002c0)="d3", 0xfffffdef) (fail_nth: 19)

22:46:31 executing program 2:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
write$ppp(r0, &(0x7f00000002c0)="d3", 0x1)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0)
ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f0000000140))
setsockopt$TIPC_MCAST_REPLICAST(r1, 0x10f, 0x86)
r2 = openat$bsg(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
syz_genetlink_get_family_id$SEG6(&(0x7f0000000040), r2)
openat$pfkey(0xffffffffffffff9c, &(0x7f0000000100), 0x2301, 0x0)
ioctl$TUNGETVNETHDRSZ(r1, 0x800454d7, &(0x7f0000000000))

22:46:31 executing program 0:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x1e8d01, 0x0)
write$ppp(r0, 0x0, 0xeffdffffffffffff)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x101000, 0x0)
ioctl$PPPIOCBRIDGECHAN(r1, 0x40047435, &(0x7f0000000080)=0x2)

22:46:31 executing program 0:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x1e8d01, 0x0)
write$ppp(r0, 0x0, 0xeffdffffffffffff)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x101000, 0x0)
ioctl$PPPIOCBRIDGECHAN(r1, 0x40047435, &(0x7f0000000080)=0x2) (async)
ioctl$PPPIOCBRIDGECHAN(r1, 0x40047435, &(0x7f0000000080)=0x2)

[ 2797.635588][ T4447]  vma_alloc_folio+0x6a3/0x8c0
[ 2797.640445][ T4447]  ? shmem_inode_acct_block+0x1ee/0x220
[ 2797.646014][ T4447]  shmem_get_folio_gfp+0x579/0xc30
[ 2797.651305][ T4447]  shmem_write_begin+0xa6/0x210
[ 2797.656185][ T4447]  generic_perform_write+0x1c9/0x410
[ 2797.661496][ T4447]  ? shmem_write_begin+0x210/0x210
[ 2797.666645][ T4447]  shmem_file_write_iter+0xc8/0xe0
[ 2797.671882][ T4447]  vfs_write+0x4ab/0x7d0
[ 2797.676249][ T4447]  ksys_write+0xeb/0x1a0
[ 2797.680520][ T4447]  __x64_sys_write+0x42/0x50
22:46:31 executing program 1:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
write$ppp(r0, 0x0, 0xeffdffff) (async)
write$ppp(r0, 0x0, 0xeffdffff)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(0xffffffffffffffff, 0x10f, 0x86)
openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000040), 0x2, 0x0) (async)
openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000040), 0x2, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(r1, 0x10f, 0x86)
ioctl$PPPIOCBRIDGECHAN(r1, 0x40047435, &(0x7f0000000000)=0x1000)
ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000000c0))

22:46:31 executing program 2:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
write$ppp(r0, &(0x7f00000002c0)="d3", 0x1)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0)
ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f0000000140))
setsockopt$TIPC_MCAST_REPLICAST(r1, 0x10f, 0x86)
r2 = openat$bsg(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
syz_genetlink_get_family_id$SEG6(&(0x7f0000000040), r2)
openat$pfkey(0xffffffffffffff9c, &(0x7f0000000100), 0x2301, 0x0)
ioctl$TUNGETVNETHDRSZ(r1, 0x800454d7, &(0x7f0000000000))
openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0) (async)
write$ppp(r0, &(0x7f00000002c0)="d3", 0x1) (async)
openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0) (async)
ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f0000000140)) (async)
setsockopt$TIPC_MCAST_REPLICAST(r1, 0x10f, 0x86) (async)
openat$bsg(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) (async)
syz_genetlink_get_family_id$SEG6(&(0x7f0000000040), r2) (async)
openat$pfkey(0xffffffffffffff9c, &(0x7f0000000100), 0x2301, 0x0) (async)
ioctl$TUNGETVNETHDRSZ(r1, 0x800454d7, &(0x7f0000000000)) (async)

22:46:31 executing program 1:
r0 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000380), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x48, r0, 0x10, 0x70bd2d, 0x25dfdbfd, {}, [@L2TP_ATTR_IP_DADDR={0x8, 0x19, @empty}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e23}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x9bc3}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'pim6reg0\x00'}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x1}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000840}, 0x880)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
write$ppp(r1, 0x0, 0xeffdffff)
recvmsg$qrtr(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)=""/81, 0x51}, {&(0x7f00000000c0)=""/181, 0xb5}, {&(0x7f0000000180)=""/7, 0x7}], 0x3, &(0x7f0000000200)=[{0xb8, 0x0, 0x0, ""/164}, {0x20, 0x0, 0x0, ""/11}], 0xd8, 0x40000040}, 0x38, 0x2022)

[ 2797.685161][ T4447]  do_syscall_64+0x41/0xc0
[ 2797.689599][ T4447]  entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 2797.695570][ T4447] RIP: 0033:0x7f90e4a54ae9
[ 2797.700004][ T4447] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48
[ 2797.719634][ T4447] RSP: 002b:00007f90e3dd70c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 2797.728115][ T4447] RAX: ffffffffffffffda RBX: 00007f90e4b73f80 RCX: 00007f90e4a54ae9
22:46:31 executing program 1:
r0 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000380), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x48, r0, 0x10, 0x70bd2d, 0x25dfdbfd, {}, [@L2TP_ATTR_IP_DADDR={0x8, 0x19, @empty}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e23}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x9bc3}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'pim6reg0\x00'}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x1}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000840}, 0x880) (async)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
write$ppp(r1, 0x0, 0xeffdffff) (async, rerun: 64)
recvmsg$qrtr(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)=""/81, 0x51}, {&(0x7f00000000c0)=""/181, 0xb5}, {&(0x7f0000000180)=""/7, 0x7}], 0x3, &(0x7f0000000200)=[{0xb8, 0x0, 0x0, ""/164}, {0x20, 0x0, 0x0, ""/11}], 0xd8, 0x40000040}, 0x38, 0x2022) (rerun: 64)

22:46:31 executing program 0:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x1e8d01, 0x0)
write$ppp(r0, 0x0, 0xeffdffffffffffff) (async)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x101000, 0x0)
ioctl$PPPIOCBRIDGECHAN(r1, 0x40047435, &(0x7f0000000080)=0x2)

22:46:31 executing program 5:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
write$ppp(r0, &(0x7f00000002c0)="d3", 0x1f4f33) (fail_nth: 23)

22:46:31 executing program 0:
r0 = socket$can_j1939(0x1d, 0x2, 0x7)
connect$l2tp6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0xffff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xb0, 0x4}, 0x20)
bind$can_j1939(r0, 0x0, 0x0)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
getsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000000), &(0x7f0000000040)=0x4)
write$ppp(r1, 0x0, 0xeffdffffffffffff)
r2 = openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(r2, 0x10f, 0x86)
getsockopt$TIPC_SRC_DROPPABLE(r2, 0x10f, 0x80, &(0x7f0000000240), &(0x7f0000000280)=0x4)
r3 = openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0)
recvfrom$l2tp6(r2, &(0x7f0000000100)=""/229, 0xe5, 0x40, &(0x7f0000000200)={0xa, 0x0, 0x0, @mcast2}, 0x20)
setsockopt$TIPC_MCAST_REPLICAST(r3, 0x10f, 0x86)
ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r3)

22:46:31 executing program 4:
r0 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000580), 0xffffffffffffffff)
sendmsg$L2TP_CMD_SESSION_CREATE(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000540), 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x4c, r0, 0x200, 0x70bd2c, 0x25dfdbfb, {}, [@L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x5b}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}, @L2TP_ATTR_FD={0x8}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e21}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e24}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x24040881}, 0x20008000)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(r1, 0x10f, 0x86) (async)
sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x74, r0, 0x1, 0x70bd26, 0x25dfdbff, {}, [@L2TP_ATTR_IP6_DADDR={0x14, 0x20, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x3}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x1}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x3}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x800}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x4}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x1}, @L2TP_ATTR_FD={0x8, 0x17, @udp6=r1}]}, 0x74}}, 0x805)
r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
ioctl$TUNSETVNETLE(r2, 0x400454dc, &(0x7f0000000040)=0x1)
write$ppp(r2, 0x0, 0x0)
r3 = openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(r3, 0x10f, 0x86) (async)
quotactl_fd$Q_QUOTAON(r3, 0xffffffff80000202, 0xee01, &(0x7f0000000000)='./file0\x00')

22:46:31 executing program 3:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
write$ppp(r0, &(0x7f00000002c0)="d3", 0xfffffdef)

22:46:31 executing program 2:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
write$ppp(r0, &(0x7f00000002c0)="d3", 0x1) (async)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0) (async)
ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f0000000140))
setsockopt$TIPC_MCAST_REPLICAST(r1, 0x10f, 0x86)
r2 = openat$bsg(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
syz_genetlink_get_family_id$SEG6(&(0x7f0000000040), r2) (async)
openat$pfkey(0xffffffffffffff9c, &(0x7f0000000100), 0x2301, 0x0)
ioctl$TUNGETVNETHDRSZ(r1, 0x800454d7, &(0x7f0000000000))

22:46:31 executing program 1:
syz_genetlink_get_family_id$l2tp(&(0x7f0000000380), 0xffffffffffffffff) (async)
r0 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000380), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x48, r0, 0x10, 0x70bd2d, 0x25dfdbfd, {}, [@L2TP_ATTR_IP_DADDR={0x8, 0x19, @empty}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e23}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x9bc3}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'pim6reg0\x00'}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x1}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000840}, 0x880)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
write$ppp(r1, 0x0, 0xeffdffff)
recvmsg$qrtr(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)=""/81, 0x51}, {&(0x7f00000000c0)=""/181, 0xb5}, {&(0x7f0000000180)=""/7, 0x7}], 0x3, &(0x7f0000000200)=[{0xb8, 0x0, 0x0, ""/164}, {0x20, 0x0, 0x0, ""/11}], 0xd8, 0x40000040}, 0x38, 0x2022)

[ 2797.736185][ T4447] RDX: 00000000001f4f33 RSI: 00000000200002c0 RDI: 0000000000000003
[ 2797.744246][ T4447] RBP: 00007f90e3dd7120 R08: 0000000000000000 R09: 0000000000000000
[ 2797.752226][ T4447] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 2797.760227][ T4447] R13: 000000000000000b R14: 00007f90e4b73f80 R15: 00007ffdb3bfd028
[ 2797.768214][ T4447]  </TASK>
22:46:31 executing program 4:
syz_genetlink_get_family_id$l2tp(&(0x7f0000000580), 0xffffffffffffffff) (async)
r0 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000580), 0xffffffffffffffff)
sendmsg$L2TP_CMD_SESSION_CREATE(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000540), 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x4c, r0, 0x200, 0x70bd2c, 0x25dfdbfb, {}, [@L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x5b}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}, @L2TP_ATTR_FD={0x8}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e21}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e24}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x24040881}, 0x20008000) (async)
sendmsg$L2TP_CMD_SESSION_CREATE(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000540), 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x4c, r0, 0x200, 0x70bd2c, 0x25dfdbfb, {}, [@L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x5b}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}, @L2TP_ATTR_FD={0x8}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e21}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e24}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x24040881}, 0x20008000)
openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0) (async)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(r1, 0x10f, 0x86)
sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x74, r0, 0x1, 0x70bd26, 0x25dfdbff, {}, [@L2TP_ATTR_IP6_DADDR={0x14, 0x20, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x3}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x1}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x3}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x800}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x4}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x1}, @L2TP_ATTR_FD={0x8, 0x17, @udp6=r1}]}, 0x74}}, 0x805)
r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
ioctl$TUNSETVNETLE(r2, 0x400454dc, &(0x7f0000000040)=0x1)
write$ppp(r2, 0x0, 0x0)
r3 = openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(r3, 0x10f, 0x86)
quotactl_fd$Q_QUOTAON(r3, 0xffffffff80000202, 0xee01, &(0x7f0000000000)='./file0\x00')

22:46:31 executing program 0:
r0 = socket$can_j1939(0x1d, 0x2, 0x7)
connect$l2tp6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0xffff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xb0, 0x4}, 0x20)
bind$can_j1939(r0, 0x0, 0x0)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
getsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000000), &(0x7f0000000040)=0x4)
write$ppp(r1, 0x0, 0xeffdffffffffffff) (async)
r2 = openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(r2, 0x10f, 0x86) (async)
getsockopt$TIPC_SRC_DROPPABLE(r2, 0x10f, 0x80, &(0x7f0000000240), &(0x7f0000000280)=0x4) (async)
r3 = openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0) (async)
recvfrom$l2tp6(r2, &(0x7f0000000100)=""/229, 0xe5, 0x40, &(0x7f0000000200)={0xa, 0x0, 0x0, @mcast2}, 0x20)
setsockopt$TIPC_MCAST_REPLICAST(r3, 0x10f, 0x86) (async)
ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r3)

22:46:31 executing program 2:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
setsockopt$TIPC_MCAST_BROADCAST(r0, 0x10f, 0x85)
r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x200300, 0x0)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000040)={'ip6tnl0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x29, 0x3f, 0x20, 0xda, 0xc, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x80, 0x700, 0xbd4}})
write$ppp(r1, &(0x7f00000001c0)="338d3e8d58c256d9565db5567f28f3a9a8654e76f7627f406c84ab48df9405cad75c523b4a8b5d0edbb20eb633d701b2d6cbe3280e0a3194709cf0294716564ad620e2816371db010624c20a65eb60cb1be764901a2825a3b887c67ea43f55808e64b5673113d422fd205e31acb3a564c12bc9681d79bb6eb23c27a6fd89667d8a6440b53011d948ff69e8379455b3b78681a6cf1b37d533ef1c5e10b629c96e90d1c7370926c9a596154f775677104ded44ffdefa1fe93de84aea56ae49d6cdeae54dfff2a47fc58c61ef60fcd6f330ca9109", 0xd3)

[ 2797.828881][ T4494] FAULT_INJECTION: forcing a failure.
[ 2797.828881][ T4494] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 2797.841940][ T4494] CPU: 0 PID: 4494 Comm: syz-executor.5 Not tainted 6.6.0-rc3-syzkaller-00165-g3b517966c561 #0
[ 2797.852288][ T4494] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/06/2023
[ 2797.862385][ T4494] Call Trace:
[ 2797.865727][ T4494]  <TASK>
[ 2797.868682][ T4494]  dump_stack_lvl+0xda/0x130
[ 2797.873294][ T4494]  dump_stack+0x15/0x20
22:46:31 executing program 2:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
setsockopt$TIPC_MCAST_BROADCAST(r0, 0x10f, 0x85)
r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x200300, 0x0)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000040)={'ip6tnl0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x29, 0x3f, 0x20, 0xda, 0xc, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x80, 0x700, 0xbd4}})
write$ppp(r1, &(0x7f00000001c0)="338d3e8d58c256d9565db5567f28f3a9a8654e76f7627f406c84ab48df9405cad75c523b4a8b5d0edbb20eb633d701b2d6cbe3280e0a3194709cf0294716564ad620e2816371db010624c20a65eb60cb1be764901a2825a3b887c67ea43f55808e64b5673113d422fd205e31acb3a564c12bc9681d79bb6eb23c27a6fd89667d8a6440b53011d948ff69e8379455b3b78681a6cf1b37d533ef1c5e10b629c96e90d1c7370926c9a596154f775677104ded44ffdefa1fe93de84aea56ae49d6cdeae54dfff2a47fc58c61ef60fcd6f330ca9109", 0xd3)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0) (async)
setsockopt$TIPC_MCAST_BROADCAST(r0, 0x10f, 0x85) (async)
openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x200300, 0x0) (async)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000040)={'ip6tnl0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x29, 0x3f, 0x20, 0xda, 0xc, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x80, 0x700, 0xbd4}}) (async)
write$ppp(r1, &(0x7f00000001c0)="338d3e8d58c256d9565db5567f28f3a9a8654e76f7627f406c84ab48df9405cad75c523b4a8b5d0edbb20eb633d701b2d6cbe3280e0a3194709cf0294716564ad620e2816371db010624c20a65eb60cb1be764901a2825a3b887c67ea43f55808e64b5673113d422fd205e31acb3a564c12bc9681d79bb6eb23c27a6fd89667d8a6440b53011d948ff69e8379455b3b78681a6cf1b37d533ef1c5e10b629c96e90d1c7370926c9a596154f775677104ded44ffdefa1fe93de84aea56ae49d6cdeae54dfff2a47fc58c61ef60fcd6f330ca9109", 0xd3) (async)

22:46:31 executing program 1:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000000))
write$ppp(r0, 0x0, 0xeffdffff)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000040)=0x2, 0x4)

22:46:31 executing program 4:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dcc01, 0x0)
write$ppp(r0, 0x0, 0x0)

[ 2797.877460][ T4494]  should_fail_ex+0x21f/0x230
[ 2797.882156][ T4494]  should_fail+0xb/0x10
[ 2797.886336][ T4494]  should_fail_usercopy+0x1a/0x20
[ 2797.891444][ T4494]  copy_page_from_iter_atomic+0x21c/0xcf0
[ 2797.897181][ T4494]  ? shmem_write_begin+0xa6/0x210
[ 2797.902305][ T4494]  ? shmem_write_begin+0x16d/0x210
[ 2797.907573][ T4494]  generic_perform_write+0x20c/0x410
[ 2797.912884][ T4494]  ? shmem_write_begin+0x210/0x210
[ 2797.918075][ T4494]  shmem_file_write_iter+0xc8/0xe0
[ 2797.923253][ T4494]  vfs_write+0x4ab/0x7d0
[ 2797.927526][ T4494]  ksys_write+0xeb/0x1a0
[ 2797.931796][ T4494]  __x64_sys_write+0x42/0x50
[ 2797.936414][ T4494]  do_syscall_64+0x41/0xc0
[ 2797.940919][ T4494]  entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 2797.946842][ T4494] RIP: 0033:0x7f90e4a54ae9
[ 2797.951391][ T4494] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48
[ 2797.971084][ T4494] RSP: 002b:00007f90e3dd70c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
22:46:32 executing program 5:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
write$ppp(r0, &(0x7f00000002c0)="d3", 0x1f4f33) (fail_nth: 24)

22:46:32 executing program 1:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000000)) (async)
write$ppp(r0, 0x0, 0xeffdffff) (async)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000040)=0x2, 0x4)

22:46:32 executing program 0:
r0 = socket$can_j1939(0x1d, 0x2, 0x7)
connect$l2tp6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0xffff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xb0, 0x4}, 0x20) (async)
bind$can_j1939(r0, 0x0, 0x0)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
getsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000000), &(0x7f0000000040)=0x4)
write$ppp(r1, 0x0, 0xeffdffffffffffff) (async)
r2 = openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(r2, 0x10f, 0x86)
getsockopt$TIPC_SRC_DROPPABLE(r2, 0x10f, 0x80, &(0x7f0000000240), &(0x7f0000000280)=0x4) (async)
r3 = openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0)
recvfrom$l2tp6(r2, &(0x7f0000000100)=""/229, 0xe5, 0x40, &(0x7f0000000200)={0xa, 0x0, 0x0, @mcast2}, 0x20) (async)
setsockopt$TIPC_MCAST_REPLICAST(r3, 0x10f, 0x86)
ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r3)

[ 2797.979556][ T4494] RAX: ffffffffffffffda RBX: 00007f90e4b73f80 RCX: 00007f90e4a54ae9
[ 2797.987552][ T4494] RDX: 00000000001f4f33 RSI: 00000000200002c0 RDI: 0000000000000003
[ 2797.995636][ T4494] RBP: 00007f90e3dd7120 R08: 0000000000000000 R09: 0000000000000000
[ 2798.003640][ T4494] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 2798.011673][ T4494] R13: 000000000000000b R14: 00007f90e4b73f80 R15: 00007ffdb3bfd028
[ 2798.019685][ T4494]  </TASK>
22:46:32 executing program 3:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
write$ppp(r0, &(0x7f00000002c0)="ff", 0xfffffdef)

22:46:32 executing program 4:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dcc01, 0x0)
write$ppp(r0, 0x0, 0x0)

22:46:32 executing program 2:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
setsockopt$TIPC_MCAST_BROADCAST(r0, 0x10f, 0x85)
r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x200300, 0x0)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000040)={'ip6tnl0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x29, 0x3f, 0x20, 0xda, 0xc, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x80, 0x700, 0xbd4}}) (async)
write$ppp(r1, &(0x7f00000001c0)="338d3e8d58c256d9565db5567f28f3a9a8654e76f7627f406c84ab48df9405cad75c523b4a8b5d0edbb20eb633d701b2d6cbe3280e0a3194709cf0294716564ad620e2816371db010624c20a65eb60cb1be764901a2825a3b887c67ea43f55808e64b5673113d422fd205e31acb3a564c12bc9681d79bb6eb23c27a6fd89667d8a6440b53011d948ff69e8379455b3b78681a6cf1b37d533ef1c5e10b629c96e90d1c7370926c9a596154f775677104ded44ffdefa1fe93de84aea56ae49d6cdeae54dfff2a47fc58c61ef60fcd6f330ca9109", 0xd3)

22:46:32 executing program 1:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000000))
write$ppp(r0, 0x0, 0xeffdffff)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000040)=0x2, 0x4)

22:46:32 executing program 0:
r0 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x3c, r0, 0x10, 0x70bd25, 0x25dfdbfe, {}, [@SEG6_ATTR_SECRET={0x10, 0x4, [0x4, 0x3, 0x0]}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x1}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x3f}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x1}]}, 0x3c}}, 0x56b27485513d9fc5)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
write$ppp(r1, 0x0, 0xeffdffffffffffff)

22:46:32 executing program 2:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
write$ppp(r0, &(0x7f00000002c0)="d3", 0x1)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000000)=[@window={0x3, 0x7, 0x1}, @timestamp, @window={0x3, 0x1, 0xf0e1}, @mss={0x2, 0x5}, @sack_perm, @window={0x3, 0xb2f, 0x4}], 0x6)

[ 2798.086439][ T4523] FAULT_INJECTION: forcing a failure.
[ 2798.086439][ T4523] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[ 2798.099809][ T4523] CPU: 0 PID: 4523 Comm: syz-executor.5 Not tainted 6.6.0-rc3-syzkaller-00165-g3b517966c561 #0
[ 2798.110155][ T4523] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/06/2023
[ 2798.120216][ T4523] Call Trace:
[ 2798.123527][ T4523]  <TASK>
[ 2798.126468][ T4523]  dump_stack_lvl+0xda/0x130
[ 2798.131232][ T4523]  dump_stack+0x15/0x20
22:46:32 executing program 2:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
write$ppp(r0, &(0x7f00000002c0)="d3", 0x1)
socket$inet_tcp(0x2, 0x1, 0x0) (async)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000000)=[@window={0x3, 0x7, 0x1}, @timestamp, @window={0x3, 0x1, 0xf0e1}, @mss={0x2, 0x5}, @sack_perm, @window={0x3, 0xb2f, 0x4}], 0x6)

22:46:32 executing program 4:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dcc01, 0x0)
write$ppp(r0, 0x0, 0x0)

22:46:32 executing program 4:
openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0xc8400, 0x0)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x404180, 0x0)
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(r0, 0x10f, 0x86)
write$ppp(r0, 0x0, 0x23)

[ 2798.135411][ T4523]  should_fail_ex+0x21f/0x230
[ 2798.140163][ T4523]  __should_fail_alloc_page+0xfd/0x110
[ 2798.145681][ T4523]  __alloc_pages+0x108/0x340
[ 2798.150387][ T4523]  vma_alloc_folio+0x6a3/0x8c0
[ 2798.155194][ T4523]  ? shmem_inode_acct_block+0x1ee/0x220
[ 2798.160817][ T4523]  shmem_get_folio_gfp+0x579/0xc30
[ 2798.165951][ T4523]  shmem_write_begin+0xa6/0x210
[ 2798.170875][ T4523]  generic_perform_write+0x1c9/0x410
[ 2798.176168][ T4523]  ? shmem_write_begin+0x210/0x210
[ 2798.181345][ T4523]  shmem_file_write_iter+0xc8/0xe0
[ 2798.186574][ T4523]  vfs_write+0x4ab/0x7d0
[ 2798.190947][ T4523]  ksys_write+0xeb/0x1a0
[ 2798.195369][ T4523]  __x64_sys_write+0x42/0x50
[ 2798.199991][ T4523]  do_syscall_64+0x41/0xc0
[ 2798.204424][ T4523]  entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 2798.210429][ T4523] RIP: 0033:0x7f90e4a54ae9
[ 2798.214982][ T4523] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48
22:46:32 executing program 5:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
write$ppp(r0, &(0x7f00000002c0)="d3", 0x1f4f33) (fail_nth: 25)

22:46:32 executing program 4:
openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0) (async)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0xc8400, 0x0)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x404180, 0x0) (async, rerun: 32)
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0) (rerun: 32)
setsockopt$TIPC_MCAST_REPLICAST(r0, 0x10f, 0x86)
write$ppp(r0, 0x0, 0x23)

22:46:32 executing program 0:
r0 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x3c, r0, 0x10, 0x70bd25, 0x25dfdbfe, {}, [@SEG6_ATTR_SECRET={0x10, 0x4, [0x4, 0x3, 0x0]}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x1}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x3f}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x1}]}, 0x3c}}, 0x56b27485513d9fc5)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
write$ppp(r1, 0x0, 0xeffdffffffffffff)

[ 2798.234626][ T4523] RSP: 002b:00007f90e3dd70c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 2798.243124][ T4523] RAX: ffffffffffffffda RBX: 00007f90e4b73f80 RCX: 00007f90e4a54ae9
[ 2798.251111][ T4523] RDX: 00000000001f4f33 RSI: 00000000200002c0 RDI: 0000000000000003
[ 2798.259111][ T4523] RBP: 00007f90e3dd7120 R08: 0000000000000000 R09: 0000000000000000
[ 2798.267092][ T4523] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 2798.275104][ T4523] R13: 000000000000000b R14: 00007f90e4b73f80 R15: 00007ffdb3bfd028
[ 2798.283118][ T4523]  </TASK>
[ 2798.336576][ T4551] FAULT_INJECTION: forcing a failure.
[ 2798.336576][ T4551] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 2798.349690][ T4551] CPU: 1 PID: 4551 Comm: syz-executor.5 Not tainted 6.6.0-rc3-syzkaller-00165-g3b517966c561 #0
[ 2798.360013][ T4551] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/06/2023
[ 2798.370071][ T4551] Call Trace:
[ 2798.373384][ T4551]  <TASK>
[ 2798.376323][ T4551]  dump_stack_lvl+0xda/0x130
[ 2798.381009][ T4551]  dump_stack+0x15/0x20
22:46:32 executing program 2:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
write$ppp(r0, &(0x7f00000002c0)="d3", 0x1) (async)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000000)=[@window={0x3, 0x7, 0x1}, @timestamp, @window={0x3, 0x1, 0xf0e1}, @mss={0x2, 0x5}, @sack_perm, @window={0x3, 0xb2f, 0x4}], 0x6)

22:46:32 executing program 1:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
write$ppp(r0, 0x0, 0xeffdffff)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x80002, 0x0)
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x29, 0x35, 0x0, 0xb)
r3 = openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(r3, 0x10f, 0x86)
r4 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), r1)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'team0\x00', <r5=>0x0})
r6 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000180)={'vcan0\x00', <r7=>0x0})
bind$can_j1939(r6, &(0x7f00000001c0)={0x1d, r7, 0x0, {0x1}}, 0x18)
r8 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r8, 0x8933, &(0x7f0000000180)={'vcan0\x00', <r9=>0x0})
bind$can_j1939(r8, &(0x7f00000001c0)={0x1d, r9, 0x0, {0x1}}, 0x18)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000140)={'vcan0\x00', <r10=>0x0})
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000200)={'ip6tnl0\x00', &(0x7f0000000180)={'ip6gre0\x00', <r11=>0x0, 0x29, 0x0, 0x7, 0xac22, 0x10, @local, @private1, 0x7, 0x7800, 0x5, 0x93e}})
sendmsg$TEAM_CMD_NOOP(r3, &(0x7f0000000a40)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000a00)={&(0x7f0000000240)={0x7ac, r4, 0x800, 0x70bd2b, 0x25dfdbfc, {}, [{{0x8, 0x1, r5}, {0x234, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1f}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0xfffffffa}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r7}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x400}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0xfffffff9}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x64, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x34, 0x4, [{0xff00, 0x6, 0x1, 0x7}, {0x4, 0x5, 0x6, 0x4}, {0x5, 0x1, 0x9, 0x8}, {0x1, 0x1, 0x5, 0xe1}, {0xbb31, 0x9, 0x0, 0x6}, {0x1, 0x7f, 0x0, 0x400}]}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}]}}, {{0x8}, {0xc8, 0x2, 0x0, 0x1, [{0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r9}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x6964a50d}}, {0x8, 0x6, r10}}}]}}, {{0x8}, {0xd0, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xffffffc0}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8}}}, {0x4c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x1c, 0x4, [{0x9127, 0x0, 0x6, 0x1}, {0x400, 0xd3, 0x3, 0x7}, {0x7f, 0x1, 0x5f, 0x7}]}}}]}}, {{0x8, 0x1, r11}, {0xc0, 0x2, 0x0, 0x1, [{0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x7fff, 0x7, 0xf8, 0xd7}]}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}, {{0x8}, {0x1dc, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8}}}]}}, {{0x8}, {0xbc, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}]}, 0x7ac}, 0x1, 0x0, 0x0, 0x810}, 0x20000000)
ioctl$TUNSETLINK(r0, 0x400454cd, 0x110)

22:46:32 executing program 3:
openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)

22:46:32 executing program 0:
r0 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x3c, r0, 0x10, 0x70bd25, 0x25dfdbfe, {}, [@SEG6_ATTR_SECRET={0x10, 0x4, [0x4, 0x3, 0x0]}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x1}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x3f}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x1}]}, 0x3c}}, 0x56b27485513d9fc5) (async)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
write$ppp(r1, 0x0, 0xeffdffffffffffff)

22:46:32 executing program 4:
openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0xc8400, 0x0)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x404180, 0x0) (async)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x404180, 0x0)
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(r0, 0x10f, 0x86) (async)
setsockopt$TIPC_MCAST_REPLICAST(r0, 0x10f, 0x86)
write$ppp(r0, 0x0, 0x23)

22:46:32 executing program 3:
openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)

[ 2798.385284][ T4551]  should_fail_ex+0x21f/0x230
[ 2798.389964][ T4551]  should_fail+0xb/0x10
[ 2798.394212][ T4551]  should_fail_usercopy+0x1a/0x20
[ 2798.399243][ T4551]  copy_page_from_iter_atomic+0x21c/0xcf0
[ 2798.404976][ T4551]  ? shmem_write_begin+0xa6/0x210
[ 2798.410053][ T4551]  ? shmem_write_begin+0x16d/0x210
[ 2798.415191][ T4551]  generic_perform_write+0x20c/0x410
[ 2798.420667][ T4551]  ? shmem_write_begin+0x210/0x210
[ 2798.425810][ T4551]  shmem_file_write_iter+0xc8/0xe0
[ 2798.431056][ T4551]  vfs_write+0x4ab/0x7d0
22:46:32 executing program 2:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
write$ppp(r0, &(0x7f00000000c0)="d328a336a0839b22ca77f5c43b2914fa66d778a08838c488169066be07f101bf58395890364e514be98e55df86accf0d63787c75a5094b657303ed0a5066a9fccb94374c42f259b9b7c7bef292ab316a3125101d256bc3d2291bece2bb68f402e2ae5e874bb70a31b61fc7b2ec591f6fa46f99bb066b78fac3dc86bf91328437e4943d394e1417747aac8db0524d20212054b6311e6165fee42cb6e570532a76b8c3ea07d9dc657c05297debfef50dbed95b3457636828ccc2aea40209f8f732c7ca889dcb21140ef96bf8a881c7d099d5e9600fea5ca18af90cf23e6d763bf42c53f112f706b5f0272741d0c4645ab8380a26d07a9b2c468aca9c882680af1fb524ceb82755fe", 0x107)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(r1, 0x10f, 0x86)
ioctl$PPPIOCGIDLE(r1, 0x8010743f, &(0x7f0000000040))

22:46:32 executing program 0:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x3b4781, 0x0)
write$ppp(r0, 0x0, 0xeffdffffffffffff)

22:46:32 executing program 2:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
write$ppp(r0, &(0x7f00000000c0)="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", 0x107) (async)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(r1, 0x10f, 0x86)
ioctl$PPPIOCGIDLE(r1, 0x8010743f, &(0x7f0000000040))

[ 2798.435457][ T4551]  ksys_write+0xeb/0x1a0
[ 2798.439738][ T4551]  __x64_sys_write+0x42/0x50
[ 2798.444375][ T4551]  do_syscall_64+0x41/0xc0
[ 2798.448916][ T4551]  entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 2798.454845][ T4551] RIP: 0033:0x7f90e4a54ae9
[ 2798.459274][ T4551] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48
[ 2798.478910][ T4551] RSP: 002b:00007f90e3dd70c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
22:46:32 executing program 5:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
write$ppp(r0, &(0x7f00000002c0)="d3", 0x1f4f33) (fail_nth: 26)

22:46:32 executing program 2:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
write$ppp(r0, &(0x7f00000000c0)="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", 0x107) (async)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(r1, 0x10f, 0x86) (async)
ioctl$PPPIOCGIDLE(r1, 0x8010743f, &(0x7f0000000040))

22:46:32 executing program 0:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x3b4781, 0x0)
write$ppp(r0, 0x0, 0xeffdffffffffffff)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x3b4781, 0x0) (async)
write$ppp(r0, 0x0, 0xeffdffffffffffff) (async)

22:46:32 executing program 4:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
write$ppp(r0, 0x0, 0x0)
ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r0)

22:46:32 executing program 1:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
write$ppp(r0, 0x0, 0xeffdffff) (async)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x80002, 0x0) (async)
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x29, 0x35, 0x0, 0xb)
r3 = openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(r3, 0x10f, 0x86) (async)
r4 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), r1) (async)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'team0\x00', <r5=>0x0})
r6 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000180)={'vcan0\x00', <r7=>0x0})
bind$can_j1939(r6, &(0x7f00000001c0)={0x1d, r7, 0x0, {0x1}}, 0x18) (async)
r8 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r8, 0x8933, &(0x7f0000000180)={'vcan0\x00', <r9=>0x0})
bind$can_j1939(r8, &(0x7f00000001c0)={0x1d, r9, 0x0, {0x1}}, 0x18) (async)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000140)={'vcan0\x00', <r10=>0x0}) (async)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000200)={'ip6tnl0\x00', &(0x7f0000000180)={'ip6gre0\x00', <r11=>0x0, 0x29, 0x0, 0x7, 0xac22, 0x10, @local, @private1, 0x7, 0x7800, 0x5, 0x93e}})
sendmsg$TEAM_CMD_NOOP(r3, &(0x7f0000000a40)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000a00)={&(0x7f0000000240)={0x7ac, r4, 0x800, 0x70bd2b, 0x25dfdbfc, {}, [{{0x8, 0x1, r5}, {0x234, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1f}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0xfffffffa}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r7}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x400}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0xfffffff9}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x64, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x34, 0x4, [{0xff00, 0x6, 0x1, 0x7}, {0x4, 0x5, 0x6, 0x4}, {0x5, 0x1, 0x9, 0x8}, {0x1, 0x1, 0x5, 0xe1}, {0xbb31, 0x9, 0x0, 0x6}, {0x1, 0x7f, 0x0, 0x400}]}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}]}}, {{0x8}, {0xc8, 0x2, 0x0, 0x1, [{0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r9}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x6964a50d}}, {0x8, 0x6, r10}}}]}}, {{0x8}, {0xd0, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xffffffc0}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8}}}, {0x4c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x1c, 0x4, [{0x9127, 0x0, 0x6, 0x1}, {0x400, 0xd3, 0x3, 0x7}, {0x7f, 0x1, 0x5f, 0x7}]}}}]}}, {{0x8, 0x1, r11}, {0xc0, 0x2, 0x0, 0x1, [{0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x7fff, 0x7, 0xf8, 0xd7}]}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}, {{0x8}, {0x1dc, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8}}}]}}, {{0x8}, {0xbc, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}]}, 0x7ac}, 0x1, 0x0, 0x0, 0x810}, 0x20000000)
ioctl$TUNSETLINK(r0, 0x400454cd, 0x110)

22:46:32 executing program 3:
openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)

[ 2798.487410][ T4551] RAX: ffffffffffffffda RBX: 00007f90e4b73f80 RCX: 00007f90e4a54ae9
[ 2798.495398][ T4551] RDX: 00000000001f4f33 RSI: 00000000200002c0 RDI: 0000000000000003
[ 2798.503435][ T4551] RBP: 00007f90e3dd7120 R08: 0000000000000000 R09: 0000000000000000
[ 2798.511421][ T4551] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 2798.519417][ T4551] R13: 000000000000000b R14: 00007f90e4b73f80 R15: 00007ffdb3bfd028
[ 2798.527472][ T4551]  </TASK>
22:46:32 executing program 0:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x3b4781, 0x0)
write$ppp(r0, 0x0, 0xeffdffffffffffff)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x3b4781, 0x0) (async)
write$ppp(r0, 0x0, 0xeffdffffffffffff) (async)

22:46:32 executing program 1:
openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0) (async)
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
write$ppp(r0, 0x0, 0xeffdffff)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x80002, 0x0) (async)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x80002, 0x0)
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x29, 0x35, 0x0, 0xb)
r3 = openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(r3, 0x10f, 0x86) (async)
setsockopt$TIPC_MCAST_REPLICAST(r3, 0x10f, 0x86)
r4 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), r1)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'team0\x00', <r5=>0x0})
r6 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000180)={'vcan0\x00', <r7=>0x0})
bind$can_j1939(r6, &(0x7f00000001c0)={0x1d, r7, 0x0, {0x1}}, 0x18)
socket$can_j1939(0x1d, 0x2, 0x7) (async)
r8 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r8, 0x8933, &(0x7f0000000180)={'vcan0\x00'}) (async)
ioctl$ifreq_SIOCGIFINDEX_vcan(r8, 0x8933, &(0x7f0000000180)={'vcan0\x00', <r9=>0x0})
bind$can_j1939(r8, &(0x7f00000001c0)={0x1d, r9, 0x0, {0x1}}, 0x18)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000140)={'vcan0\x00', <r10=>0x0})
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000200)={'ip6tnl0\x00', &(0x7f0000000180)={'ip6gre0\x00', 0x0, 0x29, 0x0, 0x7, 0xac22, 0x10, @local, @private1, 0x7, 0x7800, 0x5, 0x93e}}) (async)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000200)={'ip6tnl0\x00', &(0x7f0000000180)={'ip6gre0\x00', <r11=>0x0, 0x29, 0x0, 0x7, 0xac22, 0x10, @local, @private1, 0x7, 0x7800, 0x5, 0x93e}})
sendmsg$TEAM_CMD_NOOP(r3, &(0x7f0000000a40)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000a00)={&(0x7f0000000240)={0x7ac, r4, 0x800, 0x70bd2b, 0x25dfdbfc, {}, [{{0x8, 0x1, r5}, {0x234, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1f}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0xfffffffa}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r7}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x400}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0xfffffff9}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x64, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x34, 0x4, [{0xff00, 0x6, 0x1, 0x7}, {0x4, 0x5, 0x6, 0x4}, {0x5, 0x1, 0x9, 0x8}, {0x1, 0x1, 0x5, 0xe1}, {0xbb31, 0x9, 0x0, 0x6}, {0x1, 0x7f, 0x0, 0x400}]}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}]}}, {{0x8}, {0xc8, 0x2, 0x0, 0x1, [{0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r9}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x6964a50d}}, {0x8, 0x6, r10}}}]}}, {{0x8}, {0xd0, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xffffffc0}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8}}}, {0x4c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x1c, 0x4, [{0x9127, 0x0, 0x6, 0x1}, {0x400, 0xd3, 0x3, 0x7}, {0x7f, 0x1, 0x5f, 0x7}]}}}]}}, {{0x8, 0x1, r11}, {0xc0, 0x2, 0x0, 0x1, [{0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x7fff, 0x7, 0xf8, 0xd7}]}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}, {{0x8}, {0x1dc, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8}}}]}}, {{0x8}, {0xbc, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}]}, 0x7ac}, 0x1, 0x0, 0x0, 0x810}, 0x20000000)
ioctl$TUNSETLINK(r0, 0x400454cd, 0x110)

22:46:32 executing program 4:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
write$ppp(r0, 0x0, 0x0) (async)
ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r0)

22:46:32 executing program 3:
times(&(0x7f0000000000))
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x5411, 0xfffffffffffffffe)
write$ppp(0xffffffffffffffff, &(0x7f00000002c0)="d3", 0xfffffdef)

22:46:32 executing program 2:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
write$ppp(r0, &(0x7f00000002c0)="d3", 0x1)
r1 = socket$isdn_base(0x22, 0x3, 0x0)
ioctl$IMGETCOUNT(r1, 0x80044943, &(0x7f0000000000))
r2 = openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(r2, 0x10f, 0x86)
ioctl$PPPIOCSDEBUG(r2, 0x40047440, &(0x7f0000000040)=0x6)

22:46:32 executing program 0:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x13080, 0x0)
write$ppp(r0, 0x0, 0xeffdffffffffffff)
socketpair(0x11, 0x800, 0x5b01, &(0x7f0000000000)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$IMGETDEVINFO(r1, 0x80044944, &(0x7f0000000080)={0x32})
r3 = openat$bsg(0xffffffffffffff9c, &(0x7f00000001c0), 0x602401, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(r3, 0x10f, 0x86)
accept4$tipc(r2, &(0x7f0000000100), &(0x7f0000000140)=0x10, 0x80800)
r4 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x0)
ioctl$LOOP_SET_STATUS(r4, 0x4c02, &(0x7f00000000c0)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x0, 0x0, "9d29bf09a7fc36f25f0530fc2fcce76dae940cad8b21257fce4c736e3f27d40f489e8de5e223c18569c5b61dc93f45c4a54f7c65bf708ff9a2112279b44a41d2", "a3a644169bd9c6f394566ee60d3b3f62a9f4fff2d92bbb3f06e4f86127468653", [0x0, 0xffffffffffffffff]})
getsockopt$TIPC_IMPORTANCE(0xffffffffffffffff, 0x10f, 0x7f, &(0x7f0000000180), &(0x7f0000000200)=0x4)
ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f00000000c0)=0x1)

[ 2798.643590][ T4600] FAULT_INJECTION: forcing a failure.
[ 2798.643590][ T4600] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[ 2798.656847][ T4600] CPU: 1 PID: 4600 Comm: syz-executor.5 Not tainted 6.6.0-rc3-syzkaller-00165-g3b517966c561 #0
[ 2798.667230][ T4600] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/06/2023
[ 2798.677334][ T4600] Call Trace:
[ 2798.680677][ T4600]  <TASK>
[ 2798.683651][ T4600]  dump_stack_lvl+0xda/0x130
[ 2798.688238][ T4600]  dump_stack+0x15/0x20
[ 2798.692401][ T4600]  should_fail_ex+0x21f/0x230
[ 2798.697126][ T4600]  __should_fail_alloc_page+0xfd/0x110
[ 2798.702690][ T4600]  __alloc_pages+0x108/0x340
[ 2798.707327][ T4600]  vma_alloc_folio+0x6a3/0x8c0
[ 2798.712100][ T4600]  ? shmem_inode_acct_block+0x1ee/0x220
[ 2798.717697][ T4600]  shmem_get_folio_gfp+0x579/0xc30
[ 2798.722859][ T4600]  shmem_write_begin+0xa6/0x210
[ 2798.727755][ T4600]  generic_perform_write+0x1c9/0x410
[ 2798.733143][ T4600]  ? shmem_write_begin+0x210/0x210
[ 2798.738309][ T4600]  shmem_file_write_iter+0xc8/0xe0
[ 2798.743425][ T4600]  vfs_write+0x4ab/0x7d0
[ 2798.747659][ T4600]  ksys_write+0xeb/0x1a0
[ 2798.751975][ T4600]  __x64_sys_write+0x42/0x50
[ 2798.756566][ T4600]  do_syscall_64+0x41/0xc0
[ 2798.761019][ T4600]  entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 2798.766911][ T4600] RIP: 0033:0x7f90e4a54ae9
[ 2798.771342][ T4600] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48
22:46:32 executing program 3:
times(&(0x7f0000000000)) (async)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x5411, 0xfffffffffffffffe) (async)
write$ppp(0xffffffffffffffff, &(0x7f00000002c0)="d3", 0xfffffdef)

22:46:32 executing program 1:
syz_genetlink_get_family_id$SEG6(&(0x7f0000000000), 0xffffffffffffffff)
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
write$ppp(r0, 0x0, 0xeffdffff)

22:46:32 executing program 2:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
write$ppp(r0, &(0x7f00000002c0)="d3", 0x1)
r1 = socket$isdn_base(0x22, 0x3, 0x0)
ioctl$IMGETCOUNT(r1, 0x80044943, &(0x7f0000000000))
r2 = openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(r2, 0x10f, 0x86)
ioctl$PPPIOCSDEBUG(r2, 0x40047440, &(0x7f0000000040)=0x6)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0) (async)
write$ppp(r0, &(0x7f00000002c0)="d3", 0x1) (async)
socket$isdn_base(0x22, 0x3, 0x0) (async)
ioctl$IMGETCOUNT(r1, 0x80044943, &(0x7f0000000000)) (async)
openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0) (async)
setsockopt$TIPC_MCAST_REPLICAST(r2, 0x10f, 0x86) (async)
ioctl$PPPIOCSDEBUG(r2, 0x40047440, &(0x7f0000000040)=0x6) (async)

22:46:32 executing program 4:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
write$ppp(r0, 0x0, 0x0)
ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r0)

22:46:32 executing program 0:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x13080, 0x0)
write$ppp(r0, 0x0, 0xeffdffffffffffff)
socketpair(0x11, 0x800, 0x5b01, &(0x7f0000000000)) (async)
socketpair(0x11, 0x800, 0x5b01, &(0x7f0000000000)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$IMGETDEVINFO(r1, 0x80044944, &(0x7f0000000080)={0x32})
openat$bsg(0xffffffffffffff9c, &(0x7f00000001c0), 0x602401, 0x0) (async)
r3 = openat$bsg(0xffffffffffffff9c, &(0x7f00000001c0), 0x602401, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(r3, 0x10f, 0x86)
accept4$tipc(r2, &(0x7f0000000100), &(0x7f0000000140)=0x10, 0x80800)
syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x0) (async)
r4 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x0)
ioctl$LOOP_SET_STATUS(r4, 0x4c02, &(0x7f00000000c0)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x0, 0x0, "9d29bf09a7fc36f25f0530fc2fcce76dae940cad8b21257fce4c736e3f27d40f489e8de5e223c18569c5b61dc93f45c4a54f7c65bf708ff9a2112279b44a41d2", "a3a644169bd9c6f394566ee60d3b3f62a9f4fff2d92bbb3f06e4f86127468653", [0x0, 0xffffffffffffffff]})
getsockopt$TIPC_IMPORTANCE(0xffffffffffffffff, 0x10f, 0x7f, &(0x7f0000000180), &(0x7f0000000200)=0x4)
ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f00000000c0)=0x1)

22:46:32 executing program 5:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
write$ppp(r0, &(0x7f00000002c0)="d3", 0x1f4f33) (fail_nth: 27)

[ 2798.790938][ T4600] RSP: 002b:00007f90e3dd70c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 2798.799371][ T4600] RAX: ffffffffffffffda RBX: 00007f90e4b73f80 RCX: 00007f90e4a54ae9
[ 2798.807352][ T4600] RDX: 00000000001f4f33 RSI: 00000000200002c0 RDI: 0000000000000003
[ 2798.815317][ T4600] RBP: 00007f90e3dd7120 R08: 0000000000000000 R09: 0000000000000000
[ 2798.823294][ T4600] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 2798.831258][ T4600] R13: 000000000000000b R14: 00007f90e4b73f80 R15: 00007ffdb3bfd028
[ 2798.839222][ T4600]  </TASK>
22:46:32 executing program 3:
times(&(0x7f0000000000))
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x5411, 0xfffffffffffffffe)
write$ppp(0xffffffffffffffff, &(0x7f00000002c0)="d3", 0xfffffdef)
times(&(0x7f0000000000)) (async)
socket$inet_tcp(0x2, 0x1, 0x0) (async)
ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x5411, 0xfffffffffffffffe) (async)
write$ppp(0xffffffffffffffff, &(0x7f00000002c0)="d3", 0xfffffdef) (async)

22:46:32 executing program 4:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
r1 = getuid()
quotactl_fd$Q_QUOTAON(r0, 0xffffffff80000200, r1, &(0x7f0000000000)='./file0\x00')
write$ppp(r0, 0x0, 0x0)

22:46:32 executing program 2:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
write$ppp(r0, &(0x7f00000002c0)="d3", 0x1)
r1 = socket$isdn_base(0x22, 0x3, 0x0)
ioctl$IMGETCOUNT(r1, 0x80044943, &(0x7f0000000000))
r2 = openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(r2, 0x10f, 0x86)
ioctl$PPPIOCSDEBUG(r2, 0x40047440, &(0x7f0000000040)=0x6)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0) (async)
write$ppp(r0, &(0x7f00000002c0)="d3", 0x1) (async)
socket$isdn_base(0x22, 0x3, 0x0) (async)
ioctl$IMGETCOUNT(r1, 0x80044943, &(0x7f0000000000)) (async)
openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0) (async)
setsockopt$TIPC_MCAST_REPLICAST(r2, 0x10f, 0x86) (async)
ioctl$PPPIOCSDEBUG(r2, 0x40047440, &(0x7f0000000040)=0x6) (async)

22:46:32 executing program 1:
syz_genetlink_get_family_id$SEG6(&(0x7f0000000000), 0xffffffffffffffff) (async)
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
write$ppp(r0, 0x0, 0xeffdffff)

22:46:32 executing program 0:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x13080, 0x0)
write$ppp(r0, 0x0, 0xeffdffffffffffff) (async)
socketpair(0x11, 0x800, 0x5b01, &(0x7f0000000000)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$IMGETDEVINFO(r1, 0x80044944, &(0x7f0000000080)={0x32}) (async)
r3 = openat$bsg(0xffffffffffffff9c, &(0x7f00000001c0), 0x602401, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(r3, 0x10f, 0x86)
accept4$tipc(r2, &(0x7f0000000100), &(0x7f0000000140)=0x10, 0x80800)
r4 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x0)
ioctl$LOOP_SET_STATUS(r4, 0x4c02, &(0x7f00000000c0)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x0, 0x0, "9d29bf09a7fc36f25f0530fc2fcce76dae940cad8b21257fce4c736e3f27d40f489e8de5e223c18569c5b61dc93f45c4a54f7c65bf708ff9a2112279b44a41d2", "a3a644169bd9c6f394566ee60d3b3f62a9f4fff2d92bbb3f06e4f86127468653", [0x0, 0xffffffffffffffff]}) (async)
getsockopt$TIPC_IMPORTANCE(0xffffffffffffffff, 0x10f, 0x7f, &(0x7f0000000180), &(0x7f0000000200)=0x4)
ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f00000000c0)=0x1)

22:46:32 executing program 0:
r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x101080, 0x0)
ioctl$PPPIOCATTACH(r0, 0x4004743d, &(0x7f0000000040)=0x1)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
write$ppp(r1, 0x0, 0xeffdffffffffffff)
r2 = openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(r2, 0x10f, 0x86)

22:46:32 executing program 4:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0) (async)
r1 = getuid()
quotactl_fd$Q_QUOTAON(r0, 0xffffffff80000200, r1, &(0x7f0000000000)='./file0\x00') (async)
write$ppp(r0, 0x0, 0x0)

22:46:33 executing program 0:
r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x101080, 0x0)
ioctl$PPPIOCATTACH(r0, 0x4004743d, &(0x7f0000000040)=0x1) (async)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
write$ppp(r1, 0x0, 0xeffdffffffffffff) (async)
r2 = openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(r2, 0x10f, 0x86)

[ 2798.893814][ T4617] FAULT_INJECTION: forcing a failure.
[ 2798.893814][ T4617] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 2798.906990][ T4617] CPU: 1 PID: 4617 Comm: syz-executor.5 Not tainted 6.6.0-rc3-syzkaller-00165-g3b517966c561 #0
[ 2798.917356][ T4617] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/06/2023
[ 2798.927437][ T4617] Call Trace:
[ 2798.930799][ T4617]  <TASK>
[ 2798.933766][ T4617]  dump_stack_lvl+0xda/0x130
[ 2798.938392][ T4617]  dump_stack+0x15/0x20
22:46:33 executing program 4:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0) (async)
r1 = getuid()
quotactl_fd$Q_QUOTAON(r0, 0xffffffff80000200, r1, &(0x7f0000000000)='./file0\x00')
write$ppp(r0, 0x0, 0x0)

22:46:33 executing program 3:
openat$nci(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0)
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0)
ioctl$TUNSETFILTEREBPF(0xffffffffffffffff, 0x800454e1, &(0x7f0000000040)=r0)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(r1, 0x10f, 0x86)
ioctl$TUNSETLINK(r1, 0x400454cd, 0x321)
r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000180), 0x100, 0x0)
ioctl$TUNSETDEBUG(r2, 0x400454c9, &(0x7f00000001c0)=0x8)
r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
ioctl$TUNSETQUEUE(r3, 0x400454d9, &(0x7f00000000c0)={'syzkaller1\x00'})
write$ppp(r3, &(0x7f00000002c0)="d3", 0xfffffdef)
getsockopt$inet_tcp_buf(r3, 0x6, 0x1f, &(0x7f0000000100)=""/18, &(0x7f0000000140)=0x12)

22:46:33 executing program 0:
r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x101080, 0x0)
ioctl$PPPIOCATTACH(r0, 0x4004743d, &(0x7f0000000040)=0x1)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
write$ppp(r1, 0x0, 0xeffdffffffffffff)
r2 = openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(r2, 0x10f, 0x86)
openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x101080, 0x0) (async)
ioctl$PPPIOCATTACH(r0, 0x4004743d, &(0x7f0000000040)=0x1) (async)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0) (async)
write$ppp(r1, 0x0, 0xeffdffffffffffff) (async)
openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0) (async)
setsockopt$TIPC_MCAST_REPLICAST(r2, 0x10f, 0x86) (async)

[ 2798.942565][ T4617]  should_fail_ex+0x21f/0x230
[ 2798.947341][ T4617]  should_fail+0xb/0x10
[ 2798.951523][ T4617]  should_fail_usercopy+0x1a/0x20
[ 2798.956647][ T4617]  copy_page_from_iter_atomic+0x21c/0xcf0
[ 2798.962403][ T4617]  ? shmem_write_begin+0xa6/0x210
[ 2798.967524][ T4617]  ? shmem_write_begin+0x16d/0x210
[ 2798.972719][ T4617]  generic_perform_write+0x20c/0x410
[ 2798.978026][ T4617]  ? shmem_write_begin+0x210/0x210
[ 2798.983165][ T4617]  shmem_file_write_iter+0xc8/0xe0
[ 2798.988305][ T4617]  vfs_write+0x4ab/0x7d0
[ 2798.992613][ T4617]  ksys_write+0xeb/0x1a0
[ 2798.996898][ T4617]  __x64_sys_write+0x42/0x50
[ 2799.001570][ T4617]  do_syscall_64+0x41/0xc0
[ 2799.006073][ T4617]  entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 2799.012017][ T4617] RIP: 0033:0x7f90e4a54ae9
[ 2799.016536][ T4617] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48
[ 2799.036185][ T4617] RSP: 002b:00007f90e3dd70c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
22:46:33 executing program 5:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
write$ppp(r0, &(0x7f00000002c0)="d3", 0x1f4f33) (fail_nth: 28)

22:46:33 executing program 4:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x1d6b80, 0x0)
ioctl$IMGETVERSION(0xffffffffffffffff, 0x80044942, &(0x7f0000000000))
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100), 0x80040, 0x0)
r2 = openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(r2, 0x10f, 0x86)
ioctl$TUNSETQUEUE(r2, 0x400454d9, &(0x7f0000000080)={'netpci0\x00', 0x200})
setsockopt$TIPC_MCAST_REPLICAST(r1, 0x10f, 0x86)
write$ppp(r0, 0x0, 0x0)

22:46:33 executing program 0:
openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0)
socketpair(0x21, 0x2, 0xa, &(0x7f0000000000))
setsockopt$TIPC_MCAST_REPLICAST(r0, 0x10f, 0x86)
r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x202042, 0x0)
write$ppp(r1, 0x0, 0x0)
sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)={0x44, 0x0, 0x100, 0x70bd2d, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @local}, @SEG6_ATTR_DST={0x14, 0x1, @private0={0xfc, 0x0, '\x00', 0x1}}, @SEG6_ATTR_ALGID={0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x44000)

22:46:33 executing program 1:
syz_genetlink_get_family_id$SEG6(&(0x7f0000000000), 0xffffffffffffffff)
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
write$ppp(r0, 0x0, 0xeffdffff)

[ 2799.036212][ T4617] RAX: ffffffffffffffda RBX: 00007f90e4b73f80 RCX: 00007f90e4a54ae9
[ 2799.036225][ T4617] RDX: 00000000001f4f33 RSI: 00000000200002c0 RDI: 0000000000000003
[ 2799.036241][ T4617] RBP: 00007f90e3dd7120 R08: 0000000000000000 R09: 0000000000000000
[ 2799.036254][ T4617] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 2799.036266][ T4617] R13: 000000000000000b R14: 00007f90e4b73f80 R15: 00007ffdb3bfd028
[ 2799.036284][ T4617]  </TASK>
[ 2799.132077][ T4667] FAULT_INJECTION: forcing a failure.
[ 2799.132077][ T4667] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[ 2799.145389][ T4667] CPU: 0 PID: 4667 Comm: syz-executor.5 Not tainted 6.6.0-rc3-syzkaller-00165-g3b517966c561 #0
[ 2799.155776][ T4667] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/06/2023
[ 2799.165933][ T4667] Call Trace:
[ 2799.169224][ T4667]  <TASK>
[ 2799.172153][ T4667]  dump_stack_lvl+0xda/0x130
[ 2799.176799][ T4667]  dump_stack+0x15/0x20
22:46:33 executing program 1:
sigaltstack(&(0x7f0000001000)={&(0x7f0000000000)=""/4096, 0x0, 0x1000}, 0x0)
sigaltstack(&(0x7f0000001100)={0x0, 0x80000002}, &(0x7f00000011c0)={0x0})
socketpair(0x2c, 0x4, 0x6, &(0x7f0000001040))
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
socketpair(0x10, 0x80000, 0x8000, &(0x7f0000001300)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
getsockopt$inet_mptcp_buf(r1, 0x11c, 0x4, &(0x7f0000001340)=""/110, &(0x7f00000013c0)=0x6e)
write$ppp(r0, 0x0, 0xeffdffff)
sigaltstack(&(0x7f0000001280)={&(0x7f0000001240)=""/38, 0x0, 0x26}, 0x0)
sendmsg$AUDIT_MAKE_EQUIV(r0, &(0x7f00000012c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="28fcdb092507000000070000002e6c653000"/29], 0x28}, 0x1, 0x0, 0x0, 0x4000841}, 0x95)
sigaltstack(&(0x7f0000001140)={&(0x7f0000001080)=""/92, 0x80000001, 0x5c}, &(0x7f0000001200)={&(0x7f0000001180)=""/8, 0x0, 0x8})

22:46:33 executing program 2:
r0 = syz_genetlink_get_family_id$SEG6(&(0x7f00000004c0), 0xffffffffffffffff)
sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x1c, r0, 0x2, 0x70bd2c, 0x25dfdbfd, {}, [@SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8891}, 0x11)
sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x20, r0, 0x2, 0x70bd29, 0x25dfdbfb, {}, [@SEG6_ATTR_SECRET={0xc, 0x4, [0x8, 0x5]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x4000080)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x4100c0, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000580), 0xffffffffffffffff)
sendmsg$L2TP_CMD_SESSION_CREATE(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000540), 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x4c, r4, 0x200, 0x70bd2c, 0x25dfdbfb, {}, [@L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x5b}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}, @L2TP_ATTR_FD={0x8}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e21}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e24}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x24040881}, 0x20008000)
sendmsg$L2TP_CMD_TUNNEL_MODIFY(r2, &(0x7f00000005c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x50, r4, 0x20, 0x70bd28, 0x25dfdbfc, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x1}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x8f0}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e21}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x4}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x2}]}, 0x50}, 0x1, 0x0, 0x0, 0x48800}, 0x1)
r5 = syz_genetlink_get_family_id$SEG6(&(0x7f00000004c0), 0xffffffffffffffff)
sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x1c, r5, 0x2, 0x70bd2c, 0x25dfdbfd, {}, [@SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8891}, 0x11)
sendmsg$SEG6_CMD_SETHMAC(r3, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000200)={0xa0, r5, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@SEG6_ATTR_ALGID={0x5, 0x6, 0x7f}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x1}, @SEG6_ATTR_SECRET={0x14, 0x4, [0x7, 0x3, 0x400, 0x2]}, @SEG6_ATTR_SECRET={0x10, 0x4, [0x2, 0x0, 0xfffffff8]}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x5}, @SEG6_ATTR_SECRET={0x10, 0x4, [0x3, 0x0, 0x70e]}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x40000000}, @SEG6_ATTR_SECRET={0x18, 0x4, [0x6, 0x8c7, 0xfffffffe, 0x0, 0x8]}, @SEG6_ATTR_DST={0x14, 0x1, @empty}, @SEG6_ATTR_SECRET={0xc, 0x4, [0x5, 0x1000]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x4004}, 0x20000000)
ioctl$PPPIOCBRIDGECHAN(r2, 0x40047435, &(0x7f0000000040)=0xc98)
write$ppp(r1, &(0x7f00000002c0)="d3", 0x1)

[ 2799.180971][ T4667]  should_fail_ex+0x21f/0x230
[ 2799.185822][ T4667]  __should_fail_alloc_page+0xfd/0x110
[ 2799.191352][ T4667]  __alloc_pages+0x108/0x340
[ 2799.195992][ T4667]  vma_alloc_folio+0x6a3/0x8c0
[ 2799.200841][ T4667]  ? shmem_inode_acct_block+0x1ee/0x220
[ 2799.206409][ T4667]  shmem_get_folio_gfp+0x579/0xc30
[ 2799.211557][ T4667]  shmem_write_begin+0xa6/0x210
[ 2799.216482][ T4667]  generic_perform_write+0x1c9/0x410
[ 2799.221878][ T4667]  ? shmem_write_begin+0x210/0x210
[ 2799.227023][ T4667]  shmem_file_write_iter+0xc8/0xe0
22:46:33 executing program 2:
syz_genetlink_get_family_id$SEG6(&(0x7f00000004c0), 0xffffffffffffffff) (async)
r0 = syz_genetlink_get_family_id$SEG6(&(0x7f00000004c0), 0xffffffffffffffff)
sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x1c, r0, 0x2, 0x70bd2c, 0x25dfdbfd, {}, [@SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8891}, 0x11) (async)
sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x1c, r0, 0x2, 0x70bd2c, 0x25dfdbfd, {}, [@SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8891}, 0x11)
sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x20, r0, 0x2, 0x70bd29, 0x25dfdbfb, {}, [@SEG6_ATTR_SECRET={0xc, 0x4, [0x8, 0x5]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x4000080)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x4100c0, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000580), 0xffffffffffffffff)
sendmsg$L2TP_CMD_SESSION_CREATE(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000540), 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x4c, r4, 0x200, 0x70bd2c, 0x25dfdbfb, {}, [@L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x5b}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}, @L2TP_ATTR_FD={0x8}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e21}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e24}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x24040881}, 0x20008000)
sendmsg$L2TP_CMD_TUNNEL_MODIFY(r2, &(0x7f00000005c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x50, r4, 0x20, 0x70bd28, 0x25dfdbfc, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x1}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x8f0}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e21}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x4}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x2}]}, 0x50}, 0x1, 0x0, 0x0, 0x48800}, 0x1) (async)
sendmsg$L2TP_CMD_TUNNEL_MODIFY(r2, &(0x7f00000005c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x50, r4, 0x20, 0x70bd28, 0x25dfdbfc, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x1}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x8f0}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e21}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x4}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x2}]}, 0x50}, 0x1, 0x0, 0x0, 0x48800}, 0x1)
r5 = syz_genetlink_get_family_id$SEG6(&(0x7f00000004c0), 0xffffffffffffffff)
sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x1c, r5, 0x2, 0x70bd2c, 0x25dfdbfd, {}, [@SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8891}, 0x11)
sendmsg$SEG6_CMD_SETHMAC(r3, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000200)={0xa0, r5, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@SEG6_ATTR_ALGID={0x5, 0x6, 0x7f}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x1}, @SEG6_ATTR_SECRET={0x14, 0x4, [0x7, 0x3, 0x400, 0x2]}, @SEG6_ATTR_SECRET={0x10, 0x4, [0x2, 0x0, 0xfffffff8]}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x5}, @SEG6_ATTR_SECRET={0x10, 0x4, [0x3, 0x0, 0x70e]}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x40000000}, @SEG6_ATTR_SECRET={0x18, 0x4, [0x6, 0x8c7, 0xfffffffe, 0x0, 0x8]}, @SEG6_ATTR_DST={0x14, 0x1, @empty}, @SEG6_ATTR_SECRET={0xc, 0x4, [0x5, 0x1000]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x4004}, 0x20000000)
ioctl$PPPIOCBRIDGECHAN(r2, 0x40047435, &(0x7f0000000040)=0xc98) (async)
ioctl$PPPIOCBRIDGECHAN(r2, 0x40047435, &(0x7f0000000040)=0xc98)
write$ppp(r1, &(0x7f00000002c0)="d3", 0x1)

22:46:33 executing program 1:
sigaltstack(&(0x7f0000001000)={&(0x7f0000000000)=""/4096, 0x0, 0x1000}, 0x0) (async)
sigaltstack(&(0x7f0000001100)={0x0, 0x80000002}, &(0x7f00000011c0)={0x0})
socketpair(0x2c, 0x4, 0x6, &(0x7f0000001040)) (async)
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
socketpair(0x10, 0x80000, 0x8000, &(0x7f0000001300)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
getsockopt$inet_mptcp_buf(r1, 0x11c, 0x4, &(0x7f0000001340)=""/110, &(0x7f00000013c0)=0x6e) (async)
write$ppp(r0, 0x0, 0xeffdffff) (async)
sigaltstack(&(0x7f0000001280)={&(0x7f0000001240)=""/38, 0x0, 0x26}, 0x0)
sendmsg$AUDIT_MAKE_EQUIV(r0, &(0x7f00000012c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="28fcdb092507000000070000002e6c653000"/29], 0x28}, 0x1, 0x0, 0x0, 0x4000841}, 0x95)
sigaltstack(&(0x7f0000001140)={&(0x7f0000001080)=""/92, 0x80000001, 0x5c}, &(0x7f0000001200)={&(0x7f0000001180)=""/8, 0x0, 0x8})

22:46:33 executing program 4:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x1d6b80, 0x0)
ioctl$IMGETVERSION(0xffffffffffffffff, 0x80044942, &(0x7f0000000000))
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100), 0x80040, 0x0) (async)
r2 = openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(r2, 0x10f, 0x86) (async)
ioctl$TUNSETQUEUE(r2, 0x400454d9, &(0x7f0000000080)={'netpci0\x00', 0x200}) (async)
setsockopt$TIPC_MCAST_REPLICAST(r1, 0x10f, 0x86) (async)
write$ppp(r0, 0x0, 0x0)

[ 2799.232185][ T4667]  vfs_write+0x4ab/0x7d0
[ 2799.236475][ T4667]  ksys_write+0xeb/0x1a0
[ 2799.240868][ T4667]  __x64_sys_write+0x42/0x50
[ 2799.245620][ T4667]  do_syscall_64+0x41/0xc0
[ 2799.250114][ T4667]  entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 2799.256092][ T4667] RIP: 0033:0x7f90e4a54ae9
[ 2799.260526][ T4667] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48
22:46:33 executing program 0:
openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0) (async)
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0)
socketpair(0x21, 0x2, 0xa, &(0x7f0000000000)) (async)
setsockopt$TIPC_MCAST_REPLICAST(r0, 0x10f, 0x86)
r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x202042, 0x0)
write$ppp(r1, 0x0, 0x0) (async)
sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)={0x44, 0x0, 0x100, 0x70bd2d, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @local}, @SEG6_ATTR_DST={0x14, 0x1, @private0={0xfc, 0x0, '\x00', 0x1}}, @SEG6_ATTR_ALGID={0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x44000)

[ 2799.280281][ T4667] RSP: 002b:00007f90e3dd70c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 2799.288776][ T4667] RAX: ffffffffffffffda RBX: 00007f90e4b73f80 RCX: 00007f90e4a54ae9
[ 2799.296854][ T4667] RDX: 00000000001f4f33 RSI: 00000000200002c0 RDI: 0000000000000003
[ 2799.304920][ T4667] RBP: 00007f90e3dd7120 R08: 0000000000000000 R09: 0000000000000000
[ 2799.312903][ T4667] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 2799.320877][ T4667] R13: 000000000000000b R14: 00007f90e4b73f80 R15: 00007ffdb3bfd028
[ 2799.328872][ T4667]  </TASK>
22:46:33 executing program 0:
openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0)
socketpair(0x21, 0x2, 0xa, &(0x7f0000000000))
setsockopt$TIPC_MCAST_REPLICAST(r0, 0x10f, 0x86)
r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x202042, 0x0)
write$ppp(r1, 0x0, 0x0)
sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)={0x44, 0x0, 0x100, 0x70bd2d, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @local}, @SEG6_ATTR_DST={0x14, 0x1, @private0={0xfc, 0x0, '\x00', 0x1}}, @SEG6_ATTR_ALGID={0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x44000)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0) (async)
openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0) (async)
socketpair(0x21, 0x2, 0xa, &(0x7f0000000000)) (async)
setsockopt$TIPC_MCAST_REPLICAST(r0, 0x10f, 0x86) (async)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x202042, 0x0) (async)
write$ppp(r1, 0x0, 0x0) (async)
sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)={0x44, 0x0, 0x100, 0x70bd2d, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @local}, @SEG6_ATTR_DST={0x14, 0x1, @private0={0xfc, 0x0, '\x00', 0x1}}, @SEG6_ATTR_ALGID={0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x44000) (async)

22:46:33 executing program 4:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x1d6b80, 0x0)
ioctl$IMGETVERSION(0xffffffffffffffff, 0x80044942, &(0x7f0000000000))
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100), 0x80040, 0x0)
r2 = openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(r2, 0x10f, 0x86)
ioctl$TUNSETQUEUE(r2, 0x400454d9, &(0x7f0000000080)={'netpci0\x00', 0x200})
setsockopt$TIPC_MCAST_REPLICAST(r1, 0x10f, 0x86)
write$ppp(r0, 0x0, 0x0)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x1d6b80, 0x0) (async)
ioctl$IMGETVERSION(0xffffffffffffffff, 0x80044942, &(0x7f0000000000)) (async)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000100), 0x80040, 0x0) (async)
openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0) (async)
setsockopt$TIPC_MCAST_REPLICAST(r2, 0x10f, 0x86) (async)
ioctl$TUNSETQUEUE(r2, 0x400454d9, &(0x7f0000000080)={'netpci0\x00', 0x200}) (async)
setsockopt$TIPC_MCAST_REPLICAST(r1, 0x10f, 0x86) (async)
write$ppp(r0, 0x0, 0x0) (async)

22:46:33 executing program 1:
sigaltstack(&(0x7f0000001000)={&(0x7f0000000000)=""/4096, 0x0, 0x1000}, 0x0) (async)
sigaltstack(&(0x7f0000001100)={0x0, 0x80000002}, &(0x7f00000011c0)={0x0}) (async)
socketpair(0x2c, 0x4, 0x6, &(0x7f0000001040)) (async)
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0) (async)
socketpair(0x10, 0x80000, 0x8000, &(0x7f0000001300)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
getsockopt$inet_mptcp_buf(r1, 0x11c, 0x4, &(0x7f0000001340)=""/110, &(0x7f00000013c0)=0x6e) (async)
write$ppp(r0, 0x0, 0xeffdffff) (async)
sigaltstack(&(0x7f0000001280)={&(0x7f0000001240)=""/38, 0x0, 0x26}, 0x0) (async)
sendmsg$AUDIT_MAKE_EQUIV(r0, &(0x7f00000012c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="28fcdb092507000000070000002e6c653000"/29], 0x28}, 0x1, 0x0, 0x0, 0x4000841}, 0x95)
sigaltstack(&(0x7f0000001140)={&(0x7f0000001080)=""/92, 0x80000001, 0x5c}, &(0x7f0000001200)={&(0x7f0000001180)=""/8, 0x0, 0x8})

22:46:33 executing program 2:
r0 = syz_genetlink_get_family_id$SEG6(&(0x7f00000004c0), 0xffffffffffffffff)
sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x1c, r0, 0x2, 0x70bd2c, 0x25dfdbfd, {}, [@SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8891}, 0x11)
sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x20, r0, 0x2, 0x70bd29, 0x25dfdbfb, {}, [@SEG6_ATTR_SECRET={0xc, 0x4, [0x8, 0x5]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x4000080)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x4100c0, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000580), 0xffffffffffffffff)
sendmsg$L2TP_CMD_SESSION_CREATE(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000540), 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x4c, r4, 0x200, 0x70bd2c, 0x25dfdbfb, {}, [@L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x5b}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}, @L2TP_ATTR_FD={0x8}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e21}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e24}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x24040881}, 0x20008000)
sendmsg$L2TP_CMD_TUNNEL_MODIFY(r2, &(0x7f00000005c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x50, r4, 0x20, 0x70bd28, 0x25dfdbfc, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x1}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x8f0}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e21}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x4}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x2}]}, 0x50}, 0x1, 0x0, 0x0, 0x48800}, 0x1)
r5 = syz_genetlink_get_family_id$SEG6(&(0x7f00000004c0), 0xffffffffffffffff)
sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x1c, r5, 0x2, 0x70bd2c, 0x25dfdbfd, {}, [@SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8891}, 0x11)
sendmsg$SEG6_CMD_SETHMAC(r3, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000200)={0xa0, r5, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@SEG6_ATTR_ALGID={0x5, 0x6, 0x7f}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x1}, @SEG6_ATTR_SECRET={0x14, 0x4, [0x7, 0x3, 0x400, 0x2]}, @SEG6_ATTR_SECRET={0x10, 0x4, [0x2, 0x0, 0xfffffff8]}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x5}, @SEG6_ATTR_SECRET={0x10, 0x4, [0x3, 0x0, 0x70e]}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x40000000}, @SEG6_ATTR_SECRET={0x18, 0x4, [0x6, 0x8c7, 0xfffffffe, 0x0, 0x8]}, @SEG6_ATTR_DST={0x14, 0x1, @empty}, @SEG6_ATTR_SECRET={0xc, 0x4, [0x5, 0x1000]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x4004}, 0x20000000)
ioctl$PPPIOCBRIDGECHAN(r2, 0x40047435, &(0x7f0000000040)=0xc98)
write$ppp(r1, &(0x7f00000002c0)="d3", 0x1)
syz_genetlink_get_family_id$SEG6(&(0x7f00000004c0), 0xffffffffffffffff) (async)
sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x1c, r0, 0x2, 0x70bd2c, 0x25dfdbfd, {}, [@SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8891}, 0x11) (async)
sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x20, r0, 0x2, 0x70bd29, 0x25dfdbfb, {}, [@SEG6_ATTR_SECRET={0xc, 0x4, [0x8, 0x5]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x4000080) (async)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0) (async)
openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x4100c0, 0x0) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000580), 0xffffffffffffffff) (async)
sendmsg$L2TP_CMD_SESSION_CREATE(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000540), 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x4c, r4, 0x200, 0x70bd2c, 0x25dfdbfb, {}, [@L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x5b}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}, @L2TP_ATTR_FD={0x8}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e21}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e24}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x24040881}, 0x20008000) (async)
sendmsg$L2TP_CMD_TUNNEL_MODIFY(r2, &(0x7f00000005c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x50, r4, 0x20, 0x70bd28, 0x25dfdbfc, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x1}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x8f0}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e21}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x4}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x2}]}, 0x50}, 0x1, 0x0, 0x0, 0x48800}, 0x1) (async)
syz_genetlink_get_family_id$SEG6(&(0x7f00000004c0), 0xffffffffffffffff) (async)
sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x1c, r5, 0x2, 0x70bd2c, 0x25dfdbfd, {}, [@SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8891}, 0x11) (async)
sendmsg$SEG6_CMD_SETHMAC(r3, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000200)={0xa0, r5, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@SEG6_ATTR_ALGID={0x5, 0x6, 0x7f}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x1}, @SEG6_ATTR_SECRET={0x14, 0x4, [0x7, 0x3, 0x400, 0x2]}, @SEG6_ATTR_SECRET={0x10, 0x4, [0x2, 0x0, 0xfffffff8]}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x5}, @SEG6_ATTR_SECRET={0x10, 0x4, [0x3, 0x0, 0x70e]}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x40000000}, @SEG6_ATTR_SECRET={0x18, 0x4, [0x6, 0x8c7, 0xfffffffe, 0x0, 0x8]}, @SEG6_ATTR_DST={0x14, 0x1, @empty}, @SEG6_ATTR_SECRET={0xc, 0x4, [0x5, 0x1000]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x4004}, 0x20000000) (async)
ioctl$PPPIOCBRIDGECHAN(r2, 0x40047435, &(0x7f0000000040)=0xc98) (async)
write$ppp(r1, &(0x7f00000002c0)="d3", 0x1) (async)

22:46:33 executing program 5:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
write$ppp(r0, &(0x7f00000002c0)="d3", 0x1f4f33) (fail_nth: 29)

22:46:33 executing program 1:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(r1, 0x10f, 0x86)
sendmsg$AUDIT_USER_TTY(r1, &(0x7f0000001100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000040)={&(0x7f0000001200)=ANY=[@ANYBLOB="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"], 0x1010}, 0x1, 0x0, 0x0, 0x40440d4}, 0x0)
r2 = openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(r2, 0x10f, 0x86)
getsockopt$inet6_mptcp_buf(r2, 0x11c, 0x1, &(0x7f00000001c0)=""/148, &(0x7f0000000280)=0x94)
r3 = openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0)
mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1000002, 0x10010, r3, 0x10000000)
setsockopt$TIPC_MCAST_REPLICAST(r3, 0x10f, 0x86)
r4 = socket$can_j1939(0x1d, 0x2, 0x7)
connect$can_j1939(r4, &(0x7f00000002c0)={0x1d, 0x0, 0x2, {0x2, 0x0, 0x6}, 0x1}, 0x18)
openat$pfkey(0xffffffffffffff9c, &(0x7f0000001180), 0x42, 0x0)
r5 = openat$bsg(0xffffffffffffff9c, &(0x7f00000011c0), 0x40, 0x0)
r6 = openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(r6, 0x10f, 0x86)
ioctl$LOOP_SET_STATUS64(r6, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x6, 0x17, 0x0, "03b6d4d4c3123b467b5a42031cb6c3680cb9bbc40a2c7e2f2ae3c36afe2b6ada400d715fa1c2706860b0549f2ae2b49b8e3f0ad67aced91a3643dbdcbef76664", "5bfbc573775dda4ec76abd60ffd7b6632e1b9477b9f373ec7f1788528012e019126cc739c82f5566f42a6ea34a7f0549570a64e743511bf25a65d55c39cf52f5", "154a8635aeed73ea9c08dd66002e83840e0edd44e493b911ea0927624b37a810", [0x8]})
write$ppp(r5, 0x0, 0xffffffffffffff86)
setsockopt$TIPC_DEST_DROPPABLE(r0, 0x10f, 0x81, &(0x7f0000001140), 0x4)

22:46:33 executing program 3:
openat$nci(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) (async)
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0)
ioctl$TUNSETFILTEREBPF(0xffffffffffffffff, 0x800454e1, &(0x7f0000000040)=r0)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(r1, 0x10f, 0x86) (async)
setsockopt$TIPC_MCAST_REPLICAST(r1, 0x10f, 0x86)
ioctl$TUNSETLINK(r1, 0x400454cd, 0x321) (async)
ioctl$TUNSETLINK(r1, 0x400454cd, 0x321)
r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000180), 0x100, 0x0)
ioctl$TUNSETDEBUG(r2, 0x400454c9, &(0x7f00000001c0)=0x8)
r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
ioctl$TUNSETQUEUE(r3, 0x400454d9, &(0x7f00000000c0)={'syzkaller1\x00'}) (async)
ioctl$TUNSETQUEUE(r3, 0x400454d9, &(0x7f00000000c0)={'syzkaller1\x00'})
write$ppp(r3, &(0x7f00000002c0)="d3", 0xfffffdef)
getsockopt$inet_tcp_buf(r3, 0x6, 0x1f, &(0x7f0000000100)=""/18, &(0x7f0000000140)=0x12)

22:46:33 executing program 1:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0) (async)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(r1, 0x10f, 0x86) (async)
sendmsg$AUDIT_USER_TTY(r1, &(0x7f0000001100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000040)={&(0x7f0000001200)=ANY=[@ANYBLOB="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"], 0x1010}, 0x1, 0x0, 0x0, 0x40440d4}, 0x0)
r2 = openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(r2, 0x10f, 0x86) (async, rerun: 64)
getsockopt$inet6_mptcp_buf(r2, 0x11c, 0x1, &(0x7f00000001c0)=""/148, &(0x7f0000000280)=0x94) (async, rerun: 64)
r3 = openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0)
mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1000002, 0x10010, r3, 0x10000000) (async)
setsockopt$TIPC_MCAST_REPLICAST(r3, 0x10f, 0x86) (async, rerun: 64)
r4 = socket$can_j1939(0x1d, 0x2, 0x7) (rerun: 64)
connect$can_j1939(r4, &(0x7f00000002c0)={0x1d, 0x0, 0x2, {0x2, 0x0, 0x6}, 0x1}, 0x18) (async)
openat$pfkey(0xffffffffffffff9c, &(0x7f0000001180), 0x42, 0x0) (async)
r5 = openat$bsg(0xffffffffffffff9c, &(0x7f00000011c0), 0x40, 0x0) (async)
r6 = openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(r6, 0x10f, 0x86) (async, rerun: 32)
ioctl$LOOP_SET_STATUS64(r6, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x6, 0x17, 0x0, "03b6d4d4c3123b467b5a42031cb6c3680cb9bbc40a2c7e2f2ae3c36afe2b6ada400d715fa1c2706860b0549f2ae2b49b8e3f0ad67aced91a3643dbdcbef76664", "5bfbc573775dda4ec76abd60ffd7b6632e1b9477b9f373ec7f1788528012e019126cc739c82f5566f42a6ea34a7f0549570a64e743511bf25a65d55c39cf52f5", "154a8635aeed73ea9c08dd66002e83840e0edd44e493b911ea0927624b37a810", [0x8]}) (async, rerun: 32)
write$ppp(r5, 0x0, 0xffffffffffffff86) (async, rerun: 32)
setsockopt$TIPC_DEST_DROPPABLE(r0, 0x10f, 0x81, &(0x7f0000001140), 0x4) (rerun: 32)

[ 2799.390266][ T4701] FAULT_INJECTION: forcing a failure.
[ 2799.390266][ T4701] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 2799.403375][ T4701] CPU: 1 PID: 4701 Comm: syz-executor.5 Not tainted 6.6.0-rc3-syzkaller-00165-g3b517966c561 #0
[ 2799.413716][ T4701] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/06/2023
[ 2799.423827][ T4701] Call Trace:
[ 2799.427205][ T4701]  <TASK>
[ 2799.430143][ T4701]  dump_stack_lvl+0xda/0x130
[ 2799.434836][ T4701]  dump_stack+0x15/0x20
22:46:33 executing program 4:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x3fec02, 0x0)
write$ppp(r0, 0x0, 0x0)
ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000000))
r1 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x4021871, 0xffffffffffffffff, 0x10000000)
syz_io_uring_setup(0x237a, &(0x7f0000000080)={0x0, 0x50dc}, &(0x7f0000000000)=<r2=>0x0, &(0x7f0000000100))
r3 = socket$inet_udp(0x2, 0x2, 0x0)
syz_io_uring_setup(0x112e, &(0x7f0000000180)={0x0, 0x9ed2, 0x8, 0x1, 0x12a, 0x0, r0}, &(0x7f0000000200)=<r4=>0x0, &(0x7f0000000240))
syz_io_uring_submit(r4, r1, &(0x7f0000000340)=@IORING_OP_SEND={0x1a, 0x18, 0x0, r3, 0x0, &(0x7f0000000280)="ffb81fd0524100f6445bb3dec0ead1fa52dcfb983c1efee38804f10b54fb5bba5a6e646e0f2824a8bcecb5b648d7267dd2c140a30e3129019e758e16bc3df2228a89a04557240ad8800b22f8a6814f57bc65f6badb087468d06553db0e65be7d1462e2b73a07d663d8ab2970061b901109cf50010cbb3bb87e47f4e1a1ce4b97efe8a021bccd66afa20e34c552aceec751d41f45567388a92c5de0c26f84", 0x9e, 0x20000004, 0x1})
syz_io_uring_submit(r2, r1, &(0x7f0000000140)=@IORING_OP_POLL_REMOVE)
syz_io_uring_submit(0x0, r1, &(0x7f0000000040)=@IORING_OP_SHUTDOWN={0x22, 0x10, 0x0, r0, 0x0, 0x0, 0x1, 0x0, 0x1})

22:46:33 executing program 4:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x3fec02, 0x0)
write$ppp(r0, 0x0, 0x0)
ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000000))
r1 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x4021871, 0xffffffffffffffff, 0x10000000)
syz_io_uring_setup(0x237a, &(0x7f0000000080)={0x0, 0x50dc}, &(0x7f0000000000)=<r2=>0x0, &(0x7f0000000100))
r3 = socket$inet_udp(0x2, 0x2, 0x0)
syz_io_uring_setup(0x112e, &(0x7f0000000180)={0x0, 0x9ed2, 0x8, 0x1, 0x12a, 0x0, r0}, &(0x7f0000000200)=<r4=>0x0, &(0x7f0000000240))
syz_io_uring_submit(r4, r1, &(0x7f0000000340)=@IORING_OP_SEND={0x1a, 0x18, 0x0, r3, 0x0, &(0x7f0000000280)="ffb81fd0524100f6445bb3dec0ead1fa52dcfb983c1efee38804f10b54fb5bba5a6e646e0f2824a8bcecb5b648d7267dd2c140a30e3129019e758e16bc3df2228a89a04557240ad8800b22f8a6814f57bc65f6badb087468d06553db0e65be7d1462e2b73a07d663d8ab2970061b901109cf50010cbb3bb87e47f4e1a1ce4b97efe8a021bccd66afa20e34c552aceec751d41f45567388a92c5de0c26f84", 0x9e, 0x20000004, 0x1})
syz_io_uring_submit(r2, r1, &(0x7f0000000140)=@IORING_OP_POLL_REMOVE)
syz_io_uring_submit(0x0, r1, &(0x7f0000000040)=@IORING_OP_SHUTDOWN={0x22, 0x10, 0x0, r0, 0x0, 0x0, 0x1, 0x0, 0x1})
openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x3fec02, 0x0) (async)
write$ppp(r0, 0x0, 0x0) (async)
ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000000)) (async)
mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x4021871, 0xffffffffffffffff, 0x10000000) (async)
syz_io_uring_setup(0x237a, &(0x7f0000000080)={0x0, 0x50dc}, &(0x7f0000000000), &(0x7f0000000100)) (async)
socket$inet_udp(0x2, 0x2, 0x0) (async)
syz_io_uring_setup(0x112e, &(0x7f0000000180)={0x0, 0x9ed2, 0x8, 0x1, 0x12a, 0x0, r0}, &(0x7f0000000200), &(0x7f0000000240)) (async)
syz_io_uring_submit(r4, r1, &(0x7f0000000340)=@IORING_OP_SEND={0x1a, 0x18, 0x0, r3, 0x0, &(0x7f0000000280)="ffb81fd0524100f6445bb3dec0ead1fa52dcfb983c1efee38804f10b54fb5bba5a6e646e0f2824a8bcecb5b648d7267dd2c140a30e3129019e758e16bc3df2228a89a04557240ad8800b22f8a6814f57bc65f6badb087468d06553db0e65be7d1462e2b73a07d663d8ab2970061b901109cf50010cbb3bb87e47f4e1a1ce4b97efe8a021bccd66afa20e34c552aceec751d41f45567388a92c5de0c26f84", 0x9e, 0x20000004, 0x1}) (async)
syz_io_uring_submit(r2, r1, &(0x7f0000000140)=@IORING_OP_POLL_REMOVE) (async)
syz_io_uring_submit(0x0, r1, &(0x7f0000000040)=@IORING_OP_SHUTDOWN={0x22, 0x10, 0x0, r0, 0x0, 0x0, 0x1, 0x0, 0x1}) (async)

22:46:33 executing program 0:
write$ppp(0xffffffffffffffff, 0x0, 0xeffdffffffffffff)

22:46:33 executing program 2:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x200140, 0x0)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/custom0\x00', 0x2, 0x0)
r2 = openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(r2, 0x10f, 0x86)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x54, 0x0, &(0x7f0000000300)=[@increfs={0x40046304, 0x1}, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x58, 0x18, &(0x7f00000001c0)={@ptr={0x70742a85, 0x0, &(0x7f00000000c0)=""/245, 0xf5, 0x2, 0x1b}, @fd={0x66642a85, 0x0, r0}, @fd={0x66642a85, 0x0, r2}}, &(0x7f0000000240)={0x0, 0x28, 0x40}}, 0x400}], 0xd5, 0x0, &(0x7f0000000380)="991ade91f23cbe52d92bd9b6229d263280f2d1285af743065ceded81def0edb619d7ee33be451cdda403bf5d9839c2b9aa77670e51ac98f9311e6eadc4fed07a4d206db30b83ec6ee9fa33c6892aabfc7b8fbcc259d27081ec42ac7773f3889099bc7f00bb20fbd1b6bc9a5684f792950c52982a1524b99182581480b6a441cd528ba0b6e1758554bf9b756234cf0d4b0acac6438079c1437ff61195bbfa870ad379c3413e7a77e89e6346a10b3ec6a2162aa10aefdcfd8663a761a3447fe113d11f58911bca5532843613a4b5d12f4c8504cf7ef8"})
ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x4c09, 0x535a)
ioctl$SIOCPNDELRESOURCE(r0, 0x89ef, &(0x7f0000000000)=0x2)
r3 = openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(r3, 0x10f, 0x86)
ioctl$LOOP_CLR_FD(r3, 0x4c01)
write$ppp(r0, &(0x7f00000002c0)="d3", 0x1)

[ 2799.439030][ T4701]  should_fail_ex+0x21f/0x230
[ 2799.443734][ T4701]  should_fail+0xb/0x10
[ 2799.447922][ T4701]  should_fail_usercopy+0x1a/0x20
[ 2799.453042][ T4701]  copy_page_from_iter_atomic+0x21c/0xcf0
[ 2799.458791][ T4701]  ? shmem_write_begin+0xa6/0x210
[ 2799.463857][ T4701]  ? shmem_write_begin+0x16d/0x210
[ 2799.468990][ T4701]  generic_perform_write+0x20c/0x410
[ 2799.474319][ T4701]  ? shmem_write_begin+0x210/0x210
[ 2799.479544][ T4701]  shmem_file_write_iter+0xc8/0xe0
[ 2799.484740][ T4701]  vfs_write+0x4ab/0x7d0
22:46:33 executing program 2:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x200140, 0x0)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/custom0\x00', 0x2, 0x0) (async)
r2 = openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(r2, 0x10f, 0x86)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x54, 0x0, &(0x7f0000000300)=[@increfs={0x40046304, 0x1}, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x58, 0x18, &(0x7f00000001c0)={@ptr={0x70742a85, 0x0, &(0x7f00000000c0)=""/245, 0xf5, 0x2, 0x1b}, @fd={0x66642a85, 0x0, r0}, @fd={0x66642a85, 0x0, r2}}, &(0x7f0000000240)={0x0, 0x28, 0x40}}, 0x400}], 0xd5, 0x0, &(0x7f0000000380)="991ade91f23cbe52d92bd9b6229d263280f2d1285af743065ceded81def0edb619d7ee33be451cdda403bf5d9839c2b9aa77670e51ac98f9311e6eadc4fed07a4d206db30b83ec6ee9fa33c6892aabfc7b8fbcc259d27081ec42ac7773f3889099bc7f00bb20fbd1b6bc9a5684f792950c52982a1524b99182581480b6a441cd528ba0b6e1758554bf9b756234cf0d4b0acac6438079c1437ff61195bbfa870ad379c3413e7a77e89e6346a10b3ec6a2162aa10aefdcfd8663a761a3447fe113d11f58911bca5532843613a4b5d12f4c8504cf7ef8"}) (async)
ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x4c09, 0x535a) (async)
ioctl$SIOCPNDELRESOURCE(r0, 0x89ef, &(0x7f0000000000)=0x2) (async)
r3 = openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(r3, 0x10f, 0x86) (async)
ioctl$LOOP_CLR_FD(r3, 0x4c01) (async)
write$ppp(r0, &(0x7f00000002c0)="d3", 0x1)

22:46:33 executing program 1:
openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0) (async)
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(r1, 0x10f, 0x86) (async)
setsockopt$TIPC_MCAST_REPLICAST(r1, 0x10f, 0x86)
sendmsg$AUDIT_USER_TTY(r1, &(0x7f0000001100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000040)={&(0x7f0000001200)=ANY=[@ANYBLOB="101000006404100028bd7000ffdbdf2508ff188fa6dbd3f1eafc6fb57022be49638143f6e3126519ed8245b784847f372d1b622821ede9cbee14f65345f3d3c02078184c164c6ac5b89178e62ad822a879fef30e583f62c3417b7fc60312afc5d70d86086962be78c0519b572da6002e2e651e12ce77d6f2414d1fc15b2cc5920e3cff61d85684f12e7a796c57eaa348082bf7e38a24b9aaca55763510b4fd9a27908e39273a3f1f5b3c87f1e0c79e9b457554330833b5a5f2f0400b90e744196a6d4a2f84c82e3e6e0c6a28bfc5dd31aeadcb0287a2342060b6dec61e9c11198ccdb714d23ade6e62e1c035801b702cd3aecbb893fefb2e89a6db61bff92f1aee4edf85a0d9132c11372f29aa8bcab7501f9c04eca3a9cdd4a4c0a79459ee01a1ff6178976b254b15a4effa0185d55b7115bb6785b8a40b6eb138d189cfd318dfb42cee184b85dc6e9aff4f44b179dcb3e136aa803157f8e7b402dd8f68ebb9a47b082f3c4795b14f0421917f8b1cff0bd3cafea63d3adf5bcfa9a612743f7df73e22dafb6e38278a429c3d9b8de990006a673c990ce4bb5fccfd5d6ebbd76c3804d953678dfea9c59349ebf22de52c01731eeb38002d7e56b094a13ce51737aa4c5221992771da6ddd92b5e6acef32af0fdc27b05269960e00b871c4a87c3881b3eed072d51ad0d168d2f59443b8e390746440d875203a4ed2e775b8db0e8c3bab0a0b71e33c125c8d522cc88b07cc5255352e2057143f7fe0cbefe95d355f9fc9cb9d5e3c2ca64188f84abb7fa32359d0ae5bd66a09605450fb89d05c6c162e861022e9a13f28b768c495f2fefb4ec302b50dfa4dcb038dd0fc5077541a0d930e73e89a47ecba6019087c67af56f4b9bc0baf0b0f387faebeba92b33dd57f804ecaae110c572761a0872d2a91ab6d98596744c8e539263c8195e1306e4d0a0818b77d8903d29c4dd7b327369164516a2c133193ca503f24445a4dfda2f3bc39877c884df779eed0f208c1473d13469dc85e20986f1ab3278c9eede1ac3ffd6fae71b57d35439810886d0f5b68f08463789778f52c7fe426489ee2a992dedf731fad8b7b18957b77d5c4c73c5677530190df123f26882f039c98e2140ca4723a9c85b9f64f95824cea088bb4c68ee40c6acb5340935d8c5c1f4e16e6cc992ff011e48195b5d96c4114857ba540883fc5f93ea321e5d0c8ce93c9838f2218ea9da38756e60d79dc3bbcfaa6dc410b702d3013608c4414c05f20c09cd656b0f7f31a35a21a305b4d239db9bb17889946953bb65067b518c5d89a7210fcfeaa8a21c547808f4dc1a8c13bd1da93a94a01eb3fc337afe0fbb95150b54290224b08cd735b4f78287c9f4445d6d9d81aa1fe90038623c587d6d4bd79981a3587ba0b85bfa25a8ed197a5f5c4c9397bcb3c4068d7eb0ac162f1a2640de5dccb33d429883cccff05f3d54578703390108fbedf53920be68ca997eb2c0b7601ad548e21a053b1783ab101f60c95527f8f033f548117c4350b60e5a483055bcd3331fe1098fa3b3e295a642ef52e14e35a9fb029a45551bdf6b6ef273f288a3e57b3ccc3ead005af875ef82c5521bf910e97ee6a3fd2d2a8adfb4df8bd07ace40411a1ab3af8ce719db8ea5549576b7c1c79790ac8a2750b0d2490b09e1f268917839fc7cca55e9ff1a6decf2d9c30640ef84d6e8dd7d242cd5a514f79bd8c482eb2b6de0f5f285d7e9b9b5cd25acd1cf2e71604c4d822665fb1a82a5dfed88916ae9a214d5bb2972f1dae387545a6c3ace1f45364ec036b3fc8f8d3278aa5faa8c9d545581f54740d93ff3e7a17351b6d2f853f559c6e60ca5633fa8ad2bd3133034bf866d01a58de059767dd34cdbe3ec19a2beaff744ae854642982aa83342bcf01af03f2cc426b4ff8f62cf015b63523b562892f73306aa83f8a769311be76387f234952e0cdd68c3266fd03f0c694ce07ce53cae345d6108dfbc8ee04d49eb3092906c48cc9f8437d9ae3c59261aa92f5ad16054c0e05fa454775986e5248b5a9691bad230bc1e690d2c4249acccaa0c365c00b498085c26fac62f71fbf8627e2ea12152eb95047378d0b746469893a23e40f22bfb5a2935cfa7c93f6a373a2df0a1ffa7b3d97baffccc716baef12aff42f5d03ab194d47e287d2e756a3c1566b1518ab6d92b80171b90ff86538a4f3cac1851c570454084d518f2f5ac53db83852b2b0ebe78846f5774060ac964bd401dcfcedf3e0e0b5da55e1764e0346f9cc20eb8c59031b7ffa5aed4ce4feff680f6a86eefc8ea45cf25d0312cce0ea094d3e9e552f792440edb8fbaa24214e3417d2b654396d766d775e7173059e1b23efa72205421df6d8069a911b6d93d8de088b40cbfa9829dee8009f3e92c592a9a38da85144756969283a758a7cc8f1f8df4ebe6d6b1ac2b00dcffa4f62f27f9764ae35c6bbd0de7deec4ce22882e57759122bde4bddbb49d3ff494b859687b2be55edcdd945c6e8de9a552e810131decada7ac95058862276a9debeea0d273b277c1d5bba29dc02b171024024c649b0fc5f8edebed3aed0a50eb779c4094eb5ad1d920ae7ad69fef6420ab5c4c4cac54bdfd2ad5174b983171537618eac244e6f64e37a68423fd8fed4f9a8739fae43a4c300ceef798cc135321e593478dc7d5ae6889db620922a49a6d75392d3a106f49a2da0db5facf573a788bb8db5725992c7ea3d0ad17730dd555923f32435fb64fd9a6974f2a725b018944144f9963d98d0b7e0c0d65e822d414f1b4f5c8e9480c2cbd1c82ae1ea9f49fce8749f200701c29a09f3a41a6f4170ad3eb15f7c08765b778190b92e06c79b7b3d2f726e2619e98e74aadb61f313822ba261a03fb70d8fb6328ec9956b3d45e3ec03b58c9c756c855cfa1c66ef2fa2fc286ba6a72361838cd1e3b285f2fd87a0743c2d38b7efad80d1ba43e8125975b5fdb05cace0f3ee1fce0631c69fceae1b3a2ffbfef8b5eddf7a613ae0697fe386a3107fd7239155351e3c8d26adf17c037f02bfb51505065dc7980b0993dcd62194acceb8092973484e1dfb7126ff52a9dd0fe6bf349c1fc53c5f43e40c5ce7ad8374e272c2676286b96b08ecc4d62b6cce042783c2bd63a66009a6baa6cb6efd629124f02724313fa7a9ab2c2db80d826be95dfd13686ab82ed95a6ef0c62ef49f2a897271843d37ed90db0af1e52897ed889311ab02e88bdbb36026be7060ad22066cf04eaecdf63e1e3d7940732d7614decadad9efe814da89e55027fee49e8ba892d51a9151536c0e963777cc2f47e24783a01d6e54efe89ef1aa64ef4a69d8f721a481da0b7bccbf759dbc11a2b14b84480f5b36d1bbe903dd1a953a23ccac4b51dac9c330a72fc2e75d67135e9270b037aafe9fbea0ff48088fd82ef3bc28355c70a17493d50cab46ebae92944ff5adeb846526cb7e2fab77fa7778fa086ea1dabbfb046ecd16b118c70b2194593c2fa930d2275add7efb9ae1eba9dfd3e05db26b3895ce3285e98677efd8e9b831db6da25b0dacdee5d84bc565c48f61154f9a64e1bd860b838e765fd2a84eda7254acd315496e7a32cf180be8574e5c8b11ce8e7698ad51f0ce5a85e6c704b1e22bac9a892f66aec7047ccfa681c248c5615d5f5b9cbbc9dcf57bcfff71ebcd032ad8a9e6ed3b5b5700290578f8795e0941b39c1678e5d670a1ccf861f05a77894b6547be7b587026a82178b14e4d4522ebc3ff1ceafd144ab2a93857db1e0fc051c7fe4026589da13c39d68d0a1f770e17575b1c721c9084b1de0b7d5fcf67e8556e14504ef5759f4083693514589200424adc884336898461b217b9159434286aa0c371d8d3d93e51917246eea84769abf6ccd2276c7909fc2248d357ad4ed69012c7603ee385da90f32a44c60a7e64f08376dbce45faece14972c4b87e6c710bfecef10172c26ac77282acca55c24f64c76f4a77d017e54bbbdcd213b40c50a2a5914bda3f0d5ba778f15155c46743172bc3ceca5f0e5872309a77b4143e32235e70b7b644eaa337546c861e668af79c9d4a2e141518fc221b2aeaa18066d69c536e9f0f04b189d0d87b68c2ad8c8df63ba3f67c71869e642161ebdec45223edb6adef04ffc7ae2012d1373c79a9a86326e28f9179c49c4773b192ac51f1ce91c774c97152052f865c32eac7c9986f19f9ffee5bcac22504de4f7ad7d5a4264851a6136a0f2f9d518c4741dce2307f8a456a96b28003ac15af0885958128f79156f56c80d85bc1127bfa67d703c5743300b43bf413e021117ca1cce915f02c5084e8ad974c75d664dbb0fbbec0dd0e4bc7e9c35fde9973738e7da4411381e1f8a59996a5554f13702d9776a1e7946a131dde270a0cc4f6e21f68da3b0df632b0c976c16ba944d6a437966f0715297dc1df1c88402e4dc1d86929872704c4e8e8df947fa2938c9e57e8042e037228fe1b78952ada073c50f58fe466cf427d748fb82a80c4c35d2b389b0b23d7f3be2789c3713d124aaadedccd19f0024323098cc4710d0ddfcafcc0d4c54cfcaa1bfa5b43822dddfdbf57c2a6ec8ece23453f52d3c461a87b36cbf17a467d8f8db82cf89fea376e81007e59d24699d4225fdcb29247888580ff40213fd5ec2c12951c9f305efc737789116d1d9f2df95a374efc1ae24761033169a330b47ab1b6257b1632672d0d3bd410c0e7987c84d68fe2f947af1f49c2a7290ceb04f5c56c5c887d3de8c577c0f32e5f4b35c900ef23f0ce347cda7e0d0a9fd755fa1c642ed4b972f6c63795351766962610170c5edd6396357c8b8951a1002c9febbc33f16a87384d9703ca2a63a4739393e0f01736255ece2e2666a43649bcad08e5b81506d4c7a6d3fe4f8f225b73aacba5ab8c07ec69bd11f1e4c89f85821411767610b9adf12951cb2b21f4d3f8e2efe0279e3a82d0f7a6e0ccdcf260e1a38f57e790c0c1bd491f785814eccd5a559bb8696e421a50d64698267380d82c89f517c110ac098515b93a08270ac3ec68b3978ed86496db2107c3b5e4c98e40e379c208b123cfae0604e225bccdf39eb81ef3f5999bc9915e940d30674b03be1263dfbe51b8c062738d09b5fc42aac5229a1d8b6aed85701e84de21f8995eef71b73030d7f2f974f14531167210fac0f8d29bd94d34c4d5d37baed53c818d3cfaf1d112bb2fba71d1fd665ed9203a73a02e59608504ec7920e3309a6f7fb2b7f3c12b67a1feda9f61dbfc5d70b10b409ebc61bff3230d1788705abfbb38772227e26204a2a1315a26456220228a67feabab488b3b09928d8599045eb7b04cbbfd10e352509c560b762270e8093df7f0c60a4eaa65155089e7d9d44bb5402558657973ac1795dbddc21358e2c1426d953679f76ae41a28ce0612c709d313db98a1a5a041aad2cfea5d5ed5c1654c9c353d6237f55df076a37267bd5d6c88bf6de535ae71bdc684598b95f29e40e594e5f4ac48021e3e6b52aa0c029ab54c73eaab0eb62020777cc5df0b0845bb19f66c8e9fb08a6826ef045738a63447ebc43b757394420eb85b074cf088dab94d4264c56786b792ae18f210e13728f6022d158895f3b5cd0d821a61f65af19d8dcefdfdbcc21a8ba2cd0f0c4c5a09681098513aab209094aca603ddb0159fd711ce9d423eeec0e2163766d6b1ceb3c132b707da67df39e5c241d02499532eb26c23e04fde010a9885fb1429ac99252e42eaa4f9bbc263a139dd075dd629637e00b3c0241b14ffb3f3ff88ffc408218246d471b6acf01814920b422fc14df90ea70cce8881dd4e7c2da3c7913e1bb2c3d62e4fc48559d8b62fadcfb2facfd24a29e31801b873b0f87c6bad8646add1a6955839bd42cfc05377ee26f3cd9b6bf883041b231fbf0fe467aaf9bfb6d105d8d4499c3803f9ae507ee90fbff5ae5bfe41c6984151a2850ecb4fc28219522cdabd2b1bce5114ce63c10268f5c560cf0e876abf8ddcbd72a"], 0x1010}, 0x1, 0x0, 0x0, 0x40440d4}, 0x0)
openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0) (async)
r2 = openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(r2, 0x10f, 0x86)
getsockopt$inet6_mptcp_buf(r2, 0x11c, 0x1, &(0x7f00000001c0)=""/148, &(0x7f0000000280)=0x94)
r3 = openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0)
mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1000002, 0x10010, r3, 0x10000000) (async)
mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1000002, 0x10010, r3, 0x10000000)
setsockopt$TIPC_MCAST_REPLICAST(r3, 0x10f, 0x86)
r4 = socket$can_j1939(0x1d, 0x2, 0x7)
connect$can_j1939(r4, &(0x7f00000002c0)={0x1d, 0x0, 0x2, {0x2, 0x0, 0x6}, 0x1}, 0x18) (async)
connect$can_j1939(r4, &(0x7f00000002c0)={0x1d, 0x0, 0x2, {0x2, 0x0, 0x6}, 0x1}, 0x18)
openat$pfkey(0xffffffffffffff9c, &(0x7f0000001180), 0x42, 0x0)
r5 = openat$bsg(0xffffffffffffff9c, &(0x7f00000011c0), 0x40, 0x0)
openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0) (async)
r6 = openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(r6, 0x10f, 0x86)
ioctl$LOOP_SET_STATUS64(r6, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x6, 0x17, 0x0, "03b6d4d4c3123b467b5a42031cb6c3680cb9bbc40a2c7e2f2ae3c36afe2b6ada400d715fa1c2706860b0549f2ae2b49b8e3f0ad67aced91a3643dbdcbef76664", "5bfbc573775dda4ec76abd60ffd7b6632e1b9477b9f373ec7f1788528012e019126cc739c82f5566f42a6ea34a7f0549570a64e743511bf25a65d55c39cf52f5", "154a8635aeed73ea9c08dd66002e83840e0edd44e493b911ea0927624b37a810", [0x8]})
write$ppp(r5, 0x0, 0xffffffffffffff86)
setsockopt$TIPC_DEST_DROPPABLE(r0, 0x10f, 0x81, &(0x7f0000001140), 0x4)

22:46:33 executing program 3:
openat$nci(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) (async)
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0)
ioctl$TUNSETFILTEREBPF(0xffffffffffffffff, 0x800454e1, &(0x7f0000000040)=r0) (async)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(r1, 0x10f, 0x86) (async)
ioctl$TUNSETLINK(r1, 0x400454cd, 0x321) (async)
r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000180), 0x100, 0x0)
ioctl$TUNSETDEBUG(r2, 0x400454c9, &(0x7f00000001c0)=0x8) (async)
r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
ioctl$TUNSETQUEUE(r3, 0x400454d9, &(0x7f00000000c0)={'syzkaller1\x00'}) (async)
write$ppp(r3, &(0x7f00000002c0)="d3", 0xfffffdef) (async)
getsockopt$inet_tcp_buf(r3, 0x6, 0x1f, &(0x7f0000000100)=""/18, &(0x7f0000000140)=0x12)

[ 2799.489011][ T4701]  ksys_write+0xeb/0x1a0
[ 2799.493263][ T4701]  __x64_sys_write+0x42/0x50
[ 2799.497865][ T4701]  do_syscall_64+0x41/0xc0
[ 2799.502421][ T4701]  entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 2799.508397][ T4701] RIP: 0033:0x7f90e4a54ae9
[ 2799.512838][ T4701] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48
[ 2799.532459][ T4701] RSP: 002b:00007f90e3dd70c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
22:46:33 executing program 0:
write$ppp(0xffffffffffffffff, 0x0, 0xeffdffffffffffff)
write$ppp(0xffffffffffffffff, 0x0, 0xeffdffffffffffff) (async)

[ 2799.540922][ T4701] RAX: ffffffffffffffda RBX: 00007f90e4b73f80 RCX: 00007f90e4a54ae9
[ 2799.548918][ T4701] RDX: 00000000001f4f33 RSI: 00000000200002c0 RDI: 0000000000000003
[ 2799.556921][ T4701] RBP: 00007f90e3dd7120 R08: 0000000000000000 R09: 0000000000000000
[ 2799.564916][ T4701] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 2799.572898][ T4701] R13: 000000000000000b R14: 00007f90e4b73f80 R15: 00007ffdb3bfd028
[ 2799.580925][ T4701]  </TASK>
22:46:33 executing program 4:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x3fec02, 0x0)
write$ppp(r0, 0x0, 0x0) (async)
ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000000)) (async)
r1 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x4021871, 0xffffffffffffffff, 0x10000000) (async)
syz_io_uring_setup(0x237a, &(0x7f0000000080)={0x0, 0x50dc}, &(0x7f0000000000)=<r2=>0x0, &(0x7f0000000100))
r3 = socket$inet_udp(0x2, 0x2, 0x0) (async)
syz_io_uring_setup(0x112e, &(0x7f0000000180)={0x0, 0x9ed2, 0x8, 0x1, 0x12a, 0x0, r0}, &(0x7f0000000200)=<r4=>0x0, &(0x7f0000000240))
syz_io_uring_submit(r4, r1, &(0x7f0000000340)=@IORING_OP_SEND={0x1a, 0x18, 0x0, r3, 0x0, &(0x7f0000000280)="ffb81fd0524100f6445bb3dec0ead1fa52dcfb983c1efee38804f10b54fb5bba5a6e646e0f2824a8bcecb5b648d7267dd2c140a30e3129019e758e16bc3df2228a89a04557240ad8800b22f8a6814f57bc65f6badb087468d06553db0e65be7d1462e2b73a07d663d8ab2970061b901109cf50010cbb3bb87e47f4e1a1ce4b97efe8a021bccd66afa20e34c552aceec751d41f45567388a92c5de0c26f84", 0x9e, 0x20000004, 0x1}) (async, rerun: 32)
syz_io_uring_submit(r2, r1, &(0x7f0000000140)=@IORING_OP_POLL_REMOVE) (rerun: 32)
syz_io_uring_submit(0x0, r1, &(0x7f0000000040)=@IORING_OP_SHUTDOWN={0x22, 0x10, 0x0, r0, 0x0, 0x0, 0x1, 0x0, 0x1})

22:46:33 executing program 0:
write$ppp(0xffffffffffffffff, 0x0, 0xeffdffffffffffff)
write$ppp(0xffffffffffffffff, 0x0, 0xeffdffffffffffff) (async)

22:46:33 executing program 1:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x480000, 0x0)
write$ppp(r0, 0x0, 0xeffdffff)

22:46:33 executing program 2:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x200140, 0x0)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/custom0\x00', 0x2, 0x0)
r2 = openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(r2, 0x10f, 0x86)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x54, 0x0, &(0x7f0000000300)=[@increfs={0x40046304, 0x1}, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x58, 0x18, &(0x7f00000001c0)={@ptr={0x70742a85, 0x0, &(0x7f00000000c0)=""/245, 0xf5, 0x2, 0x1b}, @fd={0x66642a85, 0x0, r0}, @fd={0x66642a85, 0x0, r2}}, &(0x7f0000000240)={0x0, 0x28, 0x40}}, 0x400}], 0xd5, 0x0, &(0x7f0000000380)="991ade91f23cbe52d92bd9b6229d263280f2d1285af743065ceded81def0edb619d7ee33be451cdda403bf5d9839c2b9aa77670e51ac98f9311e6eadc4fed07a4d206db30b83ec6ee9fa33c6892aabfc7b8fbcc259d27081ec42ac7773f3889099bc7f00bb20fbd1b6bc9a5684f792950c52982a1524b99182581480b6a441cd528ba0b6e1758554bf9b756234cf0d4b0acac6438079c1437ff61195bbfa870ad379c3413e7a77e89e6346a10b3ec6a2162aa10aefdcfd8663a761a3447fe113d11f58911bca5532843613a4b5d12f4c8504cf7ef8"})
ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x4c09, 0x535a) (async)
ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x4c09, 0x535a)
ioctl$SIOCPNDELRESOURCE(r0, 0x89ef, &(0x7f0000000000)=0x2)
r3 = openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(r3, 0x10f, 0x86)
ioctl$LOOP_CLR_FD(r3, 0x4c01) (async)
ioctl$LOOP_CLR_FD(r3, 0x4c01)
write$ppp(r0, &(0x7f00000002c0)="d3", 0x1) (async)
write$ppp(r0, &(0x7f00000002c0)="d3", 0x1)

22:46:33 executing program 3:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
write$ppp(r0, &(0x7f00000002c0)="d3", 0xfffffdef)
setsockopt$TIPC_DEST_DROPPABLE(0xffffffffffffffff, 0x10f, 0x81, &(0x7f0000000000)=0x9fec, 0x4)

22:46:33 executing program 5:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
write$ppp(r0, &(0x7f00000002c0)="d3", 0x1f4f33) (fail_nth: 30)

22:46:33 executing program 0:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
write$ppp(r0, 0x0, 0xeffdffffffffffff)
setsockopt$TIPC_MCAST_REPLICAST(0xffffffffffffffff, 0x10f, 0x86)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', <r1=>0x0})
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vcan0\x00', <r2=>0x0})
ioctl$PPPIOCATTACH(0xffffffffffffffff, 0x4004743d, &(0x7f0000000300))
r3 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000180)={'vcan0\x00', <r4=>0x0})
bind$can_j1939(r3, &(0x7f00000001c0)={0x1d, r4, 0x0, {0x1}}, 0x18)
sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000280)={&(0x7f0000000100)={0x180, 0x0, 0x400, 0x70bd2d, 0x25dfdbfb, {}, [{{0x8, 0x1, r1}, {0x164, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r2}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r4}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3b0}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}]}, 0x180}, 0x1, 0x0, 0x0, 0x8000}, 0xc0)

22:46:33 executing program 1:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x480000, 0x0)
write$ppp(r0, 0x0, 0xeffdffff)

22:46:33 executing program 2:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x109802, 0x0)
write$P9_RRENAME(r1, &(0x7f0000000040)={0x7, 0x15, 0x1}, 0x7)
write$ppp(r0, &(0x7f00000002c0)="d3", 0x1)

22:46:33 executing program 0:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
write$ppp(r0, 0x0, 0xeffdffffffffffff)
setsockopt$TIPC_MCAST_REPLICAST(0xffffffffffffffff, 0x10f, 0x86)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', <r1=>0x0})
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vcan0\x00', <r2=>0x0}) (async)
ioctl$PPPIOCATTACH(0xffffffffffffffff, 0x4004743d, &(0x7f0000000300)) (async)
r3 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000180)={'vcan0\x00', <r4=>0x0})
bind$can_j1939(r3, &(0x7f00000001c0)={0x1d, r4, 0x0, {0x1}}, 0x18) (async)
sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000280)={&(0x7f0000000100)={0x180, 0x0, 0x400, 0x70bd2d, 0x25dfdbfb, {}, [{{0x8, 0x1, r1}, {0x164, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r2}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r4}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3b0}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}]}, 0x180}, 0x1, 0x0, 0x0, 0x8000}, 0xc0)

22:46:33 executing program 1:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x480000, 0x0)
write$ppp(r0, 0x0, 0xeffdffff)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x480000, 0x0) (async)
write$ppp(r0, 0x0, 0xeffdffff) (async)

22:46:33 executing program 2:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0) (async)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x109802, 0x0)
write$P9_RRENAME(r1, &(0x7f0000000040)={0x7, 0x15, 0x1}, 0x7)
write$ppp(r0, &(0x7f00000002c0)="d3", 0x1)

[ 2799.605463][ T4741] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR
[ 2799.714451][ T4772] FAULT_INJECTION: forcing a failure.
[ 2799.714451][ T4772] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[ 2799.736866][ T4772] CPU: 0 PID: 4772 Comm: syz-executor.5 Not tainted 6.6.0-rc3-syzkaller-00165-g3b517966c561 #0
[ 2799.747233][ T4772] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/06/2023
[ 2799.757301][ T4772] Call Trace:
[ 2799.760658][ T4772]  <TASK>
[ 2799.763604][ T4772]  dump_stack_lvl+0xda/0x130
[ 2799.768217][ T4772]  dump_stack+0x15/0x20
[ 2799.772381][ T4772]  should_fail_ex+0x21f/0x230
[ 2799.777073][ T4772]  __should_fail_alloc_page+0xfd/0x110
[ 2799.782556][ T4772]  __alloc_pages+0x108/0x340
[ 2799.787192][ T4772]  vma_alloc_folio+0x6a3/0x8c0
[ 2799.792012][ T4772]  ? shmem_inode_acct_block+0x1ee/0x220
[ 2799.797629][ T4772]  shmem_get_folio_gfp+0x579/0xc30
[ 2799.802779][ T4772]  shmem_write_begin+0xa6/0x210
[ 2799.807671][ T4772]  generic_perform_write+0x1c9/0x410
[ 2799.813050][ T4772]  ? shmem_write_begin+0x210/0x210
[ 2799.818187][ T4772]  shmem_file_write_iter+0xc8/0xe0
[ 2799.823402][ T4772]  vfs_write+0x4ab/0x7d0
[ 2799.827709][ T4772]  ksys_write+0xeb/0x1a0
[ 2799.831969][ T4772]  __x64_sys_write+0x42/0x50
[ 2799.836579][ T4772]  do_syscall_64+0x41/0xc0
[ 2799.841090][ T4772]  entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 2799.847009][ T4772] RIP: 0033:0x7f90e4a54ae9
[ 2799.851430][ T4772] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48
[ 2799.871058][ T4772] RSP: 002b:00007f90e3dd70c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 2799.879533][ T4772] RAX: ffffffffffffffda RBX: 00007f90e4b73f80 RCX: 00007f90e4a54ae9
[ 2799.887497][ T4772] RDX: 00000000001f4f33 RSI: 00000000200002c0 RDI: 0000000000000003
[ 2799.895463][ T4772] RBP: 00007f90e3dd7120 R08: 0000000000000000 R09: 0000000000000000
[ 2799.903434][ T4772] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
22:46:33 executing program 5:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
write$ppp(r0, &(0x7f00000002c0)="d3", 0x1f4f33) (fail_nth: 31)

22:46:33 executing program 4:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x92ac2, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x200, 0x0)
ioctl$TUNSETLINK(r2, 0x400454cd, 0x3d)
write$ppp(r1, 0x0, 0x0)
r3 = openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(r3, 0x10f, 0x86)
r4 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000180), 0x190a6c919e5fddf8, 0x0)
ioctl$LOOP_SET_FD(r4, 0x4c00, r0)
r5 = openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(r5, 0x10f, 0x86)
getsockopt$TIPC_IMPORTANCE(r5, 0x10f, 0x7f, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
ioctl$PPPIOCATTACH(r3, 0x4004743d, &(0x7f0000000000)=0x4)

22:46:33 executing program 3:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
write$ppp(r0, &(0x7f00000002c0)="d3", 0xfffffdef)
setsockopt$TIPC_DEST_DROPPABLE(0xffffffffffffffff, 0x10f, 0x81, &(0x7f0000000000)=0x9fec, 0x4) (async)
setsockopt$TIPC_DEST_DROPPABLE(0xffffffffffffffff, 0x10f, 0x81, &(0x7f0000000000)=0x9fec, 0x4)

22:46:33 executing program 1:
openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x107180, 0x0)
write$ppp(r0, 0x0, 0xeffe001c)

22:46:33 executing program 2:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0) (async)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x109802, 0x0)
write$P9_RRENAME(r1, &(0x7f0000000040)={0x7, 0x15, 0x1}, 0x7) (async)
write$ppp(r0, &(0x7f00000002c0)="d3", 0x1)

22:46:33 executing program 0:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
write$ppp(r0, 0x0, 0xeffdffffffffffff)
setsockopt$TIPC_MCAST_REPLICAST(0xffffffffffffffff, 0x10f, 0x86)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', <r1=>0x0})
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vcan0\x00', <r2=>0x0})
ioctl$PPPIOCATTACH(0xffffffffffffffff, 0x4004743d, &(0x7f0000000300))
r3 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000180)={'vcan0\x00', <r4=>0x0})
bind$can_j1939(r3, &(0x7f00000001c0)={0x1d, r4, 0x0, {0x1}}, 0x18)
sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000280)={&(0x7f0000000100)={0x180, 0x0, 0x400, 0x70bd2d, 0x25dfdbfb, {}, [{{0x8, 0x1, r1}, {0x164, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r2}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r4}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3b0}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}]}, 0x180}, 0x1, 0x0, 0x0, 0x8000}, 0xc0)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0) (async)
write$ppp(r0, 0x0, 0xeffdffffffffffff) (async)
setsockopt$TIPC_MCAST_REPLICAST(0xffffffffffffffff, 0x10f, 0x86) (async)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)) (async)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vcan0\x00'}) (async)
ioctl$PPPIOCATTACH(0xffffffffffffffff, 0x4004743d, &(0x7f0000000300)) (async)
socket$can_j1939(0x1d, 0x2, 0x7) (async)
ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000180)={'vcan0\x00'}) (async)
bind$can_j1939(r3, &(0x7f00000001c0)={0x1d, r4, 0x0, {0x1}}, 0x18) (async)
sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000280)={&(0x7f0000000100)={0x180, 0x0, 0x400, 0x70bd2d, 0x25dfdbfb, {}, [{{0x8, 0x1, r1}, {0x164, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r2}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r4}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3b0}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}]}, 0x180}, 0x1, 0x0, 0x0, 0x8000}, 0xc0) (async)

22:46:34 executing program 2:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
r1 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000180)={'vcan0\x00', <r2=>0x0})
bind$can_j1939(r1, &(0x7f00000001c0)={0x1d, r2, 0x0, {0x1}}, 0x18)
sendmsg$SEG6_CMD_SET_TUNSRC(r0, &(0x7f0000000340)={&(0x7f0000000200), 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x58, 0x0, 0x8, 0x70bd2d, 0x25dfdbff, {}, [@SEG6_ATTR_DST={0x14, 0x1, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x9}, @SEG6_ATTR_DST={0x14, 0x1, @private2}, @SEG6_ATTR_DST={0x14, 0x1, @empty}]}, 0x58}, 0x1, 0x0, 0x0, 0x4008040}, 0x0)
sendmsg$can_j1939(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x1d, r2, 0x3, {0x2, 0x1, 0x2}, 0xff}, 0x18, &(0x7f0000000040)={&(0x7f00000000c0)="329b2aa01b091f833985f3599f20e6258d9963b0103f368e74e54cf344e4f4b131dda367c515a6f218f3171f7a582ccd30c16ec0f3149de75130b0f074ab491e8d2165151165188a4d22596c432ec5e46891481eea1efadc7ef555e751fe26b3f7ef0f47e1d0f80cfa08217a051fd297de5f2f5c375fa79caf03a10f067a95df562aadaf619eff51c32705e374007498161614905eadac2d6fa9bdee8ed0f9010798d2422075552c0580a554241cd2db664c9ffe0cbdc893c81748d207234db2d10057510d2cf8ed7df2019dfe8f2dff32fa5752327abee3e7", 0xd9}, 0x1, 0x0, 0x0, 0x400c044}, 0x41bdda1f3c91a4db)
write$ppp(r0, &(0x7f00000002c0)="d3", 0x1)

[ 2799.911430][ T4772] R13: 000000000000000b R14: 00007f90e4b73f80 R15: 00007ffdb3bfd028
[ 2799.919403][ T4772]  </TASK>
22:46:34 executing program 4:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x92ac2, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x200, 0x0)
ioctl$TUNSETLINK(r2, 0x400454cd, 0x3d) (async)
ioctl$TUNSETLINK(r2, 0x400454cd, 0x3d)
write$ppp(r1, 0x0, 0x0) (async)
write$ppp(r1, 0x0, 0x0)
openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0) (async)
r3 = openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(r3, 0x10f, 0x86)
r4 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000180), 0x190a6c919e5fddf8, 0x0)
ioctl$LOOP_SET_FD(r4, 0x4c00, r0)
r5 = openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(r5, 0x10f, 0x86) (async)
setsockopt$TIPC_MCAST_REPLICAST(r5, 0x10f, 0x86)
getsockopt$TIPC_IMPORTANCE(r5, 0x10f, 0x7f, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
ioctl$PPPIOCATTACH(r3, 0x4004743d, &(0x7f0000000000)=0x4)

22:46:34 executing program 2:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
r1 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000180)={'vcan0\x00', <r2=>0x0})
bind$can_j1939(r1, &(0x7f00000001c0)={0x1d, r2, 0x0, {0x1}}, 0x18) (async)
bind$can_j1939(r1, &(0x7f00000001c0)={0x1d, r2, 0x0, {0x1}}, 0x18)
sendmsg$SEG6_CMD_SET_TUNSRC(r0, &(0x7f0000000340)={&(0x7f0000000200), 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x58, 0x0, 0x8, 0x70bd2d, 0x25dfdbff, {}, [@SEG6_ATTR_DST={0x14, 0x1, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x9}, @SEG6_ATTR_DST={0x14, 0x1, @private2}, @SEG6_ATTR_DST={0x14, 0x1, @empty}]}, 0x58}, 0x1, 0x0, 0x0, 0x4008040}, 0x0)
sendmsg$can_j1939(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x1d, r2, 0x3, {0x2, 0x1, 0x2}, 0xff}, 0x18, &(0x7f0000000040)={&(0x7f00000000c0)="329b2aa01b091f833985f3599f20e6258d9963b0103f368e74e54cf344e4f4b131dda367c515a6f218f3171f7a582ccd30c16ec0f3149de75130b0f074ab491e8d2165151165188a4d22596c432ec5e46891481eea1efadc7ef555e751fe26b3f7ef0f47e1d0f80cfa08217a051fd297de5f2f5c375fa79caf03a10f067a95df562aadaf619eff51c32705e374007498161614905eadac2d6fa9bdee8ed0f9010798d2422075552c0580a554241cd2db664c9ffe0cbdc893c81748d207234db2d10057510d2cf8ed7df2019dfe8f2dff32fa5752327abee3e7", 0xd9}, 0x1, 0x0, 0x0, 0x400c044}, 0x41bdda1f3c91a4db) (async)
sendmsg$can_j1939(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x1d, r2, 0x3, {0x2, 0x1, 0x2}, 0xff}, 0x18, &(0x7f0000000040)={&(0x7f00000000c0)="329b2aa01b091f833985f3599f20e6258d9963b0103f368e74e54cf344e4f4b131dda367c515a6f218f3171f7a582ccd30c16ec0f3149de75130b0f074ab491e8d2165151165188a4d22596c432ec5e46891481eea1efadc7ef555e751fe26b3f7ef0f47e1d0f80cfa08217a051fd297de5f2f5c375fa79caf03a10f067a95df562aadaf619eff51c32705e374007498161614905eadac2d6fa9bdee8ed0f9010798d2422075552c0580a554241cd2db664c9ffe0cbdc893c81748d207234db2d10057510d2cf8ed7df2019dfe8f2dff32fa5752327abee3e7", 0xd9}, 0x1, 0x0, 0x0, 0x400c044}, 0x41bdda1f3c91a4db)
write$ppp(r0, &(0x7f00000002c0)="d3", 0x1)

22:46:34 executing program 1:
openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x107180, 0x0)
write$ppp(r0, 0x0, 0xeffe001c)

[ 2799.960345][ T4799] FAULT_INJECTION: forcing a failure.
[ 2799.960345][ T4799] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 2799.973617][ T4799] CPU: 0 PID: 4799 Comm: syz-executor.5 Not tainted 6.6.0-rc3-syzkaller-00165-g3b517966c561 #0
[ 2799.984144][ T4799] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/06/2023
[ 2799.994202][ T4799] Call Trace:
[ 2799.997492][ T4799]  <TASK>
[ 2800.000453][ T4799]  dump_stack_lvl+0xda/0x130
[ 2800.005065][ T4799]  dump_stack+0x15/0x20
22:46:34 executing program 2:
openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0) (async)
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
r1 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000180)={'vcan0\x00', <r2=>0x0})
bind$can_j1939(r1, &(0x7f00000001c0)={0x1d, r2, 0x0, {0x1}}, 0x18)
sendmsg$SEG6_CMD_SET_TUNSRC(r0, &(0x7f0000000340)={&(0x7f0000000200), 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x58, 0x0, 0x8, 0x70bd2d, 0x25dfdbff, {}, [@SEG6_ATTR_DST={0x14, 0x1, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x9}, @SEG6_ATTR_DST={0x14, 0x1, @private2}, @SEG6_ATTR_DST={0x14, 0x1, @empty}]}, 0x58}, 0x1, 0x0, 0x0, 0x4008040}, 0x0)
sendmsg$can_j1939(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x1d, r2, 0x3, {0x2, 0x1, 0x2}, 0xff}, 0x18, &(0x7f0000000040)={&(0x7f00000000c0)="329b2aa01b091f833985f3599f20e6258d9963b0103f368e74e54cf344e4f4b131dda367c515a6f218f3171f7a582ccd30c16ec0f3149de75130b0f074ab491e8d2165151165188a4d22596c432ec5e46891481eea1efadc7ef555e751fe26b3f7ef0f47e1d0f80cfa08217a051fd297de5f2f5c375fa79caf03a10f067a95df562aadaf619eff51c32705e374007498161614905eadac2d6fa9bdee8ed0f9010798d2422075552c0580a554241cd2db664c9ffe0cbdc893c81748d207234db2d10057510d2cf8ed7df2019dfe8f2dff32fa5752327abee3e7", 0xd9}, 0x1, 0x0, 0x0, 0x400c044}, 0x41bdda1f3c91a4db)
write$ppp(r0, &(0x7f00000002c0)="d3", 0x1) (async)
write$ppp(r0, &(0x7f00000002c0)="d3", 0x1)

22:46:34 executing program 1:
openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0) (async)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x107180, 0x0)
write$ppp(r0, 0x0, 0xeffe001c)

22:46:34 executing program 2:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(r1, 0x10f, 0x86)
bind$llc(r1, &(0x7f0000000000)={0x1a, 0xffff, 0x6, 0x90, 0x4, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}}, 0x10)
r2 = syz_genetlink_get_family_id$SEG6(&(0x7f00000000c0), r1)
sendmsg$SEG6_CMD_SETHMAC(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x5c, r2, 0x400, 0x70bd25, 0x25dfdbfe, {}, [@SEG6_ATTR_DST={0x14, 0x1, @empty}, @SEG6_ATTR_DST={0x14, 0x1, @rand_addr=' \x01\x00'}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x28}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x3}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x2}, @SEG6_ATTR_ALGID={0x5, 0x6, 0xff}]}, 0x5c}}, 0x4000004)
write$ppp(r0, &(0x7f00000002c0)="d3", 0x1)

[ 2800.009263][ T4799]  should_fail_ex+0x21f/0x230
[ 2800.013958][ T4799]  should_fail+0xb/0x10
[ 2800.018180][ T4799]  should_fail_usercopy+0x1a/0x20
[ 2800.023337][ T4799]  copy_page_from_iter_atomic+0x21c/0xcf0
[ 2800.029093][ T4799]  ? shmem_write_begin+0xa6/0x210
[ 2800.034226][ T4799]  ? shmem_write_begin+0x16d/0x210
[ 2800.039452][ T4799]  generic_perform_write+0x20c/0x410
[ 2800.044800][ T4799]  ? shmem_write_begin+0x210/0x210
[ 2800.050005][ T4799]  shmem_file_write_iter+0xc8/0xe0
[ 2800.055158][ T4799]  vfs_write+0x4ab/0x7d0
[ 2800.059491][ T4799]  ksys_write+0xeb/0x1a0
[ 2800.063753][ T4799]  __x64_sys_write+0x42/0x50
[ 2800.068368][ T4799]  do_syscall_64+0x41/0xc0
[ 2800.072831][ T4799]  entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 2800.078747][ T4799] RIP: 0033:0x7f90e4a54ae9
[ 2800.083200][ T4799] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48
[ 2800.102880][ T4799] RSP: 002b:00007f90e3dd70c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 2800.111490][ T4799] RAX: ffffffffffffffda RBX: 00007f90e4b73f80 RCX: 00007f90e4a54ae9
[ 2800.119471][ T4799] RDX: 00000000001f4f33 RSI: 00000000200002c0 RDI: 0000000000000003
[ 2800.127523][ T4799] RBP: 00007f90e3dd7120 R08: 0000000000000000 R09: 0000000000000000
[ 2800.135505][ T4799] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 2800.143664][ T4799] R13: 000000000000000b R14: 00007f90e4b73f80 R15: 00007ffdb3bfd028
[ 2800.151651][ T4799]  </TASK>
22:46:34 executing program 1:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(r0, 0x10f, 0x86)
sendmsg$AUDIT_ADD_RULE(r0, &(0x7f0000000500)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000040)={&(0x7f0000000600)={0x480, 0x3f3, 0x1, 0x70bd26, 0x25dfdbff, {0x10, 0x2, 0x5, [0x2, 0x4, 0x2, 0xb1, 0x98, 0x8, 0x4, 0x75, 0x0, 0x6, 0x3, 0x8, 0x4, 0x5f, 0x1, 0x4, 0x7, 0xffffff15, 0x0, 0x2, 0x0, 0xffff0001, 0x48, 0x3, 0x6, 0x80000001, 0x7, 0x7fffffff, 0x1, 0x8, 0x0, 0x7, 0x37d4, 0x361, 0x7f, 0xffffffff, 0x101, 0x2e, 0x7, 0x0, 0x6, 0x3, 0x0, 0x7fff, 0xfffffff9, 0x1000, 0x3, 0x7ff, 0x8001, 0x1000, 0x5, 0x7fffffff, 0x3f, 0xff, 0xd8, 0x8, 0x5, 0x1, 0x8, 0x10001, 0x101, 0xff, 0xffff, 0xf119], [0xd3d3, 0x3ff, 0x3, 0x1a, 0x80000001, 0x9, 0x6, 0x10001, 0x800, 0x6, 0x3, 0x8, 0xffffff7f, 0x0, 0x1, 0x9, 0x401, 0x8, 0x8, 0x4, 0xffffffff, 0x20, 0x3ff, 0xff, 0xfff, 0x5, 0x7ff, 0x8, 0x1979, 0x3ff, 0xff, 0x8, 0x2, 0x1, 0x5, 0xf11, 0x3, 0x761, 0x6, 0x1c, 0x2, 0x100, 0x8, 0x1, 0x7, 0x80000001, 0x10001, 0xfffffff7, 0x0, 0x81, 0x40, 0x0, 0x0, 0x7, 0x3ff, 0x0, 0x6, 0x9, 0x7f, 0x1f, 0xffffffff, 0x3, 0x97a, 0x7], [0x800, 0x20, 0x4, 0x0, 0x7, 0x813, 0x80000001, 0x10000, 0x1, 0x400, 0x200, 0x9, 0x8, 0x3, 0x3, 0x1ff, 0x7f, 0x4, 0x200, 0xc92, 0x3684dbdc, 0x9, 0x3, 0x9, 0x0, 0x2, 0xf8e, 0x0, 0x20, 0x3, 0xffffffff, 0x200, 0x5, 0x8, 0x4, 0x2, 0x2, 0x3, 0xb78, 0x6, 0x7, 0x0, 0x7fff, 0x2, 0x9, 0x0, 0x5, 0xe4fa, 0x4, 0x800, 0x4, 0x7fff, 0x6, 0x7, 0x2, 0x6, 0x1, 0x800, 0x80000000, 0xffff1c5b, 0x7ff, 0x7, 0x6, 0x2], [0x5, 0x80, 0x2d0, 0xfffffe01, 0x3, 0x100, 0x1, 0x1, 0x6, 0x8, 0x1, 0x7f, 0x5, 0x1000, 0x401, 0x5, 0x0, 0x401, 0xec08, 0xe28, 0x40, 0x40, 0x5, 0x1, 0xffff0001, 0x4, 0x6, 0x9, 0x0, 0x8000, 0x20, 0x2, 0x4ac22033, 0x9, 0x1, 0x5, 0xdb, 0x560f, 0x8, 0x2, 0x6, 0x7fffffff, 0x3f, 0x6, 0x87, 0x2, 0x7, 0x8, 0x3, 0x5, 0x1, 0x20c5, 0x9, 0x0, 0x8000, 0x9, 0x10000, 0x80000000, 0xf15, 0x4, 0x446c0000, 0x6, 0x7, 0x401], 0x5e, ['/dev/bsg\x00', '\x00\xb1\x14\xf9W\x05\x15\xa6\x96\x157\x06\x00\x00\x00\x00\x00\x00\x00\xe1H\xb1\xd7\x9d:\xe9\xd2\xbc\xb1\tF\xfe\xaa\xd52\'\x15r\x7f.\xa1\xfef\xcd`fqpmHK\xb5Ch\x84]\xf3\xa5\xf5Z3\xf6\x9c\xa1+\x80\xfa\xcb)\xb4t[t\fKO\x8dG\xb0\t', ',}^%\x00']}, ["", "", "", "", ""]}, 0x480}, 0x1, 0x0, 0x0, 0x20000000}, 0x4040)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
write$ppp(r1, 0x0, 0xeffdffff)

22:46:34 executing program 4:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0) (async)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x92ac2, 0x0) (async)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x200, 0x0)
ioctl$TUNSETLINK(r2, 0x400454cd, 0x3d)
write$ppp(r1, 0x0, 0x0) (async)
r3 = openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(r3, 0x10f, 0x86) (async)
r4 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000180), 0x190a6c919e5fddf8, 0x0)
ioctl$LOOP_SET_FD(r4, 0x4c00, r0) (async)
r5 = openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(r5, 0x10f, 0x86) (async)
getsockopt$TIPC_IMPORTANCE(r5, 0x10f, 0x7f, &(0x7f00000000c0), &(0x7f0000000100)=0x4) (async)
ioctl$PPPIOCATTACH(r3, 0x4004743d, &(0x7f0000000000)=0x4)

22:46:34 executing program 5:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
write$ppp(r0, &(0x7f00000002c0)="d3", 0x1f4f33) (fail_nth: 32)

22:46:34 executing program 3:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
write$ppp(r0, &(0x7f00000002c0)="d3", 0xfffffdef)
setsockopt$TIPC_DEST_DROPPABLE(0xffffffffffffffff, 0x10f, 0x81, &(0x7f0000000000)=0x9fec, 0x4)

22:46:34 executing program 2:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(r1, 0x10f, 0x86)
bind$llc(r1, &(0x7f0000000000)={0x1a, 0xffff, 0x6, 0x90, 0x4, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}}, 0x10)
syz_genetlink_get_family_id$SEG6(&(0x7f00000000c0), r1) (async)
r2 = syz_genetlink_get_family_id$SEG6(&(0x7f00000000c0), r1)
sendmsg$SEG6_CMD_SETHMAC(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x5c, r2, 0x400, 0x70bd25, 0x25dfdbfe, {}, [@SEG6_ATTR_DST={0x14, 0x1, @empty}, @SEG6_ATTR_DST={0x14, 0x1, @rand_addr=' \x01\x00'}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x28}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x3}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x2}, @SEG6_ATTR_ALGID={0x5, 0x6, 0xff}]}, 0x5c}}, 0x4000004)
write$ppp(r0, &(0x7f00000002c0)="d3", 0x1) (async)
write$ppp(r0, &(0x7f00000002c0)="d3", 0x1)

22:46:34 executing program 0:
openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5de901, 0x0)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x3018c3, 0x0)
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(r0, 0x10f, 0x86)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(r1, 0x10f, 0x86)
r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
write$ppp(r2, 0x0, 0x0)

22:46:34 executing program 4:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x60800, 0x0)
syz_io_uring_setup(0x56ac, &(0x7f0000000040)={0x0, 0x42810, 0x2, 0x2, 0x52, 0x0, r0}, &(0x7f00000000c0), &(0x7f0000000100)=<r1=>0x0)
syz_io_uring_submit(0x0, r1, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r0, 0x80, &(0x7f0000000140)=@hci})
write$ppp(r0, 0x0, 0x0)

22:46:34 executing program 1:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(r0, 0x10f, 0x86) (async)
sendmsg$AUDIT_ADD_RULE(r0, &(0x7f0000000500)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000040)={&(0x7f0000000600)={0x480, 0x3f3, 0x1, 0x70bd26, 0x25dfdbff, {0x10, 0x2, 0x5, [0x2, 0x4, 0x2, 0xb1, 0x98, 0x8, 0x4, 0x75, 0x0, 0x6, 0x3, 0x8, 0x4, 0x5f, 0x1, 0x4, 0x7, 0xffffff15, 0x0, 0x2, 0x0, 0xffff0001, 0x48, 0x3, 0x6, 0x80000001, 0x7, 0x7fffffff, 0x1, 0x8, 0x0, 0x7, 0x37d4, 0x361, 0x7f, 0xffffffff, 0x101, 0x2e, 0x7, 0x0, 0x6, 0x3, 0x0, 0x7fff, 0xfffffff9, 0x1000, 0x3, 0x7ff, 0x8001, 0x1000, 0x5, 0x7fffffff, 0x3f, 0xff, 0xd8, 0x8, 0x5, 0x1, 0x8, 0x10001, 0x101, 0xff, 0xffff, 0xf119], [0xd3d3, 0x3ff, 0x3, 0x1a, 0x80000001, 0x9, 0x6, 0x10001, 0x800, 0x6, 0x3, 0x8, 0xffffff7f, 0x0, 0x1, 0x9, 0x401, 0x8, 0x8, 0x4, 0xffffffff, 0x20, 0x3ff, 0xff, 0xfff, 0x5, 0x7ff, 0x8, 0x1979, 0x3ff, 0xff, 0x8, 0x2, 0x1, 0x5, 0xf11, 0x3, 0x761, 0x6, 0x1c, 0x2, 0x100, 0x8, 0x1, 0x7, 0x80000001, 0x10001, 0xfffffff7, 0x0, 0x81, 0x40, 0x0, 0x0, 0x7, 0x3ff, 0x0, 0x6, 0x9, 0x7f, 0x1f, 0xffffffff, 0x3, 0x97a, 0x7], [0x800, 0x20, 0x4, 0x0, 0x7, 0x813, 0x80000001, 0x10000, 0x1, 0x400, 0x200, 0x9, 0x8, 0x3, 0x3, 0x1ff, 0x7f, 0x4, 0x200, 0xc92, 0x3684dbdc, 0x9, 0x3, 0x9, 0x0, 0x2, 0xf8e, 0x0, 0x20, 0x3, 0xffffffff, 0x200, 0x5, 0x8, 0x4, 0x2, 0x2, 0x3, 0xb78, 0x6, 0x7, 0x0, 0x7fff, 0x2, 0x9, 0x0, 0x5, 0xe4fa, 0x4, 0x800, 0x4, 0x7fff, 0x6, 0x7, 0x2, 0x6, 0x1, 0x800, 0x80000000, 0xffff1c5b, 0x7ff, 0x7, 0x6, 0x2], [0x5, 0x80, 0x2d0, 0xfffffe01, 0x3, 0x100, 0x1, 0x1, 0x6, 0x8, 0x1, 0x7f, 0x5, 0x1000, 0x401, 0x5, 0x0, 0x401, 0xec08, 0xe28, 0x40, 0x40, 0x5, 0x1, 0xffff0001, 0x4, 0x6, 0x9, 0x0, 0x8000, 0x20, 0x2, 0x4ac22033, 0x9, 0x1, 0x5, 0xdb, 0x560f, 0x8, 0x2, 0x6, 0x7fffffff, 0x3f, 0x6, 0x87, 0x2, 0x7, 0x8, 0x3, 0x5, 0x1, 0x20c5, 0x9, 0x0, 0x8000, 0x9, 0x10000, 0x80000000, 0xf15, 0x4, 0x446c0000, 0x6, 0x7, 0x401], 0x5e, ['/dev/bsg\x00', '\x00\xb1\x14\xf9W\x05\x15\xa6\x96\x157\x06\x00\x00\x00\x00\x00\x00\x00\xe1H\xb1\xd7\x9d:\xe9\xd2\xbc\xb1\tF\xfe\xaa\xd52\'\x15r\x7f.\xa1\xfef\xcd`fqpmHK\xb5Ch\x84]\xf3\xa5\xf5Z3\xf6\x9c\xa1+\x80\xfa\xcb)\xb4t[t\fKO\x8dG\xb0\t', ',}^%\x00']}, ["", "", "", "", ""]}, 0x480}, 0x1, 0x0, 0x0, 0x20000000}, 0x4040) (async)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
write$ppp(r1, 0x0, 0xeffdffff)

[ 2800.208452][ T4834] FAULT_INJECTION: forcing a failure.
[ 2800.208452][ T4834] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[ 2800.221715][ T4834] CPU: 1 PID: 4834 Comm: syz-executor.5 Not tainted 6.6.0-rc3-syzkaller-00165-g3b517966c561 #0
[ 2800.232153][ T4834] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/06/2023
[ 2800.242206][ T4834] Call Trace:
[ 2800.245514][ T4834]  <TASK>
[ 2800.248448][ T4834]  dump_stack_lvl+0xda/0x130
[ 2800.253045][ T4834]  dump_stack+0x15/0x20
[ 2800.257215][ T4834]  should_fail_ex+0x21f/0x230
[ 2800.261903][ T4834]  __should_fail_alloc_page+0xfd/0x110
[ 2800.267419][ T4834]  __alloc_pages+0x108/0x340
[ 2800.272035][ T4834]  vma_alloc_folio+0x6a3/0x8c0
[ 2800.276889][ T4834]  ? shmem_inode_acct_block+0x1ee/0x220
[ 2800.282564][ T4834]  shmem_get_folio_gfp+0x579/0xc30
[ 2800.287699][ T4834]  shmem_write_begin+0xa6/0x210
[ 2800.292559][ T4834]  generic_perform_write+0x1c9/0x410
[ 2800.297954][ T4834]  ? shmem_write_begin+0x210/0x210
[ 2800.303102][ T4834]  shmem_file_write_iter+0xc8/0xe0
22:46:34 executing program 0:
openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5de901, 0x0)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x3018c3, 0x0)
openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0) (async)
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(r0, 0x10f, 0x86)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(r1, 0x10f, 0x86) (async)
setsockopt$TIPC_MCAST_REPLICAST(r1, 0x10f, 0x86)
r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
write$ppp(r2, 0x0, 0x0)

[ 2800.308318][ T4834]  vfs_write+0x4ab/0x7d0
[ 2800.312579][ T4834]  ksys_write+0xeb/0x1a0
[ 2800.316862][ T4834]  __x64_sys_write+0x42/0x50
[ 2800.321512][ T4834]  do_syscall_64+0x41/0xc0
[ 2800.325968][ T4834]  entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 2800.331954][ T4834] RIP: 0033:0x7f90e4a54ae9
[ 2800.336420][ T4834] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48
22:46:34 executing program 0:
openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5de901, 0x0)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x3018c3, 0x0) (async)
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(r0, 0x10f, 0x86) (async)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(r1, 0x10f, 0x86)
r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
write$ppp(r2, 0x0, 0x0)

22:46:34 executing program 2:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0) (async)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(r1, 0x10f, 0x86) (async)
bind$llc(r1, &(0x7f0000000000)={0x1a, 0xffff, 0x6, 0x90, 0x4, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}}, 0x10) (async)
r2 = syz_genetlink_get_family_id$SEG6(&(0x7f00000000c0), r1)
sendmsg$SEG6_CMD_SETHMAC(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x5c, r2, 0x400, 0x70bd25, 0x25dfdbfe, {}, [@SEG6_ATTR_DST={0x14, 0x1, @empty}, @SEG6_ATTR_DST={0x14, 0x1, @rand_addr=' \x01\x00'}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x28}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x3}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x2}, @SEG6_ATTR_ALGID={0x5, 0x6, 0xff}]}, 0x5c}}, 0x4000004) (async)
write$ppp(r0, &(0x7f00000002c0)="d3", 0x1)

22:46:34 executing program 0:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x34df1986510ad3fe, 0x0)
write$ppp(r0, 0x0, 0xeffdffffffffffff)

22:46:34 executing program 5:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
write$ppp(r0, &(0x7f00000002c0)="d3", 0x1f4f33) (fail_nth: 33)

22:46:34 executing program 2:
setsockopt$TIPC_MCAST_BROADCAST(0xffffffffffffffff, 0x10f, 0x85)
setsockopt$TIPC_MCAST_REPLICAST(0xffffffffffffffff, 0x10f, 0x86)
syz_io_uring_setup(0x2869, &(0x7f0000000000)={0x0, 0xa14d, 0x8, 0x2, 0x27c}, &(0x7f00000000c0), &(0x7f0000000100))
openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)

22:46:34 executing program 1:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(r0, 0x10f, 0x86) (async)
sendmsg$AUDIT_ADD_RULE(r0, &(0x7f0000000500)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000040)={&(0x7f0000000600)={0x480, 0x3f3, 0x1, 0x70bd26, 0x25dfdbff, {0x10, 0x2, 0x5, [0x2, 0x4, 0x2, 0xb1, 0x98, 0x8, 0x4, 0x75, 0x0, 0x6, 0x3, 0x8, 0x4, 0x5f, 0x1, 0x4, 0x7, 0xffffff15, 0x0, 0x2, 0x0, 0xffff0001, 0x48, 0x3, 0x6, 0x80000001, 0x7, 0x7fffffff, 0x1, 0x8, 0x0, 0x7, 0x37d4, 0x361, 0x7f, 0xffffffff, 0x101, 0x2e, 0x7, 0x0, 0x6, 0x3, 0x0, 0x7fff, 0xfffffff9, 0x1000, 0x3, 0x7ff, 0x8001, 0x1000, 0x5, 0x7fffffff, 0x3f, 0xff, 0xd8, 0x8, 0x5, 0x1, 0x8, 0x10001, 0x101, 0xff, 0xffff, 0xf119], [0xd3d3, 0x3ff, 0x3, 0x1a, 0x80000001, 0x9, 0x6, 0x10001, 0x800, 0x6, 0x3, 0x8, 0xffffff7f, 0x0, 0x1, 0x9, 0x401, 0x8, 0x8, 0x4, 0xffffffff, 0x20, 0x3ff, 0xff, 0xfff, 0x5, 0x7ff, 0x8, 0x1979, 0x3ff, 0xff, 0x8, 0x2, 0x1, 0x5, 0xf11, 0x3, 0x761, 0x6, 0x1c, 0x2, 0x100, 0x8, 0x1, 0x7, 0x80000001, 0x10001, 0xfffffff7, 0x0, 0x81, 0x40, 0x0, 0x0, 0x7, 0x3ff, 0x0, 0x6, 0x9, 0x7f, 0x1f, 0xffffffff, 0x3, 0x97a, 0x7], [0x800, 0x20, 0x4, 0x0, 0x7, 0x813, 0x80000001, 0x10000, 0x1, 0x400, 0x200, 0x9, 0x8, 0x3, 0x3, 0x1ff, 0x7f, 0x4, 0x200, 0xc92, 0x3684dbdc, 0x9, 0x3, 0x9, 0x0, 0x2, 0xf8e, 0x0, 0x20, 0x3, 0xffffffff, 0x200, 0x5, 0x8, 0x4, 0x2, 0x2, 0x3, 0xb78, 0x6, 0x7, 0x0, 0x7fff, 0x2, 0x9, 0x0, 0x5, 0xe4fa, 0x4, 0x800, 0x4, 0x7fff, 0x6, 0x7, 0x2, 0x6, 0x1, 0x800, 0x80000000, 0xffff1c5b, 0x7ff, 0x7, 0x6, 0x2], [0x5, 0x80, 0x2d0, 0xfffffe01, 0x3, 0x100, 0x1, 0x1, 0x6, 0x8, 0x1, 0x7f, 0x5, 0x1000, 0x401, 0x5, 0x0, 0x401, 0xec08, 0xe28, 0x40, 0x40, 0x5, 0x1, 0xffff0001, 0x4, 0x6, 0x9, 0x0, 0x8000, 0x20, 0x2, 0x4ac22033, 0x9, 0x1, 0x5, 0xdb, 0x560f, 0x8, 0x2, 0x6, 0x7fffffff, 0x3f, 0x6, 0x87, 0x2, 0x7, 0x8, 0x3, 0x5, 0x1, 0x20c5, 0x9, 0x0, 0x8000, 0x9, 0x10000, 0x80000000, 0xf15, 0x4, 0x446c0000, 0x6, 0x7, 0x401], 0x5e, ['/dev/bsg\x00', '\x00\xb1\x14\xf9W\x05\x15\xa6\x96\x157\x06\x00\x00\x00\x00\x00\x00\x00\xe1H\xb1\xd7\x9d:\xe9\xd2\xbc\xb1\tF\xfe\xaa\xd52\'\x15r\x7f.\xa1\xfef\xcd`fqpmHK\xb5Ch\x84]\xf3\xa5\xf5Z3\xf6\x9c\xa1+\x80\xfa\xcb)\xb4t[t\fKO\x8dG\xb0\t', ',}^%\x00']}, ["", "", "", "", ""]}, 0x480}, 0x1, 0x0, 0x0, 0x20000000}, 0x4040) (async)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
write$ppp(r1, 0x0, 0xeffdffff)

[ 2800.356231][ T4834] RSP: 002b:00007f90e3dd70c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 2800.364826][ T4834] RAX: ffffffffffffffda RBX: 00007f90e4b73f80 RCX: 00007f90e4a54ae9
[ 2800.372902][ T4834] RDX: 00000000001f4f33 RSI: 00000000200002c0 RDI: 0000000000000003
[ 2800.380886][ T4834] RBP: 00007f90e3dd7120 R08: 0000000000000000 R09: 0000000000000000
[ 2800.388882][ T4834] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 2800.396865][ T4834] R13: 000000000000000b R14: 00007f90e4b73f80 R15: 00007ffdb3bfd028
[ 2800.404871][ T4834]  </TASK>
22:46:34 executing program 3:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(r0, 0x10f, 0x86)
r1 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000180)={'vcan0\x00', <r2=>0x0})
bind$can_j1939(r1, &(0x7f00000001c0)={0x1d, r2, 0x0, {0x1}}, 0x18)
connect$can_j1939(r0, &(0x7f0000000000)={0x1d, r2, 0x0, {0x0, 0x1, 0x2}, 0xfe}, 0x18)
r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
ioctl$TUNSETLINK(r0, 0x400454cd, 0x302)
write$ppp(r3, &(0x7f00000002c0)="d3", 0xfffffdef)
ioctl$LOOP_SET_CAPACITY(r3, 0x4c07)

22:46:34 executing program 0:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x34df1986510ad3fe, 0x0)
write$ppp(r0, 0x0, 0xeffdffffffffffff)

22:46:34 executing program 4:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x60800, 0x0)
syz_io_uring_setup(0x56ac, &(0x7f0000000040)={0x0, 0x42810, 0x2, 0x2, 0x52, 0x0, r0}, &(0x7f00000000c0), &(0x7f0000000100)) (async)
syz_io_uring_setup(0x56ac, &(0x7f0000000040)={0x0, 0x42810, 0x2, 0x2, 0x52, 0x0, r0}, &(0x7f00000000c0), &(0x7f0000000100)=<r1=>0x0)
syz_io_uring_submit(0x0, r1, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r0, 0x80, &(0x7f0000000140)=@hci})
write$ppp(r0, 0x0, 0x0)

22:46:34 executing program 1:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x682782, 0x0)
write$ppp(r0, 0x0, 0xeffdffff)
r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0)
write$ppp(r1, &(0x7f0000000080)="c991b10421a0b955880297191c8cf3f856733b75b58d19ca180663a326e082ff94a68cbc65f768f46d40f3f7396853f25576abec967a437ae5166bd0d3dfc72f871aadbc91ba36ba020892c6d06c4ce02f72ba876599db9504269c429634e1568f611e4017b1c1957182cb80160102393ed2c1dc3b568b2c0f4d8af0c16c9dba78621be960688c6a9174f264cf643cf008c768c5ad8c3f1291f8357acc74a79fcbac2ba66489cd6d3b1f44684f79dc1109c10adbcacdd9ecd67e14a11280", 0xbe)

22:46:34 executing program 2:
setsockopt$TIPC_MCAST_BROADCAST(0xffffffffffffffff, 0x10f, 0x85)
setsockopt$TIPC_MCAST_REPLICAST(0xffffffffffffffff, 0x10f, 0x86) (async)
syz_io_uring_setup(0x2869, &(0x7f0000000000)={0x0, 0xa14d, 0x8, 0x2, 0x27c}, &(0x7f00000000c0), &(0x7f0000000100)) (async)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)

[ 2800.471954][ T4866] FAULT_INJECTION: forcing a failure.
[ 2800.471954][ T4866] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 2800.485086][ T4866] CPU: 1 PID: 4866 Comm: syz-executor.5 Not tainted 6.6.0-rc3-syzkaller-00165-g3b517966c561 #0
[ 2800.495467][ T4866] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/06/2023
[ 2800.505610][ T4866] Call Trace:
[ 2800.508891][ T4866]  <TASK>
[ 2800.511851][ T4866]  dump_stack_lvl+0xda/0x130
[ 2800.516528][ T4866]  dump_stack+0x15/0x20
22:46:34 executing program 2:
setsockopt$TIPC_MCAST_BROADCAST(0xffffffffffffffff, 0x10f, 0x85)
setsockopt$TIPC_MCAST_REPLICAST(0xffffffffffffffff, 0x10f, 0x86)
syz_io_uring_setup(0x2869, &(0x7f0000000000)={0x0, 0xa14d, 0x8, 0x2, 0x27c}, &(0x7f00000000c0), &(0x7f0000000100))
openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0) (async)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)

[ 2800.520697][ T4866]  should_fail_ex+0x21f/0x230
[ 2800.525506][ T4866]  should_fail+0xb/0x10
[ 2800.529669][ T4866]  should_fail_usercopy+0x1a/0x20
[ 2800.534741][ T4866]  copy_page_from_iter_atomic+0x21c/0xcf0
[ 2800.540577][ T4866]  ? shmem_write_begin+0xa6/0x210
[ 2800.545650][ T4866]  ? shmem_write_begin+0x16d/0x210
[ 2800.550906][ T4866]  generic_perform_write+0x20c/0x410
[ 2800.556317][ T4866]  ? shmem_write_begin+0x210/0x210
[ 2800.561542][ T4866]  shmem_file_write_iter+0xc8/0xe0
[ 2800.566685][ T4866]  vfs_write+0x4ab/0x7d0
22:46:34 executing program 2:
write$ppp(0xffffffffffffffff, &(0x7f00000002c0)='\x00', 0x1)
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x10000, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(r0, 0x10f, 0x86)
r1 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000180)={'vcan0\x00', <r2=>0x0})
bind$can_j1939(r1, &(0x7f00000001c0)={0x1d, r2, 0x0, {0x1}}, 0x18)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000000)={'syztnl1\x00', r2, 0x2, 0x8a, 0xf8, 0x4, 0x54, @empty, @private0, 0x20, 0x7, 0x2, 0x8}})
timerfd_create(0x2, 0x0)
ioctl$PPPIOCSCOMPRESS(r0, 0x4010744d)

22:46:34 executing program 2:
write$ppp(0xffffffffffffffff, &(0x7f00000002c0)='\x00', 0x1) (async)
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x10000, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(r0, 0x10f, 0x86) (async)
r1 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000180)={'vcan0\x00', <r2=>0x0})
bind$can_j1939(r1, &(0x7f00000001c0)={0x1d, r2, 0x0, {0x1}}, 0x18) (async)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000000)={'syztnl1\x00', r2, 0x2, 0x8a, 0xf8, 0x4, 0x54, @empty, @private0, 0x20, 0x7, 0x2, 0x8}}) (async)
timerfd_create(0x2, 0x0) (async)
ioctl$PPPIOCSCOMPRESS(r0, 0x4010744d)

[ 2800.570969][ T4866]  ksys_write+0xeb/0x1a0
[ 2800.575261][ T4866]  __x64_sys_write+0x42/0x50
[ 2800.579894][ T4866]  do_syscall_64+0x41/0xc0
[ 2800.584367][ T4866]  entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 2800.590368][ T4866] RIP: 0033:0x7f90e4a54ae9
[ 2800.594837][ T4866] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48
22:46:34 executing program 2:
write$ppp(0xffffffffffffffff, &(0x7f00000002c0)='\x00', 0x1) (async)
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x10000, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(r0, 0x10f, 0x86) (async)
r1 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000180)={'vcan0\x00', <r2=>0x0})
bind$can_j1939(r1, &(0x7f00000001c0)={0x1d, r2, 0x0, {0x1}}, 0x18) (async, rerun: 32)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000000)={'syztnl1\x00', r2, 0x2, 0x8a, 0xf8, 0x4, 0x54, @empty, @private0, 0x20, 0x7, 0x2, 0x8}}) (async, rerun: 32)
timerfd_create(0x2, 0x0)
ioctl$PPPIOCSCOMPRESS(r0, 0x4010744d)

[ 2800.614609][ T4866] RSP: 002b:00007f90e3dd70c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 2800.623137][ T4866] RAX: ffffffffffffffda RBX: 00007f90e4b73f80 RCX: 00007f90e4a54ae9
[ 2800.631120][ T4866] RDX: 00000000001f4f33 RSI: 00000000200002c0 RDI: 0000000000000003
[ 2800.639113][ T4866] RBP: 00007f90e3dd7120 R08: 0000000000000000 R09: 0000000000000000
[ 2800.647095][ T4866] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 2800.655079][ T4866] R13: 000000000000000b R14: 00007f90e4b73f80 R15: 00007ffdb3bfd028
[ 2800.663059][ T4866]  </TASK>
22:46:34 executing program 4:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x60800, 0x0)
syz_io_uring_setup(0x56ac, &(0x7f0000000040)={0x0, 0x42810, 0x2, 0x2, 0x52, 0x0, r0}, &(0x7f00000000c0), &(0x7f0000000100)=<r1=>0x0)
syz_io_uring_submit(0x0, r1, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r0, 0x80, &(0x7f0000000140)=@hci})
write$ppp(r0, 0x0, 0x0)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x60800, 0x0) (async)
syz_io_uring_setup(0x56ac, &(0x7f0000000040)={0x0, 0x42810, 0x2, 0x2, 0x52, 0x0, r0}, &(0x7f00000000c0), &(0x7f0000000100)) (async)
syz_io_uring_submit(0x0, r1, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r0, 0x80, &(0x7f0000000140)=@hci}) (async)
write$ppp(r0, 0x0, 0x0) (async)

22:46:34 executing program 1:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x682782, 0x0)
write$ppp(r0, 0x0, 0xeffdffff) (async)
r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0)
write$ppp(r1, &(0x7f0000000080)="c991b10421a0b955880297191c8cf3f856733b75b58d19ca180663a326e082ff94a68cbc65f768f46d40f3f7396853f25576abec967a437ae5166bd0d3dfc72f871aadbc91ba36ba020892c6d06c4ce02f72ba876599db9504269c429634e1568f611e4017b1c1957182cb80160102393ed2c1dc3b568b2c0f4d8af0c16c9dba78621be960688c6a9174f264cf643cf008c768c5ad8c3f1291f8357acc74a79fcbac2ba66489cd6d3b1f44684f79dc1109c10adbcacdd9ecd67e14a11280", 0xbe)

22:46:34 executing program 5:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
write$ppp(r0, &(0x7f00000002c0)="d3", 0x1f4f33) (fail_nth: 34)

[ 2800.726621][ T4905] FAULT_INJECTION: forcing a failure.
[ 2800.726621][ T4905] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[ 2800.739878][ T4905] CPU: 0 PID: 4905 Comm: syz-executor.5 Not tainted 6.6.0-rc3-syzkaller-00165-g3b517966c561 #0
[ 2800.750293][ T4905] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/06/2023
[ 2800.760352][ T4905] Call Trace:
[ 2800.763625][ T4905]  <TASK>
[ 2800.766559][ T4905]  dump_stack_lvl+0xda/0x130
[ 2800.771202][ T4905]  dump_stack+0x15/0x20
[ 2800.775417][ T4905]  should_fail_ex+0x21f/0x230
[ 2800.780115][ T4905]  __should_fail_alloc_page+0xfd/0x110
[ 2800.785581][ T4905]  __alloc_pages+0x108/0x340
[ 2800.790238][ T4905]  vma_alloc_folio+0x6a3/0x8c0
[ 2800.795011][ T4905]  ? shmem_inode_acct_block+0x1ee/0x220
[ 2800.800580][ T4905]  shmem_get_folio_gfp+0x579/0xc30
[ 2800.805717][ T4905]  shmem_write_begin+0xa6/0x210
[ 2800.810606][ T4905]  generic_perform_write+0x1c9/0x410
[ 2800.815960][ T4905]  ? shmem_write_begin+0x210/0x210
[ 2800.821095][ T4905]  shmem_file_write_iter+0xc8/0xe0
22:46:34 executing program 3:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(r0, 0x10f, 0x86) (async)
r1 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000180)={'vcan0\x00', <r2=>0x0})
bind$can_j1939(r1, &(0x7f00000001c0)={0x1d, r2, 0x0, {0x1}}, 0x18)
connect$can_j1939(r0, &(0x7f0000000000)={0x1d, r2, 0x0, {0x0, 0x1, 0x2}, 0xfe}, 0x18) (async)
r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
ioctl$TUNSETLINK(r0, 0x400454cd, 0x302) (async, rerun: 32)
write$ppp(r3, &(0x7f00000002c0)="d3", 0xfffffdef) (async, rerun: 32)
ioctl$LOOP_SET_CAPACITY(r3, 0x4c07)

22:46:34 executing program 2:
openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0)
write$ppp(r0, &(0x7f00000002c0)="d3", 0x1)

22:46:34 executing program 0:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x34df1986510ad3fe, 0x0)
write$ppp(r0, 0x0, 0xeffdffffffffffff)

22:46:34 executing program 1:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x682782, 0x0)
write$ppp(r0, 0x0, 0xeffdffff)
r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0)
write$ppp(r1, &(0x7f0000000080)="c991b10421a0b955880297191c8cf3f856733b75b58d19ca180663a326e082ff94a68cbc65f768f46d40f3f7396853f25576abec967a437ae5166bd0d3dfc72f871aadbc91ba36ba020892c6d06c4ce02f72ba876599db9504269c429634e1568f611e4017b1c1957182cb80160102393ed2c1dc3b568b2c0f4d8af0c16c9dba78621be960688c6a9174f264cf643cf008c768c5ad8c3f1291f8357acc74a79fcbac2ba66489cd6d3b1f44684f79dc1109c10adbcacdd9ecd67e14a11280", 0xbe)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x682782, 0x0) (async)
write$ppp(r0, 0x0, 0xeffdffff) (async)
openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0) (async)
write$ppp(r1, &(0x7f0000000080)="c991b10421a0b955880297191c8cf3f856733b75b58d19ca180663a326e082ff94a68cbc65f768f46d40f3f7396853f25576abec967a437ae5166bd0d3dfc72f871aadbc91ba36ba020892c6d06c4ce02f72ba876599db9504269c429634e1568f611e4017b1c1957182cb80160102393ed2c1dc3b568b2c0f4d8af0c16c9dba78621be960688c6a9174f264cf643cf008c768c5ad8c3f1291f8357acc74a79fcbac2ba66489cd6d3b1f44684f79dc1109c10adbcacdd9ecd67e14a11280", 0xbe) (async)

22:46:34 executing program 4:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
pipe2$9p(&(0x7f00000000c0)={<r1=>0xffffffffffffffff}, 0x80)
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs2/custom1\x00', 0x2, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x70, 0x0, &(0x7f0000000200)=[@acquire_done={0x40106309, 0x1}, @reply={0x40406301, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000140)={@ptr={0x70742a85, 0x1, &(0x7f0000000000)=""/69, 0x45, 0x2, 0x2e}, @fd={0x66642a85, 0x0, r1}, @fd={0x66642a85, 0x0, r2}}, &(0x7f00000001c0)={0x0, 0x28, 0x40}}}, @clear_death={0x400c630f, 0x3}, @acquire={0x40046305, 0x2}], 0xb6, 0x0, &(0x7f0000000280)="641a30e437b91e16eebcbd191c31254b916628520d35de2d040615a09f7dc74acc45806bc9ddacb0ea4afbeb2b2413211263dd0c50eb7f8337047f6f2326a9834ad4621f80c8d6d549c649ef32d17a9837e5a00c45a7a890e44b85c419b277618bcf93b89ce2e1355abcd2bf740f4fd8b194f0fbfd803f97b6db17cbd4d54c6586efeab8a37bbffc42b9afadfd08af11487952ad0c66303f457fb7dfe81b8e45a4a354a69ae25001d7714a59118c79f5a912a76466fd"})
write$ppp(r0, 0x0, 0x0)

22:46:34 executing program 2:
openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0)
write$ppp(r0, &(0x7f00000002c0)="d3", 0x1)

22:46:34 executing program 2:
openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0) (async)
r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0)
write$ppp(r0, &(0x7f00000002c0)="d3", 0x1)

[ 2800.826362][ T4905]  vfs_write+0x4ab/0x7d0
[ 2800.830719][ T4905]  ksys_write+0xeb/0x1a0
[ 2800.835079][ T4905]  __x64_sys_write+0x42/0x50
[ 2800.839682][ T4905]  do_syscall_64+0x41/0xc0
[ 2800.844239][ T4905]  entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 2800.850183][ T4905] RIP: 0033:0x7f90e4a54ae9
[ 2800.854603][ T4905] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48
22:46:34 executing program 2:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0)
write$ppp(r0, &(0x7f00000002c0)="d3", 0x1)

22:46:34 executing program 2:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0)
write$ppp(r0, &(0x7f00000002c0)="d3", 0x1)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) (async)
write$ppp(r0, &(0x7f00000002c0)="d3", 0x1) (async)

22:46:35 executing program 2:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0)
write$ppp(r0, &(0x7f00000002c0)="d3", 0x1)

22:46:35 executing program 4:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
pipe2$9p(&(0x7f00000000c0)={<r1=>0xffffffffffffffff}, 0x80)
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs2/custom1\x00', 0x2, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x70, 0x0, &(0x7f0000000200)=[@acquire_done={0x40106309, 0x1}, @reply={0x40406301, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000140)={@ptr={0x70742a85, 0x1, &(0x7f0000000000)=""/69, 0x45, 0x2, 0x2e}, @fd={0x66642a85, 0x0, r1}, @fd={0x66642a85, 0x0, r2}}, &(0x7f00000001c0)={0x0, 0x28, 0x40}}}, @clear_death={0x400c630f, 0x3}, @acquire={0x40046305, 0x2}], 0xb6, 0x0, &(0x7f0000000280)="641a30e437b91e16eebcbd191c31254b916628520d35de2d040615a09f7dc74acc45806bc9ddacb0ea4afbeb2b2413211263dd0c50eb7f8337047f6f2326a9834ad4621f80c8d6d549c649ef32d17a9837e5a00c45a7a890e44b85c419b277618bcf93b89ce2e1355abcd2bf740f4fd8b194f0fbfd803f97b6db17cbd4d54c6586efeab8a37bbffc42b9afadfd08af11487952ad0c66303f457fb7dfe81b8e45a4a354a69ae25001d7714a59118c79f5a912a76466fd"}) (async)
write$ppp(r0, 0x0, 0x0)

22:46:35 executing program 1:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5ae001, 0x0)
write$ppp(r0, 0x0, 0xeffdffff)

[ 2800.874298][ T4905] RSP: 002b:00007f90e3dd70c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 2800.882778][ T4905] RAX: ffffffffffffffda RBX: 00007f90e4b73f80 RCX: 00007f90e4a54ae9
[ 2800.890756][ T4905] RDX: 00000000001f4f33 RSI: 00000000200002c0 RDI: 0000000000000003
[ 2800.898773][ T4905] RBP: 00007f90e3dd7120 R08: 0000000000000000 R09: 0000000000000000
[ 2800.906776][ T4905] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 2800.914813][ T4905] R13: 000000000000000b R14: 00007f90e4b73f80 R15: 00007ffdb3bfd028
[ 2800.922910][ T4905]  </TASK>
22:46:35 executing program 0:
r0 = socket$tipc(0x1e, 0x2, 0x0)
getsockopt$TIPC_IMPORTANCE(r0, 0x10f, 0x7f, &(0x7f0000000000), &(0x7f0000000040)=0x4)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
write$ppp(r1, 0x0, 0xeffdffffffffffff)

22:46:35 executing program 5:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
write$ppp(r0, &(0x7f00000002c0)="d3", 0x1f4f33) (fail_nth: 35)

22:46:35 executing program 2:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x57e603, 0x0)
write$ppp(r0, &(0x7f00000002c0)="d3", 0x1)

22:46:35 executing program 1:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5ae001, 0x0)
write$ppp(r0, 0x0, 0xeffdffff)

22:46:35 executing program 4:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
pipe2$9p(&(0x7f00000000c0), 0x80) (async)
pipe2$9p(&(0x7f00000000c0)={<r1=>0xffffffffffffffff}, 0x80)
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs2/custom1\x00', 0x2, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x70, 0x0, &(0x7f0000000200)=[@acquire_done={0x40106309, 0x1}, @reply={0x40406301, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000140)={@ptr={0x70742a85, 0x1, &(0x7f0000000000)=""/69, 0x45, 0x2, 0x2e}, @fd={0x66642a85, 0x0, r1}, @fd={0x66642a85, 0x0, r2}}, &(0x7f00000001c0)={0x0, 0x28, 0x40}}}, @clear_death={0x400c630f, 0x3}, @acquire={0x40046305, 0x2}], 0xb6, 0x0, &(0x7f0000000280)="641a30e437b91e16eebcbd191c31254b916628520d35de2d040615a09f7dc74acc45806bc9ddacb0ea4afbeb2b2413211263dd0c50eb7f8337047f6f2326a9834ad4621f80c8d6d549c649ef32d17a9837e5a00c45a7a890e44b85c419b277618bcf93b89ce2e1355abcd2bf740f4fd8b194f0fbfd803f97b6db17cbd4d54c6586efeab8a37bbffc42b9afadfd08af11487952ad0c66303f457fb7dfe81b8e45a4a354a69ae25001d7714a59118c79f5a912a76466fd"})
write$ppp(r0, 0x0, 0x0)

22:46:35 executing program 3:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(r0, 0x10f, 0x86) (async, rerun: 64)
r1 = socket$can_j1939(0x1d, 0x2, 0x7) (rerun: 64)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000180)={'vcan0\x00', <r2=>0x0})
bind$can_j1939(r1, &(0x7f00000001c0)={0x1d, r2, 0x0, {0x1}}, 0x18) (async)
connect$can_j1939(r0, &(0x7f0000000000)={0x1d, r2, 0x0, {0x0, 0x1, 0x2}, 0xfe}, 0x18)
r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0) (async, rerun: 32)
ioctl$TUNSETLINK(r0, 0x400454cd, 0x302) (rerun: 32)
write$ppp(r3, &(0x7f00000002c0)="d3", 0xfffffdef)
ioctl$LOOP_SET_CAPACITY(r3, 0x4c07)

22:46:35 executing program 0:
r0 = socket$tipc(0x1e, 0x2, 0x0)
getsockopt$TIPC_IMPORTANCE(r0, 0x10f, 0x7f, &(0x7f0000000000), &(0x7f0000000040)=0x4)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
write$ppp(r1, 0x0, 0xeffdffffffffffff)

22:46:35 executing program 1:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5ae001, 0x0)
write$ppp(r0, 0x0, 0xeffdffff)

22:46:35 executing program 1:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x44a103, 0x0)
write$ppp(r0, 0x0, 0x0)

22:46:35 executing program 0:
r0 = socket$tipc(0x1e, 0x2, 0x0)
getsockopt$TIPC_IMPORTANCE(r0, 0x10f, 0x7f, &(0x7f0000000000), &(0x7f0000000040)=0x4) (async)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
write$ppp(r1, 0x0, 0xeffdffffffffffff)

[ 2801.885291][ T4942] FAULT_INJECTION: forcing a failure.
[ 2801.885291][ T4942] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 2801.898493][ T4942] CPU: 0 PID: 4942 Comm: syz-executor.5 Not tainted 6.6.0-rc3-syzkaller-00165-g3b517966c561 #0
[ 2801.908840][ T4942] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/06/2023
[ 2801.918922][ T4942] Call Trace:
[ 2801.922240][ T4942]  <TASK>
[ 2801.925176][ T4942]  dump_stack_lvl+0xda/0x130
[ 2801.929781][ T4942]  dump_stack+0x15/0x20
22:46:36 executing program 1:
openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x44a103, 0x0) (async)
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x44a103, 0x0)
write$ppp(r0, 0x0, 0x0)

22:46:36 executing program 0:
write$ppp(0xffffffffffffffff, 0x0, 0xeffdffffffffffff)

[ 2801.933942][ T4942]  should_fail_ex+0x21f/0x230
[ 2801.938664][ T4942]  should_fail+0xb/0x10
[ 2801.942895][ T4942]  should_fail_usercopy+0x1a/0x20
[ 2801.948009][ T4942]  copy_page_from_iter_atomic+0x21c/0xcf0
[ 2801.953813][ T4942]  ? shmem_write_begin+0xa6/0x210
[ 2801.958926][ T4942]  ? shmem_write_begin+0x16d/0x210
[ 2801.964080][ T4942]  generic_perform_write+0x20c/0x410
[ 2801.969392][ T4942]  ? shmem_write_begin+0x210/0x210
[ 2801.974546][ T4942]  shmem_file_write_iter+0xc8/0xe0
[ 2801.979684][ T4942]  vfs_write+0x4ab/0x7d0
22:46:36 executing program 0:
write$ppp(0xffffffffffffffff, 0x0, 0xeffdffffffffffff)

[ 2801.983978][ T4942]  ksys_write+0xeb/0x1a0
[ 2801.988317][ T4942]  __x64_sys_write+0x42/0x50
[ 2801.992926][ T4942]  do_syscall_64+0x41/0xc0
[ 2801.997382][ T4942]  entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 2802.003298][ T4942] RIP: 0033:0x7f90e4a54ae9
[ 2802.007713][ T4942] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48
[ 2802.027410][ T4942] RSP: 002b:00007f90e3dd70c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
22:46:36 executing program 5:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
write$ppp(r0, &(0x7f00000002c0)="d3", 0x1f4f33) (fail_nth: 36)

22:46:36 executing program 2:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x57e603, 0x0)
write$ppp(r0, &(0x7f00000002c0)="d3", 0x1)

22:46:36 executing program 3:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(r1, 0x10f, 0x86)
setsockopt$TIPC_DEST_DROPPABLE(r1, 0x10f, 0x81, &(0x7f0000000000)=0x2, 0x4)
write$ppp(r0, &(0x7f00000002c0)="d3", 0xfffffdef)

22:46:36 executing program 0:
write$ppp(0xffffffffffffffff, 0x0, 0xeffdffffffffffff)

22:46:36 executing program 1:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x44a103, 0x0)
write$ppp(r0, 0x0, 0x0)

22:46:36 executing program 4:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x546441, 0x0)
ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f00000000c0)={'veth0\x00'})
write$ppp(r0, 0x0, 0x0)
getsockopt$TIPC_SRC_DROPPABLE(r0, 0x10f, 0x80, &(0x7f0000000000), &(0x7f0000000040)=0x4)
syz_io_uring_setup(0x4b31, &(0x7f0000000280)={0x0, 0x9bb0, 0x0, 0x0, 0x16e}, &(0x7f0000000300)=<r1=>0x0, &(0x7f0000000340))
r2 = syz_open_dev$loop(&(0x7f0000000380), 0x6, 0x80000)
syz_io_uring_submit(r1, 0x0, &(0x7f00000003c0)=@IORING_OP_FSYNC={0x3, 0x20, 0x0, @fd=r2, 0x0, 0x0, 0x0, 0x0, 0x1})
r3 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x4021871, 0xffffffffffffffff, 0x10000000)
syz_io_uring_setup(0x237a, &(0x7f0000000080)={0x0, 0x50dc}, &(0x7f0000000000)=<r4=>0x0, &(0x7f0000000100))
syz_io_uring_submit(r4, r3, &(0x7f0000000140)=@IORING_OP_POLL_REMOVE)
syz_io_uring_submit(r1, r3, &(0x7f0000000140)=@IORING_OP_SEND={0x1a, 0x10, 0x0, r0, 0x0, &(0x7f0000000100)="c494298441e56d53abf850b1a7558aeea9b740db4013d2c54171f4e98dbfb32509a5869d774a4c5110a471", 0x2b, 0x0, 0x1})

[ 2802.035844][ T4942] RAX: ffffffffffffffda RBX: 00007f90e4b73f80 RCX: 00007f90e4a54ae9
[ 2802.043848][ T4942] RDX: 00000000001f4f33 RSI: 00000000200002c0 RDI: 0000000000000003
[ 2802.051845][ T4942] RBP: 00007f90e3dd7120 R08: 0000000000000000 R09: 0000000000000000
[ 2802.059881][ T4942] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 2802.067886][ T4942] R13: 000000000000000b R14: 00007f90e4b73f80 R15: 00007ffdb3bfd028
[ 2802.075906][ T4942]  </TASK>
22:46:36 executing program 1:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000040))
write$ppp(r0, 0x0, 0xeffdffff)

22:46:36 executing program 0:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
write$ppp(r0, 0x0, 0xeffdffffffffffff)
ioctl$SIOCGSKNS(r0, 0x894c, &(0x7f0000000100)={'veth1\x00', 0x200})
ioctl$PPPIOCBRIDGECHAN(r0, 0x40047435, &(0x7f0000000000)=0xffffffff)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(r1, 0x10f, 0x86)
getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f00000000c0), &(0x7f0000000140)=0xae33dfc8adcc7ec0)

22:46:36 executing program 2:
openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x57e603, 0x0) (async)
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x57e603, 0x0)
write$ppp(r0, &(0x7f00000002c0)="d3", 0x1)

22:46:36 executing program 4:
openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x546441, 0x0) (async)
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x546441, 0x0)
ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f00000000c0)={'veth0\x00'}) (async)
ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f00000000c0)={'veth0\x00'})
write$ppp(r0, 0x0, 0x0)
getsockopt$TIPC_SRC_DROPPABLE(r0, 0x10f, 0x80, &(0x7f0000000000), &(0x7f0000000040)=0x4)
syz_io_uring_setup(0x4b31, &(0x7f0000000280)={0x0, 0x9bb0, 0x0, 0x0, 0x16e}, &(0x7f0000000300)=<r1=>0x0, &(0x7f0000000340))
r2 = syz_open_dev$loop(&(0x7f0000000380), 0x6, 0x80000)
syz_io_uring_submit(r1, 0x0, &(0x7f00000003c0)=@IORING_OP_FSYNC={0x3, 0x20, 0x0, @fd=r2, 0x0, 0x0, 0x0, 0x0, 0x1})
r3 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x4021871, 0xffffffffffffffff, 0x10000000)
syz_io_uring_setup(0x237a, &(0x7f0000000080)={0x0, 0x50dc}, &(0x7f0000000000)=<r4=>0x0, &(0x7f0000000100))
syz_io_uring_submit(r4, r3, &(0x7f0000000140)=@IORING_OP_POLL_REMOVE)
syz_io_uring_submit(r1, r3, &(0x7f0000000140)=@IORING_OP_SEND={0x1a, 0x10, 0x0, r0, 0x0, &(0x7f0000000100)="c494298441e56d53abf850b1a7558aeea9b740db4013d2c54171f4e98dbfb32509a5869d774a4c5110a471", 0x2b, 0x0, 0x1}) (async)
syz_io_uring_submit(r1, r3, &(0x7f0000000140)=@IORING_OP_SEND={0x1a, 0x10, 0x0, r0, 0x0, &(0x7f0000000100)="c494298441e56d53abf850b1a7558aeea9b740db4013d2c54171f4e98dbfb32509a5869d774a4c5110a471", 0x2b, 0x0, 0x1})

22:46:36 executing program 0:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
write$ppp(r0, 0x0, 0xeffdffffffffffff) (async)
ioctl$SIOCGSKNS(r0, 0x894c, &(0x7f0000000100)={'veth1\x00', 0x200}) (async, rerun: 32)
ioctl$PPPIOCBRIDGECHAN(r0, 0x40047435, &(0x7f0000000000)=0xffffffff) (rerun: 32)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(r1, 0x10f, 0x86)
getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f00000000c0), &(0x7f0000000140)=0xae33dfc8adcc7ec0)

22:46:36 executing program 0:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
write$ppp(r0, 0x0, 0xeffdffffffffffff)
ioctl$SIOCGSKNS(r0, 0x894c, &(0x7f0000000100)={'veth1\x00', 0x200})
ioctl$PPPIOCBRIDGECHAN(r0, 0x40047435, &(0x7f0000000000)=0xffffffff) (async)
ioctl$PPPIOCBRIDGECHAN(r0, 0x40047435, &(0x7f0000000000)=0xffffffff)
openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0) (async)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(r1, 0x10f, 0x86)
getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f00000000c0), &(0x7f0000000140)=0xae33dfc8adcc7ec0)

[ 2802.151151][ T4984] FAULT_INJECTION: forcing a failure.
[ 2802.151151][ T4984] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[ 2802.164485][ T4984] CPU: 0 PID: 4984 Comm: syz-executor.5 Not tainted 6.6.0-rc3-syzkaller-00165-g3b517966c561 #0
[ 2802.174912][ T4984] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/06/2023
[ 2802.184992][ T4984] Call Trace:
[ 2802.188289][ T4984]  <TASK>
[ 2802.191226][ T4984]  dump_stack_lvl+0xda/0x130
[ 2802.195841][ T4984]  dump_stack+0x15/0x20
[ 2802.200082][ T4984]  should_fail_ex+0x21f/0x230
[ 2802.204888][ T4984]  __should_fail_alloc_page+0xfd/0x110
[ 2802.210418][ T4984]  __alloc_pages+0x108/0x340
[ 2802.215055][ T4984]  vma_alloc_folio+0x6a3/0x8c0
[ 2802.219849][ T4984]  ? shmem_inode_acct_block+0x1ee/0x220
[ 2802.225409][ T4984]  shmem_get_folio_gfp+0x579/0xc30
[ 2802.230677][ T4984]  shmem_write_begin+0xa6/0x210
[ 2802.235595][ T4984]  generic_perform_write+0x1c9/0x410
[ 2802.240897][ T4984]  ? shmem_write_begin+0x210/0x210
[ 2802.246104][ T4984]  shmem_file_write_iter+0xc8/0xe0
[ 2802.251324][ T4984]  vfs_write+0x4ab/0x7d0
[ 2802.255595][ T4984]  ksys_write+0xeb/0x1a0
[ 2802.259852][ T4984]  __x64_sys_write+0x42/0x50
[ 2802.264519][ T4984]  do_syscall_64+0x41/0xc0
[ 2802.268950][ T4984]  entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 2802.274922][ T4984] RIP: 0033:0x7f90e4a54ae9
[ 2802.279378][ T4984] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48
22:46:36 executing program 5:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
write$ppp(r0, &(0x7f00000002c0)="d3", 0x1f4f33) (fail_nth: 37)

22:46:36 executing program 0:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x62a342, 0x0)
sendmsg$SEG6_CMD_GET_TUNSRC(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x58, 0x0, 0x4, 0x70bd25, 0x25dfdbfd, {}, [@SEG6_ATTR_SECRET={0x14, 0x4, [0x1f, 0x1000, 0x0, 0x4]}, @SEG6_ATTR_DST={0x14, 0x1, @ipv4={'\x00', '\xff\xff', @multicast1}}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x3}, @SEG6_ATTR_DST={0x14, 0x1, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000000}, 0x4008014)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
write$ppp(r1, 0x0, 0xeffdffffffffffff)

22:46:36 executing program 4:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x546441, 0x0)
ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f00000000c0)={'veth0\x00'}) (async)
write$ppp(r0, 0x0, 0x0) (async)
getsockopt$TIPC_SRC_DROPPABLE(r0, 0x10f, 0x80, &(0x7f0000000000), &(0x7f0000000040)=0x4) (async)
syz_io_uring_setup(0x4b31, &(0x7f0000000280)={0x0, 0x9bb0, 0x0, 0x0, 0x16e}, &(0x7f0000000300)=<r1=>0x0, &(0x7f0000000340)) (async)
r2 = syz_open_dev$loop(&(0x7f0000000380), 0x6, 0x80000)
syz_io_uring_submit(r1, 0x0, &(0x7f00000003c0)=@IORING_OP_FSYNC={0x3, 0x20, 0x0, @fd=r2, 0x0, 0x0, 0x0, 0x0, 0x1})
r3 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x4021871, 0xffffffffffffffff, 0x10000000) (async)
syz_io_uring_setup(0x237a, &(0x7f0000000080)={0x0, 0x50dc}, &(0x7f0000000000)=<r4=>0x0, &(0x7f0000000100))
syz_io_uring_submit(r4, r3, &(0x7f0000000140)=@IORING_OP_POLL_REMOVE)
syz_io_uring_submit(r1, r3, &(0x7f0000000140)=@IORING_OP_SEND={0x1a, 0x10, 0x0, r0, 0x0, &(0x7f0000000100)="c494298441e56d53abf850b1a7558aeea9b740db4013d2c54171f4e98dbfb32509a5869d774a4c5110a471", 0x2b, 0x0, 0x1})

22:46:36 executing program 3:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(r1, 0x10f, 0x86)
setsockopt$TIPC_DEST_DROPPABLE(r1, 0x10f, 0x81, &(0x7f0000000000)=0x2, 0x4)
write$ppp(r0, &(0x7f00000002c0)="d3", 0xfffffdef)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0) (async)
openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0) (async)
setsockopt$TIPC_MCAST_REPLICAST(r1, 0x10f, 0x86) (async)
setsockopt$TIPC_DEST_DROPPABLE(r1, 0x10f, 0x81, &(0x7f0000000000)=0x2, 0x4) (async)
write$ppp(r0, &(0x7f00000002c0)="d3", 0xfffffdef) (async)

22:46:36 executing program 1:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000040)) (async)
write$ppp(r0, 0x0, 0xeffdffff)

22:46:36 executing program 2:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x80200, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
write$ppp(r0, &(0x7f00000002c0)="d3", 0x1)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(r1, 0x10f, 0x86)
sendmsg$AUDIT_DEL_RULE(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000300)={0x44c, 0x3f4, 0x20, 0x70bd2c, 0x25dfdbff, {0x4, 0x0, 0x32, [0xfffffffa, 0x3, 0x0, 0x7, 0x7, 0x80000001, 0x5, 0x0, 0xffff, 0x6, 0x1, 0x3f, 0xf822, 0x7f, 0x4, 0x0, 0x2, 0xffffffae, 0xfffff7e6, 0x9, 0x3, 0xbed, 0x527b, 0x101, 0x80000000, 0x1f, 0x8, 0x6, 0xc4, 0x1, 0x4, 0x8, 0xd2, 0x101, 0x0, 0x200, 0x3, 0x20, 0x7, 0x2, 0x3, 0x443, 0x4, 0xffffffa4, 0x5, 0x401, 0xfffffffc, 0x7, 0x80000001, 0xd7, 0x2, 0x3b, 0x20, 0x2, 0x3, 0xfffffffc, 0x7f, 0x1000, 0x8, 0x40, 0x67af, 0x3, 0x5a, 0x7ff], [0x1, 0x9, 0x7, 0x7ff, 0x7, 0x8, 0x40, 0x9, 0x38, 0x1000, 0x8, 0x9, 0x1, 0x4, 0x3, 0x3, 0x8, 0xd67c, 0x6, 0x153a, 0x3ff, 0x0, 0x8, 0x7, 0x7fffffff, 0x7, 0x6, 0x1, 0x38ed, 0x2936833b, 0x7, 0x8, 0x7ff, 0xcc60, 0x80, 0x1, 0x10001, 0x6, 0x1f, 0x0, 0x4, 0x0, 0xcce3, 0x100, 0x6, 0xa5, 0x7fff, 0x4, 0x236, 0x5532, 0x1bd6, 0x7, 0x6, 0x6, 0x80000001, 0xe64a491, 0x9, 0x10001, 0xf5, 0x3, 0x0, 0x6, 0xa62, 0x4], [0x6, 0x520c, 0x2, 0x8, 0x374, 0x3, 0xfff, 0x681, 0x9, 0x8, 0x10000, 0xf15, 0x8, 0x3f, 0x3ff, 0x1, 0x5, 0x6bc, 0x79d, 0x3, 0x8, 0x7fffffff, 0x5, 0xff, 0x9, 0x2, 0x9, 0x4, 0x5, 0x5, 0x9, 0x81, 0x3ff, 0x1, 0x5, 0xfffffff7, 0xd92, 0x7ff, 0x0, 0xff, 0x101, 0x182, 0x80000001, 0x10000, 0x1, 0x9, 0x80000000, 0x8, 0x5, 0x69b3, 0x0, 0x4, 0x8, 0x6, 0x61e, 0x9, 0x0, 0xa7, 0x7, 0x2b, 0x6, 0x8, 0x10000, 0x9], [0x8319, 0x4, 0x10001, 0x8, 0x1, 0xfffff001, 0x7, 0x58, 0xfffffffc, 0x800, 0x1, 0x0, 0x7fff, 0x5, 0x2, 0x2, 0x2, 0x1, 0x5, 0x1, 0x200, 0x4, 0x5e, 0x1a1, 0x2, 0x4, 0x4, 0x1, 0x80000000, 0x4, 0x6, 0x8001, 0x599, 0x0, 0x5, 0x4, 0x3ff, 0x2, 0x5, 0x400, 0xcc5a, 0x80000001, 0x0, 0x7, 0x4, 0x2, 0x1, 0x2, 0x0, 0x80000000, 0xf6af, 0x6, 0x0, 0xff, 0x4, 0xb4, 0x6, 0x8, 0x80000000, 0x2, 0x8, 0x10001, 0x7, 0xedc], 0x2a, ['/dev/bsg\x00', ',\x00', '&)%\x00', '/dev/bsg\x00', ']\x00', '-\\\'-H\x00', '/dev/bsg\x00', '\x00']}, ["", "", "", "", ""]}, 0x44c}, 0x1, 0x0, 0x0, 0x20040800}, 0x48000)
ioctl$PPPIOCBRIDGECHAN(r0, 0x40047435, &(0x7f0000000040))
ioctl$PPPIOCGIDLE32(r1, 0x8008743f, &(0x7f0000000140))

[ 2802.299096][ T4984] RSP: 002b:00007f90e3dd70c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 2802.307608][ T4984] RAX: ffffffffffffffda RBX: 00007f90e4b73f80 RCX: 00007f90e4a54ae9
[ 2802.315641][ T4984] RDX: 00000000001f4f33 RSI: 00000000200002c0 RDI: 0000000000000003
[ 2802.323675][ T4984] RBP: 00007f90e3dd7120 R08: 0000000000000000 R09: 0000000000000000
[ 2802.331752][ T4984] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 2802.339744][ T4984] R13: 000000000000000b R14: 00007f90e4b73f80 R15: 00007ffdb3bfd028
[ 2802.347735][ T4984]  </TASK>
22:46:36 executing program 0:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x62a342, 0x0)
sendmsg$SEG6_CMD_GET_TUNSRC(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x58, 0x0, 0x4, 0x70bd25, 0x25dfdbfd, {}, [@SEG6_ATTR_SECRET={0x14, 0x4, [0x1f, 0x1000, 0x0, 0x4]}, @SEG6_ATTR_DST={0x14, 0x1, @ipv4={'\x00', '\xff\xff', @multicast1}}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x3}, @SEG6_ATTR_DST={0x14, 0x1, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000000}, 0x4008014)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
write$ppp(r1, 0x0, 0xeffdffffffffffff)

22:46:36 executing program 4:
r0 = accept4$tipc(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)=0x10, 0x80800)
ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, r0)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x121842, 0x0)
write$ppp(r1, 0x0, 0x0)

22:46:36 executing program 2:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x80200, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0) (async, rerun: 32)
write$ppp(r0, &(0x7f00000002c0)="d3", 0x1) (async, rerun: 32)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(r1, 0x10f, 0x86)
sendmsg$AUDIT_DEL_RULE(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000300)={0x44c, 0x3f4, 0x20, 0x70bd2c, 0x25dfdbff, {0x4, 0x0, 0x32, [0xfffffffa, 0x3, 0x0, 0x7, 0x7, 0x80000001, 0x5, 0x0, 0xffff, 0x6, 0x1, 0x3f, 0xf822, 0x7f, 0x4, 0x0, 0x2, 0xffffffae, 0xfffff7e6, 0x9, 0x3, 0xbed, 0x527b, 0x101, 0x80000000, 0x1f, 0x8, 0x6, 0xc4, 0x1, 0x4, 0x8, 0xd2, 0x101, 0x0, 0x200, 0x3, 0x20, 0x7, 0x2, 0x3, 0x443, 0x4, 0xffffffa4, 0x5, 0x401, 0xfffffffc, 0x7, 0x80000001, 0xd7, 0x2, 0x3b, 0x20, 0x2, 0x3, 0xfffffffc, 0x7f, 0x1000, 0x8, 0x40, 0x67af, 0x3, 0x5a, 0x7ff], [0x1, 0x9, 0x7, 0x7ff, 0x7, 0x8, 0x40, 0x9, 0x38, 0x1000, 0x8, 0x9, 0x1, 0x4, 0x3, 0x3, 0x8, 0xd67c, 0x6, 0x153a, 0x3ff, 0x0, 0x8, 0x7, 0x7fffffff, 0x7, 0x6, 0x1, 0x38ed, 0x2936833b, 0x7, 0x8, 0x7ff, 0xcc60, 0x80, 0x1, 0x10001, 0x6, 0x1f, 0x0, 0x4, 0x0, 0xcce3, 0x100, 0x6, 0xa5, 0x7fff, 0x4, 0x236, 0x5532, 0x1bd6, 0x7, 0x6, 0x6, 0x80000001, 0xe64a491, 0x9, 0x10001, 0xf5, 0x3, 0x0, 0x6, 0xa62, 0x4], [0x6, 0x520c, 0x2, 0x8, 0x374, 0x3, 0xfff, 0x681, 0x9, 0x8, 0x10000, 0xf15, 0x8, 0x3f, 0x3ff, 0x1, 0x5, 0x6bc, 0x79d, 0x3, 0x8, 0x7fffffff, 0x5, 0xff, 0x9, 0x2, 0x9, 0x4, 0x5, 0x5, 0x9, 0x81, 0x3ff, 0x1, 0x5, 0xfffffff7, 0xd92, 0x7ff, 0x0, 0xff, 0x101, 0x182, 0x80000001, 0x10000, 0x1, 0x9, 0x80000000, 0x8, 0x5, 0x69b3, 0x0, 0x4, 0x8, 0x6, 0x61e, 0x9, 0x0, 0xa7, 0x7, 0x2b, 0x6, 0x8, 0x10000, 0x9], [0x8319, 0x4, 0x10001, 0x8, 0x1, 0xfffff001, 0x7, 0x58, 0xfffffffc, 0x800, 0x1, 0x0, 0x7fff, 0x5, 0x2, 0x2, 0x2, 0x1, 0x5, 0x1, 0x200, 0x4, 0x5e, 0x1a1, 0x2, 0x4, 0x4, 0x1, 0x80000000, 0x4, 0x6, 0x8001, 0x599, 0x0, 0x5, 0x4, 0x3ff, 0x2, 0x5, 0x400, 0xcc5a, 0x80000001, 0x0, 0x7, 0x4, 0x2, 0x1, 0x2, 0x0, 0x80000000, 0xf6af, 0x6, 0x0, 0xff, 0x4, 0xb4, 0x6, 0x8, 0x80000000, 0x2, 0x8, 0x10001, 0x7, 0xedc], 0x2a, ['/dev/bsg\x00', ',\x00', '&)%\x00', '/dev/bsg\x00', ']\x00', '-\\\'-H\x00', '/dev/bsg\x00', '\x00']}, ["", "", "", "", ""]}, 0x44c}, 0x1, 0x0, 0x0, 0x20040800}, 0x48000) (async)
ioctl$PPPIOCBRIDGECHAN(r0, 0x40047435, &(0x7f0000000040)) (async, rerun: 32)
ioctl$PPPIOCGIDLE32(r1, 0x8008743f, &(0x7f0000000140)) (rerun: 32)

22:46:36 executing program 4:
r0 = accept4$tipc(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)=0x10, 0x80800)
ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, r0)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x121842, 0x0) (async)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x121842, 0x0)
write$ppp(r1, 0x0, 0x0)

22:46:36 executing program 1:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000040)) (async)
write$ppp(r0, 0x0, 0xeffdffff)

22:46:36 executing program 0:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x62a342, 0x0)
sendmsg$SEG6_CMD_GET_TUNSRC(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x58, 0x0, 0x4, 0x70bd25, 0x25dfdbfd, {}, [@SEG6_ATTR_SECRET={0x14, 0x4, [0x1f, 0x1000, 0x0, 0x4]}, @SEG6_ATTR_DST={0x14, 0x1, @ipv4={'\x00', '\xff\xff', @multicast1}}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x3}, @SEG6_ATTR_DST={0x14, 0x1, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000000}, 0x4008014) (async)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
write$ppp(r1, 0x0, 0xeffdffffffffffff)

[ 2802.442686][ T5025] FAULT_INJECTION: forcing a failure.
[ 2802.442686][ T5025] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 2802.455854][ T5025] CPU: 0 PID: 5025 Comm: syz-executor.5 Not tainted 6.6.0-rc3-syzkaller-00165-g3b517966c561 #0
[ 2802.466200][ T5025] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/06/2023
[ 2802.476271][ T5025] Call Trace:
[ 2802.479580][ T5025]  <TASK>
[ 2802.482532][ T5025]  dump_stack_lvl+0xda/0x130
[ 2802.487257][ T5025]  dump_stack+0x15/0x20
[ 2802.491424][ T5025]  should_fail_ex+0x21f/0x230
[ 2802.496127][ T5025]  should_fail+0xb/0x10
[ 2802.500334][ T5025]  should_fail_usercopy+0x1a/0x20
[ 2802.505421][ T5025]  copy_page_from_iter_atomic+0x21c/0xcf0
[ 2802.511206][ T5025]  ? shmem_write_begin+0xa6/0x210
[ 2802.516259][ T5025]  ? shmem_write_begin+0x16d/0x210
[ 2802.521467][ T5025]  generic_perform_write+0x20c/0x410
[ 2802.526813][ T5025]  ? shmem_write_begin+0x210/0x210
[ 2802.531973][ T5025]  shmem_file_write_iter+0xc8/0xe0
[ 2802.537159][ T5025]  vfs_write+0x4ab/0x7d0
[ 2802.541477][ T5025]  ksys_write+0xeb/0x1a0
[ 2802.545747][ T5025]  __x64_sys_write+0x42/0x50
[ 2802.550441][ T5025]  do_syscall_64+0x41/0xc0
[ 2802.554890][ T5025]  entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 2802.560817][ T5025] RIP: 0033:0x7f90e4a54ae9
[ 2802.565239][ T5025] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48
[ 2802.584925][ T5025] RSP: 002b:00007f90e3dd70c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
22:46:36 executing program 1:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(r0, 0x10f, 0x86)
sendmsg$AUDIT_SET_FEATURE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x20, 0x3fa, 0x400, 0x70bd26, 0x25dfdbfb, {0x1, 0x0, 0x1, 0x1}, ["", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x40)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
ioctl$sock_inet_tcp_SIOCOUTQNSD(r2, 0x894b, &(0x7f0000000080))
write$ppp(r1, 0x0, 0xeffdffff)

22:46:36 executing program 4:
r0 = accept4$tipc(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)=0x10, 0x80800)
ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, r0)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x121842, 0x0)
write$ppp(r1, 0x0, 0x0)
accept4$tipc(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)=0x10, 0x80800) (async)
ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, r0) (async)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x121842, 0x0) (async)
write$ppp(r1, 0x0, 0x0) (async)

22:46:36 executing program 2:
openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x80200, 0x0) (async)
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x80200, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
write$ppp(r0, &(0x7f00000002c0)="d3", 0x1)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(r1, 0x10f, 0x86) (async)
setsockopt$TIPC_MCAST_REPLICAST(r1, 0x10f, 0x86)
sendmsg$AUDIT_DEL_RULE(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000300)={0x44c, 0x3f4, 0x20, 0x70bd2c, 0x25dfdbff, {0x4, 0x0, 0x32, [0xfffffffa, 0x3, 0x0, 0x7, 0x7, 0x80000001, 0x5, 0x0, 0xffff, 0x6, 0x1, 0x3f, 0xf822, 0x7f, 0x4, 0x0, 0x2, 0xffffffae, 0xfffff7e6, 0x9, 0x3, 0xbed, 0x527b, 0x101, 0x80000000, 0x1f, 0x8, 0x6, 0xc4, 0x1, 0x4, 0x8, 0xd2, 0x101, 0x0, 0x200, 0x3, 0x20, 0x7, 0x2, 0x3, 0x443, 0x4, 0xffffffa4, 0x5, 0x401, 0xfffffffc, 0x7, 0x80000001, 0xd7, 0x2, 0x3b, 0x20, 0x2, 0x3, 0xfffffffc, 0x7f, 0x1000, 0x8, 0x40, 0x67af, 0x3, 0x5a, 0x7ff], [0x1, 0x9, 0x7, 0x7ff, 0x7, 0x8, 0x40, 0x9, 0x38, 0x1000, 0x8, 0x9, 0x1, 0x4, 0x3, 0x3, 0x8, 0xd67c, 0x6, 0x153a, 0x3ff, 0x0, 0x8, 0x7, 0x7fffffff, 0x7, 0x6, 0x1, 0x38ed, 0x2936833b, 0x7, 0x8, 0x7ff, 0xcc60, 0x80, 0x1, 0x10001, 0x6, 0x1f, 0x0, 0x4, 0x0, 0xcce3, 0x100, 0x6, 0xa5, 0x7fff, 0x4, 0x236, 0x5532, 0x1bd6, 0x7, 0x6, 0x6, 0x80000001, 0xe64a491, 0x9, 0x10001, 0xf5, 0x3, 0x0, 0x6, 0xa62, 0x4], [0x6, 0x520c, 0x2, 0x8, 0x374, 0x3, 0xfff, 0x681, 0x9, 0x8, 0x10000, 0xf15, 0x8, 0x3f, 0x3ff, 0x1, 0x5, 0x6bc, 0x79d, 0x3, 0x8, 0x7fffffff, 0x5, 0xff, 0x9, 0x2, 0x9, 0x4, 0x5, 0x5, 0x9, 0x81, 0x3ff, 0x1, 0x5, 0xfffffff7, 0xd92, 0x7ff, 0x0, 0xff, 0x101, 0x182, 0x80000001, 0x10000, 0x1, 0x9, 0x80000000, 0x8, 0x5, 0x69b3, 0x0, 0x4, 0x8, 0x6, 0x61e, 0x9, 0x0, 0xa7, 0x7, 0x2b, 0x6, 0x8, 0x10000, 0x9], [0x8319, 0x4, 0x10001, 0x8, 0x1, 0xfffff001, 0x7, 0x58, 0xfffffffc, 0x800, 0x1, 0x0, 0x7fff, 0x5, 0x2, 0x2, 0x2, 0x1, 0x5, 0x1, 0x200, 0x4, 0x5e, 0x1a1, 0x2, 0x4, 0x4, 0x1, 0x80000000, 0x4, 0x6, 0x8001, 0x599, 0x0, 0x5, 0x4, 0x3ff, 0x2, 0x5, 0x400, 0xcc5a, 0x80000001, 0x0, 0x7, 0x4, 0x2, 0x1, 0x2, 0x0, 0x80000000, 0xf6af, 0x6, 0x0, 0xff, 0x4, 0xb4, 0x6, 0x8, 0x80000000, 0x2, 0x8, 0x10001, 0x7, 0xedc], 0x2a, ['/dev/bsg\x00', ',\x00', '&)%\x00', '/dev/bsg\x00', ']\x00', '-\\\'-H\x00', '/dev/bsg\x00', '\x00']}, ["", "", "", "", ""]}, 0x44c}, 0x1, 0x0, 0x0, 0x20040800}, 0x48000)
ioctl$PPPIOCBRIDGECHAN(r0, 0x40047435, &(0x7f0000000040))
ioctl$PPPIOCGIDLE32(r1, 0x8008743f, &(0x7f0000000140))

22:46:36 executing program 0:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
write$ppp(r0, 0x0, 0xeffdffffffffffff)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu/syz1\x00', 0x200002, 0x0)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x30b980, 0x0)
ioctl$LOOP_SET_BLOCK_SIZE(r1, 0x4c09, 0x4)
r2 = socket$tipc(0x1e, 0x65c29c943183951c, 0x0)
getsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000100), &(0x7f0000000140)=0x4)
ioctl$PPPIOCGIDLE64(r0, 0x8010743f, &(0x7f0000000000))

22:46:36 executing program 3:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0) (async)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(r1, 0x10f, 0x86)
setsockopt$TIPC_DEST_DROPPABLE(r1, 0x10f, 0x81, &(0x7f0000000000)=0x2, 0x4) (async)
write$ppp(r0, &(0x7f00000002c0)="d3", 0xfffffdef)

22:46:36 executing program 5:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
write$ppp(r0, &(0x7f00000002c0)="d3", 0x1f4f33) (fail_nth: 38)

[ 2802.593417][ T5025] RAX: ffffffffffffffda RBX: 00007f90e4b73f80 RCX: 00007f90e4a54ae9
[ 2802.601808][ T5025] RDX: 00000000001f4f33 RSI: 00000000200002c0 RDI: 0000000000000003
[ 2802.609800][ T5025] RBP: 00007f90e3dd7120 R08: 0000000000000000 R09: 0000000000000000
[ 2802.617802][ T5025] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 2802.625787][ T5025] R13: 000000000000000b R14: 00007f90e4b73f80 R15: 00007ffdb3bfd028
[ 2802.633773][ T5025]  </TASK>
22:46:36 executing program 1:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(r0, 0x10f, 0x86) (async, rerun: 64)
sendmsg$AUDIT_SET_FEATURE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x20, 0x3fa, 0x400, 0x70bd26, 0x25dfdbfb, {0x1, 0x0, 0x1, 0x1}, ["", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x40) (rerun: 64)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
ioctl$sock_inet_tcp_SIOCOUTQNSD(r2, 0x894b, &(0x7f0000000080)) (async)
write$ppp(r1, 0x0, 0xeffdffff)

22:46:36 executing program 0:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
write$ppp(r0, 0x0, 0xeffdffffffffffff) (async)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) (async)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x30b980, 0x0)
ioctl$LOOP_SET_BLOCK_SIZE(r1, 0x4c09, 0x4)
r2 = socket$tipc(0x1e, 0x65c29c943183951c, 0x0)
getsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000100), &(0x7f0000000140)=0x4) (async)
ioctl$PPPIOCGIDLE64(r0, 0x8010743f, &(0x7f0000000000))

22:46:36 executing program 4:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x88101, 0x0)
write$ppp(r0, 0x0, 0x0)

22:46:36 executing program 2:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), r0)
sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)={0x1c, r1, 0x0, 0x70bd28, 0x25dfdbfc, {}, [@L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x7f}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4008040}, 0xc0)
write$ppp(r0, &(0x7f00000002c0)="d3", 0x1)

22:46:36 executing program 4:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x88101, 0x0) (async)
write$ppp(r0, 0x0, 0x0)

[ 2802.688478][ T5054] FAULT_INJECTION: forcing a failure.
[ 2802.688478][ T5054] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[ 2802.701734][ T5054] CPU: 1 PID: 5054 Comm: syz-executor.5 Not tainted 6.6.0-rc3-syzkaller-00165-g3b517966c561 #0
[ 2802.712136][ T5054] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/06/2023
[ 2802.722297][ T5054] Call Trace:
[ 2802.725696][ T5054]  <TASK>
[ 2802.728655][ T5054]  dump_stack_lvl+0xda/0x130
[ 2802.733318][ T5054]  dump_stack+0x15/0x20
[ 2802.737492][ T5054]  should_fail_ex+0x21f/0x230
[ 2802.742185][ T5054]  __should_fail_alloc_page+0xfd/0x110
[ 2802.747710][ T5054]  __alloc_pages+0x108/0x340
[ 2802.752566][ T5054]  vma_alloc_folio+0x6a3/0x8c0
[ 2802.757409][ T5054]  ? shmem_inode_acct_block+0x1ee/0x220
[ 2802.762975][ T5054]  shmem_get_folio_gfp+0x579/0xc30
[ 2802.768138][ T5054]  shmem_write_begin+0xa6/0x210
[ 2802.773069][ T5054]  generic_perform_write+0x1c9/0x410
[ 2802.778423][ T5054]  ? shmem_write_begin+0x210/0x210
[ 2802.783567][ T5054]  shmem_file_write_iter+0xc8/0xe0
[ 2802.788789][ T5054]  vfs_write+0x4ab/0x7d0
[ 2802.793131][ T5054]  ksys_write+0xeb/0x1a0
[ 2802.797455][ T5054]  __x64_sys_write+0x42/0x50
[ 2802.802084][ T5054]  do_syscall_64+0x41/0xc0
[ 2802.806575][ T5054]  entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 2802.812571][ T5054] RIP: 0033:0x7f90e4a54ae9
[ 2802.817100][ T5054] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48
22:46:36 executing program 0:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
write$ppp(r0, 0x0, 0xeffdffffffffffff) (async)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) (async, rerun: 64)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x30b980, 0x0) (rerun: 64)
ioctl$LOOP_SET_BLOCK_SIZE(r1, 0x4c09, 0x4)
r2 = socket$tipc(0x1e, 0x65c29c943183951c, 0x0)
getsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000100), &(0x7f0000000140)=0x4)
ioctl$PPPIOCGIDLE64(r0, 0x8010743f, &(0x7f0000000000))

22:46:36 executing program 1:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(r0, 0x10f, 0x86) (async)
sendmsg$AUDIT_SET_FEATURE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x20, 0x3fa, 0x400, 0x70bd26, 0x25dfdbfb, {0x1, 0x0, 0x1, 0x1}, ["", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x40) (async)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0) (async)
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
ioctl$sock_inet_tcp_SIOCOUTQNSD(r2, 0x894b, &(0x7f0000000080)) (async)
write$ppp(r1, 0x0, 0xeffdffff)

22:46:36 executing program 4:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0) (async)
openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x88101, 0x0)
write$ppp(r0, 0x0, 0x0)

22:46:36 executing program 0:
openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(r0, 0x10f, 0x86)
write$ppp(r0, 0x0, 0x0)

22:46:36 executing program 2:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), r0)
sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)={0x1c, r1, 0x0, 0x70bd28, 0x25dfdbfc, {}, [@L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x7f}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4008040}, 0xc0) (async)
write$ppp(r0, &(0x7f00000002c0)="d3", 0x1)

[ 2802.836736][ T5054] RSP: 002b:00007f90e3dd70c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 2802.845232][ T5054] RAX: ffffffffffffffda RBX: 00007f90e4b73f80 RCX: 00007f90e4a54ae9
[ 2802.853232][ T5054] RDX: 00000000001f4f33 RSI: 00000000200002c0 RDI: 0000000000000003
[ 2802.861230][ T5054] RBP: 00007f90e3dd7120 R08: 0000000000000000 R09: 0000000000000000
[ 2802.869204][ T5054] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 2802.877253][ T5054] R13: 000000000000000b R14: 00007f90e4b73f80 R15: 00007ffdb3bfd028
[ 2802.885257][ T5054]  </TASK>
22:46:36 executing program 5:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
write$ppp(r0, &(0x7f00000002c0)="d3", 0x1f4f33) (fail_nth: 39)

[ 2802.948490][ T5090] FAULT_INJECTION: forcing a failure.
[ 2802.948490][ T5090] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 2802.961688][ T5090] CPU: 0 PID: 5090 Comm: syz-executor.5 Not tainted 6.6.0-rc3-syzkaller-00165-g3b517966c561 #0
[ 2802.972022][ T5090] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/06/2023
[ 2802.982063][ T5090] Call Trace:
[ 2802.982072][ T5090]  <TASK>
[ 2802.982080][ T5090]  dump_stack_lvl+0xda/0x130
[ 2802.992926][ T5090]  dump_stack+0x15/0x20
22:46:37 executing program 2:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), r0)
sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)={0x1c, r1, 0x0, 0x70bd28, 0x25dfdbfc, {}, [@L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x7f}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4008040}, 0xc0) (async)
write$ppp(r0, &(0x7f00000002c0)="d3", 0x1)

22:46:37 executing program 4:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
r1 = socket$isdn_base(0x22, 0x3, 0x0)
r2 = openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(r2, 0x10f, 0x86)
ioctl$TUNGETSNDBUF(r2, 0x800454d3, &(0x7f00000000c0))
write$ppp(r0, 0x0, 0x0)
ioctl$IMGETVERSION(r1, 0x80044942, &(0x7f0000000100))
r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$PPPIOCATTACH(r3, 0x4004743d, &(0x7f0000000040)=0x2)

22:46:37 executing program 0:
openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async)
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(r0, 0x10f, 0x86) (async)
write$ppp(r0, 0x0, 0x0)

22:46:37 executing program 1:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
write$ppp(r0, 0x0, 0xeffdffff)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(r1, 0x10f, 0x86)
write$ppp(r1, &(0x7f0000000000)="6956839b035bfee4b69789b64071e0b5189af7a79eb15e08a2868353256e90", 0x1f)

22:46:37 executing program 3:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x20840, 0x0)
ioctl$TUNGETVNETHDRSZ(r1, 0x800454d7, &(0x7f0000000040))
r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080), 0x2400, 0x0)
r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000580), 0xffffffffffffffff)
sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, r3, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [@L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x880}, 0x20)
write$ppp(r0, &(0x7f00000002c0)="d3", 0xfffffdef)
r4 = openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0)
r5 = openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(r5, 0x10f, 0x86)
setsockopt$TIPC_MCAST_REPLICAST(r5, 0x10f, 0x86)
ioctl$PPPIOCSCOMPRESS(r4, 0x4010744d)
r6 = openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x200000, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(r6, 0x10f, 0x86)
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000000c0)={'rose0\x00', 0x1000})

22:46:37 executing program 4:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0) (async)
r1 = socket$isdn_base(0x22, 0x3, 0x0) (async)
r2 = openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(r2, 0x10f, 0x86) (async)
ioctl$TUNGETSNDBUF(r2, 0x800454d3, &(0x7f00000000c0))
write$ppp(r0, 0x0, 0x0) (async)
ioctl$IMGETVERSION(r1, 0x80044942, &(0x7f0000000100)) (async)
r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$PPPIOCATTACH(r3, 0x4004743d, &(0x7f0000000040)=0x2)

22:46:37 executing program 3:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x20840, 0x0)
ioctl$TUNGETVNETHDRSZ(r1, 0x800454d7, &(0x7f0000000040)) (async)
ioctl$TUNGETVNETHDRSZ(r1, 0x800454d7, &(0x7f0000000040))
r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080), 0x2400, 0x0)
r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000580), 0xffffffffffffffff)
sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, r3, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [@L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x880}, 0x20)
write$ppp(r0, &(0x7f00000002c0)="d3", 0xfffffdef) (async)
write$ppp(r0, &(0x7f00000002c0)="d3", 0xfffffdef)
r4 = openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0)
r5 = openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(r5, 0x10f, 0x86)
setsockopt$TIPC_MCAST_REPLICAST(r5, 0x10f, 0x86) (async)
setsockopt$TIPC_MCAST_REPLICAST(r5, 0x10f, 0x86)
ioctl$PPPIOCSCOMPRESS(r4, 0x4010744d)
openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x200000, 0x0) (async)
r6 = openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x200000, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(r6, 0x10f, 0x86) (async)
setsockopt$TIPC_MCAST_REPLICAST(r6, 0x10f, 0x86)
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000000c0)={'rose0\x00', 0x1000})

[ 2802.997097][ T5090]  should_fail_ex+0x21f/0x230
[ 2803.001786][ T5090]  should_fail+0xb/0x10
[ 2803.005976][ T5090]  should_fail_usercopy+0x1a/0x20
[ 2803.011088][ T5090]  copy_page_from_iter_atomic+0x21c/0xcf0
[ 2803.016892][ T5090]  ? shmem_write_begin+0xa6/0x210
[ 2803.022011][ T5090]  ? shmem_write_begin+0x16d/0x210
[ 2803.027294][ T5090]  generic_perform_write+0x20c/0x410
[ 2803.032604][ T5090]  ? shmem_write_begin+0x210/0x210
[ 2803.037838][ T5090]  shmem_file_write_iter+0xc8/0xe0
[ 2803.042957][ T5090]  vfs_write+0x4ab/0x7d0
[ 2803.042986][ T5090]  ksys_write+0xeb/0x1a0
[ 2803.051547][ T5090]  __x64_sys_write+0x42/0x50
[ 2803.056271][ T5090]  do_syscall_64+0x41/0xc0
[ 2803.060717][ T5090]  entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 2803.066702][ T5090] RIP: 0033:0x7f90e4a54ae9
[ 2803.071140][ T5090] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48
[ 2803.090770][ T5090] RSP: 002b:00007f90e3dd70c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
22:46:37 executing program 5:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
write$ppp(r0, &(0x7f00000002c0)="d3", 0x1f4f33) (fail_nth: 40)

22:46:37 executing program 4:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0) (async)
r1 = socket$isdn_base(0x22, 0x3, 0x0)
r2 = openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(r2, 0x10f, 0x86) (async)
ioctl$TUNGETSNDBUF(r2, 0x800454d3, &(0x7f00000000c0)) (async)
write$ppp(r0, 0x0, 0x0) (async)
ioctl$IMGETVERSION(r1, 0x80044942, &(0x7f0000000100))
r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$PPPIOCATTACH(r3, 0x4004743d, &(0x7f0000000040)=0x2)

22:46:37 executing program 2:
mount$9p_unix(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x14000, &(0x7f0000000140)={'trans=unix,', {[{@nodevmap}, {@access_any}], [{@uid_lt={'uid<', 0xffffffffffffffff}}]}})
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x55ec81, 0x0)
syz_init_net_socket$llc(0x1a, 0x1, 0x0)
write$ppp(r0, &(0x7f00000002c0)="d3", 0x1)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(r1, 0x10f, 0x86)
ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000000)=0x3)

22:46:37 executing program 1:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
write$ppp(r0, 0x0, 0xeffdffff) (async)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(r1, 0x10f, 0x86)
write$ppp(r1, &(0x7f0000000000)="6956839b035bfee4b69789b64071e0b5189af7a79eb15e08a2868353256e90", 0x1f)

22:46:37 executing program 0:
openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(r0, 0x10f, 0x86) (async)
write$ppp(r0, 0x0, 0x0)

22:46:37 executing program 3:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x20840, 0x0)
ioctl$TUNGETVNETHDRSZ(r1, 0x800454d7, &(0x7f0000000040)) (async)
r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080), 0x2400, 0x0)
r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000580), 0xffffffffffffffff)
sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, r3, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [@L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x880}, 0x20) (async)
write$ppp(r0, &(0x7f00000002c0)="d3", 0xfffffdef)
r4 = openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0) (async)
r5 = openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(r5, 0x10f, 0x86) (async)
setsockopt$TIPC_MCAST_REPLICAST(r5, 0x10f, 0x86) (async)
ioctl$PPPIOCSCOMPRESS(r4, 0x4010744d) (async)
r6 = openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x200000, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(r6, 0x10f, 0x86) (async)
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000000c0)={'rose0\x00', 0x1000})

[ 2803.099199][ T5090] RAX: ffffffffffffffda RBX: 00007f90e4b73f80 RCX: 00007f90e4a54ae9
[ 2803.107176][ T5090] RDX: 00000000001f4f33 RSI: 00000000200002c0 RDI: 0000000000000003
[ 2803.115147][ T5090] RBP: 00007f90e3dd7120 R08: 0000000000000000 R09: 0000000000000000
[ 2803.123184][ T5090] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 2803.131213][ T5090] R13: 000000000000000b R14: 00007f90e4b73f80 R15: 00007ffdb3bfd028
[ 2803.139260][ T5090]  </TASK>
22:46:37 executing program 2:
mount$9p_unix(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x14000, &(0x7f0000000140)={'trans=unix,', {[{@nodevmap}, {@access_any}], [{@uid_lt={'uid<', 0xffffffffffffffff}}]}}) (async)
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x55ec81, 0x0) (async)
syz_init_net_socket$llc(0x1a, 0x1, 0x0)
write$ppp(r0, &(0x7f00000002c0)="d3", 0x1)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(r1, 0x10f, 0x86)
ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000000)=0x3)

22:46:37 executing program 0:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x36e600, 0x0)
write$ppp(r0, 0x0, 0xeffdffffffffffff)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(r1, 0x10f, 0x86)
sendmsg(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000000)="3ef0e1715cd744fe769f1a8c1f80b39f6f2d69864099e43d538f127175957bc75b78ea4d6c4c256f927dc9954243a99687889edba3671ea821db1b3d34e69d66680607a493aa2e", 0x47}, {&(0x7f00000000c0)="d31ea4e5c891feab1aa631a2f37cc017f7270000000000000000f6ff", 0x1c}, {&(0x7f0000000100)="4847c30bdb7063255711722649ce795cbababe8fdadcc20834de6164daa19f427b1606c8c2dd9d0c75e7d4aa50807e7592333096aff7fa8201e5aab5587ab6e81eb4c5347579c94dce1e4a49d2438cf1411d1da883859251c4e380aef12b272e4a0b820c17b1bc49409ef2dea045bb367335df374ae69f207f02edca9048cec42b20ab74d03d338ed53db74ffc0a4a0e27806d5cee25e23eb7a83cfef15dd60b013b7e6fe4e405c4a63ef5b0e7935b717e2c02b6d3192a6b8b6528259cb32985764fb0285c7f82e32a99392e1cb99c5b258f2435ac950378acdc45f8aa3cba7731f8c9dc14", 0xe5}, {&(0x7f0000000200)="bf703deac7b1c0b69458f81c0185c89535837be2d7fd5ca0d7ec9d25872cdcea31b65629a54e8291d179b3928f2c213ae6c84a956f63e379f0a34838a122153a3d74d718998361ef8e1e95992e866a65e366c577ebfe59a8c29cafaf5cb66841a54f329d6daa216f43859b09178d259a6ebbcc684de6ac5033af322b54e75762aa0c7e29c4179a16a3f9ad3ed2edb4bcc46b221f42072a2d17444837aedfdd0bc4f6c01c66de09047ef3d8bf089dea2e93b81587d0f9e5ec3930", 0xba}], 0x4, 0x0, 0x525cecf7528bd203}, 0x2400c040)

22:46:37 executing program 3:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000580), 0xffffffffffffffff)
sendmsg$L2TP_CMD_SESSION_CREATE(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000540), 0xc, &(0x7f0000000680)={&(0x7f0000000600)=ANY=[@ANYBLOB="0ece3236", @ANYRES16=r1, @ANYBLOB="00022cbd7000fbdbdf2505000000050004005b0000000500070002000000050021000000000008001700", @ANYRES32, @ANYBLOB="06001b004e21000006001b004e2400000600020001000000"], 0x4c}, 0x1, 0x0, 0x0, 0x24040881}, 0x20008000)
r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040), 0x41ec02, 0x0)
sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x5c, r1, 0x8, 0x70bd25, 0x25dfdbff, {}, [@L2TP_ATTR_UDP_CSUM={0x5}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x200}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp=r2}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'nicvf0\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x12}, 0x1)
write$ppp(r0, &(0x7f00000002c0)="d3", 0xfffffdef)

22:46:37 executing program 0:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x36e600, 0x0)
write$ppp(r0, 0x0, 0xeffdffffffffffff) (async)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(r1, 0x10f, 0x86)
sendmsg(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000000)="3ef0e1715cd744fe769f1a8c1f80b39f6f2d69864099e43d538f127175957bc75b78ea4d6c4c256f927dc9954243a99687889edba3671ea821db1b3d34e69d66680607a493aa2e", 0x47}, {&(0x7f00000000c0)="d31ea4e5c891feab1aa631a2f37cc017f7270000000000000000f6ff", 0x1c}, {&(0x7f0000000100)="4847c30bdb7063255711722649ce795cbababe8fdadcc20834de6164daa19f427b1606c8c2dd9d0c75e7d4aa50807e7592333096aff7fa8201e5aab5587ab6e81eb4c5347579c94dce1e4a49d2438cf1411d1da883859251c4e380aef12b272e4a0b820c17b1bc49409ef2dea045bb367335df374ae69f207f02edca9048cec42b20ab74d03d338ed53db74ffc0a4a0e27806d5cee25e23eb7a83cfef15dd60b013b7e6fe4e405c4a63ef5b0e7935b717e2c02b6d3192a6b8b6528259cb32985764fb0285c7f82e32a99392e1cb99c5b258f2435ac950378acdc45f8aa3cba7731f8c9dc14", 0xe5}, {&(0x7f0000000200)="bf703deac7b1c0b69458f81c0185c89535837be2d7fd5ca0d7ec9d25872cdcea31b65629a54e8291d179b3928f2c213ae6c84a956f63e379f0a34838a122153a3d74d718998361ef8e1e95992e866a65e366c577ebfe59a8c29cafaf5cb66841a54f329d6daa216f43859b09178d259a6ebbcc684de6ac5033af322b54e75762aa0c7e29c4179a16a3f9ad3ed2edb4bcc46b221f42072a2d17444837aedfdd0bc4f6c01c66de09047ef3d8bf089dea2e93b81587d0f9e5ec3930", 0xba}], 0x4, 0x0, 0x525cecf7528bd203}, 0x2400c040)

[ 2803.180650][ T5117] FAULT_INJECTION: forcing a failure.
[ 2803.180650][ T5117] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[ 2803.193944][ T5117] CPU: 0 PID: 5117 Comm: syz-executor.5 Not tainted 6.6.0-rc3-syzkaller-00165-g3b517966c561 #0
[ 2803.204325][ T5117] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/06/2023
[ 2803.214447][ T5117] Call Trace:
[ 2803.217738][ T5117]  <TASK>
[ 2803.220675][ T5117]  dump_stack_lvl+0xda/0x130
[ 2803.225288][ T5117]  dump_stack+0x15/0x20
22:46:37 executing program 2:
mount$9p_unix(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x14000, &(0x7f0000000140)={'trans=unix,', {[{@nodevmap}, {@access_any}], [{@uid_lt={'uid<', 0xffffffffffffffff}}]}})
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x55ec81, 0x0)
syz_init_net_socket$llc(0x1a, 0x1, 0x0) (async)
write$ppp(r0, &(0x7f00000002c0)="d3", 0x1) (async)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(r1, 0x10f, 0x86) (async, rerun: 64)
ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000000)=0x3) (rerun: 64)

22:46:37 executing program 0:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x36e600, 0x0)
write$ppp(r0, 0x0, 0xeffdffffffffffff) (async)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(r1, 0x10f, 0x86)
sendmsg(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000000)="3ef0e1715cd744fe769f1a8c1f80b39f6f2d69864099e43d538f127175957bc75b78ea4d6c4c256f927dc9954243a99687889edba3671ea821db1b3d34e69d66680607a493aa2e", 0x47}, {&(0x7f00000000c0)="d31ea4e5c891feab1aa631a2f37cc017f7270000000000000000f6ff", 0x1c}, {&(0x7f0000000100)="4847c30bdb7063255711722649ce795cbababe8fdadcc20834de6164daa19f427b1606c8c2dd9d0c75e7d4aa50807e7592333096aff7fa8201e5aab5587ab6e81eb4c5347579c94dce1e4a49d2438cf1411d1da883859251c4e380aef12b272e4a0b820c17b1bc49409ef2dea045bb367335df374ae69f207f02edca9048cec42b20ab74d03d338ed53db74ffc0a4a0e27806d5cee25e23eb7a83cfef15dd60b013b7e6fe4e405c4a63ef5b0e7935b717e2c02b6d3192a6b8b6528259cb32985764fb0285c7f82e32a99392e1cb99c5b258f2435ac950378acdc45f8aa3cba7731f8c9dc14", 0xe5}, {&(0x7f0000000200)="bf703deac7b1c0b69458f81c0185c89535837be2d7fd5ca0d7ec9d25872cdcea31b65629a54e8291d179b3928f2c213ae6c84a956f63e379f0a34838a122153a3d74d718998361ef8e1e95992e866a65e366c577ebfe59a8c29cafaf5cb66841a54f329d6daa216f43859b09178d259a6ebbcc684de6ac5033af322b54e75762aa0c7e29c4179a16a3f9ad3ed2edb4bcc46b221f42072a2d17444837aedfdd0bc4f6c01c66de09047ef3d8bf089dea2e93b81587d0f9e5ec3930", 0xba}], 0x4, 0x0, 0x525cecf7528bd203}, 0x2400c040)

[ 2803.229456][ T5117]  should_fail_ex+0x21f/0x230
[ 2803.234144][ T5117]  __should_fail_alloc_page+0xfd/0x110
[ 2803.239702][ T5117]  __alloc_pages+0x108/0x340
[ 2803.244348][ T5117]  vma_alloc_folio+0x6a3/0x8c0
[ 2803.249207][ T5117]  ? shmem_inode_acct_block+0x1ee/0x220
[ 2803.254828][ T5117]  shmem_get_folio_gfp+0x579/0xc30
[ 2803.260013][ T5117]  shmem_write_begin+0xa6/0x210
[ 2803.264906][ T5117]  generic_perform_write+0x1c9/0x410
[ 2803.270273][ T5117]  ? shmem_write_begin+0x210/0x210
[ 2803.275465][ T5117]  shmem_file_write_iter+0xc8/0xe0
[ 2803.280671][ T5117]  vfs_write+0x4ab/0x7d0
[ 2803.284946][ T5117]  ksys_write+0xeb/0x1a0
[ 2803.289273][ T5117]  __x64_sys_write+0x42/0x50
[ 2803.293924][ T5117]  do_syscall_64+0x41/0xc0
[ 2803.293950][ T5117]  entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 2803.304254][ T5117] RIP: 0033:0x7f90e4a54ae9
[ 2803.308778][ T5117] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48
22:46:37 executing program 0:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(r1, 0x10f, 0x86)
ioctl$TUNSETLINK(r1, 0x400454cd, 0x13d)
ioctl$TUNSETLINK(r0, 0x400454cd, 0x206)
write$ppp(r0, 0x0, 0xeffdffffffffffff)

22:46:37 executing program 2:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
write$ppp(r0, &(0x7f00000000c0)="4b196aa636d406c8ee8021d46f3b337bd3", 0x11)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0)
r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000140), 0x301040, 0x0)
r3 = getgid()
ioctl$TUNSETGROUP(r2, 0x400454ce, r3)
setsockopt$TIPC_MCAST_REPLICAST(r1, 0x10f, 0x86)
ioctl$TUNSETLINK(r1, 0x400454cd, 0x2be)
r4 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x22000, 0x0)
ioctl$PPPIOCATTCHAN(r4, 0x40047438, &(0x7f0000000040)=0x401)
r5 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(r5, 0x10f, 0x86)
ioctl$PPPIOCGIDLE(r5, 0x8010743f, &(0x7f0000000100))

22:46:37 executing program 4:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
write$ppp(r0, 0x0, 0x0)
ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f00000000c0))
openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0)
ioctl$PPPIOCATTACH(0xffffffffffffffff, 0x4004743d, &(0x7f0000000000)=0x1)
ioctl$SIOCPNDELRESOURCE(r0, 0x89ef, &(0x7f0000000100)=0x101)

22:46:37 executing program 1:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
write$ppp(r0, 0x0, 0xeffdffff)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(r1, 0x10f, 0x86) (async)
write$ppp(r1, &(0x7f0000000000)="6956839b035bfee4b69789b64071e0b5189af7a79eb15e08a2868353256e90", 0x1f)

22:46:37 executing program 4:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
write$ppp(r0, 0x0, 0x0)
ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f00000000c0))
openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0)
ioctl$PPPIOCATTACH(0xffffffffffffffff, 0x4004743d, &(0x7f0000000000)=0x1)
ioctl$SIOCPNDELRESOURCE(r0, 0x89ef, &(0x7f0000000100)=0x101)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0) (async)
write$ppp(r0, 0x0, 0x0) (async)
ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f00000000c0)) (async)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0) (async)
ioctl$PPPIOCATTACH(0xffffffffffffffff, 0x4004743d, &(0x7f0000000000)=0x1) (async)
ioctl$SIOCPNDELRESOURCE(r0, 0x89ef, &(0x7f0000000100)=0x101) (async)

22:46:37 executing program 5:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
write$ppp(r0, &(0x7f00000002c0)="d3", 0x1f4f33) (fail_nth: 41)

[ 2803.328443][ T5117] RSP: 002b:00007f90e3dd70c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 2803.336936][ T5117] RAX: ffffffffffffffda RBX: 00007f90e4b73f80 RCX: 00007f90e4a54ae9
[ 2803.344939][ T5117] RDX: 00000000001f4f33 RSI: 00000000200002c0 RDI: 0000000000000003
[ 2803.352986][ T5117] RBP: 00007f90e3dd7120 R08: 0000000000000000 R09: 0000000000000000
[ 2803.361015][ T5117] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 2803.368992][ T5117] R13: 000000000000000b R14: 00007f90e4b73f80 R15: 00007ffdb3bfd028
[ 2803.377044][ T5117]  </TASK>
22:46:37 executing program 0:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(r1, 0x10f, 0x86)
ioctl$TUNSETLINK(r1, 0x400454cd, 0x13d)
ioctl$TUNSETLINK(r0, 0x400454cd, 0x206)
write$ppp(r0, 0x0, 0xeffdffffffffffff)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0) (async)
openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0) (async)
setsockopt$TIPC_MCAST_REPLICAST(r1, 0x10f, 0x86) (async)
ioctl$TUNSETLINK(r1, 0x400454cd, 0x13d) (async)
ioctl$TUNSETLINK(r0, 0x400454cd, 0x206) (async)
write$ppp(r0, 0x0, 0xeffdffffffffffff) (async)

22:46:37 executing program 2:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
write$ppp(r0, &(0x7f00000000c0)="4b196aa636d406c8ee8021d46f3b337bd3", 0x11)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0)
r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000140), 0x301040, 0x0)
r3 = getgid()
ioctl$TUNSETGROUP(r2, 0x400454ce, r3)
setsockopt$TIPC_MCAST_REPLICAST(r1, 0x10f, 0x86)
ioctl$TUNSETLINK(r1, 0x400454cd, 0x2be)
r4 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x22000, 0x0)
ioctl$PPPIOCATTCHAN(r4, 0x40047438, &(0x7f0000000040)=0x401)
r5 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(r5, 0x10f, 0x86)
ioctl$PPPIOCGIDLE(r5, 0x8010743f, &(0x7f0000000100))
openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0) (async)
write$ppp(r0, &(0x7f00000000c0)="4b196aa636d406c8ee8021d46f3b337bd3", 0x11) (async)
openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0) (async)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000140), 0x301040, 0x0) (async)
getgid() (async)
ioctl$TUNSETGROUP(r2, 0x400454ce, r3) (async)
setsockopt$TIPC_MCAST_REPLICAST(r1, 0x10f, 0x86) (async)
ioctl$TUNSETLINK(r1, 0x400454cd, 0x2be) (async)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x22000, 0x0) (async)
ioctl$PPPIOCATTCHAN(r4, 0x40047438, &(0x7f0000000040)=0x401) (async)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) (async)
setsockopt$TIPC_MCAST_REPLICAST(r5, 0x10f, 0x86) (async)
ioctl$PPPIOCGIDLE(r5, 0x8010743f, &(0x7f0000000100)) (async)

[ 2803.430357][ T5158] FAULT_INJECTION: forcing a failure.
[ 2803.430357][ T5158] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 2803.443536][ T5158] CPU: 0 PID: 5158 Comm: syz-executor.5 Not tainted 6.6.0-rc3-syzkaller-00165-g3b517966c561 #0
[ 2803.454013][ T5158] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/06/2023
[ 2803.464071][ T5158] Call Trace:
[ 2803.467430][ T5158]  <TASK>
[ 2803.470406][ T5158]  dump_stack_lvl+0xda/0x130
[ 2803.475166][ T5158]  dump_stack+0x15/0x20
22:46:37 executing program 3:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0) (async)
r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000580), 0xffffffffffffffff)
sendmsg$L2TP_CMD_SESSION_CREATE(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000540), 0xc, &(0x7f0000000680)={&(0x7f0000000600)=ANY=[@ANYBLOB="0ece3236", @ANYRES16=r1, @ANYBLOB="00022cbd7000fbdbdf2505000000050004005b0000000500070002000000050021000000000008001700", @ANYRES32, @ANYBLOB="06001b004e21000006001b004e2400000600020001000000"], 0x4c}, 0x1, 0x0, 0x0, 0x24040881}, 0x20008000) (async)
r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040), 0x41ec02, 0x0)
sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x5c, r1, 0x8, 0x70bd25, 0x25dfdbff, {}, [@L2TP_ATTR_UDP_CSUM={0x5}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x200}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp=r2}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'nicvf0\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x12}, 0x1) (async)
write$ppp(r0, &(0x7f00000002c0)="d3", 0xfffffdef)

22:46:37 executing program 1:
pselect6(0x40, &(0x7f0000000000)={0x3, 0xfb18, 0x3, 0x7f, 0xb04, 0x55, 0x2, 0x4}, &(0x7f0000000040)={0x8001, 0x6, 0x5, 0x3d, 0xbe3f, 0x3, 0x9, 0x9}, &(0x7f00000000c0)={0x3fc5a81a, 0x8000000000000000, 0x7, 0x0, 0x6, 0x8000000000000000, 0x1f, 0x6}, &(0x7f0000000100), &(0x7f0000000180)={&(0x7f0000000140), 0x8})
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f00000001c0))
r1 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000180)={'vcan0\x00', <r2=>0x0})
bind$can_j1939(r1, &(0x7f00000001c0)={0x1d, r2, 0x0, {0x1}}, 0x18)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000280)={'syztnl0\x00', &(0x7f0000000200)={'syztnl0\x00', r2, 0x29, 0x80, 0x7, 0x3, 0x30, @private1, @private2, 0x7, 0x80, 0x9, 0x7fff}})
write$ppp(r0, 0x0, 0xeffdffff)
socket$can_j1939(0x1d, 0x2, 0x7)
r3 = openat$ppp(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
ioctl$PPPIOCGIDLE32(r3, 0x8008743f, &(0x7f0000000300))

22:46:37 executing program 4:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
write$ppp(r0, 0x0, 0x0)
ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f00000000c0)) (async)
ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f00000000c0))
openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0) (async)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0)
ioctl$PPPIOCATTACH(0xffffffffffffffff, 0x4004743d, &(0x7f0000000000)=0x1)
ioctl$SIOCPNDELRESOURCE(r0, 0x89ef, &(0x7f0000000100)=0x101)

[ 2803.479337][ T5158]  should_fail_ex+0x21f/0x230
[ 2803.484045][ T5158]  should_fail+0xb/0x10
[ 2803.488239][ T5158]  should_fail_usercopy+0x1a/0x20
[ 2803.493270][ T5158]  copy_page_from_iter_atomic+0x21c/0xcf0
[ 2803.499047][ T5158]  ? shmem_write_begin+0xa6/0x210
[ 2803.504192][ T5158]  ? shmem_write_begin+0x16d/0x210
[ 2803.509435][ T5158]  generic_perform_write+0x20c/0x410
[ 2803.514817][ T5158]  ? shmem_write_begin+0x210/0x210
[ 2803.520010][ T5158]  shmem_file_write_iter+0xc8/0xe0
[ 2803.525205][ T5158]  vfs_write+0x4ab/0x7d0
22:46:37 executing program 0:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0) (async)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(r1, 0x10f, 0x86)
ioctl$TUNSETLINK(r1, 0x400454cd, 0x13d)
ioctl$TUNSETLINK(r0, 0x400454cd, 0x206)
write$ppp(r0, 0x0, 0xeffdffffffffffff)

22:46:37 executing program 4:
socketpair(0x10, 0x1, 0x5, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$IMGETCOUNT(r0, 0x80044943, &(0x7f0000000040))
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
write$ppp(r1, 0x0, 0x0)

[ 2803.529497][ T5158]  ksys_write+0xeb/0x1a0
[ 2803.533773][ T5158]  __x64_sys_write+0x42/0x50
[ 2803.538394][ T5158]  do_syscall_64+0x41/0xc0
[ 2803.542846][ T5158]  entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 2803.548796][ T5158] RIP: 0033:0x7f90e4a54ae9
[ 2803.553223][ T5158] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48
22:46:37 executing program 0:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
write$ppp(r0, 0x0, 0xeffdffffffffffff)
ioctl$LOOP_CLR_FD(r0, 0x4c01)

22:46:37 executing program 4:
socketpair(0x10, 0x1, 0x5, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$IMGETCOUNT(r0, 0x80044943, &(0x7f0000000040))
openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0) (async)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
write$ppp(r1, 0x0, 0x0)

22:46:37 executing program 2:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
write$ppp(r0, &(0x7f00000000c0)="4b196aa636d406c8ee8021d46f3b337bd3", 0x11) (async)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0) (async)
r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000140), 0x301040, 0x0) (async)
r3 = getgid()
ioctl$TUNSETGROUP(r2, 0x400454ce, r3) (async)
setsockopt$TIPC_MCAST_REPLICAST(r1, 0x10f, 0x86) (async, rerun: 32)
ioctl$TUNSETLINK(r1, 0x400454cd, 0x2be) (async, rerun: 32)
r4 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x22000, 0x0)
ioctl$PPPIOCATTCHAN(r4, 0x40047438, &(0x7f0000000040)=0x401) (async, rerun: 64)
r5 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) (rerun: 64)
setsockopt$TIPC_MCAST_REPLICAST(r5, 0x10f, 0x86) (async)
ioctl$PPPIOCGIDLE(r5, 0x8010743f, &(0x7f0000000100))

22:46:37 executing program 1:
pselect6(0x40, &(0x7f0000000000)={0x3, 0xfb18, 0x3, 0x7f, 0xb04, 0x55, 0x2, 0x4}, &(0x7f0000000040)={0x8001, 0x6, 0x5, 0x3d, 0xbe3f, 0x3, 0x9, 0x9}, &(0x7f00000000c0)={0x3fc5a81a, 0x8000000000000000, 0x7, 0x0, 0x6, 0x8000000000000000, 0x1f, 0x6}, &(0x7f0000000100), &(0x7f0000000180)={&(0x7f0000000140), 0x8})
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f00000001c0))
r1 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000180)={'vcan0\x00', <r2=>0x0})
bind$can_j1939(r1, &(0x7f00000001c0)={0x1d, r2, 0x0, {0x1}}, 0x18)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000280)={'syztnl0\x00', &(0x7f0000000200)={'syztnl0\x00', r2, 0x29, 0x80, 0x7, 0x3, 0x30, @private1, @private2, 0x7, 0x80, 0x9, 0x7fff}})
write$ppp(r0, 0x0, 0xeffdffff)
socket$can_j1939(0x1d, 0x2, 0x7)
r3 = openat$ppp(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
ioctl$PPPIOCGIDLE32(r3, 0x8008743f, &(0x7f0000000300))
pselect6(0x40, &(0x7f0000000000)={0x3, 0xfb18, 0x3, 0x7f, 0xb04, 0x55, 0x2, 0x4}, &(0x7f0000000040)={0x8001, 0x6, 0x5, 0x3d, 0xbe3f, 0x3, 0x9, 0x9}, &(0x7f00000000c0)={0x3fc5a81a, 0x8000000000000000, 0x7, 0x0, 0x6, 0x8000000000000000, 0x1f, 0x6}, &(0x7f0000000100), &(0x7f0000000180)={&(0x7f0000000140), 0x8}) (async)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0) (async)
ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f00000001c0)) (async)
socket$can_j1939(0x1d, 0x2, 0x7) (async)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000180)={'vcan0\x00'}) (async)
bind$can_j1939(r1, &(0x7f00000001c0)={0x1d, r2, 0x0, {0x1}}, 0x18) (async)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000280)={'syztnl0\x00', &(0x7f0000000200)={'syztnl0\x00', r2, 0x29, 0x80, 0x7, 0x3, 0x30, @private1, @private2, 0x7, 0x80, 0x9, 0x7fff}}) (async)
write$ppp(r0, 0x0, 0xeffdffff) (async)
socket$can_j1939(0x1d, 0x2, 0x7) (async)
openat$ppp(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) (async)
ioctl$PPPIOCGIDLE32(r3, 0x8008743f, &(0x7f0000000300)) (async)

22:46:37 executing program 5:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
write$ppp(r0, &(0x7f00000002c0)="d3", 0x1f4f33) (fail_nth: 42)

22:46:37 executing program 0:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
write$ppp(r0, 0x0, 0xeffdffffffffffff) (async)
ioctl$LOOP_CLR_FD(r0, 0x4c01)

[ 2803.572941][ T5158] RSP: 002b:00007f90e3dd70c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 2803.581370][ T5158] RAX: ffffffffffffffda RBX: 00007f90e4b73f80 RCX: 00007f90e4a54ae9
[ 2803.589352][ T5158] RDX: 00000000001f4f33 RSI: 00000000200002c0 RDI: 0000000000000003
[ 2803.597397][ T5158] RBP: 00007f90e3dd7120 R08: 0000000000000000 R09: 0000000000000000
[ 2803.605429][ T5158] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 2803.613423][ T5158] R13: 000000000000000b R14: 00007f90e4b73f80 R15: 00007ffdb3bfd028
[ 2803.621505][ T5158]  </TASK>
22:46:37 executing program 4:
socketpair(0x10, 0x1, 0x5, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$IMGETCOUNT(r0, 0x80044943, &(0x7f0000000040)) (async)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
write$ppp(r1, 0x0, 0x0)

[ 2803.690500][ T5206] FAULT_INJECTION: forcing a failure.
[ 2803.690500][ T5206] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[ 2803.703814][ T5206] CPU: 1 PID: 5206 Comm: syz-executor.5 Not tainted 6.6.0-rc3-syzkaller-00165-g3b517966c561 #0
[ 2803.714235][ T5206] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/06/2023
[ 2803.724296][ T5206] Call Trace:
[ 2803.727601][ T5206]  <TASK>
[ 2803.730620][ T5206]  dump_stack_lvl+0xda/0x130
[ 2803.735276][ T5206]  dump_stack+0x15/0x20
[ 2803.739524][ T5206]  should_fail_ex+0x21f/0x230
[ 2803.744212][ T5206]  __should_fail_alloc_page+0xfd/0x110
[ 2803.749691][ T5206]  __alloc_pages+0x108/0x340
[ 2803.754376][ T5206]  vma_alloc_folio+0x6a3/0x8c0
[ 2803.759161][ T5206]  ? shmem_inode_acct_block+0x1ee/0x220
[ 2803.764733][ T5206]  shmem_get_folio_gfp+0x579/0xc30
[ 2803.769949][ T5206]  shmem_write_begin+0xa6/0x210
[ 2803.774897][ T5206]  generic_perform_write+0x1c9/0x410
[ 2803.780239][ T5206]  ? shmem_write_begin+0x210/0x210
[ 2803.785417][ T5206]  shmem_file_write_iter+0xc8/0xe0
22:46:37 executing program 1:
pselect6(0x40, &(0x7f0000000000)={0x3, 0xfb18, 0x3, 0x7f, 0xb04, 0x55, 0x2, 0x4}, &(0x7f0000000040)={0x8001, 0x6, 0x5, 0x3d, 0xbe3f, 0x3, 0x9, 0x9}, &(0x7f00000000c0)={0x3fc5a81a, 0x8000000000000000, 0x7, 0x0, 0x6, 0x8000000000000000, 0x1f, 0x6}, &(0x7f0000000100), &(0x7f0000000180)={&(0x7f0000000140), 0x8}) (async)
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f00000001c0)) (async)
r1 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000180)={'vcan0\x00', <r2=>0x0})
bind$can_j1939(r1, &(0x7f00000001c0)={0x1d, r2, 0x0, {0x1}}, 0x18) (async)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000280)={'syztnl0\x00', &(0x7f0000000200)={'syztnl0\x00', r2, 0x29, 0x80, 0x7, 0x3, 0x30, @private1, @private2, 0x7, 0x80, 0x9, 0x7fff}}) (async, rerun: 32)
write$ppp(r0, 0x0, 0xeffdffff) (async, rerun: 32)
socket$can_j1939(0x1d, 0x2, 0x7) (async)
r3 = openat$ppp(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
ioctl$PPPIOCGIDLE32(r3, 0x8008743f, &(0x7f0000000300))

22:46:37 executing program 0:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
write$ppp(r0, 0x0, 0xeffdffffffffffff)
ioctl$LOOP_CLR_FD(r0, 0x4c01)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0) (async)
write$ppp(r0, 0x0, 0xeffdffffffffffff) (async)
ioctl$LOOP_CLR_FD(r0, 0x4c01) (async)

22:46:37 executing program 2:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
arch_prctl$ARCH_GET_CPUID(0x1011)
write$ppp(r0, &(0x7f00000002c0)="d3", 0x1)
ioctl$PPPIOCBRIDGECHAN(r0, 0x40047435, &(0x7f0000000000)=0xffff)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(r1, 0x10f, 0x86)
futex(&(0x7f00000000c0)=0x2, 0xd, 0x0, &(0x7f0000000140), 0x0, 0x0)
ioctl$PPPIOCBRIDGECHAN(r1, 0x40047435, &(0x7f0000000040)=0x8002)
r2 = openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(r2, 0x10f, 0x86)
getsockopt$TIPC_NODE_RECVQ_DEPTH(0xffffffffffffffff, 0x10f, 0x83, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
pselect6(0x40, &(0x7f0000000240)={0x9a9, 0x2, 0x9, 0xff80000000000, 0x81, 0x4, 0x400, 0x3f}, &(0x7f0000000280)={0x100, 0xffffffffffffffff, 0x2, 0xa417, 0x7, 0x2, 0x2, 0x101}, &(0x7f0000000300)={0x5, 0x5, 0x5, 0x0, 0x80, 0x1, 0x3f, 0x1}, &(0x7f0000000340), &(0x7f00000003c0)={&(0x7f0000000380)={[0x7fffffffffffffff]}, 0x8})
getsockopt$TIPC_DEST_DROPPABLE(r2, 0x10f, 0x81, &(0x7f0000000100), &(0x7f0000000180)=0x4)

22:46:37 executing program 4:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(r1, 0x10f, 0x86)
ioctl$PPPIOCATTACH(r1, 0x4004743d, &(0x7f0000000000))
ioctl$PPPIOCBRIDGECHAN(r0, 0x40047435, &(0x7f0000000040)=0x1f)
write$ppp(r0, 0x0, 0x0)

22:46:37 executing program 3:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0) (async)
r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000580), 0xffffffffffffffff)
sendmsg$L2TP_CMD_SESSION_CREATE(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000540), 0xc, &(0x7f0000000680)={&(0x7f0000000600)=ANY=[@ANYBLOB="0ece3236", @ANYRES16=r1, @ANYBLOB="00022cbd7000fbdbdf2505000000050004005b0000000500070002000000050021000000000008001700", @ANYRES32, @ANYBLOB="06001b004e21000006001b004e2400000600020001000000"], 0x4c}, 0x1, 0x0, 0x0, 0x24040881}, 0x20008000) (async)
r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040), 0x41ec02, 0x0)
sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x5c, r1, 0x8, 0x70bd25, 0x25dfdbff, {}, [@L2TP_ATTR_UDP_CSUM={0x5}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x200}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp=r2}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'nicvf0\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x12}, 0x1) (async)
write$ppp(r0, &(0x7f00000002c0)="d3", 0xfffffdef)

[ 2803.790601][ T5206]  vfs_write+0x4ab/0x7d0
[ 2803.794953][ T5206]  ksys_write+0xeb/0x1a0
[ 2803.799220][ T5206]  __x64_sys_write+0x42/0x50
[ 2803.803831][ T5206]  do_syscall_64+0x41/0xc0
[ 2803.808358][ T5206]  entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 2803.814379][ T5206] RIP: 0033:0x7f90e4a54ae9
[ 2803.818880][ T5206] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48
22:46:37 executing program 4:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(r1, 0x10f, 0x86)
ioctl$PPPIOCATTACH(r1, 0x4004743d, &(0x7f0000000000))
ioctl$PPPIOCBRIDGECHAN(r0, 0x40047435, &(0x7f0000000040)=0x1f)
write$ppp(r0, 0x0, 0x0)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0) (async)
openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0) (async)
setsockopt$TIPC_MCAST_REPLICAST(r1, 0x10f, 0x86) (async)
ioctl$PPPIOCATTACH(r1, 0x4004743d, &(0x7f0000000000)) (async)
ioctl$PPPIOCBRIDGECHAN(r0, 0x40047435, &(0x7f0000000040)=0x1f) (async)
write$ppp(r0, 0x0, 0x0) (async)

22:46:37 executing program 4:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0) (async)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(r1, 0x10f, 0x86) (async)
ioctl$PPPIOCATTACH(r1, 0x4004743d, &(0x7f0000000000)) (async)
ioctl$PPPIOCBRIDGECHAN(r0, 0x40047435, &(0x7f0000000040)=0x1f) (async)
write$ppp(r0, 0x0, 0x0)

22:46:37 executing program 4:
write$ppp(0xffffffffffffffff, 0x0, 0x0)

22:46:37 executing program 0:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
r1 = getuid()
quotactl_fd$Q_QUOTAON(r0, 0xffffffff80000200, r1, &(0x7f0000000000)='./file0\x00')
write$ppp(r0, 0x0, 0xeffdffffffffffff)

[ 2803.838571][ T5206] RSP: 002b:00007f90e3dd70c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 2803.847075][ T5206] RAX: ffffffffffffffda RBX: 00007f90e4b73f80 RCX: 00007f90e4a54ae9
[ 2803.855075][ T5206] RDX: 00000000001f4f33 RSI: 00000000200002c0 RDI: 0000000000000003
[ 2803.863111][ T5206] RBP: 00007f90e3dd7120 R08: 0000000000000000 R09: 0000000000000000
[ 2803.871156][ T5206] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 2803.879160][ T5206] R13: 000000000000000b R14: 00007f90e4b73f80 R15: 00007ffdb3bfd028
[ 2803.887178][ T5206]  </TASK>
22:46:37 executing program 2:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
arch_prctl$ARCH_GET_CPUID(0x1011) (async, rerun: 64)
write$ppp(r0, &(0x7f00000002c0)="d3", 0x1) (async, rerun: 64)
ioctl$PPPIOCBRIDGECHAN(r0, 0x40047435, &(0x7f0000000000)=0xffff) (async)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(r1, 0x10f, 0x86) (async)
futex(&(0x7f00000000c0)=0x2, 0xd, 0x0, &(0x7f0000000140), 0x0, 0x0)
ioctl$PPPIOCBRIDGECHAN(r1, 0x40047435, &(0x7f0000000040)=0x8002) (async)
r2 = openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(r2, 0x10f, 0x86) (async, rerun: 64)
getsockopt$TIPC_NODE_RECVQ_DEPTH(0xffffffffffffffff, 0x10f, 0x83, &(0x7f00000001c0), &(0x7f0000000200)=0x4) (async, rerun: 64)
pselect6(0x40, &(0x7f0000000240)={0x9a9, 0x2, 0x9, 0xff80000000000, 0x81, 0x4, 0x400, 0x3f}, &(0x7f0000000280)={0x100, 0xffffffffffffffff, 0x2, 0xa417, 0x7, 0x2, 0x2, 0x101}, &(0x7f0000000300)={0x5, 0x5, 0x5, 0x0, 0x80, 0x1, 0x3f, 0x1}, &(0x7f0000000340), &(0x7f00000003c0)={&(0x7f0000000380)={[0x7fffffffffffffff]}, 0x8}) (async)
getsockopt$TIPC_DEST_DROPPABLE(r2, 0x10f, 0x81, &(0x7f0000000100), &(0x7f0000000180)=0x4)

22:46:37 executing program 1:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x59ec81, 0x0)
write$ppp(r0, 0x0, 0x0)

22:46:37 executing program 0:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
r1 = getuid()
quotactl_fd$Q_QUOTAON(r0, 0xffffffff80000200, r1, &(0x7f0000000000)='./file0\x00')
write$ppp(r0, 0x0, 0xeffdffffffffffff)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0) (async)
getuid() (async)
quotactl_fd$Q_QUOTAON(r0, 0xffffffff80000200, r1, &(0x7f0000000000)='./file0\x00') (async)
write$ppp(r0, 0x0, 0xeffdffffffffffff) (async)

22:46:37 executing program 4:
write$ppp(0xffffffffffffffff, 0x0, 0x0)
write$ppp(0xffffffffffffffff, 0x0, 0x0) (async)

22:46:37 executing program 5:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
write$ppp(r0, &(0x7f00000002c0)="d3", 0x1f4f33) (fail_nth: 43)

22:46:38 executing program 0:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
r1 = getuid()
quotactl_fd$Q_QUOTAON(r0, 0xffffffff80000200, r1, &(0x7f0000000000)='./file0\x00') (async)
write$ppp(r0, 0x0, 0xeffdffffffffffff)

22:46:38 executing program 2:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0) (async)
arch_prctl$ARCH_GET_CPUID(0x1011)
write$ppp(r0, &(0x7f00000002c0)="d3", 0x1) (async)
ioctl$PPPIOCBRIDGECHAN(r0, 0x40047435, &(0x7f0000000000)=0xffff) (async)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(r1, 0x10f, 0x86)
futex(&(0x7f00000000c0)=0x2, 0xd, 0x0, &(0x7f0000000140), 0x0, 0x0)
ioctl$PPPIOCBRIDGECHAN(r1, 0x40047435, &(0x7f0000000040)=0x8002) (async)
r2 = openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(r2, 0x10f, 0x86)
getsockopt$TIPC_NODE_RECVQ_DEPTH(0xffffffffffffffff, 0x10f, 0x83, &(0x7f00000001c0), &(0x7f0000000200)=0x4) (async)
pselect6(0x40, &(0x7f0000000240)={0x9a9, 0x2, 0x9, 0xff80000000000, 0x81, 0x4, 0x400, 0x3f}, &(0x7f0000000280)={0x100, 0xffffffffffffffff, 0x2, 0xa417, 0x7, 0x2, 0x2, 0x101}, &(0x7f0000000300)={0x5, 0x5, 0x5, 0x0, 0x80, 0x1, 0x3f, 0x1}, &(0x7f0000000340), &(0x7f00000003c0)={&(0x7f0000000380)={[0x7fffffffffffffff]}, 0x8}) (async)
getsockopt$TIPC_DEST_DROPPABLE(r2, 0x10f, 0x81, &(0x7f0000000100), &(0x7f0000000180)=0x4)

[ 2803.951839][ T5248] FAULT_INJECTION: forcing a failure.
[ 2803.951839][ T5248] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 2803.965051][ T5248] CPU: 1 PID: 5248 Comm: syz-executor.5 Not tainted 6.6.0-rc3-syzkaller-00165-g3b517966c561 #0
[ 2803.975444][ T5248] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/06/2023
[ 2803.985521][ T5248] Call Trace:
[ 2803.988809][ T5248]  <TASK>
[ 2803.991744][ T5248]  dump_stack_lvl+0xda/0x130
[ 2803.996390][ T5248]  dump_stack+0x15/0x20
[ 2804.000614][ T5248]  should_fail_ex+0x21f/0x230
[ 2804.005301][ T5248]  should_fail+0xb/0x10
[ 2804.009456][ T5248]  should_fail_usercopy+0x1a/0x20
[ 2804.014497][ T5248]  copy_page_from_iter_atomic+0x21c/0xcf0
[ 2804.020276][ T5248]  ? shmem_write_begin+0xa6/0x210
[ 2804.025329][ T5248]  ? shmem_write_begin+0x16d/0x210
[ 2804.030463][ T5248]  generic_perform_write+0x20c/0x410
[ 2804.035767][ T5248]  ? shmem_write_begin+0x210/0x210
[ 2804.040917][ T5248]  shmem_file_write_iter+0xc8/0xe0
[ 2804.046058][ T5248]  vfs_write+0x4ab/0x7d0
[ 2804.050325][ T5248]  ksys_write+0xeb/0x1a0
[ 2804.054770][ T5248]  __x64_sys_write+0x42/0x50
[ 2804.059451][ T5248]  do_syscall_64+0x41/0xc0
[ 2804.063881][ T5248]  entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 2804.069800][ T5248] RIP: 0033:0x7f90e4a54ae9
[ 2804.074216][ T5248] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48
[ 2804.093841][ T5248] RSP: 002b:00007f90e3dd70c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
22:46:38 executing program 3:
openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5fac01, 0x0)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x208002, 0x0)

22:46:38 executing program 1:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x59ec81, 0x0)
write$ppp(r0, 0x0, 0x0)

22:46:38 executing program 0:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(r1, 0x10f, 0x86)
ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r1)
write$ppp(r0, 0x0, 0xeffdffffffffffff)
openat$pfkey(0xffffffffffffff9c, &(0x7f00000000c0), 0x4e00, 0x0)
r2 = openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0)
r3 = openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0)
r4 = openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(r4, 0x10f, 0x86)
setsockopt$TIPC_MCAST_BROADCAST(r4, 0x10f, 0x85)
setsockopt$TIPC_MCAST_REPLICAST(r3, 0x10f, 0x86)
ioctl$TUNSETSNDBUF(r3, 0x400454d4, &(0x7f0000000100)=0x6)
setsockopt$TIPC_MCAST_REPLICAST(r2, 0x10f, 0x86)
accept4$tipc(r2, &(0x7f0000000000), &(0x7f0000000040)=0x10, 0x800)

22:46:38 executing program 2:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
write$ppp(r0, &(0x7f00000002c0)="d3", 0x1)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x200200, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(r1, 0x10f, 0x86)
ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000000)=0x2)

22:46:38 executing program 4:
write$ppp(0xffffffffffffffff, 0x0, 0x0)

22:46:38 executing program 4:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
write$ppp(r0, 0x0, 0x0)
openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0)
r1 = socket$nl_audit(0x10, 0x3, 0x9)
sendmsg$AUDIT_SET_FEATURE(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x20, 0x3fa, 0x24, 0x709d27, 0x25dfdbfb, {0x1, 0x0, 0x1, 0x1}, [""]}, 0x20}, 0x1, 0x0, 0x0, 0x20000040}, 0x4000010)
quotactl_fd$Q_QUOTAON(0xffffffffffffffff, 0xffffffff80000200, 0xee01, &(0x7f0000000180)='./file0\x00')

22:46:38 executing program 0:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(r1, 0x10f, 0x86)
ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r1)
write$ppp(r0, 0x0, 0xeffdffffffffffff)
openat$pfkey(0xffffffffffffff9c, &(0x7f00000000c0), 0x4e00, 0x0)
r2 = openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0)
r3 = openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0)
r4 = openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(r4, 0x10f, 0x86)
setsockopt$TIPC_MCAST_BROADCAST(r4, 0x10f, 0x85)
setsockopt$TIPC_MCAST_REPLICAST(r3, 0x10f, 0x86)
ioctl$TUNSETSNDBUF(r3, 0x400454d4, &(0x7f0000000100)=0x6)
setsockopt$TIPC_MCAST_REPLICAST(r2, 0x10f, 0x86)
accept4$tipc(r2, &(0x7f0000000000), &(0x7f0000000040)=0x10, 0x800)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0) (async)
openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0) (async)
setsockopt$TIPC_MCAST_REPLICAST(r1, 0x10f, 0x86) (async)
ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r1) (async)
write$ppp(r0, 0x0, 0xeffdffffffffffff) (async)
openat$pfkey(0xffffffffffffff9c, &(0x7f00000000c0), 0x4e00, 0x0) (async)
openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0) (async)
openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0) (async)
openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0) (async)
setsockopt$TIPC_MCAST_REPLICAST(r4, 0x10f, 0x86) (async)
setsockopt$TIPC_MCAST_BROADCAST(r4, 0x10f, 0x85) (async)
setsockopt$TIPC_MCAST_REPLICAST(r3, 0x10f, 0x86) (async)
ioctl$TUNSETSNDBUF(r3, 0x400454d4, &(0x7f0000000100)=0x6) (async)
setsockopt$TIPC_MCAST_REPLICAST(r2, 0x10f, 0x86) (async)
accept4$tipc(r2, &(0x7f0000000000), &(0x7f0000000040)=0x10, 0x800) (async)

22:46:38 executing program 2:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
write$ppp(r0, &(0x7f00000002c0)="d3", 0x1)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x200200, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(r1, 0x10f, 0x86) (async)
ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000000)=0x2)

[ 2804.102382][ T5248] RAX: ffffffffffffffda RBX: 00007f90e4b73f80 RCX: 00007f90e4a54ae9
[ 2804.110369][ T5248] RDX: 00000000001f4f33 RSI: 00000000200002c0 RDI: 0000000000000003
[ 2804.118416][ T5248] RBP: 00007f90e3dd7120 R08: 0000000000000000 R09: 0000000000000000
[ 2804.126401][ T5248] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 2804.134384][ T5248] R13: 000000000000000b R14: 00007f90e4b73f80 R15: 00007ffdb3bfd028
[ 2804.142467][ T5248]  </TASK>
22:46:38 executing program 4:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
write$ppp(r0, 0x0, 0x0)
openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0)
r1 = socket$nl_audit(0x10, 0x3, 0x9)
sendmsg$AUDIT_SET_FEATURE(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x20, 0x3fa, 0x24, 0x709d27, 0x25dfdbfb, {0x1, 0x0, 0x1, 0x1}, [""]}, 0x20}, 0x1, 0x0, 0x0, 0x20000040}, 0x4000010) (async)
sendmsg$AUDIT_SET_FEATURE(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x20, 0x3fa, 0x24, 0x709d27, 0x25dfdbfb, {0x1, 0x0, 0x1, 0x1}, [""]}, 0x20}, 0x1, 0x0, 0x0, 0x20000040}, 0x4000010)
quotactl_fd$Q_QUOTAON(0xffffffffffffffff, 0xffffffff80000200, 0xee01, &(0x7f0000000180)='./file0\x00') (async)
quotactl_fd$Q_QUOTAON(0xffffffffffffffff, 0xffffffff80000200, 0xee01, &(0x7f0000000180)='./file0\x00')

22:46:38 executing program 5:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
write$ppp(r0, &(0x7f00000002c0)="d3", 0x1f4f33) (fail_nth: 44)

22:46:38 executing program 1:
openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x59ec81, 0x0) (async)
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x59ec81, 0x0)
write$ppp(r0, 0x0, 0x0)

22:46:38 executing program 0:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(r1, 0x10f, 0x86)
ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r1)
write$ppp(r0, 0x0, 0xeffdffffffffffff)
openat$pfkey(0xffffffffffffff9c, &(0x7f00000000c0), 0x4e00, 0x0)
r2 = openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0)
r3 = openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0)
r4 = openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(r4, 0x10f, 0x86)
setsockopt$TIPC_MCAST_BROADCAST(r4, 0x10f, 0x85)
setsockopt$TIPC_MCAST_REPLICAST(r3, 0x10f, 0x86)
ioctl$TUNSETSNDBUF(r3, 0x400454d4, &(0x7f0000000100)=0x6)
setsockopt$TIPC_MCAST_REPLICAST(r2, 0x10f, 0x86)
accept4$tipc(r2, &(0x7f0000000000), &(0x7f0000000040)=0x10, 0x800)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0) (async)
openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0) (async)
setsockopt$TIPC_MCAST_REPLICAST(r1, 0x10f, 0x86) (async)
ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r1) (async)
write$ppp(r0, 0x0, 0xeffdffffffffffff) (async)
openat$pfkey(0xffffffffffffff9c, &(0x7f00000000c0), 0x4e00, 0x0) (async)
openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0) (async)
openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0) (async)
openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0) (async)
setsockopt$TIPC_MCAST_REPLICAST(r4, 0x10f, 0x86) (async)
setsockopt$TIPC_MCAST_BROADCAST(r4, 0x10f, 0x85) (async)
setsockopt$TIPC_MCAST_REPLICAST(r3, 0x10f, 0x86) (async)
ioctl$TUNSETSNDBUF(r3, 0x400454d4, &(0x7f0000000100)=0x6) (async)
setsockopt$TIPC_MCAST_REPLICAST(r2, 0x10f, 0x86) (async)
accept4$tipc(r2, &(0x7f0000000000), &(0x7f0000000040)=0x10, 0x800) (async)

22:46:38 executing program 3:
openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5fac01, 0x0)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x208002, 0x0)

22:46:38 executing program 2:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
write$ppp(r0, &(0x7f00000002c0)="d3", 0x1)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x200200, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(r1, 0x10f, 0x86) (async)
ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000000)=0x2)

22:46:38 executing program 3:
openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5fac01, 0x0)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x208002, 0x0)

22:46:38 executing program 4:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
write$ppp(r0, 0x0, 0x0)
openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) (async)
r1 = socket$nl_audit(0x10, 0x3, 0x9)
sendmsg$AUDIT_SET_FEATURE(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x20, 0x3fa, 0x24, 0x709d27, 0x25dfdbfb, {0x1, 0x0, 0x1, 0x1}, [""]}, 0x20}, 0x1, 0x0, 0x0, 0x20000040}, 0x4000010) (async)
quotactl_fd$Q_QUOTAON(0xffffffffffffffff, 0xffffffff80000200, 0xee01, &(0x7f0000000180)='./file0\x00')

22:46:38 executing program 1:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(r0, 0x10f, 0x86)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000800)={0x128, 0x0, &(0x7f00000005c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000140)={@ptr={0x70742a85, 0x1, &(0x7f0000000000)=""/9, 0x9, 0x2, 0x1d}, @ptr={0x70742a85, 0x0, &(0x7f00000000c0)=""/74, 0x4a, 0x1, 0x21}, @fd={0x66642a85, 0x0, r0}}, &(0x7f0000000040)={0x0, 0x28, 0x50}}}, @reply={0x40406301, {0x3, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000200)={@flat=@weak_binder={0x77622a85, 0x1001}, @ptr={0x70742a85, 0x0, &(0x7f00000001c0)=""/53, 0x35, 0x1, 0x39}, @fd}, &(0x7f0000000280)={0x0, 0x18, 0x40}}}, @reply={0x40406301, {0x3, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x48, 0x18, &(0x7f00000002c0)={@fd, @flat=@weak_binder={0x77622a85, 0xb}, @flat=@weak_handle={0x77682a85, 0xb}}, &(0x7f0000000340)={0x0, 0x18, 0x30}}}, @register_looper, @exit_looper, @increfs={0x40046304, 0x2}, @transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x51, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000500)={@fda={0x66646185, 0x7, 0x1, 0x18}, @ptr={0x70742a85, 0x1, &(0x7f0000000380)=""/169, 0xa9, 0x0, 0x200}, @ptr={0x70742a85, 0x1, &(0x7f0000000440)=""/166, 0xa6, 0x1, 0x3c}}, &(0x7f0000000580)={0x0, 0x20, 0x48}}, 0x40}], 0xfa, 0x0, &(0x7f0000000700)="551e0fc77998603b9ff64f3569b88aa65134ff085fc2efbddd7fdbfc1e11ceed299d1012e3bbab836e25d1416c7dc310f3cba145e32220a1f648f3e2603999973dbbdff895c5d609961d3efa7608df9dd998aae421d6ab66bc2fe0acd6b7eab60cd32eb032a6f28bc51cb6acdb93bce32a284f7b77746b122ee877af504455dd1d82040d1fc750c2c8f1afdbe4c30e4078e24ab7c1368db3f56b04091ef82d113362726e18178dacc598dde0fc947bbb3794cbc559bf4a8891e10c8a1624b2d8d6e4e8774caad9eb13ec4593f90a5f5fb3ad9c59acf5bc2367c4dfa95eac7ce96759c8f1a810129d4194f5f92b0162dc46eab18a06974850a266"})
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
write$ppp(r1, 0x0, 0xeffdffff)

22:46:38 executing program 0:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x787d01, 0x0)
write$ppp(r0, 0x0, 0xeffdffffffffffff)

22:46:38 executing program 0:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x787d01, 0x0)
write$ppp(r0, 0x0, 0xeffdffffffffffff)

22:46:38 executing program 2:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(r1, 0x10f, 0x86)
getsockopt$inet_mptcp_buf(r1, 0x11c, 0x4, &(0x7f00000000c0)=""/124, &(0x7f0000000040)=0x7c)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x0, 0x0)
write$ppp(r0, &(0x7f00000002c0)="d3", 0x1)

22:46:38 executing program 2:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0) (async)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(r1, 0x10f, 0x86) (async)
getsockopt$inet_mptcp_buf(r1, 0x11c, 0x4, &(0x7f00000000c0)=""/124, &(0x7f0000000040)=0x7c)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x0, 0x0)
write$ppp(r0, &(0x7f00000002c0)="d3", 0x1)

[ 2804.259087][ T5302] FAULT_INJECTION: forcing a failure.
[ 2804.259087][ T5302] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[ 2804.272458][ T5302] CPU: 1 PID: 5302 Comm: syz-executor.5 Not tainted 6.6.0-rc3-syzkaller-00165-g3b517966c561 #0
[ 2804.282860][ T5302] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/06/2023
[ 2804.292956][ T5302] Call Trace:
[ 2804.296254][ T5302]  <TASK>
[ 2804.299193][ T5302]  dump_stack_lvl+0xda/0x130
[ 2804.303805][ T5302]  dump_stack+0x15/0x20
[ 2804.307999][ T5302]  should_fail_ex+0x21f/0x230
[ 2804.312755][ T5302]  __should_fail_alloc_page+0xfd/0x110
[ 2804.318266][ T5302]  __alloc_pages+0x108/0x340
[ 2804.323231][ T5302]  vma_alloc_folio+0x6a3/0x8c0
[ 2804.328012][ T5302]  ? shmem_inode_acct_block+0x1ee/0x220
[ 2804.333703][ T5302]  shmem_get_folio_gfp+0x579/0xc30
[ 2804.338882][ T5302]  shmem_write_begin+0xa6/0x210
[ 2804.343896][ T5302]  generic_perform_write+0x1c9/0x410
[ 2804.349274][ T5302]  ? shmem_write_begin+0x210/0x210
[ 2804.354397][ T5302]  shmem_file_write_iter+0xc8/0xe0
[ 2804.359634][ T5302]  vfs_write+0x4ab/0x7d0
[ 2804.363884][ T5302]  ksys_write+0xeb/0x1a0
[ 2804.368124][ T5302]  __x64_sys_write+0x42/0x50
[ 2804.372749][ T5302]  do_syscall_64+0x41/0xc0
[ 2804.377286][ T5302]  entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 2804.383176][ T5302] RIP: 0033:0x7f90e4a54ae9
[ 2804.387578][ T5302] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48
22:46:38 executing program 5:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
write$ppp(r0, &(0x7f00000002c0)="d3", 0x1f4f33) (fail_nth: 45)

22:46:38 executing program 4:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
sendmsg$AUDIT_TRIM(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x3f6, 0x1, 0x1, 0x25dfdbff, "", ["", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x20044000}, 0x4081)

22:46:38 executing program 1:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(r0, 0x10f, 0x86) (async)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000800)={0x128, 0x0, &(0x7f00000005c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000140)={@ptr={0x70742a85, 0x1, &(0x7f0000000000)=""/9, 0x9, 0x2, 0x1d}, @ptr={0x70742a85, 0x0, &(0x7f00000000c0)=""/74, 0x4a, 0x1, 0x21}, @fd={0x66642a85, 0x0, r0}}, &(0x7f0000000040)={0x0, 0x28, 0x50}}}, @reply={0x40406301, {0x3, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000200)={@flat=@weak_binder={0x77622a85, 0x1001}, @ptr={0x70742a85, 0x0, &(0x7f00000001c0)=""/53, 0x35, 0x1, 0x39}, @fd}, &(0x7f0000000280)={0x0, 0x18, 0x40}}}, @reply={0x40406301, {0x3, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x48, 0x18, &(0x7f00000002c0)={@fd, @flat=@weak_binder={0x77622a85, 0xb}, @flat=@weak_handle={0x77682a85, 0xb}}, &(0x7f0000000340)={0x0, 0x18, 0x30}}}, @register_looper, @exit_looper, @increfs={0x40046304, 0x2}, @transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x51, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000500)={@fda={0x66646185, 0x7, 0x1, 0x18}, @ptr={0x70742a85, 0x1, &(0x7f0000000380)=""/169, 0xa9, 0x0, 0x200}, @ptr={0x70742a85, 0x1, &(0x7f0000000440)=""/166, 0xa6, 0x1, 0x3c}}, &(0x7f0000000580)={0x0, 0x20, 0x48}}, 0x40}], 0xfa, 0x0, &(0x7f0000000700)="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"}) (async)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
write$ppp(r1, 0x0, 0xeffdffff)

22:46:38 executing program 3:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0)
ioctl$TUNGETDEVNETNS(r0, 0x54e3, 0x0)
set_thread_area(&(0x7f0000000000)={0x6, 0x100000, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x1})
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x5dec81, 0x0)
write$ppp(r1, &(0x7f00000002c0)="d3", 0xfffffdef)
ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f00000000c0)={'dummy0\x00'})

22:46:38 executing program 0:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x787d01, 0x0)
write$ppp(r0, 0x0, 0xeffdffffffffffff)

22:46:38 executing program 2:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0) (async, rerun: 32)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0) (rerun: 32)
setsockopt$TIPC_MCAST_REPLICAST(r1, 0x10f, 0x86)
getsockopt$inet_mptcp_buf(r1, 0x11c, 0x4, &(0x7f00000000c0)=""/124, &(0x7f0000000040)=0x7c) (async, rerun: 32)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x0, 0x0) (async, rerun: 32)
write$ppp(r0, &(0x7f00000002c0)="d3", 0x1)

[ 2804.407199][ T5302] RSP: 002b:00007f90e3dd70c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 2804.415653][ T5302] RAX: ffffffffffffffda RBX: 00007f90e4b73f80 RCX: 00007f90e4a54ae9
[ 2804.423627][ T5302] RDX: 00000000001f4f33 RSI: 00000000200002c0 RDI: 0000000000000003
[ 2804.431585][ T5302] RBP: 00007f90e3dd7120 R08: 0000000000000000 R09: 0000000000000000
[ 2804.439544][ T5302] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 2804.447533][ T5302] R13: 000000000000000b R14: 00007f90e4b73f80 R15: 00007ffdb3bfd028
[ 2804.455516][ T5302]  </TASK>
22:46:38 executing program 0:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(r2, 0x10f, 0x86)
ioctl$LOOP_SET_FD(r2, 0x4c00, r1)
sendmsg$AUDIT_DEL_RULE(r0, &(0x7f0000000540)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000500)={&(0x7f00000000c0)={0x42c, 0x3f4, 0x8, 0x70bd27, 0x25dfdbfc, {0x15, 0x1, 0xb, [0x6, 0x3ff, 0x400, 0x8, 0x5, 0x9, 0xab, 0x1, 0x1000, 0x3ff, 0x40, 0x1, 0x7, 0x0, 0x7, 0x4, 0x6, 0x373, 0x800, 0x2, 0x7, 0x3, 0x100, 0x4063, 0x1, 0x200, 0x0, 0x80000000, 0x40, 0x3, 0x200, 0xffff8001, 0xfc000000, 0x2, 0xfffffeff, 0xc350, 0x100, 0x1, 0xfff, 0x200, 0x3, 0x3, 0x0, 0xd7c, 0x0, 0xe9, 0x4, 0x9, 0x800, 0x2, 0x3800, 0x120000, 0x0, 0x7f, 0x3, 0x1, 0x400, 0x3, 0x2, 0x0, 0x401, 0x6, 0x81, 0x2], [0x2, 0x7, 0x3, 0x67d, 0x6, 0x55, 0x4, 0x7, 0xfffffeff, 0x100, 0x6873, 0x81, 0x0, 0x1, 0x1, 0x5, 0x8, 0x101, 0x8, 0x2, 0xfffffffc, 0x4, 0x1, 0x3b7c, 0x80000001, 0xffffffff, 0x2, 0x9, 0x2, 0x1, 0xf833, 0xffff0001, 0xffffffff, 0xc4d8, 0x3, 0x2, 0xea, 0x7ff, 0xb9, 0x15, 0x1291, 0x1, 0x10000, 0x2, 0x6, 0xd8, 0x7ff, 0x2, 0x7, 0x6, 0xffffffff, 0x40, 0x3, 0x57ed, 0x100, 0x3, 0x0, 0x7fff, 0x8, 0x100, 0xffffffff, 0x5, 0x80, 0x1], [0x17d, 0x0, 0x8, 0x4, 0x0, 0x7, 0x99f1, 0x0, 0x1, 0x0, 0x8, 0x80000000, 0x9, 0x1, 0xfff, 0x7fffffff, 0xffffffff, 0x80000000, 0x8, 0x8663, 0x40, 0x0, 0x2, 0x7, 0x16a0000, 0xaa7, 0x9, 0xffffffff, 0x7, 0x78a5, 0x8, 0x7fffffff, 0x10001, 0x3f, 0x2, 0x9, 0x5, 0x2, 0x7fffffff, 0x7fffffff, 0x4, 0xc1ac, 0x80000001, 0x5, 0x80000001, 0x4, 0x4, 0x3, 0x1, 0x39, 0x800, 0x4, 0x8, 0x4, 0xff, 0x7, 0xa3, 0xfffffffe, 0xfffff000, 0x3, 0x5, 0x3f, 0x8, 0xffffffc0], [0x4, 0x2, 0x1, 0x4, 0x8000, 0x9, 0x8, 0xfffffffb, 0x9, 0xa6, 0x0, 0x8, 0x7, 0x28, 0x4, 0x8, 0x8, 0x80000001, 0x40, 0x2, 0x0, 0x3, 0x9, 0x6, 0x8a3, 0x13c, 0x2, 0x81, 0x1, 0x4, 0x3, 0x8, 0x4, 0xc71, 0xeba, 0x5, 0x1, 0x80000001, 0x178aada, 0x10001, 0x8, 0x2, 0x1, 0x6bb, 0x3, 0x211, 0x4, 0x200, 0x7, 0x5, 0xffffffff, 0xfffffff9, 0x0, 0x80000000, 0x3, 0xfffffffa, 0x5, 0xbd, 0x7, 0x9, 0x9, 0x1, 0xffff, 0x80], 0x9, ['/dev/bsg\x00']}, ["", "", "", "", "", ""]}, 0x42c}, 0x1, 0x0, 0x0, 0x20004000}, 0x4000080)

22:46:38 executing program 1:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(r0, 0x10f, 0x86)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000800)={0x128, 0x0, &(0x7f00000005c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000140)={@ptr={0x70742a85, 0x1, &(0x7f0000000000)=""/9, 0x9, 0x2, 0x1d}, @ptr={0x70742a85, 0x0, &(0x7f00000000c0)=""/74, 0x4a, 0x1, 0x21}, @fd={0x66642a85, 0x0, r0}}, &(0x7f0000000040)={0x0, 0x28, 0x50}}}, @reply={0x40406301, {0x3, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000200)={@flat=@weak_binder={0x77622a85, 0x1001}, @ptr={0x70742a85, 0x0, &(0x7f00000001c0)=""/53, 0x35, 0x1, 0x39}, @fd}, &(0x7f0000000280)={0x0, 0x18, 0x40}}}, @reply={0x40406301, {0x3, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x48, 0x18, &(0x7f00000002c0)={@fd, @flat=@weak_binder={0x77622a85, 0xb}, @flat=@weak_handle={0x77682a85, 0xb}}, &(0x7f0000000340)={0x0, 0x18, 0x30}}}, @register_looper, @exit_looper, @increfs={0x40046304, 0x2}, @transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x51, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000500)={@fda={0x66646185, 0x7, 0x1, 0x18}, @ptr={0x70742a85, 0x1, &(0x7f0000000380)=""/169, 0xa9, 0x0, 0x200}, @ptr={0x70742a85, 0x1, &(0x7f0000000440)=""/166, 0xa6, 0x1, 0x3c}}, &(0x7f0000000580)={0x0, 0x20, 0x48}}, 0x40}], 0xfa, 0x0, &(0x7f0000000700)="551e0fc77998603b9ff64f3569b88aa65134ff085fc2efbddd7fdbfc1e11ceed299d1012e3bbab836e25d1416c7dc310f3cba145e32220a1f648f3e2603999973dbbdff895c5d609961d3efa7608df9dd998aae421d6ab66bc2fe0acd6b7eab60cd32eb032a6f28bc51cb6acdb93bce32a284f7b77746b122ee877af504455dd1d82040d1fc750c2c8f1afdbe4c30e4078e24ab7c1368db3f56b04091ef82d113362726e18178dacc598dde0fc947bbb3794cbc559bf4a8891e10c8a1624b2d8d6e4e8774caad9eb13ec4593f90a5f5fb3ad9c59acf5bc2367c4dfa95eac7ce96759c8f1a810129d4194f5f92b0162dc46eab18a06974850a266"})
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
write$ppp(r1, 0x0, 0xeffdffff)
openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0) (async)
setsockopt$TIPC_MCAST_REPLICAST(r0, 0x10f, 0x86) (async)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000800)={0x128, 0x0, &(0x7f00000005c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000140)={@ptr={0x70742a85, 0x1, &(0x7f0000000000)=""/9, 0x9, 0x2, 0x1d}, @ptr={0x70742a85, 0x0, &(0x7f00000000c0)=""/74, 0x4a, 0x1, 0x21}, @fd={0x66642a85, 0x0, r0}}, &(0x7f0000000040)={0x0, 0x28, 0x50}}}, @reply={0x40406301, {0x3, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000200)={@flat=@weak_binder={0x77622a85, 0x1001}, @ptr={0x70742a85, 0x0, &(0x7f00000001c0)=""/53, 0x35, 0x1, 0x39}, @fd}, &(0x7f0000000280)={0x0, 0x18, 0x40}}}, @reply={0x40406301, {0x3, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x48, 0x18, &(0x7f00000002c0)={@fd, @flat=@weak_binder={0x77622a85, 0xb}, @flat=@weak_handle={0x77682a85, 0xb}}, &(0x7f0000000340)={0x0, 0x18, 0x30}}}, @register_looper, @exit_looper, @increfs={0x40046304, 0x2}, @transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x51, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000500)={@fda={0x66646185, 0x7, 0x1, 0x18}, @ptr={0x70742a85, 0x1, &(0x7f0000000380)=""/169, 0xa9, 0x0, 0x200}, @ptr={0x70742a85, 0x1, &(0x7f0000000440)=""/166, 0xa6, 0x1, 0x3c}}, &(0x7f0000000580)={0x0, 0x20, 0x48}}, 0x40}], 0xfa, 0x0, &(0x7f0000000700)="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"}) (async)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0) (async)
write$ppp(r1, 0x0, 0xeffdffff) (async)

22:46:38 executing program 4:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
sendmsg$AUDIT_TRIM(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x3f6, 0x1, 0x1, 0x25dfdbff, "", ["", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x20044000}, 0x4081) (async)
sendmsg$AUDIT_TRIM(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x3f6, 0x1, 0x1, 0x25dfdbff, "", ["", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x20044000}, 0x4081)

22:46:38 executing program 2:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000200), 0x1a9002, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(r1, 0x10f, 0x86)
r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0)
r3 = openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(r3, 0x10f, 0x86)
ioctl$PPPIOCSCOMPRESS(r3, 0x4010744d)
r4 = openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(r4, 0x10f, 0x86)
r5 = openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(r5, 0x10f, 0x86)
ioctl$TUNSETLINK(r0, 0x400454cd, 0x324)
socketpair(0x29, 0x6, 0x3, &(0x7f0000000040)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
getsockopt$TIPC_GROUP_JOIN(r7, 0x10f, 0x87, &(0x7f0000000180), &(0x7f00000001c0)=0x4)
write$ppp(r2, &(0x7f00000000c0)="532dcdd61c0600ef110d143045a6516c31f25333f62dbdc1edc7322e46d37a1853f296eeba203a0f7147323c529096a5e769cac2e1becbca40690511a539a636fa52c862a914a58bbacebb8c4c30db308933e3ecfac8af4487e1bcff41b28d31cc51bdbf1c3fdb62995cfeb0b6e83b2cdc4af78ba0fcb9f1ab79482990ccccde6c912b79ed0002718868aebe300e0b34ba54720ffb5f71d3a9d44d14815591f5697e779cb1f3be75f7", 0xa9)
r8 = openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(r8, 0x10f, 0x86)
setsockopt$TIPC_MCAST_BROADCAST(r6, 0x10f, 0x85)
sendmsg$can_j1939(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)="f073492190ba2fd8ac7bd7220eec", 0xe}, 0x1, 0x0, 0x0, 0x880}, 0x810)
ioctl$TUNSETSNDBUF(r4, 0x400454d4, &(0x7f0000000240)=0x1d0000)

22:46:38 executing program 4:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
sendmsg$AUDIT_TRIM(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x3f6, 0x1, 0x1, 0x25dfdbff, "", ["", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x20044000}, 0x4081)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0) (async)
sendmsg$AUDIT_TRIM(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x3f6, 0x1, 0x1, 0x25dfdbff, "", ["", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x20044000}, 0x4081) (async)

22:46:38 executing program 0:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0) (async)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(r2, 0x10f, 0x86) (async)
ioctl$LOOP_SET_FD(r2, 0x4c00, r1)
sendmsg$AUDIT_DEL_RULE(r0, &(0x7f0000000540)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000500)={&(0x7f00000000c0)={0x42c, 0x3f4, 0x8, 0x70bd27, 0x25dfdbfc, {0x15, 0x1, 0xb, [0x6, 0x3ff, 0x400, 0x8, 0x5, 0x9, 0xab, 0x1, 0x1000, 0x3ff, 0x40, 0x1, 0x7, 0x0, 0x7, 0x4, 0x6, 0x373, 0x800, 0x2, 0x7, 0x3, 0x100, 0x4063, 0x1, 0x200, 0x0, 0x80000000, 0x40, 0x3, 0x200, 0xffff8001, 0xfc000000, 0x2, 0xfffffeff, 0xc350, 0x100, 0x1, 0xfff, 0x200, 0x3, 0x3, 0x0, 0xd7c, 0x0, 0xe9, 0x4, 0x9, 0x800, 0x2, 0x3800, 0x120000, 0x0, 0x7f, 0x3, 0x1, 0x400, 0x3, 0x2, 0x0, 0x401, 0x6, 0x81, 0x2], [0x2, 0x7, 0x3, 0x67d, 0x6, 0x55, 0x4, 0x7, 0xfffffeff, 0x100, 0x6873, 0x81, 0x0, 0x1, 0x1, 0x5, 0x8, 0x101, 0x8, 0x2, 0xfffffffc, 0x4, 0x1, 0x3b7c, 0x80000001, 0xffffffff, 0x2, 0x9, 0x2, 0x1, 0xf833, 0xffff0001, 0xffffffff, 0xc4d8, 0x3, 0x2, 0xea, 0x7ff, 0xb9, 0x15, 0x1291, 0x1, 0x10000, 0x2, 0x6, 0xd8, 0x7ff, 0x2, 0x7, 0x6, 0xffffffff, 0x40, 0x3, 0x57ed, 0x100, 0x3, 0x0, 0x7fff, 0x8, 0x100, 0xffffffff, 0x5, 0x80, 0x1], [0x17d, 0x0, 0x8, 0x4, 0x0, 0x7, 0x99f1, 0x0, 0x1, 0x0, 0x8, 0x80000000, 0x9, 0x1, 0xfff, 0x7fffffff, 0xffffffff, 0x80000000, 0x8, 0x8663, 0x40, 0x0, 0x2, 0x7, 0x16a0000, 0xaa7, 0x9, 0xffffffff, 0x7, 0x78a5, 0x8, 0x7fffffff, 0x10001, 0x3f, 0x2, 0x9, 0x5, 0x2, 0x7fffffff, 0x7fffffff, 0x4, 0xc1ac, 0x80000001, 0x5, 0x80000001, 0x4, 0x4, 0x3, 0x1, 0x39, 0x800, 0x4, 0x8, 0x4, 0xff, 0x7, 0xa3, 0xfffffffe, 0xfffff000, 0x3, 0x5, 0x3f, 0x8, 0xffffffc0], [0x4, 0x2, 0x1, 0x4, 0x8000, 0x9, 0x8, 0xfffffffb, 0x9, 0xa6, 0x0, 0x8, 0x7, 0x28, 0x4, 0x8, 0x8, 0x80000001, 0x40, 0x2, 0x0, 0x3, 0x9, 0x6, 0x8a3, 0x13c, 0x2, 0x81, 0x1, 0x4, 0x3, 0x8, 0x4, 0xc71, 0xeba, 0x5, 0x1, 0x80000001, 0x178aada, 0x10001, 0x8, 0x2, 0x1, 0x6bb, 0x3, 0x211, 0x4, 0x200, 0x7, 0x5, 0xffffffff, 0xfffffff9, 0x0, 0x80000000, 0x3, 0xfffffffa, 0x5, 0xbd, 0x7, 0x9, 0x9, 0x1, 0xffff, 0x80], 0x9, ['/dev/bsg\x00']}, ["", "", "", "", "", ""]}, 0x42c}, 0x1, 0x0, 0x0, 0x20004000}, 0x4000080)

[ 2804.548353][ T5337] FAULT_INJECTION: forcing a failure.
[ 2804.548353][ T5337] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 2804.561489][ T5337] CPU: 1 PID: 5337 Comm: syz-executor.5 Not tainted 6.6.0-rc3-syzkaller-00165-g3b517966c561 #0
[ 2804.571845][ T5337] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/06/2023
[ 2804.581907][ T5337] Call Trace:
[ 2804.585181][ T5337]  <TASK>
[ 2804.588104][ T5337]  dump_stack_lvl+0xda/0x130
[ 2804.592714][ T5337]  dump_stack+0x15/0x20
[ 2804.596880][ T5337]  should_fail_ex+0x21f/0x230
[ 2804.601577][ T5337]  should_fail+0xb/0x10
[ 2804.605803][ T5337]  should_fail_usercopy+0x1a/0x20
[ 2804.610849][ T5337]  copy_page_from_iter_atomic+0x21c/0xcf0
[ 2804.616590][ T5337]  ? shmem_write_begin+0xa6/0x210
[ 2804.621654][ T5337]  ? shmem_write_begin+0x16d/0x210
[ 2804.626807][ T5337]  generic_perform_write+0x20c/0x410
[ 2804.632258][ T5337]  ? shmem_write_begin+0x210/0x210
[ 2804.637442][ T5337]  shmem_file_write_iter+0xc8/0xe0
[ 2804.642698][ T5337]  vfs_write+0x4ab/0x7d0
[ 2804.646979][ T5337]  ksys_write+0xeb/0x1a0
[ 2804.651250][ T5337]  __x64_sys_write+0x42/0x50
[ 2804.655868][ T5337]  do_syscall_64+0x41/0xc0
[ 2804.660389][ T5337]  entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 2804.666416][ T5337] RIP: 0033:0x7f90e4a54ae9
[ 2804.670852][ T5337] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48
[ 2804.690679][ T5337] RSP: 002b:00007f90e3dd70c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
22:46:38 executing program 4:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0xa943, 0x0)
write$ppp(r0, 0x0, 0x0)

22:46:38 executing program 2:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000200), 0x1a9002, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(r1, 0x10f, 0x86)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) (async)
r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0)
r3 = openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(r3, 0x10f, 0x86) (async)
setsockopt$TIPC_MCAST_REPLICAST(r3, 0x10f, 0x86)
ioctl$PPPIOCSCOMPRESS(r3, 0x4010744d)
r4 = openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(r4, 0x10f, 0x86) (async)
setsockopt$TIPC_MCAST_REPLICAST(r4, 0x10f, 0x86)
r5 = openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(r5, 0x10f, 0x86) (async)
setsockopt$TIPC_MCAST_REPLICAST(r5, 0x10f, 0x86)
ioctl$TUNSETLINK(r0, 0x400454cd, 0x324)
socketpair(0x29, 0x6, 0x3, &(0x7f0000000040)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
getsockopt$TIPC_GROUP_JOIN(r7, 0x10f, 0x87, &(0x7f0000000180), &(0x7f00000001c0)=0x4)
write$ppp(r2, &(0x7f00000000c0)="532dcdd61c0600ef110d143045a6516c31f25333f62dbdc1edc7322e46d37a1853f296eeba203a0f7147323c529096a5e769cac2e1becbca40690511a539a636fa52c862a914a58bbacebb8c4c30db308933e3ecfac8af4487e1bcff41b28d31cc51bdbf1c3fdb62995cfeb0b6e83b2cdc4af78ba0fcb9f1ab79482990ccccde6c912b79ed0002718868aebe300e0b34ba54720ffb5f71d3a9d44d14815591f5697e779cb1f3be75f7", 0xa9)
r8 = openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(r8, 0x10f, 0x86) (async)
setsockopt$TIPC_MCAST_REPLICAST(r8, 0x10f, 0x86)
setsockopt$TIPC_MCAST_BROADCAST(r6, 0x10f, 0x85)
sendmsg$can_j1939(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)="f073492190ba2fd8ac7bd7220eec", 0xe}, 0x1, 0x0, 0x0, 0x880}, 0x810) (async)
sendmsg$can_j1939(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)="f073492190ba2fd8ac7bd7220eec", 0xe}, 0x1, 0x0, 0x0, 0x880}, 0x810)
ioctl$TUNSETSNDBUF(r4, 0x400454d4, &(0x7f0000000240)=0x1d0000)

22:46:38 executing program 0:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0) (async)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff}) (async, rerun: 32)
r2 = openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0) (rerun: 32)
setsockopt$TIPC_MCAST_REPLICAST(r2, 0x10f, 0x86) (async)
ioctl$LOOP_SET_FD(r2, 0x4c00, r1) (async, rerun: 32)
sendmsg$AUDIT_DEL_RULE(r0, &(0x7f0000000540)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000500)={&(0x7f00000000c0)={0x42c, 0x3f4, 0x8, 0x70bd27, 0x25dfdbfc, {0x15, 0x1, 0xb, [0x6, 0x3ff, 0x400, 0x8, 0x5, 0x9, 0xab, 0x1, 0x1000, 0x3ff, 0x40, 0x1, 0x7, 0x0, 0x7, 0x4, 0x6, 0x373, 0x800, 0x2, 0x7, 0x3, 0x100, 0x4063, 0x1, 0x200, 0x0, 0x80000000, 0x40, 0x3, 0x200, 0xffff8001, 0xfc000000, 0x2, 0xfffffeff, 0xc350, 0x100, 0x1, 0xfff, 0x200, 0x3, 0x3, 0x0, 0xd7c, 0x0, 0xe9, 0x4, 0x9, 0x800, 0x2, 0x3800, 0x120000, 0x0, 0x7f, 0x3, 0x1, 0x400, 0x3, 0x2, 0x0, 0x401, 0x6, 0x81, 0x2], [0x2, 0x7, 0x3, 0x67d, 0x6, 0x55, 0x4, 0x7, 0xfffffeff, 0x100, 0x6873, 0x81, 0x0, 0x1, 0x1, 0x5, 0x8, 0x101, 0x8, 0x2, 0xfffffffc, 0x4, 0x1, 0x3b7c, 0x80000001, 0xffffffff, 0x2, 0x9, 0x2, 0x1, 0xf833, 0xffff0001, 0xffffffff, 0xc4d8, 0x3, 0x2, 0xea, 0x7ff, 0xb9, 0x15, 0x1291, 0x1, 0x10000, 0x2, 0x6, 0xd8, 0x7ff, 0x2, 0x7, 0x6, 0xffffffff, 0x40, 0x3, 0x57ed, 0x100, 0x3, 0x0, 0x7fff, 0x8, 0x100, 0xffffffff, 0x5, 0x80, 0x1], [0x17d, 0x0, 0x8, 0x4, 0x0, 0x7, 0x99f1, 0x0, 0x1, 0x0, 0x8, 0x80000000, 0x9, 0x1, 0xfff, 0x7fffffff, 0xffffffff, 0x80000000, 0x8, 0x8663, 0x40, 0x0, 0x2, 0x7, 0x16a0000, 0xaa7, 0x9, 0xffffffff, 0x7, 0x78a5, 0x8, 0x7fffffff, 0x10001, 0x3f, 0x2, 0x9, 0x5, 0x2, 0x7fffffff, 0x7fffffff, 0x4, 0xc1ac, 0x80000001, 0x5, 0x80000001, 0x4, 0x4, 0x3, 0x1, 0x39, 0x800, 0x4, 0x8, 0x4, 0xff, 0x7, 0xa3, 0xfffffffe, 0xfffff000, 0x3, 0x5, 0x3f, 0x8, 0xffffffc0], [0x4, 0x2, 0x1, 0x4, 0x8000, 0x9, 0x8, 0xfffffffb, 0x9, 0xa6, 0x0, 0x8, 0x7, 0x28, 0x4, 0x8, 0x8, 0x80000001, 0x40, 0x2, 0x0, 0x3, 0x9, 0x6, 0x8a3, 0x13c, 0x2, 0x81, 0x1, 0x4, 0x3, 0x8, 0x4, 0xc71, 0xeba, 0x5, 0x1, 0x80000001, 0x178aada, 0x10001, 0x8, 0x2, 0x1, 0x6bb, 0x3, 0x211, 0x4, 0x200, 0x7, 0x5, 0xffffffff, 0xfffffff9, 0x0, 0x80000000, 0x3, 0xfffffffa, 0x5, 0xbd, 0x7, 0x9, 0x9, 0x1, 0xffff, 0x80], 0x9, ['/dev/bsg\x00']}, ["", "", "", "", "", ""]}, 0x42c}, 0x1, 0x0, 0x0, 0x20004000}, 0x4000080) (rerun: 32)

22:46:38 executing program 3:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0)
ioctl$TUNGETDEVNETNS(r0, 0x54e3, 0x0)
set_thread_area(&(0x7f0000000000)={0x6, 0x100000, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x1}) (async)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x5dec81, 0x0)
write$ppp(r1, &(0x7f00000002c0)="d3", 0xfffffdef) (async)
ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f00000000c0)={'dummy0\x00'})

22:46:38 executing program 1:
openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(r0, 0x10f, 0x86)
write$ppp(r0, 0x0, 0x0)

22:46:38 executing program 5:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
write$ppp(r0, &(0x7f00000002c0)="d3", 0x1f4f33) (fail_nth: 46)

[ 2804.699134][ T5337] RAX: ffffffffffffffda RBX: 00007f90e4b73f80 RCX: 00007f90e4a54ae9
[ 2804.707118][ T5337] RDX: 00000000001f4f33 RSI: 00000000200002c0 RDI: 0000000000000003
[ 2804.715110][ T5337] RBP: 00007f90e3dd7120 R08: 0000000000000000 R09: 0000000000000000
[ 2804.723085][ T5337] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 2804.731135][ T5337] R13: 000000000000000b R14: 00007f90e4b73f80 R15: 00007ffdb3bfd028
[ 2804.739104][ T5337]  </TASK>
22:46:38 executing program 1:
openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(r0, 0x10f, 0x86)
write$ppp(r0, 0x0, 0x0)

22:46:38 executing program 4:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0xa943, 0x0)
write$ppp(r0, 0x0, 0x0)

[ 2804.803717][ T5363] FAULT_INJECTION: forcing a failure.
[ 2804.803717][ T5363] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[ 2804.817078][ T5363] CPU: 0 PID: 5363 Comm: syz-executor.5 Not tainted 6.6.0-rc3-syzkaller-00165-g3b517966c561 #0
[ 2804.827425][ T5363] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/06/2023
[ 2804.837570][ T5363] Call Trace:
[ 2804.840895][ T5363]  <TASK>
[ 2804.843916][ T5363]  dump_stack_lvl+0xda/0x130
[ 2804.848566][ T5363]  dump_stack+0x15/0x20
[ 2804.852735][ T5363]  should_fail_ex+0x21f/0x230
[ 2804.857538][ T5363]  __should_fail_alloc_page+0xfd/0x110
[ 2804.863156][ T5363]  __alloc_pages+0x108/0x340
[ 2804.867900][ T5363]  vma_alloc_folio+0x6a3/0x8c0
[ 2804.872748][ T5363]  ? shmem_inode_acct_block+0x1ee/0x220
[ 2804.878349][ T5363]  shmem_get_folio_gfp+0x579/0xc30
[ 2804.883490][ T5363]  shmem_write_begin+0xa6/0x210
[ 2804.888478][ T5363]  generic_perform_write+0x1c9/0x410
[ 2804.893790][ T5363]  ? shmem_write_begin+0x210/0x210
[ 2804.898956][ T5363]  shmem_file_write_iter+0xc8/0xe0
22:46:38 executing program 4:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0xa943, 0x0)
write$ppp(r0, 0x0, 0x0)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0xa943, 0x0) (async)
write$ppp(r0, 0x0, 0x0) (async)

22:46:38 executing program 0:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100), 0x240200, 0x0)
sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0x0, 0x400, 0x70bd29, 0x25dfdbfb, {}, [@L2TP_ATTR_OFFSET={0x6, 0x3, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x810}, 0x20004004)
setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000000)='scalable\x00', 0x9)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x5de801, 0x0)
prctl$PR_SET_NAME(0xf, &(0x7f0000000080)=':*\'\x00')
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f00000000c0)=0x1, 0x4)
write$ppp(r1, 0x0, 0xeffdffffffffffff)

22:46:38 executing program 4:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
getsockopt$TIPC_IMPORTANCE(r0, 0x10f, 0x7f, &(0x7f0000000000), &(0x7f0000000040)=0x4)
write$ppp(r0, 0x0, 0x0)

22:46:38 executing program 2:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000200), 0x1a9002, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(r1, 0x10f, 0x86)
r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0)
r3 = openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(r3, 0x10f, 0x86)
ioctl$PPPIOCSCOMPRESS(r3, 0x4010744d)
r4 = openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(r4, 0x10f, 0x86)
r5 = openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(r5, 0x10f, 0x86)
ioctl$TUNSETLINK(r0, 0x400454cd, 0x324)
socketpair(0x29, 0x6, 0x3, &(0x7f0000000040)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
getsockopt$TIPC_GROUP_JOIN(r7, 0x10f, 0x87, &(0x7f0000000180), &(0x7f00000001c0)=0x4)
write$ppp(r2, &(0x7f00000000c0)="532dcdd61c0600ef110d143045a6516c31f25333f62dbdc1edc7322e46d37a1853f296eeba203a0f7147323c529096a5e769cac2e1becbca40690511a539a636fa52c862a914a58bbacebb8c4c30db308933e3ecfac8af4487e1bcff41b28d31cc51bdbf1c3fdb62995cfeb0b6e83b2cdc4af78ba0fcb9f1ab79482990ccccde6c912b79ed0002718868aebe300e0b34ba54720ffb5f71d3a9d44d14815591f5697e779cb1f3be75f7", 0xa9)
r8 = openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(r8, 0x10f, 0x86)
setsockopt$TIPC_MCAST_BROADCAST(r6, 0x10f, 0x85)
sendmsg$can_j1939(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)="f073492190ba2fd8ac7bd7220eec", 0xe}, 0x1, 0x0, 0x0, 0x880}, 0x810)
ioctl$TUNSETSNDBUF(r4, 0x400454d4, &(0x7f0000000240)=0x1d0000)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0) (async)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000200), 0x1a9002, 0x0) (async)
setsockopt$TIPC_MCAST_REPLICAST(r1, 0x10f, 0x86) (async)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) (async)
openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0) (async)
setsockopt$TIPC_MCAST_REPLICAST(r3, 0x10f, 0x86) (async)
ioctl$PPPIOCSCOMPRESS(r3, 0x4010744d) (async)
openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0) (async)
setsockopt$TIPC_MCAST_REPLICAST(r4, 0x10f, 0x86) (async)
openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0) (async)
setsockopt$TIPC_MCAST_REPLICAST(r5, 0x10f, 0x86) (async)
ioctl$TUNSETLINK(r0, 0x400454cd, 0x324) (async)
socketpair(0x29, 0x6, 0x3, &(0x7f0000000040)) (async)
getsockopt$TIPC_GROUP_JOIN(r7, 0x10f, 0x87, &(0x7f0000000180), &(0x7f00000001c0)=0x4) (async)
write$ppp(r2, &(0x7f00000000c0)="532dcdd61c0600ef110d143045a6516c31f25333f62dbdc1edc7322e46d37a1853f296eeba203a0f7147323c529096a5e769cac2e1becbca40690511a539a636fa52c862a914a58bbacebb8c4c30db308933e3ecfac8af4487e1bcff41b28d31cc51bdbf1c3fdb62995cfeb0b6e83b2cdc4af78ba0fcb9f1ab79482990ccccde6c912b79ed0002718868aebe300e0b34ba54720ffb5f71d3a9d44d14815591f5697e779cb1f3be75f7", 0xa9) (async)
openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0) (async)
setsockopt$TIPC_MCAST_REPLICAST(r8, 0x10f, 0x86) (async)
setsockopt$TIPC_MCAST_BROADCAST(r6, 0x10f, 0x85) (async)
sendmsg$can_j1939(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)="f073492190ba2fd8ac7bd7220eec", 0xe}, 0x1, 0x0, 0x0, 0x880}, 0x810) (async)
ioctl$TUNSETSNDBUF(r4, 0x400454d4, &(0x7f0000000240)=0x1d0000) (async)

[ 2804.904122][ T5363]  vfs_write+0x4ab/0x7d0
[ 2804.908526][ T5363]  ksys_write+0xeb/0x1a0
[ 2804.912776][ T5363]  __x64_sys_write+0x42/0x50
[ 2804.917410][ T5363]  do_syscall_64+0x41/0xc0
[ 2804.921839][ T5363]  ? irqentry_exit+0x12/0x40
[ 2804.926458][ T5363]  entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 2804.932385][ T5363] RIP: 0033:0x7f90e4a54ae9
[ 2804.936869][ T5363] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48
[ 2804.956735][ T5363] RSP: 002b:00007f90e3dd70c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 2804.965185][ T5363] RAX: ffffffffffffffda RBX: 00007f90e4b73f80 RCX: 00007f90e4a54ae9
[ 2804.973173][ T5363] RDX: 00000000001f4f33 RSI: 00000000200002c0 RDI: 0000000000000003
[ 2804.981179][ T5363] RBP: 00007f90e3dd7120 R08: 0000000000000000 R09: 0000000000000000
[ 2804.989250][ T5363] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
22:46:39 executing program 5:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
write$ppp(r0, &(0x7f00000002c0)="d3", 0x1f4f33) (fail_nth: 47)

22:46:39 executing program 1:
openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(r0, 0x10f, 0x86) (async)
write$ppp(r0, 0x0, 0x0)

22:46:39 executing program 3:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0)
ioctl$TUNGETDEVNETNS(r0, 0x54e3, 0x0) (async)
set_thread_area(&(0x7f0000000000)={0x6, 0x100000, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x1}) (async)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x5dec81, 0x0)
write$ppp(r1, &(0x7f00000002c0)="d3", 0xfffffdef)
ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f00000000c0)={'dummy0\x00'})

22:46:39 executing program 0:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100), 0x240200, 0x0)
sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0x0, 0x400, 0x70bd29, 0x25dfdbfb, {}, [@L2TP_ATTR_OFFSET={0x6, 0x3, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x810}, 0x20004004) (async)
setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000000)='scalable\x00', 0x9) (async)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x5de801, 0x0)
prctl$PR_SET_NAME(0xf, &(0x7f0000000080)=':*\'\x00') (async)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f00000000c0)=0x1, 0x4) (async)
write$ppp(r1, 0x0, 0xeffdffffffffffff)

22:46:39 executing program 4:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
getsockopt$TIPC_IMPORTANCE(r0, 0x10f, 0x7f, &(0x7f0000000000), &(0x7f0000000040)=0x4)
write$ppp(r0, 0x0, 0x0)

22:46:39 executing program 4:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
getsockopt$TIPC_IMPORTANCE(r0, 0x10f, 0x7f, &(0x7f0000000000), &(0x7f0000000040)=0x4)
write$ppp(r0, 0x0, 0x0)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0) (async)
getsockopt$TIPC_IMPORTANCE(r0, 0x10f, 0x7f, &(0x7f0000000000), &(0x7f0000000040)=0x4) (async)
write$ppp(r0, 0x0, 0x0) (async)

[ 2804.997343][ T5363] R13: 000000000000000b R14: 00007f90e4b73f80 R15: 00007ffdb3bfd028
[ 2805.005376][ T5363]  </TASK>
22:46:39 executing program 1:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
write$ppp(r0, 0x0, 0xeffdffff)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(r1, 0x10f, 0x86)
ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x9, 0x7fffffff, 0x0, 0x0, 0xf, 0x0, "a203d55d0cb03fbc9db0fc2089814d669dec06ce8fbdc0c03cde6f21d527ad2c519820979950c3677d4180a8ad802ef5ad16b0833e456980c18d306c333bff92", "95eb483581e654513da639ecfc587dfda8d2739ae957e5c1a404693f33aba204c87fb602f337640c45e78e291a837b59ac9ea5133de79a7a990e1d25e76d9070", "5c8907390ed8360311979d521f7b03ac0b2637529a15b3ac5200", [0xc06e, 0x9]})
getsockopt$TIPC_SRC_DROPPABLE(r0, 0x10f, 0x80, &(0x7f0000000000), &(0x7f0000000040)=0x4)

22:46:39 executing program 0:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100), 0x240200, 0x0)
sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0x0, 0x400, 0x70bd29, 0x25dfdbfb, {}, [@L2TP_ATTR_OFFSET={0x6, 0x3, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x810}, 0x20004004) (async)
setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000000)='scalable\x00', 0x9)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x5de801, 0x0)
prctl$PR_SET_NAME(0xf, &(0x7f0000000080)=':*\'\x00')
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f00000000c0)=0x1, 0x4)
write$ppp(r1, 0x0, 0xeffdffffffffffff)

[ 2805.057732][ T5395] FAULT_INJECTION: forcing a failure.
[ 2805.057732][ T5395] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 2805.071033][ T5395] CPU: 1 PID: 5395 Comm: syz-executor.5 Not tainted 6.6.0-rc3-syzkaller-00165-g3b517966c561 #0
[ 2805.081380][ T5395] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/06/2023
[ 2805.091543][ T5395] Call Trace:
[ 2805.094834][ T5395]  <TASK>
[ 2805.097853][ T5395]  dump_stack_lvl+0xda/0x130
[ 2805.102465][ T5395]  dump_stack+0x15/0x20
22:46:39 executing program 2:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5e2e01, 0x0)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
write$ppp(r0, &(0x7f00000002c0)="d3", 0x1)

22:46:39 executing program 2:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5e2e01, 0x0)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
write$ppp(r0, &(0x7f00000002c0)="d3", 0x1)

22:46:39 executing program 2:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5e2e01, 0x0)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async, rerun: 32)
write$ppp(r0, &(0x7f00000002c0)="d3", 0x1) (rerun: 32)

22:46:39 executing program 2:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
write$ppp(r0, &(0x7f00000002c0)="d3", 0x1)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x111000, 0x0)
openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x80, 0x0)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(r1, 0x10f, 0x86)
ioctl$PPPIOCATTCHAN(r1, 0x40047438, &(0x7f0000000100)=0x3)
r2 = openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(r2, 0x10f, 0x86)
ioctl$PPPIOCGIDLE64(r2, 0x8010743f, &(0x7f0000000140))

[ 2805.106748][ T5395]  should_fail_ex+0x21f/0x230
[ 2805.111470][ T5395]  should_fail+0xb/0x10
[ 2805.115687][ T5395]  should_fail_usercopy+0x1a/0x20
[ 2805.120741][ T5395]  copy_page_from_iter_atomic+0x21c/0xcf0
[ 2805.126542][ T5395]  ? shmem_write_begin+0xa6/0x210
[ 2805.131587][ T5395]  ? shmem_write_begin+0x16d/0x210
[ 2805.136794][ T5395]  generic_perform_write+0x20c/0x410
[ 2805.142127][ T5395]  ? shmem_write_begin+0x210/0x210
[ 2805.147315][ T5395]  shmem_file_write_iter+0xc8/0xe0
[ 2805.152476][ T5395]  vfs_write+0x4ab/0x7d0
[ 2805.156765][ T5395]  ksys_write+0xeb/0x1a0
[ 2805.161037][ T5395]  __x64_sys_write+0x42/0x50
[ 2805.165634][ T5395]  do_syscall_64+0x41/0xc0
[ 2805.170117][ T5395]  entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 2805.176071][ T5395] RIP: 0033:0x7f90e4a54ae9
[ 2805.180502][ T5395] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48
22:46:39 executing program 5:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
write$ppp(r0, &(0x7f00000002c0)="d3", 0x1f4f33) (fail_nth: 48)

22:46:39 executing program 4:
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000000))
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f00000000c0)={'ip6gre0\x00', &(0x7f0000000040)={'syztnl1\x00', 0x0, 0x29, 0x4, 0x0, 0x3, 0x1, @mcast2, @mcast2, 0x7, 0x20, 0x7, 0x80000000}})
write$ppp(0xffffffffffffffff, 0x0, 0x0)
socket$isdn_base(0x22, 0x3, 0x0)

[ 2805.200120][ T5395] RSP: 002b:00007f90e3dd70c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 2805.208651][ T5395] RAX: ffffffffffffffda RBX: 00007f90e4b73f80 RCX: 00007f90e4a54ae9
[ 2805.216712][ T5395] RDX: 00000000001f4f33 RSI: 00000000200002c0 RDI: 0000000000000003
[ 2805.224742][ T5395] RBP: 00007f90e3dd7120 R08: 0000000000000000 R09: 0000000000000000
[ 2805.232719][ T5395] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 2805.240740][ T5395] R13: 000000000000000b R14: 00007f90e4b73f80 R15: 00007ffdb3bfd028
[ 2805.248737][ T5395]  </TASK>
22:46:39 executing program 0:
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000000)=0xffffffff)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
bind$llc(r1, &(0x7f0000000000)={0x1a, 0x311, 0x3, 0xff, 0x17, 0x1, @local}, 0x10)

22:46:39 executing program 2:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
write$ppp(r0, &(0x7f00000002c0)="d3", 0x1)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x111000, 0x0)
openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x80, 0x0)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(r1, 0x10f, 0x86)
ioctl$PPPIOCATTCHAN(r1, 0x40047438, &(0x7f0000000100)=0x3)
r2 = openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(r2, 0x10f, 0x86)
ioctl$PPPIOCGIDLE64(r2, 0x8010743f, &(0x7f0000000140))
openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0) (async)
write$ppp(r0, &(0x7f00000002c0)="d3", 0x1) (async)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x111000, 0x0) (async)
openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x80, 0x0) (async)
openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0) (async)
setsockopt$TIPC_MCAST_REPLICAST(r1, 0x10f, 0x86) (async)
ioctl$PPPIOCATTCHAN(r1, 0x40047438, &(0x7f0000000100)=0x3) (async)
openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0) (async)
setsockopt$TIPC_MCAST_REPLICAST(r2, 0x10f, 0x86) (async)
ioctl$PPPIOCGIDLE64(r2, 0x8010743f, &(0x7f0000000140)) (async)

22:46:39 executing program 4:
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000000)) (async)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f00000000c0)={'ip6gre0\x00', &(0x7f0000000040)={'syztnl1\x00', 0x0, 0x29, 0x4, 0x0, 0x3, 0x1, @mcast2, @mcast2, 0x7, 0x20, 0x7, 0x80000000}}) (async)
write$ppp(0xffffffffffffffff, 0x0, 0x0) (async, rerun: 32)
socket$isdn_base(0x22, 0x3, 0x0) (rerun: 32)

22:46:39 executing program 1:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
write$ppp(r0, 0x0, 0xeffdffff) (async)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(r1, 0x10f, 0x86) (async)
ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x9, 0x7fffffff, 0x0, 0x0, 0xf, 0x0, "a203d55d0cb03fbc9db0fc2089814d669dec06ce8fbdc0c03cde6f21d527ad2c519820979950c3677d4180a8ad802ef5ad16b0833e456980c18d306c333bff92", "95eb483581e654513da639ecfc587dfda8d2739ae957e5c1a404693f33aba204c87fb602f337640c45e78e291a837b59ac9ea5133de79a7a990e1d25e76d9070", "5c8907390ed8360311979d521f7b03ac0b2637529a15b3ac5200", [0xc06e, 0x9]}) (async)
getsockopt$TIPC_SRC_DROPPABLE(r0, 0x10f, 0x80, &(0x7f0000000000), &(0x7f0000000040)=0x4)

22:46:39 executing program 3:
write$ppp(0xffffffffffffffff, &(0x7f00000002c0), 0x0)
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0)
timerfd_create(0xb81c693bf93e79, 0x400)
ioctl$PPPIOCSCOMPRESS(r0, 0x4010744d)
openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x20202, 0x0)
getresuid(&(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180))
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000080)={'ip6_vti0\x00', &(0x7f0000000000)={'ip6tnl0\x00', 0x0, 0x2f, 0x7, 0x6, 0x9, 0x4c6ed45f34523c6e, @empty, @local, 0x8006, 0x80, 0x0, 0x3f}})

22:46:39 executing program 1:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
write$ppp(r0, 0x0, 0xeffdffff)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(r1, 0x10f, 0x86)
ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x9, 0x7fffffff, 0x0, 0x0, 0xf, 0x0, "a203d55d0cb03fbc9db0fc2089814d669dec06ce8fbdc0c03cde6f21d527ad2c519820979950c3677d4180a8ad802ef5ad16b0833e456980c18d306c333bff92", "95eb483581e654513da639ecfc587dfda8d2739ae957e5c1a404693f33aba204c87fb602f337640c45e78e291a837b59ac9ea5133de79a7a990e1d25e76d9070", "5c8907390ed8360311979d521f7b03ac0b2637529a15b3ac5200", [0xc06e, 0x9]})
getsockopt$TIPC_SRC_DROPPABLE(r0, 0x10f, 0x80, &(0x7f0000000000), &(0x7f0000000040)=0x4)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0) (async)
write$ppp(r0, 0x0, 0xeffdffff) (async)
openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0) (async)
setsockopt$TIPC_MCAST_REPLICAST(r1, 0x10f, 0x86) (async)
ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x9, 0x7fffffff, 0x0, 0x0, 0xf, 0x0, "a203d55d0cb03fbc9db0fc2089814d669dec06ce8fbdc0c03cde6f21d527ad2c519820979950c3677d4180a8ad802ef5ad16b0833e456980c18d306c333bff92", "95eb483581e654513da639ecfc587dfda8d2739ae957e5c1a404693f33aba204c87fb602f337640c45e78e291a837b59ac9ea5133de79a7a990e1d25e76d9070", "5c8907390ed8360311979d521f7b03ac0b2637529a15b3ac5200", [0xc06e, 0x9]}) (async)
getsockopt$TIPC_SRC_DROPPABLE(r0, 0x10f, 0x80, &(0x7f0000000000), &(0x7f0000000040)=0x4) (async)

22:46:39 executing program 1:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
write$ppp(r0, 0x0, 0xfffffffffffffdaf)

[ 2805.308644][ T5420] FAULT_INJECTION: forcing a failure.
[ 2805.308644][ T5420] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[ 2805.321949][ T5420] CPU: 1 PID: 5420 Comm: syz-executor.5 Not tainted 6.6.0-rc3-syzkaller-00165-g3b517966c561 #0
[ 2805.332295][ T5420] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/06/2023
[ 2805.342380][ T5420] Call Trace:
[ 2805.345669][ T5420]  <TASK>
[ 2805.348604][ T5420]  dump_stack_lvl+0xda/0x130
[ 2805.353240][ T5420]  dump_stack+0x15/0x20
22:46:39 executing program 1:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
write$ppp(r0, 0x0, 0xfffffffffffffdaf)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0) (async)
write$ppp(r0, 0x0, 0xfffffffffffffdaf) (async)

[ 2805.357411][ T5420]  should_fail_ex+0x21f/0x230
[ 2805.362182][ T5420]  __should_fail_alloc_page+0xfd/0x110
[ 2805.367667][ T5420]  __alloc_pages+0x108/0x340
[ 2805.372314][ T5420]  vma_alloc_folio+0x6a3/0x8c0
[ 2805.377109][ T5420]  ? shmem_inode_acct_block+0x1ee/0x220
[ 2805.382778][ T5420]  shmem_get_folio_gfp+0x579/0xc30
[ 2805.387962][ T5420]  shmem_write_begin+0xa6/0x210
[ 2805.392883][ T5420]  generic_perform_write+0x1c9/0x410
[ 2805.398194][ T5420]  ? shmem_write_begin+0x210/0x210
[ 2805.403431][ T5420]  shmem_file_write_iter+0xc8/0xe0
22:46:39 executing program 3:
write$ppp(0xffffffffffffffff, &(0x7f00000002c0), 0x0) (async)
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0) (async)
timerfd_create(0xb81c693bf93e79, 0x400)
ioctl$PPPIOCSCOMPRESS(r0, 0x4010744d) (async)
openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x20202, 0x0) (async)
getresuid(&(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180)) (async)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000080)={'ip6_vti0\x00', &(0x7f0000000000)={'ip6tnl0\x00', 0x0, 0x2f, 0x7, 0x6, 0x9, 0x4c6ed45f34523c6e, @empty, @local, 0x8006, 0x80, 0x0, 0x3f}})

22:46:39 executing program 0:
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000000)=0xffffffff)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
bind$llc(r1, &(0x7f0000000000)={0x1a, 0x311, 0x3, 0xff, 0x17, 0x1, @local}, 0x10)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async)
ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000000)=0xffffffff) (async)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0) (async)
bind$llc(r1, &(0x7f0000000000)={0x1a, 0x311, 0x3, 0xff, 0x17, 0x1, @local}, 0x10) (async)

[ 2805.408634][ T5420]  vfs_write+0x4ab/0x7d0
[ 2805.412906][ T5420]  ksys_write+0xeb/0x1a0
[ 2805.417167][ T5420]  __x64_sys_write+0x42/0x50
[ 2805.421783][ T5420]  do_syscall_64+0x41/0xc0
[ 2805.426288][ T5420]  entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 2805.432270][ T5420] RIP: 0033:0x7f90e4a54ae9
[ 2805.436708][ T5420] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48
22:46:39 executing program 5:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
write$ppp(r0, &(0x7f00000002c0)="d3", 0x1f4f33) (fail_nth: 49)

[ 2805.456322][ T5420] RSP: 002b:00007f90e3dd70c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 2805.456418][ T5420] RAX: ffffffffffffffda RBX: 00007f90e4b73f80 RCX: 00007f90e4a54ae9
[ 2805.456436][ T5420] RDX: 00000000001f4f33 RSI: 00000000200002c0 RDI: 0000000000000003
[ 2805.456452][ T5420] RBP: 00007f90e3dd7120 R08: 0000000000000000 R09: 0000000000000000
[ 2805.488803][ T5420] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 2805.496777][ T5420] R13: 000000000000000b R14: 00007f90e4b73f80 R15: 00007ffdb3bfd028
[ 2805.504850][ T5420]  </TASK>
22:46:39 executing program 2:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
write$ppp(r0, &(0x7f00000002c0)="d3", 0x1)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x111000, 0x0)
openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x80, 0x0)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(r1, 0x10f, 0x86) (async)
ioctl$PPPIOCATTCHAN(r1, 0x40047438, &(0x7f0000000100)=0x3) (async)
r2 = openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(r2, 0x10f, 0x86) (async)
ioctl$PPPIOCGIDLE64(r2, 0x8010743f, &(0x7f0000000140))

22:46:39 executing program 4:
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000000)) (async)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f00000000c0)={'ip6gre0\x00', &(0x7f0000000040)={'syztnl1\x00', 0x0, 0x29, 0x4, 0x0, 0x3, 0x1, @mcast2, @mcast2, 0x7, 0x20, 0x7, 0x80000000}}) (async)
write$ppp(0xffffffffffffffff, 0x0, 0x0) (async, rerun: 64)
socket$isdn_base(0x22, 0x3, 0x0) (rerun: 64)

22:46:39 executing program 1:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
write$ppp(r0, 0x0, 0xfffffffffffffdaf)

22:46:39 executing program 1:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(r1, 0x10f, 0x86)
ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r1)
write$ppp(r0, 0x0, 0xeffdffff)

22:46:39 executing program 2:
openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
write$ppp(0xffffffffffffffff, &(0x7f00000000c0)="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", 0x1fb)

[ 2805.563858][ T5471] FAULT_INJECTION: forcing a failure.
[ 2805.563858][ T5471] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 2805.576935][ T5471] CPU: 1 PID: 5471 Comm: syz-executor.5 Not tainted 6.6.0-rc3-syzkaller-00165-g3b517966c561 #0
[ 2805.576974][ T5471] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/06/2023
[ 2805.576988][ T5471] Call Trace:
[ 2805.576996][ T5471]  <TASK>
[ 2805.577004][ T5471]  dump_stack_lvl+0xda/0x130
[ 2805.597354][ T5471]  dump_stack+0x15/0x20
[ 2805.597390][ T5471]  should_fail_ex+0x21f/0x230
[ 2805.603605][ T5471]  should_fail+0xb/0x10
[ 2805.603629][ T5471]  should_fail_usercopy+0x1a/0x20
[ 2805.603650][ T5471]  copy_page_from_iter_atomic+0x21c/0xcf0
[ 2805.612367][ T5471]  ? shmem_write_begin+0xa6/0x210
[ 2805.621179][ T5471]  ? shmem_write_begin+0x16d/0x210
[ 2805.631895][ T5471]  generic_perform_write+0x20c/0x410
[ 2805.642126][ T5471]  ? shmem_write_begin+0x210/0x210
[ 2805.652531][ T5471]  shmem_file_write_iter+0xc8/0xe0
[ 2805.652603][ T5471]  vfs_write+0x4ab/0x7d0
22:46:39 executing program 1:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0) (async, rerun: 32)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0) (rerun: 32)
setsockopt$TIPC_MCAST_REPLICAST(r1, 0x10f, 0x86) (async)
ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r1) (async)
write$ppp(r0, 0x0, 0xeffdffff)

22:46:39 executing program 3:
write$ppp(0xffffffffffffffff, &(0x7f00000002c0), 0x0)
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0)
timerfd_create(0xb81c693bf93e79, 0x400)
ioctl$PPPIOCSCOMPRESS(r0, 0x4010744d) (async, rerun: 32)
openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x20202, 0x0) (rerun: 32)
getresuid(&(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180)) (async)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000080)={'ip6_vti0\x00', &(0x7f0000000000)={'ip6tnl0\x00', 0x0, 0x2f, 0x7, 0x6, 0x9, 0x4c6ed45f34523c6e, @empty, @local, 0x8006, 0x80, 0x0, 0x3f}})

[ 2805.652625][ T5471]  ksys_write+0xeb/0x1a0
[ 2805.661987][ T5471]  __x64_sys_write+0x42/0x50
[ 2805.671076][ T5471]  do_syscall_64+0x41/0xc0
[ 2805.675563][ T5471]  entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 2805.681568][ T5471] RIP: 0033:0x7f90e4a54ae9
[ 2805.685998][ T5471] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48
[ 2805.705602][ T5471] RSP: 002b:00007f90e3dd70c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
22:46:39 executing program 1:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0) (async)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(r1, 0x10f, 0x86) (async)
ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r1) (async)
write$ppp(r0, 0x0, 0xeffdffff)

22:46:39 executing program 0:
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000000)=0xffffffff) (async)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
bind$llc(r1, &(0x7f0000000000)={0x1a, 0x311, 0x3, 0xff, 0x17, 0x1, @local}, 0x10)

22:46:39 executing program 1:
r0 = syz_genetlink_get_family_id$SEG6(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x28, r0, 0x4, 0x70bd25, 0x25dfdbfe, {}, [@SEG6_ATTR_DST={0x14, 0x1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, 0x28}, 0x1, 0x0, 0x0, 0x894}, 0x4000000)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
write$ppp(r1, 0x0, 0x2782ce38)
ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r1)
r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETVNETHDRSZ(r2, 0x400454d8, &(0x7f00000001c0)=0x1ff)
setsockopt$TIPC_MCAST_REPLICAST(r2, 0x10f, 0x86)
ioctl$PPPIOCSCOMPRESS(r2, 0x4010744d)

[ 2805.705622][ T5471] RAX: ffffffffffffffda RBX: 00007f90e4b73f80 RCX: 00007f90e4a54ae9
[ 2805.722077][ T5471] RDX: 00000000001f4f33 RSI: 00000000200002c0 RDI: 0000000000000003
[ 2805.730069][ T5471] RBP: 00007f90e3dd7120 R08: 0000000000000000 R09: 0000000000000000
[ 2805.730086][ T5471] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 2805.730101][ T5471] R13: 000000000000000b R14: 00007f90e4b73f80 R15: 00007ffdb3bfd028
[ 2805.754018][ T5471]  </TASK>
22:46:39 executing program 3:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x5dec01, 0x0)
write$ppp(r0, &(0x7f00000002c0)="d3", 0x1)

22:46:39 executing program 5:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
write$ppp(r0, &(0x7f00000002c0)="d3", 0x1f4f33) (fail_nth: 50)

22:46:39 executing program 1:
r0 = syz_genetlink_get_family_id$SEG6(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x28, r0, 0x4, 0x70bd25, 0x25dfdbfe, {}, [@SEG6_ATTR_DST={0x14, 0x1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, 0x28}, 0x1, 0x0, 0x0, 0x894}, 0x4000000) (async)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
write$ppp(r1, 0x0, 0x2782ce38) (async)
ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r1) (async)
r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETVNETHDRSZ(r2, 0x400454d8, &(0x7f00000001c0)=0x1ff)
setsockopt$TIPC_MCAST_REPLICAST(r2, 0x10f, 0x86) (async)
ioctl$PPPIOCSCOMPRESS(r2, 0x4010744d)

22:46:39 executing program 4:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x5dec01, 0x0)
write$ppp(r0, 0x0, 0x0)
sendmsg$SEG6_CMD_SET_TUNSRC(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, 0x0, 0x10, 0x70bd25, 0x25dfdbfe, {}, [@SEG6_ATTR_SECRET={0xc, 0x4, [0x4fa, 0x4]}, @SEG6_ATTR_SECRET={0x4}, @SEG6_ATTR_HMACKEYID={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x880}, 0x5)

22:46:39 executing program 3:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x5dec01, 0x0)
write$ppp(r0, &(0x7f00000002c0)="d3", 0x1)

22:46:39 executing program 0:
sendmsg$AUDIT_USER_AVC(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0xf8, 0x453, 0x8, 0x70bd27, 0x25dfdbfb, "8eb2b51e63ca7012e05d649d4028bbc7c5dee513ba36b5581fa260ed84187261009620a14c6c28adb541edc4c255851cd2a8a495b520cd19144e42272c0cbad0b3914c7fb22c8393fc0360a00e0953a023bc64df63ce4b8d557bb7935cdcda2ac9195dfc1f5c2e95ec4d68aee2cc206adb441b7247d5eeecfb9f8ce4b7c308d127d1d1f23de65db8c5f315efb6aa36d3bac8b92ec754f537b226c68312a73669714949f7f0229f6e4c8af966c75d9e28620580b1d73796d8daa5dba53676d3c1718764f6ee7099ab07718968ac0f0aa04bec7c6a53612bba3f8e0c1fc1586a42f80bc680c2c1", ["", ""]}, 0xf8}, 0x1, 0x0, 0x0, 0x20000001}, 0x8005)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x84000, 0x0)
write$ppp(r0, 0x0, 0x0)

22:46:39 executing program 2:
openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
write$ppp(0xffffffffffffffff, &(0x7f00000000c0)="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", 0x1fb)

22:46:39 executing program 0:
sendmsg$AUDIT_USER_AVC(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0xf8, 0x453, 0x8, 0x70bd27, 0x25dfdbfb, "8eb2b51e63ca7012e05d649d4028bbc7c5dee513ba36b5581fa260ed84187261009620a14c6c28adb541edc4c255851cd2a8a495b520cd19144e42272c0cbad0b3914c7fb22c8393fc0360a00e0953a023bc64df63ce4b8d557bb7935cdcda2ac9195dfc1f5c2e95ec4d68aee2cc206adb441b7247d5eeecfb9f8ce4b7c308d127d1d1f23de65db8c5f315efb6aa36d3bac8b92ec754f537b226c68312a73669714949f7f0229f6e4c8af966c75d9e28620580b1d73796d8daa5dba53676d3c1718764f6ee7099ab07718968ac0f0aa04bec7c6a53612bba3f8e0c1fc1586a42f80bc680c2c1", ["", ""]}, 0xf8}, 0x1, 0x0, 0x0, 0x20000001}, 0x8005) (async)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0) (async)
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x84000, 0x0)
write$ppp(r0, 0x0, 0x0)

22:46:39 executing program 2:
openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
write$ppp(0xffffffffffffffff, &(0x7f00000000c0)="d2c3b3a53bddcf820d28d0cb839c4222614984ab1539b6f34e008b967e3f0e75823966f815c695d1154255bb3ab942aa26bc434171d9b6f0aa3a5ebb1847e3aa19ca5b9d6cc6a9b9c42ee1abf379edfa66998cd50d9be5634699b78cb2f06cd6a3237ca8b605d0e9b3e1cfbf04d6ac85a8dc281302cc6a2d6319eb466cc097941c4da4c7f21fae2b1ff69cceaf42e51f2862e49de27d44060800e3d409f0f3c79a5115e6547d2141807757c29c5e7cffb80f2f4a93965cfa1ae6bf982eb3bb2c2d8da6d11c021d04276c45d834030000000000000023698e5e8f136b316de3b3aedcdfe8194d46228064ad30e1c02cecc0e138bd71a2f4300f5f14fdc1dcceaa2e6b624b562cd56368f6049f90ff09ed702677822cb4b9d1b9f42bc713255de22758196def3c5dfca4bc8b6465dc0900000000000022c11658e70b90537b6332b85dc8b99a5e33d628388d3182ceb6271dc9be5fef4dea7bdc27209ad6b31541195efea2753da3f73a1bc1ab82db8dda244a461f71ef0b098c979466cdeb64a9a932e040cdeb200174e02796c425ffa490ca1c69e49628ff5ac38c1850838466c6dad7f924ee8a5e4d1c86d1445ac21c1b6460a31836461735bd47f1abd0fcecf639ff76b3682c929405e7da6854e59538596c4f20a2b7fb9a494d2418838252d694c68c15f31be6db604a73776a20ed42f67a9f92fd5819558778", 0x1fb)

22:46:39 executing program 3:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x5dec01, 0x0)
write$ppp(r0, &(0x7f00000002c0)="d3", 0x1)

22:46:39 executing program 1:
r0 = syz_genetlink_get_family_id$SEG6(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x28, r0, 0x4, 0x70bd25, 0x25dfdbfe, {}, [@SEG6_ATTR_DST={0x14, 0x1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, 0x28}, 0x1, 0x0, 0x0, 0x894}, 0x4000000) (async)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
write$ppp(r1, 0x0, 0x2782ce38) (async)
ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r1)
r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETVNETHDRSZ(r2, 0x400454d8, &(0x7f00000001c0)=0x1ff) (async)
setsockopt$TIPC_MCAST_REPLICAST(r2, 0x10f, 0x86)
ioctl$PPPIOCSCOMPRESS(r2, 0x4010744d)

[ 2805.868530][ T5507] FAULT_INJECTION: forcing a failure.
[ 2805.868530][ T5507] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[ 2805.882049][ T5507] CPU: 0 PID: 5507 Comm: syz-executor.5 Not tainted 6.6.0-rc3-syzkaller-00165-g3b517966c561 #0
[ 2805.892398][ T5507] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/06/2023
[ 2805.902535][ T5507] Call Trace:
[ 2805.905831][ T5507]  <TASK>
[ 2805.908789][ T5507]  dump_stack_lvl+0xda/0x130
[ 2805.913403][ T5507]  dump_stack+0x15/0x20
22:46:39 executing program 2:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, &(0x7f00000000c0)="e1ef26063f541ea9ec5f9cae10be80756661174895ffd47f464d4ea06dcc5c0ad939d38711d0aaa81ef4249600840349add880806e7d78e9e9e1fe3b8b5669657274fa3b064441f661560f336b703577e411f195e88d06e930c0b3bb5389c67c13e566801be88d4850c2c2186aea3c8e66a9b3765f3b9a2908a33d8ae9e49bc5d8b9ddfc8314792639909cf348e5eaf6b60d8899bb45fb59a7caf923f5b12a84f02adb79e7b81908ad9ca26f0bc994e0d56b5cf038962cf440d01f4973f980283e7db1e1bf6cf4d06120578a3d78f8114609fd349d2fa8addb00820ef305ba9723f8b78da088912c34a456e1ce7ab4eb4287", 0xf2, 0xfffffffffffffffe)
write$ppp(r0, &(0x7f00000002c0)="d3", 0x1)

22:46:39 executing program 4:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x5dec01, 0x0)
write$ppp(r0, 0x0, 0x0)
sendmsg$SEG6_CMD_SET_TUNSRC(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, 0x0, 0x10, 0x70bd25, 0x25dfdbfe, {}, [@SEG6_ATTR_SECRET={0xc, 0x4, [0x4fa, 0x4]}, @SEG6_ATTR_SECRET={0x4}, @SEG6_ATTR_HMACKEYID={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x880}, 0x5)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x5dec01, 0x0) (async)
write$ppp(r0, 0x0, 0x0) (async)
sendmsg$SEG6_CMD_SET_TUNSRC(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, 0x0, 0x10, 0x70bd25, 0x25dfdbfe, {}, [@SEG6_ATTR_SECRET={0xc, 0x4, [0x4fa, 0x4]}, @SEG6_ATTR_SECRET={0x4}, @SEG6_ATTR_HMACKEYID={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x880}, 0x5) (async)

22:46:39 executing program 0:
sendmsg$AUDIT_USER_AVC(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0xf8, 0x453, 0x8, 0x70bd27, 0x25dfdbfb, "8eb2b51e63ca7012e05d649d4028bbc7c5dee513ba36b5581fa260ed84187261009620a14c6c28adb541edc4c255851cd2a8a495b520cd19144e42272c0cbad0b3914c7fb22c8393fc0360a00e0953a023bc64df63ce4b8d557bb7935cdcda2ac9195dfc1f5c2e95ec4d68aee2cc206adb441b7247d5eeecfb9f8ce4b7c308d127d1d1f23de65db8c5f315efb6aa36d3bac8b92ec754f537b226c68312a73669714949f7f0229f6e4c8af966c75d9e28620580b1d73796d8daa5dba53676d3c1718764f6ee7099ab07718968ac0f0aa04bec7c6a53612bba3f8e0c1fc1586a42f80bc680c2c1", ["", ""]}, 0xf8}, 0x1, 0x0, 0x0, 0x20000001}, 0x8005) (async)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0) (async)
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x84000, 0x0)
write$ppp(r0, 0x0, 0x0)

[ 2805.917688][ T5507]  should_fail_ex+0x21f/0x230
[ 2805.922468][ T5507]  __should_fail_alloc_page+0xfd/0x110
[ 2805.927961][ T5507]  __alloc_pages+0x108/0x340
[ 2805.932585][ T5507]  vma_alloc_folio+0x6a3/0x8c0
[ 2805.937547][ T5507]  ? shmem_inode_acct_block+0x1ee/0x220
[ 2805.943111][ T5507]  shmem_get_folio_gfp+0x579/0xc30
[ 2805.948285][ T5507]  shmem_write_begin+0xa6/0x210
[ 2805.953278][ T5507]  generic_perform_write+0x1c9/0x410
[ 2805.958585][ T5507]  ? shmem_write_begin+0x210/0x210
[ 2805.963828][ T5507]  shmem_file_write_iter+0xc8/0xe0
[ 2805.968965][ T5507]  vfs_write+0x4ab/0x7d0
[ 2805.973326][ T5507]  ksys_write+0xeb/0x1a0
[ 2805.977593][ T5507]  __x64_sys_write+0x42/0x50
[ 2805.982191][ T5507]  do_syscall_64+0x41/0xc0
[ 2805.986641][ T5507]  entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 2805.992667][ T5507] RIP: 0033:0x7f90e4a54ae9
[ 2805.997117][ T5507] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48
22:46:40 executing program 5:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
write$ppp(r0, &(0x7f00000002c0)="d3", 0x1f4f33) (fail_nth: 51)

22:46:40 executing program 3:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="18000000", @ANYRES16=0x0, @ANYBLOB="00012cbd7000fcdbdf250400000006000e0002000000"], 0x1c}, 0x1, 0x0, 0x0, 0x48000}, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x28000, 0x0)
write$ppp(r0, &(0x7f00000002c0)="d3", 0xfffffdef)

22:46:40 executing program 0:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x5fe801, 0x0)
write$ppp(r0, 0x0, 0xeffdffffffffffff)

22:46:40 executing program 2:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, &(0x7f00000000c0)="e1ef26063f541ea9ec5f9cae10be80756661174895ffd47f464d4ea06dcc5c0ad939d38711d0aaa81ef4249600840349add880806e7d78e9e9e1fe3b8b5669657274fa3b064441f661560f336b703577e411f195e88d06e930c0b3bb5389c67c13e566801be88d4850c2c2186aea3c8e66a9b3765f3b9a2908a33d8ae9e49bc5d8b9ddfc8314792639909cf348e5eaf6b60d8899bb45fb59a7caf923f5b12a84f02adb79e7b81908ad9ca26f0bc994e0d56b5cf038962cf440d01f4973f980283e7db1e1bf6cf4d06120578a3d78f8114609fd349d2fa8addb00820ef305ba9723f8b78da088912c34a456e1ce7ab4eb4287", 0xf2, 0xfffffffffffffffe)
write$ppp(r0, &(0x7f00000002c0)="d3", 0x1)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0) (async)
add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, &(0x7f00000000c0)="e1ef26063f541ea9ec5f9cae10be80756661174895ffd47f464d4ea06dcc5c0ad939d38711d0aaa81ef4249600840349add880806e7d78e9e9e1fe3b8b5669657274fa3b064441f661560f336b703577e411f195e88d06e930c0b3bb5389c67c13e566801be88d4850c2c2186aea3c8e66a9b3765f3b9a2908a33d8ae9e49bc5d8b9ddfc8314792639909cf348e5eaf6b60d8899bb45fb59a7caf923f5b12a84f02adb79e7b81908ad9ca26f0bc994e0d56b5cf038962cf440d01f4973f980283e7db1e1bf6cf4d06120578a3d78f8114609fd349d2fa8addb00820ef305ba9723f8b78da088912c34a456e1ce7ab4eb4287", 0xf2, 0xfffffffffffffffe) (async)
write$ppp(r0, &(0x7f00000002c0)="d3", 0x1) (async)

22:46:40 executing program 1:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x68c080, 0x0)
write$ppp(r0, 0x0, 0xeffdffff)
ioctl$PPPIOCGIDLE(0xffffffffffffffff, 0x8010743f, &(0x7f0000000180))
socket$nl_generic(0x10, 0x3, 0x10)
r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000140), 0x40, 0x0)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000100), r1)
getsockname$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @private1}, &(0x7f0000000080)=0x20)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), r0)
r3 = syz_init_net_socket$llc(0x1a, 0x2, 0x0)
setsockopt$llc_int(r3, 0x10c, 0x7, &(0x7f0000000000)=0xfffffffc, 0x4)
sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x2c, r2, 0x4, 0x70bd26, 0x25dfdbfc, {}, [@L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x4}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x87}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000054}, 0x20000810)
write$ppp(r1, &(0x7f0000000300)="a36ad2e2d9a3baba8417d10e42cf0dfb209254ff3244dbad54bbf0470d4bef7c97615b7885add1cad2b458f1c5161c4e9077bd3fe50c159fe0dd52350d0599f950805bc07c7f1f00b1f0f59c5eef5282660d1d48002a", 0x56)

22:46:40 executing program 4:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x5dec01, 0x0)
write$ppp(r0, 0x0, 0x0)
sendmsg$SEG6_CMD_SET_TUNSRC(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, 0x0, 0x10, 0x70bd25, 0x25dfdbfe, {}, [@SEG6_ATTR_SECRET={0xc, 0x4, [0x4fa, 0x4]}, @SEG6_ATTR_SECRET={0x4}, @SEG6_ATTR_HMACKEYID={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x880}, 0x5)

22:46:40 executing program 1:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x68c080, 0x0)
write$ppp(r0, 0x0, 0xeffdffff)
ioctl$PPPIOCGIDLE(0xffffffffffffffff, 0x8010743f, &(0x7f0000000180)) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000140), 0x40, 0x0)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000100), r1) (async)
getsockname$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @private1}, &(0x7f0000000080)=0x20) (async, rerun: 64)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), r0) (async, rerun: 64)
r3 = syz_init_net_socket$llc(0x1a, 0x2, 0x0)
setsockopt$llc_int(r3, 0x10c, 0x7, &(0x7f0000000000)=0xfffffffc, 0x4) (async)
sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x2c, r2, 0x4, 0x70bd26, 0x25dfdbfc, {}, [@L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x4}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x87}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000054}, 0x20000810)
write$ppp(r1, &(0x7f0000000300)="a36ad2e2d9a3baba8417d10e42cf0dfb209254ff3244dbad54bbf0470d4bef7c97615b7885add1cad2b458f1c5161c4e9077bd3fe50c159fe0dd52350d0599f950805bc07c7f1f00b1f0f59c5eef5282660d1d48002a", 0x56)

22:46:40 executing program 2:
openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0) (async)
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, &(0x7f00000000c0)="e1ef26063f541ea9ec5f9cae10be80756661174895ffd47f464d4ea06dcc5c0ad939d38711d0aaa81ef4249600840349add880806e7d78e9e9e1fe3b8b5669657274fa3b064441f661560f336b703577e411f195e88d06e930c0b3bb5389c67c13e566801be88d4850c2c2186aea3c8e66a9b3765f3b9a2908a33d8ae9e49bc5d8b9ddfc8314792639909cf348e5eaf6b60d8899bb45fb59a7caf923f5b12a84f02adb79e7b81908ad9ca26f0bc994e0d56b5cf038962cf440d01f4973f980283e7db1e1bf6cf4d06120578a3d78f8114609fd349d2fa8addb00820ef305ba9723f8b78da088912c34a456e1ce7ab4eb4287", 0xf2, 0xfffffffffffffffe)
write$ppp(r0, &(0x7f00000002c0)="d3", 0x1)

[ 2806.016719][ T5507] RSP: 002b:00007f90e3dd70c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 2806.025175][ T5507] RAX: ffffffffffffffda RBX: 00007f90e4b73f80 RCX: 00007f90e4a54ae9
[ 2806.033149][ T5507] RDX: 00000000001f4f33 RSI: 00000000200002c0 RDI: 0000000000000003
[ 2806.041150][ T5507] RBP: 00007f90e3dd7120 R08: 0000000000000000 R09: 0000000000000000
[ 2806.049125][ T5507] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 2806.057101][ T5507] R13: 000000000000000b R14: 00007f90e4b73f80 R15: 00007ffdb3bfd028
[ 2806.065123][ T5507]  </TASK>
22:46:40 executing program 0:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x5fe801, 0x0)
write$ppp(r0, 0x0, 0xeffdffffffffffff)

22:46:40 executing program 4:
accept4$tipc(0xffffffffffffffff, &(0x7f0000000000)=@name, &(0x7f0000000040)=0x10, 0x800)
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
write$ppp(r0, 0x0, 0x0)

22:46:40 executing program 1:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x68c080, 0x0)
write$ppp(r0, 0x0, 0xeffdffff)
ioctl$PPPIOCGIDLE(0xffffffffffffffff, 0x8010743f, &(0x7f0000000180))
socket$nl_generic(0x10, 0x3, 0x10)
r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000140), 0x40, 0x0)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000100), r1)
getsockname$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @private1}, &(0x7f0000000080)=0x20)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), r0)
r3 = syz_init_net_socket$llc(0x1a, 0x2, 0x0)
setsockopt$llc_int(r3, 0x10c, 0x7, &(0x7f0000000000)=0xfffffffc, 0x4)
sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x2c, r2, 0x4, 0x70bd26, 0x25dfdbfc, {}, [@L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x4}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x87}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000054}, 0x20000810)
write$ppp(r1, &(0x7f0000000300)="a36ad2e2d9a3baba8417d10e42cf0dfb209254ff3244dbad54bbf0470d4bef7c97615b7885add1cad2b458f1c5161c4e9077bd3fe50c159fe0dd52350d0599f950805bc07c7f1f00b1f0f59c5eef5282660d1d48002a", 0x56)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x68c080, 0x0) (async)
write$ppp(r0, 0x0, 0xeffdffff) (async)
ioctl$PPPIOCGIDLE(0xffffffffffffffff, 0x8010743f, &(0x7f0000000180)) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
openat$pfkey(0xffffffffffffff9c, &(0x7f0000000140), 0x40, 0x0) (async)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000100), r1) (async)
getsockname$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @private1}, &(0x7f0000000080)=0x20) (async)
syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), r0) (async)
syz_init_net_socket$llc(0x1a, 0x2, 0x0) (async)
setsockopt$llc_int(r3, 0x10c, 0x7, &(0x7f0000000000)=0xfffffffc, 0x4) (async)
sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x2c, r2, 0x4, 0x70bd26, 0x25dfdbfc, {}, [@L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x4}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x87}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000054}, 0x20000810) (async)
write$ppp(r1, &(0x7f0000000300)="a36ad2e2d9a3baba8417d10e42cf0dfb209254ff3244dbad54bbf0470d4bef7c97615b7885add1cad2b458f1c5161c4e9077bd3fe50c159fe0dd52350d0599f950805bc07c7f1f00b1f0f59c5eef5282660d1d48002a", 0x56) (async)

[ 2806.123718][ T5552] FAULT_INJECTION: forcing a failure.
[ 2806.123718][ T5552] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 2806.136855][ T5552] CPU: 1 PID: 5552 Comm: syz-executor.5 Not tainted 6.6.0-rc3-syzkaller-00165-g3b517966c561 #0
[ 2806.147312][ T5552] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/06/2023
[ 2806.157393][ T5552] Call Trace:
[ 2806.160737][ T5552]  <TASK>
[ 2806.163686][ T5552]  dump_stack_lvl+0xda/0x130
[ 2806.168285][ T5552]  dump_stack+0x15/0x20
[ 2806.172455][ T5552]  should_fail_ex+0x21f/0x230
[ 2806.177155][ T5552]  should_fail+0xb/0x10
[ 2806.181423][ T5552]  should_fail_usercopy+0x1a/0x20
[ 2806.186491][ T5552]  copy_page_from_iter_atomic+0x21c/0xcf0
[ 2806.192232][ T5552]  ? shmem_write_begin+0xa6/0x210
[ 2806.197264][ T5552]  ? shmem_write_begin+0x16d/0x210
[ 2806.202468][ T5552]  generic_perform_write+0x20c/0x410
[ 2806.207847][ T5552]  ? shmem_write_begin+0x210/0x210
[ 2806.213000][ T5552]  shmem_file_write_iter+0xc8/0xe0
[ 2806.218135][ T5552]  vfs_write+0x4ab/0x7d0
22:46:40 executing program 1:
sendmsg$AUDIT_MAKE_EQUIV(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x28, 0x3f7, 0x800, 0x70bd25, 0x25dfdbfb, {0x7, 0x7, './file0', './file0'}, ["", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x20048045)
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
write$ppp(r0, 0x0, 0xeffdffff)
ioctl$USBDEVFS_ALLOW_SUSPEND(r0, 0x5522)

[ 2806.222419][ T5552]  ksys_write+0xeb/0x1a0
[ 2806.226681][ T5552]  __x64_sys_write+0x42/0x50
[ 2806.231360][ T5552]  do_syscall_64+0x41/0xc0
[ 2806.235809][ T5552]  entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 2806.241795][ T5552] RIP: 0033:0x7f90e4a54ae9
[ 2806.246406][ T5552] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48
[ 2806.266042][ T5552] RSP: 002b:00007f90e3dd70c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
22:46:40 executing program 0:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x5fe801, 0x0)
write$ppp(r0, 0x0, 0xeffdffffffffffff) (async)
write$ppp(r0, 0x0, 0xeffdffffffffffff)

22:46:40 executing program 2:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0xacae974727a536e3, 0x0)
write$ppp(r0, &(0x7f00000002c0)="d3", 0x1)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(r1, 0x10f, 0x86)
ioctl$IMGETVERSION(r1, 0x80044942, &(0x7f0000000040))
setrlimit(0xb, &(0x7f0000000000)={0xff})

22:46:40 executing program 3:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="18000000", @ANYRES16=0x0, @ANYBLOB="00012cbd7000fcdbdf250400000006000e0002000000"], 0x1c}, 0x1, 0x0, 0x0, 0x48000}, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x28000, 0x0) (async)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x28000, 0x0)
write$ppp(r0, &(0x7f00000002c0)="d3", 0xfffffdef)

22:46:40 executing program 1:
sendmsg$AUDIT_MAKE_EQUIV(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x28, 0x3f7, 0x800, 0x70bd25, 0x25dfdbfb, {0x7, 0x7, './file0', './file0'}, ["", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x20048045)
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
write$ppp(r0, 0x0, 0xeffdffff) (async)
write$ppp(r0, 0x0, 0xeffdffff)
ioctl$USBDEVFS_ALLOW_SUSPEND(r0, 0x5522)

22:46:40 executing program 5:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
write$ppp(r0, &(0x7f00000002c0)="d3", 0x1f4f33) (fail_nth: 52)

22:46:40 executing program 4:
accept4$tipc(0xffffffffffffffff, &(0x7f0000000000)=@name, &(0x7f0000000040)=0x10, 0x800) (async, rerun: 32)
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0) (rerun: 32)
write$ppp(r0, 0x0, 0x0)

[ 2806.274536][ T5552] RAX: ffffffffffffffda RBX: 00007f90e4b73f80 RCX: 00007f90e4a54ae9
[ 2806.282606][ T5552] RDX: 00000000001f4f33 RSI: 00000000200002c0 RDI: 0000000000000003
[ 2806.290592][ T5552] RBP: 00007f90e3dd7120 R08: 0000000000000000 R09: 0000000000000000
[ 2806.298574][ T5552] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 2806.306627][ T5552] R13: 000000000000000b R14: 00007f90e4b73f80 R15: 00007ffdb3bfd028
[ 2806.314662][ T5552]  </TASK>
22:46:40 executing program 1:
sendmsg$AUDIT_MAKE_EQUIV(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x28, 0x3f7, 0x800, 0x70bd25, 0x25dfdbfb, {0x7, 0x7, './file0', './file0'}, ["", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x20048045)
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
write$ppp(r0, 0x0, 0xeffdffff)
ioctl$USBDEVFS_ALLOW_SUSPEND(r0, 0x5522)
sendmsg$AUDIT_MAKE_EQUIV(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x28, 0x3f7, 0x800, 0x70bd25, 0x25dfdbfb, {0x7, 0x7, './file0', './file0'}, ["", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x20048045) (async)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0) (async)
write$ppp(r0, 0x0, 0xeffdffff) (async)
ioctl$USBDEVFS_ALLOW_SUSPEND(r0, 0x5522) (async)

22:46:40 executing program 0:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x50300, 0x0)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(r1, 0x10f, 0x86)
r2 = syz_open_dev$loop(&(0x7f0000000140), 0x8a000, 0x200)
ioctl$LOOP_CLR_FD(r2, 0x4c01)
sendmsg$AUDIT_GET_FEATURE(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x3fb, 0x20, 0x70bd2d, 0x25dfdbfb, "", ["", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x880}, 0x4040800)
write$ppp(r0, 0x0, 0xeffdffffffffffff)

22:46:40 executing program 2:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0xacae974727a536e3, 0x0)
write$ppp(r0, &(0x7f00000002c0)="d3", 0x1)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(r1, 0x10f, 0x86) (async)
ioctl$IMGETVERSION(r1, 0x80044942, &(0x7f0000000040)) (async)
setrlimit(0xb, &(0x7f0000000000)={0xff})

[ 2806.369985][ T5576] FAULT_INJECTION: forcing a failure.
[ 2806.369985][ T5576] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[ 2806.383391][ T5576] CPU: 1 PID: 5576 Comm: syz-executor.5 Not tainted 6.6.0-rc3-syzkaller-00165-g3b517966c561 #0
[ 2806.393728][ T5576] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/06/2023
[ 2806.403878][ T5576] Call Trace:
[ 2806.407232][ T5576]  <TASK>
[ 2806.410171][ T5576]  dump_stack_lvl+0xda/0x130
[ 2806.414793][ T5576]  dump_stack+0x15/0x20
22:46:40 executing program 4:
accept4$tipc(0xffffffffffffffff, &(0x7f0000000000)=@name, &(0x7f0000000040)=0x10, 0x800)
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
write$ppp(r0, 0x0, 0x0)
accept4$tipc(0xffffffffffffffff, &(0x7f0000000000)=@name, &(0x7f0000000040)=0x10, 0x800) (async)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0) (async)
write$ppp(r0, 0x0, 0x0) (async)

22:46:40 executing program 4:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
getsockopt$TIPC_NODE_RECVQ_DEPTH(r0, 0x10f, 0x83, &(0x7f0000000000), &(0x7f0000000040)=0x4)
ioctl$TUNSETSNDBUF(r0, 0x400454d4, &(0x7f00000000c0)=0x7)
write$P9_RREADLINK(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="10f53a000200471b231fdecd4d2246722cba002e2f667d6c653000"], 0x10)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100), 0x400, 0x0)
write$ppp(r1, 0x0, 0xffffffffffffffa0)
ioctl$TUNGETFEATURES(0xffffffffffffffff, 0x800454cf, &(0x7f0000000140))

[ 2806.418976][ T5576]  should_fail_ex+0x21f/0x230
[ 2806.423684][ T5576]  __should_fail_alloc_page+0xfd/0x110
[ 2806.429178][ T5576]  __alloc_pages+0x108/0x340
[ 2806.433901][ T5576]  vma_alloc_folio+0x6a3/0x8c0
[ 2806.438696][ T5576]  ? shmem_inode_acct_block+0x1ee/0x220
[ 2806.444277][ T5576]  shmem_get_folio_gfp+0x579/0xc30
[ 2806.449787][ T5576]  shmem_write_begin+0xa6/0x210
[ 2806.454715][ T5576]  generic_perform_write+0x1c9/0x410
[ 2806.460110][ T5576]  ? shmem_write_begin+0x210/0x210
[ 2806.465321][ T5576]  shmem_file_write_iter+0xc8/0xe0
[ 2806.470478][ T5576]  vfs_write+0x4ab/0x7d0
[ 2806.474751][ T5576]  ksys_write+0xeb/0x1a0
[ 2806.479026][ T5576]  __x64_sys_write+0x42/0x50
[ 2806.483679][ T5576]  do_syscall_64+0x41/0xc0
[ 2806.488101][ T5576]  entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 2806.494016][ T5576] RIP: 0033:0x7f90e4a54ae9
[ 2806.498446][ T5576] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48
22:46:40 executing program 4:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
getsockopt$TIPC_NODE_RECVQ_DEPTH(r0, 0x10f, 0x83, &(0x7f0000000000), &(0x7f0000000040)=0x4) (async)
ioctl$TUNSETSNDBUF(r0, 0x400454d4, &(0x7f00000000c0)=0x7)
write$P9_RREADLINK(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="10f53a000200471b231fdecd4d2246722cba002e2f667d6c653000"], 0x10)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100), 0x400, 0x0)
write$ppp(r1, 0x0, 0xffffffffffffffa0) (async)
ioctl$TUNGETFEATURES(0xffffffffffffffff, 0x800454cf, &(0x7f0000000140))

[ 2806.518181][ T5576] RSP: 002b:00007f90e3dd70c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 2806.526608][ T5576] RAX: ffffffffffffffda RBX: 00007f90e4b73f80 RCX: 00007f90e4a54ae9
[ 2806.534606][ T5576] RDX: 00000000001f4f33 RSI: 00000000200002c0 RDI: 0000000000000003
[ 2806.542668][ T5576] RBP: 00007f90e3dd7120 R08: 0000000000000000 R09: 0000000000000000
[ 2806.550673][ T5576] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 2806.558687][ T5576] R13: 000000000000000b R14: 00007f90e4b73f80 R15: 00007ffdb3bfd028
[ 2806.566735][ T5576]  </TASK>
22:46:40 executing program 5:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
write$ppp(r0, &(0x7f00000002c0)="d3", 0x1f4f33) (fail_nth: 53)

22:46:40 executing program 3:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="18000000", @ANYRES16=0x0, @ANYBLOB="00012cbd7000fcdbdf250400000006000e0002000000"], 0x1c}, 0x1, 0x0, 0x0, 0x48000}, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x28000, 0x0)
write$ppp(r0, &(0x7f00000002c0)="d3", 0xfffffdef)

22:46:40 executing program 0:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x50300, 0x0)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(r1, 0x10f, 0x86)
r2 = syz_open_dev$loop(&(0x7f0000000140), 0x8a000, 0x200)
ioctl$LOOP_CLR_FD(r2, 0x4c01)
sendmsg$AUDIT_GET_FEATURE(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x3fb, 0x20, 0x70bd2d, 0x25dfdbfb, "", ["", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x880}, 0x4040800)
write$ppp(r0, 0x0, 0xeffdffffffffffff)

22:46:40 executing program 2:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0xacae974727a536e3, 0x0)
write$ppp(r0, &(0x7f00000002c0)="d3", 0x1)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(r1, 0x10f, 0x86) (async)
ioctl$IMGETVERSION(r1, 0x80044942, &(0x7f0000000040))
setrlimit(0xb, &(0x7f0000000000)={0xff})

22:46:40 executing program 4:
openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0) (async)
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
getsockopt$TIPC_NODE_RECVQ_DEPTH(r0, 0x10f, 0x83, &(0x7f0000000000), &(0x7f0000000040)=0x4) (async)
getsockopt$TIPC_NODE_RECVQ_DEPTH(r0, 0x10f, 0x83, &(0x7f0000000000), &(0x7f0000000040)=0x4)
ioctl$TUNSETSNDBUF(r0, 0x400454d4, &(0x7f00000000c0)=0x7)
write$P9_RREADLINK(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="10f53a000200471b231fdecd4d2246722cba002e2f667d6c653000"], 0x10)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100), 0x400, 0x0)
write$ppp(r1, 0x0, 0xffffffffffffffa0)
ioctl$TUNGETFEATURES(0xffffffffffffffff, 0x800454cf, &(0x7f0000000140))

22:46:40 executing program 2:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(r0, 0x10f, 0x86)
ioctl$TUNSETSNDBUF(r0, 0x400454d4, &(0x7f0000000200)=0x81)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0xcfe03, 0x0)
write$ppp(r1, &(0x7f00000002c0)="d3", 0x1)
r2 = openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(r2, 0x10f, 0x86)
ioctl$PPPIOCSCOMPRESS(r2, 0x4010744d)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_UNLINKAT={0x24, 0x34, 0x0, r1, 0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x200, 0x1})
r3 = openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(r3, 0x10f, 0x86)
accept4$llc(0xffffffffffffffff, &(0x7f0000000140)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, &(0x7f00000001c0)=0x10, 0x80000)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.cpu/syz1\x00', 0x200002, 0x0)
sendmsg(r3, &(0x7f0000000280)={&(0x7f00000000c0)=@ieee802154={0x24, @short={0x2, 0x2, 0xaaa2}}, 0x80, &(0x7f0000000400)=[{&(0x7f0000000440)="e4ce95e212a14fcc7f7722cf9fe1a6f89fc21c679a5b430213c2bd38d2c1dd7759fcd4a5be48cedd0f0ba703923588c5fb53b45739e4ec415edb71f225e70d4b19a9eaecad9d6fab5f6cf9b78239df7c7ae58191f2d29956db47747068f80da99e8812426bf61054e6be2e8c0797b7ed04a55b64641dc1d058504d624eb2e6ce14530231608b0547e08af7a91cf3c3d38bb9dbbdb19611886fd22038e1e972950220d39690e9704c6044c04078f01e6a27daeafef57e189c39a6b5eb2dcad6d8b4bd8be4343e236c4cba52a39718d0e91c1ae7f9db7a", 0xd6}, {&(0x7f0000000300)="22695ae6002480124c109d48c0ecf28813fc4192615cc5c34a66c6621e91f0a917f8f0c7399d2189a98a98846ba5216e00de94ccc7e144965307e95745756f61baed6dcd99c0cff2030ce1e7d2d67c259ffe9de98cef0f6ab6b6197ac5f562957f58d77b8ff59c8e6f1b3eee991a031fbd5d7b7267e2bfd50871f2a1d285c7e42acd4381b342339d7814b4f9c2e0d199755a5061d1c6a2514c79ab34cb8cce1ca147f0318f3ef21ea4527b046098f6b6decd84705216e0b5e3a2b31e90494ffad8bb6d276c4fbae26bf999c0f28021e0e00878e456940bf992f6b3b9ec49bc7257274662a88b3b0edb48f6ace86cc5a8b4b3bd417f6ced64", 0xf8}], 0x2}, 0x5)

22:46:40 executing program 1:
accept4$llc(0xffffffffffffffff, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, &(0x7f0000000040)=0x10, 0x800)
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
write$ppp(r0, 0x0, 0xeffdffff)

22:46:40 executing program 0:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x50300, 0x0) (async)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(r1, 0x10f, 0x86)
r2 = syz_open_dev$loop(&(0x7f0000000140), 0x8a000, 0x200)
ioctl$LOOP_CLR_FD(r2, 0x4c01) (async)
sendmsg$AUDIT_GET_FEATURE(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x3fb, 0x20, 0x70bd2d, 0x25dfdbfb, "", ["", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x880}, 0x4040800)
write$ppp(r0, 0x0, 0xeffdffffffffffff)

22:46:40 executing program 2:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(r0, 0x10f, 0x86)
ioctl$TUNSETSNDBUF(r0, 0x400454d4, &(0x7f0000000200)=0x81)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0xcfe03, 0x0)
write$ppp(r1, &(0x7f00000002c0)="d3", 0x1) (async)
r2 = openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(r2, 0x10f, 0x86) (async)
ioctl$PPPIOCSCOMPRESS(r2, 0x4010744d) (async)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_UNLINKAT={0x24, 0x34, 0x0, r1, 0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x200, 0x1}) (async)
r3 = openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(r3, 0x10f, 0x86)
accept4$llc(0xffffffffffffffff, &(0x7f0000000140)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, &(0x7f00000001c0)=0x10, 0x80000)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) (async)
sendmsg(r3, &(0x7f0000000280)={&(0x7f00000000c0)=@ieee802154={0x24, @short={0x2, 0x2, 0xaaa2}}, 0x80, &(0x7f0000000400)=[{&(0x7f0000000440)="e4ce95e212a14fcc7f7722cf9fe1a6f89fc21c679a5b430213c2bd38d2c1dd7759fcd4a5be48cedd0f0ba703923588c5fb53b45739e4ec415edb71f225e70d4b19a9eaecad9d6fab5f6cf9b78239df7c7ae58191f2d29956db47747068f80da99e8812426bf61054e6be2e8c0797b7ed04a55b64641dc1d058504d624eb2e6ce14530231608b0547e08af7a91cf3c3d38bb9dbbdb19611886fd22038e1e972950220d39690e9704c6044c04078f01e6a27daeafef57e189c39a6b5eb2dcad6d8b4bd8be4343e236c4cba52a39718d0e91c1ae7f9db7a", 0xd6}, {&(0x7f0000000300)="22695ae6002480124c109d48c0ecf28813fc4192615cc5c34a66c6621e91f0a917f8f0c7399d2189a98a98846ba5216e00de94ccc7e144965307e95745756f61baed6dcd99c0cff2030ce1e7d2d67c259ffe9de98cef0f6ab6b6197ac5f562957f58d77b8ff59c8e6f1b3eee991a031fbd5d7b7267e2bfd50871f2a1d285c7e42acd4381b342339d7814b4f9c2e0d199755a5061d1c6a2514c79ab34cb8cce1ca147f0318f3ef21ea4527b046098f6b6decd84705216e0b5e3a2b31e90494ffad8bb6d276c4fbae26bf999c0f28021e0e00878e456940bf992f6b3b9ec49bc7257274662a88b3b0edb48f6ace86cc5a8b4b3bd417f6ced64", 0xf8}], 0x2}, 0x5)

[ 2806.622191][ T5601] FAULT_INJECTION: forcing a failure.
[ 2806.622191][ T5601] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 2806.635358][ T5601] CPU: 1 PID: 5601 Comm: syz-executor.5 Not tainted 6.6.0-rc3-syzkaller-00165-g3b517966c561 #0
[ 2806.645714][ T5601] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/06/2023
[ 2806.655809][ T5601] Call Trace:
[ 2806.659155][ T5601]  <TASK>
[ 2806.662099][ T5601]  dump_stack_lvl+0xda/0x130
[ 2806.666768][ T5601]  dump_stack+0x15/0x20
22:46:40 executing program 2:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(r0, 0x10f, 0x86)
ioctl$TUNSETSNDBUF(r0, 0x400454d4, &(0x7f0000000200)=0x81)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0xcfe03, 0x0)
write$ppp(r1, &(0x7f00000002c0)="d3", 0x1)
r2 = openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(r2, 0x10f, 0x86)
ioctl$PPPIOCSCOMPRESS(r2, 0x4010744d)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_UNLINKAT={0x24, 0x34, 0x0, r1, 0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x200, 0x1})
r3 = openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(r3, 0x10f, 0x86)
accept4$llc(0xffffffffffffffff, &(0x7f0000000140)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, &(0x7f00000001c0)=0x10, 0x80000)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.cpu/syz1\x00', 0x200002, 0x0)
sendmsg(r3, &(0x7f0000000280)={&(0x7f00000000c0)=@ieee802154={0x24, @short={0x2, 0x2, 0xaaa2}}, 0x80, &(0x7f0000000400)=[{&(0x7f0000000440)="e4ce95e212a14fcc7f7722cf9fe1a6f89fc21c679a5b430213c2bd38d2c1dd7759fcd4a5be48cedd0f0ba703923588c5fb53b45739e4ec415edb71f225e70d4b19a9eaecad9d6fab5f6cf9b78239df7c7ae58191f2d29956db47747068f80da99e8812426bf61054e6be2e8c0797b7ed04a55b64641dc1d058504d624eb2e6ce14530231608b0547e08af7a91cf3c3d38bb9dbbdb19611886fd22038e1e972950220d39690e9704c6044c04078f01e6a27daeafef57e189c39a6b5eb2dcad6d8b4bd8be4343e236c4cba52a39718d0e91c1ae7f9db7a", 0xd6}, {&(0x7f0000000300)="22695ae6002480124c109d48c0ecf28813fc4192615cc5c34a66c6621e91f0a917f8f0c7399d2189a98a98846ba5216e00de94ccc7e144965307e95745756f61baed6dcd99c0cff2030ce1e7d2d67c259ffe9de98cef0f6ab6b6197ac5f562957f58d77b8ff59c8e6f1b3eee991a031fbd5d7b7267e2bfd50871f2a1d285c7e42acd4381b342339d7814b4f9c2e0d199755a5061d1c6a2514c79ab34cb8cce1ca147f0318f3ef21ea4527b046098f6b6decd84705216e0b5e3a2b31e90494ffad8bb6d276c4fbae26bf999c0f28021e0e00878e456940bf992f6b3b9ec49bc7257274662a88b3b0edb48f6ace86cc5a8b4b3bd417f6ced64", 0xf8}], 0x2}, 0x5)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) (async)
setsockopt$TIPC_MCAST_REPLICAST(r0, 0x10f, 0x86) (async)
ioctl$TUNSETSNDBUF(r0, 0x400454d4, &(0x7f0000000200)=0x81) (async)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0xcfe03, 0x0) (async)
write$ppp(r1, &(0x7f00000002c0)="d3", 0x1) (async)
openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0) (async)
setsockopt$TIPC_MCAST_REPLICAST(r2, 0x10f, 0x86) (async)
ioctl$PPPIOCSCOMPRESS(r2, 0x4010744d) (async)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_UNLINKAT={0x24, 0x34, 0x0, r1, 0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x200, 0x1}) (async)
openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0) (async)
setsockopt$TIPC_MCAST_REPLICAST(r3, 0x10f, 0x86) (async)
accept4$llc(0xffffffffffffffff, &(0x7f0000000140)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, &(0x7f00000001c0)=0x10, 0x80000) (async)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) (async)
sendmsg(r3, &(0x7f0000000280)={&(0x7f00000000c0)=@ieee802154={0x24, @short={0x2, 0x2, 0xaaa2}}, 0x80, &(0x7f0000000400)=[{&(0x7f0000000440)="e4ce95e212a14fcc7f7722cf9fe1a6f89fc21c679a5b430213c2bd38d2c1dd7759fcd4a5be48cedd0f0ba703923588c5fb53b45739e4ec415edb71f225e70d4b19a9eaecad9d6fab5f6cf9b78239df7c7ae58191f2d29956db47747068f80da99e8812426bf61054e6be2e8c0797b7ed04a55b64641dc1d058504d624eb2e6ce14530231608b0547e08af7a91cf3c3d38bb9dbbdb19611886fd22038e1e972950220d39690e9704c6044c04078f01e6a27daeafef57e189c39a6b5eb2dcad6d8b4bd8be4343e236c4cba52a39718d0e91c1ae7f9db7a", 0xd6}, {&(0x7f0000000300)="22695ae6002480124c109d48c0ecf28813fc4192615cc5c34a66c6621e91f0a917f8f0c7399d2189a98a98846ba5216e00de94ccc7e144965307e95745756f61baed6dcd99c0cff2030ce1e7d2d67c259ffe9de98cef0f6ab6b6197ac5f562957f58d77b8ff59c8e6f1b3eee991a031fbd5d7b7267e2bfd50871f2a1d285c7e42acd4381b342339d7814b4f9c2e0d199755a5061d1c6a2514c79ab34cb8cce1ca147f0318f3ef21ea4527b046098f6b6decd84705216e0b5e3a2b31e90494ffad8bb6d276c4fbae26bf999c0f28021e0e00878e456940bf992f6b3b9ec49bc7257274662a88b3b0edb48f6ace86cc5a8b4b3bd417f6ced64", 0xf8}], 0x2}, 0x5) (async)

[ 2806.670963][ T5601]  should_fail_ex+0x21f/0x230
[ 2806.675733][ T5601]  should_fail+0xb/0x10
[ 2806.679929][ T5601]  should_fail_usercopy+0x1a/0x20
[ 2806.684969][ T5601]  copy_page_from_iter_atomic+0x21c/0xcf0
[ 2806.690762][ T5601]  ? shmem_write_begin+0xa6/0x210
[ 2806.695886][ T5601]  ? shmem_write_begin+0x16d/0x210
[ 2806.701103][ T5601]  generic_perform_write+0x20c/0x410
[ 2806.706461][ T5601]  ? shmem_write_begin+0x210/0x210
[ 2806.711676][ T5601]  shmem_file_write_iter+0xc8/0xe0
[ 2806.716829][ T5601]  vfs_write+0x4ab/0x7d0
22:46:40 executing program 2:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
write$ppp(r0, &(0x7f00000002c0)="d3", 0x1)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(r1, 0x10f, 0x86)
ioctl$PPPIOCSDEBUG(r0, 0x40047440, &(0x7f0000000000)=0x6)

[ 2806.721112][ T5601]  ksys_write+0xeb/0x1a0
[ 2806.725420][ T5601]  __x64_sys_write+0x42/0x50
[ 2806.730042][ T5601]  do_syscall_64+0x41/0xc0
[ 2806.734482][ T5601]  entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 2806.740429][ T5601] RIP: 0033:0x7f90e4a54ae9
[ 2806.744902][ T5601] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48
[ 2806.764656][ T5601] RSP: 002b:00007f90e3dd70c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
22:46:40 executing program 2:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
write$ppp(r0, &(0x7f00000002c0)="d3", 0x1) (async)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(r1, 0x10f, 0x86)
ioctl$PPPIOCSDEBUG(r0, 0x40047440, &(0x7f0000000000)=0x6)

[ 2806.773097][ T5601] RAX: ffffffffffffffda RBX: 00007f90e4b73f80 RCX: 00007f90e4a54ae9
[ 2806.781167][ T5601] RDX: 00000000001f4f33 RSI: 00000000200002c0 RDI: 0000000000000003
[ 2806.789161][ T5601] RBP: 00007f90e3dd7120 R08: 0000000000000000 R09: 0000000000000000
[ 2806.797152][ T5601] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 2806.805226][ T5601] R13: 000000000000000b R14: 00007f90e4b73f80 R15: 00007ffdb3bfd028
[ 2806.813319][ T5601]  </TASK>
22:46:40 executing program 5:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
write$ppp(r0, &(0x7f00000002c0)="d3", 0x1f4f33) (fail_nth: 54)

22:46:40 executing program 1:
accept4$llc(0xffffffffffffffff, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, &(0x7f0000000040)=0x10, 0x800)
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
write$ppp(r0, 0x0, 0xeffdffff)

22:46:40 executing program 4:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
write$ppp(r0, 0x0, 0x0)
r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000000c0), 0x480, 0x0)
ioctl$LOOP_GET_STATUS(r1, 0x4c03, &(0x7f00000001c0))
r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0)
ioctl$TUNSETGROUP(r2, 0x400454ce, 0xffffffffffffffff)
ioctl$PPPIOCBRIDGECHAN(r0, 0x40047435, &(0x7f0000000000)=0x400)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000180), 0x2c101, 0x0)

22:46:40 executing program 2:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
write$ppp(r0, &(0x7f00000002c0)="d3", 0x1) (async)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(r1, 0x10f, 0x86) (async)
ioctl$PPPIOCSDEBUG(r0, 0x40047440, &(0x7f0000000000)=0x6)

22:46:40 executing program 0:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x5dec01, 0x0)
write$ppp(r0, 0x0, 0xeffdffffffffffff)

[ 2806.864242][ T5629] FAULT_INJECTION: forcing a failure.
[ 2806.864242][ T5629] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[ 2806.877539][ T5629] CPU: 1 PID: 5629 Comm: syz-executor.5 Not tainted 6.6.0-rc3-syzkaller-00165-g3b517966c561 #0
[ 2806.887902][ T5629] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/06/2023
[ 2806.897989][ T5629] Call Trace:
[ 2806.901297][ T5629]  <TASK>
[ 2806.904237][ T5629]  dump_stack_lvl+0xda/0x130
[ 2806.908943][ T5629]  dump_stack+0x15/0x20
22:46:40 executing program 3:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
ioctl$PPPIOCATTACH(0xffffffffffffffff, 0x4004743d, &(0x7f0000000040)=0x1)
setsockopt$TIPC_DEST_DROPPABLE(r0, 0x10f, 0x81, &(0x7f0000000000)=0x2, 0x4)
write$ppp(r0, &(0x7f00000002c0)="d3", 0xfffffdef)

22:46:41 executing program 2:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x4dc000, 0x0)
write$ppp(r0, &(0x7f00000002c0)="d3", 0x1)
r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040), 0x2282, 0x0)
recvfrom$l2tp6(r1, &(0x7f00000000c0)=""/155, 0x9b, 0x1, &(0x7f0000000180), 0x20)
ioctl$PPPIOCATTACH(r0, 0x4004743d, &(0x7f0000000000)=0x2)

22:46:41 executing program 0:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x5dec01, 0x0)
write$ppp(r0, 0x0, 0xeffdffffffffffff)

[ 2806.913149][ T5629]  should_fail_ex+0x21f/0x230
[ 2806.917860][ T5629]  __should_fail_alloc_page+0xfd/0x110
[ 2806.923429][ T5629]  __alloc_pages+0x108/0x340
[ 2806.928053][ T5629]  vma_alloc_folio+0x6a3/0x8c0
[ 2806.932920][ T5629]  ? shmem_inode_acct_block+0x1ee/0x220
[ 2806.938519][ T5629]  shmem_get_folio_gfp+0x579/0xc30
[ 2806.943675][ T5629]  shmem_write_begin+0xa6/0x210
[ 2806.948664][ T5629]  generic_perform_write+0x1c9/0x410
[ 2806.953959][ T5629]  ? shmem_write_begin+0x210/0x210
[ 2806.959147][ T5629]  shmem_file_write_iter+0xc8/0xe0
22:46:41 executing program 2:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x4dc000, 0x0)
write$ppp(r0, &(0x7f00000002c0)="d3", 0x1)
r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040), 0x2282, 0x0)
recvfrom$l2tp6(r1, &(0x7f00000000c0)=""/155, 0x9b, 0x1, &(0x7f0000000180), 0x20) (async)
recvfrom$l2tp6(r1, &(0x7f00000000c0)=""/155, 0x9b, 0x1, &(0x7f0000000180), 0x20)
ioctl$PPPIOCATTACH(r0, 0x4004743d, &(0x7f0000000000)=0x2)

22:46:41 executing program 0:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x5dec01, 0x0)
write$ppp(r0, 0x0, 0xeffdffffffffffff)

[ 2806.964337][ T5629]  vfs_write+0x4ab/0x7d0
[ 2806.968773][ T5629]  ksys_write+0xeb/0x1a0
[ 2806.973110][ T5629]  __x64_sys_write+0x42/0x50
[ 2806.977735][ T5629]  do_syscall_64+0x41/0xc0
[ 2806.982183][ T5629]  entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 2806.988129][ T5629] RIP: 0033:0x7f90e4a54ae9
[ 2806.992568][ T5629] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48
22:46:41 executing program 4:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
write$ppp(r0, 0x0, 0x0)
r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000000c0), 0x480, 0x0)
ioctl$LOOP_GET_STATUS(r1, 0x4c03, &(0x7f00000001c0)) (async)
r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0)
ioctl$TUNSETGROUP(r2, 0x400454ce, 0xffffffffffffffff) (async)
ioctl$PPPIOCBRIDGECHAN(r0, 0x40047435, &(0x7f0000000000)=0x400) (async)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000180), 0x2c101, 0x0)

22:46:41 executing program 2:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x4dc000, 0x0)
write$ppp(r0, &(0x7f00000002c0)="d3", 0x1)
r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040), 0x2282, 0x0)
recvfrom$l2tp6(r1, &(0x7f00000000c0)=""/155, 0x9b, 0x1, &(0x7f0000000180), 0x20)
ioctl$PPPIOCATTACH(r0, 0x4004743d, &(0x7f0000000000)=0x2)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x4dc000, 0x0) (async)
write$ppp(r0, &(0x7f00000002c0)="d3", 0x1) (async)
openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040), 0x2282, 0x0) (async)
recvfrom$l2tp6(r1, &(0x7f00000000c0)=""/155, 0x9b, 0x1, &(0x7f0000000180), 0x20) (async)
ioctl$PPPIOCATTACH(r0, 0x4004743d, &(0x7f0000000000)=0x2) (async)

[ 2807.012193][ T5629] RSP: 002b:00007f90e3dd70c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 2807.020762][ T5629] RAX: ffffffffffffffda RBX: 00007f90e4b73f80 RCX: 00007f90e4a54ae9
[ 2807.028746][ T5629] RDX: 00000000001f4f33 RSI: 00000000200002c0 RDI: 0000000000000003
[ 2807.036817][ T5629] RBP: 00007f90e3dd7120 R08: 0000000000000000 R09: 0000000000000000
[ 2807.044809][ T5629] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 2807.052847][ T5629] R13: 000000000000000b R14: 00007f90e4b73f80 R15: 00007ffdb3bfd028
[ 2807.060836][ T5629]  </TASK>
22:46:41 executing program 0:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
write$ppp(r0, 0x0, 0xeffdffffffffffff)
r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x480, 0x0)
ioctl$PPPIOCATTCHAN(r1, 0x40047438, 0xfffffffffffffffc)

22:46:41 executing program 1:
accept4$llc(0xffffffffffffffff, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, &(0x7f0000000040)=0x10, 0x800) (async)
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
write$ppp(r0, 0x0, 0xeffdffff)

22:46:41 executing program 4:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
write$ppp(r0, 0x0, 0x0)
r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000000c0), 0x480, 0x0)
ioctl$LOOP_GET_STATUS(r1, 0x4c03, &(0x7f00000001c0))
r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0)
ioctl$TUNSETGROUP(r2, 0x400454ce, 0xffffffffffffffff) (async)
ioctl$PPPIOCBRIDGECHAN(r0, 0x40047435, &(0x7f0000000000)=0x400) (async)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000180), 0x2c101, 0x0)

22:46:41 executing program 5:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
write$ppp(r0, &(0x7f00000002c0)="d3", 0x1f4f33) (fail_nth: 55)

22:46:41 executing program 1:
openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x270000, 0x0)
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(r0, 0x10f, 0x86)
write$ppp(r0, 0x0, 0x0)

[ 2807.161461][ T5668] FAULT_INJECTION: forcing a failure.
[ 2807.161461][ T5668] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 2807.174588][ T5668] CPU: 1 PID: 5668 Comm: syz-executor.5 Not tainted 6.6.0-rc3-syzkaller-00165-g3b517966c561 #0
[ 2807.185025][ T5668] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/06/2023
[ 2807.195144][ T5668] Call Trace:
[ 2807.198439][ T5668]  <TASK>
[ 2807.201371][ T5668]  dump_stack_lvl+0xda/0x130
[ 2807.205980][ T5668]  dump_stack+0x15/0x20
22:46:41 executing program 3:
openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0) (async)
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
ioctl$PPPIOCATTACH(0xffffffffffffffff, 0x4004743d, &(0x7f0000000040)=0x1)
setsockopt$TIPC_DEST_DROPPABLE(r0, 0x10f, 0x81, &(0x7f0000000000)=0x2, 0x4)
write$ppp(r0, &(0x7f00000002c0)="d3", 0xfffffdef)

22:46:41 executing program 2:
write$ppp(0xffffffffffffffff, &(0x7f00000002c0)="d3", 0x1)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)

22:46:41 executing program 0:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
write$ppp(r0, 0x0, 0xeffdffffffffffff)
r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x480, 0x0)
ioctl$PPPIOCATTCHAN(r1, 0x40047438, 0xfffffffffffffffc)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0) (async)
write$ppp(r0, 0x0, 0xeffdffffffffffff) (async)
openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x480, 0x0) (async)
ioctl$PPPIOCATTCHAN(r1, 0x40047438, 0xfffffffffffffffc) (async)

22:46:41 executing program 4:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(r0, 0x10f, 0x86)
syz_io_uring_setup(0x4b31, &(0x7f0000000280)={0x0, 0x9bb0, 0x0, 0x0, 0x16e}, &(0x7f0000000300)=<r1=>0x0, &(0x7f0000000340))
r2 = syz_open_dev$loop(&(0x7f0000000380), 0x6, 0x80000)
syz_io_uring_submit(r1, 0x0, &(0x7f00000003c0)=@IORING_OP_FSYNC={0x3, 0x20, 0x0, @fd=r2, 0x0, 0x0, 0x0, 0x0, 0x1})
r3 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x4021871, 0xffffffffffffffff, 0x10000000)
syz_io_uring_setup(0x237a, &(0x7f0000000080)={0x0, 0x50dc}, &(0x7f0000000000)=<r4=>0x0, &(0x7f0000000100))
syz_io_uring_submit(r4, r3, &(0x7f0000000140)=@IORING_OP_POLL_REMOVE)
syz_io_uring_submit(r1, r3, &(0x7f0000000080)=@IORING_OP_READ=@pass_buffer={0x16, 0x1, 0x6000, @fd_index=0x8, 0x3, &(0x7f0000000040)=""/21, 0x15, 0x0, 0x1})
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000))
write$ppp(0xffffffffffffffff, 0x0, 0x0)

22:46:41 executing program 1:
openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x270000, 0x0) (async)
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(r0, 0x10f, 0x86) (async)
write$ppp(r0, 0x0, 0x0)

22:46:41 executing program 2:
write$ppp(0xffffffffffffffff, &(0x7f00000002c0)="d3", 0x1)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)

[ 2807.210147][ T5668]  should_fail_ex+0x21f/0x230
[ 2807.214846][ T5668]  should_fail+0xb/0x10
[ 2807.219024][ T5668]  should_fail_usercopy+0x1a/0x20
[ 2807.224146][ T5668]  copy_page_from_iter_atomic+0x21c/0xcf0
[ 2807.229982][ T5668]  ? shmem_write_begin+0xa6/0x210
[ 2807.235035][ T5668]  ? shmem_write_begin+0x16d/0x210
[ 2807.240243][ T5668]  generic_perform_write+0x20c/0x410
[ 2807.245576][ T5668]  ? shmem_write_begin+0x210/0x210
[ 2807.250780][ T5668]  shmem_file_write_iter+0xc8/0xe0
[ 2807.255999][ T5668]  vfs_write+0x4ab/0x7d0
22:46:41 executing program 4:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(r0, 0x10f, 0x86)
syz_io_uring_setup(0x4b31, &(0x7f0000000280)={0x0, 0x9bb0, 0x0, 0x0, 0x16e}, &(0x7f0000000300)=<r1=>0x0, &(0x7f0000000340))
r2 = syz_open_dev$loop(&(0x7f0000000380), 0x6, 0x80000)
syz_io_uring_submit(r1, 0x0, &(0x7f00000003c0)=@IORING_OP_FSYNC={0x3, 0x20, 0x0, @fd=r2, 0x0, 0x0, 0x0, 0x0, 0x1})
r3 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x4021871, 0xffffffffffffffff, 0x10000000)
syz_io_uring_setup(0x237a, &(0x7f0000000080)={0x0, 0x50dc}, &(0x7f0000000000)=<r4=>0x0, &(0x7f0000000100))
syz_io_uring_submit(r4, r3, &(0x7f0000000140)=@IORING_OP_POLL_REMOVE)
syz_io_uring_submit(r1, r3, &(0x7f0000000080)=@IORING_OP_READ=@pass_buffer={0x16, 0x1, 0x6000, @fd_index=0x8, 0x3, &(0x7f0000000040)=""/21, 0x15, 0x0, 0x1})
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000))
write$ppp(0xffffffffffffffff, 0x0, 0x0)
openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0) (async)
setsockopt$TIPC_MCAST_REPLICAST(r0, 0x10f, 0x86) (async)
syz_io_uring_setup(0x4b31, &(0x7f0000000280)={0x0, 0x9bb0, 0x0, 0x0, 0x16e}, &(0x7f0000000300), &(0x7f0000000340)) (async)
syz_open_dev$loop(&(0x7f0000000380), 0x6, 0x80000) (async)
syz_io_uring_submit(r1, 0x0, &(0x7f00000003c0)=@IORING_OP_FSYNC={0x3, 0x20, 0x0, @fd=r2, 0x0, 0x0, 0x0, 0x0, 0x1}) (async)
mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x4021871, 0xffffffffffffffff, 0x10000000) (async)
syz_io_uring_setup(0x237a, &(0x7f0000000080)={0x0, 0x50dc}, &(0x7f0000000000), &(0x7f0000000100)) (async)
syz_io_uring_submit(r4, r3, &(0x7f0000000140)=@IORING_OP_POLL_REMOVE) (async)
syz_io_uring_submit(r1, r3, &(0x7f0000000080)=@IORING_OP_READ=@pass_buffer={0x16, 0x1, 0x6000, @fd_index=0x8, 0x3, &(0x7f0000000040)=""/21, 0x15, 0x0, 0x1}) (async)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000)) (async)
write$ppp(0xffffffffffffffff, 0x0, 0x0) (async)

[ 2807.260275][ T5668]  ksys_write+0xeb/0x1a0
[ 2807.264532][ T5668]  __x64_sys_write+0x42/0x50
[ 2807.269143][ T5668]  do_syscall_64+0x41/0xc0
[ 2807.273577][ T5668]  entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 2807.279538][ T5668] RIP: 0033:0x7f90e4a54ae9
[ 2807.283960][ T5668] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48
[ 2807.303640][ T5668] RSP: 002b:00007f90e3dd70c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 2807.312076][ T5668] RAX: ffffffffffffffda RBX: 00007f90e4b73f80 RCX: 00007f90e4a54ae9
[ 2807.320118][ T5668] RDX: 00000000001f4f33 RSI: 00000000200002c0 RDI: 0000000000000003
[ 2807.328147][ T5668] RBP: 00007f90e3dd7120 R08: 0000000000000000 R09: 0000000000000000
[ 2807.336139][ T5668] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 2807.344177][ T5668] R13: 000000000000000b R14: 00007f90e4b73f80 R15: 00007ffdb3bfd028
[ 2807.352251][ T5668]  </TASK>
22:46:41 executing program 5:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
write$ppp(r0, &(0x7f00000002c0)="d3", 0x1f4f33) (fail_nth: 56)

22:46:41 executing program 2:
write$ppp(0xffffffffffffffff, &(0x7f00000002c0)="d3", 0x1)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
write$ppp(0xffffffffffffffff, &(0x7f00000002c0)="d3", 0x1) (async)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)

22:46:41 executing program 0:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
write$ppp(r0, 0x0, 0xeffdffffffffffff)
r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x480, 0x0)
ioctl$PPPIOCATTCHAN(r1, 0x40047438, 0xfffffffffffffffc)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0) (async)
write$ppp(r0, 0x0, 0xeffdffffffffffff) (async)
openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x480, 0x0) (async)
ioctl$PPPIOCATTCHAN(r1, 0x40047438, 0xfffffffffffffffc) (async)

22:46:41 executing program 4:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(r0, 0x10f, 0x86)
syz_io_uring_setup(0x4b31, &(0x7f0000000280)={0x0, 0x9bb0, 0x0, 0x0, 0x16e}, &(0x7f0000000300)=<r1=>0x0, &(0x7f0000000340))
r2 = syz_open_dev$loop(&(0x7f0000000380), 0x6, 0x80000)
syz_io_uring_submit(r1, 0x0, &(0x7f00000003c0)=@IORING_OP_FSYNC={0x3, 0x20, 0x0, @fd=r2, 0x0, 0x0, 0x0, 0x0, 0x1})
r3 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x4021871, 0xffffffffffffffff, 0x10000000)
syz_io_uring_setup(0x237a, &(0x7f0000000080)={0x0, 0x50dc}, &(0x7f0000000000)=<r4=>0x0, &(0x7f0000000100))
syz_io_uring_submit(r4, r3, &(0x7f0000000140)=@IORING_OP_POLL_REMOVE)
syz_io_uring_submit(r1, r3, &(0x7f0000000080)=@IORING_OP_READ=@pass_buffer={0x16, 0x1, 0x6000, @fd_index=0x8, 0x3, &(0x7f0000000040)=""/21, 0x15, 0x0, 0x1})
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000))
write$ppp(0xffffffffffffffff, 0x0, 0x0)
openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0) (async)
setsockopt$TIPC_MCAST_REPLICAST(r0, 0x10f, 0x86) (async)
syz_io_uring_setup(0x4b31, &(0x7f0000000280)={0x0, 0x9bb0, 0x0, 0x0, 0x16e}, &(0x7f0000000300), &(0x7f0000000340)) (async)
syz_open_dev$loop(&(0x7f0000000380), 0x6, 0x80000) (async)
syz_io_uring_submit(r1, 0x0, &(0x7f00000003c0)=@IORING_OP_FSYNC={0x3, 0x20, 0x0, @fd=r2, 0x0, 0x0, 0x0, 0x0, 0x1}) (async)
mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x4021871, 0xffffffffffffffff, 0x10000000) (async)
syz_io_uring_setup(0x237a, &(0x7f0000000080)={0x0, 0x50dc}, &(0x7f0000000000), &(0x7f0000000100)) (async)
syz_io_uring_submit(r4, r3, &(0x7f0000000140)=@IORING_OP_POLL_REMOVE) (async)
syz_io_uring_submit(r1, r3, &(0x7f0000000080)=@IORING_OP_READ=@pass_buffer={0x16, 0x1, 0x6000, @fd_index=0x8, 0x3, &(0x7f0000000040)=""/21, 0x15, 0x0, 0x1}) (async)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000)) (async)
write$ppp(0xffffffffffffffff, 0x0, 0x0) (async)

22:46:41 executing program 1:
openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x270000, 0x0) (async)
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(r0, 0x10f, 0x86) (async, rerun: 64)
write$ppp(r0, 0x0, 0x0) (rerun: 64)

[ 2807.387756][ T5695] FAULT_INJECTION: forcing a failure.
[ 2807.387756][ T5695] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[ 2807.401071][ T5695] CPU: 0 PID: 5695 Comm: syz-executor.5 Not tainted 6.6.0-rc3-syzkaller-00165-g3b517966c561 #0
[ 2807.411409][ T5695] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/06/2023
[ 2807.421500][ T5695] Call Trace:
[ 2807.424794][ T5695]  <TASK>
[ 2807.427802][ T5695]  dump_stack_lvl+0xda/0x130
[ 2807.432443][ T5695]  dump_stack+0x15/0x20
[ 2807.436656][ T5695]  should_fail_ex+0x21f/0x230
[ 2807.441385][ T5695]  __should_fail_alloc_page+0xfd/0x110
[ 2807.446885][ T5695]  __alloc_pages+0x108/0x340
[ 2807.451573][ T5695]  vma_alloc_folio+0x6a3/0x8c0
[ 2807.456389][ T5695]  ? shmem_inode_acct_block+0x1ee/0x220
[ 2807.462121][ T5695]  shmem_get_folio_gfp+0x579/0xc30
[ 2807.467255][ T5695]  shmem_write_begin+0xa6/0x210
[ 2807.472418][ T5695]  generic_perform_write+0x1c9/0x410
[ 2807.477763][ T5695]  ? shmem_write_begin+0x210/0x210
[ 2807.482899][ T5695]  shmem_file_write_iter+0xc8/0xe0
[ 2807.488038][ T5695]  vfs_write+0x4ab/0x7d0
[ 2807.492374][ T5695]  ksys_write+0xeb/0x1a0
[ 2807.496747][ T5695]  __x64_sys_write+0x42/0x50
[ 2807.501394][ T5695]  do_syscall_64+0x41/0xc0
[ 2807.505826][ T5695]  entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 2807.511744][ T5695] RIP: 0033:0x7f90e4a54ae9
[ 2807.516201][ T5695] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48
22:46:41 executing program 3:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
ioctl$PPPIOCATTACH(0xffffffffffffffff, 0x4004743d, &(0x7f0000000040)=0x1) (async)
setsockopt$TIPC_DEST_DROPPABLE(r0, 0x10f, 0x81, &(0x7f0000000000)=0x2, 0x4) (async, rerun: 32)
write$ppp(r0, &(0x7f00000002c0)="d3", 0xfffffdef) (rerun: 32)

22:46:41 executing program 0:
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4)
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
pipe2$9p(&(0x7f0000000000), 0x84100)
write$ppp(r0, 0x0, 0xeffdffffffffffff)

22:46:41 executing program 1:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
write$ppp(r0, 0x0, 0xeffdffff)
getsockopt$TIPC_DEST_DROPPABLE(r0, 0x10f, 0x81, &(0x7f0000000000), &(0x7f0000000040)=0x4)

22:46:41 executing program 2:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(r0, 0x10f, 0x86)
sendmsg$AUDIT_MAKE_EQUIV(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c010000f70300012dbd7000fddbdf25fc000000070000002e2f66696c6530616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616171616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161612e2f66696c65300000"], 0x11c}, 0x1, 0x0, 0x0, 0x12c7ee74653e012}, 0x40)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
r2 = openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(r2, 0x10f, 0x86)
setsockopt$TIPC_GROUP_LEAVE(r2, 0x10f, 0x88)
write$ppp(r1, &(0x7f00000002c0)="d3", 0x1)

22:46:41 executing program 4:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x4ac541, 0x0)
write$ppp(r0, 0x0, 0xffffffffffffff0b)
r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0)
ioctl$USBDEVFS_SETINTERFACE(r1, 0x80085504, &(0x7f00000001c0)={0x1, 0x6})
getsockopt$inet_tcp_buf(r0, 0x6, 0x1c, &(0x7f00000000c0)=""/236, &(0x7f0000000040)=0xec)
socketpair(0x1e, 0xa, 0xfffffbff, &(0x7f0000000240)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$IMGETDEVINFO(r3, 0x80044944, &(0x7f0000000280)={0x3})
r4 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000180)={'vcan0\x00', <r5=>0x0})
bind$can_j1939(r4, &(0x7f00000001c0)={0x1d, r5, 0x0, {0x1}}, 0x18)
getsockopt$inet_mptcp_buf(r2, 0x11c, 0x3, &(0x7f00000002c0)=""/61, &(0x7f0000000300)=0x3d)
bind$can_j1939(r1, &(0x7f0000000200)={0x1d, r5, 0x1, {0x2, 0x0, 0x2}, 0xff}, 0x18)

22:46:41 executing program 1:
openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0) (async)
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
write$ppp(r0, 0x0, 0xeffdffff)
getsockopt$TIPC_DEST_DROPPABLE(r0, 0x10f, 0x81, &(0x7f0000000000), &(0x7f0000000040)=0x4)

22:46:41 executing program 0:
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4)
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
pipe2$9p(&(0x7f0000000000), 0x84100) (async)
pipe2$9p(&(0x7f0000000000), 0x84100)
write$ppp(r0, 0x0, 0xeffdffffffffffff)

[ 2807.535880][ T5695] RSP: 002b:00007f90e3dd70c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 2807.544339][ T5695] RAX: ffffffffffffffda RBX: 00007f90e4b73f80 RCX: 00007f90e4a54ae9
[ 2807.552342][ T5695] RDX: 00000000001f4f33 RSI: 00000000200002c0 RDI: 0000000000000003
[ 2807.560331][ T5695] RBP: 00007f90e3dd7120 R08: 0000000000000000 R09: 0000000000000000
[ 2807.568396][ T5695] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 2807.576414][ T5695] R13: 000000000000000b R14: 00007f90e4b73f80 R15: 00007ffdb3bfd028
[ 2807.584410][ T5695]  </TASK>
22:46:41 executing program 5:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
write$ppp(r0, &(0x7f00000002c0)="d3", 0x1f4f33) (fail_nth: 57)

22:46:41 executing program 2:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(r0, 0x10f, 0x86) (async)
sendmsg$AUDIT_MAKE_EQUIV(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c010000f70300012dbd7000fddbdf25fc000000070000002e2f66696c6530616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616171616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161612e2f66696c65300000"], 0x11c}, 0x1, 0x0, 0x0, 0x12c7ee74653e012}, 0x40) (async)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
r2 = openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(r2, 0x10f, 0x86) (async)
setsockopt$TIPC_GROUP_LEAVE(r2, 0x10f, 0x88) (async, rerun: 64)
write$ppp(r1, &(0x7f00000002c0)="d3", 0x1) (rerun: 64)

22:46:41 executing program 4:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x4ac541, 0x0)
write$ppp(r0, 0x0, 0xffffffffffffff0b) (async)
r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0)
ioctl$USBDEVFS_SETINTERFACE(r1, 0x80085504, &(0x7f00000001c0)={0x1, 0x6})
getsockopt$inet_tcp_buf(r0, 0x6, 0x1c, &(0x7f00000000c0)=""/236, &(0x7f0000000040)=0xec) (async)
socketpair(0x1e, 0xa, 0xfffffbff, &(0x7f0000000240)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$IMGETDEVINFO(r3, 0x80044944, &(0x7f0000000280)={0x3})
r4 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000180)={'vcan0\x00', <r5=>0x0})
bind$can_j1939(r4, &(0x7f00000001c0)={0x1d, r5, 0x0, {0x1}}, 0x18)
getsockopt$inet_mptcp_buf(r2, 0x11c, 0x3, &(0x7f00000002c0)=""/61, &(0x7f0000000300)=0x3d) (async)
bind$can_j1939(r1, &(0x7f0000000200)={0x1d, r5, 0x1, {0x2, 0x0, 0x2}, 0xff}, 0x18)

22:46:41 executing program 0:
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) (async)
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
pipe2$9p(&(0x7f0000000000), 0x84100) (async)
write$ppp(r0, 0x0, 0xeffdffffffffffff)

22:46:41 executing program 1:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
write$ppp(r0, 0x0, 0xeffdffff) (async)
getsockopt$TIPC_DEST_DROPPABLE(r0, 0x10f, 0x81, &(0x7f0000000000), &(0x7f0000000040)=0x4)

[ 2807.670219][ T5745] FAULT_INJECTION: forcing a failure.
[ 2807.670219][ T5745] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[ 2807.683586][ T5745] CPU: 1 PID: 5745 Comm: syz-executor.5 Not tainted 6.6.0-rc3-syzkaller-00165-g3b517966c561 #0
[ 2807.693966][ T5745] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/06/2023
[ 2807.704064][ T5745] Call Trace:
[ 2807.707359][ T5745]  <TASK>
[ 2807.710354][ T5745]  dump_stack_lvl+0xda/0x130
[ 2807.715022][ T5745]  dump_stack+0x15/0x20
[ 2807.719269][ T5745]  should_fail_ex+0x21f/0x230
[ 2807.724029][ T5745]  __should_fail_alloc_page+0xfd/0x110
[ 2807.729600][ T5745]  __alloc_pages+0x108/0x340
[ 2807.734253][ T5745]  vma_alloc_folio+0x6a3/0x8c0
[ 2807.739059][ T5745]  ? shmem_inode_acct_block+0x1ee/0x220
[ 2807.744659][ T5745]  shmem_get_folio_gfp+0x579/0xc30
[ 2807.749810][ T5745]  shmem_write_begin+0xa6/0x210
[ 2807.754700][ T5745]  generic_perform_write+0x1c9/0x410
[ 2807.760000][ T5745]  ? shmem_write_begin+0x210/0x210
[ 2807.765223][ T5745]  shmem_file_write_iter+0xc8/0xe0
[ 2807.770371][ T5745]  vfs_write+0x4ab/0x7d0
[ 2807.774644][ T5745]  ksys_write+0xeb/0x1a0
[ 2807.778989][ T5745]  __x64_sys_write+0x42/0x50
[ 2807.783593][ T5745]  do_syscall_64+0x41/0xc0
[ 2807.788058][ T5745]  entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 2807.793985][ T5745] RIP: 0033:0x7f90e4a54ae9
[ 2807.798421][ T5745] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48
[ 2807.818050][ T5745] RSP: 002b:00007f90e3dd70c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 2807.826524][ T5745] RAX: ffffffffffffffda RBX: 00007f90e4b73f80 RCX: 00007f90e4a54ae9
[ 2807.834512][ T5745] RDX: 00000000001f4f33 RSI: 00000000200002c0 RDI: 0000000000000003
[ 2807.842578][ T5745] RBP: 00007f90e3dd7120 R08: 0000000000000000 R09: 0000000000000000
[ 2807.850578][ T5745] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 2807.858579][ T5745] R13: 000000000000000b R14: 00007f90e4b73f80 R15: 00007ffdb3bfd028
[ 2807.866563][ T5745]  </TASK>
22:46:42 executing program 1:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
write$ppp(r0, 0x0, 0xeffdffff)
syz_init_net_socket$llc(0x1a, 0x1, 0x0)
socketpair(0x1f, 0x3, 0x400, &(0x7f0000000040)={<r1=>0xffffffffffffffff})
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f00000000c0))
syz_genetlink_get_family_id$team(&(0x7f0000000000), r1)

22:46:42 executing program 4:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x4ac541, 0x0)
write$ppp(r0, 0x0, 0xffffffffffffff0b) (async)
r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0)
ioctl$USBDEVFS_SETINTERFACE(r1, 0x80085504, &(0x7f00000001c0)={0x1, 0x6}) (async)
getsockopt$inet_tcp_buf(r0, 0x6, 0x1c, &(0x7f00000000c0)=""/236, &(0x7f0000000040)=0xec)
socketpair(0x1e, 0xa, 0xfffffbff, &(0x7f0000000240)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$IMGETDEVINFO(r3, 0x80044944, &(0x7f0000000280)={0x3}) (async)
r4 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000180)={'vcan0\x00', <r5=>0x0})
bind$can_j1939(r4, &(0x7f00000001c0)={0x1d, r5, 0x0, {0x1}}, 0x18) (async)
getsockopt$inet_mptcp_buf(r2, 0x11c, 0x3, &(0x7f00000002c0)=""/61, &(0x7f0000000300)=0x3d) (async)
bind$can_j1939(r1, &(0x7f0000000200)={0x1d, r5, 0x1, {0x2, 0x0, 0x2}, 0xff}, 0x18)

22:46:42 executing program 2:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(r0, 0x10f, 0x86) (async)
sendmsg$AUDIT_MAKE_EQUIV(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c010000f70300012dbd7000fddbdf25fc000000070000002e2f66696c6530616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616171616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161612e2f66696c65300000"], 0x11c}, 0x1, 0x0, 0x0, 0x12c7ee74653e012}, 0x40) (async, rerun: 64)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0) (rerun: 64)
r2 = openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(r2, 0x10f, 0x86) (async)
setsockopt$TIPC_GROUP_LEAVE(r2, 0x10f, 0x88)
write$ppp(r1, &(0x7f00000002c0)="d3", 0x1)

22:46:42 executing program 0:
openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(r0, 0x10f, 0x86)
write$ppp(r0, 0x0, 0x0)

22:46:42 executing program 5:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
write$ppp(r0, &(0x7f00000002c0)="d3", 0x1f4f33) (fail_nth: 58)

22:46:42 executing program 3:
openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(r0, 0x10f, 0x86)
getsockopt$TIPC_DEST_DROPPABLE(r0, 0x10f, 0x81, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0)
socket$l2tp6(0xa, 0x2, 0x73)
setsockopt$TIPC_MCAST_REPLICAST(r1, 0x10f, 0x86)
r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x10080, 0x0)
write$ppp(r2, &(0x7f0000000000)='\x00', 0xffffffffffffff25)

22:46:42 executing program 4:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
write$ppp(r0, 0x0, 0x0)

22:46:42 executing program 0:
openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0) (async)
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(r0, 0x10f, 0x86)
write$ppp(r0, 0x0, 0x0)

22:46:42 executing program 2:
socketpair(0xb, 0xa, 0xde17, &(0x7f0000000000))
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
write$ppp(r0, &(0x7f00000002c0)="d3", 0x1)

22:46:42 executing program 2:
socketpair(0xb, 0xa, 0xde17, &(0x7f0000000000))
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
write$ppp(r0, &(0x7f00000002c0)="d3", 0x1)

[ 2808.672441][ T5755] FAULT_INJECTION: forcing a failure.
[ 2808.672441][ T5755] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[ 2808.685822][ T5755] CPU: 1 PID: 5755 Comm: syz-executor.5 Not tainted 6.6.0-rc3-syzkaller-00165-g3b517966c561 #0
[ 2808.696179][ T5755] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/06/2023
[ 2808.706264][ T5755] Call Trace:
[ 2808.709559][ T5755]  <TASK>
[ 2808.712494][ T5755]  dump_stack_lvl+0xda/0x130
[ 2808.717158][ T5755]  dump_stack+0x15/0x20
22:46:42 executing program 3:
openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0) (async, rerun: 64)
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0) (rerun: 64)
setsockopt$TIPC_MCAST_REPLICAST(r0, 0x10f, 0x86) (async, rerun: 32)
getsockopt$TIPC_DEST_DROPPABLE(r0, 0x10f, 0x81, &(0x7f00000000c0), &(0x7f0000000100)=0x4) (async, rerun: 32)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0)
socket$l2tp6(0xa, 0x2, 0x73) (async, rerun: 64)
setsockopt$TIPC_MCAST_REPLICAST(r1, 0x10f, 0x86) (async, rerun: 64)
r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x10080, 0x0)
write$ppp(r2, &(0x7f0000000000)='\x00', 0xffffffffffffff25)

22:46:42 executing program 2:
socketpair(0xb, 0xa, 0xde17, &(0x7f0000000000))
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
write$ppp(r0, &(0x7f00000002c0)="d3", 0x1)

[ 2808.721348][ T5755]  should_fail_ex+0x21f/0x230
[ 2808.726050][ T5755]  __should_fail_alloc_page+0xfd/0x110
[ 2808.731558][ T5755]  __alloc_pages+0x108/0x340
[ 2808.736299][ T5755]  vma_alloc_folio+0x6a3/0x8c0
[ 2808.741151][ T5755]  ? shmem_inode_acct_block+0x1ee/0x220
[ 2808.746801][ T5755]  shmem_get_folio_gfp+0x579/0xc30
[ 2808.751981][ T5755]  shmem_write_begin+0xa6/0x210
[ 2808.756891][ T5755]  generic_perform_write+0x1c9/0x410
[ 2808.762262][ T5755]  ? shmem_write_begin+0x210/0x210
[ 2808.767410][ T5755]  shmem_file_write_iter+0xc8/0xe0
[ 2808.772558][ T5755]  vfs_write+0x4ab/0x7d0
[ 2808.776842][ T5755]  ksys_write+0xeb/0x1a0
[ 2808.781129][ T5755]  __x64_sys_write+0x42/0x50
[ 2808.785781][ T5755]  do_syscall_64+0x41/0xc0
[ 2808.790278][ T5755]  entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 2808.796207][ T5755] RIP: 0033:0x7f90e4a54ae9
[ 2808.800673][ T5755] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48
22:46:42 executing program 2:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x440, 0x0)
quotactl_fd$Q_QUOTAON(r0, 0xffffffff80000202, 0x0, &(0x7f0000000000)='./file0\x00')
ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000100)={'bond0\x00'})
r1 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000180)={'vcan0\x00', <r2=>0x0})
ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000040))
bind$can_j1939(r1, &(0x7f00000001c0)={0x1d, r2, 0x0, {0x1}}, 0x18)
ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f00000000c0)=r2)
write$ppp(r0, &(0x7f00000002c0)="d3", 0x1)

22:46:42 executing program 3:
openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0) (async)
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(r0, 0x10f, 0x86)
getsockopt$TIPC_DEST_DROPPABLE(r0, 0x10f, 0x81, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0)
socket$l2tp6(0xa, 0x2, 0x73) (async)
socket$l2tp6(0xa, 0x2, 0x73)
setsockopt$TIPC_MCAST_REPLICAST(r1, 0x10f, 0x86) (async)
setsockopt$TIPC_MCAST_REPLICAST(r1, 0x10f, 0x86)
r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x10080, 0x0)
write$ppp(r2, &(0x7f0000000000)='\x00', 0xffffffffffffff25)

22:46:42 executing program 0:
openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0) (async)
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(r0, 0x10f, 0x86) (async, rerun: 64)
write$ppp(r0, 0x0, 0x0) (rerun: 64)

22:46:42 executing program 4:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
write$ppp(r0, 0x0, 0x0)

22:46:42 executing program 5:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
write$ppp(r0, &(0x7f00000002c0)="d3", 0x1f4f33) (fail_nth: 59)

22:46:42 executing program 1:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
write$ppp(r0, 0x0, 0xeffdffff) (async)
syz_init_net_socket$llc(0x1a, 0x1, 0x0)
socketpair(0x1f, 0x3, 0x400, &(0x7f0000000040)={<r1=>0xffffffffffffffff}) (async)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f00000000c0)) (async)
syz_genetlink_get_family_id$team(&(0x7f0000000000), r1)

22:46:42 executing program 4:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
write$ppp(r0, 0x0, 0x0)

22:46:42 executing program 2:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x440, 0x0)
quotactl_fd$Q_QUOTAON(r0, 0xffffffff80000202, 0x0, &(0x7f0000000000)='./file0\x00')
ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000100)={'bond0\x00'}) (async, rerun: 64)
r1 = socket$can_j1939(0x1d, 0x2, 0x7) (rerun: 64)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000180)={'vcan0\x00', <r2=>0x0})
ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000040)) (async)
bind$can_j1939(r1, &(0x7f00000001c0)={0x1d, r2, 0x0, {0x1}}, 0x18) (async, rerun: 32)
ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f00000000c0)=r2) (async, rerun: 32)
write$ppp(r0, &(0x7f00000002c0)="d3", 0x1)

22:46:42 executing program 3:
openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)

22:46:42 executing program 0:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x4ff941, 0x0)
write$ppp(r0, 0x0, 0xeffdffffffffffff)
sendmsg$AUDIT_LIST_RULES(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x826abf4661478198}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x10, 0x3f5, 0x2, 0x70bd2d, 0x25dfdbff, "", ["", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x80}, 0x10)
ioctl$PPPIOCGIDLE32(r0, 0x8008743f, &(0x7f0000000000))

[ 2808.820347][ T5755] RSP: 002b:00007f90e3dd70c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 2808.828782][ T5755] RAX: ffffffffffffffda RBX: 00007f90e4b73f80 RCX: 00007f90e4a54ae9
[ 2808.836856][ T5755] RDX: 00000000001f4f33 RSI: 00000000200002c0 RDI: 0000000000000003
[ 2808.844848][ T5755] RBP: 00007f90e3dd7120 R08: 0000000000000000 R09: 0000000000000000
[ 2808.852849][ T5755] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 2808.860837][ T5755] R13: 000000000000000b R14: 00007f90e4b73f80 R15: 00007ffdb3bfd028
[ 2808.868849][ T5755]  </TASK>
22:46:42 executing program 4:
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000000c0))
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dcc01, 0x0)
write$ppp(r1, 0x0, 0x0)
getresuid(&(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180)=<r2=>0x0)
quotactl_fd$Q_QUOTAON(r1, 0xffffffff80000201, r2, &(0x7f00000001c0)='./file0\x00')
syz_genetlink_get_family_id$SEG6(&(0x7f0000000000), r1)

22:46:42 executing program 1:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
write$ppp(r0, 0x0, 0xeffdffff) (async)
syz_init_net_socket$llc(0x1a, 0x1, 0x0)
socketpair(0x1f, 0x3, 0x400, &(0x7f0000000040)={<r1=>0xffffffffffffffff})
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f00000000c0)) (async)
syz_genetlink_get_family_id$team(&(0x7f0000000000), r1)

22:46:43 executing program 1:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
mmap$binder(&(0x7f0000ff3000/0xb000)=nil, 0xb000, 0x1, 0x11, r0, 0x7)
write$ppp(r0, 0x0, 0xeffdffff)

22:46:43 executing program 0:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x4ff941, 0x0)
write$ppp(r0, 0x0, 0xeffdffffffffffff)
sendmsg$AUDIT_LIST_RULES(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x826abf4661478198}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x10, 0x3f5, 0x2, 0x70bd2d, 0x25dfdbff, "", ["", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x80}, 0x10) (async)
sendmsg$AUDIT_LIST_RULES(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x826abf4661478198}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x10, 0x3f5, 0x2, 0x70bd2d, 0x25dfdbff, "", ["", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x80}, 0x10)
ioctl$PPPIOCGIDLE32(r0, 0x8008743f, &(0x7f0000000000))

[ 2808.920584][ T5800] FAULT_INJECTION: forcing a failure.
[ 2808.920584][ T5800] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 2808.933705][ T5800] CPU: 1 PID: 5800 Comm: syz-executor.5 Not tainted 6.6.0-rc3-syzkaller-00165-g3b517966c561 #0
[ 2808.944059][ T5800] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/06/2023
[ 2808.954161][ T5800] Call Trace:
[ 2808.957452][ T5800]  <TASK>
[ 2808.960399][ T5800]  dump_stack_lvl+0xda/0x130
[ 2808.965026][ T5800]  dump_stack+0x15/0x20
22:46:43 executing program 1:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
mmap$binder(&(0x7f0000ff3000/0xb000)=nil, 0xb000, 0x1, 0x11, r0, 0x7) (async)
write$ppp(r0, 0x0, 0xeffdffff)

22:46:43 executing program 0:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x4ff941, 0x0)
write$ppp(r0, 0x0, 0xeffdffffffffffff) (async)
sendmsg$AUDIT_LIST_RULES(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x826abf4661478198}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x10, 0x3f5, 0x2, 0x70bd2d, 0x25dfdbff, "", ["", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x80}, 0x10) (async)
ioctl$PPPIOCGIDLE32(r0, 0x8008743f, &(0x7f0000000000))

[ 2808.969202][ T5800]  should_fail_ex+0x21f/0x230
[ 2808.973910][ T5800]  should_fail+0xb/0x10
[ 2808.978079][ T5800]  should_fail_usercopy+0x1a/0x20
[ 2808.983162][ T5800]  copy_page_from_iter_atomic+0x21c/0xcf0
[ 2808.988936][ T5800]  ? shmem_write_begin+0xa6/0x210
[ 2808.993978][ T5800]  ? shmem_write_begin+0x16d/0x210
[ 2808.999141][ T5800]  generic_perform_write+0x20c/0x410
[ 2809.004435][ T5800]  ? shmem_write_begin+0x210/0x210
[ 2809.009586][ T5800]  shmem_file_write_iter+0xc8/0xe0
[ 2809.014829][ T5800]  vfs_write+0x4ab/0x7d0
[ 2809.019213][ T5800]  ksys_write+0xeb/0x1a0
[ 2809.023476][ T5800]  __x64_sys_write+0x42/0x50
[ 2809.028203][ T5800]  do_syscall_64+0x41/0xc0
[ 2809.032673][ T5800]  entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 2809.038595][ T5800] RIP: 0033:0x7f90e4a54ae9
[ 2809.043038][ T5800] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48
[ 2809.062728][ T5800] RSP: 002b:00007f90e3dd70c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
22:46:43 executing program 0:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100), 0x754001, 0x0)
write$ppp(r0, 0x0, 0xeffdffffffffffff)
ioctl$PPPIOCATTACH(r0, 0x4004743d, &(0x7f0000000000)=0x4)
ioctl$PPPIOCGIDLE64(r0, 0x8010743f, &(0x7f0000000040))
ioctl$PPPIOCGIDLE64(r0, 0x8010743f, &(0x7f00000000c0))

22:46:43 executing program 1:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
mmap$binder(&(0x7f0000ff3000/0xb000)=nil, 0xb000, 0x1, 0x11, r0, 0x7) (async)
mmap$binder(&(0x7f0000ff3000/0xb000)=nil, 0xb000, 0x1, 0x11, r0, 0x7)
write$ppp(r0, 0x0, 0xeffdffff)

22:46:43 executing program 3:
openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)

22:46:43 executing program 5:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
write$ppp(r0, &(0x7f00000002c0)="d3", 0x1f4f33) (fail_nth: 60)

22:46:43 executing program 2:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x440, 0x0)
quotactl_fd$Q_QUOTAON(r0, 0xffffffff80000202, 0x0, &(0x7f0000000000)='./file0\x00') (async, rerun: 64)
ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000100)={'bond0\x00'}) (async, rerun: 64)
r1 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000180)={'vcan0\x00', <r2=>0x0}) (async)
ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000040))
bind$can_j1939(r1, &(0x7f00000001c0)={0x1d, r2, 0x0, {0x1}}, 0x18)
ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f00000000c0)=r2) (async, rerun: 64)
write$ppp(r0, &(0x7f00000002c0)="d3", 0x1) (rerun: 64)

[ 2809.071192][ T5800] RAX: ffffffffffffffda RBX: 00007f90e4b73f80 RCX: 00007f90e4a54ae9
[ 2809.079160][ T5800] RDX: 00000000001f4f33 RSI: 00000000200002c0 RDI: 0000000000000003
[ 2809.087137][ T5800] RBP: 00007f90e3dd7120 R08: 0000000000000000 R09: 0000000000000000
[ 2809.095182][ T5800] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 2809.103149][ T5800] R13: 000000000000000b R14: 00007f90e4b73f80 R15: 00007ffdb3bfd028
[ 2809.111194][ T5800]  </TASK>
22:46:43 executing program 3:
openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)

22:46:43 executing program 4:
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000000c0)) (async)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dcc01, 0x0)
write$ppp(r1, 0x0, 0x0)
getresuid(&(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180)=<r2=>0x0)
quotactl_fd$Q_QUOTAON(r1, 0xffffffff80000201, r2, &(0x7f00000001c0)='./file0\x00') (async)
syz_genetlink_get_family_id$SEG6(&(0x7f0000000000), r1)

22:46:43 executing program 1:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec41, 0x0)
ioctl$TUNSETVNETLE(r0, 0x400454dc, &(0x7f0000000000))
write$ppp(r0, 0x0, 0xeffdffff)

22:46:43 executing program 0:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100), 0x754001, 0x0)
write$ppp(r0, 0x0, 0xeffdffffffffffff)
ioctl$PPPIOCATTACH(r0, 0x4004743d, &(0x7f0000000000)=0x4)
ioctl$PPPIOCGIDLE64(r0, 0x8010743f, &(0x7f0000000040))
ioctl$PPPIOCGIDLE64(r0, 0x8010743f, &(0x7f00000000c0))
openat$bsg(0xffffffffffffff9c, &(0x7f0000000100), 0x754001, 0x0) (async)
write$ppp(r0, 0x0, 0xeffdffffffffffff) (async)
ioctl$PPPIOCATTACH(r0, 0x4004743d, &(0x7f0000000000)=0x4) (async)
ioctl$PPPIOCGIDLE64(r0, 0x8010743f, &(0x7f0000000040)) (async)
ioctl$PPPIOCGIDLE64(r0, 0x8010743f, &(0x7f00000000c0)) (async)

22:46:43 executing program 3:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(r0, 0x10f, 0x86)
setsockopt$TIPC_MCAST_REPLICAST(r1, 0x10f, 0x86)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0xcc, 0x0, &(0x7f0000000300)=[@release, @request_death={0x400c630e, 0x1}, @reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000500)=ANY=[@ANYBLOB="000000000000000070bff31426422cd3daa5625957624ac81d87c73b3eeef45ab4d2e982999d5440d41f72a8e33303255ac136f5715e6ed1302350d4267d78a88dec6e1bf401a48e4a35fdc2fdfa0f5b78843cf9", @ANYRES32=r1, @ANYBLOB="000000000000000000000000852a62770111000002000000000000000000000000000000852a6273001000000200"/60], &(0x7f00000000c0)={0x0, 0x18, 0x30}}, 0x40}, @clear_death={0x400c630f, 0x2}, @transaction={0x40406300, {0x2, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000180)={@flat=@weak_binder={0x77622a85, 0x0, 0x3}, @ptr={0x70742a85, 0x1, &(0x7f0000000100)=""/113, 0x71, 0x1, 0x14}, @fd={0x66642a85, 0x0, r0}}, &(0x7f0000000200)={0x0, 0x18, 0x40}}}, @decrefs={0x40046307, 0x3}, @free_buffer], 0x5d, 0x0, &(0x7f0000000240)="790bb9fa81c8d9d03cb65a96ab24cd2144d454d3c690d2bcb714f5c6719d6d4f1dca1f2f0cd2c0d6564af9066e3e8d90cc93670741ee7369da13c50c92dfa4d58f35c3414e3422246d1c3375a595829f1b1196d2adfd2f26349ed96ae8"})
write$ppp(r0, &(0x7f00000002c0)="d3", 0xfffffdef)
timerfd_gettime(r0, &(0x7f0000000440))
write$ppp(r1, &(0x7f0000000480)="f1bed6d9638a7fc0829e7dabf638ceab62608962fa741f511c12428c10e7f0cf836ca518f7fe4d4219729cb70cffb81cd2ea59b8b71482b81ad78dc6a36612306ead6f504a3b8b430c395886effe5c407f9cbbc50dde3860466574c340c612e4e9ef0dd319", 0x65)
bind$can_j1939(r1, &(0x7f0000000000)={0x1d, 0x0, 0x1, {0x2, 0xf0, 0x3}, 0x2}, 0x18)

[ 2809.176854][ T5831] FAULT_INJECTION: forcing a failure.
[ 2809.176854][ T5831] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[ 2809.190146][ T5831] CPU: 1 PID: 5831 Comm: syz-executor.5 Not tainted 6.6.0-rc3-syzkaller-00165-g3b517966c561 #0
[ 2809.200551][ T5831] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/06/2023
[ 2809.210633][ T5831] Call Trace:
[ 2809.213922][ T5831]  <TASK>
[ 2809.216903][ T5831]  dump_stack_lvl+0xda/0x130
[ 2809.221522][ T5831]  dump_stack+0x15/0x20
22:46:43 executing program 0:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100), 0x754001, 0x0)
write$ppp(r0, 0x0, 0xeffdffffffffffff) (async)
ioctl$PPPIOCATTACH(r0, 0x4004743d, &(0x7f0000000000)=0x4) (async)
ioctl$PPPIOCGIDLE64(r0, 0x8010743f, &(0x7f0000000040))
ioctl$PPPIOCGIDLE64(r0, 0x8010743f, &(0x7f00000000c0))

22:46:43 executing program 2:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(r1, 0x10f, 0x86)
r2 = syz_genetlink_get_family_id$team(&(0x7f0000000040), r0)
r3 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000180)={'vcan0\x00', <r4=>0x0})
bind$can_j1939(r3, &(0x7f00000001c0)={0x1d, r4, 0x0, {0x1}}, 0x18)
r5 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000180)={'vcan0\x00', <r6=>0x0})
bind$can_j1939(r5, &(0x7f00000001c0)={0x1d, r6, 0x0, {0x1}}, 0x18)
r7 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000180)={'vcan0\x00', <r8=>0x0})
bind$can_j1939(r7, &(0x7f00000001c0)={0x1d, r8, 0x0, {0x1}}, 0x18)
sendmsg$TEAM_CMD_NOOP(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000300)={0x47c, r2, 0x400, 0x70bd2d, 0x25dfdbff, {}, [{{0x8}, {0x164, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r6}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}]}}, {{0x8}, {0xf4, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r8}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8000}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}]}}, {{0x8}, {0xf8, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}]}}, {{0x8}, {0xf8, 0x2, 0x0, 0x1, [{0x84, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x54, 0x4, [{0x9, 0x9, 0xff, 0x5}, {0x0, 0x8, 0xd8, 0xe8}, {0x5b39, 0x3, 0x4, 0x5}, {0x0, 0x2, 0x3, 0x7}, {0x81, 0x0, 0x3, 0xfffffffd}, {0x8, 0x3, 0x8, 0x6}, {0x0, 0x45, 0x1, 0x81}, {0x7, 0x3, 0x2, 0x401}, {0x8001, 0x1, 0xfb, 0x10000}, {0x7f, 0x5, 0x78, 0x4}]}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}]}}]}, 0x47c}, 0x1, 0x0, 0x0, 0x20000000}, 0x2c004000)
write$ppp(r0, &(0x7f00000002c0)="d3", 0x1)

[ 2809.225682][ T5831]  should_fail_ex+0x21f/0x230
[ 2809.230381][ T5831]  __should_fail_alloc_page+0xfd/0x110
[ 2809.235878][ T5831]  __alloc_pages+0x108/0x340
[ 2809.240548][ T5831]  vma_alloc_folio+0x6a3/0x8c0
[ 2809.245423][ T5831]  ? shmem_inode_acct_block+0x1ee/0x220
[ 2809.251008][ T5831]  shmem_get_folio_gfp+0x579/0xc30
[ 2809.256219][ T5831]  shmem_write_begin+0xa6/0x210
[ 2809.261105][ T5831]  generic_perform_write+0x1c9/0x410
[ 2809.266446][ T5831]  ? shmem_write_begin+0x210/0x210
[ 2809.271599][ T5831]  shmem_file_write_iter+0xc8/0xe0
[ 2809.276746][ T5831]  vfs_write+0x4ab/0x7d0
[ 2809.281008][ T5831]  ksys_write+0xeb/0x1a0
[ 2809.285289][ T5831]  __x64_sys_write+0x42/0x50
[ 2809.289905][ T5831]  do_syscall_64+0x41/0xc0
[ 2809.294399][ T5831]  entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 2809.300399][ T5831] RIP: 0033:0x7f90e4a54ae9
[ 2809.304814][ T5831] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48
22:46:43 executing program 5:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
write$ppp(r0, &(0x7f00000002c0)="d3", 0x1f4f33) (fail_nth: 61)

22:46:43 executing program 2:
openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0) (async)
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(r1, 0x10f, 0x86)
syz_genetlink_get_family_id$team(&(0x7f0000000040), r0) (async)
r2 = syz_genetlink_get_family_id$team(&(0x7f0000000040), r0)
r3 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000180)={'vcan0\x00'}) (async)
ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000180)={'vcan0\x00', <r4=>0x0})
bind$can_j1939(r3, &(0x7f00000001c0)={0x1d, r4, 0x0, {0x1}}, 0x18) (async)
bind$can_j1939(r3, &(0x7f00000001c0)={0x1d, r4, 0x0, {0x1}}, 0x18)
r5 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000180)={'vcan0\x00', <r6=>0x0})
bind$can_j1939(r5, &(0x7f00000001c0)={0x1d, r6, 0x0, {0x1}}, 0x18)
r7 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000180)={'vcan0\x00'}) (async)
ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000180)={'vcan0\x00', <r8=>0x0})
bind$can_j1939(r7, &(0x7f00000001c0)={0x1d, r8, 0x0, {0x1}}, 0x18)
sendmsg$TEAM_CMD_NOOP(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000300)={0x47c, r2, 0x400, 0x70bd2d, 0x25dfdbff, {}, [{{0x8}, {0x164, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r6}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}]}}, {{0x8}, {0xf4, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r8}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8000}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}]}}, {{0x8}, {0xf8, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}]}}, {{0x8}, {0xf8, 0x2, 0x0, 0x1, [{0x84, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x54, 0x4, [{0x9, 0x9, 0xff, 0x5}, {0x0, 0x8, 0xd8, 0xe8}, {0x5b39, 0x3, 0x4, 0x5}, {0x0, 0x2, 0x3, 0x7}, {0x81, 0x0, 0x3, 0xfffffffd}, {0x8, 0x3, 0x8, 0x6}, {0x0, 0x45, 0x1, 0x81}, {0x7, 0x3, 0x2, 0x401}, {0x8001, 0x1, 0xfb, 0x10000}, {0x7f, 0x5, 0x78, 0x4}]}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}]}}]}, 0x47c}, 0x1, 0x0, 0x0, 0x20000000}, 0x2c004000)
write$ppp(r0, &(0x7f00000002c0)="d3", 0x1)

22:46:43 executing program 1:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec41, 0x0)
ioctl$TUNSETVNETLE(r0, 0x400454dc, &(0x7f0000000000))
write$ppp(r0, 0x0, 0xeffdffff)

22:46:43 executing program 0:
r0 = socket$nl_audit(0x10, 0x3, 0x9)
sendmsg$AUDIT_USER_TTY(r0, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x10, 0x464, 0x300, 0x70bd2a, 0x25dfdbfe, "", ["", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x20000000}, 0x920)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0)
write$ppp(r1, 0x0, 0xeffdffffffffffff)
write$ppp(r1, &(0x7f0000000080)="854bcbb83fe11391b62ed9614146f8f065788e26e6132bccd88bda1cb733234a784aa4930f40ad3af94661f6b4ed160a676d34db7083710d16d54319d87dd3570ae8d6fa96601ca2da871d944fe7637a881932f993e57a2ac72436af11fe441609835bd988dc401df13d51304f41c93938dee4a44b8fa2f9ba4d40b5c868f070142888673f22e44733cfcc56805879", 0x8f)

[ 2809.324529][ T5831] RSP: 002b:00007f90e3dd70c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 2809.332970][ T5831] RAX: ffffffffffffffda RBX: 00007f90e4b73f80 RCX: 00007f90e4a54ae9
[ 2809.340950][ T5831] RDX: 00000000001f4f33 RSI: 00000000200002c0 RDI: 0000000000000003
[ 2809.348989][ T5831] RBP: 00007f90e3dd7120 R08: 0000000000000000 R09: 0000000000000000
[ 2809.357012][ T5831] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 2809.365009][ T5831] R13: 000000000000000b R14: 00007f90e4b73f80 R15: 00007ffdb3bfd028
[ 2809.372992][ T5831]  </TASK>
22:46:43 executing program 1:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec41, 0x0)
ioctl$TUNSETVNETLE(r0, 0x400454dc, &(0x7f0000000000)) (async)
ioctl$TUNSETVNETLE(r0, 0x400454dc, &(0x7f0000000000))
write$ppp(r0, 0x0, 0xeffdffff)

22:46:43 executing program 2:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0) (async)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(r1, 0x10f, 0x86)
r2 = syz_genetlink_get_family_id$team(&(0x7f0000000040), r0) (async)
r3 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000180)={'vcan0\x00', <r4=>0x0})
bind$can_j1939(r3, &(0x7f00000001c0)={0x1d, r4, 0x0, {0x1}}, 0x18) (async)
r5 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000180)={'vcan0\x00', <r6=>0x0})
bind$can_j1939(r5, &(0x7f00000001c0)={0x1d, r6, 0x0, {0x1}}, 0x18)
r7 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000180)={'vcan0\x00', <r8=>0x0})
bind$can_j1939(r7, &(0x7f00000001c0)={0x1d, r8, 0x0, {0x1}}, 0x18) (async)
sendmsg$TEAM_CMD_NOOP(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000300)={0x47c, r2, 0x400, 0x70bd2d, 0x25dfdbff, {}, [{{0x8}, {0x164, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r6}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}]}}, {{0x8}, {0xf4, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r8}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8000}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}]}}, {{0x8}, {0xf8, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}]}}, {{0x8}, {0xf8, 0x2, 0x0, 0x1, [{0x84, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x54, 0x4, [{0x9, 0x9, 0xff, 0x5}, {0x0, 0x8, 0xd8, 0xe8}, {0x5b39, 0x3, 0x4, 0x5}, {0x0, 0x2, 0x3, 0x7}, {0x81, 0x0, 0x3, 0xfffffffd}, {0x8, 0x3, 0x8, 0x6}, {0x0, 0x45, 0x1, 0x81}, {0x7, 0x3, 0x2, 0x401}, {0x8001, 0x1, 0xfb, 0x10000}, {0x7f, 0x5, 0x78, 0x4}]}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}]}}]}, 0x47c}, 0x1, 0x0, 0x0, 0x20000000}, 0x2c004000) (async)
write$ppp(r0, &(0x7f00000002c0)="d3", 0x1)

22:46:43 executing program 4:
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000000c0)) (async)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dcc01, 0x0)
write$ppp(r1, 0x0, 0x0) (async)
getresuid(&(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180)=<r2=>0x0)
quotactl_fd$Q_QUOTAON(r1, 0xffffffff80000201, r2, &(0x7f00000001c0)='./file0\x00') (async)
syz_genetlink_get_family_id$SEG6(&(0x7f0000000000), r1)

22:46:43 executing program 0:
r0 = socket$nl_audit(0x10, 0x3, 0x9)
sendmsg$AUDIT_USER_TTY(r0, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x10, 0x464, 0x300, 0x70bd2a, 0x25dfdbfe, "", ["", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x20000000}, 0x920)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0)
write$ppp(r1, 0x0, 0xeffdffffffffffff)
write$ppp(r1, &(0x7f0000000080)="854bcbb83fe11391b62ed9614146f8f065788e26e6132bccd88bda1cb733234a784aa4930f40ad3af94661f6b4ed160a676d34db7083710d16d54319d87dd3570ae8d6fa96601ca2da871d944fe7637a881932f993e57a2ac72436af11fe441609835bd988dc401df13d51304f41c93938dee4a44b8fa2f9ba4d40b5c868f070142888673f22e44733cfcc56805879", 0x8f)
socket$nl_audit(0x10, 0x3, 0x9) (async)
sendmsg$AUDIT_USER_TTY(r0, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x10, 0x464, 0x300, 0x70bd2a, 0x25dfdbfe, "", ["", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x20000000}, 0x920) (async)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) (async)
write$ppp(r1, 0x0, 0xeffdffffffffffff) (async)
write$ppp(r1, &(0x7f0000000080)="854bcbb83fe11391b62ed9614146f8f065788e26e6132bccd88bda1cb733234a784aa4930f40ad3af94661f6b4ed160a676d34db7083710d16d54319d87dd3570ae8d6fa96601ca2da871d944fe7637a881932f993e57a2ac72436af11fe441609835bd988dc401df13d51304f41c93938dee4a44b8fa2f9ba4d40b5c868f070142888673f22e44733cfcc56805879", 0x8f) (async)

22:46:43 executing program 1:
ioctl$PPPIOCGIDLE(0xffffffffffffffff, 0x8010743f, &(0x7f0000000000))
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x7dac01, 0x0)
write$ppp(r0, 0x0, 0xeffdffff)

[ 2809.445191][ T5859] FAULT_INJECTION: forcing a failure.
[ 2809.445191][ T5859] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 2809.458302][ T5859] CPU: 0 PID: 5859 Comm: syz-executor.5 Not tainted 6.6.0-rc3-syzkaller-00165-g3b517966c561 #0
[ 2809.468762][ T5859] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/06/2023
[ 2809.478840][ T5859] Call Trace:
[ 2809.482140][ T5859]  <TASK>
[ 2809.485116][ T5859]  dump_stack_lvl+0xda/0x130
[ 2809.489778][ T5859]  dump_stack+0x15/0x20
22:46:43 executing program 3:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0) (async)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(r0, 0x10f, 0x86) (async)
setsockopt$TIPC_MCAST_REPLICAST(r1, 0x10f, 0x86)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0xcc, 0x0, &(0x7f0000000300)=[@release, @request_death={0x400c630e, 0x1}, @reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000500)=ANY=[@ANYBLOB="000000000000000070bff31426422cd3daa5625957624ac81d87c73b3eeef45ab4d2e982999d5440d41f72a8e33303255ac136f5715e6ed1302350d4267d78a88dec6e1bf401a48e4a35fdc2fdfa0f5b78843cf9", @ANYRES32=r1, @ANYBLOB="000000000000000000000000852a62770111000002000000000000000000000000000000852a6273001000000200"/60], &(0x7f00000000c0)={0x0, 0x18, 0x30}}, 0x40}, @clear_death={0x400c630f, 0x2}, @transaction={0x40406300, {0x2, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000180)={@flat=@weak_binder={0x77622a85, 0x0, 0x3}, @ptr={0x70742a85, 0x1, &(0x7f0000000100)=""/113, 0x71, 0x1, 0x14}, @fd={0x66642a85, 0x0, r0}}, &(0x7f0000000200)={0x0, 0x18, 0x40}}}, @decrefs={0x40046307, 0x3}, @free_buffer], 0x5d, 0x0, &(0x7f0000000240)="790bb9fa81c8d9d03cb65a96ab24cd2144d454d3c690d2bcb714f5c6719d6d4f1dca1f2f0cd2c0d6564af9066e3e8d90cc93670741ee7369da13c50c92dfa4d58f35c3414e3422246d1c3375a595829f1b1196d2adfd2f26349ed96ae8"}) (async)
write$ppp(r0, &(0x7f00000002c0)="d3", 0xfffffdef)
timerfd_gettime(r0, &(0x7f0000000440))
write$ppp(r1, &(0x7f0000000480)="f1bed6d9638a7fc0829e7dabf638ceab62608962fa741f511c12428c10e7f0cf836ca518f7fe4d4219729cb70cffb81cd2ea59b8b71482b81ad78dc6a36612306ead6f504a3b8b430c395886effe5c407f9cbbc50dde3860466574c340c612e4e9ef0dd319", 0x65) (async)
bind$can_j1939(r1, &(0x7f0000000000)={0x1d, 0x0, 0x1, {0x2, 0xf0, 0x3}, 0x2}, 0x18)

22:46:43 executing program 0:
r0 = socket$nl_audit(0x10, 0x3, 0x9)
sendmsg$AUDIT_USER_TTY(r0, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x10, 0x464, 0x300, 0x70bd2a, 0x25dfdbfe, "", ["", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x20000000}, 0x920)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0)
write$ppp(r1, 0x0, 0xeffdffffffffffff)
write$ppp(r1, &(0x7f0000000080)="854bcbb83fe11391b62ed9614146f8f065788e26e6132bccd88bda1cb733234a784aa4930f40ad3af94661f6b4ed160a676d34db7083710d16d54319d87dd3570ae8d6fa96601ca2da871d944fe7637a881932f993e57a2ac72436af11fe441609835bd988dc401df13d51304f41c93938dee4a44b8fa2f9ba4d40b5c868f070142888673f22e44733cfcc56805879", 0x8f)
socket$nl_audit(0x10, 0x3, 0x9) (async)
sendmsg$AUDIT_USER_TTY(r0, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x10, 0x464, 0x300, 0x70bd2a, 0x25dfdbfe, "", ["", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x20000000}, 0x920) (async)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) (async)
write$ppp(r1, 0x0, 0xeffdffffffffffff) (async)
write$ppp(r1, &(0x7f0000000080)="854bcbb83fe11391b62ed9614146f8f065788e26e6132bccd88bda1cb733234a784aa4930f40ad3af94661f6b4ed160a676d34db7083710d16d54319d87dd3570ae8d6fa96601ca2da871d944fe7637a881932f993e57a2ac72436af11fe441609835bd988dc401df13d51304f41c93938dee4a44b8fa2f9ba4d40b5c868f070142888673f22e44733cfcc56805879", 0x8f) (async)

22:46:43 executing program 1:
ioctl$PPPIOCGIDLE(0xffffffffffffffff, 0x8010743f, &(0x7f0000000000))
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x7dac01, 0x0)
write$ppp(r0, 0x0, 0xeffdffff)

[ 2809.493995][ T5859]  should_fail_ex+0x21f/0x230
[ 2809.498735][ T5859]  should_fail+0xb/0x10
[ 2809.502916][ T5859]  should_fail_usercopy+0x1a/0x20
[ 2809.508095][ T5859]  copy_page_from_iter_atomic+0x21c/0xcf0
[ 2809.513916][ T5859]  ? shmem_write_begin+0xa6/0x210
[ 2809.519048][ T5859]  ? shmem_write_begin+0x16d/0x210
[ 2809.524202][ T5859]  generic_perform_write+0x20c/0x410
[ 2809.529524][ T5859]  ? shmem_write_begin+0x210/0x210
[ 2809.534679][ T5859]  shmem_file_write_iter+0xc8/0xe0
[ 2809.539859][ T5859]  vfs_write+0x4ab/0x7d0
[ 2809.544211][ T5859]  ksys_write+0xeb/0x1a0
[ 2809.548479][ T5859]  __x64_sys_write+0x42/0x50
[ 2809.553165][ T5859]  do_syscall_64+0x41/0xc0
[ 2809.557648][ T5859]  entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 2809.563589][ T5859] RIP: 0033:0x7f90e4a54ae9
[ 2809.568044][ T5859] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48
[ 2809.587680][ T5859] RSP: 002b:00007f90e3dd70c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
22:46:43 executing program 1:
ioctl$PPPIOCGIDLE(0xffffffffffffffff, 0x8010743f, &(0x7f0000000000))
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x7dac01, 0x0)
write$ppp(r0, 0x0, 0xeffdffff)
ioctl$PPPIOCGIDLE(0xffffffffffffffff, 0x8010743f, &(0x7f0000000000)) (async)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x7dac01, 0x0) (async)
write$ppp(r0, 0x0, 0xeffdffff) (async)

[ 2809.596122][ T5859] RAX: ffffffffffffffda RBX: 00007f90e4b73f80 RCX: 00007f90e4a54ae9
[ 2809.604129][ T5859] RDX: 00000000001f4f33 RSI: 00000000200002c0 RDI: 0000000000000003
[ 2809.612113][ T5859] RBP: 00007f90e3dd7120 R08: 0000000000000000 R09: 0000000000000000
[ 2809.620099][ T5859] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 2809.628087][ T5859] R13: 000000000000000b R14: 00007f90e4b73f80 R15: 00007ffdb3bfd028
[ 2809.636084][ T5859]  </TASK>
22:46:43 executing program 2:
openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x101800, 0x0)
write$ppp(r0, &(0x7f00000000c0)="a31201006529cedf4140f43c53579c0e2e29e72ab47736bd696efdb90628c280b39d6e6615db8dab3f17d839f15e2b7a311d701a3ac630d5eccf98e72c1ec8b9a0fc960e9ffcd7213ac5346fcd90d40560dbe181edee5330a35bd2633def16cfeba893218ad2d923a82ccd35571499cb757b4e32ab4fe5", 0x77)

22:46:43 executing program 0:
ioctl$PPPIOCGIDLE32(0xffffffffffffffff, 0x8008743f, &(0x7f0000000080))
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0)
ioctl$PPPIOCGIDLE64(0xffffffffffffffff, 0x8010743f, &(0x7f0000000040))
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f00000000c0), 0x39a041, 0x0)
write$ppp(r0, 0x0, 0xeffdffffffffffff)

22:46:43 executing program 5:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
write$ppp(r0, &(0x7f00000002c0)="d3", 0x1f4f33) (fail_nth: 62)

22:46:43 executing program 4:
ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0)
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x280041, 0x0)
r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
connect$can_j1939(0xffffffffffffffff, &(0x7f0000000080)={0x1d, 0x0, 0x2, {0x2}}, 0x18)
timerfd_gettime(r1, 0x0)
r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x105041, 0x0)
syz_io_uring_setup(0x44b6, &(0x7f0000000180)={0x0, 0xc0d0, 0x800, 0x400001, 0x58, 0x0, r2}, &(0x7f0000000100), &(0x7f0000000140))
r3 = openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(r3, 0x10f, 0x86)
ioctl$PPPIOCSCOMPRESS(r3, 0x4010744d)
write$ppp(r0, 0x0, 0x0)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000200), 0x202, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8924, &(0x7f00000000c0)={'veth0_to_team\x00', @multicast})

22:46:43 executing program 0:
ioctl$PPPIOCGIDLE32(0xffffffffffffffff, 0x8008743f, &(0x7f0000000080))
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0)
ioctl$PPPIOCGIDLE64(0xffffffffffffffff, 0x8010743f, &(0x7f0000000040))
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f00000000c0), 0x39a041, 0x0)
write$ppp(r0, 0x0, 0xeffdffffffffffff) (async)
write$ppp(r0, 0x0, 0xeffdffffffffffff)

22:46:43 executing program 1:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
write$ppp(r0, 0x0, 0xeffdffff)
sendmsg$AUDIT_TTY_SET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x18, 0x3f9, 0x0, 0x70bd29, 0x25dfdbff, {}, [""]}, 0x18}, 0x1, 0x0, 0x0, 0x8004}, 0x48000)

22:46:43 executing program 2:
openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0) (async)
r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x101800, 0x0)
write$ppp(r0, &(0x7f00000000c0)="a31201006529cedf4140f43c53579c0e2e29e72ab47736bd696efdb90628c280b39d6e6615db8dab3f17d839f15e2b7a311d701a3ac630d5eccf98e72c1ec8b9a0fc960e9ffcd7213ac5346fcd90d40560dbe181edee5330a35bd2633def16cfeba893218ad2d923a82ccd35571499cb757b4e32ab4fe5", 0x77)

22:46:43 executing program 4:
ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) (async)
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x280041, 0x0) (async)
r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
connect$can_j1939(0xffffffffffffffff, &(0x7f0000000080)={0x1d, 0x0, 0x2, {0x2}}, 0x18) (async)
timerfd_gettime(r1, 0x0) (async)
r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x105041, 0x0)
syz_io_uring_setup(0x44b6, &(0x7f0000000180)={0x0, 0xc0d0, 0x800, 0x400001, 0x58, 0x0, r2}, &(0x7f0000000100), &(0x7f0000000140)) (async)
r3 = openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(r3, 0x10f, 0x86) (async)
ioctl$PPPIOCSCOMPRESS(r3, 0x4010744d) (async)
write$ppp(r0, 0x0, 0x0) (async)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000200), 0x202, 0x0) (async)
ioctl$SIOCSIFHWADDR(r1, 0x8924, &(0x7f00000000c0)={'veth0_to_team\x00', @multicast})

22:46:43 executing program 3:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0) (async)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(r0, 0x10f, 0x86) (async)
setsockopt$TIPC_MCAST_REPLICAST(r1, 0x10f, 0x86) (async)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0xcc, 0x0, &(0x7f0000000300)=[@release, @request_death={0x400c630e, 0x1}, @reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000500)=ANY=[@ANYBLOB="000000000000000070bff31426422cd3daa5625957624ac81d87c73b3eeef45ab4d2e982999d5440d41f72a8e33303255ac136f5715e6ed1302350d4267d78a88dec6e1bf401a48e4a35fdc2fdfa0f5b78843cf9", @ANYRES32=r1, @ANYBLOB="000000000000000000000000852a62770111000002000000000000000000000000000000852a6273001000000200"/60], &(0x7f00000000c0)={0x0, 0x18, 0x30}}, 0x40}, @clear_death={0x400c630f, 0x2}, @transaction={0x40406300, {0x2, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000180)={@flat=@weak_binder={0x77622a85, 0x0, 0x3}, @ptr={0x70742a85, 0x1, &(0x7f0000000100)=""/113, 0x71, 0x1, 0x14}, @fd={0x66642a85, 0x0, r0}}, &(0x7f0000000200)={0x0, 0x18, 0x40}}}, @decrefs={0x40046307, 0x3}, @free_buffer], 0x5d, 0x0, &(0x7f0000000240)="790bb9fa81c8d9d03cb65a96ab24cd2144d454d3c690d2bcb714f5c6719d6d4f1dca1f2f0cd2c0d6564af9066e3e8d90cc93670741ee7369da13c50c92dfa4d58f35c3414e3422246d1c3375a595829f1b1196d2adfd2f26349ed96ae8"})
write$ppp(r0, &(0x7f00000002c0)="d3", 0xfffffdef) (async)
timerfd_gettime(r0, &(0x7f0000000440)) (async)
write$ppp(r1, &(0x7f0000000480)="f1bed6d9638a7fc0829e7dabf638ceab62608962fa741f511c12428c10e7f0cf836ca518f7fe4d4219729cb70cffb81cd2ea59b8b71482b81ad78dc6a36612306ead6f504a3b8b430c395886effe5c407f9cbbc50dde3860466574c340c612e4e9ef0dd319", 0x65) (async)
bind$can_j1939(r1, &(0x7f0000000000)={0x1d, 0x0, 0x1, {0x2, 0xf0, 0x3}, 0x2}, 0x18)

22:46:43 executing program 0:
ioctl$PPPIOCGIDLE32(0xffffffffffffffff, 0x8008743f, &(0x7f0000000080))
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0)
ioctl$PPPIOCGIDLE64(0xffffffffffffffff, 0x8010743f, &(0x7f0000000040)) (async)
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f00000000c0), 0x39a041, 0x0)
write$ppp(r0, 0x0, 0xeffdffffffffffff)

22:46:43 executing program 1:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
write$ppp(r0, 0x0, 0xeffdffff)
sendmsg$AUDIT_TTY_SET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x18, 0x3f9, 0x0, 0x70bd29, 0x25dfdbff, {}, [""]}, 0x18}, 0x1, 0x0, 0x0, 0x8004}, 0x48000)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0) (async)
write$ppp(r0, 0x0, 0xeffdffff) (async)
sendmsg$AUDIT_TTY_SET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x18, 0x3f9, 0x0, 0x70bd29, 0x25dfdbff, {}, [""]}, 0x18}, 0x1, 0x0, 0x0, 0x8004}, 0x48000) (async)

[ 2809.741528][ T5916] FAULT_INJECTION: forcing a failure.
[ 2809.741528][ T5916] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[ 2809.754830][ T5916] CPU: 1 PID: 5916 Comm: syz-executor.5 Not tainted 6.6.0-rc3-syzkaller-00165-g3b517966c561 #0
[ 2809.765249][ T5916] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/06/2023
[ 2809.775327][ T5916] Call Trace:
[ 2809.778684][ T5916]  <TASK>
[ 2809.781753][ T5916]  dump_stack_lvl+0xda/0x130
[ 2809.786450][ T5916]  dump_stack+0x15/0x20
[ 2809.790650][ T5916]  should_fail_ex+0x21f/0x230
[ 2809.795352][ T5916]  __should_fail_alloc_page+0xfd/0x110
[ 2809.800906][ T5916]  __alloc_pages+0x108/0x340
[ 2809.805607][ T5916]  vma_alloc_folio+0x6a3/0x8c0
[ 2809.810421][ T5916]  ? shmem_inode_acct_block+0x1ee/0x220
[ 2809.816063][ T5916]  shmem_get_folio_gfp+0x579/0xc30
[ 2809.821233][ T5916]  shmem_write_begin+0xa6/0x210
[ 2809.826185][ T5916]  generic_perform_write+0x1c9/0x410
[ 2809.831578][ T5916]  ? shmem_write_begin+0x210/0x210
[ 2809.836710][ T5916]  shmem_file_write_iter+0xc8/0xe0
[ 2809.842076][ T5916]  vfs_write+0x4ab/0x7d0
[ 2809.846342][ T5916]  ksys_write+0xeb/0x1a0
[ 2809.850603][ T5916]  __x64_sys_write+0x42/0x50
[ 2809.855249][ T5916]  do_syscall_64+0x41/0xc0
[ 2809.859684][ T5916]  entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 2809.865629][ T5916] RIP: 0033:0x7f90e4a54ae9
[ 2809.870179][ T5916] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48
22:46:44 executing program 5:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
write$ppp(r0, &(0x7f00000002c0)="d3", 0x1f4f33) (fail_nth: 63)

22:46:44 executing program 4:
ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0)
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x280041, 0x0)
r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
connect$can_j1939(0xffffffffffffffff, &(0x7f0000000080)={0x1d, 0x0, 0x2, {0x2}}, 0x18) (async)
timerfd_gettime(r1, 0x0) (async, rerun: 64)
r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x105041, 0x0) (rerun: 64)
syz_io_uring_setup(0x44b6, &(0x7f0000000180)={0x0, 0xc0d0, 0x800, 0x400001, 0x58, 0x0, r2}, &(0x7f0000000100), &(0x7f0000000140)) (async)
r3 = openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(r3, 0x10f, 0x86) (async, rerun: 32)
ioctl$PPPIOCSCOMPRESS(r3, 0x4010744d) (rerun: 32)
write$ppp(r0, 0x0, 0x0)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000200), 0x202, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8924, &(0x7f00000000c0)={'veth0_to_team\x00', @multicast})

22:46:44 executing program 2:
openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0) (async)
r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x101800, 0x0)
write$ppp(r0, &(0x7f00000000c0)="a31201006529cedf4140f43c53579c0e2e29e72ab47736bd696efdb90628c280b39d6e6615db8dab3f17d839f15e2b7a311d701a3ac630d5eccf98e72c1ec8b9a0fc960e9ffcd7213ac5346fcd90d40560dbe181edee5330a35bd2633def16cfeba893218ad2d923a82ccd35571499cb757b4e32ab4fe5", 0x77)

22:46:44 executing program 0:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
write$ppp(r0, 0x0, 0xeffdffffffffffff)
setsockopt$TIPC_MCAST_BROADCAST(0xffffffffffffffff, 0x10f, 0x85)

22:46:44 executing program 1:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
write$ppp(r0, 0x0, 0xeffdffff) (async)
write$ppp(r0, 0x0, 0xeffdffff)
sendmsg$AUDIT_TTY_SET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x18, 0x3f9, 0x0, 0x70bd29, 0x25dfdbff, {}, [""]}, 0x18}, 0x1, 0x0, 0x0, 0x8004}, 0x48000)

22:46:44 executing program 3:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
write$ppp(r0, &(0x7f00000002c0)="d3", 0xfffffdef)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(r1, 0x10f, 0x86)
ioctl$TUNGETSNDBUF(r1, 0x800454d3, &(0x7f0000000000))

[ 2809.889803][ T5916] RSP: 002b:00007f90e3dd70c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 2809.898232][ T5916] RAX: ffffffffffffffda RBX: 00007f90e4b73f80 RCX: 00007f90e4a54ae9
[ 2809.906381][ T5916] RDX: 00000000001f4f33 RSI: 00000000200002c0 RDI: 0000000000000003
[ 2809.914408][ T5916] RBP: 00007f90e3dd7120 R08: 0000000000000000 R09: 0000000000000000
[ 2809.922496][ T5916] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 2809.930489][ T5916] R13: 000000000000000b R14: 00007f90e4b73f80 R15: 00007ffdb3bfd028
[ 2809.938506][ T5916]  </TASK>
22:46:44 executing program 2:
socket$inet_smc(0x2b, 0x1, 0x0)
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
write$ppp(r0, &(0x7f00000002c0)="d3", 0x1)
setregid(0x0, 0xffffffffffffffff)

22:46:44 executing program 0:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
write$ppp(r0, 0x0, 0xeffdffffffffffff) (async)
setsockopt$TIPC_MCAST_BROADCAST(0xffffffffffffffff, 0x10f, 0x85)

[ 2809.970783][ T5935] FAULT_INJECTION: forcing a failure.
[ 2809.970783][ T5935] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 2809.983984][ T5935] CPU: 1 PID: 5935 Comm: syz-executor.5 Not tainted 6.6.0-rc3-syzkaller-00165-g3b517966c561 #0
[ 2809.994434][ T5935] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/06/2023
[ 2810.004561][ T5935] Call Trace:
[ 2810.007867][ T5935]  <TASK>
[ 2810.010844][ T5935]  dump_stack_lvl+0xda/0x130
[ 2810.015461][ T5935]  dump_stack+0x15/0x20
22:46:44 executing program 2:
socket$inet_smc(0x2b, 0x1, 0x0)
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
write$ppp(r0, &(0x7f00000002c0)="d3", 0x1) (async)
write$ppp(r0, &(0x7f00000002c0)="d3", 0x1)
setregid(0x0, 0xffffffffffffffff)

22:46:44 executing program 0:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
write$ppp(r0, 0x0, 0xeffdffffffffffff)
setsockopt$TIPC_MCAST_BROADCAST(0xffffffffffffffff, 0x10f, 0x85)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0) (async)
write$ppp(r0, 0x0, 0xeffdffffffffffff) (async)
setsockopt$TIPC_MCAST_BROADCAST(0xffffffffffffffff, 0x10f, 0x85) (async)

22:46:44 executing program 0:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(r1, 0x10f, 0x86)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x4080, 0x0)
write$ppp(r0, 0x0, 0xfffffffffffffd34)
ioctl$LOOP_CLR_FD(r0, 0x4c01)

[ 2810.019678][ T5935]  should_fail_ex+0x21f/0x230
[ 2810.024400][ T5935]  should_fail+0xb/0x10
[ 2810.028571][ T5935]  should_fail_usercopy+0x1a/0x20
[ 2810.033624][ T5935]  copy_page_from_iter_atomic+0x21c/0xcf0
[ 2810.039369][ T5935]  ? shmem_write_begin+0xa6/0x210
[ 2810.044477][ T5935]  ? shmem_write_begin+0x16d/0x210
[ 2810.049670][ T5935]  generic_perform_write+0x20c/0x410
[ 2810.055081][ T5935]  ? shmem_write_begin+0x210/0x210
[ 2810.060233][ T5935]  shmem_file_write_iter+0xc8/0xe0
[ 2810.065388][ T5935]  vfs_write+0x4ab/0x7d0
22:46:44 executing program 2:
socket$inet_smc(0x2b, 0x1, 0x0)
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
write$ppp(r0, &(0x7f00000002c0)="d3", 0x1)
setregid(0x0, 0xffffffffffffffff)
socket$inet_smc(0x2b, 0x1, 0x0) (async)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0) (async)
write$ppp(r0, &(0x7f00000002c0)="d3", 0x1) (async)
setregid(0x0, 0xffffffffffffffff) (async)

[ 2810.069660][ T5935]  ksys_write+0xeb/0x1a0
[ 2810.073963][ T5935]  __x64_sys_write+0x42/0x50
[ 2810.078618][ T5935]  do_syscall_64+0x41/0xc0
[ 2810.083063][ T5935]  entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 2810.089021][ T5935] RIP: 0033:0x7f90e4a54ae9
[ 2810.093456][ T5935] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48
[ 2810.113179][ T5935] RSP: 002b:00007f90e3dd70c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 2810.121674][ T5935] RAX: ffffffffffffffda RBX: 00007f90e4b73f80 RCX: 00007f90e4a54ae9
[ 2810.129659][ T5935] RDX: 00000000001f4f33 RSI: 00000000200002c0 RDI: 0000000000000003
[ 2810.137714][ T5935] RBP: 00007f90e3dd7120 R08: 0000000000000000 R09: 0000000000000000
[ 2810.145715][ T5935] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 2810.153734][ T5935] R13: 000000000000000b R14: 00007f90e4b73f80 R15: 00007ffdb3bfd028
[ 2810.161734][ T5935]  </TASK>
22:46:44 executing program 5:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
write$ppp(r0, &(0x7f00000002c0)="d3", 0x1f4f33) (fail_nth: 64)

22:46:44 executing program 2:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x5dec01, 0x0)
write$ppp(r0, &(0x7f00000002c0)="d3", 0x1)

22:46:44 executing program 0:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0) (async)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(r1, 0x10f, 0x86)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x4080, 0x0) (async)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x4080, 0x0)
write$ppp(r0, 0x0, 0xfffffffffffffd34)
ioctl$LOOP_CLR_FD(r0, 0x4c01)

22:46:44 executing program 1:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
write$ppp(r0, 0x0, 0xeffdffff)
accept4$tipc(r0, 0x0, &(0x7f0000000000), 0x80800)

22:46:44 executing program 4:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
ioctl$SIOCGSTAMPNS(r0, 0x8907, &(0x7f0000000000))
write$ppp(r0, 0x0, 0x0)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(r1, 0x10f, 0x86)
socketpair(0x23, 0x80000, 0x5, &(0x7f0000000040))
r2 = timerfd_create(0x4, 0x0)
ioctl$LOOP_SET_FD(r1, 0x4c00, r2)

[ 2810.242813][ T5972] FAULT_INJECTION: forcing a failure.
[ 2810.242813][ T5972] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[ 2810.256079][ T5972] CPU: 0 PID: 5972 Comm: syz-executor.5 Not tainted 6.6.0-rc3-syzkaller-00165-g3b517966c561 #0
[ 2810.266501][ T5972] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/06/2023
[ 2810.276639][ T5972] Call Trace:
[ 2810.279928][ T5972]  <TASK>
[ 2810.282924][ T5972]  dump_stack_lvl+0xda/0x130
[ 2810.287587][ T5972]  dump_stack+0x15/0x20
22:46:44 executing program 3:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
write$ppp(r0, &(0x7f00000002c0)="d3", 0xfffffdef)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(r1, 0x10f, 0x86)
ioctl$TUNGETSNDBUF(r1, 0x800454d3, &(0x7f0000000000))

22:46:44 executing program 1:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
write$ppp(r0, 0x0, 0xeffdffff)
accept4$tipc(r0, 0x0, &(0x7f0000000000), 0x80800)

22:46:44 executing program 2:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x5dec01, 0x0)
write$ppp(r0, &(0x7f00000002c0)="d3", 0x1)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x5dec01, 0x0) (async)
write$ppp(r0, &(0x7f00000002c0)="d3", 0x1) (async)

22:46:44 executing program 4:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
ioctl$SIOCGSTAMPNS(r0, 0x8907, &(0x7f0000000000))
write$ppp(r0, 0x0, 0x0) (async)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(r1, 0x10f, 0x86) (async)
socketpair(0x23, 0x80000, 0x5, &(0x7f0000000040))
r2 = timerfd_create(0x4, 0x0)
ioctl$LOOP_SET_FD(r1, 0x4c00, r2)

22:46:44 executing program 0:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(r1, 0x10f, 0x86) (async)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x4080, 0x0) (async)
write$ppp(r0, 0x0, 0xfffffffffffffd34) (async)
ioctl$LOOP_CLR_FD(r0, 0x4c01)

22:46:44 executing program 0:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x6fb401, 0x0)
write$ppp(r0, 0x0, 0xeffdffffffffffff)

[ 2810.291761][ T5972]  should_fail_ex+0x21f/0x230
[ 2810.296527][ T5972]  __should_fail_alloc_page+0xfd/0x110
[ 2810.302098][ T5972]  __alloc_pages+0x108/0x340
[ 2810.306711][ T5972]  vma_alloc_folio+0x6a3/0x8c0
[ 2810.311592][ T5972]  ? shmem_inode_acct_block+0x1ee/0x220
[ 2810.317298][ T5972]  shmem_get_folio_gfp+0x579/0xc30
[ 2810.322436][ T5972]  shmem_write_begin+0xa6/0x210
[ 2810.327327][ T5972]  generic_perform_write+0x1c9/0x410
[ 2810.332704][ T5972]  ? shmem_write_begin+0x210/0x210
[ 2810.337852][ T5972]  shmem_file_write_iter+0xc8/0xe0
22:46:44 executing program 0:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x6fb401, 0x0)
write$ppp(r0, 0x0, 0xeffdffffffffffff)

[ 2810.343016][ T5972]  vfs_write+0x4ab/0x7d0
[ 2810.347344][ T5972]  ksys_write+0xeb/0x1a0
[ 2810.351596][ T5972]  __x64_sys_write+0x42/0x50
[ 2810.356209][ T5972]  do_syscall_64+0x41/0xc0
[ 2810.360655][ T5972]  entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 2810.366591][ T5972] RIP: 0033:0x7f90e4a54ae9
[ 2810.371067][ T5972] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48
22:46:44 executing program 5:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
write$ppp(r0, &(0x7f00000002c0)="d3", 0x1f4f33) (fail_nth: 65)

22:46:44 executing program 0:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x6fb401, 0x0)
write$ppp(r0, 0x0, 0xeffdffffffffffff)

22:46:44 executing program 2:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x5dec01, 0x0)
write$ppp(r0, &(0x7f00000002c0)="d3", 0x1)

22:46:44 executing program 1:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
write$ppp(r0, 0x0, 0xeffdffff) (async)
write$ppp(r0, 0x0, 0xeffdffff)
accept4$tipc(r0, 0x0, &(0x7f0000000000), 0x80800)

[ 2810.390779][ T5972] RSP: 002b:00007f90e3dd70c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 2810.399220][ T5972] RAX: ffffffffffffffda RBX: 00007f90e4b73f80 RCX: 00007f90e4a54ae9
[ 2810.407232][ T5972] RDX: 00000000001f4f33 RSI: 00000000200002c0 RDI: 0000000000000003
[ 2810.415225][ T5972] RBP: 00007f90e3dd7120 R08: 0000000000000000 R09: 0000000000000000
[ 2810.423289][ T5972] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 2810.431293][ T5972] R13: 000000000000000b R14: 00007f90e4b73f80 R15: 00007ffdb3bfd028
[ 2810.439280][ T5972]  </TASK>
22:46:44 executing program 0:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x111800, 0x0)
write$ppp(r0, 0x0, 0xeffdffffffffffff)
timerfd_create(0x1, 0x80000)
ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000000))

[ 2810.500567][ T6002] FAULT_INJECTION: forcing a failure.
[ 2810.500567][ T6002] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 2810.513733][ T6002] CPU: 0 PID: 6002 Comm: syz-executor.5 Not tainted 6.6.0-rc3-syzkaller-00165-g3b517966c561 #0
[ 2810.524150][ T6002] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/06/2023
[ 2810.534227][ T6002] Call Trace:
[ 2810.537516][ T6002]  <TASK>
[ 2810.540453][ T6002]  dump_stack_lvl+0xda/0x130
[ 2810.545079][ T6002]  dump_stack+0x15/0x20
22:46:44 executing program 3:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
write$ppp(r0, &(0x7f00000002c0)="d3", 0xfffffdef) (async)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(r1, 0x10f, 0x86) (async)
ioctl$TUNGETSNDBUF(r1, 0x800454d3, &(0x7f0000000000))

22:46:44 executing program 2:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x54c401, 0x0)
write$ppp(r0, &(0x7f00000002c0)="d3", 0x1)

22:46:44 executing program 4:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
ioctl$SIOCGSTAMPNS(r0, 0x8907, &(0x7f0000000000)) (async)
ioctl$SIOCGSTAMPNS(r0, 0x8907, &(0x7f0000000000))
write$ppp(r0, 0x0, 0x0)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(r1, 0x10f, 0x86)
socketpair(0x23, 0x80000, 0x5, &(0x7f0000000040)) (async)
socketpair(0x23, 0x80000, 0x5, &(0x7f0000000040))
r2 = timerfd_create(0x4, 0x0)
ioctl$LOOP_SET_FD(r1, 0x4c00, r2)

22:46:44 executing program 0:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x111800, 0x0)
write$ppp(r0, 0x0, 0xeffdffffffffffff)
timerfd_create(0x1, 0x80000) (async)
ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000000))

22:46:44 executing program 1:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x24ec00, 0x0)
write$ppp(r0, 0x0, 0xeffdffff)
socket$tipc(0x1e, 0x5, 0x0)
ioctl$PPPIOCGIDLE64(r0, 0x8010743f, &(0x7f0000000000))
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(r1, 0x10f, 0x86)
ioctl$PPPIOCATTACH(r1, 0x4004743d, &(0x7f00000000c0)=0x1)

22:46:44 executing program 2:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x54c401, 0x0)
write$ppp(r0, &(0x7f00000002c0)="d3", 0x1)

[ 2810.549265][ T6002]  should_fail_ex+0x21f/0x230
[ 2810.553978][ T6002]  should_fail+0xb/0x10
[ 2810.558248][ T6002]  should_fail_usercopy+0x1a/0x20
[ 2810.563346][ T6002]  copy_page_from_iter_atomic+0x21c/0xcf0
[ 2810.569196][ T6002]  ? shmem_write_begin+0xa6/0x210
[ 2810.574305][ T6002]  ? shmem_write_begin+0x16d/0x210
[ 2810.579459][ T6002]  generic_perform_write+0x20c/0x410
[ 2810.584774][ T6002]  ? shmem_write_begin+0x210/0x210
[ 2810.589920][ T6002]  shmem_file_write_iter+0xc8/0xe0
[ 2810.595092][ T6002]  vfs_write+0x4ab/0x7d0
22:46:44 executing program 2:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x54c401, 0x0)
write$ppp(r0, &(0x7f00000002c0)="d3", 0x1)

[ 2810.599548][ T6002]  ksys_write+0xeb/0x1a0
[ 2810.603820][ T6002]  __x64_sys_write+0x42/0x50
[ 2810.608428][ T6002]  do_syscall_64+0x41/0xc0
[ 2810.612938][ T6002]  entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 2810.618940][ T6002] RIP: 0033:0x7f90e4a54ae9
[ 2810.623387][ T6002] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48
[ 2810.643038][ T6002] RSP: 002b:00007f90e3dd70c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 2810.651461][ T6002] RAX: ffffffffffffffda RBX: 00007f90e4b73f80 RCX: 00007f90e4a54ae9
[ 2810.659443][ T6002] RDX: 00000000001f4f33 RSI: 00000000200002c0 RDI: 0000000000000003
[ 2810.667459][ T6002] RBP: 00007f90e3dd7120 R08: 0000000000000000 R09: 0000000000000000
[ 2810.675517][ T6002] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 2810.683503][ T6002] R13: 000000000000000b R14: 00007f90e4b73f80 R15: 00007ffdb3bfd028
[ 2810.691495][ T6002]  </TASK>
22:46:44 executing program 2:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x4c09, 0x0)
write$ppp(r0, &(0x7f00000002c0)="d3", 0x1)
r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x8800, 0x0)
ioctl$PPPIOCATTACH(r1, 0x4004743d, &(0x7f0000000040)=0x4)

22:46:44 executing program 0:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x111800, 0x0)
write$ppp(r0, 0x0, 0xeffdffffffffffff)
timerfd_create(0x1, 0x80000) (async)
timerfd_create(0x1, 0x80000)
ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000000))

22:46:44 executing program 1:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x24ec00, 0x0)
write$ppp(r0, 0x0, 0xeffdffff) (async, rerun: 32)
socket$tipc(0x1e, 0x5, 0x0) (rerun: 32)
ioctl$PPPIOCGIDLE64(r0, 0x8010743f, &(0x7f0000000000))
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(r1, 0x10f, 0x86) (async)
ioctl$PPPIOCATTACH(r1, 0x4004743d, &(0x7f00000000c0)=0x1)

22:46:44 executing program 4:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5d2c01, 0x0)
r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000100), 0x800, 0x0)
ioctl$LOOP_GET_STATUS(r1, 0x4c03, &(0x7f0000000140))
write$ppp(r0, 0x0, 0x0)
r2 = openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(r2, 0x10f, 0x86)
syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), r0)
write$ppp(r2, &(0x7f0000000000)="9ed0f463e199f94e3c62d19b4812ba00990ca238698b43ffd7eb95db84e491561da05d9c81a828e96bd2211a9f298a908b9295290061f0f5328b617f1bda3687babdd3d77a4bbecba36a17da5b9b7dc8a893d7c85805bc1e303181e41e1cc202032d6031", 0x64)

22:46:44 executing program 5:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
write$ppp(r0, &(0x7f00000002c0)="d3", 0x1f4f33) (fail_nth: 66)

22:46:44 executing program 0:
write$ppp(0xffffffffffffffff, 0x0, 0xeffdffffffffffff)
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x2000, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(r0, 0x10f, 0x86)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x2000, 0x0)
r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x400, 0x0)
r2 = openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(r2, 0x10f, 0x86)
ioctl$PPPIOCATTACH(r2, 0x4004743d, &(0x7f00000000c0)=0x1)
ioctl$PPPIOCBRIDGECHAN(r0, 0x40047435, &(0x7f0000000000)=0x2)
ioctl$PPPIOCBRIDGECHAN(r1, 0x40047435, &(0x7f0000000100)=0x2)
r3 = openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(r3, 0x10f, 0x86)
recvfrom$llc(r3, &(0x7f0000000140)=""/188, 0xbc, 0x40000002, &(0x7f0000000200)={0x1a, 0x30e, 0x7, 0x20, 0x6, 0x6, @remote}, 0x10)

22:46:44 executing program 4:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5d2c01, 0x0)
r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000100), 0x800, 0x0)
ioctl$LOOP_GET_STATUS(r1, 0x4c03, &(0x7f0000000140))
write$ppp(r0, 0x0, 0x0)
openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0) (async)
r2 = openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(r2, 0x10f, 0x86)
syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), r0)
write$ppp(r2, &(0x7f0000000000)="9ed0f463e199f94e3c62d19b4812ba00990ca238698b43ffd7eb95db84e491561da05d9c81a828e96bd2211a9f298a908b9295290061f0f5328b617f1bda3687babdd3d77a4bbecba36a17da5b9b7dc8a893d7c85805bc1e303181e41e1cc202032d6031", 0x64) (async)
write$ppp(r2, &(0x7f0000000000)="9ed0f463e199f94e3c62d19b4812ba00990ca238698b43ffd7eb95db84e491561da05d9c81a828e96bd2211a9f298a908b9295290061f0f5328b617f1bda3687babdd3d77a4bbecba36a17da5b9b7dc8a893d7c85805bc1e303181e41e1cc202032d6031", 0x64)

22:46:44 executing program 2:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x4c09, 0x0) (async)
write$ppp(r0, &(0x7f00000002c0)="d3", 0x1) (async)
r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x8800, 0x0)
ioctl$PPPIOCATTACH(r1, 0x4004743d, &(0x7f0000000040)=0x4)

22:46:44 executing program 1:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x24ec00, 0x0)
write$ppp(r0, 0x0, 0xeffdffff) (async)
write$ppp(r0, 0x0, 0xeffdffff)
socket$tipc(0x1e, 0x5, 0x0)
ioctl$PPPIOCGIDLE64(r0, 0x8010743f, &(0x7f0000000000))
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(r1, 0x10f, 0x86)
ioctl$PPPIOCATTACH(r1, 0x4004743d, &(0x7f00000000c0)=0x1) (async)
ioctl$PPPIOCATTACH(r1, 0x4004743d, &(0x7f00000000c0)=0x1)

22:46:44 executing program 3:
write$ppp(0xffffffffffffffff, &(0x7f00000002c0)="d3", 0xfffffffffffffea9)
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(r0, 0x10f, 0x86)
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'vcan0\x00', <r1=>0x0})
connect$can_j1939(r0, &(0x7f0000000080)={0x1d, r1, 0x2, {0x0, 0xf0, 0x2}, 0xfe}, 0x18)
ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f0000000000)=0x4)

[ 2810.790292][ T6037] FAULT_INJECTION: forcing a failure.
[ 2810.790292][ T6037] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[ 2810.803684][ T6037] CPU: 0 PID: 6037 Comm: syz-executor.5 Not tainted 6.6.0-rc3-syzkaller-00165-g3b517966c561 #0
[ 2810.814064][ T6037] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/06/2023
[ 2810.824155][ T6037] Call Trace:
[ 2810.827437][ T6037]  <TASK>
[ 2810.830381][ T6037]  dump_stack_lvl+0xda/0x130
[ 2810.835034][ T6037]  dump_stack+0x15/0x20
22:46:44 executing program 0:
write$ppp(0xffffffffffffffff, 0x0, 0xeffdffffffffffff) (async)
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x2000, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(r0, 0x10f, 0x86) (async)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x2000, 0x0) (async)
r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x400, 0x0)
r2 = openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(r2, 0x10f, 0x86) (async)
ioctl$PPPIOCATTACH(r2, 0x4004743d, &(0x7f00000000c0)=0x1) (async, rerun: 64)
ioctl$PPPIOCBRIDGECHAN(r0, 0x40047435, &(0x7f0000000000)=0x2) (async, rerun: 64)
ioctl$PPPIOCBRIDGECHAN(r1, 0x40047435, &(0x7f0000000100)=0x2) (async)
r3 = openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(r3, 0x10f, 0x86)
recvfrom$llc(r3, &(0x7f0000000140)=""/188, 0xbc, 0x40000002, &(0x7f0000000200)={0x1a, 0x30e, 0x7, 0x20, 0x6, 0x6, @remote}, 0x10)

22:46:44 executing program 3:
write$ppp(0xffffffffffffffff, &(0x7f00000002c0)="d3", 0xfffffffffffffea9)
openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0) (async)
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(r0, 0x10f, 0x86) (async)
setsockopt$TIPC_MCAST_REPLICAST(r0, 0x10f, 0x86)
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'vcan0\x00', <r1=>0x0})
connect$can_j1939(r0, &(0x7f0000000080)={0x1d, r1, 0x2, {0x0, 0xf0, 0x2}, 0xfe}, 0x18)
ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f0000000000)=0x4)

[ 2810.839232][ T6037]  should_fail_ex+0x21f/0x230
[ 2810.843936][ T6037]  __should_fail_alloc_page+0xfd/0x110
[ 2810.849414][ T6037]  __alloc_pages+0x108/0x340
[ 2810.854066][ T6037]  vma_alloc_folio+0x6a3/0x8c0
[ 2810.858957][ T6037]  ? shmem_inode_acct_block+0x1ee/0x220
[ 2810.864617][ T6037]  shmem_get_folio_gfp+0x579/0xc30
[ 2810.869894][ T6037]  shmem_write_begin+0xa6/0x210
[ 2810.874792][ T6037]  generic_perform_write+0x1c9/0x410
[ 2810.880168][ T6037]  ? shmem_write_begin+0x210/0x210
[ 2810.885352][ T6037]  shmem_file_write_iter+0xc8/0xe0
[ 2810.890537][ T6037]  vfs_write+0x4ab/0x7d0
[ 2810.894837][ T6037]  ksys_write+0xeb/0x1a0
[ 2810.899188][ T6037]  __x64_sys_write+0x42/0x50
[ 2810.903856][ T6037]  do_syscall_64+0x41/0xc0
[ 2810.908332][ T6037]  entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 2810.914283][ T6037] RIP: 0033:0x7f90e4a54ae9
[ 2810.918765][ T6037] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48
22:46:45 executing program 0:
write$ppp(0xffffffffffffffff, 0x0, 0xeffdffffffffffff)
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x2000, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(r0, 0x10f, 0x86)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x2000, 0x0)
r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x400, 0x0)
r2 = openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(r2, 0x10f, 0x86)
ioctl$PPPIOCATTACH(r2, 0x4004743d, &(0x7f00000000c0)=0x1)
ioctl$PPPIOCBRIDGECHAN(r0, 0x40047435, &(0x7f0000000000)=0x2)
ioctl$PPPIOCBRIDGECHAN(r1, 0x40047435, &(0x7f0000000100)=0x2)
r3 = openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(r3, 0x10f, 0x86)
recvfrom$llc(r3, &(0x7f0000000140)=""/188, 0xbc, 0x40000002, &(0x7f0000000200)={0x1a, 0x30e, 0x7, 0x20, 0x6, 0x6, @remote}, 0x10)
write$ppp(0xffffffffffffffff, 0x0, 0xeffdffffffffffff) (async)
openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x2000, 0x0) (async)
setsockopt$TIPC_MCAST_REPLICAST(r0, 0x10f, 0x86) (async)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x2000, 0x0) (async)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x400, 0x0) (async)
openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0) (async)
setsockopt$TIPC_MCAST_REPLICAST(r2, 0x10f, 0x86) (async)
ioctl$PPPIOCATTACH(r2, 0x4004743d, &(0x7f00000000c0)=0x1) (async)
ioctl$PPPIOCBRIDGECHAN(r0, 0x40047435, &(0x7f0000000000)=0x2) (async)
ioctl$PPPIOCBRIDGECHAN(r1, 0x40047435, &(0x7f0000000100)=0x2) (async)
openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0) (async)
setsockopt$TIPC_MCAST_REPLICAST(r3, 0x10f, 0x86) (async)
recvfrom$llc(r3, &(0x7f0000000140)=""/188, 0xbc, 0x40000002, &(0x7f0000000200)={0x1a, 0x30e, 0x7, 0x20, 0x6, 0x6, @remote}, 0x10) (async)

22:46:45 executing program 3:
write$ppp(0xffffffffffffffff, &(0x7f00000002c0)="d3", 0xfffffffffffffea9)
openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0) (async)
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(r0, 0x10f, 0x86)
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'vcan0\x00', <r1=>0x0})
connect$can_j1939(r0, &(0x7f0000000080)={0x1d, r1, 0x2, {0x0, 0xf0, 0x2}, 0xfe}, 0x18)
ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f0000000000)=0x4) (async)
ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f0000000000)=0x4)

22:46:45 executing program 2:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x4c09, 0x0) (async)
write$ppp(r0, &(0x7f00000002c0)="d3", 0x1)
r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x8800, 0x0)
ioctl$PPPIOCATTACH(r1, 0x4004743d, &(0x7f0000000040)=0x4)

22:46:45 executing program 4:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5d2c01, 0x0)
r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000100), 0x800, 0x0)
ioctl$LOOP_GET_STATUS(r1, 0x4c03, &(0x7f0000000140))
write$ppp(r0, 0x0, 0x0)
r2 = openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(r2, 0x10f, 0x86)
syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), r0)
write$ppp(r2, &(0x7f0000000000)="9ed0f463e199f94e3c62d19b4812ba00990ca238698b43ffd7eb95db84e491561da05d9c81a828e96bd2211a9f298a908b9295290061f0f5328b617f1bda3687babdd3d77a4bbecba36a17da5b9b7dc8a893d7c85805bc1e303181e41e1cc202032d6031", 0x64)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5d2c01, 0x0) (async)
openat$pfkey(0xffffffffffffff9c, &(0x7f0000000100), 0x800, 0x0) (async)
ioctl$LOOP_GET_STATUS(r1, 0x4c03, &(0x7f0000000140)) (async)
write$ppp(r0, 0x0, 0x0) (async)
openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0) (async)
setsockopt$TIPC_MCAST_REPLICAST(r2, 0x10f, 0x86) (async)
syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), r0) (async)
write$ppp(r2, &(0x7f0000000000)="9ed0f463e199f94e3c62d19b4812ba00990ca238698b43ffd7eb95db84e491561da05d9c81a828e96bd2211a9f298a908b9295290061f0f5328b617f1bda3687babdd3d77a4bbecba36a17da5b9b7dc8a893d7c85805bc1e303181e41e1cc202032d6031", 0x64) (async)

22:46:45 executing program 1:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0xef041, 0x0)
write$ppp(r0, 0x0, 0xeffdffff)

22:46:45 executing program 5:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
write$ppp(r0, &(0x7f00000002c0)="d3", 0x1f4f33) (fail_nth: 67)

22:46:45 executing program 2:
setsockopt$TIPC_GROUP_LEAVE(0xffffffffffffffff, 0x10f, 0x88)
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
write$ppp(r0, &(0x7f00000002c0)="d3", 0x1)

[ 2810.938413][ T6037] RSP: 002b:00007f90e3dd70c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 2810.946945][ T6037] RAX: ffffffffffffffda RBX: 00007f90e4b73f80 RCX: 00007f90e4a54ae9
[ 2810.954966][ T6037] RDX: 00000000001f4f33 RSI: 00000000200002c0 RDI: 0000000000000003
[ 2810.963026][ T6037] RBP: 00007f90e3dd7120 R08: 0000000000000000 R09: 0000000000000000
[ 2810.971017][ T6037] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 2810.978985][ T6037] R13: 000000000000000b R14: 00007f90e4b73f80 R15: 00007ffdb3bfd028
[ 2810.986984][ T6037]  </TASK>
22:46:45 executing program 0:
sendmsg$AUDIT_GET_FEATURE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x3fb, 0x100, 0x70bd2c, 0x25dfdbff, "", [""]}, 0x10}, 0x1, 0x0, 0x0, 0x4011}, 0x200008d8)
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(r1, 0x10f, 0x86)
sendmsg$AUDIT_LIST_RULES(r1, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x10, 0x3f5, 0x800, 0x70bd2d, 0x25dfdbfe, "", ["", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x40}, 0x24000084)
r2 = openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(r2, 0x10f, 0x86)
syz_genetlink_get_family_id$team(&(0x7f0000000240), r2)
write$ppp(r0, 0x0, 0xeffdffffffffffff)

22:46:45 executing program 3:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
write$ppp(r0, &(0x7f00000002c0)="d3", 0xfffffdef)
ioctl$PPPIOCSDEBUG(r0, 0x40047440, &(0x7f0000000000)=0x8)
syz_genetlink_get_family_id$team(&(0x7f00000000c0), r0)
setsockopt$TIPC_DEST_DROPPABLE(r0, 0x10f, 0x81, &(0x7f0000000040)=0x6, 0x4)

22:46:45 executing program 4:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x38c00, 0x0)
write$ppp(0xffffffffffffffff, 0x0, 0x0)
ioctl$PPPIOCGIDLE64(r0, 0x8010743f, &(0x7f0000000000))

22:46:45 executing program 1:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0xef041, 0x0)
write$ppp(r0, 0x0, 0xeffdffff)

22:46:45 executing program 4:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x38c00, 0x0) (async, rerun: 32)
write$ppp(0xffffffffffffffff, 0x0, 0x0) (rerun: 32)
ioctl$PPPIOCGIDLE64(r0, 0x8010743f, &(0x7f0000000000))

[ 2811.082128][ T6082] FAULT_INJECTION: forcing a failure.
[ 2811.082128][ T6082] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 2811.095231][ T6082] CPU: 1 PID: 6082 Comm: syz-executor.5 Not tainted 6.6.0-rc3-syzkaller-00165-g3b517966c561 #0
[ 2811.105645][ T6082] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/06/2023
[ 2811.115734][ T6082] Call Trace:
[ 2811.119036][ T6082]  <TASK>
[ 2811.121978][ T6082]  dump_stack_lvl+0xda/0x130
[ 2811.126622][ T6082]  dump_stack+0x15/0x20
[ 2811.130797][ T6082]  should_fail_ex+0x21f/0x230
[ 2811.135528][ T6082]  should_fail+0xb/0x10
[ 2811.139702][ T6082]  should_fail_usercopy+0x1a/0x20
[ 2811.144757][ T6082]  copy_page_from_iter_atomic+0x21c/0xcf0
[ 2811.150600][ T6082]  ? shmem_write_begin+0xa6/0x210
[ 2811.155793][ T6082]  ? shmem_write_begin+0x16d/0x210
[ 2811.161127][ T6082]  generic_perform_write+0x20c/0x410
[ 2811.166514][ T6082]  ? shmem_write_begin+0x210/0x210
[ 2811.171658][ T6082]  shmem_file_write_iter+0xc8/0xe0
[ 2811.176830][ T6082]  vfs_write+0x4ab/0x7d0
[ 2811.181170][ T6082]  ksys_write+0xeb/0x1a0
[ 2811.185476][ T6082]  __x64_sys_write+0x42/0x50
[ 2811.190147][ T6082]  do_syscall_64+0x41/0xc0
[ 2811.194587][ T6082]  entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 2811.200635][ T6082] RIP: 0033:0x7f90e4a54ae9
[ 2811.205092][ T6082] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48
22:46:45 executing program 5:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
write$ppp(r0, &(0x7f00000002c0)="d3", 0x1f4f33) (fail_nth: 68)

22:46:45 executing program 1:
openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0xef041, 0x0) (async)
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0xef041, 0x0)
write$ppp(r0, 0x0, 0xeffdffff)

22:46:45 executing program 2:
setsockopt$TIPC_GROUP_LEAVE(0xffffffffffffffff, 0x10f, 0x88)
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
write$ppp(r0, &(0x7f00000002c0)="d3", 0x1)

22:46:45 executing program 4:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x38c00, 0x0)
write$ppp(0xffffffffffffffff, 0x0, 0x0) (async)
ioctl$PPPIOCGIDLE64(r0, 0x8010743f, &(0x7f0000000000))

22:46:45 executing program 0:
sendmsg$AUDIT_GET_FEATURE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x3fb, 0x100, 0x70bd2c, 0x25dfdbff, "", [""]}, 0x10}, 0x1, 0x0, 0x0, 0x4011}, 0x200008d8)
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(r1, 0x10f, 0x86)
sendmsg$AUDIT_LIST_RULES(r1, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x10, 0x3f5, 0x800, 0x70bd2d, 0x25dfdbfe, "", ["", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x40}, 0x24000084)
openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0) (async)
r2 = openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(r2, 0x10f, 0x86) (async)
setsockopt$TIPC_MCAST_REPLICAST(r2, 0x10f, 0x86)
syz_genetlink_get_family_id$team(&(0x7f0000000240), r2)
write$ppp(r0, 0x0, 0xeffdffffffffffff) (async)
write$ppp(r0, 0x0, 0xeffdffffffffffff)

22:46:45 executing program 3:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
write$ppp(r0, &(0x7f00000002c0)="d3", 0xfffffdef)
ioctl$PPPIOCSDEBUG(r0, 0x40047440, &(0x7f0000000000)=0x8) (async)
syz_genetlink_get_family_id$team(&(0x7f00000000c0), r0) (async)
setsockopt$TIPC_DEST_DROPPABLE(r0, 0x10f, 0x81, &(0x7f0000000040)=0x6, 0x4)

22:46:45 executing program 1:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
write$ppp(r0, 0x0, 0xeffdffff)
sendmsg$AUDIT_DEL_RULE(r0, &(0x7f0000000540)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x900010}, 0xc, &(0x7f0000000040)={&(0x7f00000000c0)={0x458, 0x3f4, 0x200, 0x70bd25, 0x25dfdbfe, {0x6, 0x1, 0x2, [0x10000, 0x401, 0x1, 0x9, 0x5, 0x7, 0x6, 0x800, 0x1f, 0x401, 0x1f, 0x8, 0x87d0, 0xa16, 0x6, 0x8001, 0x1, 0x4, 0xc764, 0x3, 0x3772, 0xffffffff, 0x6, 0x1, 0x9, 0x4, 0xfffffa8a, 0x8001, 0x7fff, 0x4, 0x81, 0x7fffffff, 0x7, 0x7f, 0x8001, 0x8, 0x6, 0x7992a052, 0xfff, 0x16, 0x7ff, 0x6, 0x401, 0x5, 0xffff8000, 0x6, 0x8, 0x3, 0x1, 0x9, 0x80, 0x401, 0x1, 0x9, 0x1, 0x4, 0x10001, 0x0, 0x40, 0x8, 0x0, 0x1, 0x7f, 0x5], [0x3dc, 0x0, 0x3, 0x3736, 0x771a, 0x9, 0x8, 0x3e9, 0x9, 0x2, 0x80000001, 0x9, 0xff, 0x5, 0x70, 0x5, 0x80000001, 0xacae, 0x6779, 0x78, 0xfffffff8, 0x8b, 0x0, 0x7, 0xd6d9, 0x8, 0xf0, 0x1, 0x8, 0x800, 0x8, 0x6, 0x0, 0x9, 0x9, 0x0, 0xfffffeff, 0xa3, 0x1ef6, 0x0, 0x2, 0x0, 0x1f, 0x100, 0x0, 0x1, 0x5, 0x8, 0x19, 0x80, 0x3, 0x8, 0x61e6, 0x7, 0x4, 0x5, 0xa991, 0x1000, 0xffff, 0xffffffff, 0x10001, 0x0, 0x911, 0x8], [0x7, 0x4, 0x9, 0xf38b, 0x0, 0x9, 0x2, 0x9, 0xf2, 0x7, 0xe729, 0x2, 0x15, 0x625, 0x4, 0x8, 0x5da, 0x20, 0x80, 0x1, 0x4, 0x100, 0x4, 0x2, 0x6, 0x2, 0x95ef, 0x5, 0x7ff, 0x6, 0x400, 0x4, 0xffffffff, 0x80000001, 0x9, 0x3, 0x4, 0x1000, 0x8, 0x3f24, 0xfa1, 0x0, 0xf051, 0xffffffe0, 0x5, 0x7, 0x4, 0x4, 0x6, 0x7, 0x0, 0xffff0000, 0x7fffffff, 0xfffffffa, 0x5, 0x60, 0x3, 0x80, 0x7, 0xd04, 0xd7, 0x7ff, 0x2d, 0xcb], [0x6, 0xa93, 0x3ff, 0x2, 0x4, 0x2, 0x8, 0xfffffffb, 0x1, 0x0, 0x5, 0x1, 0xf59, 0x8000, 0x7, 0x7f000000, 0x0, 0x5, 0xffffff40, 0x7, 0x0, 0xc100, 0x5, 0x7fff, 0x1, 0xeb67, 0x7, 0x2, 0xfffffa26, 0x0, 0x7fffffff, 0x9, 0x519e141d, 0x5, 0x9, 0x2, 0xcee600, 0x1f, 0xfffffffd, 0x1000, 0x81, 0x0, 0x86, 0x2, 0x8, 0x6, 0x6f82398d, 0x7, 0x7, 0xffffffff, 0xbf95, 0x4, 0xd444, 0x7, 0x3, 0x1, 0x5, 0x5, 0x6, 0x64, 0x5, 0xca9, 0x1, 0x6], 0x35, ['/dev/bsg\x00', '/dev/bsg\x00', '/dev/bsg\x00', '/dev/bsg\x00', '/dev/bsg\x00', '+,[#)(/\x00']}, [""]}, 0x458}, 0x1, 0x0, 0x0, 0x20000080}, 0x4)

[ 2811.224705][ T6082] RSP: 002b:00007f90e3dd70c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 2811.233112][ T6082] RAX: ffffffffffffffda RBX: 00007f90e4b73f80 RCX: 00007f90e4a54ae9
[ 2811.241084][ T6082] RDX: 00000000001f4f33 RSI: 00000000200002c0 RDI: 0000000000000003
[ 2811.249147][ T6082] RBP: 00007f90e3dd7120 R08: 0000000000000000 R09: 0000000000000000
[ 2811.257111][ T6082] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 2811.265073][ T6082] R13: 000000000000000b R14: 00007f90e4b73f80 R15: 00007ffdb3bfd028
[ 2811.273098][ T6082]  </TASK>
22:46:45 executing program 4:
ioctl$LOOP_SET_STATUS64(0xffffffffffffffff, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7ff, 0x8001, 0x0, 0x1, 0x12, 0x1, "412616293f7130cb5d7aa696986332da31df5a60a0abb8f8753c695e7664e59cc9aa8c19e65b79ce474d3f9eb62f8cbb11be350cb6119df12913823083a40e7f", "6e59afac47aae26e08b086c0e4922b1cf3ad1c423ad8ea6ad77bec27dddb17c7e06212ae21929d851c206477e1c8de38e20c5084482d267975d140bfc9977bb7", "4c4dce2181a417f8e250a23d7c93854489c82928808c0040f6b10369da83fd78", [0x0, 0x4]})
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
write$ppp(r0, 0x0, 0x0)

22:46:45 executing program 2:
setsockopt$TIPC_GROUP_LEAVE(0xffffffffffffffff, 0x10f, 0x88)
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
write$ppp(r0, &(0x7f00000002c0)="d3", 0x1)

22:46:45 executing program 4:
ioctl$LOOP_SET_STATUS64(0xffffffffffffffff, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7ff, 0x8001, 0x0, 0x1, 0x12, 0x1, "412616293f7130cb5d7aa696986332da31df5a60a0abb8f8753c695e7664e59cc9aa8c19e65b79ce474d3f9eb62f8cbb11be350cb6119df12913823083a40e7f", "6e59afac47aae26e08b086c0e4922b1cf3ad1c423ad8ea6ad77bec27dddb17c7e06212ae21929d851c206477e1c8de38e20c5084482d267975d140bfc9977bb7", "4c4dce2181a417f8e250a23d7c93854489c82928808c0040f6b10369da83fd78", [0x0, 0x4]})
openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0) (async)
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
write$ppp(r0, 0x0, 0x0)

22:46:45 executing program 2:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
write$ppp(r0, &(0x7f00000000c0)="16fd44876a865693c58573a4c9d8bc2205716d82e27293da723e405cd55ffc9f72209a0a4a8b180b4695501ac221e37e3321dcfd948aef3e236faebb5adecd948f453a87b0df40bc4ecd73666e280cda1adae1a5236d59a3eb2ba05d7129f2aa", 0x60)
r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x218501, 0x0)
ioctl$PPPIOCGIDLE(r1, 0x8010743f, &(0x7f0000000040))

22:46:45 executing program 4:
ioctl$LOOP_SET_STATUS64(0xffffffffffffffff, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7ff, 0x8001, 0x0, 0x1, 0x12, 0x1, "412616293f7130cb5d7aa696986332da31df5a60a0abb8f8753c695e7664e59cc9aa8c19e65b79ce474d3f9eb62f8cbb11be350cb6119df12913823083a40e7f", "6e59afac47aae26e08b086c0e4922b1cf3ad1c423ad8ea6ad77bec27dddb17c7e06212ae21929d851c206477e1c8de38e20c5084482d267975d140bfc9977bb7", "4c4dce2181a417f8e250a23d7c93854489c82928808c0040f6b10369da83fd78", [0x0, 0x4]})
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
write$ppp(r0, 0x0, 0x0)
ioctl$LOOP_SET_STATUS64(0xffffffffffffffff, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7ff, 0x8001, 0x0, 0x1, 0x12, 0x1, "412616293f7130cb5d7aa696986332da31df5a60a0abb8f8753c695e7664e59cc9aa8c19e65b79ce474d3f9eb62f8cbb11be350cb6119df12913823083a40e7f", "6e59afac47aae26e08b086c0e4922b1cf3ad1c423ad8ea6ad77bec27dddb17c7e06212ae21929d851c206477e1c8de38e20c5084482d267975d140bfc9977bb7", "4c4dce2181a417f8e250a23d7c93854489c82928808c0040f6b10369da83fd78", [0x0, 0x4]}) (async)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0) (async)
write$ppp(r0, 0x0, 0x0) (async)

[ 2811.343051][ T6100] FAULT_INJECTION: forcing a failure.
[ 2811.343051][ T6100] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[ 2811.356392][ T6100] CPU: 1 PID: 6100 Comm: syz-executor.5 Not tainted 6.6.0-rc3-syzkaller-00165-g3b517966c561 #0
[ 2811.366809][ T6100] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/06/2023
[ 2811.376895][ T6100] Call Trace:
[ 2811.380196][ T6100]  <TASK>
[ 2811.383182][ T6100]  dump_stack_lvl+0xda/0x130
[ 2811.387807][ T6100]  dump_stack+0x15/0x20
[ 2811.392002][ T6100]  should_fail_ex+0x21f/0x230
[ 2811.396705][ T6100]  __should_fail_alloc_page+0xfd/0x110
[ 2811.402207][ T6100]  __alloc_pages+0x108/0x340
[ 2811.406865][ T6100]  vma_alloc_folio+0x6a3/0x8c0
[ 2811.411784][ T6100]  ? shmem_inode_acct_block+0x1ee/0x220
[ 2811.417370][ T6100]  shmem_get_folio_gfp+0x579/0xc30
[ 2811.422566][ T6100]  shmem_write_begin+0xa6/0x210
[ 2811.427446][ T6100]  generic_perform_write+0x1c9/0x410
[ 2811.432750][ T6100]  ? shmem_write_begin+0x210/0x210
[ 2811.437919][ T6100]  shmem_file_write_iter+0xc8/0xe0
[ 2811.443154][ T6100]  vfs_write+0x4ab/0x7d0
[ 2811.447443][ T6100]  ksys_write+0xeb/0x1a0
[ 2811.451682][ T6100]  __x64_sys_write+0x42/0x50
[ 2811.456269][ T6100]  do_syscall_64+0x41/0xc0
[ 2811.460692][ T6100]  entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 2811.466589][ T6100] RIP: 0033:0x7f90e4a54ae9
[ 2811.471047][ T6100] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48
22:46:45 executing program 1:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
write$ppp(r0, 0x0, 0xeffdffff)
sendmsg$AUDIT_DEL_RULE(r0, &(0x7f0000000540)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x900010}, 0xc, &(0x7f0000000040)={&(0x7f00000000c0)={0x458, 0x3f4, 0x200, 0x70bd25, 0x25dfdbfe, {0x6, 0x1, 0x2, [0x10000, 0x401, 0x1, 0x9, 0x5, 0x7, 0x6, 0x800, 0x1f, 0x401, 0x1f, 0x8, 0x87d0, 0xa16, 0x6, 0x8001, 0x1, 0x4, 0xc764, 0x3, 0x3772, 0xffffffff, 0x6, 0x1, 0x9, 0x4, 0xfffffa8a, 0x8001, 0x7fff, 0x4, 0x81, 0x7fffffff, 0x7, 0x7f, 0x8001, 0x8, 0x6, 0x7992a052, 0xfff, 0x16, 0x7ff, 0x6, 0x401, 0x5, 0xffff8000, 0x6, 0x8, 0x3, 0x1, 0x9, 0x80, 0x401, 0x1, 0x9, 0x1, 0x4, 0x10001, 0x0, 0x40, 0x8, 0x0, 0x1, 0x7f, 0x5], [0x3dc, 0x0, 0x3, 0x3736, 0x771a, 0x9, 0x8, 0x3e9, 0x9, 0x2, 0x80000001, 0x9, 0xff, 0x5, 0x70, 0x5, 0x80000001, 0xacae, 0x6779, 0x78, 0xfffffff8, 0x8b, 0x0, 0x7, 0xd6d9, 0x8, 0xf0, 0x1, 0x8, 0x800, 0x8, 0x6, 0x0, 0x9, 0x9, 0x0, 0xfffffeff, 0xa3, 0x1ef6, 0x0, 0x2, 0x0, 0x1f, 0x100, 0x0, 0x1, 0x5, 0x8, 0x19, 0x80, 0x3, 0x8, 0x61e6, 0x7, 0x4, 0x5, 0xa991, 0x1000, 0xffff, 0xffffffff, 0x10001, 0x0, 0x911, 0x8], [0x7, 0x4, 0x9, 0xf38b, 0x0, 0x9, 0x2, 0x9, 0xf2, 0x7, 0xe729, 0x2, 0x15, 0x625, 0x4, 0x8, 0x5da, 0x20, 0x80, 0x1, 0x4, 0x100, 0x4, 0x2, 0x6, 0x2, 0x95ef, 0x5, 0x7ff, 0x6, 0x400, 0x4, 0xffffffff, 0x80000001, 0x9, 0x3, 0x4, 0x1000, 0x8, 0x3f24, 0xfa1, 0x0, 0xf051, 0xffffffe0, 0x5, 0x7, 0x4, 0x4, 0x6, 0x7, 0x0, 0xffff0000, 0x7fffffff, 0xfffffffa, 0x5, 0x60, 0x3, 0x80, 0x7, 0xd04, 0xd7, 0x7ff, 0x2d, 0xcb], [0x6, 0xa93, 0x3ff, 0x2, 0x4, 0x2, 0x8, 0xfffffffb, 0x1, 0x0, 0x5, 0x1, 0xf59, 0x8000, 0x7, 0x7f000000, 0x0, 0x5, 0xffffff40, 0x7, 0x0, 0xc100, 0x5, 0x7fff, 0x1, 0xeb67, 0x7, 0x2, 0xfffffa26, 0x0, 0x7fffffff, 0x9, 0x519e141d, 0x5, 0x9, 0x2, 0xcee600, 0x1f, 0xfffffffd, 0x1000, 0x81, 0x0, 0x86, 0x2, 0x8, 0x6, 0x6f82398d, 0x7, 0x7, 0xffffffff, 0xbf95, 0x4, 0xd444, 0x7, 0x3, 0x1, 0x5, 0x5, 0x6, 0x64, 0x5, 0xca9, 0x1, 0x6], 0x35, ['/dev/bsg\x00', '/dev/bsg\x00', '/dev/bsg\x00', '/dev/bsg\x00', '/dev/bsg\x00', '+,[#)(/\x00']}, [""]}, 0x458}, 0x1, 0x0, 0x0, 0x20000080}, 0x4)

22:46:45 executing program 2:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
write$ppp(r0, &(0x7f00000000c0)="16fd44876a865693c58573a4c9d8bc2205716d82e27293da723e405cd55ffc9f72209a0a4a8b180b4695501ac221e37e3321dcfd948aef3e236faebb5adecd948f453a87b0df40bc4ecd73666e280cda1adae1a5236d59a3eb2ba05d7129f2aa", 0x60) (async)
r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x218501, 0x0)
ioctl$PPPIOCGIDLE(r1, 0x8010743f, &(0x7f0000000040))

22:46:45 executing program 4:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), 0xffffffffffffffff)
r2 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000180)={'vcan0\x00', <r3=>0x0})
bind$can_j1939(r2, &(0x7f00000001c0)={0x1d, r3, 0x0, {0x1}}, 0x18)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000200)={'syztnl1\x00', &(0x7f0000000180)={'syztnl0\x00', r3, 0x2f, 0x9, 0x20, 0x5d00, 0x1, @private0, @empty, 0x1, 0x20, 0x3f, 0x9}})
r4 = openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(r4, 0x10f, 0x86)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r4, &(0x7f0000000080)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="38000000149d8aeb3b28f8ffe6480a6b1801f8a18a7cdd27fd79ab87846c62d79f4384a36e2a724c5c2576803ce1", @ANYRES16=r1, @ANYBLOB="00042cbd7000fcdbdf2501000000060001000a00000014002000fc0200000000000000000000000000010500070002000000"], 0x38}, 0x1, 0x0, 0x0, 0x4000001}, 0x10)
write$ppp(0xffffffffffffffff, 0x0, 0x0)

22:46:45 executing program 3:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
write$ppp(r0, &(0x7f00000002c0)="d3", 0xfffffdef)
ioctl$PPPIOCSDEBUG(r0, 0x40047440, &(0x7f0000000000)=0x8)
syz_genetlink_get_family_id$team(&(0x7f00000000c0), r0)
setsockopt$TIPC_DEST_DROPPABLE(r0, 0x10f, 0x81, &(0x7f0000000040)=0x6, 0x4)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0) (async)
write$ppp(r0, &(0x7f00000002c0)="d3", 0xfffffdef) (async)
ioctl$PPPIOCSDEBUG(r0, 0x40047440, &(0x7f0000000000)=0x8) (async)
syz_genetlink_get_family_id$team(&(0x7f00000000c0), r0) (async)
setsockopt$TIPC_DEST_DROPPABLE(r0, 0x10f, 0x81, &(0x7f0000000040)=0x6, 0x4) (async)

22:46:45 executing program 0:
sendmsg$AUDIT_GET_FEATURE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x3fb, 0x100, 0x70bd2c, 0x25dfdbff, "", [""]}, 0x10}, 0x1, 0x0, 0x0, 0x4011}, 0x200008d8)
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(r1, 0x10f, 0x86)
sendmsg$AUDIT_LIST_RULES(r1, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x10, 0x3f5, 0x800, 0x70bd2d, 0x25dfdbfe, "", ["", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x40}, 0x24000084)
openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0) (async)
r2 = openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(r2, 0x10f, 0x86) (async)
setsockopt$TIPC_MCAST_REPLICAST(r2, 0x10f, 0x86)
syz_genetlink_get_family_id$team(&(0x7f0000000240), r2) (async)
syz_genetlink_get_family_id$team(&(0x7f0000000240), r2)
write$ppp(r0, 0x0, 0xeffdffffffffffff)

22:46:45 executing program 5:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
write$ppp(r0, &(0x7f00000002c0)="d3", 0x1f4f33) (fail_nth: 69)

22:46:45 executing program 1:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
write$ppp(r0, 0x0, 0xeffdffff) (async)
sendmsg$AUDIT_DEL_RULE(r0, &(0x7f0000000540)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x900010}, 0xc, &(0x7f0000000040)={&(0x7f00000000c0)={0x458, 0x3f4, 0x200, 0x70bd25, 0x25dfdbfe, {0x6, 0x1, 0x2, [0x10000, 0x401, 0x1, 0x9, 0x5, 0x7, 0x6, 0x800, 0x1f, 0x401, 0x1f, 0x8, 0x87d0, 0xa16, 0x6, 0x8001, 0x1, 0x4, 0xc764, 0x3, 0x3772, 0xffffffff, 0x6, 0x1, 0x9, 0x4, 0xfffffa8a, 0x8001, 0x7fff, 0x4, 0x81, 0x7fffffff, 0x7, 0x7f, 0x8001, 0x8, 0x6, 0x7992a052, 0xfff, 0x16, 0x7ff, 0x6, 0x401, 0x5, 0xffff8000, 0x6, 0x8, 0x3, 0x1, 0x9, 0x80, 0x401, 0x1, 0x9, 0x1, 0x4, 0x10001, 0x0, 0x40, 0x8, 0x0, 0x1, 0x7f, 0x5], [0x3dc, 0x0, 0x3, 0x3736, 0x771a, 0x9, 0x8, 0x3e9, 0x9, 0x2, 0x80000001, 0x9, 0xff, 0x5, 0x70, 0x5, 0x80000001, 0xacae, 0x6779, 0x78, 0xfffffff8, 0x8b, 0x0, 0x7, 0xd6d9, 0x8, 0xf0, 0x1, 0x8, 0x800, 0x8, 0x6, 0x0, 0x9, 0x9, 0x0, 0xfffffeff, 0xa3, 0x1ef6, 0x0, 0x2, 0x0, 0x1f, 0x100, 0x0, 0x1, 0x5, 0x8, 0x19, 0x80, 0x3, 0x8, 0x61e6, 0x7, 0x4, 0x5, 0xa991, 0x1000, 0xffff, 0xffffffff, 0x10001, 0x0, 0x911, 0x8], [0x7, 0x4, 0x9, 0xf38b, 0x0, 0x9, 0x2, 0x9, 0xf2, 0x7, 0xe729, 0x2, 0x15, 0x625, 0x4, 0x8, 0x5da, 0x20, 0x80, 0x1, 0x4, 0x100, 0x4, 0x2, 0x6, 0x2, 0x95ef, 0x5, 0x7ff, 0x6, 0x400, 0x4, 0xffffffff, 0x80000001, 0x9, 0x3, 0x4, 0x1000, 0x8, 0x3f24, 0xfa1, 0x0, 0xf051, 0xffffffe0, 0x5, 0x7, 0x4, 0x4, 0x6, 0x7, 0x0, 0xffff0000, 0x7fffffff, 0xfffffffa, 0x5, 0x60, 0x3, 0x80, 0x7, 0xd04, 0xd7, 0x7ff, 0x2d, 0xcb], [0x6, 0xa93, 0x3ff, 0x2, 0x4, 0x2, 0x8, 0xfffffffb, 0x1, 0x0, 0x5, 0x1, 0xf59, 0x8000, 0x7, 0x7f000000, 0x0, 0x5, 0xffffff40, 0x7, 0x0, 0xc100, 0x5, 0x7fff, 0x1, 0xeb67, 0x7, 0x2, 0xfffffa26, 0x0, 0x7fffffff, 0x9, 0x519e141d, 0x5, 0x9, 0x2, 0xcee600, 0x1f, 0xfffffffd, 0x1000, 0x81, 0x0, 0x86, 0x2, 0x8, 0x6, 0x6f82398d, 0x7, 0x7, 0xffffffff, 0xbf95, 0x4, 0xd444, 0x7, 0x3, 0x1, 0x5, 0x5, 0x6, 0x64, 0x5, 0xca9, 0x1, 0x6], 0x35, ['/dev/bsg\x00', '/dev/bsg\x00', '/dev/bsg\x00', '/dev/bsg\x00', '/dev/bsg\x00', '+,[#)(/\x00']}, [""]}, 0x458}, 0x1, 0x0, 0x0, 0x20000080}, 0x4)

22:46:45 executing program 4:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), 0xffffffffffffffff)
r2 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000180)={'vcan0\x00', <r3=>0x0})
bind$can_j1939(r2, &(0x7f00000001c0)={0x1d, r3, 0x0, {0x1}}, 0x18)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000200)={'syztnl1\x00', &(0x7f0000000180)={'syztnl0\x00', r3, 0x2f, 0x9, 0x20, 0x5d00, 0x1, @private0, @empty, 0x1, 0x20, 0x3f, 0x9}}) (async)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000200)={'syztnl1\x00', &(0x7f0000000180)={'syztnl0\x00', r3, 0x2f, 0x9, 0x20, 0x5d00, 0x1, @private0, @empty, 0x1, 0x20, 0x3f, 0x9}})
openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0) (async)
r4 = openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(r4, 0x10f, 0x86)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r4, &(0x7f0000000080)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="38000000149d8aeb3b28f8ffe6480a6b1801f8a18a7cdd27fd79ab87846c62d79f4384a36e2a724c5c2576803ce1", @ANYRES16=r1, @ANYBLOB="00042cbd7000fcdbdf2501000000060001000a00000014002000fc0200000000000000000000000000010500070002000000"], 0x38}, 0x1, 0x0, 0x0, 0x4000001}, 0x10) (async)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r4, &(0x7f0000000080)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="38000000149d8aeb3b28f8ffe6480a6b1801f8a18a7cdd27fd79ab87846c62d79f4384a36e2a724c5c2576803ce1", @ANYRES16=r1, @ANYBLOB="00042cbd7000fcdbdf2501000000060001000a00000014002000fc0200000000000000000000000000010500070002000000"], 0x38}, 0x1, 0x0, 0x0, 0x4000001}, 0x10)
write$ppp(0xffffffffffffffff, 0x0, 0x0)

[ 2811.490673][ T6100] RSP: 002b:00007f90e3dd70c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 2811.499103][ T6100] RAX: ffffffffffffffda RBX: 00007f90e4b73f80 RCX: 00007f90e4a54ae9
[ 2811.507191][ T6100] RDX: 00000000001f4f33 RSI: 00000000200002c0 RDI: 0000000000000003
[ 2811.515174][ T6100] RBP: 00007f90e3dd7120 R08: 0000000000000000 R09: 0000000000000000
[ 2811.523142][ T6100] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 2811.531120][ T6100] R13: 000000000000000b R14: 00007f90e4b73f80 R15: 00007ffdb3bfd028
[ 2811.539119][ T6100]  </TASK>
22:46:45 executing program 0:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
ioctl$USBDEVFS_SETINTERFACE(r0, 0x80085504, &(0x7f0000000180)={0x4, 0x139e6})
r1 = syz_open_dev$loop(&(0x7f0000000000), 0x887f, 0x200)
r2 = openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(r2, 0x10f, 0x86)
ioctl$LOOP_SET_FD(r1, 0x4c00, r2)
write$ppp(r0, 0x0, 0xeffdffffffffffff)
r3 = socket$nl_audit(0x10, 0x3, 0x9)
sendmsg$AUDIT_MAKE_EQUIV(r3, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, 0x3f7, 0x400, 0x70bd2d, 0x25dfdbfc, {0x7, 0x7, './file0', './file0'}}, 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x4000000)

22:46:45 executing program 2:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
write$ppp(r0, &(0x7f00000000c0)="16fd44876a865693c58573a4c9d8bc2205716d82e27293da723e405cd55ffc9f72209a0a4a8b180b4695501ac221e37e3321dcfd948aef3e236faebb5adecd948f453a87b0df40bc4ecd73666e280cda1adae1a5236d59a3eb2ba05d7129f2aa", 0x60) (async, rerun: 64)
r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x218501, 0x0) (rerun: 64)
ioctl$PPPIOCGIDLE(r1, 0x8010743f, &(0x7f0000000040))

22:46:45 executing program 0:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
ioctl$USBDEVFS_SETINTERFACE(r0, 0x80085504, &(0x7f0000000180)={0x4, 0x139e6}) (async)
r1 = syz_open_dev$loop(&(0x7f0000000000), 0x887f, 0x200) (async)
r2 = openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(r2, 0x10f, 0x86)
ioctl$LOOP_SET_FD(r1, 0x4c00, r2) (async, rerun: 32)
write$ppp(r0, 0x0, 0xeffdffffffffffff) (async, rerun: 32)
r3 = socket$nl_audit(0x10, 0x3, 0x9)
sendmsg$AUDIT_MAKE_EQUIV(r3, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, 0x3f7, 0x400, 0x70bd2d, 0x25dfdbfc, {0x7, 0x7, './file0', './file0'}}, 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x4000000)

22:46:45 executing program 0:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
ioctl$USBDEVFS_SETINTERFACE(r0, 0x80085504, &(0x7f0000000180)={0x4, 0x139e6}) (async)
r1 = syz_open_dev$loop(&(0x7f0000000000), 0x887f, 0x200) (async)
r2 = openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(r2, 0x10f, 0x86)
ioctl$LOOP_SET_FD(r1, 0x4c00, r2) (async, rerun: 64)
write$ppp(r0, 0x0, 0xeffdffffffffffff) (rerun: 64)
r3 = socket$nl_audit(0x10, 0x3, 0x9)
sendmsg$AUDIT_MAKE_EQUIV(r3, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, 0x3f7, 0x400, 0x70bd2d, 0x25dfdbfc, {0x7, 0x7, './file0', './file0'}}, 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x4000000)

[ 2811.610352][ T6136] FAULT_INJECTION: forcing a failure.
[ 2811.610352][ T6136] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 2811.623620][ T6136] CPU: 1 PID: 6136 Comm: syz-executor.5 Not tainted 6.6.0-rc3-syzkaller-00165-g3b517966c561 #0
[ 2811.633978][ T6136] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/06/2023
[ 2811.644055][ T6136] Call Trace:
[ 2811.647341][ T6136]  <TASK>
[ 2811.650286][ T6136]  dump_stack_lvl+0xda/0x130
[ 2811.654904][ T6136]  dump_stack+0x15/0x20
[ 2811.659145][ T6136]  should_fail_ex+0x21f/0x230
[ 2811.663852][ T6136]  should_fail+0xb/0x10
[ 2811.668063][ T6136]  should_fail_usercopy+0x1a/0x20
[ 2811.673224][ T6136]  copy_page_from_iter_atomic+0x21c/0xcf0
[ 2811.678977][ T6136]  ? shmem_write_begin+0xa6/0x210
[ 2811.684137][ T6136]  ? shmem_write_begin+0x16d/0x210
[ 2811.689291][ T6136]  generic_perform_write+0x20c/0x410
[ 2811.694645][ T6136]  ? shmem_write_begin+0x210/0x210
[ 2811.699937][ T6136]  shmem_file_write_iter+0xc8/0xe0
[ 2811.705092][ T6136]  vfs_write+0x4ab/0x7d0
[ 2811.709447][ T6136]  ksys_write+0xeb/0x1a0
[ 2811.713836][ T6136]  __x64_sys_write+0x42/0x50
[ 2811.718503][ T6136]  do_syscall_64+0x41/0xc0
[ 2811.722928][ T6136]  entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 2811.728930][ T6136] RIP: 0033:0x7f90e4a54ae9
[ 2811.733399][ T6136] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48
22:46:45 executing program 0:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
ioctl$TUNSETSNDBUF(r0, 0x400454d4, &(0x7f0000000000)=0xb45aff9)
write$ppp(r0, 0x0, 0xeffdffffffffffff)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(r1, 0x10f, 0x86)
socket$tipc(0x1e, 0x7, 0x0)
r2 = openat$bsg(0xffffffffffffff9c, &(0x7f00000000c0), 0x601, 0x0)
r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100), 0x4000, 0x0)
ioctl$TUNGETVNETBE(r3, 0x800454df, &(0x7f0000000140))
ioctl$TUNSETOFFLOAD(r2, 0x400454d0, 0x14)
r4 = openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0)
r5 = openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(r5, 0x10f, 0x86)
sendmsg$AUDIT_USER_AVC(r5, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x74, 0x453, 0x100, 0x70bd29, 0x25dfdbfb, "90f6228ff7d92277d4525ec6a77c6c9482f73ed4c4b5dd487b883ca9dd6e263fd028d4880af32d2173f1fe812e8c906be15f536111f0d47f1483a4e2c2dc1fc67957757f1b6a3e7d60dee4db421cb47a3e2a29c25eff648512e0b75d58e9d815b4b5421a", ["", "", "", "", "", "", "", ""]}, 0x74}, 0x1, 0x0, 0x0, 0x4008054}, 0x20000810)
r6 = getuid()
quotactl_fd$Q_QUOTAON(r1, 0xffffffff80000200, r6, &(0x7f0000000300)='./file0\x00')
setsockopt$TIPC_MCAST_REPLICAST(r4, 0x10f, 0x86)
ioctl$TUNGETSNDBUF(r4, 0x800454d3, &(0x7f00000002c0))
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000580), 0xffffffffffffffff)
sendmsg$L2TP_CMD_SESSION_CREATE(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000540), 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x4c, r8, 0x200, 0x70bd2c, 0x25dfdbfb, {}, [@L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x5b}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}, @L2TP_ATTR_FD={0x8}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e21}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e24}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x24040881}, 0x20008000)
r9 = openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(r9, 0x10f, 0x86)
sendmsg$L2TP_CMD_SESSION_CREATE(r7, &(0x7f0000000280)={&(0x7f0000000180), 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x54, r8, 0x200, 0x70bd29, 0x25dfdbfb, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e21}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e22}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp=r9}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x40}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x4008001}, 0x80)
mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r1, 0x9)
ioctl$PPPIOCGIDLE(r1, 0x8010743f, &(0x7f0000000040))

22:46:45 executing program 3:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x5dec01, 0x0)
write$ppp(r0, &(0x7f00000002c0)="d3", 0xfffffdef)
socket$nl_audit(0x10, 0x3, 0x9)

22:46:45 executing program 1:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
write$ppp(r0, 0x0, 0xeffdffff)
syz_io_uring_setup(0x3cf3, &(0x7f0000000000)={0x0, 0xcc51, 0x800, 0x0, 0x1, 0x0, r0}, &(0x7f00000000c0)=<r1=>0x0, &(0x7f0000000100))
r2 = openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(r2, 0x10f, 0x86)
syz_io_uring_submit(r1, 0x0, &(0x7f0000000140)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x29, 0x0, @fd=r2, 0xffffffffffffff21, 0x0, 0x7})

22:46:45 executing program 4:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), 0xffffffffffffffff) (async)
r2 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000180)={'vcan0\x00', <r3=>0x0})
bind$can_j1939(r2, &(0x7f00000001c0)={0x1d, r3, 0x0, {0x1}}, 0x18)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000200)={'syztnl1\x00', &(0x7f0000000180)={'syztnl0\x00', r3, 0x2f, 0x9, 0x20, 0x5d00, 0x1, @private0, @empty, 0x1, 0x20, 0x3f, 0x9}}) (async)
r4 = openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(r4, 0x10f, 0x86) (async)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r4, &(0x7f0000000080)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="38000000149d8aeb3b28f8ffe6480a6b1801f8a18a7cdd27fd79ab87846c62d79f4384a36e2a724c5c2576803ce1", @ANYRES16=r1, @ANYBLOB="00042cbd7000fcdbdf2501000000060001000a00000014002000fc0200000000000000000000000000010500070002000000"], 0x38}, 0x1, 0x0, 0x0, 0x4000001}, 0x10)
write$ppp(0xffffffffffffffff, 0x0, 0x0)

22:46:45 executing program 5:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
write$ppp(r0, &(0x7f00000002c0)="d3", 0x1f4f33) (fail_nth: 70)

22:46:45 executing program 2:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
write$ppp(r0, &(0x7f00000002c0)="d3", 0x1)

[ 2811.753042][ T6136] RSP: 002b:00007f90e3dd70c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 2811.761533][ T6136] RAX: ffffffffffffffda RBX: 00007f90e4b73f80 RCX: 00007f90e4a54ae9
[ 2811.769502][ T6136] RDX: 00000000001f4f33 RSI: 00000000200002c0 RDI: 0000000000000003
[ 2811.777477][ T6136] RBP: 00007f90e3dd7120 R08: 0000000000000000 R09: 0000000000000000
[ 2811.785535][ T6136] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 2811.793639][ T6136] R13: 000000000000000b R14: 00007f90e4b73f80 R15: 00007ffdb3bfd028
[ 2811.801674][ T6136]  </TASK>
22:46:45 executing program 2:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
write$ppp(r0, &(0x7f00000002c0)="d3", 0x1)

22:46:45 executing program 0:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
ioctl$TUNSETSNDBUF(r0, 0x400454d4, &(0x7f0000000000)=0xb45aff9)
write$ppp(r0, 0x0, 0xeffdffffffffffff) (async, rerun: 64)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0) (rerun: 64)
setsockopt$TIPC_MCAST_REPLICAST(r1, 0x10f, 0x86)
socket$tipc(0x1e, 0x7, 0x0)
r2 = openat$bsg(0xffffffffffffff9c, &(0x7f00000000c0), 0x601, 0x0) (async)
r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100), 0x4000, 0x0)
ioctl$TUNGETVNETBE(r3, 0x800454df, &(0x7f0000000140))
ioctl$TUNSETOFFLOAD(r2, 0x400454d0, 0x14) (async)
r4 = openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0) (async)
r5 = openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(r5, 0x10f, 0x86) (async)
sendmsg$AUDIT_USER_AVC(r5, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x74, 0x453, 0x100, 0x70bd29, 0x25dfdbfb, "90f6228ff7d92277d4525ec6a77c6c9482f73ed4c4b5dd487b883ca9dd6e263fd028d4880af32d2173f1fe812e8c906be15f536111f0d47f1483a4e2c2dc1fc67957757f1b6a3e7d60dee4db421cb47a3e2a29c25eff648512e0b75d58e9d815b4b5421a", ["", "", "", "", "", "", "", ""]}, 0x74}, 0x1, 0x0, 0x0, 0x4008054}, 0x20000810)
r6 = getuid()
quotactl_fd$Q_QUOTAON(r1, 0xffffffff80000200, r6, &(0x7f0000000300)='./file0\x00') (async, rerun: 32)
setsockopt$TIPC_MCAST_REPLICAST(r4, 0x10f, 0x86) (async, rerun: 32)
ioctl$TUNGETSNDBUF(r4, 0x800454d3, &(0x7f00000002c0)) (async)
r7 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r8 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000580), 0xffffffffffffffff)
sendmsg$L2TP_CMD_SESSION_CREATE(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000540), 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x4c, r8, 0x200, 0x70bd2c, 0x25dfdbfb, {}, [@L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x5b}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}, @L2TP_ATTR_FD={0x8}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e21}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e24}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x24040881}, 0x20008000) (async, rerun: 64)
r9 = openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0) (rerun: 64)
setsockopt$TIPC_MCAST_REPLICAST(r9, 0x10f, 0x86) (async)
sendmsg$L2TP_CMD_SESSION_CREATE(r7, &(0x7f0000000280)={&(0x7f0000000180), 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x54, r8, 0x200, 0x70bd29, 0x25dfdbfb, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e21}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e22}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp=r9}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x40}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x4008001}, 0x80)
mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r1, 0x9)
ioctl$PPPIOCGIDLE(r1, 0x8010743f, &(0x7f0000000040))

22:46:45 executing program 1:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
write$ppp(r0, 0x0, 0xeffdffff) (async)
syz_io_uring_setup(0x3cf3, &(0x7f0000000000)={0x0, 0xcc51, 0x800, 0x0, 0x1, 0x0, r0}, &(0x7f00000000c0)=<r1=>0x0, &(0x7f0000000100)) (async)
r2 = openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(r2, 0x10f, 0x86) (async)
syz_io_uring_submit(r1, 0x0, &(0x7f0000000140)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x29, 0x0, @fd=r2, 0xffffffffffffff21, 0x0, 0x7})

22:46:45 executing program 4:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
write$ppp(r0, 0x0, 0x0)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(r1, 0x10f, 0x86)
getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000040), &(0x7f00000000c0)=0x14)
ioctl$PPPIOCGIDLE64(r0, 0x8010743f, &(0x7f0000000000))
r2 = openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(r2, 0x10f, 0x86)
ioctl$LOOP_SET_FD(r2, 0x4c00, r0)

22:46:45 executing program 0:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
ioctl$TUNSETSNDBUF(r0, 0x400454d4, &(0x7f0000000000)=0xb45aff9)
write$ppp(r0, 0x0, 0xeffdffffffffffff)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(r1, 0x10f, 0x86) (async)
setsockopt$TIPC_MCAST_REPLICAST(r1, 0x10f, 0x86)
socket$tipc(0x1e, 0x7, 0x0)
r2 = openat$bsg(0xffffffffffffff9c, &(0x7f00000000c0), 0x601, 0x0)
r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100), 0x4000, 0x0)
ioctl$TUNGETVNETBE(r3, 0x800454df, &(0x7f0000000140))
ioctl$TUNSETOFFLOAD(r2, 0x400454d0, 0x14)
r4 = openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0)
r5 = openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(r5, 0x10f, 0x86) (async)
setsockopt$TIPC_MCAST_REPLICAST(r5, 0x10f, 0x86)
sendmsg$AUDIT_USER_AVC(r5, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x74, 0x453, 0x100, 0x70bd29, 0x25dfdbfb, "90f6228ff7d92277d4525ec6a77c6c9482f73ed4c4b5dd487b883ca9dd6e263fd028d4880af32d2173f1fe812e8c906be15f536111f0d47f1483a4e2c2dc1fc67957757f1b6a3e7d60dee4db421cb47a3e2a29c25eff648512e0b75d58e9d815b4b5421a", ["", "", "", "", "", "", "", ""]}, 0x74}, 0x1, 0x0, 0x0, 0x4008054}, 0x20000810)
r6 = getuid()
quotactl_fd$Q_QUOTAON(r1, 0xffffffff80000200, r6, &(0x7f0000000300)='./file0\x00') (async)
quotactl_fd$Q_QUOTAON(r1, 0xffffffff80000200, r6, &(0x7f0000000300)='./file0\x00')
setsockopt$TIPC_MCAST_REPLICAST(r4, 0x10f, 0x86)
ioctl$TUNGETSNDBUF(r4, 0x800454d3, &(0x7f00000002c0)) (async)
ioctl$TUNGETSNDBUF(r4, 0x800454d3, &(0x7f00000002c0))
r7 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000580), 0xffffffffffffffff) (async)
r8 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000580), 0xffffffffffffffff)
sendmsg$L2TP_CMD_SESSION_CREATE(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000540), 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x4c, r8, 0x200, 0x70bd2c, 0x25dfdbfb, {}, [@L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x5b}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}, @L2TP_ATTR_FD={0x8}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e21}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e24}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x24040881}, 0x20008000)
r9 = openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(r9, 0x10f, 0x86)
sendmsg$L2TP_CMD_SESSION_CREATE(r7, &(0x7f0000000280)={&(0x7f0000000180), 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x54, r8, 0x200, 0x70bd29, 0x25dfdbfb, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e21}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e22}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp=r9}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x40}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x4008001}, 0x80) (async)
sendmsg$L2TP_CMD_SESSION_CREATE(r7, &(0x7f0000000280)={&(0x7f0000000180), 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x54, r8, 0x200, 0x70bd29, 0x25dfdbfb, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e21}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e22}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp=r9}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x40}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x4008001}, 0x80)
mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r1, 0x9) (async)
mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r1, 0x9)
ioctl$PPPIOCGIDLE(r1, 0x8010743f, &(0x7f0000000040)) (async)
ioctl$PPPIOCGIDLE(r1, 0x8010743f, &(0x7f0000000040))

22:46:45 executing program 4:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
write$ppp(r0, 0x0, 0x0) (async)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(r1, 0x10f, 0x86) (async)
getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000040), &(0x7f00000000c0)=0x14)
ioctl$PPPIOCGIDLE64(r0, 0x8010743f, &(0x7f0000000000))
r2 = openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(r2, 0x10f, 0x86)
ioctl$LOOP_SET_FD(r2, 0x4c00, r0)

22:46:45 executing program 2:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
write$ppp(r0, &(0x7f00000002c0)="d3", 0x1)

[ 2811.906755][ T6187] FAULT_INJECTION: forcing a failure.
[ 2811.906755][ T6187] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[ 2811.920393][ T6187] CPU: 0 PID: 6187 Comm: syz-executor.5 Not tainted 6.6.0-rc3-syzkaller-00165-g3b517966c561 #0
[ 2811.930871][ T6187] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/06/2023
[ 2811.940999][ T6187] Call Trace:
[ 2811.944288][ T6187]  <TASK>
[ 2811.947225][ T6187]  dump_stack_lvl+0xda/0x130
[ 2811.951904][ T6187]  dump_stack+0x15/0x20
[ 2811.956164][ T6187]  should_fail_ex+0x21f/0x230
[ 2811.960888][ T6187]  __should_fail_alloc_page+0xfd/0x110
[ 2811.966386][ T6187]  __alloc_pages+0x108/0x340
[ 2811.971008][ T6187]  vma_alloc_folio+0x6a3/0x8c0
[ 2811.975817][ T6187]  ? shmem_inode_acct_block+0x1ee/0x220
[ 2811.981521][ T6187]  shmem_get_folio_gfp+0x579/0xc30
[ 2811.986764][ T6187]  shmem_write_begin+0xa6/0x210
[ 2811.991760][ T6187]  generic_perform_write+0x1c9/0x410
[ 2811.997064][ T6187]  ? shmem_write_begin+0x210/0x210
[ 2812.002213][ T6187]  shmem_file_write_iter+0xc8/0xe0
[ 2812.007367][ T6187]  vfs_write+0x4ab/0x7d0
[ 2812.011622][ T6187]  ksys_write+0xeb/0x1a0
[ 2812.015879][ T6187]  __x64_sys_write+0x42/0x50
[ 2812.020554][ T6187]  do_syscall_64+0x41/0xc0
[ 2812.024970][ T6187]  entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 2812.030945][ T6187] RIP: 0033:0x7f90e4a54ae9
[ 2812.035431][ T6187] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48
22:46:46 executing program 3:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x5dec01, 0x0)
write$ppp(r0, &(0x7f00000002c0)="d3", 0xfffffdef)
socket$nl_audit(0x10, 0x3, 0x9)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x5dec01, 0x0) (async)
write$ppp(r0, &(0x7f00000002c0)="d3", 0xfffffdef) (async)
socket$nl_audit(0x10, 0x3, 0x9) (async)

22:46:46 executing program 1:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
write$ppp(r0, 0x0, 0xeffdffff)
syz_io_uring_setup(0x3cf3, &(0x7f0000000000)={0x0, 0xcc51, 0x800, 0x0, 0x1, 0x0, r0}, &(0x7f00000000c0)=<r1=>0x0, &(0x7f0000000100)) (async)
r2 = openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(r2, 0x10f, 0x86) (async)
syz_io_uring_submit(r1, 0x0, &(0x7f0000000140)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x29, 0x0, @fd=r2, 0xffffffffffffff21, 0x0, 0x7})

22:46:46 executing program 0:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
write$ppp(r0, 0x0, 0xeffdffffffffffff)
openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x10000, 0x0)

22:46:46 executing program 5:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
write$ppp(r0, &(0x7f00000002c0)="d3", 0x1f4f33) (fail_nth: 71)

22:46:46 executing program 2:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x28fe01, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000000), 0x4)
write$ppp(r0, &(0x7f00000002c0)="d3", 0x1)

22:46:46 executing program 0:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
write$ppp(r0, 0x0, 0xeffdffffffffffff) (async)
openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x10000, 0x0)

[ 2812.055150][ T6187] RSP: 002b:00007f90e3dd70c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 2812.063577][ T6187] RAX: ffffffffffffffda RBX: 00007f90e4b73f80 RCX: 00007f90e4a54ae9
[ 2812.071695][ T6187] RDX: 00000000001f4f33 RSI: 00000000200002c0 RDI: 0000000000000003
[ 2812.079723][ T6187] RBP: 00007f90e3dd7120 R08: 0000000000000000 R09: 0000000000000000
[ 2812.087740][ T6187] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 2812.095731][ T6187] R13: 000000000000000b R14: 00007f90e4b73f80 R15: 00007ffdb3bfd028
[ 2812.103819][ T6187]  </TASK>
22:46:46 executing program 4:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
write$ppp(r0, 0x0, 0x0) (async)
write$ppp(r0, 0x0, 0x0)
openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0) (async)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(r1, 0x10f, 0x86)
getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000040), &(0x7f00000000c0)=0x14)
ioctl$PPPIOCGIDLE64(r0, 0x8010743f, &(0x7f0000000000))
r2 = openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(r2, 0x10f, 0x86)
ioctl$LOOP_SET_FD(r2, 0x4c00, r0) (async)
ioctl$LOOP_SET_FD(r2, 0x4c00, r0)

22:46:46 executing program 1:
openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x71a601, 0x0)
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(r0, 0x10f, 0x86)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x420000, 0x0)
openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0)
socket$tipc(0x1e, 0x2, 0x0)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(r1, 0x10f, 0x86)
socket$tipc(0x1e, 0x5, 0x0)
r2 = openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(r2, 0x10f, 0x86)
setsockopt$TIPC_MCAST_REPLICAST(r2, 0x10f, 0x86)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x400000, 0x0)
r3 = openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(r3, 0x10f, 0x86)
r4 = openat$bsg(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r5 = openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(r5, 0x10f, 0x86)
ioctl$PPPIOCGIDLE32(r5, 0x8008743f, &(0x7f0000000000))
setsockopt$TIPC_MCAST_REPLICAST(r4, 0x10f, 0x86)
openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x10000, 0x0)
write$ppp(0xffffffffffffffff, 0x0, 0xfffffffffffffed0)

22:46:46 executing program 2:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x28fe01, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000000), 0x4)
write$ppp(r0, &(0x7f00000002c0)="d3", 0x1)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x28fe01, 0x0) (async)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000000), 0x4) (async)
write$ppp(r0, &(0x7f00000002c0)="d3", 0x1) (async)

22:46:46 executing program 0:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
write$ppp(r0, 0x0, 0xeffdffffffffffff)
openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x10000, 0x0)

22:46:46 executing program 4:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
write$ppp(r0, 0x0, 0x0)
ioctl$PPPIOCBRIDGECHAN(r0, 0x40047435, &(0x7f0000000000)=0x3)

22:46:46 executing program 1:
openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x71a601, 0x0)
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(r0, 0x10f, 0x86) (async)
setsockopt$TIPC_MCAST_REPLICAST(r0, 0x10f, 0x86)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x420000, 0x0) (async)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x420000, 0x0)
openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0)
socket$tipc(0x1e, 0x2, 0x0)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(r1, 0x10f, 0x86)
socket$tipc(0x1e, 0x5, 0x0) (async)
socket$tipc(0x1e, 0x5, 0x0)
openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0) (async)
r2 = openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(r2, 0x10f, 0x86)
setsockopt$TIPC_MCAST_REPLICAST(r2, 0x10f, 0x86)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x400000, 0x0)
r3 = openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(r3, 0x10f, 0x86)
openat$bsg(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async)
r4 = openat$bsg(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r5 = openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(r5, 0x10f, 0x86) (async)
setsockopt$TIPC_MCAST_REPLICAST(r5, 0x10f, 0x86)
ioctl$PPPIOCGIDLE32(r5, 0x8008743f, &(0x7f0000000000))
setsockopt$TIPC_MCAST_REPLICAST(r4, 0x10f, 0x86) (async)
setsockopt$TIPC_MCAST_REPLICAST(r4, 0x10f, 0x86)
openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x10000, 0x0)
write$ppp(0xffffffffffffffff, 0x0, 0xfffffffffffffed0)

[ 2812.181362][ T6211] FAULT_INJECTION: forcing a failure.
[ 2812.181362][ T6211] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 2812.194655][ T6211] CPU: 0 PID: 6211 Comm: syz-executor.5 Not tainted 6.6.0-rc3-syzkaller-00165-g3b517966c561 #0
[ 2812.205010][ T6211] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/06/2023
[ 2812.215091][ T6211] Call Trace:
[ 2812.218377][ T6211]  <TASK>
[ 2812.221307][ T6211]  dump_stack_lvl+0xda/0x130
[ 2812.225982][ T6211]  dump_stack+0x15/0x20
[ 2812.230158][ T6211]  should_fail_ex+0x21f/0x230
[ 2812.234903][ T6211]  should_fail+0xb/0x10
[ 2812.239081][ T6211]  should_fail_usercopy+0x1a/0x20
[ 2812.244196][ T6211]  copy_page_from_iter_atomic+0x21c/0xcf0
[ 2812.249933][ T6211]  ? shmem_write_begin+0xa6/0x210
[ 2812.255042][ T6211]  ? shmem_write_begin+0x16d/0x210
[ 2812.260221][ T6211]  generic_perform_write+0x20c/0x410
[ 2812.265601][ T6211]  ? shmem_write_begin+0x210/0x210
[ 2812.270784][ T6211]  shmem_file_write_iter+0xc8/0xe0
[ 2812.275928][ T6211]  vfs_write+0x4ab/0x7d0
[ 2812.280195][ T6211]  ksys_write+0xeb/0x1a0
[ 2812.284523][ T6211]  __x64_sys_write+0x42/0x50
[ 2812.289131][ T6211]  do_syscall_64+0x41/0xc0
[ 2812.293584][ T6211]  entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 2812.299509][ T6211] RIP: 0033:0x7f90e4a54ae9
[ 2812.303933][ T6211] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48
[ 2812.323687][ T6211] RSP: 002b:00007f90e3dd70c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 2812.332148][ T6211] RAX: ffffffffffffffda RBX: 00007f90e4b73f80 RCX: 00007f90e4a54ae9
[ 2812.340133][ T6211] RDX: 00000000001f4f33 RSI: 00000000200002c0 RDI: 0000000000000003
[ 2812.348111][ T6211] RBP: 00007f90e3dd7120 R08: 0000000000000000 R09: 0000000000000000
[ 2812.356093][ T6211] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 2812.364165][ T6211] R13: 000000000000000b R14: 00007f90e4b73f80 R15: 00007ffdb3bfd028
[ 2812.372170][ T6211]  </TASK>
22:46:46 executing program 3:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x5dec01, 0x0)
write$ppp(r0, &(0x7f00000002c0)="d3", 0xfffffdef)
socket$nl_audit(0x10, 0x3, 0x9)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x5dec01, 0x0) (async)
write$ppp(r0, &(0x7f00000002c0)="d3", 0xfffffdef) (async)
socket$nl_audit(0x10, 0x3, 0x9) (async)

22:46:46 executing program 2:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x28fe01, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000000), 0x4) (async)
write$ppp(r0, &(0x7f00000002c0)="d3", 0x1)

22:46:46 executing program 5:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
write$ppp(r0, &(0x7f00000002c0)="d3", 0x1f4f33) (fail_nth: 72)

22:46:46 executing program 0:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
write$ppp(r0, 0x0, 0xeffdffffffffffff)
mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x10000000)
syz_io_uring_setup(0x4b31, &(0x7f0000000280)={0x0, 0x9bb0, 0x0, 0x0, 0x16e}, &(0x7f0000000300)=<r1=>0x0, &(0x7f0000000340))
r2 = syz_open_dev$loop(&(0x7f0000000380), 0x6, 0x80000)
r3 = openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(r3, 0x10f, 0x86)
ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f0000000180)=0x2)
syz_io_uring_submit(r1, 0x0, &(0x7f00000003c0)=@IORING_OP_FSYNC={0x3, 0x20, 0x0, @fd=r2, 0x0, 0x0, 0x0, 0x0, 0x1})
r4 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x4021871, 0xffffffffffffffff, 0x10000000)
syz_io_uring_setup(0x237a, &(0x7f0000000080)={0x0, 0x50dc}, &(0x7f0000000000)=<r5=>0x0, &(0x7f0000000100))
syz_io_uring_submit(r5, r4, &(0x7f0000000140)=@IORING_OP_POLL_REMOVE)
r6 = openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(r6, 0x10f, 0x86)
syz_io_uring_submit(r1, r4, &(0x7f0000000040)=@IORING_OP_SEND={0x1a, 0x8, 0x0, r6, 0x0, &(0x7f0000000000)="75d221543ecc88", 0x7, 0x24008870, 0x1})

22:46:46 executing program 4:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
write$ppp(r0, 0x0, 0x0)
ioctl$PPPIOCBRIDGECHAN(r0, 0x40047435, &(0x7f0000000000)=0x3)

22:46:46 executing program 1:
openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x71a601, 0x0)
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(r0, 0x10f, 0x86)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x420000, 0x0)
openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0)
socket$tipc(0x1e, 0x2, 0x0) (async)
socket$tipc(0x1e, 0x2, 0x0)
openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0) (async)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(r1, 0x10f, 0x86) (async)
setsockopt$TIPC_MCAST_REPLICAST(r1, 0x10f, 0x86)
socket$tipc(0x1e, 0x5, 0x0)
openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0) (async)
r2 = openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(r2, 0x10f, 0x86)
setsockopt$TIPC_MCAST_REPLICAST(r2, 0x10f, 0x86) (async)
setsockopt$TIPC_MCAST_REPLICAST(r2, 0x10f, 0x86)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x400000, 0x0) (async)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x400000, 0x0)
openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0) (async)
r3 = openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(r3, 0x10f, 0x86)
r4 = openat$bsg(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r5 = openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(r5, 0x10f, 0x86)
ioctl$PPPIOCGIDLE32(r5, 0x8008743f, &(0x7f0000000000))
setsockopt$TIPC_MCAST_REPLICAST(r4, 0x10f, 0x86)
openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x10000, 0x0)
write$ppp(0xffffffffffffffff, 0x0, 0xfffffffffffffed0)

22:46:46 executing program 0:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
write$ppp(r0, 0x0, 0xeffdffffffffffff) (async)
mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x10000000) (async)
syz_io_uring_setup(0x4b31, &(0x7f0000000280)={0x0, 0x9bb0, 0x0, 0x0, 0x16e}, &(0x7f0000000300)=<r1=>0x0, &(0x7f0000000340)) (async)
r2 = syz_open_dev$loop(&(0x7f0000000380), 0x6, 0x80000) (async)
r3 = openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(r3, 0x10f, 0x86)
ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f0000000180)=0x2) (async, rerun: 64)
syz_io_uring_submit(r1, 0x0, &(0x7f00000003c0)=@IORING_OP_FSYNC={0x3, 0x20, 0x0, @fd=r2, 0x0, 0x0, 0x0, 0x0, 0x1}) (async, rerun: 64)
r4 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x4021871, 0xffffffffffffffff, 0x10000000) (async)
syz_io_uring_setup(0x237a, &(0x7f0000000080)={0x0, 0x50dc}, &(0x7f0000000000)=<r5=>0x0, &(0x7f0000000100))
syz_io_uring_submit(r5, r4, &(0x7f0000000140)=@IORING_OP_POLL_REMOVE) (async)
r6 = openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(r6, 0x10f, 0x86)
syz_io_uring_submit(r1, r4, &(0x7f0000000040)=@IORING_OP_SEND={0x1a, 0x8, 0x0, r6, 0x0, &(0x7f0000000000)="75d221543ecc88", 0x7, 0x24008870, 0x1})

22:46:46 executing program 2:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
write$ppp(r0, &(0x7f00000000c0)="78f0438fbdde2b816d17f4d7cf5804b6ae6e631023c49ff008322165009e4269e048987393b03b4cc90dd6afc026b01decd9f300e59afcfe00eac88e3d88d69af4f8823dae2da059ace8409a13577ea039477fa16bbad7d36395534c754734aa966faae12b008839f68955a074c001f8be8136dc055bc4cbfa364a624ef488deeb9e65ed058afbf0cebb044e01a6f9043d93901b1905e8ed51bbec1db1df7b804a963523ecca9d35733781863a9fcd5bd5e7d93b95088ec7194628f6099ee274999eb4cbd8672e995f83ff0db387a6aac21709a07153810cd2", 0xd9)
r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$PPPIOCGIDLE64(r1, 0x8010743f, &(0x7f0000000040))

[ 2812.455181][ T6228] FAULT_INJECTION: forcing a failure.
[ 2812.455181][ T6228] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[ 2812.470817][ T6228] CPU: 0 PID: 6228 Comm: syz-executor.5 Not tainted 6.6.0-rc3-syzkaller-00165-g3b517966c561 #0
[ 2812.481196][ T6228] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/06/2023
[ 2812.491269][ T6228] Call Trace:
[ 2812.494703][ T6228]  <TASK>
[ 2812.497669][ T6228]  dump_stack_lvl+0xda/0x130
[ 2812.502292][ T6228]  dump_stack+0x15/0x20
[ 2812.506478][ T6228]  should_fail_ex+0x21f/0x230
[ 2812.511259][ T6228]  __should_fail_alloc_page+0xfd/0x110
[ 2812.516782][ T6228]  __alloc_pages+0x108/0x340
[ 2812.521423][ T6228]  vma_alloc_folio+0x6a3/0x8c0
[ 2812.526269][ T6228]  ? shmem_inode_acct_block+0x1ee/0x220
[ 2812.531911][ T6228]  shmem_get_folio_gfp+0x579/0xc30
[ 2812.537116][ T6228]  shmem_write_begin+0xa6/0x210
[ 2812.542015][ T6228]  generic_perform_write+0x1c9/0x410
[ 2812.547331][ T6228]  ? shmem_write_begin+0x210/0x210
22:46:46 executing program 1:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x318141, 0x0)
write$ppp(r0, 0x0, 0xeffdffff)

[ 2812.552477][ T6228]  shmem_file_write_iter+0xc8/0xe0
[ 2812.557630][ T6228]  vfs_write+0x4ab/0x7d0
[ 2812.561919][ T6228]  ksys_write+0xeb/0x1a0
[ 2812.566178][ T6228]  __x64_sys_write+0x42/0x50
[ 2812.570800][ T6228]  do_syscall_64+0x41/0xc0
[ 2812.575255][ T6228]  entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 2812.581222][ T6228] RIP: 0033:0x7f90e4a54ae9
[ 2812.585768][ T6228] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48
22:46:46 executing program 4:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
write$ppp(r0, 0x0, 0x0)
ioctl$PPPIOCBRIDGECHAN(r0, 0x40047435, &(0x7f0000000000)=0x3)

22:46:46 executing program 1:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x318141, 0x0)
write$ppp(r0, 0x0, 0xeffdffff)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x318141, 0x0) (async)
write$ppp(r0, 0x0, 0xeffdffff) (async)

[ 2812.605489][ T6228] RSP: 002b:00007f90e3dd70c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 2812.613959][ T6228] RAX: ffffffffffffffda RBX: 00007f90e4b73f80 RCX: 00007f90e4a54ae9
[ 2812.621952][ T6228] RDX: 00000000001f4f33 RSI: 00000000200002c0 RDI: 0000000000000003
[ 2812.629971][ T6228] RBP: 00007f90e3dd7120 R08: 0000000000000000 R09: 0000000000000000
[ 2812.637969][ T6228] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 2812.646017][ T6228] R13: 000000000000000b R14: 00007f90e4b73f80 R15: 00007ffdb3bfd028
22:46:46 executing program 0:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
write$ppp(r0, 0x0, 0xeffdffffffffffff)
mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x10000000)
syz_io_uring_setup(0x4b31, &(0x7f0000000280)={0x0, 0x9bb0, 0x0, 0x0, 0x16e}, &(0x7f0000000300)=<r1=>0x0, &(0x7f0000000340))
r2 = syz_open_dev$loop(&(0x7f0000000380), 0x6, 0x80000)
r3 = openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(r3, 0x10f, 0x86)
ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f0000000180)=0x2)
syz_io_uring_submit(r1, 0x0, &(0x7f00000003c0)=@IORING_OP_FSYNC={0x3, 0x20, 0x0, @fd=r2, 0x0, 0x0, 0x0, 0x0, 0x1})
r4 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x4021871, 0xffffffffffffffff, 0x10000000)
syz_io_uring_setup(0x237a, &(0x7f0000000080)={0x0, 0x50dc}, &(0x7f0000000000)=<r5=>0x0, &(0x7f0000000100))
syz_io_uring_submit(r5, r4, &(0x7f0000000140)=@IORING_OP_POLL_REMOVE)
r6 = openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(r6, 0x10f, 0x86)
syz_io_uring_submit(r1, r4, &(0x7f0000000040)=@IORING_OP_SEND={0x1a, 0x8, 0x0, r6, 0x0, &(0x7f0000000000)="75d221543ecc88", 0x7, 0x24008870, 0x1})
openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0) (async)
write$ppp(r0, 0x0, 0xeffdffffffffffff) (async)
mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x10000000) (async)
syz_io_uring_setup(0x4b31, &(0x7f0000000280)={0x0, 0x9bb0, 0x0, 0x0, 0x16e}, &(0x7f0000000300), &(0x7f0000000340)) (async)
syz_open_dev$loop(&(0x7f0000000380), 0x6, 0x80000) (async)
openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0) (async)
setsockopt$TIPC_MCAST_REPLICAST(r3, 0x10f, 0x86) (async)
ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f0000000180)=0x2) (async)
syz_io_uring_submit(r1, 0x0, &(0x7f00000003c0)=@IORING_OP_FSYNC={0x3, 0x20, 0x0, @fd=r2, 0x0, 0x0, 0x0, 0x0, 0x1}) (async)
mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x4021871, 0xffffffffffffffff, 0x10000000) (async)
syz_io_uring_setup(0x237a, &(0x7f0000000080)={0x0, 0x50dc}, &(0x7f0000000000), &(0x7f0000000100)) (async)
syz_io_uring_submit(r5, r4, &(0x7f0000000140)=@IORING_OP_POLL_REMOVE) (async)
openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0) (async)
setsockopt$TIPC_MCAST_REPLICAST(r6, 0x10f, 0x86) (async)
syz_io_uring_submit(r1, r4, &(0x7f0000000040)=@IORING_OP_SEND={0x1a, 0x8, 0x0, r6, 0x0, &(0x7f0000000000)="75d221543ecc88", 0x7, 0x24008870, 0x1}) (async)

[ 2812.654023][ T6228]  </TASK>
22:46:46 executing program 5:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
write$ppp(r0, &(0x7f00000002c0)="d3", 0x1f4f33) (fail_nth: 73)

22:46:46 executing program 2:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
write$ppp(r0, &(0x7f00000000c0)="78f0438fbdde2b816d17f4d7cf5804b6ae6e631023c49ff008322165009e4269e048987393b03b4cc90dd6afc026b01decd9f300e59afcfe00eac88e3d88d69af4f8823dae2da059ace8409a13577ea039477fa16bbad7d36395534c754734aa966faae12b008839f68955a074c001f8be8136dc055bc4cbfa364a624ef488deeb9e65ed058afbf0cebb044e01a6f9043d93901b1905e8ed51bbec1db1df7b804a963523ecca9d35733781863a9fcd5bd5e7d93b95088ec7194628f6099ee274999eb4cbd8672e995f83ff0db387a6aac21709a07153810cd2", 0xd9) (async)
r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$PPPIOCGIDLE64(r1, 0x8010743f, &(0x7f0000000040))

22:46:46 executing program 4:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
write$ppp(r0, 0x0, 0x0)

22:46:46 executing program 1:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x318141, 0x0)
write$ppp(r0, 0x0, 0xeffdffff)

22:46:46 executing program 0:
sendmsg$AUDIT_USER_AVC(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000040)={&(0x7f00000000c0)={0x50, 0x453, 0x400, 0x70bd27, 0x25dfdbfb, "e2dff068aeafdb7578935f07a1d2da663b333c57daa35966d2ccc78a9e3c369af2afd7b6e3b0914f00bed7af0ed7ba37f7370268b73a897041d15795b71f6357", ["", "", "", "", "", ""]}, 0x50}, 0x1, 0x0, 0x0, 0x1}, 0x81)
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x880, 0x0)
sendmsg$AUDIT_DEL_RULE(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000780)={&(0x7f0000000300)={0x464, 0x3f4, 0x100, 0x70bd27, 0x25dfdbfb, {0x6, 0x2, 0x3e, [0x5, 0x47, 0x20, 0x9, 0x7, 0x81, 0xe00d, 0xfffffff8, 0x8b4c, 0x86, 0x1, 0x40, 0x5, 0x6, 0x8001, 0x6, 0x800, 0x3, 0x400, 0x86, 0x5, 0x0, 0x77, 0x0, 0xfffffffc, 0x800, 0x69a7, 0x8, 0x6, 0x3, 0x0, 0x9, 0x7, 0x7, 0x7f, 0x4, 0x8, 0xf3fb, 0x16a, 0x94, 0x6, 0x5, 0x1, 0x0, 0x10, 0x1ff, 0x4, 0x4, 0x9, 0xc116, 0x1, 0xffffffff, 0x8e8, 0x6, 0x100, 0x0, 0x6f, 0x2, 0xaca, 0x3, 0x1000, 0x329, 0x80000001, 0x3], [0x0, 0x32da, 0x2, 0x7, 0x200, 0x953f, 0x81, 0x10000, 0x0, 0x1, 0x10000, 0x0, 0x1, 0x0, 0x3, 0x2, 0x4, 0x1, 0x80000000, 0xfff, 0x4, 0x7, 0xbcb, 0xfffffff7, 0x6dd, 0x1e, 0x2, 0x1, 0x7, 0x1, 0x9d3, 0xfff, 0x101, 0x1, 0x6, 0xfffeffff, 0x81, 0x0, 0x0, 0x6, 0x0, 0xffffffff, 0x7, 0x4, 0x5, 0xfff, 0x2005, 0x5aa, 0x2, 0x5, 0x5, 0xc7, 0x80000000, 0x0, 0x3, 0x71, 0x5, 0x6, 0x80000001, 0x3ff, 0x6, 0x0, 0x4], [0x87, 0x3, 0x6, 0x8, 0x7285, 0x8, 0x100, 0x279, 0xb7a, 0x1db6, 0xcc, 0x6, 0x1, 0x168, 0x248, 0x9, 0x6, 0x8000, 0x9, 0x53dd4524, 0x6, 0x3, 0x80000001, 0x3ff, 0xffffff84, 0x8, 0x7, 0xfff, 0x32, 0x5, 0x0, 0x3, 0x8, 0x3e3, 0xed1, 0xde, 0x8000000, 0x101, 0xe5, 0x7fffffff, 0xfffffffb, 0x6, 0x20, 0x7, 0x7, 0x9, 0x4, 0x200, 0x3, 0x5, 0x3ff, 0xa64, 0x101, 0x5, 0x3, 0x6, 0x9, 0x5, 0x4, 0x5, 0x1, 0x3, 0x40, 0x73], [0x1, 0x7fff, 0x3ff, 0x4, 0x8, 0x8, 0x9, 0x0, 0xc5, 0x3ff, 0x1f, 0x80000000, 0x5, 0x10001, 0x0, 0x8, 0x8, 0x40, 0x0, 0x0, 0x8, 0x3, 0x1, 0x6, 0x80000000, 0xfffffff8, 0x3, 0x6, 0x8, 0x10001, 0x0, 0x3, 0x2, 0x7b3, 0x9a, 0x6, 0x1f, 0x1b3c, 0x5, 0x1, 0x3, 0x4, 0x6, 0x9, 0xda7, 0x1, 0xffffff8c, 0x5, 0x1, 0xef7, 0x5, 0x80000, 0xfffffffe, 0x92, 0x1, 0x4, 0x1, 0x7, 0x80000000, 0x1, 0x6, 0x5cd0, 0x5, 0x1], 0x44, ['/dev/bsg\x00', 'q\x00', '\x00', '/.:](.%\'&+\x00', '/dev/bsg\x00', '/dev/bsg\x00', '/dev/bsg\x00', '%*(#/!/\x00', '/dev/bsg\x00', '\x00']}, ["", ""]}, 0x464}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
write$ppp(r0, 0x0, 0xeffdffffffffffff)
getsockopt$TIPC_DEST_DROPPABLE(0xffffffffffffffff, 0x10f, 0x81, &(0x7f0000000880), &(0x7f00000008c0)=0x4)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000800), 0x200, 0x0)
ioctl$TUNSETDEBUG(r1, 0x400454c9, &(0x7f0000000840)=0x2)
sendmsg$AUDIT_USER_TTY(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x4c, 0x464, 0x10, 0x70bd29, 0x25dfdbfb, "5e1bc7a05ed0f747c81ba0bc6efdca44c97ee7bcb19befd2386ec57c50ab0430cf3b55a56f9b39a8273f9ca6665f3a01135d746374cac8cc267d", [""]}, 0x4c}, 0x1, 0x0, 0x0, 0x4c080}, 0x40000)

22:46:46 executing program 3:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
write$ppp(r0, &(0x7f00000002c0)="d3", 0xfffffdef)
r1 = syz_open_dev$loop(&(0x7f0000000040), 0x7fffffff, 0x208080)
ioctl$LOOP_CLR_FD(r1, 0x4c01)
ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000000)=0x6)

22:46:46 executing program 2:
openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0) (async)
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
write$ppp(r0, &(0x7f00000000c0)="78f0438fbdde2b816d17f4d7cf5804b6ae6e631023c49ff008322165009e4269e048987393b03b4cc90dd6afc026b01decd9f300e59afcfe00eac88e3d88d69af4f8823dae2da059ace8409a13577ea039477fa16bbad7d36395534c754734aa966faae12b008839f68955a074c001f8be8136dc055bc4cbfa364a624ef488deeb9e65ed058afbf0cebb044e01a6f9043d93901b1905e8ed51bbec1db1df7b804a963523ecca9d35733781863a9fcd5bd5e7d93b95088ec7194628f6099ee274999eb4cbd8672e995f83ff0db387a6aac21709a07153810cd2", 0xd9)
r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$PPPIOCGIDLE64(r1, 0x8010743f, &(0x7f0000000040))

22:46:46 executing program 1:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(r1, 0x10f, 0x86)
getsockopt$inet_tcp_int(r1, 0x6, 0x11, &(0x7f00000000c0), &(0x7f0000000040)=0x4)
write$ppp(r0, 0x0, 0xeffdffff)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x10, 0x4000, @fd_index=0x6, 0x5, 0x0, 0x0, 0x8, 0x1, {0x3}})

22:46:46 executing program 4:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
write$ppp(r0, 0x0, 0x0) (async)
write$ppp(r0, 0x0, 0x0)

[ 2812.837192][ T6271] FAULT_INJECTION: forcing a failure.
[ 2812.837192][ T6271] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 2812.850353][ T6271] CPU: 0 PID: 6271 Comm: syz-executor.5 Not tainted 6.6.0-rc3-syzkaller-00165-g3b517966c561 #0
[ 2812.860748][ T6271] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/06/2023
[ 2812.870822][ T6271] Call Trace:
[ 2812.874247][ T6271]  <TASK>
[ 2812.877202][ T6271]  dump_stack_lvl+0xda/0x130
[ 2812.881859][ T6271]  dump_stack+0x15/0x20
22:46:46 executing program 1:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0) (async)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(r1, 0x10f, 0x86) (async)
getsockopt$inet_tcp_int(r1, 0x6, 0x11, &(0x7f00000000c0), &(0x7f0000000040)=0x4)
write$ppp(r0, 0x0, 0xeffdffff)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x10, 0x4000, @fd_index=0x6, 0x5, 0x0, 0x0, 0x8, 0x1, {0x3}})

22:46:46 executing program 4:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
write$ppp(r0, 0x0, 0x0)

[ 2812.886107][ T6271]  should_fail_ex+0x21f/0x230
[ 2812.890836][ T6271]  should_fail+0xb/0x10
[ 2812.895026][ T6271]  should_fail_usercopy+0x1a/0x20
[ 2812.900077][ T6271]  copy_page_from_iter_atomic+0x21c/0xcf0
[ 2812.905909][ T6271]  ? shmem_write_begin+0xa6/0x210
[ 2812.911129][ T6271]  ? shmem_write_begin+0x16d/0x210
[ 2812.916269][ T6271]  generic_perform_write+0x20c/0x410
[ 2812.921587][ T6271]  ? shmem_write_begin+0x210/0x210
[ 2812.926762][ T6271]  shmem_file_write_iter+0xc8/0xe0
[ 2812.932003][ T6271]  vfs_write+0x4ab/0x7d0
22:46:47 executing program 1:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(r1, 0x10f, 0x86)
getsockopt$inet_tcp_int(r1, 0x6, 0x11, &(0x7f00000000c0), &(0x7f0000000040)=0x4)
write$ppp(r0, 0x0, 0xeffdffff)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x10, 0x4000, @fd_index=0x6, 0x5, 0x0, 0x0, 0x8, 0x1, {0x3}})
openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0) (async)
openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0) (async)
setsockopt$TIPC_MCAST_REPLICAST(r1, 0x10f, 0x86) (async)
getsockopt$inet_tcp_int(r1, 0x6, 0x11, &(0x7f00000000c0), &(0x7f0000000040)=0x4) (async)
write$ppp(r0, 0x0, 0xeffdffff) (async)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x10, 0x4000, @fd_index=0x6, 0x5, 0x0, 0x0, 0x8, 0x1, {0x3}}) (async)

[ 2812.936320][ T6271]  ksys_write+0xeb/0x1a0
[ 2812.940606][ T6271]  __x64_sys_write+0x42/0x50
[ 2812.945227][ T6271]  do_syscall_64+0x41/0xc0
[ 2812.949785][ T6271]  entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 2812.955768][ T6271] RIP: 0033:0x7f90e4a54ae9
[ 2812.960198][ T6271] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48
[ 2812.979830][ T6271] RSP: 002b:00007f90e3dd70c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 2812.988376][ T6271] RAX: ffffffffffffffda RBX: 00007f90e4b73f80 RCX: 00007f90e4a54ae9
[ 2812.996384][ T6271] RDX: 00000000001f4f33 RSI: 00000000200002c0 RDI: 0000000000000003
[ 2813.004444][ T6271] RBP: 00007f90e3dd7120 R08: 0000000000000000 R09: 0000000000000000
[ 2813.012473][ T6271] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 2813.020450][ T6271] R13: 000000000000000b R14: 00007f90e4b73f80 R15: 00007ffdb3bfd028
[ 2813.028462][ T6271]  </TASK>
22:46:47 executing program 4:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
syz_io_uring_setup(0x4b31, &(0x7f0000000280)={0x0, 0x9bb0, 0x0, 0x0, 0x16e}, &(0x7f0000000300)=<r1=>0x0, &(0x7f0000000340))
r2 = syz_open_dev$loop(&(0x7f0000000380), 0x6, 0x80000)
syz_io_uring_submit(r1, 0x0, &(0x7f00000003c0)=@IORING_OP_FSYNC={0x3, 0x20, 0x0, @fd=r2, 0x0, 0x0, 0x0, 0x0, 0x1})
syz_io_uring_setup(0x4fe4, &(0x7f0000000000)={0x0, 0x82ed, 0x4, 0x3, 0xd}, &(0x7f00000000c0), &(0x7f0000000100)=<r3=>0x0)
syz_io_uring_submit(r1, r3, &(0x7f0000000140)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x31, 0x2004, @fd_index=0x8, 0x5, 0x0, 0x0, 0x14, 0x1, {0x2}})
write$ppp(r0, 0x0, 0x0)

22:46:47 executing program 1:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
write$ppp(r0, 0x0, 0xeffdffff)
getsockopt$TIPC_NODE_RECVQ_DEPTH(r0, 0x10f, 0x83, &(0x7f0000000000), &(0x7f0000000040)=0x4)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x121000, 0x0)
r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000100), 0x180, 0x0)
ioctl$TUNSETFILTEREBPF(r1, 0x800454e1, &(0x7f0000000140)=r2)

22:46:47 executing program 2:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
write$ppp(r0, &(0x7f00000002c0)="d3", 0x1)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(r1, 0x10f, 0x86)
sendmsg$AUDIT_TTY_SET(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x18, 0x3f9, 0x800, 0x70bd29, 0x25dfdbfe, {0x0, 0x1}, ["", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x40}, 0x40800)

22:46:47 executing program 0:
sendmsg$AUDIT_USER_AVC(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000040)={&(0x7f00000000c0)={0x50, 0x453, 0x400, 0x70bd27, 0x25dfdbfb, "e2dff068aeafdb7578935f07a1d2da663b333c57daa35966d2ccc78a9e3c369af2afd7b6e3b0914f00bed7af0ed7ba37f7370268b73a897041d15795b71f6357", ["", "", "", "", "", ""]}, 0x50}, 0x1, 0x0, 0x0, 0x1}, 0x81) (async, rerun: 32)
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x880, 0x0) (async, rerun: 32)
sendmsg$AUDIT_DEL_RULE(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000780)={&(0x7f0000000300)={0x464, 0x3f4, 0x100, 0x70bd27, 0x25dfdbfb, {0x6, 0x2, 0x3e, [0x5, 0x47, 0x20, 0x9, 0x7, 0x81, 0xe00d, 0xfffffff8, 0x8b4c, 0x86, 0x1, 0x40, 0x5, 0x6, 0x8001, 0x6, 0x800, 0x3, 0x400, 0x86, 0x5, 0x0, 0x77, 0x0, 0xfffffffc, 0x800, 0x69a7, 0x8, 0x6, 0x3, 0x0, 0x9, 0x7, 0x7, 0x7f, 0x4, 0x8, 0xf3fb, 0x16a, 0x94, 0x6, 0x5, 0x1, 0x0, 0x10, 0x1ff, 0x4, 0x4, 0x9, 0xc116, 0x1, 0xffffffff, 0x8e8, 0x6, 0x100, 0x0, 0x6f, 0x2, 0xaca, 0x3, 0x1000, 0x329, 0x80000001, 0x3], [0x0, 0x32da, 0x2, 0x7, 0x200, 0x953f, 0x81, 0x10000, 0x0, 0x1, 0x10000, 0x0, 0x1, 0x0, 0x3, 0x2, 0x4, 0x1, 0x80000000, 0xfff, 0x4, 0x7, 0xbcb, 0xfffffff7, 0x6dd, 0x1e, 0x2, 0x1, 0x7, 0x1, 0x9d3, 0xfff, 0x101, 0x1, 0x6, 0xfffeffff, 0x81, 0x0, 0x0, 0x6, 0x0, 0xffffffff, 0x7, 0x4, 0x5, 0xfff, 0x2005, 0x5aa, 0x2, 0x5, 0x5, 0xc7, 0x80000000, 0x0, 0x3, 0x71, 0x5, 0x6, 0x80000001, 0x3ff, 0x6, 0x0, 0x4], [0x87, 0x3, 0x6, 0x8, 0x7285, 0x8, 0x100, 0x279, 0xb7a, 0x1db6, 0xcc, 0x6, 0x1, 0x168, 0x248, 0x9, 0x6, 0x8000, 0x9, 0x53dd4524, 0x6, 0x3, 0x80000001, 0x3ff, 0xffffff84, 0x8, 0x7, 0xfff, 0x32, 0x5, 0x0, 0x3, 0x8, 0x3e3, 0xed1, 0xde, 0x8000000, 0x101, 0xe5, 0x7fffffff, 0xfffffffb, 0x6, 0x20, 0x7, 0x7, 0x9, 0x4, 0x200, 0x3, 0x5, 0x3ff, 0xa64, 0x101, 0x5, 0x3, 0x6, 0x9, 0x5, 0x4, 0x5, 0x1, 0x3, 0x40, 0x73], [0x1, 0x7fff, 0x3ff, 0x4, 0x8, 0x8, 0x9, 0x0, 0xc5, 0x3ff, 0x1f, 0x80000000, 0x5, 0x10001, 0x0, 0x8, 0x8, 0x40, 0x0, 0x0, 0x8, 0x3, 0x1, 0x6, 0x80000000, 0xfffffff8, 0x3, 0x6, 0x8, 0x10001, 0x0, 0x3, 0x2, 0x7b3, 0x9a, 0x6, 0x1f, 0x1b3c, 0x5, 0x1, 0x3, 0x4, 0x6, 0x9, 0xda7, 0x1, 0xffffff8c, 0x5, 0x1, 0xef7, 0x5, 0x80000, 0xfffffffe, 0x92, 0x1, 0x4, 0x1, 0x7, 0x80000000, 0x1, 0x6, 0x5cd0, 0x5, 0x1], 0x44, ['/dev/bsg\x00', 'q\x00', '\x00', '/.:](.%\'&+\x00', '/dev/bsg\x00', '/dev/bsg\x00', '/dev/bsg\x00', '%*(#/!/\x00', '/dev/bsg\x00', '\x00']}, ["", ""]}, 0x464}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
write$ppp(r0, 0x0, 0xeffdffffffffffff) (async)
getsockopt$TIPC_DEST_DROPPABLE(0xffffffffffffffff, 0x10f, 0x81, &(0x7f0000000880), &(0x7f00000008c0)=0x4)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000800), 0x200, 0x0)
ioctl$TUNSETDEBUG(r1, 0x400454c9, &(0x7f0000000840)=0x2) (async, rerun: 64)
sendmsg$AUDIT_USER_TTY(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x4c, 0x464, 0x10, 0x70bd29, 0x25dfdbfb, "5e1bc7a05ed0f747c81ba0bc6efdca44c97ee7bcb19befd2386ec57c50ab0430cf3b55a56f9b39a8273f9ca6665f3a01135d746374cac8cc267d", [""]}, 0x4c}, 0x1, 0x0, 0x0, 0x4c080}, 0x40000) (rerun: 64)

22:46:47 executing program 5:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
write$ppp(r0, &(0x7f00000002c0)="d3", 0x1f4f33) (fail_nth: 74)

[ 2813.090100][ T6309] FAULT_INJECTION: forcing a failure.
[ 2813.090100][ T6309] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[ 2813.103496][ T6309] CPU: 0 PID: 6309 Comm: syz-executor.5 Not tainted 6.6.0-rc3-syzkaller-00165-g3b517966c561 #0
[ 2813.113869][ T6309] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/06/2023
[ 2813.124000][ T6309] Call Trace:
[ 2813.127355][ T6309]  <TASK>
[ 2813.130296][ T6309]  dump_stack_lvl+0xda/0x130
[ 2813.134907][ T6309]  dump_stack+0x15/0x20
[ 2813.139091][ T6309]  should_fail_ex+0x21f/0x230
[ 2813.144018][ T6309]  __should_fail_alloc_page+0xfd/0x110
[ 2813.149560][ T6309]  __alloc_pages+0x108/0x340
[ 2813.154256][ T6309]  vma_alloc_folio+0x6a3/0x8c0
[ 2813.159086][ T6309]  ? shmem_inode_acct_block+0x1ee/0x220
[ 2813.164739][ T6309]  shmem_get_folio_gfp+0x579/0xc30
[ 2813.169874][ T6309]  shmem_write_begin+0xa6/0x210
[ 2813.174775][ T6309]  generic_perform_write+0x1c9/0x410
[ 2813.180120][ T6309]  ? shmem_write_begin+0x210/0x210
[ 2813.185272][ T6309]  shmem_file_write_iter+0xc8/0xe0
22:46:47 executing program 1:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
write$ppp(r0, 0x0, 0xeffdffff) (async)
getsockopt$TIPC_NODE_RECVQ_DEPTH(r0, 0x10f, 0x83, &(0x7f0000000000), &(0x7f0000000040)=0x4)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x121000, 0x0) (async)
r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000100), 0x180, 0x0)
ioctl$TUNSETFILTEREBPF(r1, 0x800454e1, &(0x7f0000000140)=r2)

22:46:47 executing program 2:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
write$ppp(r0, &(0x7f00000002c0)="d3", 0x1) (async)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(r1, 0x10f, 0x86)
sendmsg$AUDIT_TTY_SET(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x18, 0x3f9, 0x800, 0x70bd29, 0x25dfdbfe, {0x0, 0x1}, ["", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x40}, 0x40800)

22:46:47 executing program 0:
sendmsg$AUDIT_USER_AVC(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000040)={&(0x7f00000000c0)={0x50, 0x453, 0x400, 0x70bd27, 0x25dfdbfb, "e2dff068aeafdb7578935f07a1d2da663b333c57daa35966d2ccc78a9e3c369af2afd7b6e3b0914f00bed7af0ed7ba37f7370268b73a897041d15795b71f6357", ["", "", "", "", "", ""]}, 0x50}, 0x1, 0x0, 0x0, 0x1}, 0x81)
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x880, 0x0)
sendmsg$AUDIT_DEL_RULE(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000780)={&(0x7f0000000300)={0x464, 0x3f4, 0x100, 0x70bd27, 0x25dfdbfb, {0x6, 0x2, 0x3e, [0x5, 0x47, 0x20, 0x9, 0x7, 0x81, 0xe00d, 0xfffffff8, 0x8b4c, 0x86, 0x1, 0x40, 0x5, 0x6, 0x8001, 0x6, 0x800, 0x3, 0x400, 0x86, 0x5, 0x0, 0x77, 0x0, 0xfffffffc, 0x800, 0x69a7, 0x8, 0x6, 0x3, 0x0, 0x9, 0x7, 0x7, 0x7f, 0x4, 0x8, 0xf3fb, 0x16a, 0x94, 0x6, 0x5, 0x1, 0x0, 0x10, 0x1ff, 0x4, 0x4, 0x9, 0xc116, 0x1, 0xffffffff, 0x8e8, 0x6, 0x100, 0x0, 0x6f, 0x2, 0xaca, 0x3, 0x1000, 0x329, 0x80000001, 0x3], [0x0, 0x32da, 0x2, 0x7, 0x200, 0x953f, 0x81, 0x10000, 0x0, 0x1, 0x10000, 0x0, 0x1, 0x0, 0x3, 0x2, 0x4, 0x1, 0x80000000, 0xfff, 0x4, 0x7, 0xbcb, 0xfffffff7, 0x6dd, 0x1e, 0x2, 0x1, 0x7, 0x1, 0x9d3, 0xfff, 0x101, 0x1, 0x6, 0xfffeffff, 0x81, 0x0, 0x0, 0x6, 0x0, 0xffffffff, 0x7, 0x4, 0x5, 0xfff, 0x2005, 0x5aa, 0x2, 0x5, 0x5, 0xc7, 0x80000000, 0x0, 0x3, 0x71, 0x5, 0x6, 0x80000001, 0x3ff, 0x6, 0x0, 0x4], [0x87, 0x3, 0x6, 0x8, 0x7285, 0x8, 0x100, 0x279, 0xb7a, 0x1db6, 0xcc, 0x6, 0x1, 0x168, 0x248, 0x9, 0x6, 0x8000, 0x9, 0x53dd4524, 0x6, 0x3, 0x80000001, 0x3ff, 0xffffff84, 0x8, 0x7, 0xfff, 0x32, 0x5, 0x0, 0x3, 0x8, 0x3e3, 0xed1, 0xde, 0x8000000, 0x101, 0xe5, 0x7fffffff, 0xfffffffb, 0x6, 0x20, 0x7, 0x7, 0x9, 0x4, 0x200, 0x3, 0x5, 0x3ff, 0xa64, 0x101, 0x5, 0x3, 0x6, 0x9, 0x5, 0x4, 0x5, 0x1, 0x3, 0x40, 0x73], [0x1, 0x7fff, 0x3ff, 0x4, 0x8, 0x8, 0x9, 0x0, 0xc5, 0x3ff, 0x1f, 0x80000000, 0x5, 0x10001, 0x0, 0x8, 0x8, 0x40, 0x0, 0x0, 0x8, 0x3, 0x1, 0x6, 0x80000000, 0xfffffff8, 0x3, 0x6, 0x8, 0x10001, 0x0, 0x3, 0x2, 0x7b3, 0x9a, 0x6, 0x1f, 0x1b3c, 0x5, 0x1, 0x3, 0x4, 0x6, 0x9, 0xda7, 0x1, 0xffffff8c, 0x5, 0x1, 0xef7, 0x5, 0x80000, 0xfffffffe, 0x92, 0x1, 0x4, 0x1, 0x7, 0x80000000, 0x1, 0x6, 0x5cd0, 0x5, 0x1], 0x44, ['/dev/bsg\x00', 'q\x00', '\x00', '/.:](.%\'&+\x00', '/dev/bsg\x00', '/dev/bsg\x00', '/dev/bsg\x00', '%*(#/!/\x00', '/dev/bsg\x00', '\x00']}, ["", ""]}, 0x464}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async, rerun: 64)
write$ppp(r0, 0x0, 0xeffdffffffffffff) (async, rerun: 64)
getsockopt$TIPC_DEST_DROPPABLE(0xffffffffffffffff, 0x10f, 0x81, &(0x7f0000000880), &(0x7f00000008c0)=0x4) (async)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000800), 0x200, 0x0)
ioctl$TUNSETDEBUG(r1, 0x400454c9, &(0x7f0000000840)=0x2) (async)
sendmsg$AUDIT_USER_TTY(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x4c, 0x464, 0x10, 0x70bd29, 0x25dfdbfb, "5e1bc7a05ed0f747c81ba0bc6efdca44c97ee7bcb19befd2386ec57c50ab0430cf3b55a56f9b39a8273f9ca6665f3a01135d746374cac8cc267d", [""]}, 0x4c}, 0x1, 0x0, 0x0, 0x4c080}, 0x40000)

22:46:47 executing program 4:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0) (async)
syz_io_uring_setup(0x4b31, &(0x7f0000000280)={0x0, 0x9bb0, 0x0, 0x0, 0x16e}, &(0x7f0000000300)=<r1=>0x0, &(0x7f0000000340))
r2 = syz_open_dev$loop(&(0x7f0000000380), 0x6, 0x80000)
syz_io_uring_submit(r1, 0x0, &(0x7f00000003c0)=@IORING_OP_FSYNC={0x3, 0x20, 0x0, @fd=r2, 0x0, 0x0, 0x0, 0x0, 0x1}) (async)
syz_io_uring_setup(0x4fe4, &(0x7f0000000000)={0x0, 0x82ed, 0x4, 0x3, 0xd}, &(0x7f00000000c0), &(0x7f0000000100)=<r3=>0x0)
syz_io_uring_submit(r1, r3, &(0x7f0000000140)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x31, 0x2004, @fd_index=0x8, 0x5, 0x0, 0x0, 0x14, 0x1, {0x2}}) (async, rerun: 32)
write$ppp(r0, 0x0, 0x0) (rerun: 32)

22:46:47 executing program 3:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
write$ppp(r0, &(0x7f00000002c0)="d3", 0xfffffdef) (async)
r1 = syz_open_dev$loop(&(0x7f0000000040), 0x7fffffff, 0x208080)
ioctl$LOOP_CLR_FD(r1, 0x4c01) (async)
ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000000)=0x6)

22:46:47 executing program 1:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
write$ppp(r0, 0x0, 0xeffdffff) (async)
getsockopt$TIPC_NODE_RECVQ_DEPTH(r0, 0x10f, 0x83, &(0x7f0000000000), &(0x7f0000000040)=0x4)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x121000, 0x0) (async)
r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000100), 0x180, 0x0)
ioctl$TUNSETFILTEREBPF(r1, 0x800454e1, &(0x7f0000000140)=r2)

[ 2813.190485][ T6309]  vfs_write+0x4ab/0x7d0
[ 2813.194796][ T6309]  ksys_write+0xeb/0x1a0
[ 2813.199062][ T6309]  __x64_sys_write+0x42/0x50
[ 2813.203717][ T6309]  do_syscall_64+0x41/0xc0
[ 2813.208164][ T6309]  entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 2813.214092][ T6309] RIP: 0033:0x7f90e4a54ae9
[ 2813.218527][ T6309] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48
22:46:47 executing program 1:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x50a680, 0x0)
sendmsg$AUDIT_TRIM(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x3f6, 0x4, 0x70bd2a, 0x25dfdbfc, "", ["", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x883}, 0x810)
write$ppp(r0, 0x0, 0xeffe003e)

22:46:47 executing program 1:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x50a680, 0x0)
sendmsg$AUDIT_TRIM(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x3f6, 0x4, 0x70bd2a, 0x25dfdbfc, "", ["", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x883}, 0x810) (async)
write$ppp(r0, 0x0, 0xeffe003e)

22:46:47 executing program 0:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x109000, 0x0)
write$ppp(r0, 0x0, 0xeffdffffffffffff)
r1 = syz_open_dev$loop(&(0x7f0000000000), 0x3, 0xa000)
r2 = socket$inet_smc(0x2b, 0x1, 0x0)
ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r2)

22:46:47 executing program 2:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
write$ppp(r0, &(0x7f00000002c0)="d3", 0x1) (async, rerun: 64)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0) (rerun: 64)
setsockopt$TIPC_MCAST_REPLICAST(r1, 0x10f, 0x86)
sendmsg$AUDIT_TTY_SET(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x18, 0x3f9, 0x800, 0x70bd29, 0x25dfdbfe, {0x0, 0x1}, ["", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x40}, 0x40800)

[ 2813.238300][ T6309] RSP: 002b:00007f90e3dd70c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 2813.246766][ T6309] RAX: ffffffffffffffda RBX: 00007f90e4b73f80 RCX: 00007f90e4a54ae9
[ 2813.254807][ T6309] RDX: 00000000001f4f33 RSI: 00000000200002c0 RDI: 0000000000000003
[ 2813.262797][ T6309] RBP: 00007f90e3dd7120 R08: 0000000000000000 R09: 0000000000000000
[ 2813.270834][ T6309] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 2813.278890][ T6309] R13: 000000000000000b R14: 00007f90e4b73f80 R15: 00007ffdb3bfd028
[ 2813.286922][ T6309]  </TASK>
22:46:47 executing program 4:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0) (async)
syz_io_uring_setup(0x4b31, &(0x7f0000000280)={0x0, 0x9bb0, 0x0, 0x0, 0x16e}, &(0x7f0000000300)=<r1=>0x0, &(0x7f0000000340))
r2 = syz_open_dev$loop(&(0x7f0000000380), 0x6, 0x80000)
syz_io_uring_submit(r1, 0x0, &(0x7f00000003c0)=@IORING_OP_FSYNC={0x3, 0x20, 0x0, @fd=r2, 0x0, 0x0, 0x0, 0x0, 0x1}) (async)
syz_io_uring_setup(0x4fe4, &(0x7f0000000000)={0x0, 0x82ed, 0x4, 0x3, 0xd}, &(0x7f00000000c0), &(0x7f0000000100)=<r3=>0x0)
syz_io_uring_submit(r1, r3, &(0x7f0000000140)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x31, 0x2004, @fd_index=0x8, 0x5, 0x0, 0x0, 0x14, 0x1, {0x2}}) (async)
write$ppp(r0, 0x0, 0x0)

22:46:47 executing program 5:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
write$ppp(r0, &(0x7f00000002c0)="d3", 0x1f4f33) (fail_nth: 75)

22:46:47 executing program 1:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x50a680, 0x0)
sendmsg$AUDIT_TRIM(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x3f6, 0x4, 0x70bd2a, 0x25dfdbfc, "", ["", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x883}, 0x810) (async)
write$ppp(r0, 0x0, 0xeffe003e)

22:46:47 executing program 0:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x109000, 0x0) (async)
write$ppp(r0, 0x0, 0xeffdffffffffffff) (async)
r1 = syz_open_dev$loop(&(0x7f0000000000), 0x3, 0xa000) (async)
r2 = socket$inet_smc(0x2b, 0x1, 0x0)
ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r2)

22:46:47 executing program 2:
openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
write$ppp(0xffffffffffffffff, &(0x7f00000002c0)="db", 0x1)

22:46:47 executing program 4:
openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(r0, 0x10f, 0x86)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f00000000c0), 0x46535c5a6d7d3467, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(r1, 0x10f, 0x86)
r2 = openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(r2, 0x10f, 0x86)
r3 = openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0xa0800, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(r3, 0x10f, 0x86)
r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x111000, 0x0)
write$ppp(r4, 0x0, 0x9d342bdf3517338b)

[ 2813.384623][ T6347] FAULT_INJECTION: forcing a failure.
[ 2813.384623][ T6347] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 2813.397753][ T6347] CPU: 0 PID: 6347 Comm: syz-executor.5 Not tainted 6.6.0-rc3-syzkaller-00165-g3b517966c561 #0
[ 2813.408227][ T6347] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/06/2023
[ 2813.418371][ T6347] Call Trace:
[ 2813.421661][ T6347]  <TASK>
[ 2813.424684][ T6347]  dump_stack_lvl+0xda/0x130
[ 2813.429361][ T6347]  dump_stack+0x15/0x20
[ 2813.433598][ T6347]  should_fail_ex+0x21f/0x230
[ 2813.438293][ T6347]  should_fail+0xb/0x10
[ 2813.442460][ T6347]  should_fail_usercopy+0x1a/0x20
[ 2813.447557][ T6347]  copy_page_from_iter_atomic+0x21c/0xcf0
[ 2813.453383][ T6347]  ? shmem_write_begin+0xa6/0x210
[ 2813.458449][ T6347]  ? shmem_write_begin+0x16d/0x210
[ 2813.463673][ T6347]  generic_perform_write+0x20c/0x410
[ 2813.468998][ T6347]  ? shmem_write_begin+0x210/0x210
[ 2813.474124][ T6347]  shmem_file_write_iter+0xc8/0xe0
[ 2813.479353][ T6347]  vfs_write+0x4ab/0x7d0
22:46:47 executing program 3:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
write$ppp(r0, &(0x7f00000002c0)="d3", 0xfffffdef)
r1 = syz_open_dev$loop(&(0x7f0000000040), 0x7fffffff, 0x208080)
ioctl$LOOP_CLR_FD(r1, 0x4c01)
ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000000)=0x6)

22:46:47 executing program 1:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x6f9580, 0x0)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x4000, 0x0)
sendmsg$AUDIT_TRIM(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x10, 0x3f6, 0x20, 0x70bd2b, 0x25dfdbfd, "", ["", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x4}, 0x20000041)
write$ppp(r0, 0x0, 0xeffdffff)

22:46:47 executing program 2:
openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
write$ppp(0xffffffffffffffff, &(0x7f00000002c0)="db", 0x1)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0) (async)
write$ppp(0xffffffffffffffff, &(0x7f00000002c0)="db", 0x1) (async)

[ 2813.483675][ T6347]  ksys_write+0xeb/0x1a0
[ 2813.488117][ T6347]  __x64_sys_write+0x42/0x50
[ 2813.492846][ T6347]  do_syscall_64+0x41/0xc0
[ 2813.497358][ T6347]  entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 2813.503314][ T6347] RIP: 0033:0x7f90e4a54ae9
[ 2813.507747][ T6347] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48
[ 2813.527371][ T6347] RSP: 002b:00007f90e3dd70c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 2813.535833][ T6347] RAX: ffffffffffffffda RBX: 00007f90e4b73f80 RCX: 00007f90e4a54ae9
[ 2813.543822][ T6347] RDX: 00000000001f4f33 RSI: 00000000200002c0 RDI: 0000000000000003
[ 2813.551809][ T6347] RBP: 00007f90e3dd7120 R08: 0000000000000000 R09: 0000000000000000
[ 2813.559866][ T6347] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 2813.567853][ T6347] R13: 000000000000000b R14: 00007f90e4b73f80 R15: 00007ffdb3bfd028
[ 2813.575835][ T6347]  </TASK>
22:46:47 executing program 5:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
write$ppp(r0, &(0x7f00000002c0)="d3", 0x1f4f33) (fail_nth: 76)

22:46:47 executing program 0:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x109000, 0x0)
write$ppp(r0, 0x0, 0xeffdffffffffffff) (async, rerun: 64)
r1 = syz_open_dev$loop(&(0x7f0000000000), 0x3, 0xa000) (rerun: 64)
r2 = socket$inet_smc(0x2b, 0x1, 0x0)
ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r2)

22:46:47 executing program 4:
openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0) (async)
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(r0, 0x10f, 0x86)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f00000000c0), 0x46535c5a6d7d3467, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(r1, 0x10f, 0x86)
r2 = openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(r2, 0x10f, 0x86) (async)
r3 = openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0xa0800, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(r3, 0x10f, 0x86)
r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x111000, 0x0)
write$ppp(r4, 0x0, 0x9d342bdf3517338b)

22:46:47 executing program 2:
openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
write$ppp(0xffffffffffffffff, &(0x7f00000002c0)="db", 0x1)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0) (async)
write$ppp(0xffffffffffffffff, &(0x7f00000002c0)="db", 0x1) (async)

22:46:47 executing program 1:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x6f9580, 0x0) (async)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x4000, 0x0)
sendmsg$AUDIT_TRIM(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x10, 0x3f6, 0x20, 0x70bd2b, 0x25dfdbfd, "", ["", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x4}, 0x20000041) (async)
write$ppp(r0, 0x0, 0xeffdffff)

22:46:47 executing program 4:
openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(r0, 0x10f, 0x86)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f00000000c0), 0x46535c5a6d7d3467, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(r1, 0x10f, 0x86) (async)
setsockopt$TIPC_MCAST_REPLICAST(r1, 0x10f, 0x86)
r2 = openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(r2, 0x10f, 0x86)
r3 = openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0xa0800, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(r3, 0x10f, 0x86)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x111000, 0x0) (async)
r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x111000, 0x0)
write$ppp(r4, 0x0, 0x9d342bdf3517338b) (async)
write$ppp(r4, 0x0, 0x9d342bdf3517338b)

22:46:47 executing program 0:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x24, 0x0, 0xed453e0af5404c5, 0x70bd27, 0x25dfdbfb, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e21}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}]}, 0x24}}, 0x20008050)
write$ppp(r0, 0x0, 0xeffdffffffffffff)
r1 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000180)={'vcan0\x00', <r2=>0x0})
bind$can_j1939(r1, &(0x7f00000001c0)={0x1d, r2, 0x0, {0x1}}, 0x18)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f00000001c0)={'ip6_vti0\x00', &(0x7f0000000140)={'syztnl0\x00', r2, 0x2f, 0x0, 0xaa, 0x7b, 0x72, @private0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x7, 0x10, 0x7fff, 0x4}})

22:46:47 executing program 1:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x6f9580, 0x0)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x4000, 0x0)
sendmsg$AUDIT_TRIM(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x10, 0x3f6, 0x20, 0x70bd2b, 0x25dfdbfd, "", ["", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x4}, 0x20000041) (async)
write$ppp(r0, 0x0, 0xeffdffff)

22:46:47 executing program 2:
prctl$PR_SET_NAME(0xf, &(0x7f0000000000)='-\x00')
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(r0, 0x10f, 0x86)
write$ppp(r0, &(0x7f00000002c0)="d3", 0x1)
ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff)

[ 2813.672228][ T6375] FAULT_INJECTION: forcing a failure.
[ 2813.672228][ T6375] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[ 2813.685562][ T6375] CPU: 1 PID: 6375 Comm: syz-executor.5 Not tainted 6.6.0-rc3-syzkaller-00165-g3b517966c561 #0
[ 2813.695932][ T6375] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/06/2023
[ 2813.706080][ T6375] Call Trace:
[ 2813.709377][ T6375]  <TASK>
[ 2813.712314][ T6375]  dump_stack_lvl+0xda/0x130
[ 2813.716937][ T6375]  dump_stack+0x15/0x20
22:46:47 executing program 0:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x24, 0x0, 0xed453e0af5404c5, 0x70bd27, 0x25dfdbfb, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e21}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}]}, 0x24}}, 0x20008050) (async)
write$ppp(r0, 0x0, 0xeffdffffffffffff) (async)
r1 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000180)={'vcan0\x00', <r2=>0x0})
bind$can_j1939(r1, &(0x7f00000001c0)={0x1d, r2, 0x0, {0x1}}, 0x18) (async, rerun: 32)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f00000001c0)={'ip6_vti0\x00', &(0x7f0000000140)={'syztnl0\x00', r2, 0x2f, 0x0, 0xaa, 0x7b, 0x72, @private0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x7, 0x10, 0x7fff, 0x4}}) (rerun: 32)

22:46:47 executing program 4:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x1ded01, 0x0)
write$ppp(r0, 0x0, 0x0)
ioctl$PPPIOCSCOMPRESS(r0, 0x4010744d)

22:46:47 executing program 1:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5fec01, 0x0)
write$ppp(r0, 0x0, 0xeffdffff)

[ 2813.721119][ T6375]  should_fail_ex+0x21f/0x230
[ 2813.725891][ T6375]  __should_fail_alloc_page+0xfd/0x110
[ 2813.731375][ T6375]  __alloc_pages+0x108/0x340
[ 2813.735997][ T6375]  vma_alloc_folio+0x6a3/0x8c0
[ 2813.740844][ T6375]  ? shmem_inode_acct_block+0x1ee/0x220
[ 2813.746501][ T6375]  shmem_get_folio_gfp+0x579/0xc30
[ 2813.751670][ T6375]  shmem_write_begin+0xa6/0x210
[ 2813.756548][ T6375]  generic_perform_write+0x1c9/0x410
[ 2813.762079][ T6375]  ? shmem_write_begin+0x210/0x210
[ 2813.767231][ T6375]  shmem_file_write_iter+0xc8/0xe0
[ 2813.772456][ T6375]  vfs_write+0x4ab/0x7d0
[ 2813.776746][ T6375]  ksys_write+0xeb/0x1a0
[ 2813.781052][ T6375]  __x64_sys_write+0x42/0x50
[ 2813.785703][ T6375]  do_syscall_64+0x41/0xc0
[ 2813.790264][ T6375]  entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 2813.796302][ T6375] RIP: 0033:0x7f90e4a54ae9
[ 2813.800742][ T6375] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48
22:46:47 executing program 4:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x1ded01, 0x0)
write$ppp(r0, 0x0, 0x0)
ioctl$PPPIOCSCOMPRESS(r0, 0x4010744d)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x1ded01, 0x0) (async)
write$ppp(r0, 0x0, 0x0) (async)
ioctl$PPPIOCSCOMPRESS(r0, 0x4010744d) (async)

22:46:47 executing program 3:
r0 = getuid()
setuid(r0)
quotactl_fd$Q_QUOTAON(0xffffffffffffffff, 0xffffffff80000202, r0, &(0x7f0000000000)='./file0\x00')
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
write$ppp(r1, &(0x7f00000002c0)="d3", 0xfffffdef)

22:46:47 executing program 1:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5fec01, 0x0)
write$ppp(r0, 0x0, 0xeffdffff)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5fec01, 0x0) (async)
write$ppp(r0, 0x0, 0xeffdffff) (async)

22:46:47 executing program 2:
prctl$PR_SET_NAME(0xf, &(0x7f0000000000)='-\x00') (async)
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(r0, 0x10f, 0x86) (async)
write$ppp(r0, &(0x7f00000002c0)="d3", 0x1) (async)
ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff)

22:46:47 executing program 0:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x24, 0x0, 0xed453e0af5404c5, 0x70bd27, 0x25dfdbfb, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e21}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}]}, 0x24}}, 0x20008050) (async, rerun: 32)
write$ppp(r0, 0x0, 0xeffdffffffffffff) (rerun: 32)
r1 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000180)={'vcan0\x00', <r2=>0x0})
bind$can_j1939(r1, &(0x7f00000001c0)={0x1d, r2, 0x0, {0x1}}, 0x18) (async)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f00000001c0)={'ip6_vti0\x00', &(0x7f0000000140)={'syztnl0\x00', r2, 0x2f, 0x0, 0xaa, 0x7b, 0x72, @private0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x7, 0x10, 0x7fff, 0x4}})

22:46:47 executing program 1:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5fec01, 0x0)
write$ppp(r0, 0x0, 0xeffdffff)

[ 2813.820376][ T6375] RSP: 002b:00007f90e3dd70c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 2813.828880][ T6375] RAX: ffffffffffffffda RBX: 00007f90e4b73f80 RCX: 00007f90e4a54ae9
[ 2813.836893][ T6375] RDX: 00000000001f4f33 RSI: 00000000200002c0 RDI: 0000000000000003
[ 2813.844974][ T6375] RBP: 00007f90e3dd7120 R08: 0000000000000000 R09: 0000000000000000
[ 2813.852967][ T6375] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 2813.860931][ T6375] R13: 000000000000000b R14: 00007f90e4b73f80 R15: 00007ffdb3bfd028
[ 2813.868967][ T6375]  </TASK>
22:46:47 executing program 5:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
write$ppp(r0, &(0x7f00000002c0)="d3", 0x1f4f33) (fail_nth: 77)

22:46:47 executing program 0:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(r0, 0x10f, 0x86)
connect$can_j1939(r0, &(0x7f0000000000)={0x1d, 0x0, 0x1, {0x0, 0xff, 0x3}, 0xff}, 0x18)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
write$ppp(r1, 0x0, 0xeffdffffffffffff)

22:46:47 executing program 2:
prctl$PR_SET_NAME(0xf, &(0x7f0000000000)='-\x00')
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(r0, 0x10f, 0x86)
write$ppp(r0, &(0x7f00000002c0)="d3", 0x1)
ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff)

22:46:47 executing program 4:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x1ded01, 0x0)
write$ppp(r0, 0x0, 0x0)
ioctl$PPPIOCSCOMPRESS(r0, 0x4010744d)

22:46:48 executing program 2:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000140)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1})
write$ppp(r0, &(0x7f00000002c0)="d3", 0x1)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0)
bind$can_j1939(r0, &(0x7f0000000180)={0x1d, 0x0, 0x0, {0x0, 0x1}, 0x2}, 0x18)
setsockopt$TIPC_MCAST_REPLICAST(r1, 0x10f, 0x86)
ioctl$PPPIOCSCOMPRESS(r1, 0x4010744d)
sendmsg$AUDIT_TTY_GET(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x3f8, 0x200, 0x70bd2b, 0x25dfdbfb, "", ["", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x20004000}, 0x10)

22:46:48 executing program 0:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(r0, 0x10f, 0x86)
connect$can_j1939(r0, &(0x7f0000000000)={0x1d, 0x0, 0x1, {0x0, 0xff, 0x3}, 0xff}, 0x18) (async)
connect$can_j1939(r0, &(0x7f0000000000)={0x1d, 0x0, 0x1, {0x0, 0xff, 0x3}, 0xff}, 0x18)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
write$ppp(r1, 0x0, 0xeffdffffffffffff)

[ 2813.918695][ T6406] FAULT_INJECTION: forcing a failure.
[ 2813.918695][ T6406] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 2813.931797][ T6406] CPU: 1 PID: 6406 Comm: syz-executor.5 Not tainted 6.6.0-rc3-syzkaller-00165-g3b517966c561 #0
[ 2813.942149][ T6406] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/06/2023
[ 2813.952297][ T6406] Call Trace:
[ 2813.955592][ T6406]  <TASK>
[ 2813.958533][ T6406]  dump_stack_lvl+0xda/0x130
[ 2813.963192][ T6406]  dump_stack+0x15/0x20
[ 2813.967430][ T6406]  should_fail_ex+0x21f/0x230
[ 2813.972126][ T6406]  should_fail+0xb/0x10
[ 2813.976300][ T6406]  should_fail_usercopy+0x1a/0x20
[ 2813.981376][ T6406]  copy_page_from_iter_atomic+0x21c/0xcf0
[ 2813.987148][ T6406]  ? shmem_write_begin+0xa6/0x210
[ 2813.992225][ T6406]  ? shmem_write_begin+0x16d/0x210
[ 2813.997390][ T6406]  generic_perform_write+0x20c/0x410
[ 2814.002699][ T6406]  ? shmem_write_begin+0x210/0x210
[ 2814.007875][ T6406]  shmem_file_write_iter+0xc8/0xe0
[ 2814.013017][ T6406]  vfs_write+0x4ab/0x7d0
[ 2814.017350][ T6406]  ksys_write+0xeb/0x1a0
[ 2814.021684][ T6406]  __x64_sys_write+0x42/0x50
[ 2814.026359][ T6406]  do_syscall_64+0x41/0xc0
[ 2814.030803][ T6406]  entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 2814.036740][ T6406] RIP: 0033:0x7f90e4a54ae9
[ 2814.041205][ T6406] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48
[ 2814.060826][ T6406] RSP: 002b:00007f90e3dd70c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
22:46:48 executing program 5:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
write$ppp(r0, &(0x7f00000002c0)="d3", 0x1f4f33) (fail_nth: 78)

22:46:48 executing program 4:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x5dec01, 0x0)
write$ppp(r0, 0x0, 0x0)
getsockopt$TIPC_NODE_RECVQ_DEPTH(r0, 0x10f, 0x83, &(0x7f0000000000), &(0x7f0000000080)=0x4)

[ 2814.069327][ T6406] RAX: ffffffffffffffda RBX: 00007f90e4b73f80 RCX: 00007f90e4a54ae9
[ 2814.077370][ T6406] RDX: 00000000001f4f33 RSI: 00000000200002c0 RDI: 0000000000000003
[ 2814.085354][ T6406] RBP: 00007f90e3dd7120 R08: 0000000000000000 R09: 0000000000000000
[ 2814.093332][ T6406] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 2814.101327][ T6406] R13: 000000000000000b R14: 00007f90e4b73f80 R15: 00007ffdb3bfd028
[ 2814.109318][ T6406]  </TASK>
22:46:48 executing program 2:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000140)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}) (async, rerun: 64)
write$ppp(r0, &(0x7f00000002c0)="d3", 0x1) (rerun: 64)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0)
bind$can_j1939(r0, &(0x7f0000000180)={0x1d, 0x0, 0x0, {0x0, 0x1}, 0x2}, 0x18) (async)
setsockopt$TIPC_MCAST_REPLICAST(r1, 0x10f, 0x86) (async)
ioctl$PPPIOCSCOMPRESS(r1, 0x4010744d) (async)
sendmsg$AUDIT_TTY_GET(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x3f8, 0x200, 0x70bd2b, 0x25dfdbfb, "", ["", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x20004000}, 0x10)

22:46:48 executing program 0:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(r0, 0x10f, 0x86)
connect$can_j1939(r0, &(0x7f0000000000)={0x1d, 0x0, 0x1, {0x0, 0xff, 0x3}, 0xff}, 0x18)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
write$ppp(r1, 0x0, 0xeffdffffffffffff)
openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0) (async)
setsockopt$TIPC_MCAST_REPLICAST(r0, 0x10f, 0x86) (async)
connect$can_j1939(r0, &(0x7f0000000000)={0x1d, 0x0, 0x1, {0x0, 0xff, 0x3}, 0xff}, 0x18) (async)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0) (async)
write$ppp(r1, 0x0, 0xeffdffffffffffff) (async)

22:46:48 executing program 1:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
write$ppp(r0, 0x0, 0xeffdffff)
syz_io_uring_setup(0x6f0a, &(0x7f0000000000)={0x0, 0x601a, 0x40, 0x3, 0x0, 0x0, r0}, &(0x7f00000000c0), &(0x7f0000000100))
r1 = mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0xfffffffffffffffe)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x3c, 0x0, &(0x7f0000000140)=[@free_buffer, @increfs_done={0x40106308, 0x1}, @acquire, @free_buffer={0x40086303, r1}, @acquire={0x40046305, 0x1}], 0xa8, 0x0, &(0x7f0000000180)="beb1725c91f19516d9851db3e8482e62bc5f645e786d5bf43d21facc4eb239ebb75068b66404ca1e44eca8a6ad40d1147b850815ed309f7f52c8f6fc78000a800aabda4f181fdf2a8fa503e1eca056b33d6017bd93e1cc57f9099c747ba81696be772a3eaf1e494c20f267df39f8f7f06e182e0ca0812e374a6d5c848cb4fd95097ad0d71f018ccb0c455b83ab4b59bf6e25bc49691bbed9c40726862a7422bd723da040400d744e"})

22:46:48 executing program 3:
r0 = getuid()
setuid(r0) (async)
quotactl_fd$Q_QUOTAON(0xffffffffffffffff, 0xffffffff80000202, r0, &(0x7f0000000000)='./file0\x00') (async)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
write$ppp(r1, &(0x7f00000002c0)="d3", 0xfffffdef)

22:46:48 executing program 4:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x5dec01, 0x0)
write$ppp(r0, 0x0, 0x0)
getsockopt$TIPC_NODE_RECVQ_DEPTH(r0, 0x10f, 0x83, &(0x7f0000000000), &(0x7f0000000080)=0x4)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x5dec01, 0x0) (async)
write$ppp(r0, 0x0, 0x0) (async)
getsockopt$TIPC_NODE_RECVQ_DEPTH(r0, 0x10f, 0x83, &(0x7f0000000000), &(0x7f0000000080)=0x4) (async)

22:46:48 executing program 2:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000140)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}) (async)
write$ppp(r0, &(0x7f00000002c0)="d3", 0x1) (async)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0)
bind$can_j1939(r0, &(0x7f0000000180)={0x1d, 0x0, 0x0, {0x0, 0x1}, 0x2}, 0x18)
setsockopt$TIPC_MCAST_REPLICAST(r1, 0x10f, 0x86) (async)
ioctl$PPPIOCSCOMPRESS(r1, 0x4010744d)
sendmsg$AUDIT_TTY_GET(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x3f8, 0x200, 0x70bd2b, 0x25dfdbfb, "", ["", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x20004000}, 0x10)

[ 2814.152684][ T6419] FAULT_INJECTION: forcing a failure.
[ 2814.152684][ T6419] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[ 2814.166008][ T6419] CPU: 1 PID: 6419 Comm: syz-executor.5 Not tainted 6.6.0-rc3-syzkaller-00165-g3b517966c561 #0
[ 2814.176361][ T6419] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/06/2023
[ 2814.186519][ T6419] Call Trace:
[ 2814.189811][ T6419]  <TASK>
[ 2814.192813][ T6419]  dump_stack_lvl+0xda/0x130
[ 2814.197456][ T6419]  dump_stack+0x15/0x20
22:46:48 executing program 4:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x5dec01, 0x0)
write$ppp(r0, 0x0, 0x0)
getsockopt$TIPC_NODE_RECVQ_DEPTH(r0, 0x10f, 0x83, &(0x7f0000000000), &(0x7f0000000080)=0x4)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x5dec01, 0x0) (async)
write$ppp(r0, 0x0, 0x0) (async)
getsockopt$TIPC_NODE_RECVQ_DEPTH(r0, 0x10f, 0x83, &(0x7f0000000000), &(0x7f0000000080)=0x4) (async)

22:46:48 executing program 2:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x7fec01, 0x0)
r1 = syz_genetlink_get_family_id$SEG6(&(0x7f00000000c0), r0)
sendmsg$SEG6_CMD_SET_TUNSRC(r0, &(0x7f00000001c0)={&(0x7f0000000040), 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x48, r1, 0x2, 0x70bd2b, 0x25dfdbfb, {}, [@SEG6_ATTR_SECRET={0x14, 0x4, [0x5, 0x400, 0xffffffff, 0x5]}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x4}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x6}, @SEG6_ATTR_SECRET={0x8, 0x4, [0x4]}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x1}]}, 0x48}, 0x1, 0x0, 0x0, 0x20004000}, 0x40)
write$ppp(r0, &(0x7f00000002c0)="d3", 0x1)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x101240, 0x0)

22:46:48 executing program 1:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
write$ppp(r0, 0x0, 0xeffdffff) (async)
syz_io_uring_setup(0x6f0a, &(0x7f0000000000)={0x0, 0x601a, 0x40, 0x3, 0x0, 0x0, r0}, &(0x7f00000000c0), &(0x7f0000000100)) (async, rerun: 32)
r1 = mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0xfffffffffffffffe) (rerun: 32)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x3c, 0x0, &(0x7f0000000140)=[@free_buffer, @increfs_done={0x40106308, 0x1}, @acquire, @free_buffer={0x40086303, r1}, @acquire={0x40046305, 0x1}], 0xa8, 0x0, &(0x7f0000000180)="beb1725c91f19516d9851db3e8482e62bc5f645e786d5bf43d21facc4eb239ebb75068b66404ca1e44eca8a6ad40d1147b850815ed309f7f52c8f6fc78000a800aabda4f181fdf2a8fa503e1eca056b33d6017bd93e1cc57f9099c747ba81696be772a3eaf1e494c20f267df39f8f7f06e182e0ca0812e374a6d5c848cb4fd95097ad0d71f018ccb0c455b83ab4b59bf6e25bc49691bbed9c40726862a7422bd723da040400d744e"})

[ 2814.201679][ T6419]  should_fail_ex+0x21f/0x230
[ 2814.206389][ T6419]  __should_fail_alloc_page+0xfd/0x110
[ 2814.211876][ T6419]  __alloc_pages+0x108/0x340
[ 2814.216498][ T6419]  vma_alloc_folio+0x6a3/0x8c0
[ 2814.221306][ T6419]  ? shmem_inode_acct_block+0x1ee/0x220
[ 2814.226884][ T6419]  shmem_get_folio_gfp+0x579/0xc30
[ 2814.232096][ T6419]  shmem_write_begin+0xa6/0x210
[ 2814.236994][ T6419]  generic_perform_write+0x1c9/0x410
[ 2814.242298][ T6419]  ? shmem_write_begin+0x210/0x210
[ 2814.247543][ T6419]  shmem_file_write_iter+0xc8/0xe0
22:46:48 executing program 2:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x7fec01, 0x0)
r1 = syz_genetlink_get_family_id$SEG6(&(0x7f00000000c0), r0)
sendmsg$SEG6_CMD_SET_TUNSRC(r0, &(0x7f00000001c0)={&(0x7f0000000040), 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x48, r1, 0x2, 0x70bd2b, 0x25dfdbfb, {}, [@SEG6_ATTR_SECRET={0x14, 0x4, [0x5, 0x400, 0xffffffff, 0x5]}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x4}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x6}, @SEG6_ATTR_SECRET={0x8, 0x4, [0x4]}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x1}]}, 0x48}, 0x1, 0x0, 0x0, 0x20004000}, 0x40)
write$ppp(r0, &(0x7f00000002c0)="d3", 0x1)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x101240, 0x0)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x7fec01, 0x0) (async)
syz_genetlink_get_family_id$SEG6(&(0x7f00000000c0), r0) (async)
sendmsg$SEG6_CMD_SET_TUNSRC(r0, &(0x7f00000001c0)={&(0x7f0000000040), 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x48, r1, 0x2, 0x70bd2b, 0x25dfdbfb, {}, [@SEG6_ATTR_SECRET={0x14, 0x4, [0x5, 0x400, 0xffffffff, 0x5]}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x4}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x6}, @SEG6_ATTR_SECRET={0x8, 0x4, [0x4]}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x1}]}, 0x48}, 0x1, 0x0, 0x0, 0x20004000}, 0x40) (async)
write$ppp(r0, &(0x7f00000002c0)="d3", 0x1) (async)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x101240, 0x0) (async)

[ 2814.252697][ T6419]  vfs_write+0x4ab/0x7d0
[ 2814.257016][ T6419]  ksys_write+0xeb/0x1a0
[ 2814.261316][ T6419]  __x64_sys_write+0x42/0x50
[ 2814.265981][ T6419]  do_syscall_64+0x41/0xc0
[ 2814.270425][ T6419]  entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 2814.276380][ T6419] RIP: 0033:0x7f90e4a54ae9
[ 2814.280816][ T6419] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48
[ 2814.300535][ T6419] RSP: 002b:00007f90e3dd70c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 2814.309020][ T6419] RAX: ffffffffffffffda RBX: 00007f90e4b73f80 RCX: 00007f90e4a54ae9
[ 2814.317090][ T6419] RDX: 00000000001f4f33 RSI: 00000000200002c0 RDI: 0000000000000003
[ 2814.325096][ T6419] RBP: 00007f90e3dd7120 R08: 0000000000000000 R09: 0000000000000000
[ 2814.333084][ T6419] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 2814.341148][ T6419] R13: 000000000000000b R14: 00007f90e4b73f80 R15: 00007ffdb3bfd028
[ 2814.349161][ T6419]  </TASK>
22:46:48 executing program 5:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
write$ppp(r0, &(0x7f00000002c0)="d3", 0x1f4f33) (fail_nth: 79)

22:46:48 executing program 4:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x5dec01, 0x0)
r1 = socket$l2tp6(0xa, 0x2, 0x73)
recvfrom$l2tp6(r1, &(0x7f0000000080)=""/242, 0xf2, 0x10000, &(0x7f0000000180)={0xa, 0x0, 0x0, @remote}, 0x20)
r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000001c0), 0x501000, 0x0)
ioctl$PPPIOCGIDLE(r2, 0x8010743f, &(0x7f0000000200))
ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, &(0x7f0000000040))
write$ppp(r0, 0x0, 0x0)

22:46:48 executing program 2:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x7fec01, 0x0)
r1 = syz_genetlink_get_family_id$SEG6(&(0x7f00000000c0), r0)
sendmsg$SEG6_CMD_SET_TUNSRC(r0, &(0x7f00000001c0)={&(0x7f0000000040), 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x48, r1, 0x2, 0x70bd2b, 0x25dfdbfb, {}, [@SEG6_ATTR_SECRET={0x14, 0x4, [0x5, 0x400, 0xffffffff, 0x5]}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x4}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x6}, @SEG6_ATTR_SECRET={0x8, 0x4, [0x4]}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x1}]}, 0x48}, 0x1, 0x0, 0x0, 0x20004000}, 0x40)
write$ppp(r0, &(0x7f00000002c0)="d3", 0x1)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x101240, 0x0) (async)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x101240, 0x0)

22:46:48 executing program 0:
syz_io_uring_setup(0x3909, &(0x7f0000000000)={0x0, 0xa8d5, 0x100, 0x3, 0x27e}, &(0x7f0000000100)=<r0=>0x0, &(0x7f0000000180))
syz_io_uring_submit(r0, 0x0, &(0x7f00000001c0)=@IORING_OP_MADVISE={0x19, 0xc, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x1})
futex(&(0x7f00000000c0)=0x2, 0xd, 0x0, &(0x7f0000000140), 0x0, 0x0)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
write$ppp(r1, 0x0, 0xeffdffffffffffff)

22:46:48 executing program 1:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
write$ppp(r0, 0x0, 0xeffdffff) (async)
syz_io_uring_setup(0x6f0a, &(0x7f0000000000)={0x0, 0x601a, 0x40, 0x3, 0x0, 0x0, r0}, &(0x7f00000000c0), &(0x7f0000000100)) (async)
r1 = mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0xfffffffffffffffe)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x3c, 0x0, &(0x7f0000000140)=[@free_buffer, @increfs_done={0x40106308, 0x1}, @acquire, @free_buffer={0x40086303, r1}, @acquire={0x40046305, 0x1}], 0xa8, 0x0, &(0x7f0000000180)="beb1725c91f19516d9851db3e8482e62bc5f645e786d5bf43d21facc4eb239ebb75068b66404ca1e44eca8a6ad40d1147b850815ed309f7f52c8f6fc78000a800aabda4f181fdf2a8fa503e1eca056b33d6017bd93e1cc57f9099c747ba81696be772a3eaf1e494c20f267df39f8f7f06e182e0ca0812e374a6d5c848cb4fd95097ad0d71f018ccb0c455b83ab4b59bf6e25bc49691bbed9c40726862a7422bd723da040400d744e"})

[ 2814.439457][ T6461] FAULT_INJECTION: forcing a failure.
[ 2814.439457][ T6461] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 2814.452653][ T6461] CPU: 1 PID: 6461 Comm: syz-executor.5 Not tainted 6.6.0-rc3-syzkaller-00165-g3b517966c561 #0
[ 2814.463100][ T6461] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/06/2023
[ 2814.473167][ T6461] Call Trace:
[ 2814.476516][ T6461]  <TASK>
[ 2814.479464][ T6461]  dump_stack_lvl+0xda/0x130
[ 2814.484071][ T6461]  dump_stack+0x15/0x20
22:46:48 executing program 3:
r0 = getuid()
setuid(r0) (async)
quotactl_fd$Q_QUOTAON(0xffffffffffffffff, 0xffffffff80000202, r0, &(0x7f0000000000)='./file0\x00') (async, rerun: 32)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0) (rerun: 32)
write$ppp(r1, &(0x7f00000002c0)="d3", 0xfffffdef)

22:46:48 executing program 2:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x420880, 0x0)
ioctl$TUNGETIFF(r1, 0x800454d2, &(0x7f0000000040)={'veth1_virt_wifi\x00'})
write$ppp(r0, &(0x7f00000002c0)="d3", 0x1)

22:46:48 executing program 0:
syz_io_uring_setup(0x3909, &(0x7f0000000000)={0x0, 0xa8d5, 0x100, 0x3, 0x27e}, &(0x7f0000000100)=<r0=>0x0, &(0x7f0000000180))
syz_io_uring_submit(r0, 0x0, &(0x7f00000001c0)=@IORING_OP_MADVISE={0x19, 0xc, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x1})
futex(&(0x7f00000000c0)=0x2, 0xd, 0x0, &(0x7f0000000140), 0x0, 0x0)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
write$ppp(r1, 0x0, 0xeffdffffffffffff)
syz_io_uring_setup(0x3909, &(0x7f0000000000)={0x0, 0xa8d5, 0x100, 0x3, 0x27e}, &(0x7f0000000100), &(0x7f0000000180)) (async)
syz_io_uring_submit(r0, 0x0, &(0x7f00000001c0)=@IORING_OP_MADVISE={0x19, 0xc, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x1}) (async)
futex(&(0x7f00000000c0)=0x2, 0xd, 0x0, &(0x7f0000000140), 0x0, 0x0) (async)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0) (async)
write$ppp(r1, 0x0, 0xeffdffffffffffff) (async)

22:46:48 executing program 1:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
syz_open_dev$loop(&(0x7f0000000000), 0x3, 0x40100)
write$ppp(r0, 0x0, 0xeffdffff)

[ 2814.488320][ T6461]  should_fail_ex+0x21f/0x230
[ 2814.493111][ T6461]  should_fail+0xb/0x10
[ 2814.497330][ T6461]  should_fail_usercopy+0x1a/0x20
[ 2814.502389][ T6461]  copy_page_from_iter_atomic+0x21c/0xcf0
[ 2814.508155][ T6461]  ? shmem_write_begin+0xa6/0x210
[ 2814.513253][ T6461]  ? shmem_write_begin+0x16d/0x210
[ 2814.518420][ T6461]  generic_perform_write+0x20c/0x410
[ 2814.523741][ T6461]  ? shmem_write_begin+0x210/0x210
[ 2814.528902][ T6461]  shmem_file_write_iter+0xc8/0xe0
[ 2814.534090][ T6461]  vfs_write+0x4ab/0x7d0
22:46:48 executing program 2:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x420880, 0x0)
ioctl$TUNGETIFF(r1, 0x800454d2, &(0x7f0000000040)={'veth1_virt_wifi\x00'})
write$ppp(r0, &(0x7f00000002c0)="d3", 0x1)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0) (async)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x420880, 0x0) (async)
ioctl$TUNGETIFF(r1, 0x800454d2, &(0x7f0000000040)={'veth1_virt_wifi\x00'}) (async)
write$ppp(r0, &(0x7f00000002c0)="d3", 0x1) (async)

22:46:48 executing program 2:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x420880, 0x0)
ioctl$TUNGETIFF(r1, 0x800454d2, &(0x7f0000000040)={'veth1_virt_wifi\x00'})
write$ppp(r0, &(0x7f00000002c0)="d3", 0x1)

[ 2814.538381][ T6461]  ksys_write+0xeb/0x1a0
[ 2814.542662][ T6461]  __x64_sys_write+0x42/0x50
[ 2814.547347][ T6461]  do_syscall_64+0x41/0xc0
[ 2814.551787][ T6461]  entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 2814.557825][ T6461] RIP: 0033:0x7f90e4a54ae9
[ 2814.562248][ T6461] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48
[ 2814.581902][ T6461] RSP: 002b:00007f90e3dd70c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
22:46:48 executing program 0:
syz_io_uring_setup(0x3909, &(0x7f0000000000)={0x0, 0xa8d5, 0x100, 0x3, 0x27e}, &(0x7f0000000100)=<r0=>0x0, &(0x7f0000000180))
syz_io_uring_submit(r0, 0x0, &(0x7f00000001c0)=@IORING_OP_MADVISE={0x19, 0xc, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x1}) (async, rerun: 64)
futex(&(0x7f00000000c0)=0x2, 0xd, 0x0, &(0x7f0000000140), 0x0, 0x0) (rerun: 64)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
write$ppp(r1, 0x0, 0xeffdffffffffffff)

[ 2814.590331][ T6461] RAX: ffffffffffffffda RBX: 00007f90e4b73f80 RCX: 00007f90e4a54ae9
[ 2814.598322][ T6461] RDX: 00000000001f4f33 RSI: 00000000200002c0 RDI: 0000000000000003
[ 2814.606368][ T6461] RBP: 00007f90e3dd7120 R08: 0000000000000000 R09: 0000000000000000
[ 2814.614361][ T6461] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 2814.622350][ T6461] R13: 000000000000000b R14: 00007f90e4b73f80 R15: 00007ffdb3bfd028
[ 2814.630441][ T6461]  </TASK>
22:46:48 executing program 5:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
write$ppp(r0, &(0x7f00000002c0)="d3", 0x1f4f33) (fail_nth: 80)

[ 2814.688286][ T6484] FAULT_INJECTION: forcing a failure.
[ 2814.688286][ T6484] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[ 2814.701696][ T6484] CPU: 1 PID: 6484 Comm: syz-executor.5 Not tainted 6.6.0-rc3-syzkaller-00165-g3b517966c561 #0
[ 2814.712038][ T6484] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/06/2023
[ 2814.722160][ T6484] Call Trace:
[ 2814.725454][ T6484]  <TASK>
[ 2814.728382][ T6484]  dump_stack_lvl+0xda/0x130
[ 2814.732991][ T6484]  dump_stack+0x15/0x20
[ 2814.737162][ T6484]  should_fail_ex+0x21f/0x230
[ 2814.742012][ T6484]  __should_fail_alloc_page+0xfd/0x110
[ 2814.747500][ T6484]  __alloc_pages+0x108/0x340
[ 2814.752268][ T6484]  vma_alloc_folio+0x6a3/0x8c0
[ 2814.757077][ T6484]  ? shmem_inode_acct_block+0x1ee/0x220
[ 2814.762711][ T6484]  shmem_get_folio_gfp+0x579/0xc30
[ 2814.767879][ T6484]  shmem_write_begin+0xa6/0x210
[ 2814.772809][ T6484]  generic_perform_write+0x1c9/0x410
[ 2814.778109][ T6484]  ? shmem_write_begin+0x210/0x210
[ 2814.783320][ T6484]  shmem_file_write_iter+0xc8/0xe0
[ 2814.788467][ T6484]  vfs_write+0x4ab/0x7d0
[ 2814.792799][ T6484]  ksys_write+0xeb/0x1a0
[ 2814.797090][ T6484]  __x64_sys_write+0x42/0x50
[ 2814.801782][ T6484]  do_syscall_64+0x41/0xc0
[ 2814.806195][ T6484]  entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 2814.812170][ T6484] RIP: 0033:0x7f90e4a54ae9
[ 2814.816604][ T6484] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48
[ 2814.836217][ T6484] RSP: 002b:00007f90e3dd70c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 2814.844635][ T6484] RAX: ffffffffffffffda RBX: 00007f90e4b73f80 RCX: 00007f90e4a54ae9
[ 2814.852719][ T6484] RDX: 00000000001f4f33 RSI: 00000000200002c0 RDI: 0000000000000003
[ 2814.860746][ T6484] RBP: 00007f90e3dd7120 R08: 0000000000000000 R09: 0000000000000000
[ 2814.868728][ T6484] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 2814.876700][ T6484] R13: 000000000000000b R14: 00007f90e4b73f80 R15: 00007ffdb3bfd028
[ 2814.884802][ T6484]  </TASK>
22:46:49 executing program 1:
openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0) (async)
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
syz_open_dev$loop(&(0x7f0000000000), 0x3, 0x40100)
write$ppp(r0, 0x0, 0xeffdffff)

22:46:49 executing program 2:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', <r1=>0x0})
sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000240)={&(0x7f00000000c0)={0x160, 0x0, 0x200, 0x70bd2c, 0x25dfdbfb, {}, [{{0x8, 0x1, r1}, {0x88, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}]}}, {{0x8}, {0xb4, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0xfffffff9}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0xffffffc0}}}]}}]}, 0x160}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
syz_io_uring_setup(0x6b0b, &(0x7f0000000300)={0x0, 0xf31d, 0x8, 0x1, 0x22b}, &(0x7f0000000380), &(0x7f00000003c0)=<r2=>0x0)
syz_io_uring_submit(0x0, r2, &(0x7f0000000400)=@IORING_OP_SHUTDOWN={0x22, 0x22, 0x0, r0, 0x0, 0x0, 0x1, 0x0, 0x1})
write$ppp(r0, &(0x7f00000002c0)="d3", 0x1)

22:46:49 executing program 0:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(r0, 0x10f, 0x86)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(r1, 0x10f, 0x86)
ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r1)
r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
socketpair(0x2a, 0x1, 0x2, &(0x7f0000000000)={<r3=>0xffffffffffffffff})
getsockopt$TIPC_IMPORTANCE(r3, 0x10f, 0x7f, &(0x7f0000000040), &(0x7f00000000c0)=0x4)
r4 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100), 0x105800, 0x0)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f00000001c0)={'ip6_vti0\x00', &(0x7f0000000140)={'syztnl1\x00', 0x0, 0x4, 0x0, 0xff, 0x5, 0x40, @empty, @remote, 0x7800, 0x20, 0x5, 0x5}})
write$ppp(r2, 0x0, 0xeffdffffffffffff)

22:46:49 executing program 3:
sendmsg$AUDIT_DEL_RULE(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000580)={&(0x7f0000000100)={0x444, 0x3f4, 0x200, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x1a, [0x2, 0x10001, 0x0, 0x7, 0x3f, 0xffff, 0x7, 0x8000, 0xffffffff, 0x80000001, 0x502c, 0x5e5, 0x8001, 0x0, 0x6, 0x1, 0x7f00000, 0x400, 0xa85c, 0x400, 0x10001, 0xffffffff, 0x8, 0xfffffffe, 0x7, 0x0, 0x5, 0x1, 0x5, 0x64, 0xb2, 0x2, 0xfffff801, 0x1, 0x400, 0x34b1, 0x5, 0x854f, 0x800, 0x5, 0x8000, 0x1, 0xff, 0x8000, 0x4, 0x980, 0x0, 0xbc, 0x9, 0x0, 0x495, 0x6, 0x1000, 0x4, 0x400, 0x17e9, 0x1a, 0x3f, 0x3, 0x9e2, 0x9, 0x50000000, 0x7, 0x3ff], [0x81, 0x5, 0x8, 0x8001, 0x8000000, 0x7, 0x3, 0x6, 0x80, 0x10001, 0x1800, 0x100, 0x9f, 0xfffffffa, 0x5, 0x8000, 0x7, 0x1, 0x1, 0x0, 0x7, 0x9, 0xc0, 0x2aa5, 0x4465, 0x9, 0x0, 0x0, 0x1, 0x7, 0x20, 0x1000, 0x80000000, 0x5c4b, 0x1, 0x2d3, 0x7, 0x6, 0x5, 0x200, 0xffffffff, 0x6bdb, 0x1000, 0x3, 0xe31, 0x3, 0x401, 0x4, 0x5, 0x38000000, 0x0, 0x3, 0x9, 0x8, 0x7fff, 0xdec1, 0x5, 0x80000000, 0x7, 0x3, 0xd8, 0x9, 0x101, 0xffffffff], [0x5, 0x3, 0x38e, 0x4, 0x0, 0xfffeffff, 0x7, 0x8000, 0xfffffffe, 0x4, 0x7, 0x80000001, 0x1, 0xfffffff9, 0xfffffffe, 0x7f, 0x8, 0x3, 0x2, 0x0, 0x9b6, 0x2, 0x7, 0x2, 0x6, 0x3, 0x1, 0x4, 0x0, 0x4, 0x3ff, 0x4, 0x2, 0x3, 0x6, 0x9, 0xfffffff8, 0xffff0001, 0x3, 0x1000, 0x6170, 0x0, 0x4, 0xffffffff, 0x1000, 0x3, 0x100, 0x3ff, 0x10000, 0xffff, 0x7, 0x66, 0x0, 0x5, 0x1, 0x5, 0x1, 0x9, 0x8001, 0x401, 0x6, 0x2, 0x8001, 0x40], [0x1, 0x9, 0x7fff, 0x5, 0x2, 0xff, 0x9, 0xfff, 0x9, 0x7472af5c, 0x100, 0x2, 0x2, 0x5, 0x5, 0x0, 0xfc1, 0x7, 0x3, 0xffffffff, 0x1, 0x1bc8, 0x1f, 0x0, 0x76de, 0x4, 0x5, 0x81, 0x7, 0x10000, 0x100, 0x7, 0x4, 0x5, 0x6, 0x7fffffff, 0x4, 0x7fffffff, 0x8, 0xb9eb, 0x0, 0xfffffffd, 0x779, 0xfffffff8, 0x960, 0x0, 0x4, 0x8000, 0x20, 0xfffffff7, 0x4, 0x627b, 0x0, 0x8, 0x9, 0x9, 0x7, 0x0, 0x5, 0x2, 0x7fff, 0x9, 0x6, 0x1f], 0x22, ['/dev/bsg\x00', '/-\\-@.C\r\'$*|-Z}\x00', '/dev/bsg\x00']}, ["", "", "", "", "", "", "", "", "", ""]}, 0x444}, 0x1, 0x0, 0x0, 0x10}, 0x8081)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0)
write$ppp(r0, &(0x7f0000000040)="76200b136633becda19a3a4d2a30", 0xe8)

22:46:49 executing program 5:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
write$ppp(r0, &(0x7f00000002c0)="d3", 0x1f4f33) (fail_nth: 81)

22:46:49 executing program 1:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0) (async)
syz_open_dev$loop(&(0x7f0000000000), 0x3, 0x40100)
write$ppp(r0, 0x0, 0xeffdffff)

22:46:49 executing program 4:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x5dec01, 0x0)
socket$l2tp6(0xa, 0x2, 0x73) (async)
r1 = socket$l2tp6(0xa, 0x2, 0x73)
recvfrom$l2tp6(r1, &(0x7f0000000080)=""/242, 0xf2, 0x10000, &(0x7f0000000180)={0xa, 0x0, 0x0, @remote}, 0x20) (async)
recvfrom$l2tp6(r1, &(0x7f0000000080)=""/242, 0xf2, 0x10000, &(0x7f0000000180)={0xa, 0x0, 0x0, @remote}, 0x20)
r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000001c0), 0x501000, 0x0)
ioctl$PPPIOCGIDLE(r2, 0x8010743f, &(0x7f0000000200))
ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, &(0x7f0000000040))
write$ppp(r0, 0x0, 0x0)

22:46:49 executing program 0:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(r0, 0x10f, 0x86)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(r1, 0x10f, 0x86)
ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r1)
r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
socketpair(0x2a, 0x1, 0x2, &(0x7f0000000000)={<r3=>0xffffffffffffffff})
getsockopt$TIPC_IMPORTANCE(r3, 0x10f, 0x7f, &(0x7f0000000040), &(0x7f00000000c0)=0x4)
r4 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100), 0x105800, 0x0)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f00000001c0)={'ip6_vti0\x00', &(0x7f0000000140)={'syztnl1\x00', 0x0, 0x4, 0x0, 0xff, 0x5, 0x40, @empty, @remote, 0x7800, 0x20, 0x5, 0x5}})
write$ppp(r2, 0x0, 0xeffdffffffffffff)
openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0) (async)
setsockopt$TIPC_MCAST_REPLICAST(r0, 0x10f, 0x86) (async)
openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0) (async)
setsockopt$TIPC_MCAST_REPLICAST(r1, 0x10f, 0x86) (async)
ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r1) (async)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0) (async)
socketpair(0x2a, 0x1, 0x2, &(0x7f0000000000)) (async)
getsockopt$TIPC_IMPORTANCE(r3, 0x10f, 0x7f, &(0x7f0000000040), &(0x7f00000000c0)=0x4) (async)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000100), 0x105800, 0x0) (async)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f00000001c0)={'ip6_vti0\x00', &(0x7f0000000140)={'syztnl1\x00', 0x0, 0x4, 0x0, 0xff, 0x5, 0x40, @empty, @remote, 0x7800, 0x20, 0x5, 0x5}}) (async)
write$ppp(r2, 0x0, 0xeffdffffffffffff) (async)

22:46:49 executing program 3:
sendmsg$AUDIT_DEL_RULE(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000580)={&(0x7f0000000100)={0x444, 0x3f4, 0x200, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x1a, [0x2, 0x10001, 0x0, 0x7, 0x3f, 0xffff, 0x7, 0x8000, 0xffffffff, 0x80000001, 0x502c, 0x5e5, 0x8001, 0x0, 0x6, 0x1, 0x7f00000, 0x400, 0xa85c, 0x400, 0x10001, 0xffffffff, 0x8, 0xfffffffe, 0x7, 0x0, 0x5, 0x1, 0x5, 0x64, 0xb2, 0x2, 0xfffff801, 0x1, 0x400, 0x34b1, 0x5, 0x854f, 0x800, 0x5, 0x8000, 0x1, 0xff, 0x8000, 0x4, 0x980, 0x0, 0xbc, 0x9, 0x0, 0x495, 0x6, 0x1000, 0x4, 0x400, 0x17e9, 0x1a, 0x3f, 0x3, 0x9e2, 0x9, 0x50000000, 0x7, 0x3ff], [0x81, 0x5, 0x8, 0x8001, 0x8000000, 0x7, 0x3, 0x6, 0x80, 0x10001, 0x1800, 0x100, 0x9f, 0xfffffffa, 0x5, 0x8000, 0x7, 0x1, 0x1, 0x0, 0x7, 0x9, 0xc0, 0x2aa5, 0x4465, 0x9, 0x0, 0x0, 0x1, 0x7, 0x20, 0x1000, 0x80000000, 0x5c4b, 0x1, 0x2d3, 0x7, 0x6, 0x5, 0x200, 0xffffffff, 0x6bdb, 0x1000, 0x3, 0xe31, 0x3, 0x401, 0x4, 0x5, 0x38000000, 0x0, 0x3, 0x9, 0x8, 0x7fff, 0xdec1, 0x5, 0x80000000, 0x7, 0x3, 0xd8, 0x9, 0x101, 0xffffffff], [0x5, 0x3, 0x38e, 0x4, 0x0, 0xfffeffff, 0x7, 0x8000, 0xfffffffe, 0x4, 0x7, 0x80000001, 0x1, 0xfffffff9, 0xfffffffe, 0x7f, 0x8, 0x3, 0x2, 0x0, 0x9b6, 0x2, 0x7, 0x2, 0x6, 0x3, 0x1, 0x4, 0x0, 0x4, 0x3ff, 0x4, 0x2, 0x3, 0x6, 0x9, 0xfffffff8, 0xffff0001, 0x3, 0x1000, 0x6170, 0x0, 0x4, 0xffffffff, 0x1000, 0x3, 0x100, 0x3ff, 0x10000, 0xffff, 0x7, 0x66, 0x0, 0x5, 0x1, 0x5, 0x1, 0x9, 0x8001, 0x401, 0x6, 0x2, 0x8001, 0x40], [0x1, 0x9, 0x7fff, 0x5, 0x2, 0xff, 0x9, 0xfff, 0x9, 0x7472af5c, 0x100, 0x2, 0x2, 0x5, 0x5, 0x0, 0xfc1, 0x7, 0x3, 0xffffffff, 0x1, 0x1bc8, 0x1f, 0x0, 0x76de, 0x4, 0x5, 0x81, 0x7, 0x10000, 0x100, 0x7, 0x4, 0x5, 0x6, 0x7fffffff, 0x4, 0x7fffffff, 0x8, 0xb9eb, 0x0, 0xfffffffd, 0x779, 0xfffffff8, 0x960, 0x0, 0x4, 0x8000, 0x20, 0xfffffff7, 0x4, 0x627b, 0x0, 0x8, 0x9, 0x9, 0x7, 0x0, 0x5, 0x2, 0x7fff, 0x9, 0x6, 0x1f], 0x22, ['/dev/bsg\x00', '/-\\-@.C\r\'$*|-Z}\x00', '/dev/bsg\x00']}, ["", "", "", "", "", "", "", "", "", ""]}, 0x444}, 0x1, 0x0, 0x0, 0x10}, 0x8081)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0) (async)
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0)
write$ppp(r0, &(0x7f0000000040)="76200b136633becda19a3a4d2a30", 0xe8)

22:46:49 executing program 2:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', <r1=>0x0})
sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000240)={&(0x7f00000000c0)={0x160, 0x0, 0x200, 0x70bd2c, 0x25dfdbfb, {}, [{{0x8, 0x1, r1}, {0x88, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}]}}, {{0x8}, {0xb4, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0xfffffff9}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0xffffffc0}}}]}}]}, 0x160}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async)
syz_io_uring_setup(0x6b0b, &(0x7f0000000300)={0x0, 0xf31d, 0x8, 0x1, 0x22b}, &(0x7f0000000380), &(0x7f00000003c0)=<r2=>0x0)
syz_io_uring_submit(0x0, r2, &(0x7f0000000400)=@IORING_OP_SHUTDOWN={0x22, 0x22, 0x0, r0, 0x0, 0x0, 0x1, 0x0, 0x1}) (async)
write$ppp(r0, &(0x7f00000002c0)="d3", 0x1)

22:46:49 executing program 1:
ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000000)=0x2)
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
write$ppp(r0, 0x0, 0xeffdffff)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0)
accept4$tipc(r0, 0x0, &(0x7f0000000040), 0x1c00)
setsockopt$TIPC_MCAST_REPLICAST(r1, 0x10f, 0x86)
r2 = openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(r2, 0x10f, 0x86)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000004c0)={0x90, 0x0, &(0x7f0000000380)=[@reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000200)={@ptr={0x70742a85, 0x1, &(0x7f0000000180)=""/92, 0x5c, 0x2, 0x19}, @flat=@binder={0x73622a85, 0xa}, @flat=@weak_handle={0x77682a85, 0x1000}}, &(0x7f0000000280)={0x0, 0x28, 0x40}}}, @transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x58, 0x18, &(0x7f00000002c0)={@fd={0x66642a85, 0x0, r2}, @fda={0x66646185, 0x3, 0x2, 0x1c}, @fda={0x66646185, 0x4, 0x2, 0x1c}}, &(0x7f0000000340)={0x0, 0x18, 0x38}}}], 0x4a, 0x0, &(0x7f0000000440)="f4501e37ce2bbc0cfcfac0fc3cc354daa69823ae2ae6a6ebe3f512abfd6365c327ec99344e62fb9bf87bf1bdf541017a2a41d59e15e75bd2c53b24256f8e0a0b012392b045a24c12a87e"})

22:46:49 executing program 3:
sendmsg$AUDIT_DEL_RULE(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000580)={&(0x7f0000000100)={0x444, 0x3f4, 0x200, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x1a, [0x2, 0x10001, 0x0, 0x7, 0x3f, 0xffff, 0x7, 0x8000, 0xffffffff, 0x80000001, 0x502c, 0x5e5, 0x8001, 0x0, 0x6, 0x1, 0x7f00000, 0x400, 0xa85c, 0x400, 0x10001, 0xffffffff, 0x8, 0xfffffffe, 0x7, 0x0, 0x5, 0x1, 0x5, 0x64, 0xb2, 0x2, 0xfffff801, 0x1, 0x400, 0x34b1, 0x5, 0x854f, 0x800, 0x5, 0x8000, 0x1, 0xff, 0x8000, 0x4, 0x980, 0x0, 0xbc, 0x9, 0x0, 0x495, 0x6, 0x1000, 0x4, 0x400, 0x17e9, 0x1a, 0x3f, 0x3, 0x9e2, 0x9, 0x50000000, 0x7, 0x3ff], [0x81, 0x5, 0x8, 0x8001, 0x8000000, 0x7, 0x3, 0x6, 0x80, 0x10001, 0x1800, 0x100, 0x9f, 0xfffffffa, 0x5, 0x8000, 0x7, 0x1, 0x1, 0x0, 0x7, 0x9, 0xc0, 0x2aa5, 0x4465, 0x9, 0x0, 0x0, 0x1, 0x7, 0x20, 0x1000, 0x80000000, 0x5c4b, 0x1, 0x2d3, 0x7, 0x6, 0x5, 0x200, 0xffffffff, 0x6bdb, 0x1000, 0x3, 0xe31, 0x3, 0x401, 0x4, 0x5, 0x38000000, 0x0, 0x3, 0x9, 0x8, 0x7fff, 0xdec1, 0x5, 0x80000000, 0x7, 0x3, 0xd8, 0x9, 0x101, 0xffffffff], [0x5, 0x3, 0x38e, 0x4, 0x0, 0xfffeffff, 0x7, 0x8000, 0xfffffffe, 0x4, 0x7, 0x80000001, 0x1, 0xfffffff9, 0xfffffffe, 0x7f, 0x8, 0x3, 0x2, 0x0, 0x9b6, 0x2, 0x7, 0x2, 0x6, 0x3, 0x1, 0x4, 0x0, 0x4, 0x3ff, 0x4, 0x2, 0x3, 0x6, 0x9, 0xfffffff8, 0xffff0001, 0x3, 0x1000, 0x6170, 0x0, 0x4, 0xffffffff, 0x1000, 0x3, 0x100, 0x3ff, 0x10000, 0xffff, 0x7, 0x66, 0x0, 0x5, 0x1, 0x5, 0x1, 0x9, 0x8001, 0x401, 0x6, 0x2, 0x8001, 0x40], [0x1, 0x9, 0x7fff, 0x5, 0x2, 0xff, 0x9, 0xfff, 0x9, 0x7472af5c, 0x100, 0x2, 0x2, 0x5, 0x5, 0x0, 0xfc1, 0x7, 0x3, 0xffffffff, 0x1, 0x1bc8, 0x1f, 0x0, 0x76de, 0x4, 0x5, 0x81, 0x7, 0x10000, 0x100, 0x7, 0x4, 0x5, 0x6, 0x7fffffff, 0x4, 0x7fffffff, 0x8, 0xb9eb, 0x0, 0xfffffffd, 0x779, 0xfffffff8, 0x960, 0x0, 0x4, 0x8000, 0x20, 0xfffffff7, 0x4, 0x627b, 0x0, 0x8, 0x9, 0x9, 0x7, 0x0, 0x5, 0x2, 0x7fff, 0x9, 0x6, 0x1f], 0x22, ['/dev/bsg\x00', '/-\\-@.C\r\'$*|-Z}\x00', '/dev/bsg\x00']}, ["", "", "", "", "", "", "", "", "", ""]}, 0x444}, 0x1, 0x0, 0x0, 0x10}, 0x8081) (async)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0) (async)
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0)
write$ppp(r0, &(0x7f0000000040)="76200b136633becda19a3a4d2a30", 0xe8)

[ 2815.308209][ T6510] FAULT_INJECTION: forcing a failure.
[ 2815.308209][ T6510] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 2815.321329][ T6510] CPU: 0 PID: 6510 Comm: syz-executor.5 Not tainted 6.6.0-rc3-syzkaller-00165-g3b517966c561 #0
[ 2815.331682][ T6510] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/06/2023
[ 2815.341810][ T6510] Call Trace:
[ 2815.345102][ T6510]  <TASK>
[ 2815.348067][ T6510]  dump_stack_lvl+0xda/0x130
[ 2815.352734][ T6510]  dump_stack+0x15/0x20
[ 2815.356910][ T6510]  should_fail_ex+0x21f/0x230
[ 2815.361765][ T6510]  should_fail+0xb/0x10
[ 2815.365943][ T6510]  should_fail_usercopy+0x1a/0x20
[ 2815.371001][ T6510]  copy_page_from_iter_atomic+0x21c/0xcf0
[ 2815.376785][ T6510]  ? shmem_write_begin+0xa6/0x210
[ 2815.381848][ T6510]  ? shmem_write_begin+0x16d/0x210
[ 2815.387008][ T6510]  generic_perform_write+0x20c/0x410
[ 2815.392312][ T6510]  ? shmem_write_begin+0x210/0x210
[ 2815.397454][ T6510]  shmem_file_write_iter+0xc8/0xe0
[ 2815.402625][ T6510]  vfs_write+0x4ab/0x7d0
22:46:49 executing program 0:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(r0, 0x10f, 0x86)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(r1, 0x10f, 0x86) (async, rerun: 64)
ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r1) (async, rerun: 64)
r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
socketpair(0x2a, 0x1, 0x2, &(0x7f0000000000)={<r3=>0xffffffffffffffff})
getsockopt$TIPC_IMPORTANCE(r3, 0x10f, 0x7f, &(0x7f0000000040), &(0x7f00000000c0)=0x4) (async)
r4 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100), 0x105800, 0x0)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f00000001c0)={'ip6_vti0\x00', &(0x7f0000000140)={'syztnl1\x00', 0x0, 0x4, 0x0, 0xff, 0x5, 0x40, @empty, @remote, 0x7800, 0x20, 0x5, 0x5}})
write$ppp(r2, 0x0, 0xeffdffffffffffff)

22:46:49 executing program 3:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(r0, 0x10f, 0x86)
setsockopt$llc_int(r0, 0x10c, 0x4, &(0x7f0000000000)=0x5, 0x4)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
write$ppp(r1, &(0x7f00000002c0)="d3", 0xfffffdef)

22:46:49 executing program 2:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', <r1=>0x0})
sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000240)={&(0x7f00000000c0)={0x160, 0x0, 0x200, 0x70bd2c, 0x25dfdbfb, {}, [{{0x8, 0x1, r1}, {0x88, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}]}}, {{0x8}, {0xb4, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0xfffffff9}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0xffffffc0}}}]}}]}, 0x160}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
syz_io_uring_setup(0x6b0b, &(0x7f0000000300)={0x0, 0xf31d, 0x8, 0x1, 0x22b}, &(0x7f0000000380), &(0x7f00000003c0)=<r2=>0x0)
syz_io_uring_submit(0x0, r2, &(0x7f0000000400)=@IORING_OP_SHUTDOWN={0x22, 0x22, 0x0, r0, 0x0, 0x0, 0x1, 0x0, 0x1})
write$ppp(r0, &(0x7f00000002c0)="d3", 0x1)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0) (async)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)) (async)
sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000240)={&(0x7f00000000c0)={0x160, 0x0, 0x200, 0x70bd2c, 0x25dfdbfb, {}, [{{0x8, 0x1, r1}, {0x88, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}]}}, {{0x8}, {0xb4, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0xfffffff9}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0xffffffc0}}}]}}]}, 0x160}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async)
syz_io_uring_setup(0x6b0b, &(0x7f0000000300)={0x0, 0xf31d, 0x8, 0x1, 0x22b}, &(0x7f0000000380), &(0x7f00000003c0)) (async)
syz_io_uring_submit(0x0, r2, &(0x7f0000000400)=@IORING_OP_SHUTDOWN={0x22, 0x22, 0x0, r0, 0x0, 0x0, 0x1, 0x0, 0x1}) (async)
write$ppp(r0, &(0x7f00000002c0)="d3", 0x1) (async)

22:46:49 executing program 2:
r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040), 0x6742c1, 0x0)
sendmsg$AUDIT_GET_FEATURE(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x10, 0x3fb, 0x20, 0x70bd2a, 0x25dfdbff, "", ["", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0xa080}, 0x4000000)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x59c901, 0x0)
write$ppp(r1, &(0x7f00000002c0)="d3", 0x1)

[ 2815.407066][ T6510]  ksys_write+0xeb/0x1a0
[ 2815.411387][ T6510]  __x64_sys_write+0x42/0x50
[ 2815.415992][ T6510]  do_syscall_64+0x41/0xc0
[ 2815.420565][ T6510]  entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 2815.426528][ T6510] RIP: 0033:0x7f90e4a54ae9
[ 2815.430984][ T6510] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48
[ 2815.450686][ T6510] RSP: 002b:00007f90e3dd70c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
22:46:49 executing program 5:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
write$ppp(r0, &(0x7f00000002c0)="d3", 0x1f4f33) (fail_nth: 82)

22:46:49 executing program 2:
r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040), 0x6742c1, 0x0)
sendmsg$AUDIT_GET_FEATURE(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x10, 0x3fb, 0x20, 0x70bd2a, 0x25dfdbff, "", ["", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0xa080}, 0x4000000) (async, rerun: 32)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x59c901, 0x0) (rerun: 32)
write$ppp(r1, &(0x7f00000002c0)="d3", 0x1)

[ 2815.459129][ T6510] RAX: ffffffffffffffda RBX: 00007f90e4b73f80 RCX: 00007f90e4a54ae9
[ 2815.467112][ T6510] RDX: 00000000001f4f33 RSI: 00000000200002c0 RDI: 0000000000000003
[ 2815.475082][ T6510] RBP: 00007f90e3dd7120 R08: 0000000000000000 R09: 0000000000000000
[ 2815.483067][ T6510] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 2815.491112][ T6510] R13: 000000000000000b R14: 00007f90e4b73f80 R15: 00007ffdb3bfd028
[ 2815.499214][ T6510]  </TASK>
[ 2815.549015][ T6535] FAULT_INJECTION: forcing a failure.
[ 2815.549015][ T6535] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[ 2815.562283][ T6535] CPU: 0 PID: 6535 Comm: syz-executor.5 Not tainted 6.6.0-rc3-syzkaller-00165-g3b517966c561 #0
[ 2815.572672][ T6535] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/06/2023
[ 2815.582740][ T6535] Call Trace:
[ 2815.586009][ T6535]  <TASK>
[ 2815.589005][ T6535]  dump_stack_lvl+0xda/0x130
[ 2815.593632][ T6535]  dump_stack+0x15/0x20
[ 2815.597785][ T6535]  should_fail_ex+0x21f/0x230
[ 2815.602550][ T6535]  __should_fail_alloc_page+0xfd/0x110
[ 2815.608008][ T6535]  __alloc_pages+0x108/0x340
[ 2815.612604][ T6535]  vma_alloc_folio+0x6a3/0x8c0
[ 2815.617448][ T6535]  ? shmem_inode_acct_block+0x1ee/0x220
[ 2815.623025][ T6535]  shmem_get_folio_gfp+0x579/0xc30
[ 2815.628148][ T6535]  shmem_write_begin+0xa6/0x210
[ 2815.633035][ T6535]  generic_perform_write+0x1c9/0x410
[ 2815.638388][ T6535]  ? shmem_write_begin+0x210/0x210
[ 2815.643552][ T6535]  shmem_file_write_iter+0xc8/0xe0
[ 2815.648665][ T6535]  vfs_write+0x4ab/0x7d0
[ 2815.652902][ T6535]  ksys_write+0xeb/0x1a0
[ 2815.657225][ T6535]  __x64_sys_write+0x42/0x50
[ 2815.661883][ T6535]  do_syscall_64+0x41/0xc0
[ 2815.666368][ T6535]  entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 2815.672346][ T6535] RIP: 0033:0x7f90e4a54ae9
[ 2815.676791][ T6535] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48
[ 2815.696398][ T6535] RSP: 002b:00007f90e3dd70c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 2815.704813][ T6535] RAX: ffffffffffffffda RBX: 00007f90e4b73f80 RCX: 00007f90e4a54ae9
[ 2815.712788][ T6535] RDX: 00000000001f4f33 RSI: 00000000200002c0 RDI: 0000000000000003
[ 2815.720781][ T6535] RBP: 00007f90e3dd7120 R08: 0000000000000000 R09: 0000000000000000
[ 2815.728855][ T6535] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 2815.736818][ T6535] R13: 000000000000000b R14: 00007f90e4b73f80 R15: 00007ffdb3bfd028
[ 2815.744886][ T6535]  </TASK>
22:46:50 executing program 0:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x59e201, 0x0)
write$ppp(r0, 0x0, 0xeffdffffffffffff)

22:46:50 executing program 4:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x5dec01, 0x0) (async)
r1 = socket$l2tp6(0xa, 0x2, 0x73)
recvfrom$l2tp6(r1, &(0x7f0000000080)=""/242, 0xf2, 0x10000, &(0x7f0000000180)={0xa, 0x0, 0x0, @remote}, 0x20)
r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000001c0), 0x501000, 0x0)
ioctl$PPPIOCGIDLE(r2, 0x8010743f, &(0x7f0000000200)) (async)
ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, &(0x7f0000000040))
write$ppp(r0, 0x0, 0x0)

22:46:50 executing program 2:
r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040), 0x6742c1, 0x0)
sendmsg$AUDIT_GET_FEATURE(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x10, 0x3fb, 0x20, 0x70bd2a, 0x25dfdbff, "", ["", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0xa080}, 0x4000000)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x59c901, 0x0)
write$ppp(r1, &(0x7f00000002c0)="d3", 0x1)
openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040), 0x6742c1, 0x0) (async)
sendmsg$AUDIT_GET_FEATURE(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x10, 0x3fb, 0x20, 0x70bd2a, 0x25dfdbff, "", ["", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0xa080}, 0x4000000) (async)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x59c901, 0x0) (async)
write$ppp(r1, &(0x7f00000002c0)="d3", 0x1) (async)

22:46:50 executing program 3:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(r0, 0x10f, 0x86)
setsockopt$llc_int(r0, 0x10c, 0x4, &(0x7f0000000000)=0x5, 0x4)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
write$ppp(r1, &(0x7f00000002c0)="d3", 0xfffffdef)
openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0) (async)
setsockopt$TIPC_MCAST_REPLICAST(r0, 0x10f, 0x86) (async)
setsockopt$llc_int(r0, 0x10c, 0x4, &(0x7f0000000000)=0x5, 0x4) (async)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0) (async)
write$ppp(r1, &(0x7f00000002c0)="d3", 0xfffffdef) (async)

22:46:50 executing program 5:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
write$ppp(r0, &(0x7f00000002c0)="d3", 0x1f4f33) (fail_nth: 83)

22:46:50 executing program 1:
ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000000)=0x2)
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
write$ppp(r0, 0x0, 0xeffdffff) (async)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0)
accept4$tipc(r0, 0x0, &(0x7f0000000040), 0x1c00) (async)
setsockopt$TIPC_MCAST_REPLICAST(r1, 0x10f, 0x86)
r2 = openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(r2, 0x10f, 0x86)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000004c0)={0x90, 0x0, &(0x7f0000000380)=[@reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000200)={@ptr={0x70742a85, 0x1, &(0x7f0000000180)=""/92, 0x5c, 0x2, 0x19}, @flat=@binder={0x73622a85, 0xa}, @flat=@weak_handle={0x77682a85, 0x1000}}, &(0x7f0000000280)={0x0, 0x28, 0x40}}}, @transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x58, 0x18, &(0x7f00000002c0)={@fd={0x66642a85, 0x0, r2}, @fda={0x66646185, 0x3, 0x2, 0x1c}, @fda={0x66646185, 0x4, 0x2, 0x1c}}, &(0x7f0000000340)={0x0, 0x18, 0x38}}}], 0x4a, 0x0, &(0x7f0000000440)="f4501e37ce2bbc0cfcfac0fc3cc354daa69823ae2ae6a6ebe3f512abfd6365c327ec99344e62fb9bf87bf1bdf541017a2a41d59e15e75bd2c53b24256f8e0a0b012392b045a24c12a87e"})

22:46:50 executing program 0:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x59e201, 0x0)
write$ppp(r0, 0x0, 0xeffdffffffffffff)

22:46:50 executing program 1:
ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000000)=0x2) (async)
ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000000)=0x2)
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
write$ppp(r0, 0x0, 0xeffdffff)
openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0) (async)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0)
accept4$tipc(r0, 0x0, &(0x7f0000000040), 0x1c00)
setsockopt$TIPC_MCAST_REPLICAST(r1, 0x10f, 0x86) (async)
setsockopt$TIPC_MCAST_REPLICAST(r1, 0x10f, 0x86)
r2 = openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(r2, 0x10f, 0x86)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000004c0)={0x90, 0x0, &(0x7f0000000380)=[@reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000200)={@ptr={0x70742a85, 0x1, &(0x7f0000000180)=""/92, 0x5c, 0x2, 0x19}, @flat=@binder={0x73622a85, 0xa}, @flat=@weak_handle={0x77682a85, 0x1000}}, &(0x7f0000000280)={0x0, 0x28, 0x40}}}, @transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x58, 0x18, &(0x7f00000002c0)={@fd={0x66642a85, 0x0, r2}, @fda={0x66646185, 0x3, 0x2, 0x1c}, @fda={0x66646185, 0x4, 0x2, 0x1c}}, &(0x7f0000000340)={0x0, 0x18, 0x38}}}], 0x4a, 0x0, &(0x7f0000000440)="f4501e37ce2bbc0cfcfac0fc3cc354daa69823ae2ae6a6ebe3f512abfd6365c327ec99344e62fb9bf87bf1bdf541017a2a41d59e15e75bd2c53b24256f8e0a0b012392b045a24c12a87e"})

22:46:50 executing program 1:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
write$ppp(r0, 0x0, 0xeffdffff)
ioctl$PPPIOCATTACH(0xffffffffffffffff, 0x4004743d, &(0x7f0000000000)=0x1)

22:46:50 executing program 1:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
write$ppp(r0, 0x0, 0xeffdffff) (async)
ioctl$PPPIOCATTACH(0xffffffffffffffff, 0x4004743d, &(0x7f0000000000)=0x1)

[ 2816.155552][ T6546] FAULT_INJECTION: forcing a failure.
[ 2816.155552][ T6546] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 2816.168657][ T6546] CPU: 0 PID: 6546 Comm: syz-executor.5 Not tainted 6.6.0-rc3-syzkaller-00165-g3b517966c561 #0
[ 2816.179049][ T6546] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/06/2023
[ 2816.189215][ T6546] Call Trace:
[ 2816.192519][ T6546]  <TASK>
[ 2816.195488][ T6546]  dump_stack_lvl+0xda/0x130
[ 2816.200132][ T6546]  dump_stack+0x15/0x20
22:46:50 executing program 1:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
write$ppp(r0, 0x0, 0xeffdffff) (async)
ioctl$PPPIOCATTACH(0xffffffffffffffff, 0x4004743d, &(0x7f0000000000)=0x1)

22:46:50 executing program 3:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(r0, 0x10f, 0x86) (async)
setsockopt$llc_int(r0, 0x10c, 0x4, &(0x7f0000000000)=0x5, 0x4)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
write$ppp(r1, &(0x7f00000002c0)="d3", 0xfffffdef)

[ 2816.204334][ T6546]  should_fail_ex+0x21f/0x230
[ 2816.209116][ T6546]  should_fail+0xb/0x10
[ 2816.213319][ T6546]  should_fail_usercopy+0x1a/0x20
[ 2816.218477][ T6546]  copy_page_from_iter_atomic+0x21c/0xcf0
[ 2816.224296][ T6546]  ? shmem_write_begin+0xa6/0x210
[ 2816.229383][ T6546]  ? shmem_write_begin+0x16d/0x210
[ 2816.234619][ T6546]  generic_perform_write+0x20c/0x410
[ 2816.239923][ T6546]  ? shmem_write_begin+0x210/0x210
[ 2816.245079][ T6546]  shmem_file_write_iter+0xc8/0xe0
[ 2816.250317][ T6546]  vfs_write+0x4ab/0x7d0
22:46:50 executing program 0:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x59e201, 0x0)
write$ppp(r0, 0x0, 0xeffdffffffffffff)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x59e201, 0x0) (async)
write$ppp(r0, 0x0, 0xeffdffffffffffff) (async)

[ 2816.254609][ T6546]  ksys_write+0xeb/0x1a0
[ 2816.258877][ T6546]  __x64_sys_write+0x42/0x50
[ 2816.263655][ T6546]  do_syscall_64+0x41/0xc0
[ 2816.268121][ T6546]  entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 2816.274117][ T6546] RIP: 0033:0x7f90e4a54ae9
[ 2816.278563][ T6546] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48
[ 2816.298228][ T6546] RSP: 002b:00007f90e3dd70c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 2816.306661][ T6546] RAX: ffffffffffffffda RBX: 00007f90e4b73f80 RCX: 00007f90e4a54ae9
[ 2816.314660][ T6546] RDX: 00000000001f4f33 RSI: 00000000200002c0 RDI: 0000000000000003
[ 2816.322643][ T6546] RBP: 00007f90e3dd7120 R08: 0000000000000000 R09: 0000000000000000
[ 2816.330695][ T6546] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 2816.338798][ T6546] R13: 000000000000000b R14: 00007f90e4b73f80 R15: 00007ffdb3bfd028
[ 2816.346791][ T6546]  </TASK>
22:46:51 executing program 4:
sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, 0x0, 0x4, 0x70bd2c, 0x25dfdbfd, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x44}, 0x80)
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000140), 0x80000, 0x0)
epoll_create(0xfffffff8)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000180)=0x1, 0x4)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)

22:46:51 executing program 0:
recvfrom$llc(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x12000, 0x0, 0x0)
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
write$ppp(r0, 0x0, 0xeffdffffffffffff)

22:46:51 executing program 2:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
r1 = syz_init_net_socket$llc(0x1a, 0x2, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000280)={0xac, 0x0, &(0x7f00000003c0)=[@reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000300)={@fd={0x66642a85, 0x0, r0}, @fda={0x66646185, 0x3, 0x0, 0x26}, @fda={0x66646185, 0x2, 0x2, 0x15}}, &(0x7f0000000380)={0x0, 0x18, 0x38}}}, @request_death={0x400c630e, 0x3}, @exit_looper, @register_looper, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x58, 0x18, &(0x7f00000000c0)={@fd={0x66642a85, 0x0, r1}, @ptr={0x70742a85, 0x1, &(0x7f0000000000)=""/113, 0x71, 0x0, 0x12}, @flat=@binder={0x73622a85, 0x1100}}, &(0x7f0000000140)={0x0, 0x18, 0x40}}}, @dead_binder_done], 0x42, 0x0, &(0x7f0000000200)="32c068ee106813de22fcbbba31f02c26268fb72afcadb62ad0d33fde04e95f4d7d06dc10852c01164abc25dd2a0b35a36ab66004f89ccc96329362196d354869f41a"})
write$ppp(r0, &(0x7f00000002c0)="d3", 0x1)

22:46:51 executing program 1:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
write$ppp(r0, 0x0, 0xeffdffff)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x200000, 0x0)
ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f00000000c0)=0x4)

22:46:51 executing program 5:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
write$ppp(r0, &(0x7f00000002c0)="d3", 0x1f4f33) (fail_nth: 84)

22:46:51 executing program 3:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
write$ppp(r0, &(0x7f00000002c0)="d3", 0xfffffdef)
sendmsg$AUDIT_TTY_SET(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x62fade6fe89fa622}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x18, 0x3f9, 0x20, 0x70bd27, 0x25dfdbfc, {0x1, 0x1}, ["", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x4}, 0x4010001)

22:46:51 executing program 0:
recvfrom$llc(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x12000, 0x0, 0x0)
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
write$ppp(r0, 0x0, 0xeffdffffffffffff)

22:46:51 executing program 4:
sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, 0x0, 0x4, 0x70bd2c, 0x25dfdbfd, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x44}, 0x80)
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000140), 0x80000, 0x0)
epoll_create(0xfffffff8) (async)
epoll_create(0xfffffff8)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000180)=0x1, 0x4)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)

22:46:51 executing program 4:
sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, 0x0, 0x4, 0x70bd2c, 0x25dfdbfd, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x44}, 0x80) (async)
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000140), 0x80000, 0x0)
epoll_create(0xfffffff8) (async)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000180)=0x1, 0x4)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)

22:46:51 executing program 2:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0) (async)
r1 = syz_init_net_socket$llc(0x1a, 0x2, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000280)={0xac, 0x0, &(0x7f00000003c0)=[@reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000300)={@fd={0x66642a85, 0x0, r0}, @fda={0x66646185, 0x3, 0x0, 0x26}, @fda={0x66646185, 0x2, 0x2, 0x15}}, &(0x7f0000000380)={0x0, 0x18, 0x38}}}, @request_death={0x400c630e, 0x3}, @exit_looper, @register_looper, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x58, 0x18, &(0x7f00000000c0)={@fd={0x66642a85, 0x0, r1}, @ptr={0x70742a85, 0x1, &(0x7f0000000000)=""/113, 0x71, 0x0, 0x12}, @flat=@binder={0x73622a85, 0x1100}}, &(0x7f0000000140)={0x0, 0x18, 0x40}}}, @dead_binder_done], 0x42, 0x0, &(0x7f0000000200)="32c068ee106813de22fcbbba31f02c26268fb72afcadb62ad0d33fde04e95f4d7d06dc10852c01164abc25dd2a0b35a36ab66004f89ccc96329362196d354869f41a"}) (async)
write$ppp(r0, &(0x7f00000002c0)="d3", 0x1)

[ 2817.010613][ T6578] FAULT_INJECTION: forcing a failure.
[ 2817.010613][ T6578] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[ 2817.023910][ T6578] CPU: 1 PID: 6578 Comm: syz-executor.5 Not tainted 6.6.0-rc3-syzkaller-00165-g3b517966c561 #0
[ 2817.034324][ T6578] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/06/2023
[ 2817.044409][ T6578] Call Trace:
[ 2817.047698][ T6578]  <TASK>
[ 2817.050724][ T6578]  dump_stack_lvl+0xda/0x130
[ 2817.055340][ T6578]  dump_stack+0x15/0x20
22:46:51 executing program 4:
write$ppp(0xffffffffffffffff, 0x0, 0x0)
ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff)
openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040), 0x311800, 0x0)

22:46:51 executing program 1:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
write$ppp(r0, 0x0, 0xeffdffff) (async, rerun: 32)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x200000, 0x0) (rerun: 32)
ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f00000000c0)=0x4)

22:46:51 executing program 4:
write$ppp(0xffffffffffffffff, 0x0, 0x0) (async)
ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff)
openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040), 0x311800, 0x0)

[ 2817.059529][ T6578]  should_fail_ex+0x21f/0x230
[ 2817.064296][ T6578]  __should_fail_alloc_page+0xfd/0x110
[ 2817.069849][ T6578]  __alloc_pages+0x108/0x340
[ 2817.074558][ T6578]  vma_alloc_folio+0x6a3/0x8c0
[ 2817.079520][ T6578]  ? shmem_inode_acct_block+0x1ee/0x220
[ 2817.085103][ T6578]  shmem_get_folio_gfp+0x579/0xc30
[ 2817.090303][ T6578]  shmem_write_begin+0xa6/0x210
[ 2817.095219][ T6578]  generic_perform_write+0x1c9/0x410
[ 2817.100567][ T6578]  ? shmem_write_begin+0x210/0x210
[ 2817.105701][ T6578]  shmem_file_write_iter+0xc8/0xe0
[ 2817.110948][ T6578]  vfs_write+0x4ab/0x7d0
[ 2817.115267][ T6578]  ksys_write+0xeb/0x1a0
[ 2817.119581][ T6578]  __x64_sys_write+0x42/0x50
[ 2817.124199][ T6578]  do_syscall_64+0x41/0xc0
[ 2817.128642][ T6578]  entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 2817.134578][ T6578] RIP: 0033:0x7f90e4a54ae9
[ 2817.139033][ T6578] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48
22:46:51 executing program 4:
write$ppp(0xffffffffffffffff, 0x0, 0x0)
ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff)
openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040), 0x311800, 0x0) (async)
openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040), 0x311800, 0x0)

22:46:51 executing program 5:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
write$ppp(r0, &(0x7f00000002c0)="d3", 0x1f4f33) (fail_nth: 85)

[ 2817.158667][ T6578] RSP: 002b:00007f90e3dd70c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 2817.167102][ T6578] RAX: ffffffffffffffda RBX: 00007f90e4b73f80 RCX: 00007f90e4a54ae9
[ 2817.175082][ T6578] RDX: 00000000001f4f33 RSI: 00000000200002c0 RDI: 0000000000000003
[ 2817.183158][ T6578] RBP: 00007f90e3dd7120 R08: 0000000000000000 R09: 0000000000000000
[ 2817.191196][ T6578] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 2817.199199][ T6578] R13: 000000000000000b R14: 00007f90e4b73f80 R15: 00007ffdb3bfd028
[ 2817.207187][ T6578]  </TASK>
22:46:51 executing program 0:
recvfrom$llc(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x12000, 0x0, 0x0) (async, rerun: 32)
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0) (rerun: 32)
write$ppp(r0, 0x0, 0xeffdffffffffffff)

22:46:51 executing program 1:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
write$ppp(r0, 0x0, 0xeffdffff) (async)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x200000, 0x0)
ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f00000000c0)=0x4)

[ 2817.237750][ T6606] FAULT_INJECTION: forcing a failure.
[ 2817.237750][ T6606] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 2817.250942][ T6606] CPU: 1 PID: 6606 Comm: syz-executor.5 Not tainted 6.6.0-rc3-syzkaller-00165-g3b517966c561 #0
[ 2817.261442][ T6606] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/06/2023
[ 2817.271518][ T6606] Call Trace:
[ 2817.274806][ T6606]  <TASK>
[ 2817.277742][ T6606]  dump_stack_lvl+0xda/0x130
[ 2817.282344][ T6606]  dump_stack+0x15/0x20
22:46:51 executing program 1:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5cec01, 0x0)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(r1, 0x10f, 0x86)
socketpair(0x2, 0x2, 0x3, &(0x7f00000000c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmsg$AUDIT_GET_FEATURE(r2, &(0x7f0000000000)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x3fb, 0x100, 0x70bd2b, 0x25dfdbfc, "", ["", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x100}, 0x20000000)
write$ppp(r0, 0x0, 0xeffdffff)

22:46:51 executing program 3:
openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0) (async)
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
write$ppp(r0, &(0x7f00000002c0)="d3", 0xfffffdef)
sendmsg$AUDIT_TTY_SET(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x62fade6fe89fa622}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x18, 0x3f9, 0x20, 0x70bd27, 0x25dfdbfc, {0x1, 0x1}, ["", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x4}, 0x4010001)

[ 2817.286562][ T6606]  should_fail_ex+0x21f/0x230
[ 2817.291267][ T6606]  should_fail+0xb/0x10
[ 2817.295438][ T6606]  should_fail_usercopy+0x1a/0x20
[ 2817.300530][ T6606]  copy_page_from_iter_atomic+0x21c/0xcf0
[ 2817.306362][ T6606]  ? shmem_write_begin+0xa6/0x210
[ 2817.311460][ T6606]  ? shmem_write_begin+0x16d/0x210
[ 2817.316670][ T6606]  generic_perform_write+0x20c/0x410
[ 2817.321985][ T6606]  ? shmem_write_begin+0x210/0x210
[ 2817.327242][ T6606]  shmem_file_write_iter+0xc8/0xe0
[ 2817.332429][ T6606]  vfs_write+0x4ab/0x7d0
22:46:51 executing program 1:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5cec01, 0x0)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(r1, 0x10f, 0x86)
socketpair(0x2, 0x2, 0x3, &(0x7f00000000c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmsg$AUDIT_GET_FEATURE(r2, &(0x7f0000000000)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x3fb, 0x100, 0x70bd2b, 0x25dfdbfc, "", ["", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x100}, 0x20000000) (async, rerun: 32)
write$ppp(r0, 0x0, 0xeffdffff) (rerun: 32)

[ 2817.336706][ T6606]  ksys_write+0xeb/0x1a0
[ 2817.340974][ T6606]  __x64_sys_write+0x42/0x50
[ 2817.345657][ T6606]  do_syscall_64+0x41/0xc0
[ 2817.350195][ T6606]  entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 2817.356251][ T6606] RIP: 0033:0x7f90e4a54ae9
[ 2817.360694][ T6606] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48
22:46:51 executing program 4:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
write$ppp(r0, 0x0, 0x0)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x10400, 0x0)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x618081, 0x0)
ioctl$LOOP_SET_FD(r0, 0x4c00, r1)
r2 = openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(r2, 0x10f, 0x86)
r3 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r3)

22:46:51 executing program 2:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
syz_init_net_socket$llc(0x1a, 0x2, 0x0) (async)
r1 = syz_init_net_socket$llc(0x1a, 0x2, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000280)={0xac, 0x0, &(0x7f00000003c0)=[@reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000300)={@fd={0x66642a85, 0x0, r0}, @fda={0x66646185, 0x3, 0x0, 0x26}, @fda={0x66646185, 0x2, 0x2, 0x15}}, &(0x7f0000000380)={0x0, 0x18, 0x38}}}, @request_death={0x400c630e, 0x3}, @exit_looper, @register_looper, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x58, 0x18, &(0x7f00000000c0)={@fd={0x66642a85, 0x0, r1}, @ptr={0x70742a85, 0x1, &(0x7f0000000000)=""/113, 0x71, 0x0, 0x12}, @flat=@binder={0x73622a85, 0x1100}}, &(0x7f0000000140)={0x0, 0x18, 0x40}}}, @dead_binder_done], 0x42, 0x0, &(0x7f0000000200)="32c068ee106813de22fcbbba31f02c26268fb72afcadb62ad0d33fde04e95f4d7d06dc10852c01164abc25dd2a0b35a36ab66004f89ccc96329362196d354869f41a"})
write$ppp(r0, &(0x7f00000002c0)="d3", 0x1)

22:46:51 executing program 1:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5cec01, 0x0) (async)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(r1, 0x10f, 0x86) (async)
socketpair(0x2, 0x2, 0x3, &(0x7f00000000c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmsg$AUDIT_GET_FEATURE(r2, &(0x7f0000000000)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x3fb, 0x100, 0x70bd2b, 0x25dfdbfc, "", ["", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x100}, 0x20000000)
write$ppp(r0, 0x0, 0xeffdffff)

22:46:51 executing program 4:
openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0) (async)
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
write$ppp(r0, 0x0, 0x0)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x10400, 0x0) (async)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x10400, 0x0)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x618081, 0x0) (async)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x618081, 0x0)
ioctl$LOOP_SET_FD(r0, 0x4c00, r1)
r2 = openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(r2, 0x10f, 0x86)
r3 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r3)

[ 2817.380355][ T6606] RSP: 002b:00007f90e3dd70c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 2817.388853][ T6606] RAX: ffffffffffffffda RBX: 00007f90e4b73f80 RCX: 00007f90e4a54ae9
[ 2817.396855][ T6606] RDX: 00000000001f4f33 RSI: 00000000200002c0 RDI: 0000000000000003
[ 2817.404864][ T6606] RBP: 00007f90e3dd7120 R08: 0000000000000000 R09: 0000000000000000
[ 2817.412932][ T6606] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 2817.420907][ T6606] R13: 000000000000000b R14: 00007f90e4b73f80 R15: 00007ffdb3bfd028
[ 2817.428892][ T6606]  </TASK>
22:46:51 executing program 0:
r0 = getuid()
setuid(r0)
r1 = getuid()
mount$9p_unix(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='./file0\x00', &(0x7f0000000280), 0x800, &(0x7f00000002c0)={'trans=unix,', {[{@afid={'afid', 0x3d, 0x9}}, {@mmap}, {@privport}], [{@subj_user}, {@euid_lt={'euid<', r1}}, {@permit_directio}, {@dont_measure}]}})
quotactl_fd$Q_QUOTAON(0xffffffffffffffff, 0xffffffff80000200, r0, &(0x7f0000000000)='./file0\x00')
r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
write$ppp(r2, 0x0, 0xeffdffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, 0x0, 0x9, 0x70bd2b, 0x25dfdbfe, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x1}, @L2TP_ATTR_SESSION_ID={0x68, 0xb, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x804}, 0x8004)
prctl$PR_SET_SYSCALL_USER_DISPATCH_OFF(0x3b, 0x0)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x101000, 0x0)
ioctl$TUNGETVNETHDRSZ(r3, 0x800454d7, &(0x7f00000000c0))
r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000380), r2)
sendmsg$L2TP_CMD_TUNNEL_MODIFY(r2, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x28, r4, 0x200, 0x70bd26, 0x25dfdbfe, {}, [@L2TP_ATTR_COOKIE={0xc, 0xf, 0xffffffffffffff80}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x2}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0xc2)

22:46:51 executing program 2:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x78a403, 0x0)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(r1, 0x10f, 0x86)
ioctl$PPPIOCATTCHAN(r1, 0x40047438, &(0x7f0000000040)=0x2)
write$ppp(r0, &(0x7f00000002c0)="d3", 0x1)

22:46:51 executing program 5:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
write$ppp(r0, &(0x7f00000002c0)="d3", 0x1f4f33) (fail_nth: 86)

22:46:51 executing program 4:
openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0) (async)
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
write$ppp(r0, 0x0, 0x0)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x10400, 0x0)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x618081, 0x0) (async)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x618081, 0x0)
ioctl$LOOP_SET_FD(r0, 0x4c00, r1) (async)
ioctl$LOOP_SET_FD(r0, 0x4c00, r1)
r2 = openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(r2, 0x10f, 0x86)
r3 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r3)

22:46:51 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x3c, 0x0, 0x102, 0x70bd26, 0x25dfdbfb, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_COOKIE={0xc}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x895}, 0x0)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
write$ppp(r1, 0x0, 0xeffdffff)

22:46:51 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x3c, 0x0, 0x102, 0x70bd26, 0x25dfdbfb, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_COOKIE={0xc}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x895}, 0x0)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
write$ppp(r1, 0x0, 0xeffdffff)

[ 2817.540687][ T6654] FAULT_INJECTION: forcing a failure.
[ 2817.540687][ T6654] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[ 2817.554132][ T6654] CPU: 1 PID: 6654 Comm: syz-executor.5 Not tainted 6.6.0-rc3-syzkaller-00165-g3b517966c561 #0
[ 2817.564532][ T6654] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/06/2023
[ 2817.574628][ T6654] Call Trace:
[ 2817.577916][ T6654]  <TASK>
[ 2817.580856][ T6654]  dump_stack_lvl+0xda/0x130
[ 2817.585468][ T6654]  dump_stack+0x15/0x20
[ 2817.589686][ T6654]  should_fail_ex+0x21f/0x230
[ 2817.594412][ T6654]  __should_fail_alloc_page+0xfd/0x110
[ 2817.599939][ T6654]  __alloc_pages+0x108/0x340
[ 2817.604609][ T6654]  vma_alloc_folio+0x6a3/0x8c0
[ 2817.609409][ T6654]  ? shmem_inode_acct_block+0x1ee/0x220
[ 2817.614980][ T6654]  shmem_get_folio_gfp+0x579/0xc30
[ 2817.620112][ T6654]  shmem_write_begin+0xa6/0x210
[ 2817.625057][ T6654]  generic_perform_write+0x1c9/0x410
[ 2817.630359][ T6654]  ? shmem_write_begin+0x210/0x210
[ 2817.635490][ T6654]  shmem_file_write_iter+0xc8/0xe0
22:46:51 executing program 3:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
write$ppp(r0, &(0x7f00000002c0)="d3", 0xfffffdef) (async)
sendmsg$AUDIT_TTY_SET(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x62fade6fe89fa622}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x18, 0x3f9, 0x20, 0x70bd27, 0x25dfdbfc, {0x1, 0x1}, ["", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x4}, 0x4010001)

22:46:51 executing program 2:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x78a403, 0x0) (async)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(r1, 0x10f, 0x86) (async)
ioctl$PPPIOCATTCHAN(r1, 0x40047438, &(0x7f0000000040)=0x2)
write$ppp(r0, &(0x7f00000002c0)="d3", 0x1)

22:46:51 executing program 4:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
write$ppp(r0, 0x0, 0x0)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(r1, 0x10f, 0x86)
quotactl_fd$Q_QUOTAON(r1, 0xffffffff80000201, 0xee01, &(0x7f0000000000)='./file0\x00')
r2 = openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(r2, 0x10f, 0x86)
r3 = openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(r3, 0x10f, 0x86)
r4 = openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(r4, 0x10f, 0x86)
r5 = openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(r5, 0x10f, 0x86)
ioctl$LOOP_SET_FD(r0, 0x4c00, r5)

22:46:51 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x3c, 0x0, 0x102, 0x70bd26, 0x25dfdbfb, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_COOKIE={0xc}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x895}, 0x0)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
write$ppp(r1, 0x0, 0xeffdffff)

22:46:51 executing program 0:
r0 = getuid()
setuid(r0)
r1 = getuid()
mount$9p_unix(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='./file0\x00', &(0x7f0000000280), 0x800, &(0x7f00000002c0)={'trans=unix,', {[{@afid={'afid', 0x3d, 0x9}}, {@mmap}, {@privport}], [{@subj_user}, {@euid_lt={'euid<', r1}}, {@permit_directio}, {@dont_measure}]}})
quotactl_fd$Q_QUOTAON(0xffffffffffffffff, 0xffffffff80000200, r0, &(0x7f0000000000)='./file0\x00')
r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
write$ppp(r2, 0x0, 0xeffdffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, 0x0, 0x9, 0x70bd2b, 0x25dfdbfe, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x1}, @L2TP_ATTR_SESSION_ID={0x68, 0xb, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x804}, 0x8004)
prctl$PR_SET_SYSCALL_USER_DISPATCH_OFF(0x3b, 0x0)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x101000, 0x0)
ioctl$TUNGETVNETHDRSZ(r3, 0x800454d7, &(0x7f00000000c0))
r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000380), r2)
sendmsg$L2TP_CMD_TUNNEL_MODIFY(r2, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x28, r4, 0x200, 0x70bd26, 0x25dfdbfe, {}, [@L2TP_ATTR_COOKIE={0xc, 0xf, 0xffffffffffffff80}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x2}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0xc2)
getuid() (async)
setuid(r0) (async)
getuid() (async)
mount$9p_unix(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='./file0\x00', &(0x7f0000000280), 0x800, &(0x7f00000002c0)={'trans=unix,', {[{@afid={'afid', 0x3d, 0x9}}, {@mmap}, {@privport}], [{@subj_user}, {@euid_lt={'euid<', r1}}, {@permit_directio}, {@dont_measure}]}}) (async)
quotactl_fd$Q_QUOTAON(0xffffffffffffffff, 0xffffffff80000200, r0, &(0x7f0000000000)='./file0\x00') (async)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0) (async)
write$ppp(r2, 0x0, 0xeffdffffffffffff) (async)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, 0x0, 0x9, 0x70bd2b, 0x25dfdbfe, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x1}, @L2TP_ATTR_SESSION_ID={0x68, 0xb, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x804}, 0x8004) (async)
prctl$PR_SET_SYSCALL_USER_DISPATCH_OFF(0x3b, 0x0) (async)
openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x101000, 0x0) (async)
ioctl$TUNGETVNETHDRSZ(r3, 0x800454d7, &(0x7f00000000c0)) (async)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000380), r2) (async)
sendmsg$L2TP_CMD_TUNNEL_MODIFY(r2, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x28, r4, 0x200, 0x70bd26, 0x25dfdbfe, {}, [@L2TP_ATTR_COOKIE={0xc, 0xf, 0xffffffffffffff80}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x2}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0xc2) (async)

22:46:51 executing program 2:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x78a403, 0x0)
openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0) (async)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(r1, 0x10f, 0x86)
ioctl$PPPIOCATTCHAN(r1, 0x40047438, &(0x7f0000000040)=0x2)
write$ppp(r0, &(0x7f00000002c0)="d3", 0x1)

22:46:51 executing program 4:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
write$ppp(r0, 0x0, 0x0) (async)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(r1, 0x10f, 0x86) (async)
quotactl_fd$Q_QUOTAON(r1, 0xffffffff80000201, 0xee01, &(0x7f0000000000)='./file0\x00') (async)
r2 = openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(r2, 0x10f, 0x86) (async)
r3 = openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(r3, 0x10f, 0x86) (async)
r4 = openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(r4, 0x10f, 0x86) (async)
r5 = openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(r5, 0x10f, 0x86) (async)
ioctl$LOOP_SET_FD(r0, 0x4c00, r5)

[ 2817.640652][ T6654]  vfs_write+0x4ab/0x7d0
[ 2817.644954][ T6654]  ksys_write+0xeb/0x1a0
[ 2817.649236][ T6654]  __x64_sys_write+0x42/0x50
[ 2817.653943][ T6654]  do_syscall_64+0x41/0xc0
[ 2817.658393][ T6654]  entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 2817.664374][ T6654] RIP: 0033:0x7f90e4a54ae9
[ 2817.668817][ T6654] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48
22:46:51 executing program 2:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
write$ppp(r0, &(0x7f00000002c0)="d3", 0x1)
mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x810, r0, 0x10000000)
socketpair(0x18, 0x5, 0x786b5809, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg(r1, &(0x7f0000000940)={&(0x7f0000000200)=@ll={0x11, 0xd, 0x0, 0x1, 0x5, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x34}}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000300)="347b69a14ee9f990421ee36bee2f1799b636de64f1739973051248bf0f285c4f008f4ce6babfb34f04bce4ed4663f199b7938624243e8d65b8d645d71da04a654d0aab0130febaea788a0fcdffc0d5b8a3ba645a206a3f9bed6bacf04d514febbe6b544356ed54dc29cdc0315d8a41811c7ae5700851ef", 0x77}], 0x1, &(0x7f0000000380)=[{0xb8, 0x10e, 0x3, "6c9440bcbf6dfbe9a672983cf0d5ed1278a43baea5abb12fcdf8e6e99f8e43c5d8e7645f7f311db34e4ef84c9b287da23b7a63cecc0cec6f33efdbef29ec3c28c0e750213dd1e4a5e133be80dada8a799cdb7feeee3122bdf437b5c70681638f7cae0d53df3a363f8b902a9fcc43bf414e61083aa35eb677a288a649b339d058c7937426c28e402cc9d38dca54094d42828f327d0d688f514310edaef36edb561cfd7e3928ae27"}, {0x40, 0x84, 0x562, "8092345b2cd45cfcdd32b6bc28f95bcdfa871ba60ed283a55d73df4055cd044c0cda25bdc8b5a24dc71ec6"}, {0x100, 0x84, 0x4, "5841f74f0a10d6b3b56404fd7b559138e849f3b344745daf0abced0baf85eadd55097886b925be56b9d08d78d63d29ecbca9b4a550cb523f7c5c5cb40dda089fc4aeb199a9c5bd9f3a7535b127a09bfd71145d2964485f4df16e49e206e51a54394101a236ce241effb895fe29a450732df269bcc4b7ca5c3a43f9851855abf1dc85124b70eb97550cd43ec83bd9a1d70f2d04f8a4b185297ddc7dc74575e2e300285bd48834907ab7786a45c1a91e2c41660ead8ee4bcce6b7759223419629cef88536273c8b06cc8524e3133c6bf31b5e505faffd4d22e3b38d0e4329d466ba9d9efffc8de01fabe4f39"}, {0x28, 0x3c011141bc618fc1, 0x1ff, "2d2a4f5d466bef4513eddf4e5984a582b87123cc1a"}, {0xe0, 0x88, 0x70, "96670469c1e1689bf52a8200873969989b3c7075c45087a28a28bb578331ba56bc10a3481787a43de9c1754c6e0aaaebbc7e1849c860fe2759eeb06c1ceeec1caaf3169e027158fe253ff230d70ed551b03c3648eab3d22613d99a8e50d8de3ab95ebc7702fa124ac20c69e33faad62f6f98e8e9a5364722a4d7c625a18e35c47fba6c5470e5ef27f0cf5bc82d7646ec008c4ba989b3b4a9d1beef514711b0f577cad8b63c2a678a52eac241e8370880974e5a668b45f10d9951b78fd5c502445f7a1b3188687252505c55"}, {0x40, 0x84, 0x0, "9aa940cf12f38d29d021a5946ee412c7456dcaf6bfd19ec16e0997bd5ccd6baffa408823db8d41c75ffb9fb5ef5d"}, {0x40, 0x110, 0x8, "b2b9109f5f9384fcf63d957051275f333df69291f60a6afce0f796750ecd19ca62721023c15db0223d456cf2"}, {0x90, 0x102, 0x3, "cddc6b96e9809be500772dc4a0d10ff81319580391e76f32a6754c6b845c6d2a41f8709db07c1d522048769734f389eb344e3f23ff076cc00f330bfc15abcbf59df77f3fe7e7528960ce674bd4fef4ef1d7b1081ec99042c852d76d593de6ed62eaf6ece09e213c091881536cef42f60d7dfe17adab744547e059f"}, {0xf8, 0x115, 0x6, "ea1f6403ffc15d585134b9e46d620a49627d614e56fa3f6b9f10b43d22a47c8d40f76dc8155e609b5c0cd92ad470639a0c5cce7f2ca62ad80335b6efa0c85cdd78ab2ff0b590106867083e8f288ff7689e287239f80185e84bd82f77b79a3ca83f49412628123ff050e12f0eacfe022a9dbfc6eee0df909c608108c89f6850324b40e694e2eded7a5911eb8cca2f1ef53128dd6d9c67f95a07d579baf582f4f8bb6970b9e0dfe407c1cce2ef92801227d83774d55203cc544597d203bbf27d0dc17db82f19def6b994c315bdfef5a798d597bfa64ebb83f6c81592f28ed30fa72b8c"}, {0x98, 0x10f, 0x3f, "95e1e27ca2116a6750f02db1a762d1f12b3de621279429dccf71fda4c4ec15c60395bab04506923485dd13bd8929ca5c8afb19be468ec59de740f8ebba3ef1d74d4e4c3049b5dac553d86535c316543bfbb584ce9db7b63526c1265d9b413592d5f62f303a04b6b7d470e38339c6f89ae247c4f3dabbf33924b91fc1b55e1160db0b"}], 0x5a0}, 0x11)
r2 = syz_genetlink_get_family_id$SEG6(&(0x7f00000000c0), r0)
sendmsg$SEG6_CMD_SETHMAC(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x50, r2, 0x10, 0x70bd27, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}}, @SEG6_ATTR_SECRET={0x8, 0x4, [0x0]}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x4}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x3}, @SEG6_ATTR_ALGID={0x5}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x1}]}, 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x4000000)

[ 2817.688460][ T6654] RSP: 002b:00007f90e3dd70c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 2817.696903][ T6654] RAX: ffffffffffffffda RBX: 00007f90e4b73f80 RCX: 00007f90e4a54ae9
[ 2817.704952][ T6654] RDX: 00000000001f4f33 RSI: 00000000200002c0 RDI: 0000000000000003
[ 2817.712934][ T6654] RBP: 00007f90e3dd7120 R08: 0000000000000000 R09: 0000000000000000
[ 2817.720951][ T6654] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 2817.728939][ T6654] R13: 000000000000000b R14: 00007f90e4b73f80 R15: 00007ffdb3bfd028
[ 2817.736985][ T6654]  </TASK>
22:46:51 executing program 5:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
write$ppp(r0, &(0x7f00000002c0)="d3", 0x1f4f33) (fail_nth: 87)

22:46:51 executing program 4:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
write$ppp(r0, 0x0, 0x0)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(r1, 0x10f, 0x86) (async)
quotactl_fd$Q_QUOTAON(r1, 0xffffffff80000201, 0xee01, &(0x7f0000000000)='./file0\x00')
r2 = openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(r2, 0x10f, 0x86) (async)
r3 = openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(r3, 0x10f, 0x86) (async)
r4 = openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(r4, 0x10f, 0x86)
r5 = openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(r5, 0x10f, 0x86) (async)
ioctl$LOOP_SET_FD(r0, 0x4c00, r5)

22:46:51 executing program 0:
r0 = getuid()
setuid(r0) (async)
r1 = getuid()
mount$9p_unix(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='./file0\x00', &(0x7f0000000280), 0x800, &(0x7f00000002c0)={'trans=unix,', {[{@afid={'afid', 0x3d, 0x9}}, {@mmap}, {@privport}], [{@subj_user}, {@euid_lt={'euid<', r1}}, {@permit_directio}, {@dont_measure}]}}) (async)
quotactl_fd$Q_QUOTAON(0xffffffffffffffff, 0xffffffff80000200, r0, &(0x7f0000000000)='./file0\x00')
r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
write$ppp(r2, 0x0, 0xeffdffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, 0x0, 0x9, 0x70bd2b, 0x25dfdbfe, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x1}, @L2TP_ATTR_SESSION_ID={0x68, 0xb, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x804}, 0x8004) (async)
prctl$PR_SET_SYSCALL_USER_DISPATCH_OFF(0x3b, 0x0)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x101000, 0x0)
ioctl$TUNGETVNETHDRSZ(r3, 0x800454d7, &(0x7f00000000c0)) (async)
r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000380), r2)
sendmsg$L2TP_CMD_TUNNEL_MODIFY(r2, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x28, r4, 0x200, 0x70bd26, 0x25dfdbfe, {}, [@L2TP_ATTR_COOKIE={0xc, 0xf, 0xffffffffffffff80}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x2}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0xc2)

22:46:51 executing program 2:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
write$ppp(r0, &(0x7f00000002c0)="d3", 0x1) (async)
mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x810, r0, 0x10000000) (async)
socketpair(0x18, 0x5, 0x786b5809, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg(r1, &(0x7f0000000940)={&(0x7f0000000200)=@ll={0x11, 0xd, 0x0, 0x1, 0x5, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x34}}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000300)="347b69a14ee9f990421ee36bee2f1799b636de64f1739973051248bf0f285c4f008f4ce6babfb34f04bce4ed4663f199b7938624243e8d65b8d645d71da04a654d0aab0130febaea788a0fcdffc0d5b8a3ba645a206a3f9bed6bacf04d514febbe6b544356ed54dc29cdc0315d8a41811c7ae5700851ef", 0x77}], 0x1, &(0x7f0000000380)=[{0xb8, 0x10e, 0x3, "6c9440bcbf6dfbe9a672983cf0d5ed1278a43baea5abb12fcdf8e6e99f8e43c5d8e7645f7f311db34e4ef84c9b287da23b7a63cecc0cec6f33efdbef29ec3c28c0e750213dd1e4a5e133be80dada8a799cdb7feeee3122bdf437b5c70681638f7cae0d53df3a363f8b902a9fcc43bf414e61083aa35eb677a288a649b339d058c7937426c28e402cc9d38dca54094d42828f327d0d688f514310edaef36edb561cfd7e3928ae27"}, {0x40, 0x84, 0x562, "8092345b2cd45cfcdd32b6bc28f95bcdfa871ba60ed283a55d73df4055cd044c0cda25bdc8b5a24dc71ec6"}, {0x100, 0x84, 0x4, "5841f74f0a10d6b3b56404fd7b559138e849f3b344745daf0abced0baf85eadd55097886b925be56b9d08d78d63d29ecbca9b4a550cb523f7c5c5cb40dda089fc4aeb199a9c5bd9f3a7535b127a09bfd71145d2964485f4df16e49e206e51a54394101a236ce241effb895fe29a450732df269bcc4b7ca5c3a43f9851855abf1dc85124b70eb97550cd43ec83bd9a1d70f2d04f8a4b185297ddc7dc74575e2e300285bd48834907ab7786a45c1a91e2c41660ead8ee4bcce6b7759223419629cef88536273c8b06cc8524e3133c6bf31b5e505faffd4d22e3b38d0e4329d466ba9d9efffc8de01fabe4f39"}, {0x28, 0x3c011141bc618fc1, 0x1ff, "2d2a4f5d466bef4513eddf4e5984a582b87123cc1a"}, {0xe0, 0x88, 0x70, "96670469c1e1689bf52a8200873969989b3c7075c45087a28a28bb578331ba56bc10a3481787a43de9c1754c6e0aaaebbc7e1849c860fe2759eeb06c1ceeec1caaf3169e027158fe253ff230d70ed551b03c3648eab3d22613d99a8e50d8de3ab95ebc7702fa124ac20c69e33faad62f6f98e8e9a5364722a4d7c625a18e35c47fba6c5470e5ef27f0cf5bc82d7646ec008c4ba989b3b4a9d1beef514711b0f577cad8b63c2a678a52eac241e8370880974e5a668b45f10d9951b78fd5c502445f7a1b3188687252505c55"}, {0x40, 0x84, 0x0, "9aa940cf12f38d29d021a5946ee412c7456dcaf6bfd19ec16e0997bd5ccd6baffa408823db8d41c75ffb9fb5ef5d"}, {0x40, 0x110, 0x8, "b2b9109f5f9384fcf63d957051275f333df69291f60a6afce0f796750ecd19ca62721023c15db0223d456cf2"}, {0x90, 0x102, 0x3, "cddc6b96e9809be500772dc4a0d10ff81319580391e76f32a6754c6b845c6d2a41f8709db07c1d522048769734f389eb344e3f23ff076cc00f330bfc15abcbf59df77f3fe7e7528960ce674bd4fef4ef1d7b1081ec99042c852d76d593de6ed62eaf6ece09e213c091881536cef42f60d7dfe17adab744547e059f"}, {0xf8, 0x115, 0x6, "ea1f6403ffc15d585134b9e46d620a49627d614e56fa3f6b9f10b43d22a47c8d40f76dc8155e609b5c0cd92ad470639a0c5cce7f2ca62ad80335b6efa0c85cdd78ab2ff0b590106867083e8f288ff7689e287239f80185e84bd82f77b79a3ca83f49412628123ff050e12f0eacfe022a9dbfc6eee0df909c608108c89f6850324b40e694e2eded7a5911eb8cca2f1ef53128dd6d9c67f95a07d579baf582f4f8bb6970b9e0dfe407c1cce2ef92801227d83774d55203cc544597d203bbf27d0dc17db82f19def6b994c315bdfef5a798d597bfa64ebb83f6c81592f28ed30fa72b8c"}, {0x98, 0x10f, 0x3f, "95e1e27ca2116a6750f02db1a762d1f12b3de621279429dccf71fda4c4ec15c60395bab04506923485dd13bd8929ca5c8afb19be468ec59de740f8ebba3ef1d74d4e4c3049b5dac553d86535c316543bfbb584ce9db7b63526c1265d9b413592d5f62f303a04b6b7d470e38339c6f89ae247c4f3dabbf33924b91fc1b55e1160db0b"}], 0x5a0}, 0x11) (async, rerun: 32)
r2 = syz_genetlink_get_family_id$SEG6(&(0x7f00000000c0), r0) (rerun: 32)
sendmsg$SEG6_CMD_SETHMAC(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x50, r2, 0x10, 0x70bd27, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}}, @SEG6_ATTR_SECRET={0x8, 0x4, [0x0]}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x4}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x3}, @SEG6_ATTR_ALGID={0x5}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x1}]}, 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x4000000)

[ 2817.812735][ T6690] FAULT_INJECTION: forcing a failure.
[ 2817.812735][ T6690] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 2817.825933][ T6690] CPU: 0 PID: 6690 Comm: syz-executor.5 Not tainted 6.6.0-rc3-syzkaller-00165-g3b517966c561 #0
[ 2817.836441][ T6690] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/06/2023
[ 2817.846563][ T6690] Call Trace:
[ 2817.849861][ T6690]  <TASK>
[ 2817.852794][ T6690]  dump_stack_lvl+0xda/0x130
[ 2817.857454][ T6690]  dump_stack+0x15/0x20
[ 2817.861614][ T6690]  should_fail_ex+0x21f/0x230
[ 2817.866305][ T6690]  should_fail+0xb/0x10
[ 2817.870550][ T6690]  should_fail_usercopy+0x1a/0x20
[ 2817.875586][ T6690]  copy_page_from_iter_atomic+0x21c/0xcf0
[ 2817.881347][ T6690]  ? shmem_write_begin+0xa6/0x210
[ 2817.886474][ T6690]  ? shmem_write_begin+0x16d/0x210
[ 2817.891682][ T6690]  generic_perform_write+0x20c/0x410
[ 2817.897045][ T6690]  ? shmem_write_begin+0x210/0x210
[ 2817.902282][ T6690]  shmem_file_write_iter+0xc8/0xe0
[ 2817.907617][ T6690]  vfs_write+0x4ab/0x7d0
[ 2817.911880][ T6690]  ksys_write+0xeb/0x1a0
[ 2817.916230][ T6690]  __x64_sys_write+0x42/0x50
[ 2817.920841][ T6690]  do_syscall_64+0x41/0xc0
[ 2817.925307][ T6690]  entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 2817.931280][ T6690] RIP: 0033:0x7f90e4a54ae9
[ 2817.935716][ T6690] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48
22:46:52 executing program 2:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
write$ppp(r0, &(0x7f00000002c0)="d3", 0x1)
mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x810, r0, 0x10000000)
socketpair(0x18, 0x5, 0x786b5809, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg(r1, &(0x7f0000000940)={&(0x7f0000000200)=@ll={0x11, 0xd, 0x0, 0x1, 0x5, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x34}}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000300)="347b69a14ee9f990421ee36bee2f1799b636de64f1739973051248bf0f285c4f008f4ce6babfb34f04bce4ed4663f199b7938624243e8d65b8d645d71da04a654d0aab0130febaea788a0fcdffc0d5b8a3ba645a206a3f9bed6bacf04d514febbe6b544356ed54dc29cdc0315d8a41811c7ae5700851ef", 0x77}], 0x1, &(0x7f0000000380)=[{0xb8, 0x10e, 0x3, "6c9440bcbf6dfbe9a672983cf0d5ed1278a43baea5abb12fcdf8e6e99f8e43c5d8e7645f7f311db34e4ef84c9b287da23b7a63cecc0cec6f33efdbef29ec3c28c0e750213dd1e4a5e133be80dada8a799cdb7feeee3122bdf437b5c70681638f7cae0d53df3a363f8b902a9fcc43bf414e61083aa35eb677a288a649b339d058c7937426c28e402cc9d38dca54094d42828f327d0d688f514310edaef36edb561cfd7e3928ae27"}, {0x40, 0x84, 0x562, "8092345b2cd45cfcdd32b6bc28f95bcdfa871ba60ed283a55d73df4055cd044c0cda25bdc8b5a24dc71ec6"}, {0x100, 0x84, 0x4, "5841f74f0a10d6b3b56404fd7b559138e849f3b344745daf0abced0baf85eadd55097886b925be56b9d08d78d63d29ecbca9b4a550cb523f7c5c5cb40dda089fc4aeb199a9c5bd9f3a7535b127a09bfd71145d2964485f4df16e49e206e51a54394101a236ce241effb895fe29a450732df269bcc4b7ca5c3a43f9851855abf1dc85124b70eb97550cd43ec83bd9a1d70f2d04f8a4b185297ddc7dc74575e2e300285bd48834907ab7786a45c1a91e2c41660ead8ee4bcce6b7759223419629cef88536273c8b06cc8524e3133c6bf31b5e505faffd4d22e3b38d0e4329d466ba9d9efffc8de01fabe4f39"}, {0x28, 0x3c011141bc618fc1, 0x1ff, "2d2a4f5d466bef4513eddf4e5984a582b87123cc1a"}, {0xe0, 0x88, 0x70, "96670469c1e1689bf52a8200873969989b3c7075c45087a28a28bb578331ba56bc10a3481787a43de9c1754c6e0aaaebbc7e1849c860fe2759eeb06c1ceeec1caaf3169e027158fe253ff230d70ed551b03c3648eab3d22613d99a8e50d8de3ab95ebc7702fa124ac20c69e33faad62f6f98e8e9a5364722a4d7c625a18e35c47fba6c5470e5ef27f0cf5bc82d7646ec008c4ba989b3b4a9d1beef514711b0f577cad8b63c2a678a52eac241e8370880974e5a668b45f10d9951b78fd5c502445f7a1b3188687252505c55"}, {0x40, 0x84, 0x0, "9aa940cf12f38d29d021a5946ee412c7456dcaf6bfd19ec16e0997bd5ccd6baffa408823db8d41c75ffb9fb5ef5d"}, {0x40, 0x110, 0x8, "b2b9109f5f9384fcf63d957051275f333df69291f60a6afce0f796750ecd19ca62721023c15db0223d456cf2"}, {0x90, 0x102, 0x3, "cddc6b96e9809be500772dc4a0d10ff81319580391e76f32a6754c6b845c6d2a41f8709db07c1d522048769734f389eb344e3f23ff076cc00f330bfc15abcbf59df77f3fe7e7528960ce674bd4fef4ef1d7b1081ec99042c852d76d593de6ed62eaf6ece09e213c091881536cef42f60d7dfe17adab744547e059f"}, {0xf8, 0x115, 0x6, "ea1f6403ffc15d585134b9e46d620a49627d614e56fa3f6b9f10b43d22a47c8d40f76dc8155e609b5c0cd92ad470639a0c5cce7f2ca62ad80335b6efa0c85cdd78ab2ff0b590106867083e8f288ff7689e287239f80185e84bd82f77b79a3ca83f49412628123ff050e12f0eacfe022a9dbfc6eee0df909c608108c89f6850324b40e694e2eded7a5911eb8cca2f1ef53128dd6d9c67f95a07d579baf582f4f8bb6970b9e0dfe407c1cce2ef92801227d83774d55203cc544597d203bbf27d0dc17db82f19def6b994c315bdfef5a798d597bfa64ebb83f6c81592f28ed30fa72b8c"}, {0x98, 0x10f, 0x3f, "95e1e27ca2116a6750f02db1a762d1f12b3de621279429dccf71fda4c4ec15c60395bab04506923485dd13bd8929ca5c8afb19be468ec59de740f8ebba3ef1d74d4e4c3049b5dac553d86535c316543bfbb584ce9db7b63526c1265d9b413592d5f62f303a04b6b7d470e38339c6f89ae247c4f3dabbf33924b91fc1b55e1160db0b"}], 0x5a0}, 0x11)
r2 = syz_genetlink_get_family_id$SEG6(&(0x7f00000000c0), r0)
sendmsg$SEG6_CMD_SETHMAC(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x50, r2, 0x10, 0x70bd27, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}}, @SEG6_ATTR_SECRET={0x8, 0x4, [0x0]}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x4}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x3}, @SEG6_ATTR_ALGID={0x5}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x1}]}, 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x4000000)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0) (async)
write$ppp(r0, &(0x7f00000002c0)="d3", 0x1) (async)
mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x810, r0, 0x10000000) (async)
socketpair(0x18, 0x5, 0x786b5809, &(0x7f0000000000)) (async)
sendmsg(r1, &(0x7f0000000940)={&(0x7f0000000200)=@ll={0x11, 0xd, 0x0, 0x1, 0x5, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x34}}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000300)="347b69a14ee9f990421ee36bee2f1799b636de64f1739973051248bf0f285c4f008f4ce6babfb34f04bce4ed4663f199b7938624243e8d65b8d645d71da04a654d0aab0130febaea788a0fcdffc0d5b8a3ba645a206a3f9bed6bacf04d514febbe6b544356ed54dc29cdc0315d8a41811c7ae5700851ef", 0x77}], 0x1, &(0x7f0000000380)=[{0xb8, 0x10e, 0x3, "6c9440bcbf6dfbe9a672983cf0d5ed1278a43baea5abb12fcdf8e6e99f8e43c5d8e7645f7f311db34e4ef84c9b287da23b7a63cecc0cec6f33efdbef29ec3c28c0e750213dd1e4a5e133be80dada8a799cdb7feeee3122bdf437b5c70681638f7cae0d53df3a363f8b902a9fcc43bf414e61083aa35eb677a288a649b339d058c7937426c28e402cc9d38dca54094d42828f327d0d688f514310edaef36edb561cfd7e3928ae27"}, {0x40, 0x84, 0x562, "8092345b2cd45cfcdd32b6bc28f95bcdfa871ba60ed283a55d73df4055cd044c0cda25bdc8b5a24dc71ec6"}, {0x100, 0x84, 0x4, "5841f74f0a10d6b3b56404fd7b559138e849f3b344745daf0abced0baf85eadd55097886b925be56b9d08d78d63d29ecbca9b4a550cb523f7c5c5cb40dda089fc4aeb199a9c5bd9f3a7535b127a09bfd71145d2964485f4df16e49e206e51a54394101a236ce241effb895fe29a450732df269bcc4b7ca5c3a43f9851855abf1dc85124b70eb97550cd43ec83bd9a1d70f2d04f8a4b185297ddc7dc74575e2e300285bd48834907ab7786a45c1a91e2c41660ead8ee4bcce6b7759223419629cef88536273c8b06cc8524e3133c6bf31b5e505faffd4d22e3b38d0e4329d466ba9d9efffc8de01fabe4f39"}, {0x28, 0x3c011141bc618fc1, 0x1ff, "2d2a4f5d466bef4513eddf4e5984a582b87123cc1a"}, {0xe0, 0x88, 0x70, "96670469c1e1689bf52a8200873969989b3c7075c45087a28a28bb578331ba56bc10a3481787a43de9c1754c6e0aaaebbc7e1849c860fe2759eeb06c1ceeec1caaf3169e027158fe253ff230d70ed551b03c3648eab3d22613d99a8e50d8de3ab95ebc7702fa124ac20c69e33faad62f6f98e8e9a5364722a4d7c625a18e35c47fba6c5470e5ef27f0cf5bc82d7646ec008c4ba989b3b4a9d1beef514711b0f577cad8b63c2a678a52eac241e8370880974e5a668b45f10d9951b78fd5c502445f7a1b3188687252505c55"}, {0x40, 0x84, 0x0, "9aa940cf12f38d29d021a5946ee412c7456dcaf6bfd19ec16e0997bd5ccd6baffa408823db8d41c75ffb9fb5ef5d"}, {0x40, 0x110, 0x8, "b2b9109f5f9384fcf63d957051275f333df69291f60a6afce0f796750ecd19ca62721023c15db0223d456cf2"}, {0x90, 0x102, 0x3, "cddc6b96e9809be500772dc4a0d10ff81319580391e76f32a6754c6b845c6d2a41f8709db07c1d522048769734f389eb344e3f23ff076cc00f330bfc15abcbf59df77f3fe7e7528960ce674bd4fef4ef1d7b1081ec99042c852d76d593de6ed62eaf6ece09e213c091881536cef42f60d7dfe17adab744547e059f"}, {0xf8, 0x115, 0x6, "ea1f6403ffc15d585134b9e46d620a49627d614e56fa3f6b9f10b43d22a47c8d40f76dc8155e609b5c0cd92ad470639a0c5cce7f2ca62ad80335b6efa0c85cdd78ab2ff0b590106867083e8f288ff7689e287239f80185e84bd82f77b79a3ca83f49412628123ff050e12f0eacfe022a9dbfc6eee0df909c608108c89f6850324b40e694e2eded7a5911eb8cca2f1ef53128dd6d9c67f95a07d579baf582f4f8bb6970b9e0dfe407c1cce2ef92801227d83774d55203cc544597d203bbf27d0dc17db82f19def6b994c315bdfef5a798d597bfa64ebb83f6c81592f28ed30fa72b8c"}, {0x98, 0x10f, 0x3f, "95e1e27ca2116a6750f02db1a762d1f12b3de621279429dccf71fda4c4ec15c60395bab04506923485dd13bd8929ca5c8afb19be468ec59de740f8ebba3ef1d74d4e4c3049b5dac553d86535c316543bfbb584ce9db7b63526c1265d9b413592d5f62f303a04b6b7d470e38339c6f89ae247c4f3dabbf33924b91fc1b55e1160db0b"}], 0x5a0}, 0x11) (async)
syz_genetlink_get_family_id$SEG6(&(0x7f00000000c0), r0) (async)
sendmsg$SEG6_CMD_SETHMAC(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x50, r2, 0x10, 0x70bd27, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}}, @SEG6_ATTR_SECRET={0x8, 0x4, [0x0]}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x4}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x3}, @SEG6_ATTR_ALGID={0x5}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x1}]}, 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x4000000) (async)

22:46:52 executing program 0:
openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x6c200, 0x0)
openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100), 0x40, 0x0)
ioctl$TUNGETVNETBE(r0, 0x800454df, &(0x7f0000000180))
r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000140), 0x123000, 0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000040))
r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
write$ppp(r2, 0x0, 0xeffdffffffffffff)
socket$inet6_mptcp(0xa, 0x1, 0x106)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000001c0)={'vlan0\x00', 0x200})

22:46:52 executing program 4:
getitimer(0x1, &(0x7f0000000040))
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x55c843, 0x0)
write$ppp(r0, 0x0, 0x0)
bind$can_j1939(r0, &(0x7f0000000000)={0x1d, 0x0, 0x1, {0x2, 0xf0, 0x1}, 0xfe}, 0x18)

22:46:52 executing program 1:
r0 = socket$isdn_base(0x22, 0x3, 0x0)
ioctl$IMGETCOUNT(r0, 0x80044943, &(0x7f0000000140))
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x200000, 0x0)
r2 = openat$bsg(0xffffffffffffff9c, &(0x7f00000000c0), 0x20000, 0x0)
getsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000000), &(0x7f0000000040)=0x4)
r3 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x4, 0x10010, r2, 0x10000000)
r4 = openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(r4, 0x10f, 0x86)
syz_io_uring_submit(0x0, r3, &(0x7f0000000100)=@IORING_OP_EPOLL_CTL=@del={0x1d, 0x52, 0x0, r4, 0x0, r1})
socket$inet_mptcp(0x2, 0x1, 0x106)
write$ppp(r1, 0x0, 0xeffdffff)

22:46:52 executing program 3:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x1dec01, 0x0)
write$ppp(r0, &(0x7f00000002c0)="d3", 0xfffffdef)

22:46:52 executing program 3:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x1dec01, 0x0)
write$ppp(r0, &(0x7f00000002c0)="d3", 0xfffffdef)

22:46:52 executing program 3:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x1dec01, 0x0)
write$ppp(r0, &(0x7f00000002c0)="d3", 0xfffffdef)

22:46:52 executing program 2:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(r0, 0x10f, 0x86)
sendto$l2tp6(r0, &(0x7f0000000000)="ae6b561e274d73a1256ac277d26cb7d50f00d4e07b96aacaef8830243664e1a53a3159432ce77bdbc324d9f6b13126c9883620cbf70b089e930a44b884f862669203af8bc6239ccd7e838daa7306a99f8316f3417d6b87d09a596d28744a53f6cb9ac53b9962a63faae7c930270d39f0bf7636740e839710", 0x78, 0x80, 0x0, 0x0)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000180), r1)
write$ppp(r1, &(0x7f00000002c0)="d3", 0x1)
write$P9_RREADLINK(r0, &(0x7f0000000200)={0x10, 0x17, 0x1, {0x7, './file0'}}, 0x10)
openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x400000, 0x0)
sendmsg$can_j1939(r0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1d, 0x0, 0x2, {0x2, 0x0, 0x4}, 0xfe}, 0x18, &(0x7f0000000100)={&(0x7f0000000600)="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", 0x1000}, 0x1, 0x0, 0x0, 0x44080}, 0x20000800)

[ 2817.955391][ T6690] RSP: 002b:00007f90e3dd70c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 2817.963925][ T6690] RAX: ffffffffffffffda RBX: 00007f90e4b73f80 RCX: 00007f90e4a54ae9
[ 2817.971961][ T6690] RDX: 00000000001f4f33 RSI: 00000000200002c0 RDI: 0000000000000003
[ 2817.979995][ T6690] RBP: 00007f90e3dd7120 R08: 0000000000000000 R09: 0000000000000000
[ 2817.988027][ T6690] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 2817.996048][ T6690] R13: 000000000000000b R14: 00007f90e4b73f80 R15: 00007ffdb3bfd028
[ 2818.004048][ T6690]  </TASK>
22:46:52 executing program 4:
getitimer(0x1, &(0x7f0000000040))
openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x55c843, 0x0) (async)
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x55c843, 0x0)
write$ppp(r0, 0x0, 0x0)
bind$can_j1939(r0, &(0x7f0000000000)={0x1d, 0x0, 0x1, {0x2, 0xf0, 0x1}, 0xfe}, 0x18)

22:46:52 executing program 1:
r0 = socket$isdn_base(0x22, 0x3, 0x0)
ioctl$IMGETCOUNT(r0, 0x80044943, &(0x7f0000000140)) (async)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x200000, 0x0)
r2 = openat$bsg(0xffffffffffffff9c, &(0x7f00000000c0), 0x20000, 0x0)
getsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000000), &(0x7f0000000040)=0x4) (async)
r3 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x4, 0x10010, r2, 0x10000000)
r4 = openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(r4, 0x10f, 0x86) (async)
syz_io_uring_submit(0x0, r3, &(0x7f0000000100)=@IORING_OP_EPOLL_CTL=@del={0x1d, 0x52, 0x0, r4, 0x0, r1}) (async)
socket$inet_mptcp(0x2, 0x1, 0x106) (async)
write$ppp(r1, 0x0, 0xeffdffff)

22:46:52 executing program 3:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x141000, 0x0)
write$ppp(r0, &(0x7f0000000000)="d3067dc7adb8f27cd37f04d7ed5cf6567807ea34342975913f67f701d6ad4c2dc16aa33b3ce1f1e53034575afcff0f8bbaaf03b533eb36d499b02146676f405d6230f9598229dc727be0700b6da08d4d53d0f604892b0ef2c0e5f6b900", 0xfffffe21)

22:46:52 executing program 2:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(r0, 0x10f, 0x86)
sendto$l2tp6(r0, &(0x7f0000000000)="ae6b561e274d73a1256ac277d26cb7d50f00d4e07b96aacaef8830243664e1a53a3159432ce77bdbc324d9f6b13126c9883620cbf70b089e930a44b884f862669203af8bc6239ccd7e838daa7306a99f8316f3417d6b87d09a596d28744a53f6cb9ac53b9962a63faae7c930270d39f0bf7636740e839710", 0x78, 0x80, 0x0, 0x0)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000180), r1)
write$ppp(r1, &(0x7f00000002c0)="d3", 0x1)
write$P9_RREADLINK(r0, &(0x7f0000000200)={0x10, 0x17, 0x1, {0x7, './file0'}}, 0x10)
openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x400000, 0x0)
sendmsg$can_j1939(r0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1d, 0x0, 0x2, {0x2, 0x0, 0x4}, 0xfe}, 0x18, &(0x7f0000000100)={&(0x7f0000000600)="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", 0x1000}, 0x1, 0x0, 0x0, 0x44080}, 0x20000800)
openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0) (async)
setsockopt$TIPC_MCAST_REPLICAST(r0, 0x10f, 0x86) (async)
sendto$l2tp6(r0, &(0x7f0000000000)="ae6b561e274d73a1256ac277d26cb7d50f00d4e07b96aacaef8830243664e1a53a3159432ce77bdbc324d9f6b13126c9883620cbf70b089e930a44b884f862669203af8bc6239ccd7e838daa7306a99f8316f3417d6b87d09a596d28744a53f6cb9ac53b9962a63faae7c930270d39f0bf7636740e839710", 0x78, 0x80, 0x0, 0x0) (async)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0) (async)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000180), r1) (async)
write$ppp(r1, &(0x7f00000002c0)="d3", 0x1) (async)
write$P9_RREADLINK(r0, &(0x7f0000000200)={0x10, 0x17, 0x1, {0x7, './file0'}}, 0x10) (async)
openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x400000, 0x0) (async)
sendmsg$can_j1939(r0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1d, 0x0, 0x2, {0x2, 0x0, 0x4}, 0xfe}, 0x18, &(0x7f0000000100)={&(0x7f0000000600)="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", 0x1000}, 0x1, 0x0, 0x0, 0x44080}, 0x20000800) (async)

22:46:52 executing program 5:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
write$ppp(r0, &(0x7f00000002c0)="d3", 0x1f4f33) (fail_nth: 88)

22:46:52 executing program 0:
openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x6c200, 0x0)
openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) (async)
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100), 0x40, 0x0)
ioctl$TUNGETVNETBE(r0, 0x800454df, &(0x7f0000000180)) (async)
r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000140), 0x123000, 0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000040))
r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
write$ppp(r2, 0x0, 0xeffdffffffffffff)
socket$inet6_mptcp(0xa, 0x1, 0x106) (async)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000001c0)={'vlan0\x00', 0x200})

22:46:52 executing program 3:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x141000, 0x0)
write$ppp(r0, &(0x7f0000000000)="d3067dc7adb8f27cd37f04d7ed5cf6567807ea34342975913f67f701d6ad4c2dc16aa33b3ce1f1e53034575afcff0f8bbaaf03b533eb36d499b02146676f405d6230f9598229dc727be0700b6da08d4d53d0f604892b0ef2c0e5f6b900", 0xfffffe21) (async)
write$ppp(r0, &(0x7f0000000000)="d3067dc7adb8f27cd37f04d7ed5cf6567807ea34342975913f67f701d6ad4c2dc16aa33b3ce1f1e53034575afcff0f8bbaaf03b533eb36d499b02146676f405d6230f9598229dc727be0700b6da08d4d53d0f604892b0ef2c0e5f6b900", 0xfffffe21)

22:46:52 executing program 1:
r0 = socket$isdn_base(0x22, 0x3, 0x0)
ioctl$IMGETCOUNT(r0, 0x80044943, &(0x7f0000000140)) (async, rerun: 64)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x200000, 0x0) (async, rerun: 64)
r2 = openat$bsg(0xffffffffffffff9c, &(0x7f00000000c0), 0x20000, 0x0)
getsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000000), &(0x7f0000000040)=0x4) (async)
r3 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x4, 0x10010, r2, 0x10000000)
r4 = openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(r4, 0x10f, 0x86) (async)
syz_io_uring_submit(0x0, r3, &(0x7f0000000100)=@IORING_OP_EPOLL_CTL=@del={0x1d, 0x52, 0x0, r4, 0x0, r1}) (async)
socket$inet_mptcp(0x2, 0x1, 0x106) (async)
write$ppp(r1, 0x0, 0xeffdffff)

22:46:52 executing program 4:
getitimer(0x1, &(0x7f0000000040))
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x55c843, 0x0)
write$ppp(r0, 0x0, 0x0)
bind$can_j1939(r0, &(0x7f0000000000)={0x1d, 0x0, 0x1, {0x2, 0xf0, 0x1}, 0xfe}, 0x18) (async)
bind$can_j1939(r0, &(0x7f0000000000)={0x1d, 0x0, 0x1, {0x2, 0xf0, 0x1}, 0xfe}, 0x18)

22:46:52 executing program 0:
openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x6c200, 0x0) (async)
openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) (async)
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100), 0x40, 0x0)
ioctl$TUNGETVNETBE(r0, 0x800454df, &(0x7f0000000180)) (async)
r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000140), 0x123000, 0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000040))
r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
write$ppp(r2, 0x0, 0xeffdffffffffffff)
socket$inet6_mptcp(0xa, 0x1, 0x106) (async)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000001c0)={'vlan0\x00', 0x200})

[ 2818.090005][ T6726] FAULT_INJECTION: forcing a failure.
[ 2818.090005][ T6726] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[ 2818.103473][ T6726] CPU: 0 PID: 6726 Comm: syz-executor.5 Not tainted 6.6.0-rc3-syzkaller-00165-g3b517966c561 #0
[ 2818.113820][ T6726] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/06/2023
[ 2818.123869][ T6726] Call Trace:
[ 2818.123878][ T6726]  <TASK>
[ 2818.123885][ T6726]  dump_stack_lvl+0xda/0x130
[ 2818.123916][ T6726]  dump_stack+0x15/0x20
22:46:52 executing program 1:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r1 = socket$can_j1939(0x1d, 0x2, 0x7)
setsockopt$llc_int(r0, 0x10c, 0x8, &(0x7f0000000200)=0xbe, 0x4)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000180)={'vcan0\x00', <r2=>0x0})
bind$can_j1939(r1, &(0x7f00000001c0)={0x1d, r2, 0x0, {0x1}}, 0x18)
sendmsg$can_j1939(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x1d, r2, 0x2, {0x0, 0xff}, 0x2}, 0x18, &(0x7f0000000040)={&(0x7f00000000c0)="02be2d739c263a962beb3e57d1b720d8e792921f5169e97a0a4329faed5151ebf8fe7d8f781d8d0bcb869330098aa51218caa55fd72fbcc230899b6f2c63e0edcfd4a68338f3b202b52e7ca6f754412d7229a8451a38f6a1958596bb6bc52866be89c52f625270338bcac46b727f54875a2a349f82926e14e514f5a12cb15e363dfa90b574a01edff083cfe9c382c85995361e4362436e059c7fb4a8e6794fd3e18ab5576e9941333638892beb56c1c84060bc8583c4077af3711b9243580a8d8dba55db4b0258b86cce421b28b87256024b79bbeb57ad4c54f8fa2481beaa5fd85b08", 0xe3}, 0x1, 0x0, 0x0, 0x48800}, 0x4008040)
write$ppp(r0, 0x0, 0xeffdffff)
r3 = openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(r3, 0x10f, 0x86)
r4 = syz_genetlink_get_family_id$team(&(0x7f0000000280), r0)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000002c0)={'team0\x00', <r5=>0x0})
sendmsg$TEAM_CMD_NOOP(r3, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x5c, r4, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [{{0x8, 0x1, r5}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x90}, 0xc840)
r6 = openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(r6, 0x10f, 0x86)
sendmsg$can_j1939(r6, &(0x7f0000000500)={&(0x7f0000000400)={0x1d, r2, 0x2, {0x1, 0x0, 0x2}, 0xff}, 0x18, &(0x7f00000004c0)={&(0x7f0000000440)="c448b9d2edb3bd534155681b339da5681503b9869029df3e8a4c7f2723134270d9caa356669093e476aab6fc1678bc5ca1eb9de8d4553ed197beef12de71abdc5b9ed4ea992c9e8314f1b36169f646322a5aba7665b12f8670d819f69405a3cdceb8a8527ce43fa8e4616eeac714e0e3c75febb1f0d8918332bf", 0x7a}, 0x1, 0x0, 0x0, 0x80}, 0x4010)

22:46:52 executing program 1:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r1 = socket$can_j1939(0x1d, 0x2, 0x7)
setsockopt$llc_int(r0, 0x10c, 0x8, &(0x7f0000000200)=0xbe, 0x4)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000180)={'vcan0\x00', <r2=>0x0})
bind$can_j1939(r1, &(0x7f00000001c0)={0x1d, r2, 0x0, {0x1}}, 0x18)
sendmsg$can_j1939(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x1d, r2, 0x2, {0x0, 0xff}, 0x2}, 0x18, &(0x7f0000000040)={&(0x7f00000000c0)="02be2d739c263a962beb3e57d1b720d8e792921f5169e97a0a4329faed5151ebf8fe7d8f781d8d0bcb869330098aa51218caa55fd72fbcc230899b6f2c63e0edcfd4a68338f3b202b52e7ca6f754412d7229a8451a38f6a1958596bb6bc52866be89c52f625270338bcac46b727f54875a2a349f82926e14e514f5a12cb15e363dfa90b574a01edff083cfe9c382c85995361e4362436e059c7fb4a8e6794fd3e18ab5576e9941333638892beb56c1c84060bc8583c4077af3711b9243580a8d8dba55db4b0258b86cce421b28b87256024b79bbeb57ad4c54f8fa2481beaa5fd85b08", 0xe3}, 0x1, 0x0, 0x0, 0x48800}, 0x4008040)
write$ppp(r0, 0x0, 0xeffdffff)
r3 = openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(r3, 0x10f, 0x86)
r4 = syz_genetlink_get_family_id$team(&(0x7f0000000280), r0)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000002c0)={'team0\x00', <r5=>0x0})
sendmsg$TEAM_CMD_NOOP(r3, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x5c, r4, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [{{0x8, 0x1, r5}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x90}, 0xc840)
r6 = openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(r6, 0x10f, 0x86)
sendmsg$can_j1939(r6, &(0x7f0000000500)={&(0x7f0000000400)={0x1d, r2, 0x2, {0x1, 0x0, 0x2}, 0xff}, 0x18, &(0x7f00000004c0)={&(0x7f0000000440)="c448b9d2edb3bd534155681b339da5681503b9869029df3e8a4c7f2723134270d9caa356669093e476aab6fc1678bc5ca1eb9de8d4553ed197beef12de71abdc5b9ed4ea992c9e8314f1b36169f646322a5aba7665b12f8670d819f69405a3cdceb8a8527ce43fa8e4616eeac714e0e3c75febb1f0d8918332bf", 0x7a}, 0x1, 0x0, 0x0, 0x80}, 0x4010)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async)
socket$can_j1939(0x1d, 0x2, 0x7) (async)
setsockopt$llc_int(r0, 0x10c, 0x8, &(0x7f0000000200)=0xbe, 0x4) (async)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000180)={'vcan0\x00'}) (async)
bind$can_j1939(r1, &(0x7f00000001c0)={0x1d, r2, 0x0, {0x1}}, 0x18) (async)
sendmsg$can_j1939(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x1d, r2, 0x2, {0x0, 0xff}, 0x2}, 0x18, &(0x7f0000000040)={&(0x7f00000000c0)="02be2d739c263a962beb3e57d1b720d8e792921f5169e97a0a4329faed5151ebf8fe7d8f781d8d0bcb869330098aa51218caa55fd72fbcc230899b6f2c63e0edcfd4a68338f3b202b52e7ca6f754412d7229a8451a38f6a1958596bb6bc52866be89c52f625270338bcac46b727f54875a2a349f82926e14e514f5a12cb15e363dfa90b574a01edff083cfe9c382c85995361e4362436e059c7fb4a8e6794fd3e18ab5576e9941333638892beb56c1c84060bc8583c4077af3711b9243580a8d8dba55db4b0258b86cce421b28b87256024b79bbeb57ad4c54f8fa2481beaa5fd85b08", 0xe3}, 0x1, 0x0, 0x0, 0x48800}, 0x4008040) (async)
write$ppp(r0, 0x0, 0xeffdffff) (async)
openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0) (async)
setsockopt$TIPC_MCAST_REPLICAST(r3, 0x10f, 0x86) (async)
syz_genetlink_get_family_id$team(&(0x7f0000000280), r0) (async)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000002c0)) (async)
sendmsg$TEAM_CMD_NOOP(r3, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x5c, r4, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [{{0x8, 0x1, r5}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x90}, 0xc840) (async)
openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0) (async)
setsockopt$TIPC_MCAST_REPLICAST(r6, 0x10f, 0x86) (async)
sendmsg$can_j1939(r6, &(0x7f0000000500)={&(0x7f0000000400)={0x1d, r2, 0x2, {0x1, 0x0, 0x2}, 0xff}, 0x18, &(0x7f00000004c0)={&(0x7f0000000440)="c448b9d2edb3bd534155681b339da5681503b9869029df3e8a4c7f2723134270d9caa356669093e476aab6fc1678bc5ca1eb9de8d4553ed197beef12de71abdc5b9ed4ea992c9e8314f1b36169f646322a5aba7665b12f8670d819f69405a3cdceb8a8527ce43fa8e4616eeac714e0e3c75febb1f0d8918332bf", 0x7a}, 0x1, 0x0, 0x0, 0x80}, 0x4010) (async)

[ 2818.123935][ T6726]  should_fail_ex+0x21f/0x230
[ 2818.143633][ T6726]  __should_fail_alloc_page+0xfd/0x110
[ 2818.149131][ T6726]  __alloc_pages+0x108/0x340
[ 2818.153888][ T6726]  vma_alloc_folio+0x6a3/0x8c0
[ 2818.158687][ T6726]  ? shmem_inode_acct_block+0x1ee/0x220
[ 2818.164328][ T6726]  shmem_get_folio_gfp+0x579/0xc30
[ 2818.169584][ T6726]  shmem_write_begin+0xa6/0x210
[ 2818.174473][ T6726]  generic_perform_write+0x1c9/0x410
[ 2818.179784][ T6726]  ? shmem_write_begin+0x210/0x210
[ 2818.185066][ T6726]  shmem_file_write_iter+0xc8/0xe0
[ 2818.190222][ T6726]  vfs_write+0x4ab/0x7d0
[ 2818.194575][ T6726]  ksys_write+0xeb/0x1a0
[ 2818.198832][ T6726]  __x64_sys_write+0x42/0x50
[ 2818.203461][ T6726]  do_syscall_64+0x41/0xc0
[ 2818.207896][ T6726]  entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 2818.213957][ T6726] RIP: 0033:0x7f90e4a54ae9
[ 2818.218397][ T6726] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48
22:46:52 executing program 5:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
write$ppp(r0, &(0x7f00000002c0)="d3", 0x1f4f33) (fail_nth: 89)

22:46:52 executing program 3:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x141000, 0x0)
write$ppp(r0, &(0x7f0000000000)="d3067dc7adb8f27cd37f04d7ed5cf6567807ea34342975913f67f701d6ad4c2dc16aa33b3ce1f1e53034575afcff0f8bbaaf03b533eb36d499b02146676f405d6230f9598229dc727be0700b6da08d4d53d0f604892b0ef2c0e5f6b900", 0xfffffe21)

22:46:52 executing program 2:
openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0) (async)
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(r0, 0x10f, 0x86)
sendto$l2tp6(r0, &(0x7f0000000000)="ae6b561e274d73a1256ac277d26cb7d50f00d4e07b96aacaef8830243664e1a53a3159432ce77bdbc324d9f6b13126c9883620cbf70b089e930a44b884f862669203af8bc6239ccd7e838daa7306a99f8316f3417d6b87d09a596d28744a53f6cb9ac53b9962a63faae7c930270d39f0bf7636740e839710", 0x78, 0x80, 0x0, 0x0)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000180), r1) (async)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000180), r1)
write$ppp(r1, &(0x7f00000002c0)="d3", 0x1)
write$P9_RREADLINK(r0, &(0x7f0000000200)={0x10, 0x17, 0x1, {0x7, './file0'}}, 0x10)
openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x400000, 0x0) (async)
openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x400000, 0x0)
sendmsg$can_j1939(r0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1d, 0x0, 0x2, {0x2, 0x0, 0x4}, 0xfe}, 0x18, &(0x7f0000000100)={&(0x7f0000000600)="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", 0x1000}, 0x1, 0x0, 0x0, 0x44080}, 0x20000800)

22:46:52 executing program 4:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
write$ppp(r0, 0x0, 0x0)
getresuid(&(0x7f0000000000), &(0x7f0000000040), &(0x7f00000000c0))

22:46:52 executing program 0:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(r0, 0x10f, 0x86)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'veth0_macvtap\x00', 0x1000})
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$ppp(r1, 0x0, 0xeffdffffffffffff)

22:46:52 executing program 1:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r1 = socket$can_j1939(0x1d, 0x2, 0x7)
setsockopt$llc_int(r0, 0x10c, 0x8, &(0x7f0000000200)=0xbe, 0x4)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000180)={'vcan0\x00', <r2=>0x0})
bind$can_j1939(r1, &(0x7f00000001c0)={0x1d, r2, 0x0, {0x1}}, 0x18) (async)
sendmsg$can_j1939(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x1d, r2, 0x2, {0x0, 0xff}, 0x2}, 0x18, &(0x7f0000000040)={&(0x7f00000000c0)="02be2d739c263a962beb3e57d1b720d8e792921f5169e97a0a4329faed5151ebf8fe7d8f781d8d0bcb869330098aa51218caa55fd72fbcc230899b6f2c63e0edcfd4a68338f3b202b52e7ca6f754412d7229a8451a38f6a1958596bb6bc52866be89c52f625270338bcac46b727f54875a2a349f82926e14e514f5a12cb15e363dfa90b574a01edff083cfe9c382c85995361e4362436e059c7fb4a8e6794fd3e18ab5576e9941333638892beb56c1c84060bc8583c4077af3711b9243580a8d8dba55db4b0258b86cce421b28b87256024b79bbeb57ad4c54f8fa2481beaa5fd85b08", 0xe3}, 0x1, 0x0, 0x0, 0x48800}, 0x4008040) (async)
write$ppp(r0, 0x0, 0xeffdffff) (async)
r3 = openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(r3, 0x10f, 0x86) (async)
r4 = syz_genetlink_get_family_id$team(&(0x7f0000000280), r0) (async)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000002c0)={'team0\x00', <r5=>0x0})
sendmsg$TEAM_CMD_NOOP(r3, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x5c, r4, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [{{0x8, 0x1, r5}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x90}, 0xc840)
r6 = openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(r6, 0x10f, 0x86) (async)
sendmsg$can_j1939(r6, &(0x7f0000000500)={&(0x7f0000000400)={0x1d, r2, 0x2, {0x1, 0x0, 0x2}, 0xff}, 0x18, &(0x7f00000004c0)={&(0x7f0000000440)="c448b9d2edb3bd534155681b339da5681503b9869029df3e8a4c7f2723134270d9caa356669093e476aab6fc1678bc5ca1eb9de8d4553ed197beef12de71abdc5b9ed4ea992c9e8314f1b36169f646322a5aba7665b12f8670d819f69405a3cdceb8a8527ce43fa8e4616eeac714e0e3c75febb1f0d8918332bf", 0x7a}, 0x1, 0x0, 0x0, 0x80}, 0x4010)

[ 2818.238027][ T6726] RSP: 002b:00007f90e3dd70c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 2818.246574][ T6726] RAX: ffffffffffffffda RBX: 00007f90e4b73f80 RCX: 00007f90e4a54ae9
[ 2818.254545][ T6726] RDX: 00000000001f4f33 RSI: 00000000200002c0 RDI: 0000000000000003
[ 2818.262510][ T6726] RBP: 00007f90e3dd7120 R08: 0000000000000000 R09: 0000000000000000
[ 2818.270595][ T6726] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 2818.278557][ T6726] R13: 000000000000000b R14: 00007f90e4b73f80 R15: 00007ffdb3bfd028
[ 2818.286549][ T6726]  </TASK>
22:46:52 executing program 3:
bind$can_j1939(0xffffffffffffffff, &(0x7f0000000000)={0x1d, 0x0, 0x4, {0x1, 0xf0, 0x1}, 0xfd}, 0x18)
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
syz_io_uring_setup(0x1fe8, &(0x7f00000000c0)={0x0, 0x6599, 0x4, 0x2, 0x105, 0x0, r0}, &(0x7f0000000040)=<r1=>0x0, &(0x7f0000000140))
r2 = openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(r2, 0x10f, 0x86)
syz_open_dev$loop(&(0x7f0000000240), 0x4, 0x2400)
syz_io_uring_submit(r1, 0x0, &(0x7f0000000200)=@IORING_OP_LINKAT={0x27, 0x2, 0x0, r2, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='./file0\x00', r0, 0x400, 0x1})
write$ppp(r0, &(0x7f00000002c0)="d3", 0xfffffdef)
ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r2)

22:46:52 executing program 2:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
syz_io_uring_setup(0x4b31, &(0x7f0000000280)={0x0, 0x9bb0, 0x0, 0x0, 0x16e}, &(0x7f0000000300)=<r1=>0x0, &(0x7f0000000340))
r2 = syz_open_dev$loop(&(0x7f0000000380), 0x6, 0x80000)
syz_io_uring_submit(r1, 0x0, &(0x7f00000003c0)=@IORING_OP_FSYNC={0x3, 0x20, 0x0, @fd=r2, 0x0, 0x0, 0x0, 0x0, 0x1})
r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000000c0), 0x101800, 0x0)
syz_io_uring_submit(r1, 0x0, &(0x7f0000000100)=@IORING_OP_RENAMEAT={0x23, 0x11, 0x0, r0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', r3, 0x0, 0x1})
write$ppp(r0, &(0x7f00000002c0)="d3", 0x1)
r4 = openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(r4, 0x10f, 0x86)
sendmsg$AUDIT_ADD_RULE(r4, &(0x7f00000001c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="28040000f303100026bd7000fcdbdf25100000000000000015000000ffff0000ff03000000000400060000003f000000f8ffffff840a000000080000090000000000000007000000001000000002000001000100040000000100000009000000ff010000010100000400000006000000ff7f000001040000ffff00000700000002000000a0d80000010400004000000003000000330d000041000000dc00000005000000080000002c01000002000000faffffffffffff7f7779000000a00000010000005d0b0000000000001f0000000100000081000000010000800000000009000000001000000700000002000000ffffff7f40000000040000000300000000000000ff0f0000050000000000000000000100df00000000000000df0100001f00000000020000010000000400000000000000010000004000000000000004020000000900000002000000ffff00009f0000007fffffff0200000001800000000000000000000001000000faffffff3ada000002000000dc02f31b03000000020000000002000001000000010400000300000005000000120000000200000003040000050000000100000001000000090000000700000003000000010000000400000007000000070000000300000040000000ffffff7fffffffff090000002000000003000000ff0100000400000000000000ffffff7f06000000e0ffffff8100000001000000cf000000010400000100000007000000270400000400000009000000200000003f00000001000000f10000003808000001000000040000000700000005000000000200000100000081000000090000000500000007000000faffffff00000000ff7f000006000000070000004000000001feffffffffffff0300000003000000050000008100000002000000b10d0000ffffffff0300000000000000010100000100000008000000000080da01000000050000000400000099000000070000000900000000000080e20000000200000007000000da060000010000000900000007000000465c0000e102000008000000e90d0000060000000700000000000000010000004e490000e9ce00000200000043000000780d000099bb000000000000b60b000001000000010000800700000007000000070000000400000007000000060000000000000000000000ffff000002000000050000005f4fe35100000000ffff0000800000000300000006000000070000000900000005000000ff0700003b590000fdffffffda355f5a417ad8d27ba20000fcffffff00080000ffffffff0800000004000000010000000500000000040000000200000700000061000000060000000200000002000000ab070000070000000400000003000000000000004f0000000300000046010000ff7f000008000000010001007f0000003800000000fcffff4b0f0000330a000004000000000000000700000000243a9d2b2e0000"], 0x428}, 0x1, 0x0, 0x0, 0x8000}, 0x10040000)

22:46:52 executing program 1:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0)
write$ppp(r0, 0x0, 0xeffdffff)

22:46:52 executing program 4:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
write$ppp(r0, 0x0, 0x0)
getresuid(&(0x7f0000000000), &(0x7f0000000040), &(0x7f00000000c0)) (async)
getresuid(&(0x7f0000000000), &(0x7f0000000040), &(0x7f00000000c0))

22:46:52 executing program 0:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(r0, 0x10f, 0x86) (async)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'veth0_macvtap\x00', 0x1000}) (async)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async)
write$ppp(r1, 0x0, 0xeffdffffffffffff)

22:46:52 executing program 4:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
write$ppp(r0, 0x0, 0x0)
getresuid(&(0x7f0000000000), &(0x7f0000000040), &(0x7f00000000c0))
openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0) (async)
write$ppp(r0, 0x0, 0x0) (async)
getresuid(&(0x7f0000000000), &(0x7f0000000040), &(0x7f00000000c0)) (async)

[ 2818.349847][ T6779] FAULT_INJECTION: forcing a failure.
[ 2818.349847][ T6779] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 2818.362961][ T6779] CPU: 0 PID: 6779 Comm: syz-executor.5 Not tainted 6.6.0-rc3-syzkaller-00165-g3b517966c561 #0
[ 2818.373410][ T6779] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/06/2023
[ 2818.383555][ T6779] Call Trace:
[ 2818.386848][ T6779]  <TASK>
[ 2818.389870][ T6779]  dump_stack_lvl+0xda/0x130
[ 2818.394555][ T6779]  dump_stack+0x15/0x20
[ 2818.398723][ T6779]  should_fail_ex+0x21f/0x230
[ 2818.403471][ T6779]  should_fail+0xb/0x10
[ 2818.407640][ T6779]  should_fail_usercopy+0x1a/0x20
[ 2818.412743][ T6779]  copy_page_from_iter_atomic+0x21c/0xcf0
[ 2818.418544][ T6779]  ? shmem_write_begin+0xa6/0x210
[ 2818.423595][ T6779]  ? shmem_write_begin+0x16d/0x210
[ 2818.428783][ T6779]  generic_perform_write+0x20c/0x410
[ 2818.434087][ T6779]  ? shmem_write_begin+0x210/0x210
[ 2818.439296][ T6779]  shmem_file_write_iter+0xc8/0xe0
[ 2818.444515][ T6779]  vfs_write+0x4ab/0x7d0
[ 2818.448790][ T6779]  ksys_write+0xeb/0x1a0
[ 2818.453042][ T6779]  __x64_sys_write+0x42/0x50
[ 2818.457682][ T6779]  do_syscall_64+0x41/0xc0
[ 2818.462111][ T6779]  entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 2818.468116][ T6779] RIP: 0033:0x7f90e4a54ae9
[ 2818.472605][ T6779] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48
[ 2818.492303][ T6779] RSP: 002b:00007f90e3dd70c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
22:46:52 executing program 2:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0) (async, rerun: 32)
syz_io_uring_setup(0x4b31, &(0x7f0000000280)={0x0, 0x9bb0, 0x0, 0x0, 0x16e}, &(0x7f0000000300)=<r1=>0x0, &(0x7f0000000340)) (async, rerun: 32)
r2 = syz_open_dev$loop(&(0x7f0000000380), 0x6, 0x80000)
syz_io_uring_submit(r1, 0x0, &(0x7f00000003c0)=@IORING_OP_FSYNC={0x3, 0x20, 0x0, @fd=r2, 0x0, 0x0, 0x0, 0x0, 0x1}) (async)
r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000000c0), 0x101800, 0x0)
syz_io_uring_submit(r1, 0x0, &(0x7f0000000100)=@IORING_OP_RENAMEAT={0x23, 0x11, 0x0, r0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', r3, 0x0, 0x1})
write$ppp(r0, &(0x7f00000002c0)="d3", 0x1) (async)
r4 = openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(r4, 0x10f, 0x86) (async)
sendmsg$AUDIT_ADD_RULE(r4, &(0x7f00000001c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="28040000f303100026bd7000fcdbdf25100000000000000015000000ffff0000ff03000000000400060000003f000000f8ffffff840a000000080000090000000000000007000000001000000002000001000100040000000100000009000000ff010000010100000400000006000000ff7f000001040000ffff00000700000002000000a0d80000010400004000000003000000330d000041000000dc00000005000000080000002c01000002000000faffffffffffff7f7779000000a00000010000005d0b0000000000001f0000000100000081000000010000800000000009000000001000000700000002000000ffffff7f40000000040000000300000000000000ff0f0000050000000000000000000100df00000000000000df0100001f00000000020000010000000400000000000000010000004000000000000004020000000900000002000000ffff00009f0000007fffffff0200000001800000000000000000000001000000faffffff3ada000002000000dc02f31b03000000020000000002000001000000010400000300000005000000120000000200000003040000050000000100000001000000090000000700000003000000010000000400000007000000070000000300000040000000ffffff7fffffffff090000002000000003000000ff0100000400000000000000ffffff7f06000000e0ffffff8100000001000000cf000000010400000100000007000000270400000400000009000000200000003f00000001000000f10000003808000001000000040000000700000005000000000200000100000081000000090000000500000007000000faffffff00000000ff7f000006000000070000004000000001feffffffffffff0300000003000000050000008100000002000000b10d0000ffffffff0300000000000000010100000100000008000000000080da01000000050000000400000099000000070000000900000000000080e20000000200000007000000da060000010000000900000007000000465c0000e102000008000000e90d0000060000000700000000000000010000004e490000e9ce00000200000043000000780d000099bb000000000000b60b000001000000010000800700000007000000070000000400000007000000060000000000000000000000ffff000002000000050000005f4fe35100000000ffff0000800000000300000006000000070000000900000005000000ff0700003b590000fdffffffda355f5a417ad8d27ba20000fcffffff00080000ffffffff0800000004000000010000000500000000040000000200000700000061000000060000000200000002000000ab070000070000000400000003000000000000004f0000000300000046010000ff7f000008000000010001007f0000003800000000fcffff4b0f0000330a000004000000000000000700000000243a9d2b2e0000"], 0x428}, 0x1, 0x0, 0x0, 0x8000}, 0x10040000)

22:46:52 executing program 4:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
socket$nl_audit(0x10, 0x3, 0x9)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0xbd2f6bee6e97c6c9, 0x0)
r2 = openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(r2, 0x10f, 0x86)
mmap$IORING_OFF_SQES(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x5000000, 0x20010, r2, 0x10000000)
sendmsg$AUDIT_TTY_GET(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x10, 0x3f8, 0x300, 0x70bd2a, 0x25dfdbfb, "", ["", "", "", "", "", "", "", "", ""]}, 0x10}}, 0x0)
write$ppp(r0, 0x0, 0x0)

22:46:52 executing program 0:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(r0, 0x10f, 0x86) (async)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'veth0_macvtap\x00', 0x1000}) (async)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$ppp(r1, 0x0, 0xeffdffffffffffff)

22:46:52 executing program 1:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0)
write$ppp(r0, 0x0, 0xeffdffff)

22:46:52 executing program 3:
bind$can_j1939(0xffffffffffffffff, &(0x7f0000000000)={0x1d, 0x0, 0x4, {0x1, 0xf0, 0x1}, 0xfd}, 0x18) (async)
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
syz_io_uring_setup(0x1fe8, &(0x7f00000000c0)={0x0, 0x6599, 0x4, 0x2, 0x105, 0x0, r0}, &(0x7f0000000040)=<r1=>0x0, &(0x7f0000000140)) (async)
r2 = openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(r2, 0x10f, 0x86) (async)
syz_open_dev$loop(&(0x7f0000000240), 0x4, 0x2400)
syz_io_uring_submit(r1, 0x0, &(0x7f0000000200)=@IORING_OP_LINKAT={0x27, 0x2, 0x0, r2, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='./file0\x00', r0, 0x400, 0x1}) (async)
write$ppp(r0, &(0x7f00000002c0)="d3", 0xfffffdef)
ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r2)

[ 2818.500820][ T6779] RAX: ffffffffffffffda RBX: 00007f90e4b73f80 RCX: 00007f90e4a54ae9
[ 2818.508806][ T6779] RDX: 00000000001f4f33 RSI: 00000000200002c0 RDI: 0000000000000003
[ 2818.516836][ T6779] RBP: 00007f90e3dd7120 R08: 0000000000000000 R09: 0000000000000000
[ 2818.524891][ T6779] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 2818.532996][ T6779] R13: 000000000000000b R14: 00007f90e4b73f80 R15: 00007ffdb3bfd028
[ 2818.540991][ T6779]  </TASK>
22:46:52 executing program 5:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
write$ppp(r0, &(0x7f00000002c0)="d3", 0x1f4f33) (fail_nth: 90)

22:46:52 executing program 2:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
syz_io_uring_setup(0x4b31, &(0x7f0000000280)={0x0, 0x9bb0, 0x0, 0x0, 0x16e}, &(0x7f0000000300)=<r1=>0x0, &(0x7f0000000340)) (async)
r2 = syz_open_dev$loop(&(0x7f0000000380), 0x6, 0x80000)
syz_io_uring_submit(r1, 0x0, &(0x7f00000003c0)=@IORING_OP_FSYNC={0x3, 0x20, 0x0, @fd=r2, 0x0, 0x0, 0x0, 0x0, 0x1}) (async)
r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000000c0), 0x101800, 0x0)
syz_io_uring_submit(r1, 0x0, &(0x7f0000000100)=@IORING_OP_RENAMEAT={0x23, 0x11, 0x0, r0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', r3, 0x0, 0x1}) (async)
write$ppp(r0, &(0x7f00000002c0)="d3", 0x1) (async, rerun: 64)
r4 = openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0) (rerun: 64)
setsockopt$TIPC_MCAST_REPLICAST(r4, 0x10f, 0x86)
sendmsg$AUDIT_ADD_RULE(r4, &(0x7f00000001c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="28040000f303100026bd7000fcdbdf25100000000000000015000000ffff0000ff03000000000400060000003f000000f8ffffff840a000000080000090000000000000007000000001000000002000001000100040000000100000009000000ff010000010100000400000006000000ff7f000001040000ffff00000700000002000000a0d80000010400004000000003000000330d000041000000dc00000005000000080000002c01000002000000faffffffffffff7f7779000000a00000010000005d0b0000000000001f0000000100000081000000010000800000000009000000001000000700000002000000ffffff7f40000000040000000300000000000000ff0f0000050000000000000000000100df00000000000000df0100001f00000000020000010000000400000000000000010000004000000000000004020000000900000002000000ffff00009f0000007fffffff0200000001800000000000000000000001000000faffffff3ada000002000000dc02f31b03000000020000000002000001000000010400000300000005000000120000000200000003040000050000000100000001000000090000000700000003000000010000000400000007000000070000000300000040000000ffffff7fffffffff090000002000000003000000ff0100000400000000000000ffffff7f06000000e0ffffff8100000001000000cf000000010400000100000007000000270400000400000009000000200000003f00000001000000f10000003808000001000000040000000700000005000000000200000100000081000000090000000500000007000000faffffff00000000ff7f000006000000070000004000000001feffffffffffff0300000003000000050000008100000002000000b10d0000ffffffff0300000000000000010100000100000008000000000080da01000000050000000400000099000000070000000900000000000080e20000000200000007000000da060000010000000900000007000000465c0000e102000008000000e90d0000060000000700000000000000010000004e490000e9ce00000200000043000000780d000099bb000000000000b60b000001000000010000800700000007000000070000000400000007000000060000000000000000000000ffff000002000000050000005f4fe35100000000ffff0000800000000300000006000000070000000900000005000000ff0700003b590000fdffffffda355f5a417ad8d27ba20000fcffffff00080000ffffffff0800000004000000010000000500000000040000000200000700000061000000060000000200000002000000ab070000070000000400000003000000000000004f0000000300000046010000ff7f000008000000010001007f0000003800000000fcffff4b0f0000330a000004000000000000000700000000243a9d2b2e0000"], 0x428}, 0x1, 0x0, 0x0, 0x8000}, 0x10040000)

22:46:52 executing program 0:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x4efd83, 0x0)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(r1, 0x10f, 0x86)
sendmsg$AUDIT_TTY_GET(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x10, 0x3f8, 0x300, 0x70bd28, 0x25dfdbfb, "", ["", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x810}, 0x20004041)
write$ppp(r0, 0x0, 0xeffdffffffffffff)

22:46:52 executing program 4:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0) (async)
socket$nl_audit(0x10, 0x3, 0x9) (async)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0xbd2f6bee6e97c6c9, 0x0) (async)
r2 = openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(r2, 0x10f, 0x86) (async)
mmap$IORING_OFF_SQES(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x5000000, 0x20010, r2, 0x10000000) (async)
sendmsg$AUDIT_TTY_GET(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x10, 0x3f8, 0x300, 0x70bd2a, 0x25dfdbfb, "", ["", "", "", "", "", "", "", "", ""]}, 0x10}}, 0x0) (async)
write$ppp(r0, 0x0, 0x0)

22:46:52 executing program 1:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0)
write$ppp(r0, 0x0, 0xeffdffff)

22:46:52 executing program 1:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000000))
write$ppp(r0, 0x0, 0xeffdffff)

22:46:52 executing program 4:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
socket$nl_audit(0x10, 0x3, 0x9)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0xbd2f6bee6e97c6c9, 0x0)
r2 = openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(r2, 0x10f, 0x86)
mmap$IORING_OFF_SQES(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x5000000, 0x20010, r2, 0x10000000)
sendmsg$AUDIT_TTY_GET(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x10, 0x3f8, 0x300, 0x70bd2a, 0x25dfdbfb, "", ["", "", "", "", "", "", "", "", ""]}, 0x10}}, 0x0)
write$ppp(r0, 0x0, 0x0)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0) (async)
socket$nl_audit(0x10, 0x3, 0x9) (async)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0xbd2f6bee6e97c6c9, 0x0) (async)
openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0) (async)
setsockopt$TIPC_MCAST_REPLICAST(r2, 0x10f, 0x86) (async)
mmap$IORING_OFF_SQES(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x5000000, 0x20010, r2, 0x10000000) (async)
sendmsg$AUDIT_TTY_GET(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x10, 0x3f8, 0x300, 0x70bd2a, 0x25dfdbfb, "", ["", "", "", "", "", "", "", "", ""]}, 0x10}}, 0x0) (async)
write$ppp(r0, 0x0, 0x0) (async)

[ 2818.621663][ T6810] FAULT_INJECTION: forcing a failure.
[ 2818.621663][ T6810] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[ 2818.635055][ T6810] CPU: 0 PID: 6810 Comm: syz-executor.5 Not tainted 6.6.0-rc3-syzkaller-00165-g3b517966c561 #0
[ 2818.645410][ T6810] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/06/2023
[ 2818.655483][ T6810] Call Trace:
[ 2818.658873][ T6810]  <TASK>
[ 2818.661816][ T6810]  dump_stack_lvl+0xda/0x130
[ 2818.666512][ T6810]  dump_stack+0x15/0x20
[ 2818.670724][ T6810]  should_fail_ex+0x21f/0x230
[ 2818.675436][ T6810]  __should_fail_alloc_page+0xfd/0x110
[ 2818.680942][ T6810]  __alloc_pages+0x108/0x340
[ 2818.685592][ T6810]  vma_alloc_folio+0x6a3/0x8c0
[ 2818.690454][ T6810]  ? shmem_inode_acct_block+0x1ee/0x220
[ 2818.696149][ T6810]  shmem_get_folio_gfp+0x579/0xc30
[ 2818.701319][ T6810]  shmem_write_begin+0xa6/0x210
[ 2818.706272][ T6810]  generic_perform_write+0x1c9/0x410
[ 2818.711586][ T6810]  ? shmem_write_begin+0x210/0x210
[ 2818.716735][ T6810]  shmem_file_write_iter+0xc8/0xe0
[ 2818.721901][ T6810]  vfs_write+0x4ab/0x7d0
[ 2818.726174][ T6810]  ksys_write+0xeb/0x1a0
[ 2818.730434][ T6810]  __x64_sys_write+0x42/0x50
[ 2818.735087][ T6810]  do_syscall_64+0x41/0xc0
[ 2818.739607][ T6810]  entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 2818.745532][ T6810] RIP: 0033:0x7f90e4a54ae9
[ 2818.749988][ T6810] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48
22:46:52 executing program 0:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x4efd83, 0x0)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(r1, 0x10f, 0x86) (async)
sendmsg$AUDIT_TTY_GET(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x10, 0x3f8, 0x300, 0x70bd28, 0x25dfdbfb, "", ["", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x810}, 0x20004041) (async)
write$ppp(r0, 0x0, 0xeffdffffffffffff)

22:46:52 executing program 4:
ioctl$TUNSETSNDBUF(0xffffffffffffffff, 0x400454d4, &(0x7f0000000040)=0x10001)
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x105000, 0x0)
write$ppp(r0, 0x0, 0x0)

22:46:52 executing program 2:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
write$ppp(r0, &(0x7f0000000180)="bc69bce9ec028c0a7763dfdbcec4c907d7bf8bf768bd9461604c717a072e1f9e742426a2541e4f272924c0a0c5f59fc04f62010001003e316d351fb8e520aa750624e55ddc1e711dcbdb3bc521450c29ebf859a6b6f6f8955f8b2c00ed8b41a2363dddc89d0dbf1b18537032169d5993adf95078c7284495f3f87180e3715c391ecce800b9ba51a4736e565e2be86d733d00", 0x92)

22:46:52 executing program 1:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000000))
write$ppp(r0, 0x0, 0xeffdffff)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0) (async)
ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000000)) (async)
write$ppp(r0, 0x0, 0xeffdffff) (async)

22:46:52 executing program 5:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
write$ppp(r0, &(0x7f00000002c0)="d3", 0x1f4f33) (fail_nth: 91)

22:46:52 executing program 3:
bind$can_j1939(0xffffffffffffffff, &(0x7f0000000000)={0x1d, 0x0, 0x4, {0x1, 0xf0, 0x1}, 0xfd}, 0x18)
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
syz_io_uring_setup(0x1fe8, &(0x7f00000000c0)={0x0, 0x6599, 0x4, 0x2, 0x105, 0x0, r0}, &(0x7f0000000040)=<r1=>0x0, &(0x7f0000000140))
r2 = openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(r2, 0x10f, 0x86)
syz_open_dev$loop(&(0x7f0000000240), 0x4, 0x2400)
syz_io_uring_submit(r1, 0x0, &(0x7f0000000200)=@IORING_OP_LINKAT={0x27, 0x2, 0x0, r2, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='./file0\x00', r0, 0x400, 0x1})
write$ppp(r0, &(0x7f00000002c0)="d3", 0xfffffdef)
ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r2)
bind$can_j1939(0xffffffffffffffff, &(0x7f0000000000)={0x1d, 0x0, 0x4, {0x1, 0xf0, 0x1}, 0xfd}, 0x18) (async)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0) (async)
syz_io_uring_setup(0x1fe8, &(0x7f00000000c0)={0x0, 0x6599, 0x4, 0x2, 0x105, 0x0, r0}, &(0x7f0000000040), &(0x7f0000000140)) (async)
openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0) (async)
setsockopt$TIPC_MCAST_REPLICAST(r2, 0x10f, 0x86) (async)
syz_open_dev$loop(&(0x7f0000000240), 0x4, 0x2400) (async)
syz_io_uring_submit(r1, 0x0, &(0x7f0000000200)=@IORING_OP_LINKAT={0x27, 0x2, 0x0, r2, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='./file0\x00', r0, 0x400, 0x1}) (async)
write$ppp(r0, &(0x7f00000002c0)="d3", 0xfffffdef) (async)
ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r2) (async)

22:46:52 executing program 1:
openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0) (async)
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000000))
write$ppp(r0, 0x0, 0xeffdffff)

[ 2818.769617][ T6810] RSP: 002b:00007f90e3dd70c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 2818.778047][ T6810] RAX: ffffffffffffffda RBX: 00007f90e4b73f80 RCX: 00007f90e4a54ae9
[ 2818.786033][ T6810] RDX: 00000000001f4f33 RSI: 00000000200002c0 RDI: 0000000000000003
[ 2818.794030][ T6810] RBP: 00007f90e3dd7120 R08: 0000000000000000 R09: 0000000000000000
[ 2818.802012][ T6810] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 2818.809995][ T6810] R13: 000000000000000b R14: 00007f90e4b73f80 R15: 00007ffdb3bfd028
[ 2818.817985][ T6810]  </TASK>
22:46:52 executing program 0:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x4efd83, 0x0) (async)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(r1, 0x10f, 0x86) (async)
sendmsg$AUDIT_TTY_GET(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x10, 0x3f8, 0x300, 0x70bd28, 0x25dfdbfb, "", ["", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x810}, 0x20004041) (async)
write$ppp(r0, 0x0, 0xeffdffffffffffff)

22:46:52 executing program 4:
ioctl$TUNSETSNDBUF(0xffffffffffffffff, 0x400454d4, &(0x7f0000000040)=0x10001)
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0) (async)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x105000, 0x0)
write$ppp(r0, 0x0, 0x0)

22:46:52 executing program 2:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
write$ppp(r0, &(0x7f0000000180)="bc69bce9ec028c0a7763dfdbcec4c907d7bf8bf768bd9461604c717a072e1f9e742426a2541e4f272924c0a0c5f59fc04f62010001003e316d351fb8e520aa750624e55ddc1e711dcbdb3bc521450c29ebf859a6b6f6f8955f8b2c00ed8b41a2363dddc89d0dbf1b18537032169d5993adf95078c7284495f3f87180e3715c391ecce800b9ba51a4736e565e2be86d733d00", 0x92)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async)
write$ppp(r0, &(0x7f0000000180)="bc69bce9ec028c0a7763dfdbcec4c907d7bf8bf768bd9461604c717a072e1f9e742426a2541e4f272924c0a0c5f59fc04f62010001003e316d351fb8e520aa750624e55ddc1e711dcbdb3bc521450c29ebf859a6b6f6f8955f8b2c00ed8b41a2363dddc89d0dbf1b18537032169d5993adf95078c7284495f3f87180e3715c391ecce800b9ba51a4736e565e2be86d733d00", 0x92) (async)

[ 2818.894214][ T6845] FAULT_INJECTION: forcing a failure.
[ 2818.894214][ T6845] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 2818.907359][ T6845] CPU: 1 PID: 6845 Comm: syz-executor.5 Not tainted 6.6.0-rc3-syzkaller-00165-g3b517966c561 #0
[ 2818.917702][ T6845] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/06/2023
[ 2818.927842][ T6845] Call Trace:
[ 2818.931205][ T6845]  <TASK>
[ 2818.934142][ T6845]  dump_stack_lvl+0xda/0x130
[ 2818.938765][ T6845]  dump_stack+0x15/0x20
[ 2818.942932][ T6845]  should_fail_ex+0x21f/0x230
[ 2818.947636][ T6845]  should_fail+0xb/0x10
[ 2818.951817][ T6845]  should_fail_usercopy+0x1a/0x20
[ 2818.956865][ T6845]  copy_page_from_iter_atomic+0x21c/0xcf0
[ 2818.962714][ T6845]  ? shmem_write_begin+0xa6/0x210
[ 2818.967835][ T6845]  ? shmem_write_begin+0x16d/0x210
[ 2818.972963][ T6845]  generic_perform_write+0x20c/0x410
[ 2818.978254][ T6845]  ? shmem_write_begin+0x210/0x210
[ 2818.983432][ T6845]  shmem_file_write_iter+0xc8/0xe0
[ 2818.988582][ T6845]  vfs_write+0x4ab/0x7d0
22:46:53 executing program 0:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(r0, 0x10f, 0x86)
ioctl$TUNSETFILTEREBPF(0xffffffffffffffff, 0x800454e1, &(0x7f0000000000)=r0)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
write$ppp(r1, 0x0, 0xeffdffffffffffff)

22:46:53 executing program 3:
socket$inet_smc(0x2b, 0x1, 0x0)
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
write$ppp(r0, &(0x7f00000002c0)="d3", 0xfffffdef)

22:46:53 executing program 4:
ioctl$TUNSETSNDBUF(0xffffffffffffffff, 0x400454d4, &(0x7f0000000040)=0x10001)
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x105000, 0x0)
write$ppp(r0, 0x0, 0x0)
ioctl$TUNSETSNDBUF(0xffffffffffffffff, 0x400454d4, &(0x7f0000000040)=0x10001) (async)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0) (async)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x105000, 0x0) (async)
write$ppp(r0, 0x0, 0x0) (async)

22:46:53 executing program 1:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
sendmsg$AUDIT_TTY_SET(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0x18, 0x3f9, 0x10, 0x70bd2a, 0x25dfdbfe, {0x1}, ["", "", "", "", "", "", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x800}, 0x4004)
write$ppp(r0, 0x0, 0xeffdffff)

22:46:53 executing program 2:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
write$ppp(r0, &(0x7f0000000180)="bc69bce9ec028c0a7763dfdbcec4c907d7bf8bf768bd9461604c717a072e1f9e742426a2541e4f272924c0a0c5f59fc04f62010001003e316d351fb8e520aa750624e55ddc1e711dcbdb3bc521450c29ebf859a6b6f6f8955f8b2c00ed8b41a2363dddc89d0dbf1b18537032169d5993adf95078c7284495f3f87180e3715c391ecce800b9ba51a4736e565e2be86d733d00", 0x92)

22:46:53 executing program 4:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dac01, 0x0)
write$ppp(r0, 0x0, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)

[ 2818.992857][ T6845]  ksys_write+0xeb/0x1a0
[ 2818.997212][ T6845]  __x64_sys_write+0x42/0x50
[ 2819.001829][ T6845]  do_syscall_64+0x41/0xc0
[ 2819.006349][ T6845]  entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 2819.012286][ T6845] RIP: 0033:0x7f90e4a54ae9
[ 2819.016720][ T6845] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48
[ 2819.036357][ T6845] RSP: 002b:00007f90e3dd70c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
22:46:53 executing program 5:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
write$ppp(r0, &(0x7f00000002c0)="d3", 0x1f4f33) (fail_nth: 92)

22:46:53 executing program 2:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5cef03, 0x0)
ioctl$LOOP_SET_FD(r0, 0x4c00, 0xffffffffffffffff)
write$ppp(r0, &(0x7f00000002c0)="d3", 0x1)

22:46:53 executing program 4:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dac01, 0x0)
write$ppp(r0, 0x0, 0x0) (async)
socket$inet_tcp(0x2, 0x1, 0x0)

22:46:53 executing program 0:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(r0, 0x10f, 0x86) (async)
ioctl$TUNSETFILTEREBPF(0xffffffffffffffff, 0x800454e1, &(0x7f0000000000)=r0)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
write$ppp(r1, 0x0, 0xeffdffffffffffff)

22:46:53 executing program 1:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
sendmsg$AUDIT_TTY_SET(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0x18, 0x3f9, 0x10, 0x70bd2a, 0x25dfdbfe, {0x1}, ["", "", "", "", "", "", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x800}, 0x4004) (async)
write$ppp(r0, 0x0, 0xeffdffff)

[ 2819.044832][ T6845] RAX: ffffffffffffffda RBX: 00007f90e4b73f80 RCX: 00007f90e4a54ae9
[ 2819.052810][ T6845] RDX: 00000000001f4f33 RSI: 00000000200002c0 RDI: 0000000000000003
[ 2819.060818][ T6845] RBP: 00007f90e3dd7120 R08: 0000000000000000 R09: 0000000000000000
[ 2819.068858][ T6845] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 2819.076951][ T6845] R13: 000000000000000b R14: 00007f90e4b73f80 R15: 00007ffdb3bfd028
[ 2819.084975][ T6845]  </TASK>
22:46:53 executing program 0:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(r0, 0x10f, 0x86)
ioctl$TUNSETFILTEREBPF(0xffffffffffffffff, 0x800454e1, &(0x7f0000000000)=r0)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
write$ppp(r1, 0x0, 0xeffdffffffffffff) (async)
write$ppp(r1, 0x0, 0xeffdffffffffffff)

22:46:53 executing program 4:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dac01, 0x0)
write$ppp(r0, 0x0, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)

[ 2819.173189][ T6885] FAULT_INJECTION: forcing a failure.
[ 2819.173189][ T6885] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[ 2819.186621][ T6885] CPU: 1 PID: 6885 Comm: syz-executor.5 Not tainted 6.6.0-rc3-syzkaller-00165-g3b517966c561 #0
[ 2819.196979][ T6885] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/06/2023
[ 2819.207042][ T6885] Call Trace:
[ 2819.210323][ T6885]  <TASK>
[ 2819.213262][ T6885]  dump_stack_lvl+0xda/0x130
[ 2819.217882][ T6885]  dump_stack+0x15/0x20
22:46:53 executing program 2:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5cef03, 0x0)
ioctl$LOOP_SET_FD(r0, 0x4c00, 0xffffffffffffffff)
write$ppp(r0, &(0x7f00000002c0)="d3", 0x1)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5cef03, 0x0) (async)
ioctl$LOOP_SET_FD(r0, 0x4c00, 0xffffffffffffffff) (async)
write$ppp(r0, &(0x7f00000002c0)="d3", 0x1) (async)

22:46:53 executing program 1:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
sendmsg$AUDIT_TTY_SET(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0x18, 0x3f9, 0x10, 0x70bd2a, 0x25dfdbfe, {0x1}, ["", "", "", "", "", "", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x800}, 0x4004) (async)
write$ppp(r0, 0x0, 0xeffdffff)

22:46:53 executing program 3:
socket$inet_smc(0x2b, 0x1, 0x0)
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
write$ppp(r0, &(0x7f00000002c0)="d3", 0xfffffdef)
socket$inet_smc(0x2b, 0x1, 0x0) (async)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0) (async)
write$ppp(r0, &(0x7f00000002c0)="d3", 0xfffffdef) (async)

22:46:53 executing program 4:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(r1, 0x10f, 0x86)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x400000, 0x0)
ioctl$PPPIOCATTACH(r0, 0x4004743d, &(0x7f0000000140)=0x1)
ioctl$IMGETCOUNT(r0, 0x80044943, &(0x7f0000000000))
openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x28080, 0x0)
r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
write$ppp(r2, 0x0, 0x0)

22:46:53 executing program 0:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x5d4880, 0x0)
write$ppp(r0, 0x0, 0xeffdffffffffffff)

[ 2819.222099][ T6885]  should_fail_ex+0x21f/0x230
[ 2819.226877][ T6885]  __should_fail_alloc_page+0xfd/0x110
[ 2819.232440][ T6885]  __alloc_pages+0x108/0x340
[ 2819.237094][ T6885]  vma_alloc_folio+0x6a3/0x8c0
[ 2819.241894][ T6885]  ? shmem_inode_acct_block+0x1ee/0x220
[ 2819.247545][ T6885]  shmem_get_folio_gfp+0x579/0xc30
[ 2819.252756][ T6885]  shmem_write_begin+0xa6/0x210
[ 2819.257716][ T6885]  generic_perform_write+0x1c9/0x410
[ 2819.263052][ T6885]  ? shmem_write_begin+0x210/0x210
[ 2819.268206][ T6885]  shmem_file_write_iter+0xc8/0xe0
[ 2819.273399][ T6885]  vfs_write+0x4ab/0x7d0
[ 2819.277725][ T6885]  ksys_write+0xeb/0x1a0
[ 2819.282103][ T6885]  __x64_sys_write+0x42/0x50
[ 2819.286731][ T6885]  do_syscall_64+0x41/0xc0
[ 2819.291251][ T6885]  entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 2819.297175][ T6885] RIP: 0033:0x7f90e4a54ae9
[ 2819.301617][ T6885] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48
22:46:53 executing program 5:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
write$ppp(r0, &(0x7f00000002c0)="d3", 0x1f4f33) (fail_nth: 93)

22:46:53 executing program 4:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(r1, 0x10f, 0x86)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x400000, 0x0)
ioctl$PPPIOCATTACH(r0, 0x4004743d, &(0x7f0000000140)=0x1)
ioctl$IMGETCOUNT(r0, 0x80044943, &(0x7f0000000000))
openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x28080, 0x0)
r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
write$ppp(r2, 0x0, 0x0)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0) (async)
openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0) (async)
setsockopt$TIPC_MCAST_REPLICAST(r1, 0x10f, 0x86) (async)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x400000, 0x0) (async)
ioctl$PPPIOCATTACH(r0, 0x4004743d, &(0x7f0000000140)=0x1) (async)
ioctl$IMGETCOUNT(r0, 0x80044943, &(0x7f0000000000)) (async)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x28080, 0x0) (async)
openat$pfkey(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async)
write$ppp(r2, 0x0, 0x0) (async)

22:46:53 executing program 0:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x5d4880, 0x0)
write$ppp(r0, 0x0, 0xeffdffffffffffff)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x5d4880, 0x0) (async)
write$ppp(r0, 0x0, 0xeffdffffffffffff) (async)

22:46:53 executing program 1:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x5c8c81, 0x0)
write$ppp(r0, 0x0, 0xeffdffff)

22:46:53 executing program 2:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5cef03, 0x0)
ioctl$LOOP_SET_FD(r0, 0x4c00, 0xffffffffffffffff) (async)
write$ppp(r0, &(0x7f00000002c0)="d3", 0x1)

[ 2819.321303][ T6885] RSP: 002b:00007f90e3dd70c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 2819.329744][ T6885] RAX: ffffffffffffffda RBX: 00007f90e4b73f80 RCX: 00007f90e4a54ae9
[ 2819.337769][ T6885] RDX: 00000000001f4f33 RSI: 00000000200002c0 RDI: 0000000000000003
[ 2819.345773][ T6885] RBP: 00007f90e3dd7120 R08: 0000000000000000 R09: 0000000000000000
[ 2819.353849][ T6885] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 2819.361831][ T6885] R13: 000000000000000b R14: 00007f90e4b73f80 R15: 00007ffdb3bfd028
[ 2819.369826][ T6885]  </TASK>
22:46:53 executing program 0:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x5d4880, 0x0)
write$ppp(r0, 0x0, 0xeffdffffffffffff)

22:46:53 executing program 2:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
write$ppp(r0, &(0x7f00000002c0)="d3", 0x1)
ioctl$PPPIOCBRIDGECHAN(0xffffffffffffffff, 0x40047435, &(0x7f0000000000)=0x1)
ioctl$PPPIOCSCOMPRESS(r0, 0x4010744d)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(r1, 0x10f, 0x86)
ioctl$PPPIOCSDEBUG(r1, 0x40047440, &(0x7f00000000c0)=0x2)
connect$can_j1939(r0, &(0x7f0000000040)={0x1d, 0x0, 0x2, {0x2, 0xf, 0x2}, 0xfe}, 0x18)

22:46:53 executing program 1:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x5c8c81, 0x0)
write$ppp(r0, 0x0, 0xeffdffff)

22:46:53 executing program 4:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(r1, 0x10f, 0x86)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x400000, 0x0) (async)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x400000, 0x0)
ioctl$PPPIOCATTACH(r0, 0x4004743d, &(0x7f0000000140)=0x1)
ioctl$IMGETCOUNT(r0, 0x80044943, &(0x7f0000000000))
openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x28080, 0x0)
openat$pfkey(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async)
r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
write$ppp(r2, 0x0, 0x0) (async)
write$ppp(r2, 0x0, 0x0)

[ 2819.463888][ T6923] FAULT_INJECTION: forcing a failure.
[ 2819.463888][ T6923] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 2819.477189][ T6923] CPU: 1 PID: 6923 Comm: syz-executor.5 Not tainted 6.6.0-rc3-syzkaller-00165-g3b517966c561 #0
[ 2819.487532][ T6923] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/06/2023
[ 2819.497701][ T6923] Call Trace:
[ 2819.500991][ T6923]  <TASK>
[ 2819.503932][ T6923]  dump_stack_lvl+0xda/0x130
[ 2819.508545][ T6923]  dump_stack+0x15/0x20
[ 2819.512786][ T6923]  should_fail_ex+0x21f/0x230
[ 2819.517551][ T6923]  should_fail+0xb/0x10
[ 2819.521778][ T6923]  should_fail_usercopy+0x1a/0x20
[ 2819.526818][ T6923]  copy_page_from_iter_atomic+0x21c/0xcf0
[ 2819.532563][ T6923]  ? shmem_write_begin+0xa6/0x210
[ 2819.537652][ T6923]  ? shmem_write_begin+0x16d/0x210
[ 2819.542803][ T6923]  generic_perform_write+0x20c/0x410
[ 2819.548117][ T6923]  ? shmem_write_begin+0x210/0x210
[ 2819.553250][ T6923]  shmem_file_write_iter+0xc8/0xe0
[ 2819.558391][ T6923]  vfs_write+0x4ab/0x7d0
22:46:53 executing program 3:
socket$inet_smc(0x2b, 0x1, 0x0) (async)
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
write$ppp(r0, &(0x7f00000002c0)="d3", 0xfffffdef)

22:46:53 executing program 2:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
write$ppp(r0, &(0x7f00000002c0)="d3", 0x1) (async)
ioctl$PPPIOCBRIDGECHAN(0xffffffffffffffff, 0x40047435, &(0x7f0000000000)=0x1) (async)
ioctl$PPPIOCSCOMPRESS(r0, 0x4010744d) (async)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(r1, 0x10f, 0x86)
ioctl$PPPIOCSDEBUG(r1, 0x40047440, &(0x7f00000000c0)=0x2)
connect$can_j1939(r0, &(0x7f0000000040)={0x1d, 0x0, 0x2, {0x2, 0xf, 0x2}, 0xfe}, 0x18)

22:46:53 executing program 0:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
write$ppp(r0, 0x0, 0xeffdffffffffffff)
openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0xa0802, 0x0)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(r1, 0x10f, 0x86)
ioctl$PPPIOCGIDLE64(r1, 0x8010743f, &(0x7f00000000c0))
r2 = io_uring_setup(0x700e, &(0x7f0000000340)={0x0, 0x3dfb, 0x40, 0x0, 0x2b1, 0x0, r0})
syz_io_uring_setup(0x3182, &(0x7f0000000100)={0x0, 0xb80d, 0x20, 0x1, 0x106, 0x0, r2}, &(0x7f0000000180)=<r3=>0x0, &(0x7f00000001c0))
r4 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x4021871, 0xffffffffffffffff, 0x10000000)
syz_io_uring_setup(0x237a, &(0x7f0000000080)={0x0, 0x50dc, 0x0, 0x0, 0x0, 0x0, r2}, &(0x7f0000000000)=<r5=>0x0, &(0x7f0000000100))
r6 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000500), 0x10381, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(r6, 0x10f, 0x86)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r6, 0x89f3, &(0x7f00000002c0)={'ip6_vti0\x00', &(0x7f0000000240)={'ip6_vti0\x00', 0x0, 0x29, 0xfd, 0x1, 0x80000000, 0x60, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x7800, 0xc0, 0x7, 0xfffffffb}})
syz_io_uring_submit(r5, r4, &(0x7f0000000140)=@IORING_OP_POLL_REMOVE)
syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_SHUTDOWN={0x22, 0x0, 0x0, r0, 0x0, 0x0, 0x1, 0x0, 0x1})
ioctl$SIOCGSTAMPNS(r6, 0x8907, &(0x7f0000000040))
socketpair(0x0, 0x5, 0x8, &(0x7f00000003c0)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
sendmsg$AUDIT_GET(r7, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x10, 0x3e8, 0x4, 0x70bd26, 0x25dfdbfe, "", ["", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x40804}, 0x20040004)
r8 = openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(r8, 0x10f, 0x86)
ioctl$PPPIOCGIDLE32(r8, 0x8008743f, &(0x7f0000000300))

[ 2819.562680][ T6923]  ksys_write+0xeb/0x1a0
[ 2819.567015][ T6923]  __x64_sys_write+0x42/0x50
[ 2819.571648][ T6923]  do_syscall_64+0x41/0xc0
[ 2819.576166][ T6923]  entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 2819.582142][ T6923] RIP: 0033:0x7f90e4a54ae9
[ 2819.586616][ T6923] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48
[ 2819.606275][ T6923] RSP: 002b:00007f90e3dd70c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 2819.614771][ T6923] RAX: ffffffffffffffda RBX: 00007f90e4b73f80 RCX: 00007f90e4a54ae9
[ 2819.622757][ T6923] RDX: 00000000001f4f33 RSI: 00000000200002c0 RDI: 0000000000000003
[ 2819.630784][ T6923] RBP: 00007f90e3dd7120 R08: 0000000000000000 R09: 0000000000000000
[ 2819.638833][ T6923] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 2819.646827][ T6923] R13: 000000000000000b R14: 00007f90e4b73f80 R15: 00007ffdb3bfd028
[ 2819.654860][ T6923]  </TASK>
22:46:53 executing program 4:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
write$ppp(r0, 0x0, 0x0)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(r1, 0x10f, 0x86)
ioctl$TUNGETDEVNETNS(r1, 0x54e3, 0x0)

22:46:53 executing program 1:
openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x5c8c81, 0x0) (async)
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x5c8c81, 0x0)
write$ppp(r0, 0x0, 0xeffdffff)

22:46:53 executing program 2:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
write$ppp(r0, &(0x7f00000002c0)="d3", 0x1)
ioctl$PPPIOCBRIDGECHAN(0xffffffffffffffff, 0x40047435, &(0x7f0000000000)=0x1) (async)
ioctl$PPPIOCBRIDGECHAN(0xffffffffffffffff, 0x40047435, &(0x7f0000000000)=0x1)
ioctl$PPPIOCSCOMPRESS(r0, 0x4010744d) (async)
ioctl$PPPIOCSCOMPRESS(r0, 0x4010744d)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(r1, 0x10f, 0x86)
ioctl$PPPIOCSDEBUG(r1, 0x40047440, &(0x7f00000000c0)=0x2)
connect$can_j1939(r0, &(0x7f0000000040)={0x1d, 0x0, 0x2, {0x2, 0xf, 0x2}, 0xfe}, 0x18)

22:46:53 executing program 0:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
write$ppp(r0, 0x0, 0xeffdffffffffffff) (async)
write$ppp(r0, 0x0, 0xeffdffffffffffff)
openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0xa0802, 0x0) (async)
openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0xa0802, 0x0)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(r1, 0x10f, 0x86)
ioctl$PPPIOCGIDLE64(r1, 0x8010743f, &(0x7f00000000c0))
r2 = io_uring_setup(0x700e, &(0x7f0000000340)={0x0, 0x3dfb, 0x40, 0x0, 0x2b1, 0x0, r0})
syz_io_uring_setup(0x3182, &(0x7f0000000100)={0x0, 0xb80d, 0x20, 0x1, 0x106, 0x0, r2}, &(0x7f0000000180)=<r3=>0x0, &(0x7f00000001c0))
mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x4021871, 0xffffffffffffffff, 0x10000000) (async)
r4 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x4021871, 0xffffffffffffffff, 0x10000000)
syz_io_uring_setup(0x237a, &(0x7f0000000080)={0x0, 0x50dc, 0x0, 0x0, 0x0, 0x0, r2}, &(0x7f0000000000)=<r5=>0x0, &(0x7f0000000100))
openat$bsg(0xffffffffffffff9c, &(0x7f0000000500), 0x10381, 0x0) (async)
r6 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000500), 0x10381, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(r6, 0x10f, 0x86) (async)
setsockopt$TIPC_MCAST_REPLICAST(r6, 0x10f, 0x86)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r6, 0x89f3, &(0x7f00000002c0)={'ip6_vti0\x00', &(0x7f0000000240)={'ip6_vti0\x00', 0x0, 0x29, 0xfd, 0x1, 0x80000000, 0x60, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x7800, 0xc0, 0x7, 0xfffffffb}}) (async)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r6, 0x89f3, &(0x7f00000002c0)={'ip6_vti0\x00', &(0x7f0000000240)={'ip6_vti0\x00', 0x0, 0x29, 0xfd, 0x1, 0x80000000, 0x60, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x7800, 0xc0, 0x7, 0xfffffffb}})
syz_io_uring_submit(r5, r4, &(0x7f0000000140)=@IORING_OP_POLL_REMOVE)
syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_SHUTDOWN={0x22, 0x0, 0x0, r0, 0x0, 0x0, 0x1, 0x0, 0x1})
ioctl$SIOCGSTAMPNS(r6, 0x8907, &(0x7f0000000040))
socketpair(0x0, 0x5, 0x8, &(0x7f00000003c0)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
sendmsg$AUDIT_GET(r7, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x10, 0x3e8, 0x4, 0x70bd26, 0x25dfdbfe, "", ["", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x40804}, 0x20040004)
r8 = openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(r8, 0x10f, 0x86) (async)
setsockopt$TIPC_MCAST_REPLICAST(r8, 0x10f, 0x86)
ioctl$PPPIOCGIDLE32(r8, 0x8008743f, &(0x7f0000000300))

22:46:53 executing program 5:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
write$ppp(r0, &(0x7f00000002c0)="d3", 0x1f4f33) (fail_nth: 94)

22:46:53 executing program 1:
write$ppp(0xffffffffffffffff, 0x0, 0xeffdffff)
pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80000)
write$P9_RRENAME(r0, &(0x7f0000000040)={0x7, 0x15, 0x1}, 0x7)

22:46:53 executing program 4:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
write$ppp(r0, 0x0, 0x0)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(r1, 0x10f, 0x86) (async)
ioctl$TUNGETDEVNETNS(r1, 0x54e3, 0x0)

22:46:53 executing program 2:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
write$ppp(r0, &(0x7f00000002c0)="d3", 0x1)
r1 = syz_init_net_socket$llc(0x1a, 0x3, 0x0)
bind$llc(r1, &(0x7f0000000000)={0x1a, 0x103, 0x3, 0xc3, 0x7, 0x8, @link_local}, 0x10)

22:46:53 executing program 4:
openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0) (async)
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
write$ppp(r0, 0x0, 0x0)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(r1, 0x10f, 0x86)
ioctl$TUNGETDEVNETNS(r1, 0x54e3, 0x0)

[ 2819.744501][ T6957] FAULT_INJECTION: forcing a failure.
[ 2819.744501][ T6957] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[ 2819.757777][ T6957] CPU: 1 PID: 6957 Comm: syz-executor.5 Not tainted 6.6.0-rc3-syzkaller-00165-g3b517966c561 #0
[ 2819.768122][ T6957] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/06/2023
[ 2819.778198][ T6957] Call Trace:
[ 2819.781482][ T6957]  <TASK>
[ 2819.784438][ T6957]  dump_stack_lvl+0xda/0x130
[ 2819.789034][ T6957]  dump_stack+0x15/0x20
[ 2819.793241][ T6957]  should_fail_ex+0x21f/0x230
[ 2819.797990][ T6957]  __should_fail_alloc_page+0xfd/0x110
[ 2819.803463][ T6957]  __alloc_pages+0x108/0x340
[ 2819.808074][ T6957]  vma_alloc_folio+0x6a3/0x8c0
[ 2819.812947][ T6957]  ? shmem_inode_acct_block+0x1ee/0x220
[ 2819.818510][ T6957]  shmem_get_folio_gfp+0x579/0xc30
[ 2819.823722][ T6957]  shmem_write_begin+0xa6/0x210
[ 2819.828590][ T6957]  generic_perform_write+0x1c9/0x410
[ 2819.834040][ T6957]  ? shmem_write_begin+0x210/0x210
[ 2819.839256][ T6957]  shmem_file_write_iter+0xc8/0xe0
22:46:53 executing program 3:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
write$ppp(r0, &(0x7f00000002c0)="d3", 0xfffffdef)
r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x200, 0x42)
ioctl$USBDEVFS_ALLOW_SUSPEND(r1, 0x8004551a)
syz_open_dev$usbfs(&(0x7f0000000100), 0x5, 0x38c43)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f00000000c0)=0x2, 0x4)
r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0)
ioctl$PPPIOCGIDLE64(r2, 0x8010743f, &(0x7f0000000040))

22:46:53 executing program 1:
write$ppp(0xffffffffffffffff, 0x0, 0xeffdffff)
pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80000)
write$P9_RRENAME(r0, &(0x7f0000000040)={0x7, 0x15, 0x1}, 0x7)
write$ppp(0xffffffffffffffff, 0x0, 0xeffdffff) (async)
pipe2$9p(&(0x7f0000000000), 0x80000) (async)
write$P9_RRENAME(r0, &(0x7f0000000040)={0x7, 0x15, 0x1}, 0x7) (async)

22:46:53 executing program 2:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
write$ppp(r0, &(0x7f00000002c0)="d3", 0x1)
r1 = syz_init_net_socket$llc(0x1a, 0x3, 0x0)
bind$llc(r1, &(0x7f0000000000)={0x1a, 0x103, 0x3, 0xc3, 0x7, 0x8, @link_local}, 0x10) (async)
bind$llc(r1, &(0x7f0000000000)={0x1a, 0x103, 0x3, 0xc3, 0x7, 0x8, @link_local}, 0x10)

[ 2819.844409][ T6957]  vfs_write+0x4ab/0x7d0
[ 2819.848695][ T6957]  ksys_write+0xeb/0x1a0
[ 2819.852947][ T6957]  __x64_sys_write+0x42/0x50
[ 2819.857561][ T6957]  do_syscall_64+0x41/0xc0
[ 2819.862053][ T6957]  entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 2819.868064][ T6957] RIP: 0033:0x7f90e4a54ae9
[ 2819.872532][ T6957] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48
22:46:53 executing program 0:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
write$ppp(r0, 0x0, 0xeffdffffffffffff) (async)
openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0xa0802, 0x0) (async)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(r1, 0x10f, 0x86) (async)
ioctl$PPPIOCGIDLE64(r1, 0x8010743f, &(0x7f00000000c0)) (async)
r2 = io_uring_setup(0x700e, &(0x7f0000000340)={0x0, 0x3dfb, 0x40, 0x0, 0x2b1, 0x0, r0})
syz_io_uring_setup(0x3182, &(0x7f0000000100)={0x0, 0xb80d, 0x20, 0x1, 0x106, 0x0, r2}, &(0x7f0000000180)=<r3=>0x0, &(0x7f00000001c0)) (async)
r4 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x4021871, 0xffffffffffffffff, 0x10000000) (async)
syz_io_uring_setup(0x237a, &(0x7f0000000080)={0x0, 0x50dc, 0x0, 0x0, 0x0, 0x0, r2}, &(0x7f0000000000)=<r5=>0x0, &(0x7f0000000100)) (async)
r6 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000500), 0x10381, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(r6, 0x10f, 0x86)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r6, 0x89f3, &(0x7f00000002c0)={'ip6_vti0\x00', &(0x7f0000000240)={'ip6_vti0\x00', 0x0, 0x29, 0xfd, 0x1, 0x80000000, 0x60, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x7800, 0xc0, 0x7, 0xfffffffb}}) (async)
syz_io_uring_submit(r5, r4, &(0x7f0000000140)=@IORING_OP_POLL_REMOVE) (async)
syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_SHUTDOWN={0x22, 0x0, 0x0, r0, 0x0, 0x0, 0x1, 0x0, 0x1})
ioctl$SIOCGSTAMPNS(r6, 0x8907, &(0x7f0000000040)) (async)
socketpair(0x0, 0x5, 0x8, &(0x7f00000003c0)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
sendmsg$AUDIT_GET(r7, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x10, 0x3e8, 0x4, 0x70bd26, 0x25dfdbfe, "", ["", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x40804}, 0x20040004) (async)
r8 = openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(r8, 0x10f, 0x86)
ioctl$PPPIOCGIDLE32(r8, 0x8008743f, &(0x7f0000000300))

22:46:54 executing program 0:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x17a643, 0x0)
write$ppp(r0, 0x0, 0xeffdffffffffffff)

22:46:54 executing program 4:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
write$ppp(r0, 0x0, 0x0)
sendmsg$AUDIT_MAKE_EQUIV(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x28, 0x3f7, 0x100, 0x70bd29, 0x25dfdbfb, {0x7, 0x7, './file0', './file0'}, ["", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x810)

22:46:54 executing program 2:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
write$ppp(r0, &(0x7f00000002c0)="d3", 0x1)
r1 = syz_init_net_socket$llc(0x1a, 0x3, 0x0)
bind$llc(r1, &(0x7f0000000000)={0x1a, 0x103, 0x3, 0xc3, 0x7, 0x8, @link_local}, 0x10)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0) (async)
write$ppp(r0, &(0x7f00000002c0)="d3", 0x1) (async)
syz_init_net_socket$llc(0x1a, 0x3, 0x0) (async)
bind$llc(r1, &(0x7f0000000000)={0x1a, 0x103, 0x3, 0xc3, 0x7, 0x8, @link_local}, 0x10) (async)

22:46:54 executing program 5:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
write$ppp(r0, &(0x7f00000002c0)="d3", 0x1f4f33) (fail_nth: 95)

22:46:54 executing program 1:
write$ppp(0xffffffffffffffff, 0x0, 0xeffdffff) (async)
pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80000)
write$P9_RRENAME(r0, &(0x7f0000000040)={0x7, 0x15, 0x1}, 0x7)

[ 2819.892176][ T6957] RSP: 002b:00007f90e3dd70c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 2819.900617][ T6957] RAX: ffffffffffffffda RBX: 00007f90e4b73f80 RCX: 00007f90e4a54ae9
[ 2819.908670][ T6957] RDX: 00000000001f4f33 RSI: 00000000200002c0 RDI: 0000000000000003
[ 2819.916665][ T6957] RBP: 00007f90e3dd7120 R08: 0000000000000000 R09: 0000000000000000
[ 2819.924712][ T6957] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 2819.932806][ T6957] R13: 000000000000000b R14: 00007f90e4b73f80 R15: 00007ffdb3bfd028
[ 2819.940851][ T6957]  </TASK>
22:46:54 executing program 1:
mount$cgroup(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x88010, &(0x7f00000000c0)={[{@clone_children}, {@noprefix}, {@name={'name', 0x3d, '/dev/bsg\x00'}}, {@clone_children}, {@noprefix}, {@release_agent={'release_agent', 0x3d, './file0'}}, {@none}, {@none}, {@name={'name', 0x3d, ',[{,:p{:\x02\\$[$['}}], [{@fowner_lt={'fowner<', 0xee01}}, {@audit}, {@fsname}]})
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
write$ppp(r0, 0x0, 0xeffdffff)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000180)=[@timestamp, @sack_perm, @mss, @sack_perm, @sack_perm, @window={0x3, 0xc80d, 0x9}, @timestamp, @mss={0x2, 0x5}, @sack_perm], 0x9)

22:46:54 executing program 0:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x17a643, 0x0)
write$ppp(r0, 0x0, 0xeffdffffffffffff)

22:46:54 executing program 2:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
sendmsg$AUDIT_DEL_RULE(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4080024}, 0xc, &(0x7f0000000040)={&(0x7f0000000300)={0x448, 0x3f4, 0x400, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x2d, [0x3, 0xeff, 0xff, 0x9, 0x8, 0x3b8e987d, 0xffff861b, 0x0, 0xbd, 0x5, 0xed68, 0x80, 0x6, 0x10000, 0x8001, 0x3, 0x80, 0xad35, 0x3, 0x59b, 0x3f, 0x9, 0x80, 0x101, 0x81, 0x7, 0x6, 0x8, 0x4f3, 0xffff, 0x1, 0x5, 0x112, 0x9, 0x0, 0x5, 0x5, 0x4, 0x9, 0xaa4, 0x101, 0x2adbb3fa, 0x7, 0xebb0, 0x0, 0x0, 0x8, 0x3, 0x80, 0x69e1, 0x7, 0x3f, 0x81, 0x7fffffff, 0x6, 0x5, 0x3, 0x2, 0x8, 0x4e7a, 0xfffffffb, 0x4, 0x7, 0x42], [0x3f, 0x8, 0x2, 0x100, 0xed, 0x7f, 0x7, 0x0, 0x1, 0x8001, 0x0, 0x8000, 0x9, 0x7f, 0x7, 0x1000, 0x3, 0x1ff, 0x61, 0x0, 0x7f, 0x1, 0x8, 0x30, 0x9, 0x7, 0x9, 0x9, 0x2, 0x1f, 0x80000001, 0x4, 0x3, 0x4, 0x8, 0x0, 0x3, 0x2, 0xffff, 0x40, 0x4, 0xe9, 0x8, 0x4, 0x7, 0x80000001, 0xeb6, 0x5, 0x7ff, 0x3, 0xfffffff8, 0x9, 0x2, 0x6, 0x80000000, 0x2, 0x5b5, 0x7, 0x234, 0x9, 0x5, 0x4, 0x7, 0x8], [0x2, 0x8, 0x5, 0x2, 0x401, 0x100, 0x29, 0x0, 0x200, 0x4, 0x1, 0x4875, 0x20, 0xb0, 0x1, 0x7fff, 0x7, 0x200, 0x1000, 0x1, 0x3f38, 0x9, 0x6, 0x4, 0x81a, 0x4, 0x7, 0x1, 0x10000, 0xd8d, 0x1, 0x6, 0x4, 0xffffffff, 0x5, 0x7fffffff, 0x3, 0x7, 0xfff, 0xff, 0x1000, 0x6, 0x80000000, 0xe1, 0xd4bd, 0x5, 0x7fff, 0x2, 0x4, 0xffffffff, 0x4, 0x2, 0x10000000, 0x1, 0x4, 0xffffff01, 0x400, 0x8, 0x5, 0x8, 0x7, 0x3, 0x6bb, 0x2], [0x7, 0xff, 0x9, 0x9, 0x3, 0x5, 0x7, 0x2, 0x7, 0x2, 0x3, 0x6, 0xfffffffe, 0xab, 0xa2, 0x2e5, 0x5694fa2f, 0x5, 0x5, 0x5, 0x10000, 0x20, 0x401, 0x3165, 0x9, 0xffff, 0x0, 0x1, 0x9, 0xa0000000, 0x5db2, 0x0, 0x800, 0x0, 0x5, 0x42e7, 0x10001, 0x8, 0xb9f3, 0x7, 0x9, 0x5, 0x27be, 0xa6e, 0x3, 0x6, 0x5, 0xa000000, 0x1, 0x80000000, 0x10001, 0xb94, 0x10000, 0x1ff, 0x1, 0x65, 0x0, 0x80000000, 0x3, 0x1000, 0xfff, 0x4, 0x81, 0x80000000], 0x28, ['/dev/bsg\x00', '+{\x00', '/dev/bsg\x00', '{\x00', '\x00', '{,-!\x00', '\x00', '/dev/bsg\x00', '\x00']}, ["", ""]}, 0x448}, 0x1, 0x0, 0x0, 0x4000000}, 0x804)
write$ppp(r0, &(0x7f00000002c0)="d3", 0x1)

[ 2820.017037][ T6990] FAULT_INJECTION: forcing a failure.
[ 2820.017037][ T6990] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 2820.030254][ T6990] CPU: 0 PID: 6990 Comm: syz-executor.5 Not tainted 6.6.0-rc3-syzkaller-00165-g3b517966c561 #0
[ 2820.040695][ T6990] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/06/2023
[ 2820.050752][ T6990] Call Trace:
[ 2820.054049][ T6990]  <TASK>
[ 2820.057016][ T6990]  dump_stack_lvl+0xda/0x130
[ 2820.061628][ T6990]  dump_stack+0x15/0x20
[ 2820.065828][ T6990]  should_fail_ex+0x21f/0x230
[ 2820.070529][ T6990]  should_fail+0xb/0x10
[ 2820.074750][ T6990]  should_fail_usercopy+0x1a/0x20
[ 2820.079899][ T6990]  copy_page_from_iter_atomic+0x21c/0xcf0
[ 2820.085681][ T6990]  ? shmem_write_begin+0xa6/0x210
[ 2820.090797][ T6990]  ? shmem_write_begin+0x16d/0x210
[ 2820.096019][ T6990]  generic_perform_write+0x20c/0x410
[ 2820.101339][ T6990]  ? shmem_write_begin+0x210/0x210
[ 2820.106570][ T6990]  shmem_file_write_iter+0xc8/0xe0
[ 2820.111771][ T6990]  vfs_write+0x4ab/0x7d0
[ 2820.116080][ T6990]  ksys_write+0xeb/0x1a0
[ 2820.120345][ T6990]  __x64_sys_write+0x42/0x50
[ 2820.124978][ T6990]  do_syscall_64+0x41/0xc0
[ 2820.129510][ T6990]  entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 2820.135482][ T6990] RIP: 0033:0x7f90e4a54ae9
[ 2820.139941][ T6990] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48
22:46:54 executing program 3:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
write$ppp(r0, &(0x7f00000002c0)="d3", 0xfffffdef)
r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x200, 0x42)
ioctl$USBDEVFS_ALLOW_SUSPEND(r1, 0x8004551a)
syz_open_dev$usbfs(&(0x7f0000000100), 0x5, 0x38c43)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f00000000c0)=0x2, 0x4)
r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0)
ioctl$PPPIOCGIDLE64(r2, 0x8010743f, &(0x7f0000000040))
openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0) (async)
write$ppp(r0, &(0x7f00000002c0)="d3", 0xfffffdef) (async)
syz_open_dev$usbfs(&(0x7f0000000000), 0x200, 0x42) (async)
ioctl$USBDEVFS_ALLOW_SUSPEND(r1, 0x8004551a) (async)
syz_open_dev$usbfs(&(0x7f0000000100), 0x5, 0x38c43) (async)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f00000000c0)=0x2, 0x4) (async)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) (async)
ioctl$PPPIOCGIDLE64(r2, 0x8010743f, &(0x7f0000000040)) (async)

22:46:54 executing program 0:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x17a643, 0x0)
write$ppp(r0, 0x0, 0xeffdffffffffffff)

22:46:54 executing program 2:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
sendmsg$AUDIT_DEL_RULE(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4080024}, 0xc, &(0x7f0000000040)={&(0x7f0000000300)={0x448, 0x3f4, 0x400, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x2d, [0x3, 0xeff, 0xff, 0x9, 0x8, 0x3b8e987d, 0xffff861b, 0x0, 0xbd, 0x5, 0xed68, 0x80, 0x6, 0x10000, 0x8001, 0x3, 0x80, 0xad35, 0x3, 0x59b, 0x3f, 0x9, 0x80, 0x101, 0x81, 0x7, 0x6, 0x8, 0x4f3, 0xffff, 0x1, 0x5, 0x112, 0x9, 0x0, 0x5, 0x5, 0x4, 0x9, 0xaa4, 0x101, 0x2adbb3fa, 0x7, 0xebb0, 0x0, 0x0, 0x8, 0x3, 0x80, 0x69e1, 0x7, 0x3f, 0x81, 0x7fffffff, 0x6, 0x5, 0x3, 0x2, 0x8, 0x4e7a, 0xfffffffb, 0x4, 0x7, 0x42], [0x3f, 0x8, 0x2, 0x100, 0xed, 0x7f, 0x7, 0x0, 0x1, 0x8001, 0x0, 0x8000, 0x9, 0x7f, 0x7, 0x1000, 0x3, 0x1ff, 0x61, 0x0, 0x7f, 0x1, 0x8, 0x30, 0x9, 0x7, 0x9, 0x9, 0x2, 0x1f, 0x80000001, 0x4, 0x3, 0x4, 0x8, 0x0, 0x3, 0x2, 0xffff, 0x40, 0x4, 0xe9, 0x8, 0x4, 0x7, 0x80000001, 0xeb6, 0x5, 0x7ff, 0x3, 0xfffffff8, 0x9, 0x2, 0x6, 0x80000000, 0x2, 0x5b5, 0x7, 0x234, 0x9, 0x5, 0x4, 0x7, 0x8], [0x2, 0x8, 0x5, 0x2, 0x401, 0x100, 0x29, 0x0, 0x200, 0x4, 0x1, 0x4875, 0x20, 0xb0, 0x1, 0x7fff, 0x7, 0x200, 0x1000, 0x1, 0x3f38, 0x9, 0x6, 0x4, 0x81a, 0x4, 0x7, 0x1, 0x10000, 0xd8d, 0x1, 0x6, 0x4, 0xffffffff, 0x5, 0x7fffffff, 0x3, 0x7, 0xfff, 0xff, 0x1000, 0x6, 0x80000000, 0xe1, 0xd4bd, 0x5, 0x7fff, 0x2, 0x4, 0xffffffff, 0x4, 0x2, 0x10000000, 0x1, 0x4, 0xffffff01, 0x400, 0x8, 0x5, 0x8, 0x7, 0x3, 0x6bb, 0x2], [0x7, 0xff, 0x9, 0x9, 0x3, 0x5, 0x7, 0x2, 0x7, 0x2, 0x3, 0x6, 0xfffffffe, 0xab, 0xa2, 0x2e5, 0x5694fa2f, 0x5, 0x5, 0x5, 0x10000, 0x20, 0x401, 0x3165, 0x9, 0xffff, 0x0, 0x1, 0x9, 0xa0000000, 0x5db2, 0x0, 0x800, 0x0, 0x5, 0x42e7, 0x10001, 0x8, 0xb9f3, 0x7, 0x9, 0x5, 0x27be, 0xa6e, 0x3, 0x6, 0x5, 0xa000000, 0x1, 0x80000000, 0x10001, 0xb94, 0x10000, 0x1ff, 0x1, 0x65, 0x0, 0x80000000, 0x3, 0x1000, 0xfff, 0x4, 0x81, 0x80000000], 0x28, ['/dev/bsg\x00', '+{\x00', '/dev/bsg\x00', '{\x00', '\x00', '{,-!\x00', '\x00', '/dev/bsg\x00', '\x00']}, ["", ""]}, 0x448}, 0x1, 0x0, 0x0, 0x4000000}, 0x804)
write$ppp(r0, &(0x7f00000002c0)="d3", 0x1)

22:46:54 executing program 1:
mount$cgroup(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x88010, &(0x7f00000000c0)={[{@clone_children}, {@noprefix}, {@name={'name', 0x3d, '/dev/bsg\x00'}}, {@clone_children}, {@noprefix}, {@release_agent={'release_agent', 0x3d, './file0'}}, {@none}, {@none}, {@name={'name', 0x3d, ',[{,:p{:\x02\\$[$['}}], [{@fowner_lt={'fowner<', 0xee01}}, {@audit}, {@fsname}]}) (async)
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
write$ppp(r0, 0x0, 0xeffdffff) (async, rerun: 32)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000180)=[@timestamp, @sack_perm, @mss, @sack_perm, @sack_perm, @window={0x3, 0xc80d, 0x9}, @timestamp, @mss={0x2, 0x5}, @sack_perm], 0x9) (rerun: 32)

22:46:54 executing program 4:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
write$ppp(r0, 0x0, 0x0) (async)
sendmsg$AUDIT_MAKE_EQUIV(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x28, 0x3f7, 0x100, 0x70bd29, 0x25dfdbfb, {0x7, 0x7, './file0', './file0'}, ["", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x810)

22:46:54 executing program 2:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
sendmsg$AUDIT_DEL_RULE(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4080024}, 0xc, &(0x7f0000000040)={&(0x7f0000000300)={0x448, 0x3f4, 0x400, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x2d, [0x3, 0xeff, 0xff, 0x9, 0x8, 0x3b8e987d, 0xffff861b, 0x0, 0xbd, 0x5, 0xed68, 0x80, 0x6, 0x10000, 0x8001, 0x3, 0x80, 0xad35, 0x3, 0x59b, 0x3f, 0x9, 0x80, 0x101, 0x81, 0x7, 0x6, 0x8, 0x4f3, 0xffff, 0x1, 0x5, 0x112, 0x9, 0x0, 0x5, 0x5, 0x4, 0x9, 0xaa4, 0x101, 0x2adbb3fa, 0x7, 0xebb0, 0x0, 0x0, 0x8, 0x3, 0x80, 0x69e1, 0x7, 0x3f, 0x81, 0x7fffffff, 0x6, 0x5, 0x3, 0x2, 0x8, 0x4e7a, 0xfffffffb, 0x4, 0x7, 0x42], [0x3f, 0x8, 0x2, 0x100, 0xed, 0x7f, 0x7, 0x0, 0x1, 0x8001, 0x0, 0x8000, 0x9, 0x7f, 0x7, 0x1000, 0x3, 0x1ff, 0x61, 0x0, 0x7f, 0x1, 0x8, 0x30, 0x9, 0x7, 0x9, 0x9, 0x2, 0x1f, 0x80000001, 0x4, 0x3, 0x4, 0x8, 0x0, 0x3, 0x2, 0xffff, 0x40, 0x4, 0xe9, 0x8, 0x4, 0x7, 0x80000001, 0xeb6, 0x5, 0x7ff, 0x3, 0xfffffff8, 0x9, 0x2, 0x6, 0x80000000, 0x2, 0x5b5, 0x7, 0x234, 0x9, 0x5, 0x4, 0x7, 0x8], [0x2, 0x8, 0x5, 0x2, 0x401, 0x100, 0x29, 0x0, 0x200, 0x4, 0x1, 0x4875, 0x20, 0xb0, 0x1, 0x7fff, 0x7, 0x200, 0x1000, 0x1, 0x3f38, 0x9, 0x6, 0x4, 0x81a, 0x4, 0x7, 0x1, 0x10000, 0xd8d, 0x1, 0x6, 0x4, 0xffffffff, 0x5, 0x7fffffff, 0x3, 0x7, 0xfff, 0xff, 0x1000, 0x6, 0x80000000, 0xe1, 0xd4bd, 0x5, 0x7fff, 0x2, 0x4, 0xffffffff, 0x4, 0x2, 0x10000000, 0x1, 0x4, 0xffffff01, 0x400, 0x8, 0x5, 0x8, 0x7, 0x3, 0x6bb, 0x2], [0x7, 0xff, 0x9, 0x9, 0x3, 0x5, 0x7, 0x2, 0x7, 0x2, 0x3, 0x6, 0xfffffffe, 0xab, 0xa2, 0x2e5, 0x5694fa2f, 0x5, 0x5, 0x5, 0x10000, 0x20, 0x401, 0x3165, 0x9, 0xffff, 0x0, 0x1, 0x9, 0xa0000000, 0x5db2, 0x0, 0x800, 0x0, 0x5, 0x42e7, 0x10001, 0x8, 0xb9f3, 0x7, 0x9, 0x5, 0x27be, 0xa6e, 0x3, 0x6, 0x5, 0xa000000, 0x1, 0x80000000, 0x10001, 0xb94, 0x10000, 0x1ff, 0x1, 0x65, 0x0, 0x80000000, 0x3, 0x1000, 0xfff, 0x4, 0x81, 0x80000000], 0x28, ['/dev/bsg\x00', '+{\x00', '/dev/bsg\x00', '{\x00', '\x00', '{,-!\x00', '\x00', '/dev/bsg\x00', '\x00']}, ["", ""]}, 0x448}, 0x1, 0x0, 0x0, 0x4000000}, 0x804) (async)
write$ppp(r0, &(0x7f00000002c0)="d3", 0x1)

22:46:54 executing program 1:
mount$cgroup(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x88010, &(0x7f00000000c0)={[{@clone_children}, {@noprefix}, {@name={'name', 0x3d, '/dev/bsg\x00'}}, {@clone_children}, {@noprefix}, {@release_agent={'release_agent', 0x3d, './file0'}}, {@none}, {@none}, {@name={'name', 0x3d, ',[{,:p{:\x02\\$[$['}}], [{@fowner_lt={'fowner<', 0xee01}}, {@audit}, {@fsname}]})
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
write$ppp(r0, 0x0, 0xeffdffff)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000180)=[@timestamp, @sack_perm, @mss, @sack_perm, @sack_perm, @window={0x3, 0xc80d, 0x9}, @timestamp, @mss={0x2, 0x5}, @sack_perm], 0x9) (async)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000180)=[@timestamp, @sack_perm, @mss, @sack_perm, @sack_perm, @window={0x3, 0xc80d, 0x9}, @timestamp, @mss={0x2, 0x5}, @sack_perm], 0x9)

22:46:54 executing program 5:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
write$ppp(r0, &(0x7f00000002c0)="d3", 0x1f4f33) (fail_nth: 96)

22:46:54 executing program 4:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
write$ppp(r0, 0x0, 0x0) (async)
write$ppp(r0, 0x0, 0x0)
sendmsg$AUDIT_MAKE_EQUIV(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x28, 0x3f7, 0x100, 0x70bd29, 0x25dfdbfb, {0x7, 0x7, './file0', './file0'}, ["", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x810)

[ 2820.159569][ T6990] RSP: 002b:00007f90e3dd70c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 2820.168058][ T6990] RAX: ffffffffffffffda RBX: 00007f90e4b73f80 RCX: 00007f90e4a54ae9
[ 2820.176063][ T6990] RDX: 00000000001f4f33 RSI: 00000000200002c0 RDI: 0000000000000003
[ 2820.184095][ T6990] RBP: 00007f90e3dd7120 R08: 0000000000000000 R09: 0000000000000000
[ 2820.192076][ T6990] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 2820.200135][ T6990] R13: 000000000000000b R14: 00007f90e4b73f80 R15: 00007ffdb3bfd028
[ 2820.208160][ T6990]  </TASK>
22:46:54 executing program 0:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(r0, 0x10f, 0x86)
sendmsg$AUDIT_ADD_RULE(r0, &(0x7f0000000500)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000040)={&(0x7f00000000c0)={0x420, 0x3f3, 0x400, 0x70bd29, 0x25dfdbfd, {0x2, 0x2, 0x39, [0x9, 0x5, 0x0, 0x301e, 0x101, 0xd6e1, 0x20, 0xffff5627, 0x1, 0x7, 0x3, 0x4, 0xffffffff, 0x2, 0x400, 0x2, 0x2, 0x80, 0x8001, 0x7, 0x0, 0x20, 0xff, 0x9, 0x4, 0xa0, 0x3b88, 0x80, 0xffffa138, 0x9, 0x4, 0x40, 0x2, 0x0, 0xff, 0x3ff, 0xbcd, 0x6e, 0x6, 0x6, 0x3, 0x401, 0x7, 0x4ca, 0x400, 0x2, 0x1, 0x128, 0x1ff, 0x4, 0x2, 0x2, 0x1, 0x101, 0x4, 0x3ff, 0x1f, 0x7a, 0x0, 0x5, 0x1fa, 0x7, 0xfffffff9, 0x2], [0x4, 0x7, 0x7, 0x7, 0x3d2a42b0, 0x3, 0xffff624f, 0xb6f, 0x0, 0x80000001, 0x4000000, 0xb44, 0x3, 0xaa, 0x0, 0x4, 0x1a3, 0x20, 0x8ec, 0x7, 0x8d, 0x80, 0x4, 0xa3, 0x40, 0x101, 0x3, 0x9, 0x61, 0x6, 0x7, 0xfff, 0x9, 0x80000001, 0x8001, 0x9, 0x1, 0x1, 0xc75f, 0x401, 0x5, 0x1, 0x6, 0x3f80000, 0x674, 0x80000001, 0x7ff, 0x6, 0x80000000, 0x5, 0x1f7c, 0x2, 0x1, 0x0, 0x7, 0x5, 0x6, 0x80000001, 0x2, 0x2, 0x3, 0x200, 0x4, 0x1], [0x7, 0x3f800, 0x9, 0xfffffff8, 0x1ff, 0x0, 0x1f, 0x75a8, 0x7ff, 0x8, 0x1, 0x9eb3, 0x9, 0x6, 0x3, 0x5, 0x0, 0x7, 0x2, 0x9, 0x4, 0x9, 0x8, 0xff, 0xfffffeff, 0x8, 0xb29, 0x1c0000, 0x9e, 0x3, 0x0, 0x8, 0x9, 0x8, 0x100400, 0x16e, 0x6, 0x8, 0x4000, 0x1, 0x140, 0x8, 0xff, 0xe84, 0x5, 0xffffffff, 0x83f1, 0x9, 0x3a, 0x6, 0x80, 0x1, 0x80000001, 0x1, 0x4, 0x3ff, 0x5, 0x6, 0x0, 0x4, 0x0, 0x101, 0x4, 0x80000000], [0x20, 0x7, 0x9, 0xfffffffe, 0x7, 0x1, 0x7, 0x7, 0xfffffff7, 0x8, 0x3, 0x7, 0x5, 0x3, 0x30, 0x6, 0xf55, 0x4, 0x6, 0x200f6e24, 0xb8a, 0x2, 0x31, 0x3, 0xfff, 0x3, 0x3, 0x46ad, 0x0, 0x1, 0x2000, 0x4, 0x7, 0x84, 0x9, 0xf, 0x1, 0x6, 0x2, 0x5a36, 0xffff, 0xffffffe0, 0x207c4d0a, 0x7, 0x80, 0x6, 0x4, 0x7, 0x9, 0x7, 0x171, 0x8, 0x6, 0x9, 0x2, 0xb1f, 0x3, 0x40, 0x7, 0x0, 0x1, 0x2, 0xa, 0x5]}, ["", "", "", ""]}, 0x420}, 0x1, 0x0, 0x0, 0x4}, 0x4)
quotactl_fd$Q_QUOTAON(r0, 0xffffffff80000201, 0xee00, &(0x7f0000000580)='./file0\x00')
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
write$ppp(r1, 0x0, 0xeffdffffffffffff)
ioctl$PPPIOCATTCHAN(r1, 0x40047438, &(0x7f0000000540)=0x2)

22:46:54 executing program 2:
r0 = syz_io_uring_setup(0x70db, &(0x7f0000000180)={0x0, 0x84e6, 0x1, 0x3, 0x47}, &(0x7f0000000200), &(0x7f0000000300))
r1 = io_uring_setup(0x41b2, &(0x7f0000000000)={0x0, 0xd949, 0x1, 0x2, 0x2c4, 0x0, r0})
r2 = io_uring_setup(0x62a8, &(0x7f0000000100)={0x0, 0xfc5, 0x200, 0x3, 0x24d, 0x0, r1})
mmap$IORING_OFF_SQES(&(0x7f0000ff8000/0x8000)=nil, 0x8000, 0x1000008, 0x4000010, r2, 0x10000000)
sigaltstack(&(0x7f00000000c0)={&(0x7f0000000240)=""/158, 0x0, 0x9e}, 0x0)
r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
write$ppp(r3, &(0x7f00000002c0)="d3", 0x1)

22:46:54 executing program 4:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
write$ppp(r0, 0x0, 0x0)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x604a00, 0x0)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(r1, 0x10f, 0x86)
r2 = openat$bsg(0xffffffffffffff9c, &(0x7f00000000c0), 0x60100, 0x0)
ioctl$PPPIOCBRIDGECHAN(r2, 0x40047435, &(0x7f0000000100))

[ 2820.276146][ T7027] FAULT_INJECTION: forcing a failure.
[ 2820.276146][ T7027] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[ 2820.289490][ T7027] CPU: 0 PID: 7027 Comm: syz-executor.5 Not tainted 6.6.0-rc3-syzkaller-00165-g3b517966c561 #0
[ 2820.299843][ T7027] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/06/2023
[ 2820.309977][ T7027] Call Trace:
[ 2820.313310][ T7027]  <TASK>
[ 2820.316246][ T7027]  dump_stack_lvl+0xda/0x130
[ 2820.320963][ T7027]  dump_stack+0x15/0x20
[ 2820.325186][ T7027]  should_fail_ex+0x21f/0x230
[ 2820.329886][ T7027]  __should_fail_alloc_page+0xfd/0x110
[ 2820.335712][ T7027]  __alloc_pages+0x108/0x340
[ 2820.340399][ T7027]  vma_alloc_folio+0x6a3/0x8c0
[ 2820.345206][ T7027]  ? shmem_inode_acct_block+0x1ee/0x220
[ 2820.350892][ T7027]  shmem_get_folio_gfp+0x579/0xc30
[ 2820.356110][ T7027]  shmem_write_begin+0xa6/0x210
[ 2820.360993][ T7027]  generic_perform_write+0x1c9/0x410
[ 2820.366314][ T7027]  ? shmem_write_begin+0x210/0x210
[ 2820.371491][ T7027]  shmem_file_write_iter+0xc8/0xe0
22:46:54 executing program 3:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
write$ppp(r0, &(0x7f00000002c0)="d3", 0xfffffdef) (async)
r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x200, 0x42)
ioctl$USBDEVFS_ALLOW_SUSPEND(r1, 0x8004551a) (async)
syz_open_dev$usbfs(&(0x7f0000000100), 0x5, 0x38c43) (async)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f00000000c0)=0x2, 0x4)
r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0)
ioctl$PPPIOCGIDLE64(r2, 0x8010743f, &(0x7f0000000040))

22:46:54 executing program 4:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
write$ppp(r0, 0x0, 0x0)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x604a00, 0x0)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(r1, 0x10f, 0x86)
r2 = openat$bsg(0xffffffffffffff9c, &(0x7f00000000c0), 0x60100, 0x0)
ioctl$PPPIOCBRIDGECHAN(r2, 0x40047435, &(0x7f0000000100))
openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0) (async)
write$ppp(r0, 0x0, 0x0) (async)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x604a00, 0x0) (async)
openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0) (async)
setsockopt$TIPC_MCAST_REPLICAST(r1, 0x10f, 0x86) (async)
openat$bsg(0xffffffffffffff9c, &(0x7f00000000c0), 0x60100, 0x0) (async)
ioctl$PPPIOCBRIDGECHAN(r2, 0x40047435, &(0x7f0000000100)) (async)

22:46:54 executing program 0:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(r0, 0x10f, 0x86) (async)
sendmsg$AUDIT_ADD_RULE(r0, &(0x7f0000000500)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000040)={&(0x7f00000000c0)={0x420, 0x3f3, 0x400, 0x70bd29, 0x25dfdbfd, {0x2, 0x2, 0x39, [0x9, 0x5, 0x0, 0x301e, 0x101, 0xd6e1, 0x20, 0xffff5627, 0x1, 0x7, 0x3, 0x4, 0xffffffff, 0x2, 0x400, 0x2, 0x2, 0x80, 0x8001, 0x7, 0x0, 0x20, 0xff, 0x9, 0x4, 0xa0, 0x3b88, 0x80, 0xffffa138, 0x9, 0x4, 0x40, 0x2, 0x0, 0xff, 0x3ff, 0xbcd, 0x6e, 0x6, 0x6, 0x3, 0x401, 0x7, 0x4ca, 0x400, 0x2, 0x1, 0x128, 0x1ff, 0x4, 0x2, 0x2, 0x1, 0x101, 0x4, 0x3ff, 0x1f, 0x7a, 0x0, 0x5, 0x1fa, 0x7, 0xfffffff9, 0x2], [0x4, 0x7, 0x7, 0x7, 0x3d2a42b0, 0x3, 0xffff624f, 0xb6f, 0x0, 0x80000001, 0x4000000, 0xb44, 0x3, 0xaa, 0x0, 0x4, 0x1a3, 0x20, 0x8ec, 0x7, 0x8d, 0x80, 0x4, 0xa3, 0x40, 0x101, 0x3, 0x9, 0x61, 0x6, 0x7, 0xfff, 0x9, 0x80000001, 0x8001, 0x9, 0x1, 0x1, 0xc75f, 0x401, 0x5, 0x1, 0x6, 0x3f80000, 0x674, 0x80000001, 0x7ff, 0x6, 0x80000000, 0x5, 0x1f7c, 0x2, 0x1, 0x0, 0x7, 0x5, 0x6, 0x80000001, 0x2, 0x2, 0x3, 0x200, 0x4, 0x1], [0x7, 0x3f800, 0x9, 0xfffffff8, 0x1ff, 0x0, 0x1f, 0x75a8, 0x7ff, 0x8, 0x1, 0x9eb3, 0x9, 0x6, 0x3, 0x5, 0x0, 0x7, 0x2, 0x9, 0x4, 0x9, 0x8, 0xff, 0xfffffeff, 0x8, 0xb29, 0x1c0000, 0x9e, 0x3, 0x0, 0x8, 0x9, 0x8, 0x100400, 0x16e, 0x6, 0x8, 0x4000, 0x1, 0x140, 0x8, 0xff, 0xe84, 0x5, 0xffffffff, 0x83f1, 0x9, 0x3a, 0x6, 0x80, 0x1, 0x80000001, 0x1, 0x4, 0x3ff, 0x5, 0x6, 0x0, 0x4, 0x0, 0x101, 0x4, 0x80000000], [0x20, 0x7, 0x9, 0xfffffffe, 0x7, 0x1, 0x7, 0x7, 0xfffffff7, 0x8, 0x3, 0x7, 0x5, 0x3, 0x30, 0x6, 0xf55, 0x4, 0x6, 0x200f6e24, 0xb8a, 0x2, 0x31, 0x3, 0xfff, 0x3, 0x3, 0x46ad, 0x0, 0x1, 0x2000, 0x4, 0x7, 0x84, 0x9, 0xf, 0x1, 0x6, 0x2, 0x5a36, 0xffff, 0xffffffe0, 0x207c4d0a, 0x7, 0x80, 0x6, 0x4, 0x7, 0x9, 0x7, 0x171, 0x8, 0x6, 0x9, 0x2, 0xb1f, 0x3, 0x40, 0x7, 0x0, 0x1, 0x2, 0xa, 0x5]}, ["", "", "", ""]}, 0x420}, 0x1, 0x0, 0x0, 0x4}, 0x4) (async, rerun: 32)
quotactl_fd$Q_QUOTAON(r0, 0xffffffff80000201, 0xee00, &(0x7f0000000580)='./file0\x00') (async, rerun: 32)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
write$ppp(r1, 0x0, 0xeffdffffffffffff)
ioctl$PPPIOCATTCHAN(r1, 0x40047438, &(0x7f0000000540)=0x2)

22:46:54 executing program 1:
openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x34c451821c847b13, 0x0)

[ 2820.376761][ T7027]  vfs_write+0x4ab/0x7d0
[ 2820.381027][ T7027]  ksys_write+0xeb/0x1a0
[ 2820.385298][ T7027]  __x64_sys_write+0x42/0x50
[ 2820.389896][ T7027]  do_syscall_64+0x41/0xc0
[ 2820.394412][ T7027]  entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 2820.400335][ T7027] RIP: 0033:0x7f90e4a54ae9
[ 2820.404795][ T7027] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48
22:46:54 executing program 2:
r0 = syz_io_uring_setup(0x70db, &(0x7f0000000180)={0x0, 0x84e6, 0x1, 0x3, 0x47}, &(0x7f0000000200), &(0x7f0000000300))
r1 = io_uring_setup(0x41b2, &(0x7f0000000000)={0x0, 0xd949, 0x1, 0x2, 0x2c4, 0x0, r0})
r2 = io_uring_setup(0x62a8, &(0x7f0000000100)={0x0, 0xfc5, 0x200, 0x3, 0x24d, 0x0, r1})
mmap$IORING_OFF_SQES(&(0x7f0000ff8000/0x8000)=nil, 0x8000, 0x1000008, 0x4000010, r2, 0x10000000)
sigaltstack(&(0x7f00000000c0)={&(0x7f0000000240)=""/158, 0x0, 0x9e}, 0x0)
r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
write$ppp(r3, &(0x7f00000002c0)="d3", 0x1)
syz_io_uring_setup(0x70db, &(0x7f0000000180)={0x0, 0x84e6, 0x1, 0x3, 0x47}, &(0x7f0000000200), &(0x7f0000000300)) (async)
io_uring_setup(0x41b2, &(0x7f0000000000)={0x0, 0xd949, 0x1, 0x2, 0x2c4, 0x0, r0}) (async)
io_uring_setup(0x62a8, &(0x7f0000000100)={0x0, 0xfc5, 0x200, 0x3, 0x24d, 0x0, r1}) (async)
mmap$IORING_OFF_SQES(&(0x7f0000ff8000/0x8000)=nil, 0x8000, 0x1000008, 0x4000010, r2, 0x10000000) (async)
sigaltstack(&(0x7f00000000c0)={&(0x7f0000000240)=""/158, 0x0, 0x9e}, 0x0) (async)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0) (async)
write$ppp(r3, &(0x7f00000002c0)="d3", 0x1) (async)

22:46:54 executing program 2:
r0 = syz_io_uring_setup(0x70db, &(0x7f0000000180)={0x0, 0x84e6, 0x1, 0x3, 0x47}, &(0x7f0000000200), &(0x7f0000000300))
r1 = io_uring_setup(0x41b2, &(0x7f0000000000)={0x0, 0xd949, 0x1, 0x2, 0x2c4, 0x0, r0})
r2 = io_uring_setup(0x62a8, &(0x7f0000000100)={0x0, 0xfc5, 0x200, 0x3, 0x24d, 0x0, r1})
mmap$IORING_OFF_SQES(&(0x7f0000ff8000/0x8000)=nil, 0x8000, 0x1000008, 0x4000010, r2, 0x10000000)
sigaltstack(&(0x7f00000000c0)={&(0x7f0000000240)=""/158, 0x0, 0x9e}, 0x0) (async)
r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
write$ppp(r3, &(0x7f00000002c0)="d3", 0x1)

22:46:54 executing program 1:
openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x34c451821c847b13, 0x0)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x34c451821c847b13, 0x0) (async)

22:46:54 executing program 5:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
write$ppp(r0, &(0x7f00000002c0)="d3", 0x1f4f33) (fail_nth: 97)

[ 2820.424452][ T7027] RSP: 002b:00007f90e3dd70c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 2820.432928][ T7027] RAX: ffffffffffffffda RBX: 00007f90e4b73f80 RCX: 00007f90e4a54ae9
[ 2820.441004][ T7027] RDX: 00000000001f4f33 RSI: 00000000200002c0 RDI: 0000000000000003
[ 2820.449044][ T7027] RBP: 00007f90e3dd7120 R08: 0000000000000000 R09: 0000000000000000
[ 2820.457112][ T7027] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 2820.465123][ T7027] R13: 000000000000000b R14: 00007f90e4b73f80 R15: 00007ffdb3bfd028
[ 2820.473141][ T7027]  </TASK>
22:46:54 executing program 0:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(r0, 0x10f, 0x86)
sendmsg$AUDIT_ADD_RULE(r0, &(0x7f0000000500)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000040)={&(0x7f00000000c0)={0x420, 0x3f3, 0x400, 0x70bd29, 0x25dfdbfd, {0x2, 0x2, 0x39, [0x9, 0x5, 0x0, 0x301e, 0x101, 0xd6e1, 0x20, 0xffff5627, 0x1, 0x7, 0x3, 0x4, 0xffffffff, 0x2, 0x400, 0x2, 0x2, 0x80, 0x8001, 0x7, 0x0, 0x20, 0xff, 0x9, 0x4, 0xa0, 0x3b88, 0x80, 0xffffa138, 0x9, 0x4, 0x40, 0x2, 0x0, 0xff, 0x3ff, 0xbcd, 0x6e, 0x6, 0x6, 0x3, 0x401, 0x7, 0x4ca, 0x400, 0x2, 0x1, 0x128, 0x1ff, 0x4, 0x2, 0x2, 0x1, 0x101, 0x4, 0x3ff, 0x1f, 0x7a, 0x0, 0x5, 0x1fa, 0x7, 0xfffffff9, 0x2], [0x4, 0x7, 0x7, 0x7, 0x3d2a42b0, 0x3, 0xffff624f, 0xb6f, 0x0, 0x80000001, 0x4000000, 0xb44, 0x3, 0xaa, 0x0, 0x4, 0x1a3, 0x20, 0x8ec, 0x7, 0x8d, 0x80, 0x4, 0xa3, 0x40, 0x101, 0x3, 0x9, 0x61, 0x6, 0x7, 0xfff, 0x9, 0x80000001, 0x8001, 0x9, 0x1, 0x1, 0xc75f, 0x401, 0x5, 0x1, 0x6, 0x3f80000, 0x674, 0x80000001, 0x7ff, 0x6, 0x80000000, 0x5, 0x1f7c, 0x2, 0x1, 0x0, 0x7, 0x5, 0x6, 0x80000001, 0x2, 0x2, 0x3, 0x200, 0x4, 0x1], [0x7, 0x3f800, 0x9, 0xfffffff8, 0x1ff, 0x0, 0x1f, 0x75a8, 0x7ff, 0x8, 0x1, 0x9eb3, 0x9, 0x6, 0x3, 0x5, 0x0, 0x7, 0x2, 0x9, 0x4, 0x9, 0x8, 0xff, 0xfffffeff, 0x8, 0xb29, 0x1c0000, 0x9e, 0x3, 0x0, 0x8, 0x9, 0x8, 0x100400, 0x16e, 0x6, 0x8, 0x4000, 0x1, 0x140, 0x8, 0xff, 0xe84, 0x5, 0xffffffff, 0x83f1, 0x9, 0x3a, 0x6, 0x80, 0x1, 0x80000001, 0x1, 0x4, 0x3ff, 0x5, 0x6, 0x0, 0x4, 0x0, 0x101, 0x4, 0x80000000], [0x20, 0x7, 0x9, 0xfffffffe, 0x7, 0x1, 0x7, 0x7, 0xfffffff7, 0x8, 0x3, 0x7, 0x5, 0x3, 0x30, 0x6, 0xf55, 0x4, 0x6, 0x200f6e24, 0xb8a, 0x2, 0x31, 0x3, 0xfff, 0x3, 0x3, 0x46ad, 0x0, 0x1, 0x2000, 0x4, 0x7, 0x84, 0x9, 0xf, 0x1, 0x6, 0x2, 0x5a36, 0xffff, 0xffffffe0, 0x207c4d0a, 0x7, 0x80, 0x6, 0x4, 0x7, 0x9, 0x7, 0x171, 0x8, 0x6, 0x9, 0x2, 0xb1f, 0x3, 0x40, 0x7, 0x0, 0x1, 0x2, 0xa, 0x5]}, ["", "", "", ""]}, 0x420}, 0x1, 0x0, 0x0, 0x4}, 0x4)
quotactl_fd$Q_QUOTAON(r0, 0xffffffff80000201, 0xee00, &(0x7f0000000580)='./file0\x00') (async)
quotactl_fd$Q_QUOTAON(r0, 0xffffffff80000201, 0xee00, &(0x7f0000000580)='./file0\x00')
openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0) (async)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
write$ppp(r1, 0x0, 0xeffdffffffffffff)
ioctl$PPPIOCATTCHAN(r1, 0x40047438, &(0x7f0000000540)=0x2)

22:46:54 executing program 3:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
write$ppp(r0, &(0x7f00000002c0)="d3", 0xfffffdef)
ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000000))

22:46:54 executing program 4:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
write$ppp(r0, 0x0, 0x0) (async)
write$ppp(r0, 0x0, 0x0)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x604a00, 0x0) (async)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x604a00, 0x0)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(r1, 0x10f, 0x86)
r2 = openat$bsg(0xffffffffffffff9c, &(0x7f00000000c0), 0x60100, 0x0)
ioctl$PPPIOCBRIDGECHAN(r2, 0x40047435, &(0x7f0000000100))

[ 2820.528885][ T7067] FAULT_INJECTION: forcing a failure.
[ 2820.528885][ T7067] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 2820.541993][ T7067] CPU: 1 PID: 7067 Comm: syz-executor.5 Not tainted 6.6.0-rc3-syzkaller-00165-g3b517966c561 #0
[ 2820.552485][ T7067] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/06/2023
[ 2820.562555][ T7067] Call Trace:
[ 2820.565859][ T7067]  <TASK>
[ 2820.568806][ T7067]  dump_stack_lvl+0xda/0x130
[ 2820.573420][ T7067]  dump_stack+0x15/0x20
[ 2820.577590][ T7067]  should_fail_ex+0x21f/0x230
[ 2820.582307][ T7067]  should_fail+0xb/0x10
[ 2820.586552][ T7067]  should_fail_usercopy+0x1a/0x20
[ 2820.591666][ T7067]  copy_page_from_iter_atomic+0x21c/0xcf0
[ 2820.597410][ T7067]  ? shmem_write_begin+0xa6/0x210
[ 2820.602471][ T7067]  ? shmem_write_begin+0x16d/0x210
[ 2820.607627][ T7067]  generic_perform_write+0x20c/0x410
[ 2820.612934][ T7067]  ? shmem_write_begin+0x210/0x210
[ 2820.618156][ T7067]  shmem_file_write_iter+0xc8/0xe0
[ 2820.623302][ T7067]  vfs_write+0x4ab/0x7d0
22:46:54 executing program 4:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
write$ppp(r0, 0x0, 0x0)
write$ppp(r0, &(0x7f00000000c0)="8c0d52f9e86aea0fc11b9976c14e5948671579a832df213d3b59f38cc857613062fee7670ccb0ab2ef47652142c2599c1ba411d17f478998931514214cd27804469244545716c494b7f12469793b3dbb6f73ae4ba9def6aaa46fb98e578f425d9c4bdb190745e6571a1a820961309a0bc0e6c819186d17f02242902942d0955e8e4611f70aaa5a5b7e98", 0x8a)

22:46:54 executing program 2:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5d6805, 0x0)
write$ppp(r0, &(0x7f00000002c0)="d3", 0x1)

22:46:54 executing program 2:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5d6805, 0x0)
write$ppp(r0, &(0x7f00000002c0)="d3", 0x1)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5d6805, 0x0) (async)
write$ppp(r0, &(0x7f00000002c0)="d3", 0x1) (async)

22:46:54 executing program 0:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000000))

22:46:54 executing program 1:
openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x34c451821c847b13, 0x0)

[ 2820.627641][ T7067]  ksys_write+0xeb/0x1a0
[ 2820.631993][ T7067]  __x64_sys_write+0x42/0x50
[ 2820.636611][ T7067]  do_syscall_64+0x41/0xc0
[ 2820.641038][ T7067]  entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 2820.647105][ T7067] RIP: 0033:0x7f90e4a54ae9
[ 2820.651594][ T7067] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48
[ 2820.671214][ T7067] RSP: 002b:00007f90e3dd70c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
22:46:54 executing program 4:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
write$ppp(r0, 0x0, 0x0) (async)
write$ppp(r0, &(0x7f00000000c0)="8c0d52f9e86aea0fc11b9976c14e5948671579a832df213d3b59f38cc857613062fee7670ccb0ab2ef47652142c2599c1ba411d17f478998931514214cd27804469244545716c494b7f12469793b3dbb6f73ae4ba9def6aaa46fb98e578f425d9c4bdb190745e6571a1a820961309a0bc0e6c819186d17f02242902942d0955e8e4611f70aaa5a5b7e98", 0x8a)

22:46:54 executing program 1:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0)
r1 = syz_genetlink_get_family_id$SEG6(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$SEG6_CMD_SETHMAC(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x20, r1, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [@SEG6_ATTR_SECRETLEN={0x5}, @SEG6_ATTR_SECRET={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x44005)
r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
write$ppp(r2, 0x0, 0xeffdffff)

22:46:54 executing program 0:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000000))

[ 2820.679644][ T7067] RAX: ffffffffffffffda RBX: 00007f90e4b73f80 RCX: 00007f90e4a54ae9
[ 2820.687635][ T7067] RDX: 00000000001f4f33 RSI: 00000000200002c0 RDI: 0000000000000003
[ 2820.695614][ T7067] RBP: 00007f90e3dd7120 R08: 0000000000000000 R09: 0000000000000000
[ 2820.703669][ T7067] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 2820.711690][ T7067] R13: 000000000000000b R14: 00007f90e4b73f80 R15: 00007ffdb3bfd028
[ 2820.719678][ T7067]  </TASK>
22:46:54 executing program 5:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
write$ppp(r0, &(0x7f00000002c0)="d3", 0x1f4f33) (fail_nth: 98)

22:46:54 executing program 2:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5d6805, 0x0)
write$ppp(r0, &(0x7f00000002c0)="d3", 0x1)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5d6805, 0x0) (async)
write$ppp(r0, &(0x7f00000002c0)="d3", 0x1) (async)

22:46:54 executing program 3:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
write$ppp(r0, &(0x7f00000002c0)="d3", 0xfffffdef) (async, rerun: 64)
ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000000)) (rerun: 64)

22:46:54 executing program 0:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000000))

22:46:54 executing program 1:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0)
r1 = syz_genetlink_get_family_id$SEG6(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$SEG6_CMD_SETHMAC(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x20, r1, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [@SEG6_ATTR_SECRETLEN={0x5}, @SEG6_ATTR_SECRET={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x44005) (async)
r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
write$ppp(r2, 0x0, 0xeffdffff)

22:46:54 executing program 4:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
write$ppp(r0, 0x0, 0x0)
write$ppp(r0, &(0x7f00000000c0)="8c0d52f9e86aea0fc11b9976c14e5948671579a832df213d3b59f38cc857613062fee7670ccb0ab2ef47652142c2599c1ba411d17f478998931514214cd27804469244545716c494b7f12469793b3dbb6f73ae4ba9def6aaa46fb98e578f425d9c4bdb190745e6571a1a820961309a0bc0e6c819186d17f02242902942d0955e8e4611f70aaa5a5b7e98", 0x8a)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0) (async)
write$ppp(r0, 0x0, 0x0) (async)
write$ppp(r0, &(0x7f00000000c0)="8c0d52f9e86aea0fc11b9976c14e5948671579a832df213d3b59f38cc857613062fee7670ccb0ab2ef47652142c2599c1ba411d17f478998931514214cd27804469244545716c494b7f12469793b3dbb6f73ae4ba9def6aaa46fb98e578f425d9c4bdb190745e6571a1a820961309a0bc0e6c819186d17f02242902942d0955e8e4611f70aaa5a5b7e98", 0x8a) (async)

22:46:54 executing program 2:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x60002, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(r1, 0x10f, 0x86)
ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000000))
sendmsg$AUDIT_USER_TTY(r0, &(0x7f0000000580)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000540)={&(0x7f0000000440)={0xec, 0x464, 0x10, 0x70bd26, 0x25dfdbfc, "a54887dbb99da53726728227ff02808eb6b89a972de666147c4a78115c4beaabb6913f07f9edad08ec07eb866462f753887bbacd729b2606017d6ef23786e6774e91e6bd5b2a82c47d8126f52d156dd8946110313c4a24d9cf488907c62ac7153550646dfb149b87b8399151d46e86f8092f754c9ac99ba2528c55d6febe8b0f4fd1de39e31d945c59d1bf6cc7cf22d960af3ed84f8bf511ecf4b415e2d1d26074179efb3300dfe96085388df78befed0a7dcbf60374f43e985065cd22ed2f623b883792acbd8cad205df953625ea71a5bd139a75fee5074d8", ["", "", ""]}, 0xec}, 0x1, 0x0, 0x0, 0x40040}, 0x40)
write$ppp(r0, &(0x7f00000002c0)="d3", 0x1)
sendmsg(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000040)="e0c9fd20d96fa7a30f9cefdb2b5eec01da41586ca863271dcac7fef1b7c8ad85ac0a7b1652aff1081091cce71786af", 0x2f}, {&(0x7f00000000c0)="4a5053c7a48ee4133c1001fa895ca3a2c3ff5f27", 0x14}, {&(0x7f0000000100)="332ebfe1c27dedb2985dd908f5d9ebb5a891793539ef1cb0822eb87da61b8716a81399c3bf5ab72bd50b29ef12d9974472c8c98a030eedcc62240b0e2d9bde5b87b95f1a35d8ca27a00b8fc6197ccbb70c11e76d1fd4637201464964828d121fb592da3b0b684aa00745d800afc62c75ff38c3f29ad13ef80677188c3de0e569fbd2a645f95fa02290104311605d732d129a0b9b232eb011b3aceda3a3afd3d1fdd3df272e2fa90926e4b48179f9f6a8cc919fcec7933e8e26448be3d6e8c3ca142212793ee5f72475f139803de9c9c2a4228427e1ee8e8be010db9e36fd", 0xde}, {&(0x7f0000000200)="6c4a6741f756a86593a8509903d98c9ab17ae43a0941e2e76206be20ccae807acd375b1d0867b77a05e258a173382bb84457efc52afe06949ad92c941859cb98d6673b", 0x43}, {&(0x7f0000000600)="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", 0x1000}, {&(0x7f0000000300)="e43113611cab964e3fcb4242e47845d8b5def9e499ced14d150da35d7b3b303617121ef110be70f6b69f1eb4c56b4a539c7c05dc1acab9a11904e350a9d5eabdf7e85e4f8f5f21798b7a236ae09b2f0c12220b945e726b08e2b6143c9819fd38bbf5c0911f7611d0d65070aee133decfa5bb53", 0x73}], 0x6, &(0x7f0000001b80)=ANY=[@ANYBLOB="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"], 0x548}, 0x4040)

22:46:54 executing program 2:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0) (async, rerun: 32)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x60002, 0x0) (rerun: 32)
setsockopt$TIPC_MCAST_REPLICAST(r1, 0x10f, 0x86) (async)
ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000000)) (async)
sendmsg$AUDIT_USER_TTY(r0, &(0x7f0000000580)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000540)={&(0x7f0000000440)={0xec, 0x464, 0x10, 0x70bd26, 0x25dfdbfc, "a54887dbb99da53726728227ff02808eb6b89a972de666147c4a78115c4beaabb6913f07f9edad08ec07eb866462f753887bbacd729b2606017d6ef23786e6774e91e6bd5b2a82c47d8126f52d156dd8946110313c4a24d9cf488907c62ac7153550646dfb149b87b8399151d46e86f8092f754c9ac99ba2528c55d6febe8b0f4fd1de39e31d945c59d1bf6cc7cf22d960af3ed84f8bf511ecf4b415e2d1d26074179efb3300dfe96085388df78befed0a7dcbf60374f43e985065cd22ed2f623b883792acbd8cad205df953625ea71a5bd139a75fee5074d8", ["", "", ""]}, 0xec}, 0x1, 0x0, 0x0, 0x40040}, 0x40) (async)
write$ppp(r0, &(0x7f00000002c0)="d3", 0x1) (async)
sendmsg(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000040)="e0c9fd20d96fa7a30f9cefdb2b5eec01da41586ca863271dcac7fef1b7c8ad85ac0a7b1652aff1081091cce71786af", 0x2f}, {&(0x7f00000000c0)="4a5053c7a48ee4133c1001fa895ca3a2c3ff5f27", 0x14}, {&(0x7f0000000100)="332ebfe1c27dedb2985dd908f5d9ebb5a891793539ef1cb0822eb87da61b8716a81399c3bf5ab72bd50b29ef12d9974472c8c98a030eedcc62240b0e2d9bde5b87b95f1a35d8ca27a00b8fc6197ccbb70c11e76d1fd4637201464964828d121fb592da3b0b684aa00745d800afc62c75ff38c3f29ad13ef80677188c3de0e569fbd2a645f95fa02290104311605d732d129a0b9b232eb011b3aceda3a3afd3d1fdd3df272e2fa90926e4b48179f9f6a8cc919fcec7933e8e26448be3d6e8c3ca142212793ee5f72475f139803de9c9c2a4228427e1ee8e8be010db9e36fd", 0xde}, {&(0x7f0000000200)="6c4a6741f756a86593a8509903d98c9ab17ae43a0941e2e76206be20ccae807acd375b1d0867b77a05e258a173382bb84457efc52afe06949ad92c941859cb98d6673b", 0x43}, {&(0x7f0000000600)="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", 0x1000}, {&(0x7f0000000300)="e43113611cab964e3fcb4242e47845d8b5def9e499ced14d150da35d7b3b303617121ef110be70f6b69f1eb4c56b4a539c7c05dc1acab9a11904e350a9d5eabdf7e85e4f8f5f21798b7a236ae09b2f0c12220b945e726b08e2b6143c9819fd38bbf5c0911f7611d0d65070aee133decfa5bb53", 0x73}], 0x6, &(0x7f0000001b80)=ANY=[@ANYBLOB="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"], 0x548}, 0x4040)

[ 2820.799303][ T7098] FAULT_INJECTION: forcing a failure.
[ 2820.799303][ T7098] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[ 2820.812626][ T7098] CPU: 1 PID: 7098 Comm: syz-executor.5 Not tainted 6.6.0-rc3-syzkaller-00165-g3b517966c561 #0
[ 2820.822962][ T7098] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/06/2023
[ 2820.833058][ T7098] Call Trace:
[ 2820.836360][ T7098]  <TASK>
[ 2820.839348][ T7098]  dump_stack_lvl+0xda/0x130
[ 2820.844003][ T7098]  dump_stack+0x15/0x20
22:46:54 executing program 2:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x60002, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(r1, 0x10f, 0x86)
ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000000))
sendmsg$AUDIT_USER_TTY(r0, &(0x7f0000000580)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000540)={&(0x7f0000000440)={0xec, 0x464, 0x10, 0x70bd26, 0x25dfdbfc, "a54887dbb99da53726728227ff02808eb6b89a972de666147c4a78115c4beaabb6913f07f9edad08ec07eb866462f753887bbacd729b2606017d6ef23786e6774e91e6bd5b2a82c47d8126f52d156dd8946110313c4a24d9cf488907c62ac7153550646dfb149b87b8399151d46e86f8092f754c9ac99ba2528c55d6febe8b0f4fd1de39e31d945c59d1bf6cc7cf22d960af3ed84f8bf511ecf4b415e2d1d26074179efb3300dfe96085388df78befed0a7dcbf60374f43e985065cd22ed2f623b883792acbd8cad205df953625ea71a5bd139a75fee5074d8", ["", "", ""]}, 0xec}, 0x1, 0x0, 0x0, 0x40040}, 0x40)
write$ppp(r0, &(0x7f00000002c0)="d3", 0x1)
sendmsg(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000040)="e0c9fd20d96fa7a30f9cefdb2b5eec01da41586ca863271dcac7fef1b7c8ad85ac0a7b1652aff1081091cce71786af", 0x2f}, {&(0x7f00000000c0)="4a5053c7a48ee4133c1001fa895ca3a2c3ff5f27", 0x14}, {&(0x7f0000000100)="332ebfe1c27dedb2985dd908f5d9ebb5a891793539ef1cb0822eb87da61b8716a81399c3bf5ab72bd50b29ef12d9974472c8c98a030eedcc62240b0e2d9bde5b87b95f1a35d8ca27a00b8fc6197ccbb70c11e76d1fd4637201464964828d121fb592da3b0b684aa00745d800afc62c75ff38c3f29ad13ef80677188c3de0e569fbd2a645f95fa02290104311605d732d129a0b9b232eb011b3aceda3a3afd3d1fdd3df272e2fa90926e4b48179f9f6a8cc919fcec7933e8e26448be3d6e8c3ca142212793ee5f72475f139803de9c9c2a4228427e1ee8e8be010db9e36fd", 0xde}, {&(0x7f0000000200)="6c4a6741f756a86593a8509903d98c9ab17ae43a0941e2e76206be20ccae807acd375b1d0867b77a05e258a173382bb84457efc52afe06949ad92c941859cb98d6673b", 0x43}, {&(0x7f0000000600)="eb898feee38f0831aa6e7bc56ff374d6c09c177dffc79f98828152d43221aa75f6492dc7ea8d6a0c000017a6a3df78bb2c207ef66c5129dd8baf2293c9a3237427f1cfd8e13710d1b704d5895dd04ce2f504065575955c55390838a34a35315f5e2aec1d2c849b7d484828312fa7b4d7a5c5ff9abb14cbe003583bf7608f42d59cd2299ad824bb4b5c384a693b0edfcb462c730b90054ed0b98429dd64253b7fb4dddce7866675938be07c1461b33108727d380e46bce59e5d6166abff76d06a8f7a04ab12bd91a9927df25df401b92ead310fa6a6098ccf6e8be44c44b4098a9122403461b964ec457ecd506dd54de831b59bdf52ff4483d41a936fb6dcc605405f01423d54b2e220c9898e30e858f9ca669fe29dd49718c27756924b1fe09fea0aec6a45a45684abbe9254cfbb7d4d18b9488deff739483f2fc0f96921cd2a5489fa86eb463ddf851d2957cdb8bfd3f656a94c7efdbe277aca9e9949b78878b7012ef5684f2ca0c802d1c2a75923fec28235fb4ac763f70401a842670872db77b155c5b438df82ec143fa91634f2b4d6e21c8d1c6537db01ee138574a35980d38c0573ba5731c4d0f1471b78366433852cf66925674bdf8f5d86c10dc053539982c14a6fa32f12b1f86c01ce2e26e21e3b68a84ec19162a7655c1a8b24aac35591e6901fa000349bff2bb313d8f397b0d6ad240a4a7c2f016890468e53cd715e22ef1b1c3cc90727f69ebb51a56b52e5503a9f783baccd268c13f0cf273e005e5d0ff07ba0ae23b274f13acd5460c2864d11aa8b1152d7fe78f6ed71d72235c81e9ca12f622f64018486b0be941fd4beee63261b039f08785c85642a1a78ab5c85448ddb862e6995f58f0e8cbd8e4814cf7f2ebd07e7af221bd704e351cf1a47f0492088b5d363f71ca84c22dfc49efcf6a7c217de156b320fa8094c39a91aa6a5bafdc42d37eedfd7787055c1854e84d9e17a0817ac6bcc09949251a996c25e724a22edc0e49327b78fb669c298f919981d7c5f3b84326becefcc901103c3b547d541cc090ded9af1cf97296beff1f0c89c76956e71b9b9c4dd8fd94f57a8758dbd348a80dd080f7e7cf1fabf5b40ef963136d701db26698da29e31220ffacdeafb4c5c09e43f4a18ea08f28956eb316e03b5fa086f1caf97c036efd7def2e5c6827363f0fe9855cbc863c3bfc054ea63fdeea074e5047e94f33d8c85996033bf30a07acde6bfd201eab54c83134211fc67e262739ff1e1eb88db2d6d5c79530139c4d3148b926eb46fa6bf619fe7d3907d3818c1fe1392b815116df0091828f67d920854bd9a895b6675c10c0d9f7050f239fb8354b1b97e70c128de393d50b3cf49c935b8746d9ecb3ceb74a75844936d95ea50b7e995d0faf6bfdb9e10aa6f5ed1b43ebd7047ab95050183c6daa6d1d5f2a704e40edbae76443a82ebc27df53b57cdc73241aa00df55c53e83dcd46cf6e39cd65f6c66963f8ab24e13f5c2b0e1a0d906148c1fd68f71cd57042e3635924a0eee6c8ca4a633762c9c4dab7d17fe2256fa3d0b1cda4bd40ee26f8fc892ea8cbde0200001e61257b690301f77da7e192b6a7b0cfa1d5045e2f8d77eb06e5fa9dc279a0c4ce5f2badc8a83729f20ece38210975265d226562f8e30e3c765acc5d626eb890b64a2e17ee29667057031ac9b4826ff971968d3a68dc4c8078b1d9895a75c35f70fbf91903ab76924b5decec029ede9a7488cfd7fb6264e0ccfe28d50b1e4da9045a2af8ebb8eef488eb4f64abeb4af053e1c1cd5837a9a06513275afc9aaef80efb4e13faa9d6d8060cf991fdef2c4e5541ecc06c0d0709b5f70446f7a32ff4a3f9230ff5b00e14e1f8ee4a3816a8723f54da94c4a472d8ddf2c40dc5e397f780ea31f82d01bba750c775f531cdb077d733e5ce11b8d3d731a8e9491c7b3f6cff96a2424668ae51c86c7750d9ae8307e7dd80d1712d01fb6a810561b0691e49a9dbc8167f1f3a469acbbbcb3c166e52537eee4443376b5e0a2d6e6ebf22d46e92609152d0e8115aa49d80fb5d4bf4155d4c865a03e3781cb025fd120814ca4948b56f5593fedf888372c98667b672e37e1c40c14a37cc9658c9740425f1bced52f24ba6adc307a4f4693b5a1dc44538fffeb62102da2627fc5c7ccb848d146681a508a0ddf9ca29184e33ac96d64344be66576ee4c4a0ebd739aca1d7390ab43561547aa40fd21236ba93a7927efa09e167c7ea5a7b44575bcb478355b6a00571deb0c84ea5bf29cebb1e07f99cf812a0e14a4a348aac18b4afe1e63382ab7b5f4b879deccdd0b32ae725c5cc4095ef6af4e2f62a7435f511269644c6d064fc6be088b5b2a0893d09749ea5d3092b0ba290e89d96c2029dafbf6c9aa1f4d0b8c58ad1a8191def3cddfc52ce029fd492135fa18f89c9e4aa894d695f0d6d5c027682b7ff6d15eae5c4a1c8a3b9c8e47c2e4d038ee30be9e66e7e108c00187b414299ca19797161ce952701a51d9b280a1fc8554499abff7dffb0b6adb8d654fb731e06945a795a8d3b0726214de47695fd0eef617d1a7a32eaf1d79e226a35b430a77f5b0a5b66fc39b415af40a5d37f4d05395fdd18e0af005f8faeb5e017fe541c50a393496fcd429b3fe37e90b703e743ac190ff856143ce6161aa29894f71dff0534f40b52b225be41efc55fd100bd3c1be39af3d796ba2f2e1d68fc3539d89df4e8b6389917ee0f70de5b6f42944146754d6a3579573fcd8254897b00bbe5d49905af4269535525b4ae68626ca7fcab48e350ece510e5c7457f4931fcd438b591f7e8381bad0700ae330d906543e00754392c7f114566da03891cc8128e47f65382ae1d5274b21a494c927e6adeb020ee0d40d4df6bec0385c0d7e209ca6aa11b362cab06940b80bc13f9acebb237f9781a87c2961ab328292e36083dcf4b6c6473505c92fdb5b4783f54a55da3d07178b992d6e1cfc5bdc84ba0fd93367188bbd712d4bde5084bb9ad62fb2917ed1a3d638dc9615c29bf56b470830738a8efe47a02da217e627092bce0f5dd435d755de9f9a4e739ebc2601918d014166211b6cfe37d060e415dc6c08c52f616a190885f540a9fe4e33592c6850b64c472f21ec3f3195f48125dd57bf1718db1ad302ecd905b5b2e03470be83103ddbbf3743935b131a010080b8d01bfdf2167c92bbbcc6c1e2d3cd3ad456503628cc12468bd16d9a5bc1aba057fe68247d3c52f2093ea44a0ab02341eb4eb416327305991c8f71b2011bd684ed18850bc841d1a1c2094f011558fe164dfc97145bf6234fff8d52062a86abc8bdbe2f71a746c0c5eeb478f3a43016bd6308847dfe6904d9a9ae23af49586e6c752d5d6c907a2fed6cd45830252ada5cee96273c7e69c25f3be97ece8569c635fd0a4a8f718f437984161947d1d0c603a1eb51716aa0dfadcc05845509120fdf171a0cefc5f511b9b6183d8d42c166dd10c8cb0a4415a2302442b98c3c7d280131901573c0f5c182f1b2ebc593d9c3e386888148668aba0a26522d8f30d80dc5526d14802148af80f57d43988c86a3f3618e5fdf518fa05ce047204f5361b3c447ba0c45606ce1799b6174c52fcebd83c5a095182f3b9a9b836333cbe040027e8cd1d4dbe1b13dba27529e40040f774adbe1aca4d80bcd2bc1418dd1bbe5c908fa7ed59d6899f699929155431a81f34c004e8bb09a8cc526fe18954d1bef51bb512d2f6b2aea6c13ba7ebb71a60819a6c882ac7d08372541a0cf9f099965e3e51e2d31f6f7a2e95ae0e366a82f309c48c8e16ace6b66460ac0ba1be376ac2b0e879635a64ca8a8f6396633f271056deb64d12ae6232d0d9c772746886b92452277e6f77d9bc3e646075c1e4fa2ff191e6d799846e64b83bfca91df8ddc7900cc0e5497de1d9c610fe8c6ec7b03ce9433c7e4fa15c1886acaecf3b513f9719b805f6a548f41bba9a8e1d687ca4ea1950cf0b00ac392a89c0266da920abab1f39bdb84b8aef3490e9c885d69e87dc075723c0fe211b6a0e8814e8365b94104902f1bf7de9eba549d88e8870370a488209d5f4ab4fe6a7bdf816a002bb004c6214b4a697208ecec7ece64a263a0fe3e313d09064461de2f8388a22b31bd8d7d8d06bf4d8e74bfd9d9e84bf0d0b462987b31e2b6428cec1af2e8e732ea912edaf85906f75312142c2c34bf39aec0138d6a8f160c143410518252a45d167c4be072e219c13dba61521a7a71d0586bb345ef33b89f2376e75e222130852aa4b968341728b7080ad62ac508d5e3d8b05ea37ca2b860c6027ffc4a2e156d1cf68d12aeab4ed3d3c00bd34120e32980f7d4604eab482b7599a4e4ebceea9a62c44877a3c69c0624cbb8532a8db451a025e37d9479235ccd1f38ae5435efb5ec99c18b85c7e0518f035a6620ddfe911bf23fe5f7f2be7ad62f2e5bb07ed008d756d1574d68576c90156b4cf57be3dfc65b7ec24ae7ebe082a24386880232976e43e100bcbd0edee126121ceaabdb416c35cd04c768e76cf166808c049a29d8c28b9a2ba075afb754ab26e3b4857a3c7605122126f9a892a8ed9ed9522a4d5586c9af6548bbbd45773e1f7c643cd060cfbd8564863a65c53f45f28694bb4910d9f2d1972b0d61ea951a19d1b90305962e59d455b1fcf8938574711c3585c2f1c74f5d89b20438ee0712aa28f3839448608efbfafe127c79b9f6ed1970b9482ab2ec8a1a82c69240a8115c8b2af32a09ea04c461951040354d0a173c13f41f94df7d9ee449a3ceba3beabb99bd3dfbdc31f06855bf4cabdb67518bc5310dd1b3a41563db66575d120a17ebd803925457d326f866643e18622f22bd074e5b5675e9800c725d256ca48f76ec5223105f9b80ec035673f9ccf1ef98c6fb9d382e41faad3a5d34e260c50aacbb1e15ec212d486614bac900c064b5be2605641e86a5ec7acc346d71621b9a94da1da8b7cdb0f58508e1a352c201a7566ea2050668011d5c3a126a4687f33afe1ecb6ee0ac19c43b8a4dc80dc3a37781350cb9a036ef275d34cdafb8f44ba59aa09e50f4be71b1dbddc719c8104c2217632d7b97e1abc5ab6e6edd18d4ba341b490893e18aa1966632794e3b65b5b690707fac5b7955ada46cf878bec848402335dc45e8d8f7453d201b86020394bcbbe706c8d3aa17d2bf0316010e207f9b7225cde6153752ab7975b287ae82d2acaefbd7a6ee2db61b1b9d9c2d00453c2ee876e89503acf69bcdfda0ec808239c3c724408813c64c354177891e544b5cf44affe7d99cc94a333a92324ff35d36f539076b9ce5f5f9841abe6122216c5179200b1b8048fe4c006b3d171b5852e4bdde1b621fda4f3bf3d786c59eb230a328b972584ee147d437ea61027b52b27959ba8b236598b86ea55f672bc377c5174e9d65e99133ddacf53a7f5ac6574a9c394474f3c89d49453a60402583d60e878b4194c7694bf7b0684b10f5a843dd13ff26a1dec3dcf1639367fd5d86af25fad0d0612982b1f1a7af82fa1df571514ebdb13f6b6208d99f46a2c7d21fbff00aa767e3da8a5c1c0aa6ceba01297e87da76898b95872f40e93e3593f7791aef2be3083926cad1f717bbdf7d33ac6e359247452589dcb4978c7339b14744ba3bbd247f61e27e83eff83c9d9737d6ca2fb2ad801031f5aa506e5f9715f889ac06684ee0110bfef13cc91f7d8122a03b839c7437285977d6bde8cc0dde9a3d88fce15aaa303f737f76d027f72efabf6ba3203beeb510917d224181724896e5db17bd2615d8a00f87c601d5ba1a302b83db7bd675a2ca0818d9ca27c16fec", 0x1000}, {&(0x7f0000000300)="e43113611cab964e3fcb4242e47845d8b5def9e499ced14d150da35d7b3b303617121ef110be70f6b69f1eb4c56b4a539c7c05dc1acab9a11904e350a9d5eabdf7e85e4f8f5f21798b7a236ae09b2f0c12220b945e726b08e2b6143c9819fd38bbf5c0911f7611d0d65070aee133decfa5bb53", 0x73}], 0x6, &(0x7f0000001b80)=ANY=[@ANYBLOB="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"], 0x548}, 0x4040)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0) (async)
openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x60002, 0x0) (async)
setsockopt$TIPC_MCAST_REPLICAST(r1, 0x10f, 0x86) (async)
ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000000)) (async)
sendmsg$AUDIT_USER_TTY(r0, &(0x7f0000000580)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000540)={&(0x7f0000000440)={0xec, 0x464, 0x10, 0x70bd26, 0x25dfdbfc, "a54887dbb99da53726728227ff02808eb6b89a972de666147c4a78115c4beaabb6913f07f9edad08ec07eb866462f753887bbacd729b2606017d6ef23786e6774e91e6bd5b2a82c47d8126f52d156dd8946110313c4a24d9cf488907c62ac7153550646dfb149b87b8399151d46e86f8092f754c9ac99ba2528c55d6febe8b0f4fd1de39e31d945c59d1bf6cc7cf22d960af3ed84f8bf511ecf4b415e2d1d26074179efb3300dfe96085388df78befed0a7dcbf60374f43e985065cd22ed2f623b883792acbd8cad205df953625ea71a5bd139a75fee5074d8", ["", "", ""]}, 0xec}, 0x1, 0x0, 0x0, 0x40040}, 0x40) (async)
write$ppp(r0, &(0x7f00000002c0)="d3", 0x1) (async)
sendmsg(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000040)="e0c9fd20d96fa7a30f9cefdb2b5eec01da41586ca863271dcac7fef1b7c8ad85ac0a7b1652aff1081091cce71786af", 0x2f}, {&(0x7f00000000c0)="4a5053c7a48ee4133c1001fa895ca3a2c3ff5f27", 0x14}, {&(0x7f0000000100)="332ebfe1c27dedb2985dd908f5d9ebb5a891793539ef1cb0822eb87da61b8716a81399c3bf5ab72bd50b29ef12d9974472c8c98a030eedcc62240b0e2d9bde5b87b95f1a35d8ca27a00b8fc6197ccbb70c11e76d1fd4637201464964828d121fb592da3b0b684aa00745d800afc62c75ff38c3f29ad13ef80677188c3de0e569fbd2a645f95fa02290104311605d732d129a0b9b232eb011b3aceda3a3afd3d1fdd3df272e2fa90926e4b48179f9f6a8cc919fcec7933e8e26448be3d6e8c3ca142212793ee5f72475f139803de9c9c2a4228427e1ee8e8be010db9e36fd", 0xde}, {&(0x7f0000000200)="6c4a6741f756a86593a8509903d98c9ab17ae43a0941e2e76206be20ccae807acd375b1d0867b77a05e258a173382bb84457efc52afe06949ad92c941859cb98d6673b", 0x43}, {&(0x7f0000000600)="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", 0x1000}, {&(0x7f0000000300)="e43113611cab964e3fcb4242e47845d8b5def9e499ced14d150da35d7b3b303617121ef110be70f6b69f1eb4c56b4a539c7c05dc1acab9a11904e350a9d5eabdf7e85e4f8f5f21798b7a236ae09b2f0c12220b945e726b08e2b6143c9819fd38bbf5c0911f7611d0d65070aee133decfa5bb53", 0x73}], 0x6, &(0x7f0000001b80)=ANY=[@ANYBLOB="c800000000000000000000007f0000007d226a72b5acdcc994553749474ff8780c8529b5289bc1b73fb39945f749cb24d24ef6462cfdfbe7d54a9da70c7fb21649b7b8f92ba758e4bd19af22e578b285ea20be5d24cd58b5caaeca1bbfc1bfa97eebb8523acbab129f814c4e0ac7986b3ad68eac5bc7557c14a4988942120df62e81758605814a1c931c3c5198d5559ce19123120664da3664d88b441e0d30c24c7680f7fbd141165108e096a8e9006f5152327a16a685006ea5d9cdedaa90d29e4157a977000000f80000000000000014010000ff0f0000ee6d4ea7659753833e17011f86f63b5c51182da967b4ecbb49eeb7a9b79754b6d3feaa6a1c712dc609e4dbf71138e1979e55fc6875643e4ece359158d9a0751c7c0b9873ead628b645ce6644c27427f4e884724b54f37f906775f73952f7605ce60f86d23341907141dc17ccd1c054b068d52587163c307bcdc3b7963862bb506f818af143623862f0c51d5878bff7ab74fd73f5b041926612f285567de63f0b61693c42320848aad657167ebc75187b6bcc39fdc927ed910d2e458faa60ed08397f66c3cea0c79db5bc78d534498dc53b08facfee31e714ff151341ff68dbf38c0000000000000008010000000000000c0000000200000048048ab4e5abd0a5ab3f51df6f78b356303775fb18ac3717dcabf68528728d58c26f0a407404b70a9c79fdae7be832f72e9fc1348f5f95913850a1d0f87f29148b414415120f2356d3a75dc5f21f1482f3143a7fe4f556a5523747c4398cefba78601bb8233baad2778447a6ecd6cf17ea7103a5034c7402f4bb597b8fb4e956cc0a5bd95087c781e5cfdee6f55e66acdf5c00a2873cf3b64336f1c5b197ff8a1158e23ad5ce2d3c1a15e6b21fd179d5e89e5b39d44ff5f2c4351692d803ea47fc431b4f6049e1486671b2f837f8b1fd382fb43bc441c1a9a5c033aa0e1bb35de04dd8a2f087ba34ad83982cc828a4fc95df1ad5d501a80028000000000000001001000085c50000d2335fc6b30e3f77f2d43c9be08dcdc6f2a1000000000000880000000000000001010000040000006d880dd06e4819a900bdfdea02a9f2314eb4294ea5c604801d71f880bdff84ff0e366a1d8fcee7e46bcbb7767d7f98b9640e32bfa2e1c2972b50d4a38f351bcb6a516be0862f3894bf86ef2ad1e072f88f623b3e1a7707248fb2f00da0c28b60d828ad5c9ba12bd5f365c39700e2af5fb1e5000000000000b00000000000000009010000ff030000b57b14ed597c27b210334fce64b088bfb5cfdfbf26fc49f522259e88320712510a3c5d96958bcbaf52d9d4bce9c51a945c89d85ae720209d92b03c96390e73292ccafbe74b7327fd1219264a25ee7154154ea66b311ab07f124b379d34d946c1be2ed57ee6342b65a8aaf68ddc09bb0b0e87647152bb40b4482fe82157d362886f12a7188e88ebaecb92ed0b089fe06649c9251d7827dfaa38a6878824018132fc2fe55e421afb0d54b1fb0000000090000000000000000201000000000100b9906a1ddfc47af744cfc65a7032427ff348c81b680f9e74c89c4319f4dd8f488d01e80bc04d57e5655341666a17189e0ce48b45ae61b829a3e203d0d73ff6241480213e2ed94097f12a220cb80cf22cda7b77c35e42c0146ef1a4c6f7620fdf3d067d00be6670dc8fc9b593d24fd2cd04477a1308f09f423816eb98e362a71c900000000000000011010000000000003f0399e200cea40d334f4b9eae706066e4b2ab6fe8a183628e228c9775200989ca9e6e8867dd40480becfcbcedfb656d30e040ff47ed997b8e5c165f56dea4a96ac039c047ae05e95fc1c125411b5ecb8a61076170d051207e8b2403ba9c1895fe04ea5f39d0846b6c5195a4d85f6180d5d1d6e5fc4ea991edddc400000000007ae19e58d2db4e37d86031470da28830b10baa5bf1962c1f7d05faa531f21abfecd9c496ff618c2948dbd91145472e3adbc258cdd200d6859a43d177695751a44d9b8ca7fa1a2074597e0b61c4ce693ed9d1123bc87826d7fdd9af40fc595e5215cc618a13a4ec6035832ba39773f6e6"], 0x548}, 0x4040) (async)

22:46:54 executing program 2:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
write$ppp(r0, &(0x7f00000002c0)="d3", 0x1)
bind$isdn_base(r0, &(0x7f0000000040)={0x22, 0x6, 0x86, 0xff, 0x4}, 0x6)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
syz_genetlink_get_family_id$SEG6(&(0x7f00000000c0), r1)
socket$inet6_mptcp(0xa, 0x1, 0x106)

[ 2820.848239][ T7098]  should_fail_ex+0x21f/0x230
[ 2820.852930][ T7098]  __should_fail_alloc_page+0xfd/0x110
[ 2820.858516][ T7098]  __alloc_pages+0x108/0x340
[ 2820.863136][ T7098]  vma_alloc_folio+0x6a3/0x8c0
[ 2820.867936][ T7098]  ? shmem_inode_acct_block+0x1ee/0x220
[ 2820.873511][ T7098]  shmem_get_folio_gfp+0x579/0xc30
[ 2820.878818][ T7098]  shmem_write_begin+0xa6/0x210
[ 2820.883699][ T7098]  generic_perform_write+0x1c9/0x410
[ 2820.889081][ T7098]  ? shmem_write_begin+0x210/0x210
[ 2820.894219][ T7098]  shmem_file_write_iter+0xc8/0xe0
22:46:54 executing program 1:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) (async)
r1 = syz_genetlink_get_family_id$SEG6(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$SEG6_CMD_SETHMAC(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x20, r1, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [@SEG6_ATTR_SECRETLEN={0x5}, @SEG6_ATTR_SECRET={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x44005) (async, rerun: 64)
r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0) (rerun: 64)
write$ppp(r2, 0x0, 0xeffdffff)

[ 2820.899414][ T7098]  vfs_write+0x4ab/0x7d0
[ 2820.903674][ T7098]  ksys_write+0xeb/0x1a0
[ 2820.907950][ T7098]  __x64_sys_write+0x42/0x50
[ 2820.912657][ T7098]  do_syscall_64+0x41/0xc0
[ 2820.917107][ T7098]  entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 2820.923065][ T7098] RIP: 0033:0x7f90e4a54ae9
[ 2820.927578][ T7098] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48
22:46:55 executing program 1:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
r1 = syz_open_dev$loop(&(0x7f0000000000), 0x1, 0x200)
ioctl$LOOP_SET_BLOCK_SIZE(r1, 0x4c09, 0x661a)
write$ppp(r0, 0x0, 0xeffdffff)

[ 2820.947202][ T7098] RSP: 002b:00007f90e3dd70c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 2820.955688][ T7098] RAX: ffffffffffffffda RBX: 00007f90e4b73f80 RCX: 00007f90e4a54ae9
[ 2820.963679][ T7098] RDX: 00000000001f4f33 RSI: 00000000200002c0 RDI: 0000000000000003
[ 2820.971666][ T7098] RBP: 00007f90e3dd7120 R08: 0000000000000000 R09: 0000000000000000
[ 2820.979727][ T7098] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 2820.987709][ T7098] R13: 000000000000000b R14: 00007f90e4b73f80 R15: 00007ffdb3bfd028
[ 2820.995695][ T7098]  </TASK>
22:46:55 executing program 5:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
write$ppp(r0, &(0x7f00000002c0)="d3", 0x1f4f33) (fail_nth: 99)

22:46:55 executing program 0:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
write$ppp(r0, 0x0, 0xeffdffffffffffff)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0)
ioctl$PPPIOCGIDLE(r1, 0x8010743f, &(0x7f0000000040))

[ 2821.052312][ T7134] FAULT_INJECTION: forcing a failure.
[ 2821.052312][ T7134] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 2821.065717][ T7134] CPU: 1 PID: 7134 Comm: syz-executor.5 Not tainted 6.6.0-rc3-syzkaller-00165-g3b517966c561 #0
[ 2821.076135][ T7134] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/06/2023
[ 2821.086273][ T7134] Call Trace:
[ 2821.089631][ T7134]  <TASK>
[ 2821.092616][ T7134]  dump_stack_lvl+0xda/0x130
[ 2821.097338][ T7134]  dump_stack+0x15/0x20
[ 2821.101577][ T7134]  should_fail_ex+0x21f/0x230
[ 2821.106298][ T7134]  should_fail+0xb/0x10
[ 2821.110474][ T7134]  should_fail_usercopy+0x1a/0x20
[ 2821.115553][ T7134]  copy_page_from_iter_atomic+0x21c/0xcf0
[ 2821.121313][ T7134]  ? shmem_write_begin+0xa6/0x210
[ 2821.126470][ T7134]  ? shmem_write_begin+0x16d/0x210
[ 2821.131690][ T7134]  generic_perform_write+0x20c/0x410
[ 2821.137038][ T7134]  ? shmem_write_begin+0x210/0x210
[ 2821.142177][ T7134]  shmem_file_write_iter+0xc8/0xe0
[ 2821.147315][ T7134]  vfs_write+0x4ab/0x7d0
[ 2821.151577][ T7134]  ksys_write+0xeb/0x1a0
[ 2821.156014][ T7134]  __x64_sys_write+0x42/0x50
[ 2821.160672][ T7134]  do_syscall_64+0x41/0xc0
[ 2821.165100][ T7134]  entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 2821.171053][ T7134] RIP: 0033:0x7f90e4a54ae9
[ 2821.175518][ T7134] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48
[ 2821.195209][ T7134] RSP: 002b:00007f90e3dd70c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 2821.203714][ T7134] RAX: ffffffffffffffda RBX: 00007f90e4b73f80 RCX: 00007f90e4a54ae9
[ 2821.211698][ T7134] RDX: 00000000001f4f33 RSI: 00000000200002c0 RDI: 0000000000000003
[ 2821.220383][ T7134] RBP: 00007f90e3dd7120 R08: 0000000000000000 R09: 0000000000000000
[ 2821.228360][ T7134] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 2821.236391][ T7134] R13: 000000000000000b R14: 00007f90e4b73f80 R15: 00007ffdb3bfd028
[ 2821.244420][ T7134]  </TASK>
[ 2821.257232][ T7134] ==================================================================
[ 2821.265345][ T7134] BUG: KCSAN: data-race in __percpu_counter_compare / percpu_counter_add_batch
[ 2821.274293][ T7134] 
[ 2821.276621][ T7134] read-write to 0xffff888100135b50 of 8 bytes by task 7102 on cpu 1:
[ 2821.284701][ T7134]  percpu_counter_add_batch+0xc9/0x140
[ 2821.290181][ T7134]  shmem_inode_acct_block+0x1ee/0x220
[ 2821.295587][ T7134]  shmem_get_folio_gfp+0x4ad/0xc30
[ 2821.300714][ T7134]  shmem_write_begin+0xa6/0x210
[ 2821.305582][ T7134]  generic_perform_write+0x1c9/0x410
[ 2821.310887][ T7134]  shmem_file_write_iter+0xc8/0xe0
[ 2821.316042][ T7134]  vfs_write+0x4ab/0x7d0
[ 2821.320302][ T7134]  ksys_write+0xeb/0x1a0
[ 2821.324553][ T7134]  __x64_sys_write+0x42/0x50
[ 2821.329155][ T7134]  do_syscall_64+0x41/0xc0
[ 2821.333584][ T7134]  entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 2821.339510][ T7134] 
[ 2821.341832][ T7134] read to 0xffff888100135b50 of 8 bytes by task 7134 on cpu 0:
[ 2821.349380][ T7134]  __percpu_counter_compare+0x2b/0x1d0
[ 2821.354858][ T7134]  shmem_inode_acct_block+0xf6/0x220
[ 2821.360161][ T7134]  shmem_get_folio_gfp+0x4ad/0xc30
[ 2821.365291][ T7134]  shmem_write_begin+0xa6/0x210
[ 2821.370170][ T7134]  generic_perform_write+0x1c9/0x410
[ 2821.375721][ T7134]  shmem_file_write_iter+0xc8/0xe0
[ 2821.380895][ T7134]  vfs_write+0x4ab/0x7d0
[ 2821.385139][ T7134]  ksys_write+0xeb/0x1a0
[ 2821.389433][ T7134]  __x64_sys_write+0x42/0x50
[ 2821.394044][ T7134]  do_syscall_64+0x41/0xc0
[ 2821.398477][ T7134]  entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 2821.404396][ T7134] 
[ 2821.406724][ T7134] value changed: 0x00000000000040e0 -> 0x0000000000004100
[ 2821.413840][ T7134] 
[ 2821.416174][ T7134] Reported by Kernel Concurrency Sanitizer on:
[ 2821.422329][ T7134] CPU: 0 PID: 7134 Comm: syz-executor.5 Not tainted 6.6.0-rc3-syzkaller-00165-g3b517966c561 #0
[ 2821.432669][ T7134] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/06/2023
[ 2821.442757][ T7134] ==================================================================
22:46:56 executing program 3:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
write$ppp(r0, &(0x7f00000002c0)="d3", 0xfffffdef)
ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000000))
openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0) (async)
write$ppp(r0, &(0x7f00000002c0)="d3", 0xfffffdef) (async)
ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000000)) (async)

22:46:56 executing program 1:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0) (async)
r1 = syz_open_dev$loop(&(0x7f0000000000), 0x1, 0x200)
ioctl$LOOP_SET_BLOCK_SIZE(r1, 0x4c09, 0x661a)
write$ppp(r0, 0x0, 0xeffdffff)

22:46:56 executing program 4:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5d6c01, 0x0)
write$ppp(r0, 0x0, 0x0)

22:46:56 executing program 2:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
write$ppp(r0, &(0x7f00000002c0)="d3", 0x1)
bind$isdn_base(r0, &(0x7f0000000040)={0x22, 0x6, 0x86, 0xff, 0x4}, 0x6)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
syz_genetlink_get_family_id$SEG6(&(0x7f00000000c0), r1)
socket$inet6_mptcp(0xa, 0x1, 0x106)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0) (async)
write$ppp(r0, &(0x7f00000002c0)="d3", 0x1) (async)
bind$isdn_base(r0, &(0x7f0000000040)={0x22, 0x6, 0x86, 0xff, 0x4}, 0x6) (async)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
syz_genetlink_get_family_id$SEG6(&(0x7f00000000c0), r1) (async)
socket$inet6_mptcp(0xa, 0x1, 0x106) (async)

22:46:56 executing program 0:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
write$ppp(r0, 0x0, 0xeffdffffffffffff) (async)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0)
ioctl$PPPIOCGIDLE(r1, 0x8010743f, &(0x7f0000000040))

22:46:56 executing program 5:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
write$ppp(r0, &(0x7f00000002c0)="d3", 0x1f4f33) (fail_nth: 100)

22:46:56 executing program 2:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
write$ppp(r0, &(0x7f00000002c0)="d3", 0x1) (async)
bind$isdn_base(r0, &(0x7f0000000040)={0x22, 0x6, 0x86, 0xff, 0x4}, 0x6) (async)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
syz_genetlink_get_family_id$SEG6(&(0x7f00000000c0), r1)
socket$inet6_mptcp(0xa, 0x1, 0x106)

[ 2822.024420][ T7144] FAULT_INJECTION: forcing a failure.
[ 2822.024420][ T7144] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[ 2822.037850][ T7144] CPU: 0 PID: 7144 Comm: syz-executor.5 Not tainted 6.6.0-rc3-syzkaller-00165-g3b517966c561 #0
[ 2822.048207][ T7144] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/06/2023
[ 2822.058340][ T7144] Call Trace:
[ 2822.061693][ T7144]  <TASK>
[ 2822.064658][ T7144]  dump_stack_lvl+0xda/0x130
[ 2822.069314][ T7144]  dump_stack+0x15/0x20
[ 2822.073487][ T7144]  should_fail_ex+0x21f/0x230
[ 2822.078188][ T7144]  __should_fail_alloc_page+0xfd/0x110
[ 2822.083703][ T7144]  __alloc_pages+0x108/0x340
[ 2822.088324][ T7144]  vma_alloc_folio+0x6a3/0x8c0
[ 2822.093113][ T7144]  ? shmem_inode_acct_block+0x1ee/0x220
[ 2822.098743][ T7144]  shmem_get_folio_gfp+0x579/0xc30
[ 2822.103886][ T7144]  shmem_write_begin+0xa6/0x210
[ 2822.108794][ T7144]  generic_perform_write+0x1c9/0x410
[ 2822.114205][ T7144]  ? shmem_write_begin+0x210/0x210
[ 2822.119349][ T7144]  shmem_file_write_iter+0xc8/0xe0
[ 2822.124497][ T7144]  vfs_write+0x4ab/0x7d0
[ 2822.128776][ T7144]  ksys_write+0xeb/0x1a0
[ 2822.133104][ T7144]  __x64_sys_write+0x42/0x50
[ 2822.137766][ T7144]  do_syscall_64+0x41/0xc0
[ 2822.142279][ T7144]  entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 2822.148240][ T7144] RIP: 0033:0x7f90e4a54ae9
[ 2822.152675][ T7144] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48
22:46:56 executing program 4:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5d6c01, 0x0)
write$ppp(r0, 0x0, 0x0)

22:46:56 executing program 1:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
r1 = syz_open_dev$loop(&(0x7f0000000000), 0x1, 0x200)
ioctl$LOOP_SET_BLOCK_SIZE(r1, 0x4c09, 0x661a)
write$ppp(r0, 0x0, 0xeffdffff)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0) (async)
syz_open_dev$loop(&(0x7f0000000000), 0x1, 0x200) (async)
ioctl$LOOP_SET_BLOCK_SIZE(r1, 0x4c09, 0x661a) (async)
write$ppp(r0, 0x0, 0xeffdffff) (async)

22:46:56 executing program 1:
write$ppp(0xffffffffffffffff, 0x0, 0xeffdffff)
ioctl$LOOP_GET_STATUS64(0xffffffffffffffff, 0x4c05, &(0x7f00000000c0))

22:46:56 executing program 4:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5d6c01, 0x0)
write$ppp(r0, 0x0, 0x0)

22:46:56 executing program 2:
openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x420840, 0x0)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$inet_mptcp_buf(r1, 0x11c, 0x1, &(0x7f00000000c0)=""/244, &(0x7f0000000040)=0xf4)
setsockopt$TIPC_MCAST_REPLICAST(r0, 0x10f, 0x86)
ioctl$IMGETVERSION(r0, 0x80044942, &(0x7f0000000000))

22:46:56 executing program 3:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
write$ppp(r0, &(0x7f00000000c0)="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"/384, 0x180)

22:46:56 executing program 1:
write$ppp(0xffffffffffffffff, 0x0, 0xeffdffff) (async)
write$ppp(0xffffffffffffffff, 0x0, 0xeffdffff)
ioctl$LOOP_GET_STATUS64(0xffffffffffffffff, 0x4c05, &(0x7f00000000c0))

22:46:56 executing program 4:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f0000000180)={0x70, 0x0, 0x100, 0x70bd29, 0x25dfdbfb, {}, [@L2TP_ATTR_SEND_SEQ={0x0, 0x13, 0x7}, @L2TP_ATTR_PROTO_VERSION={0x0, 0x7, 0x3}, @L2TP_ATTR_MRU={0x0, 0x1d, 0x8}]}, 0x70}, 0x1, 0x0, 0x0, 0x20044844}, 0x24004810)
quotactl_fd$Q_QUOTAON(r0, 0xffffffff80000202, 0xee01, &(0x7f0000000000)='./file0\x00')
openat$bsg(0xffffffffffffff9c, &(0x7f00000001c0), 0x420801, 0x0)
write$ppp(r0, 0x0, 0x0)

22:46:56 executing program 1:
write$ppp(0xffffffffffffffff, 0x0, 0xeffdffff) (async)
ioctl$LOOP_GET_STATUS64(0xffffffffffffffff, 0x4c05, &(0x7f00000000c0))

22:46:56 executing program 0:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
write$ppp(r0, 0x0, 0xeffdffffffffffff) (async)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0)
ioctl$PPPIOCGIDLE(r1, 0x8010743f, &(0x7f0000000040))

22:46:56 executing program 3:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
write$ppp(r0, &(0x7f00000000c0)="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"/384, 0x180)

22:46:56 executing program 5:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
write$ppp(r0, &(0x7f00000002c0)="d3", 0x1f4f33)

[ 2822.172343][ T7144] RSP: 002b:00007f90e3dd70c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 2822.180778][ T7144] RAX: ffffffffffffffda RBX: 00007f90e4b73f80 RCX: 00007f90e4a54ae9
[ 2822.188775][ T7144] RDX: 00000000001f4f33 RSI: 00000000200002c0 RDI: 0000000000000003
[ 2822.196783][ T7144] RBP: 00007f90e3dd7120 R08: 0000000000000000 R09: 0000000000000000
[ 2822.204774][ T7144] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003
[ 2822.212795][ T7144] R13: 000000000000000b R14: 00007f90e4b73f80 R15: 00007ffdb3bfd028
[ 2822.220837][ T7144]  </TASK>
22:46:56 executing program 2:
openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x420840, 0x0)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$inet_mptcp_buf(r1, 0x11c, 0x1, &(0x7f00000000c0)=""/244, &(0x7f0000000040)=0xf4)
setsockopt$TIPC_MCAST_REPLICAST(r0, 0x10f, 0x86)
ioctl$IMGETVERSION(r0, 0x80044942, &(0x7f0000000000))
openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0) (async)
openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x420840, 0x0) (async)
socket$inet_tcp(0x2, 0x1, 0x0) (async)
getsockopt$inet_mptcp_buf(r1, 0x11c, 0x1, &(0x7f00000000c0)=""/244, &(0x7f0000000040)=0xf4) (async)
setsockopt$TIPC_MCAST_REPLICAST(r0, 0x10f, 0x86) (async)
ioctl$IMGETVERSION(r0, 0x80044942, &(0x7f0000000000)) (async)

22:46:56 executing program 0:
openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5d8c01, 0x0)
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(r0, 0x10f, 0x86)
openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x10000, 0x0)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x620000, 0x0)
r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x408800, 0x0)
write$ppp(r1, 0x0, 0x0)

22:46:56 executing program 1:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x42002, 0x0)
write$ppp(r0, 0x0, 0xeffdffff)

22:46:56 executing program 4:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f0000000180)={0x70, 0x0, 0x100, 0x70bd29, 0x25dfdbfb, {}, [@L2TP_ATTR_SEND_SEQ={0x0, 0x13, 0x7}, @L2TP_ATTR_PROTO_VERSION={0x0, 0x7, 0x3}, @L2TP_ATTR_MRU={0x0, 0x1d, 0x8}]}, 0x70}, 0x1, 0x0, 0x0, 0x20044844}, 0x24004810) (async)
quotactl_fd$Q_QUOTAON(r0, 0xffffffff80000202, 0xee01, &(0x7f0000000000)='./file0\x00')
openat$bsg(0xffffffffffffff9c, &(0x7f00000001c0), 0x420801, 0x0)
write$ppp(r0, 0x0, 0x0)

22:46:56 executing program 2:
openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x420840, 0x0)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$inet_mptcp_buf(r1, 0x11c, 0x1, &(0x7f00000000c0)=""/244, &(0x7f0000000040)=0xf4)
setsockopt$TIPC_MCAST_REPLICAST(r0, 0x10f, 0x86)
ioctl$IMGETVERSION(r0, 0x80044942, &(0x7f0000000000))
openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0) (async)
openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x420840, 0x0) (async)
socket$inet_tcp(0x2, 0x1, 0x0) (async)
getsockopt$inet_mptcp_buf(r1, 0x11c, 0x1, &(0x7f00000000c0)=""/244, &(0x7f0000000040)=0xf4) (async)
setsockopt$TIPC_MCAST_REPLICAST(r0, 0x10f, 0x86) (async)
ioctl$IMGETVERSION(r0, 0x80044942, &(0x7f0000000000)) (async)

22:46:56 executing program 1:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x42002, 0x0)
write$ppp(r0, 0x0, 0xeffdffff)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x42002, 0x0) (async)
write$ppp(r0, 0x0, 0xeffdffff) (async)

22:46:56 executing program 3:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
write$ppp(r0, &(0x7f00000000c0)="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"/384, 0x180)

22:46:56 executing program 4:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f0000000180)={0x70, 0x0, 0x100, 0x70bd29, 0x25dfdbfb, {}, [@L2TP_ATTR_SEND_SEQ={0x0, 0x13, 0x7}, @L2TP_ATTR_PROTO_VERSION={0x0, 0x7, 0x3}, @L2TP_ATTR_MRU={0x0, 0x1d, 0x8}]}, 0x70}, 0x1, 0x0, 0x0, 0x20044844}, 0x24004810)
quotactl_fd$Q_QUOTAON(r0, 0xffffffff80000202, 0xee01, &(0x7f0000000000)='./file0\x00')
openat$bsg(0xffffffffffffff9c, &(0x7f00000001c0), 0x420801, 0x0)
write$ppp(r0, 0x0, 0x0)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0) (async)
sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f0000000180)={0x70, 0x0, 0x100, 0x70bd29, 0x25dfdbfb, {}, [@L2TP_ATTR_SEND_SEQ={0x0, 0x13, 0x7}, @L2TP_ATTR_PROTO_VERSION={0x0, 0x7, 0x3}, @L2TP_ATTR_MRU={0x0, 0x1d, 0x8}]}, 0x70}, 0x1, 0x0, 0x0, 0x20044844}, 0x24004810) (async)
quotactl_fd$Q_QUOTAON(r0, 0xffffffff80000202, 0xee01, &(0x7f0000000000)='./file0\x00') (async)
openat$bsg(0xffffffffffffff9c, &(0x7f00000001c0), 0x420801, 0x0) (async)
write$ppp(r0, 0x0, 0x0) (async)

22:46:56 executing program 1:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x42002, 0x0)
write$ppp(r0, 0x0, 0xeffdffff) (async)
write$ppp(r0, 0x0, 0xeffdffff)

22:46:56 executing program 0:
openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5d8c01, 0x0) (async)
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(r0, 0x10f, 0x86) (async, rerun: 32)
openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x10000, 0x0) (async, rerun: 32)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x620000, 0x0) (async, rerun: 32)
r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x408800, 0x0) (rerun: 32)
write$ppp(r1, 0x0, 0x0)

22:46:56 executing program 5:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
write$ppp(r0, &(0x7f00000002c0)="ff", 0x1f4f33)

22:46:56 executing program 4:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
r1 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0x21, 0x0, 0x10)
write$ppp(r0, 0x0, 0x0)

22:46:56 executing program 3:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x60, 0x1, 0x0, 0x2, 0x19, 0x1, "d5c2871d59edfb56e844e1c2ce3cbbe5dfb89d242d85497d8d318275559969448e44bf08664fe2e9d91342721a8e57106bf3447ac8dbd91aa56be6ff3f9e3c9b", "183543aad65b4700be7ca885f9d9ed31cfb876490f688932dfe151b2f9f8aad7f07928f8866d3d326b85a3d7ae63b413c2bbadc7da8e763c2afae9b89fc2df72", "8427b4061ee34d5b423b75f7d38882d11f8430edafe9959eb2c5cd0d1bfccefb", [0x6, 0xffff]})
write$ppp(r0, &(0x7f00000002c0)="d3", 0xfffffdef)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0)
ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000300)={r0, 0x6, {0x0, 0x0, 0x0, 0x4, 0x6, 0x0, 0x6, 0x1c, 0x3d, "571c4b7fb92ddb5ced450e23d33c50be099005567990de6ffd7c557e17a0776de91be0e9408f149d121c31bbf3190c2fd2619f3541e60d40eca025457bf22b69", "9b1b4632b666602939d083edded061b7152956535510780d665b88f9d01bd983b8600c318aa8f0cedbd8c499678b743449f1954969bf40b4caf7887f5b6db5ad", "d607f20e6a0ea47edad7643aa222f9cbd46b7d62831e6f25485c251ad64614c4", [0x6, 0x2]}})
setsockopt$TIPC_MCAST_REPLICAST(r1, 0x10f, 0x86)
r2 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$PPPIOCATTACH(r0, 0x4004743d, &(0x7f0000000000)=0x1)
ioctl$LOOP_SET_FD(r1, 0x4c00, r2)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_SESSION_GET(r3, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x2c, 0x0, 0x0, 0x70bd27, 0x25dfdbff, {}, [@L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @dev={0xac, 0x14, 0x14, 0x35}}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x44045}, 0x8000)

22:46:56 executing program 1:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
write$ppp(r0, 0x0, 0xeffdffff)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(r1, 0x10f, 0x86)
socketpair(0x1f, 0x6, 0x8000, &(0x7f0000000300)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
getsockopt$TIPC_SRC_DROPPABLE(r2, 0x10f, 0x80, &(0x7f0000000340), &(0x7f0000000380)=0x4)
ioctl$PPPIOCATTACH(r1, 0x4004743d, &(0x7f0000000040)=0x4)
ioctl$PPPIOCATTCHAN(r1, 0x40047438, &(0x7f00000002c0)=0x2)
r3 = openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(r3, 0x10f, 0x86)
sendmsg$L2TP_CMD_TUNNEL_GET(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x44, 0x0, 0x400, 0x70bd29, 0x25dfdbfc, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x1}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x2}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}]}, 0x44}}, 0x40048c0)
getsockopt$inet6_mptcp_buf(r3, 0x11c, 0x4, &(0x7f00000000c0)=""/149, &(0x7f0000000000)=0x95)

22:46:56 executing program 2:
socket$nl_audit(0x10, 0x3, 0x9)
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
write$ppp(r0, &(0x7f00000002c0)="d3", 0x1)
ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000000)=0x2)

22:46:56 executing program 4:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0) (async)
r1 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0x21, 0x0, 0x10) (async)
write$ppp(r0, 0x0, 0x0)

22:46:56 executing program 1:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
write$ppp(r0, 0x0, 0xeffdffff) (async)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(r1, 0x10f, 0x86) (async)
socketpair(0x1f, 0x6, 0x8000, &(0x7f0000000300)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
getsockopt$TIPC_SRC_DROPPABLE(r2, 0x10f, 0x80, &(0x7f0000000340), &(0x7f0000000380)=0x4) (async, rerun: 32)
ioctl$PPPIOCATTACH(r1, 0x4004743d, &(0x7f0000000040)=0x4) (async, rerun: 32)
ioctl$PPPIOCATTCHAN(r1, 0x40047438, &(0x7f00000002c0)=0x2) (async)
r3 = openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(r3, 0x10f, 0x86) (async)
sendmsg$L2TP_CMD_TUNNEL_GET(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x44, 0x0, 0x400, 0x70bd29, 0x25dfdbfc, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x1}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x2}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}]}, 0x44}}, 0x40048c0)
getsockopt$inet6_mptcp_buf(r3, 0x11c, 0x4, &(0x7f00000000c0)=""/149, &(0x7f0000000000)=0x95)

22:46:56 executing program 5:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
write$ppp(r0, &(0x7f00000002c0)="d3", 0x1f4f33)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(r1, 0x10f, 0x86)
ioctl$PPPIOCGIDLE32(r1, 0x8008743f, &(0x7f0000000000))

22:46:56 executing program 2:
socket$nl_audit(0x10, 0x3, 0x9) (async)
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
write$ppp(r0, &(0x7f00000002c0)="d3", 0x1) (async)
ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000000)=0x2)

22:46:56 executing program 4:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
socket$inet_smc(0x2b, 0x1, 0x0) (async)
r1 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0x21, 0x0, 0x10)
write$ppp(r0, 0x0, 0x0)

22:46:56 executing program 0:
openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5d8c01, 0x0)
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(r0, 0x10f, 0x86) (async)
openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x10000, 0x0) (async)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x620000, 0x0)
r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x408800, 0x0)
write$ppp(r1, 0x0, 0x0)

22:46:56 executing program 1:
openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0) (async)
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
write$ppp(r0, 0x0, 0xeffdffff)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(r1, 0x10f, 0x86) (async)
setsockopt$TIPC_MCAST_REPLICAST(r1, 0x10f, 0x86)
socketpair(0x1f, 0x6, 0x8000, &(0x7f0000000300)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
getsockopt$TIPC_SRC_DROPPABLE(r2, 0x10f, 0x80, &(0x7f0000000340), &(0x7f0000000380)=0x4)
ioctl$PPPIOCATTACH(r1, 0x4004743d, &(0x7f0000000040)=0x4)
ioctl$PPPIOCATTCHAN(r1, 0x40047438, &(0x7f00000002c0)=0x2) (async)
ioctl$PPPIOCATTCHAN(r1, 0x40047438, &(0x7f00000002c0)=0x2)
r3 = openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(r3, 0x10f, 0x86) (async)
setsockopt$TIPC_MCAST_REPLICAST(r3, 0x10f, 0x86)
sendmsg$L2TP_CMD_TUNNEL_GET(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x44, 0x0, 0x400, 0x70bd29, 0x25dfdbfc, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x1}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x2}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}]}, 0x44}}, 0x40048c0)
getsockopt$inet6_mptcp_buf(r3, 0x11c, 0x4, &(0x7f00000000c0)=""/149, &(0x7f0000000000)=0x95)

22:46:56 executing program 4:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
write$ppp(r0, 0x0, 0x0)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(r1, 0x10f, 0x86)
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
sendmsg(r1, &(0x7f00000001c0)={&(0x7f0000000000)=@pppol2tpv3in6={0x18, 0x1, {0x0, r2, 0x2, 0x2, 0x1, 0x1, {0xa, 0x4e20, 0x7f, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xffffffff}}}, 0x80, &(0x7f0000000580)=[{&(0x7f00000000c0)="6ca603df465630ff8f1445bb1322f5e214ec6e3ac429814d4e3f4563d5cb48c49131f258b38a90d869938d8d22a3c602813644a8b49ebb0042efb7b7c9", 0x3d}, {&(0x7f0000000100)="716887cc2c07be887d6411abe2224f46ca6bad00d3b4c7af91da50725b6c3673af065d6abd1057bb9de8079a94eb0dbd1153f010fd48649957d6a9b2bd7b4634fef31819e95d863736c2226d0af1ae946276b394e96a306b1bba974cba67c4c8d58300c5a6cfd68e227a34360fde524547166679978fe5478ae3baeb26f4ffa0610975006a36f041ac29df4c0f73469696660e73da75733ab7327c558f75330c86880517635cc1d8b4a637b1926a3ce7028cbef4a0af6005d23c8b3181a99acf", 0xc0}, {&(0x7f00000001c0)}, {&(0x7f0000000200)="59b75e348d66154d2c938339f7063d8e612204e7f3b11e040bb356c283672552769507e2e50de53d1adbd9e2e5b9f1b29995673eda54bf4fbd4a0ec51a810af6a52095be9e86ab8e31e4fdbfada05aaf9da20595b96d28aa959a8719ba48498a65d168a028134d27a8aeb244a0b8c6ce931786250e9b84f1ab895807d9c808361470e7bd5809", 0x86}, {&(0x7f00000002c0)="6a7d532d9a0238786d04e5462a325260fdeb73fa1b22f22b0674c4ce216c82975956b02e4b9196055f26aec6e4d25411472665d2a88314accf9157e51991d770730abb9c13a3c3e3c987515ae2e68f1cee67b6ac7f2119d1eead5dcf50ac9e04688e68dbd92cf322227b0809c7f5820525db829357d72ec7a6839898dac5be80f74dc4f6a42565532976fc32e075fa93dff1ae5d54cab15b38acdf2a3358e4155682b8f1a2e4f147e2b468dec43b6120bd02058e29e24f21b2bd4428f28b8ca6b4bfecd854c0657c061195568b0b7acb9e8b019ff3f68bae2cb74a51cd90", 0xde}, {&(0x7f00000003c0)="87f5537e72cbd8b311ad03fede95eb3adfa49d534357a7fcaa13b2303f4bf42cbf9db08d67c33657609f7521d996e34fd2041f59a2c0c1f5d11591284c81992b689974cdd0eaa1bce0c4372a8ea2f6475fb41aec5be852a2482d485bd0df11239b1676d0f0e7ae03a63b09a395d70b6f6622d586702afb198ca9bf65d495237f641a4b95e95185eca845a989b77167d9eb8e2d81a90282459db03f18a547c84c3c41fb2ae6bd75518a3d", 0xaa}, {&(0x7f0000000480)="c45ee100c2c560da16a6005355484254bc902a45ff2137ca3eeb126a2835b9a88bf09bdf88d054fea5c9fc88ec1a712f77482249c0f92ed84355f3ef4976aa9c255b4096789b1ada1a1ddb3a9ffc6bd9380d4fd78207dc8258adb314aafc6fd19cd0e46c0a5c78d1e961df96f7bbe93bf971c51dc55e8e05dcec0e3a85687180fd9502f2da1eba830de4cc16ff2521af0b7be00f7fa579093f63c68b8b83b9d3e21c204423e1be5835bc0a5d09d784513751a98b006de1baee00d8c757c8cc4c7b696a2b74df7e06055896c1fe44", 0xce}], 0x7, &(0x7f0000002a80)=[{0x1010, 0x118, 0x100, "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"}, {0xd8, 0x109, 0xffff5667, "160b748c85e27d7ede1398d7b2508313029682aef4bd7e40260ef7595a2eb8bb75c29aa6e69c36f31dc0f437044a82978ce629f29b17308b84a8f80f150962a387ed45d27bd7cf5c0981353203fe5fa8771dd4641b4810e50dbb738c45bf4659df65372aa2a4265d9a6cbc1cd8dbc7c04a8d22b7ba1f7c441a308de71d0ce2b935b7741a2bb7f4ab7beb9d4f535bd1611092979dd941460e5fe90d7209f407b31a8c5a5ea1e0f78c066a362e229e60ffd1edec0bc1dadffd1f0b2a8cd2618891ec0ca3b3db59c0cb"}, {0x20, 0x115, 0x401, "a3cceb5ce2b642a3ace3e3780c00bd"}, {0x1d8, 0x1, 0x87ff, "d99a45bf190173ce591951de859cd13ddf919d7b3a7ccfacbd9bfb8eb91eda9f04ae9e57486713bed0917c55ca406847fcad28bf9f69740fc03d4caf7b0bf0801898ce4c78f0ccf26063fb1dd1536a430d121f80864c47d65c40e76d0d4d344bcaa841d1071ab3ea68b1a8979ff96dac19731e880cc752f16e6896fe61dc8531005efe985c0cfcc09b394677f0191ffe682186b84b7c1bbf28e34de48a0446d74fdadfca4ad13f95ac62b041f951f050f5addc4d62dfd9d7feff5e5be97d11702a5b3112438605f9bd8dea1d31e06afd9d80a2e58ff438f053f544b604fd54aaa4cd7200d494a140208e7c65688d3222bb68d18bf198614ba610b80e231cd6ce85de5328456f3948d489aca4e2d9b6a7c99e5fb506e314e07298172a079c96d33c5f5333a81d952730dda2d8d97fc03adb5e849d890ab6062883f83a631ea30e386563c6c3b12fc5bf08ec2d9e2998863094086bd888a2b3d0e82221aaf632d7cf5ad8f2c39662cacb7571d9a09a2c36d26f5f2b4c4e7e3c2f61c9da67568c574ae97d54928999790d11b6a9570dae666f9f47887f18f2c7e97b08ea560c4f47e661c299ef23432c5ec998c0ba63959a26242a14e844dfc9accc084cf0dc7347a086d08e2c"}], 0x12e0}, 0x60004800)
sendmsg$AUDIT_TTY_GET(r1, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x10, 0x3f8, 0x300, 0x70bd28, 0x25dfdbff}, 0x10}, 0x1, 0x0, 0x0, 0x40000}, 0x1010)

22:46:56 executing program 2:
socket$nl_audit(0x10, 0x3, 0x9)
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
write$ppp(r0, &(0x7f00000002c0)="d3", 0x1)
ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000000)=0x2)
socket$nl_audit(0x10, 0x3, 0x9) (async)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0) (async)
write$ppp(r0, &(0x7f00000002c0)="d3", 0x1) (async)
ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000000)=0x2) (async)

22:46:56 executing program 1:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0)
r1 = getuid()
setuid(r1)
quotactl_fd$Q_QUOTAON(r0, 0xffffffff80000200, r1, &(0x7f0000000040)='./file0\x00')
setsockopt$TIPC_MCAST_REPLICAST(r0, 0x10f, 0x86)
r2 = openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(r2, 0x10f, 0x86)
getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000100), &(0x7f0000000000)=0x74)
r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5ba440, 0x0)
write$ppp(r3, 0x0, 0xeffdffff)

22:46:56 executing program 0:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
write$ppp(r0, 0x0, 0xeffdffffffffffff)
r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x20040, 0x0)
ioctl$TUNGETFEATURES(r1, 0x800454cf, &(0x7f0000000040))

22:46:56 executing program 2:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
write$ppp(r0, &(0x7f00000002c0)="d3", 0x1)
ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000000)=0x1)

22:46:56 executing program 4:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
write$ppp(r0, 0x0, 0x0) (async)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(r1, 0x10f, 0x86) (async)
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
sendmsg(r1, &(0x7f00000001c0)={&(0x7f0000000000)=@pppol2tpv3in6={0x18, 0x1, {0x0, r2, 0x2, 0x2, 0x1, 0x1, {0xa, 0x4e20, 0x7f, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xffffffff}}}, 0x80, &(0x7f0000000580)=[{&(0x7f00000000c0)="6ca603df465630ff8f1445bb1322f5e214ec6e3ac429814d4e3f4563d5cb48c49131f258b38a90d869938d8d22a3c602813644a8b49ebb0042efb7b7c9", 0x3d}, {&(0x7f0000000100)="716887cc2c07be887d6411abe2224f46ca6bad00d3b4c7af91da50725b6c3673af065d6abd1057bb9de8079a94eb0dbd1153f010fd48649957d6a9b2bd7b4634fef31819e95d863736c2226d0af1ae946276b394e96a306b1bba974cba67c4c8d58300c5a6cfd68e227a34360fde524547166679978fe5478ae3baeb26f4ffa0610975006a36f041ac29df4c0f73469696660e73da75733ab7327c558f75330c86880517635cc1d8b4a637b1926a3ce7028cbef4a0af6005d23c8b3181a99acf", 0xc0}, {&(0x7f00000001c0)}, {&(0x7f0000000200)="59b75e348d66154d2c938339f7063d8e612204e7f3b11e040bb356c283672552769507e2e50de53d1adbd9e2e5b9f1b29995673eda54bf4fbd4a0ec51a810af6a52095be9e86ab8e31e4fdbfada05aaf9da20595b96d28aa959a8719ba48498a65d168a028134d27a8aeb244a0b8c6ce931786250e9b84f1ab895807d9c808361470e7bd5809", 0x86}, {&(0x7f00000002c0)="6a7d532d9a0238786d04e5462a325260fdeb73fa1b22f22b0674c4ce216c82975956b02e4b9196055f26aec6e4d25411472665d2a88314accf9157e51991d770730abb9c13a3c3e3c987515ae2e68f1cee67b6ac7f2119d1eead5dcf50ac9e04688e68dbd92cf322227b0809c7f5820525db829357d72ec7a6839898dac5be80f74dc4f6a42565532976fc32e075fa93dff1ae5d54cab15b38acdf2a3358e4155682b8f1a2e4f147e2b468dec43b6120bd02058e29e24f21b2bd4428f28b8ca6b4bfecd854c0657c061195568b0b7acb9e8b019ff3f68bae2cb74a51cd90", 0xde}, {&(0x7f00000003c0)="87f5537e72cbd8b311ad03fede95eb3adfa49d534357a7fcaa13b2303f4bf42cbf9db08d67c33657609f7521d996e34fd2041f59a2c0c1f5d11591284c81992b689974cdd0eaa1bce0c4372a8ea2f6475fb41aec5be852a2482d485bd0df11239b1676d0f0e7ae03a63b09a395d70b6f6622d586702afb198ca9bf65d495237f641a4b95e95185eca845a989b77167d9eb8e2d81a90282459db03f18a547c84c3c41fb2ae6bd75518a3d", 0xaa}, {&(0x7f0000000480)="c45ee100c2c560da16a6005355484254bc902a45ff2137ca3eeb126a2835b9a88bf09bdf88d054fea5c9fc88ec1a712f77482249c0f92ed84355f3ef4976aa9c255b4096789b1ada1a1ddb3a9ffc6bd9380d4fd78207dc8258adb314aafc6fd19cd0e46c0a5c78d1e961df96f7bbe93bf971c51dc55e8e05dcec0e3a85687180fd9502f2da1eba830de4cc16ff2521af0b7be00f7fa579093f63c68b8b83b9d3e21c204423e1be5835bc0a5d09d784513751a98b006de1baee00d8c757c8cc4c7b696a2b74df7e06055896c1fe44", 0xce}], 0x7, &(0x7f0000002a80)=[{0x1010, 0x118, 0x100, "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"}, {0xd8, 0x109, 0xffff5667, "160b748c85e27d7ede1398d7b2508313029682aef4bd7e40260ef7595a2eb8bb75c29aa6e69c36f31dc0f437044a82978ce629f29b17308b84a8f80f150962a387ed45d27bd7cf5c0981353203fe5fa8771dd4641b4810e50dbb738c45bf4659df65372aa2a4265d9a6cbc1cd8dbc7c04a8d22b7ba1f7c441a308de71d0ce2b935b7741a2bb7f4ab7beb9d4f535bd1611092979dd941460e5fe90d7209f407b31a8c5a5ea1e0f78c066a362e229e60ffd1edec0bc1dadffd1f0b2a8cd2618891ec0ca3b3db59c0cb"}, {0x20, 0x115, 0x401, "a3cceb5ce2b642a3ace3e3780c00bd"}, {0x1d8, 0x1, 0x87ff, "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"}], 0x12e0}, 0x60004800) (async)
sendmsg$AUDIT_TTY_GET(r1, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x10, 0x3f8, 0x300, 0x70bd28, 0x25dfdbff}, 0x10}, 0x1, 0x0, 0x0, 0x40000}, 0x1010)

22:46:56 executing program 5:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
write$ppp(r0, &(0x7f00000002c0)="d3", 0x1f4f33) (async)
write$ppp(r0, &(0x7f00000002c0)="d3", 0x1f4f33)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(r1, 0x10f, 0x86)
ioctl$PPPIOCGIDLE32(r1, 0x8008743f, &(0x7f0000000000))

22:46:56 executing program 3:
openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0) (async)
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x60, 0x1, 0x0, 0x2, 0x19, 0x1, "d5c2871d59edfb56e844e1c2ce3cbbe5dfb89d242d85497d8d318275559969448e44bf08664fe2e9d91342721a8e57106bf3447ac8dbd91aa56be6ff3f9e3c9b", "183543aad65b4700be7ca885f9d9ed31cfb876490f688932dfe151b2f9f8aad7f07928f8866d3d326b85a3d7ae63b413c2bbadc7da8e763c2afae9b89fc2df72", "8427b4061ee34d5b423b75f7d38882d11f8430edafe9959eb2c5cd0d1bfccefb", [0x6, 0xffff]})
write$ppp(r0, &(0x7f00000002c0)="d3", 0xfffffdef)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0)
ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000300)={r0, 0x6, {0x0, 0x0, 0x0, 0x4, 0x6, 0x0, 0x6, 0x1c, 0x3d, "571c4b7fb92ddb5ced450e23d33c50be099005567990de6ffd7c557e17a0776de91be0e9408f149d121c31bbf3190c2fd2619f3541e60d40eca025457bf22b69", "9b1b4632b666602939d083edded061b7152956535510780d665b88f9d01bd983b8600c318aa8f0cedbd8c499678b743449f1954969bf40b4caf7887f5b6db5ad", "d607f20e6a0ea47edad7643aa222f9cbd46b7d62831e6f25485c251ad64614c4", [0x6, 0x2]}})
setsockopt$TIPC_MCAST_REPLICAST(r1, 0x10f, 0x86)
socket$inet6_udplite(0xa, 0x2, 0x88) (async)
r2 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$PPPIOCATTACH(r0, 0x4004743d, &(0x7f0000000000)=0x1)
ioctl$LOOP_SET_FD(r1, 0x4c00, r2)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_SESSION_GET(r3, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x2c, 0x0, 0x0, 0x70bd27, 0x25dfdbff, {}, [@L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @dev={0xac, 0x14, 0x14, 0x35}}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x44045}, 0x8000) (async)
sendmsg$L2TP_CMD_SESSION_GET(r3, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x2c, 0x0, 0x0, 0x70bd27, 0x25dfdbff, {}, [@L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @dev={0xac, 0x14, 0x14, 0x35}}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x44045}, 0x8000)

22:46:56 executing program 2:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
write$ppp(r0, &(0x7f00000002c0)="d3", 0x1) (async)
write$ppp(r0, &(0x7f00000002c0)="d3", 0x1)
ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000000)=0x1)

22:46:56 executing program 4:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
write$ppp(r0, 0x0, 0x0) (async)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(r1, 0x10f, 0x86)
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
sendmsg(r1, &(0x7f00000001c0)={&(0x7f0000000000)=@pppol2tpv3in6={0x18, 0x1, {0x0, r2, 0x2, 0x2, 0x1, 0x1, {0xa, 0x4e20, 0x7f, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xffffffff}}}, 0x80, &(0x7f0000000580)=[{&(0x7f00000000c0)="6ca603df465630ff8f1445bb1322f5e214ec6e3ac429814d4e3f4563d5cb48c49131f258b38a90d869938d8d22a3c602813644a8b49ebb0042efb7b7c9", 0x3d}, {&(0x7f0000000100)="716887cc2c07be887d6411abe2224f46ca6bad00d3b4c7af91da50725b6c3673af065d6abd1057bb9de8079a94eb0dbd1153f010fd48649957d6a9b2bd7b4634fef31819e95d863736c2226d0af1ae946276b394e96a306b1bba974cba67c4c8d58300c5a6cfd68e227a34360fde524547166679978fe5478ae3baeb26f4ffa0610975006a36f041ac29df4c0f73469696660e73da75733ab7327c558f75330c86880517635cc1d8b4a637b1926a3ce7028cbef4a0af6005d23c8b3181a99acf", 0xc0}, {&(0x7f00000001c0)}, {&(0x7f0000000200)="59b75e348d66154d2c938339f7063d8e612204e7f3b11e040bb356c283672552769507e2e50de53d1adbd9e2e5b9f1b29995673eda54bf4fbd4a0ec51a810af6a52095be9e86ab8e31e4fdbfada05aaf9da20595b96d28aa959a8719ba48498a65d168a028134d27a8aeb244a0b8c6ce931786250e9b84f1ab895807d9c808361470e7bd5809", 0x86}, {&(0x7f00000002c0)="6a7d532d9a0238786d04e5462a325260fdeb73fa1b22f22b0674c4ce216c82975956b02e4b9196055f26aec6e4d25411472665d2a88314accf9157e51991d770730abb9c13a3c3e3c987515ae2e68f1cee67b6ac7f2119d1eead5dcf50ac9e04688e68dbd92cf322227b0809c7f5820525db829357d72ec7a6839898dac5be80f74dc4f6a42565532976fc32e075fa93dff1ae5d54cab15b38acdf2a3358e4155682b8f1a2e4f147e2b468dec43b6120bd02058e29e24f21b2bd4428f28b8ca6b4bfecd854c0657c061195568b0b7acb9e8b019ff3f68bae2cb74a51cd90", 0xde}, {&(0x7f00000003c0)="87f5537e72cbd8b311ad03fede95eb3adfa49d534357a7fcaa13b2303f4bf42cbf9db08d67c33657609f7521d996e34fd2041f59a2c0c1f5d11591284c81992b689974cdd0eaa1bce0c4372a8ea2f6475fb41aec5be852a2482d485bd0df11239b1676d0f0e7ae03a63b09a395d70b6f6622d586702afb198ca9bf65d495237f641a4b95e95185eca845a989b77167d9eb8e2d81a90282459db03f18a547c84c3c41fb2ae6bd75518a3d", 0xaa}, {&(0x7f0000000480)="c45ee100c2c560da16a6005355484254bc902a45ff2137ca3eeb126a2835b9a88bf09bdf88d054fea5c9fc88ec1a712f77482249c0f92ed84355f3ef4976aa9c255b4096789b1ada1a1ddb3a9ffc6bd9380d4fd78207dc8258adb314aafc6fd19cd0e46c0a5c78d1e961df96f7bbe93bf971c51dc55e8e05dcec0e3a85687180fd9502f2da1eba830de4cc16ff2521af0b7be00f7fa579093f63c68b8b83b9d3e21c204423e1be5835bc0a5d09d784513751a98b006de1baee00d8c757c8cc4c7b696a2b74df7e06055896c1fe44", 0xce}], 0x7, &(0x7f0000002a80)=[{0x1010, 0x118, 0x100, "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"}, {0xd8, 0x109, 0xffff5667, "160b748c85e27d7ede1398d7b2508313029682aef4bd7e40260ef7595a2eb8bb75c29aa6e69c36f31dc0f437044a82978ce629f29b17308b84a8f80f150962a387ed45d27bd7cf5c0981353203fe5fa8771dd4641b4810e50dbb738c45bf4659df65372aa2a4265d9a6cbc1cd8dbc7c04a8d22b7ba1f7c441a308de71d0ce2b935b7741a2bb7f4ab7beb9d4f535bd1611092979dd941460e5fe90d7209f407b31a8c5a5ea1e0f78c066a362e229e60ffd1edec0bc1dadffd1f0b2a8cd2618891ec0ca3b3db59c0cb"}, {0x20, 0x115, 0x401, "a3cceb5ce2b642a3ace3e3780c00bd"}, {0x1d8, 0x1, 0x87ff, "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"}], 0x12e0}, 0x60004800) (async)
sendmsg$AUDIT_TTY_GET(r1, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x10, 0x3f8, 0x300, 0x70bd28, 0x25dfdbff}, 0x10}, 0x1, 0x0, 0x0, 0x40000}, 0x1010)

22:46:56 executing program 0:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
write$ppp(r0, 0x0, 0xeffdffffffffffff)
r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x20040, 0x0)
ioctl$TUNGETFEATURES(r1, 0x800454cf, &(0x7f0000000040))

22:46:56 executing program 1:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0)
r1 = getuid()
setuid(r1)
quotactl_fd$Q_QUOTAON(r0, 0xffffffff80000200, r1, &(0x7f0000000040)='./file0\x00') (async)
setsockopt$TIPC_MCAST_REPLICAST(r0, 0x10f, 0x86) (async)
r2 = openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(r2, 0x10f, 0x86) (async)
getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000100), &(0x7f0000000000)=0x74) (async)
r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5ba440, 0x0)
write$ppp(r3, 0x0, 0xeffdffff)

22:46:56 executing program 4:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
ioctl$TUNSETLINK(r0, 0x400454cd, 0x308)
write$ppp(r0, 0x0, 0x0)

22:46:56 executing program 2:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
write$ppp(r0, &(0x7f00000002c0)="d3", 0x1)
ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000000)=0x1) (async)
ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000000)=0x1)

22:46:56 executing program 0:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
write$ppp(r0, 0x0, 0xeffdffffffffffff) (async)
r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x20040, 0x0)
ioctl$TUNGETFEATURES(r1, 0x800454cf, &(0x7f0000000040))

22:46:56 executing program 4:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
ioctl$TUNSETLINK(r0, 0x400454cd, 0x308) (async)
ioctl$TUNSETLINK(r0, 0x400454cd, 0x308)
write$ppp(r0, 0x0, 0x0)

22:46:56 executing program 1:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0)
r1 = getuid()
setuid(r1)
quotactl_fd$Q_QUOTAON(r0, 0xffffffff80000200, r1, &(0x7f0000000040)='./file0\x00')
setsockopt$TIPC_MCAST_REPLICAST(r0, 0x10f, 0x86)
r2 = openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(r2, 0x10f, 0x86)
getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000100), &(0x7f0000000000)=0x74)
r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5ba440, 0x0)
write$ppp(r3, 0x0, 0xeffdffff)
openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0) (async)
getuid() (async)
setuid(r1) (async)
quotactl_fd$Q_QUOTAON(r0, 0xffffffff80000200, r1, &(0x7f0000000040)='./file0\x00') (async)
setsockopt$TIPC_MCAST_REPLICAST(r0, 0x10f, 0x86) (async)
openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0) (async)
setsockopt$TIPC_MCAST_REPLICAST(r2, 0x10f, 0x86) (async)
getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000100), &(0x7f0000000000)=0x74) (async)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5ba440, 0x0) (async)
write$ppp(r3, 0x0, 0xeffdffff) (async)

22:46:56 executing program 0:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
sendmsg$AUDIT_ADD_RULE(r0, &(0x7f0000000540)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000500)={&(0x7f00000000c0)={0x424, 0x3f3, 0x1, 0x70bd27, 0x25dfdbfc, {0x1, 0x1, 0x2f, [0x8, 0xfe3, 0x67, 0xaa26, 0xfff, 0xb294, 0x400, 0x3, 0x0, 0x9, 0xfffffbff, 0x5, 0x5, 0x1000, 0x3, 0x1, 0x9, 0xb9a0, 0x80, 0x100, 0x3, 0x5, 0x5, 0x9, 0x1bd3, 0x1, 0x0, 0x8, 0x100, 0x80000000, 0xffffff16, 0x9, 0x3, 0x7, 0x1, 0xfffffffb, 0xffffff80, 0x8, 0x1, 0x4, 0x174, 0xa3fd, 0x2, 0xfffffffa, 0x10001, 0x80000000, 0x3, 0x8, 0x2, 0x7fffffff, 0x565ce65f, 0xe47, 0x1f, 0x8, 0x8, 0x1, 0x9, 0xffffffff, 0x7a0, 0x101, 0xfffffff8, 0x3, 0x8, 0x7f], [0x1000, 0xfffeffff, 0x1, 0x30b, 0x9, 0x1, 0x6, 0x0, 0x6, 0x1ff, 0x3, 0x1, 0x2, 0xa13a, 0x5, 0x4, 0x1ff, 0x1, 0x8, 0x1ff, 0x2, 0xbb, 0x3, 0x2, 0x94, 0x9, 0x3, 0xffff, 0x6, 0x5, 0x9, 0x7, 0x8, 0x7, 0xa3, 0x5, 0x4, 0x6, 0xca, 0x80, 0x1, 0xdadb, 0x2, 0xd6, 0x10000, 0x4, 0x0, 0x5c88f700, 0x5, 0x31f1, 0x3, 0x6, 0x7fffffff, 0x7fff, 0x8, 0x5, 0x0, 0xffffff7f, 0x5, 0x1, 0x7, 0x5, 0x1f, 0xffffffff], [0xba, 0xbbc, 0x56a6, 0x401, 0x4, 0x6, 0x4, 0xc976, 0x1, 0x1, 0x6, 0x4, 0x8e4, 0x2, 0x4bd933c8, 0x5, 0x4, 0x81, 0x1ff, 0x5, 0x40, 0x8, 0x3, 0xb69, 0x1, 0x4, 0x1, 0x1, 0x5, 0x9, 0x101, 0x10001, 0x401, 0xf60, 0x2, 0x9, 0x6, 0xfffffffd, 0x3, 0x6, 0x81, 0x3, 0x8, 0x9, 0x5, 0xf1, 0xfffffffb, 0x9, 0x5, 0x8, 0x4, 0x3, 0x5, 0x4, 0x4, 0x2, 0x5316, 0x4, 0x9, 0x80000001, 0xfffff7f7, 0x3f, 0x1f, 0x4], [0xfff, 0x2, 0x800, 0x943, 0x8, 0xffffffff, 0x7f, 0x9, 0x690, 0x4, 0x5, 0xfffffff8, 0x7ff, 0x1, 0x0, 0x5, 0x8, 0xacb8, 0x7, 0x7, 0x1760, 0x8001, 0x0, 0x0, 0x401, 0x7, 0x2, 0xe8b, 0x266, 0x3f, 0x10001, 0x5, 0xff, 0x80000001, 0x0, 0xfffffffc, 0x7, 0x2, 0xfff, 0x4, 0x8, 0x6, 0x80000001, 0x401, 0xda, 0x7f, 0x0, 0x7bb, 0x3, 0x1, 0x7, 0x5, 0xdb8, 0x7fff, 0xd8c, 0x9, 0x3, 0x2, 0x202, 0x1, 0x20, 0x2, 0xa61e], 0x1, ['\x00']}, ["", "", ""]}, 0x424}, 0x1, 0x0, 0x0, 0x40000}, 0x40)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x24000, 0x0)
write$ppp(0xffffffffffffffff, 0x0, 0x0)

22:46:56 executing program 5:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
write$ppp(r0, &(0x7f00000002c0)="d3", 0x1f4f33)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(r1, 0x10f, 0x86) (async, rerun: 32)
ioctl$PPPIOCGIDLE32(r1, 0x8008743f, &(0x7f0000000000)) (rerun: 32)

22:46:56 executing program 4:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
ioctl$TUNSETLINK(r0, 0x400454cd, 0x308)
write$ppp(r0, 0x0, 0x0)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0) (async)
ioctl$TUNSETLINK(r0, 0x400454cd, 0x308) (async)
write$ppp(r0, 0x0, 0x0) (async)

22:46:56 executing program 1:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
write$ppp(r0, 0x0, 0xeffdffff)
sendmsg$AUDIT_TRIM(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x3f6, 0x20, 0x70bd25, 0x25dfdbfe, "", [""]}, 0x10}}, 0x20000804)

22:46:56 executing program 0:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
sendmsg$AUDIT_ADD_RULE(r0, &(0x7f0000000540)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000500)={&(0x7f00000000c0)={0x424, 0x3f3, 0x1, 0x70bd27, 0x25dfdbfc, {0x1, 0x1, 0x2f, [0x8, 0xfe3, 0x67, 0xaa26, 0xfff, 0xb294, 0x400, 0x3, 0x0, 0x9, 0xfffffbff, 0x5, 0x5, 0x1000, 0x3, 0x1, 0x9, 0xb9a0, 0x80, 0x100, 0x3, 0x5, 0x5, 0x9, 0x1bd3, 0x1, 0x0, 0x8, 0x100, 0x80000000, 0xffffff16, 0x9, 0x3, 0x7, 0x1, 0xfffffffb, 0xffffff80, 0x8, 0x1, 0x4, 0x174, 0xa3fd, 0x2, 0xfffffffa, 0x10001, 0x80000000, 0x3, 0x8, 0x2, 0x7fffffff, 0x565ce65f, 0xe47, 0x1f, 0x8, 0x8, 0x1, 0x9, 0xffffffff, 0x7a0, 0x101, 0xfffffff8, 0x3, 0x8, 0x7f], [0x1000, 0xfffeffff, 0x1, 0x30b, 0x9, 0x1, 0x6, 0x0, 0x6, 0x1ff, 0x3, 0x1, 0x2, 0xa13a, 0x5, 0x4, 0x1ff, 0x1, 0x8, 0x1ff, 0x2, 0xbb, 0x3, 0x2, 0x94, 0x9, 0x3, 0xffff, 0x6, 0x5, 0x9, 0x7, 0x8, 0x7, 0xa3, 0x5, 0x4, 0x6, 0xca, 0x80, 0x1, 0xdadb, 0x2, 0xd6, 0x10000, 0x4, 0x0, 0x5c88f700, 0x5, 0x31f1, 0x3, 0x6, 0x7fffffff, 0x7fff, 0x8, 0x5, 0x0, 0xffffff7f, 0x5, 0x1, 0x7, 0x5, 0x1f, 0xffffffff], [0xba, 0xbbc, 0x56a6, 0x401, 0x4, 0x6, 0x4, 0xc976, 0x1, 0x1, 0x6, 0x4, 0x8e4, 0x2, 0x4bd933c8, 0x5, 0x4, 0x81, 0x1ff, 0x5, 0x40, 0x8, 0x3, 0xb69, 0x1, 0x4, 0x1, 0x1, 0x5, 0x9, 0x101, 0x10001, 0x401, 0xf60, 0x2, 0x9, 0x6, 0xfffffffd, 0x3, 0x6, 0x81, 0x3, 0x8, 0x9, 0x5, 0xf1, 0xfffffffb, 0x9, 0x5, 0x8, 0x4, 0x3, 0x5, 0x4, 0x4, 0x2, 0x5316, 0x4, 0x9, 0x80000001, 0xfffff7f7, 0x3f, 0x1f, 0x4], [0xfff, 0x2, 0x800, 0x943, 0x8, 0xffffffff, 0x7f, 0x9, 0x690, 0x4, 0x5, 0xfffffff8, 0x7ff, 0x1, 0x0, 0x5, 0x8, 0xacb8, 0x7, 0x7, 0x1760, 0x8001, 0x0, 0x0, 0x401, 0x7, 0x2, 0xe8b, 0x266, 0x3f, 0x10001, 0x5, 0xff, 0x80000001, 0x0, 0xfffffffc, 0x7, 0x2, 0xfff, 0x4, 0x8, 0x6, 0x80000001, 0x401, 0xda, 0x7f, 0x0, 0x7bb, 0x3, 0x1, 0x7, 0x5, 0xdb8, 0x7fff, 0xd8c, 0x9, 0x3, 0x2, 0x202, 0x1, 0x20, 0x2, 0xa61e], 0x1, ['\x00']}, ["", "", ""]}, 0x424}, 0x1, 0x0, 0x0, 0x40000}, 0x40)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x24000, 0x0) (async)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x24000, 0x0)
write$ppp(0xffffffffffffffff, 0x0, 0x0)

22:46:56 executing program 2:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
write$ppp(r0, &(0x7f00000002c0)="d3", 0x1)
r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc00, 0x0)
ioctl$PPPIOCGIDLE64(r1, 0x8010743f, &(0x7f0000000040))

22:46:56 executing program 5:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x84d00, 0x0)
write$ppp(r0, &(0x7f00000002c0)="d3", 0x1f4f33)

22:46:56 executing program 3:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x60, 0x1, 0x0, 0x2, 0x19, 0x1, "d5c2871d59edfb56e844e1c2ce3cbbe5dfb89d242d85497d8d318275559969448e44bf08664fe2e9d91342721a8e57106bf3447ac8dbd91aa56be6ff3f9e3c9b", "183543aad65b4700be7ca885f9d9ed31cfb876490f688932dfe151b2f9f8aad7f07928f8866d3d326b85a3d7ae63b413c2bbadc7da8e763c2afae9b89fc2df72", "8427b4061ee34d5b423b75f7d38882d11f8430edafe9959eb2c5cd0d1bfccefb", [0x6, 0xffff]})
write$ppp(r0, &(0x7f00000002c0)="d3", 0xfffffdef) (async)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0)
ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000300)={r0, 0x6, {0x0, 0x0, 0x0, 0x4, 0x6, 0x0, 0x6, 0x1c, 0x3d, "571c4b7fb92ddb5ced450e23d33c50be099005567990de6ffd7c557e17a0776de91be0e9408f149d121c31bbf3190c2fd2619f3541e60d40eca025457bf22b69", "9b1b4632b666602939d083edded061b7152956535510780d665b88f9d01bd983b8600c318aa8f0cedbd8c499678b743449f1954969bf40b4caf7887f5b6db5ad", "d607f20e6a0ea47edad7643aa222f9cbd46b7d62831e6f25485c251ad64614c4", [0x6, 0x2]}}) (async)
setsockopt$TIPC_MCAST_REPLICAST(r1, 0x10f, 0x86) (async)
r2 = socket$inet6_udplite(0xa, 0x2, 0x88) (async)
ioctl$PPPIOCATTACH(r0, 0x4004743d, &(0x7f0000000000)=0x1)
ioctl$LOOP_SET_FD(r1, 0x4c00, r2)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_SESSION_GET(r3, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x2c, 0x0, 0x0, 0x70bd27, 0x25dfdbff, {}, [@L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @dev={0xac, 0x14, 0x14, 0x35}}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x44045}, 0x8000)

22:46:56 executing program 0:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
sendmsg$AUDIT_ADD_RULE(r0, &(0x7f0000000540)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000500)={&(0x7f00000000c0)={0x424, 0x3f3, 0x1, 0x70bd27, 0x25dfdbfc, {0x1, 0x1, 0x2f, [0x8, 0xfe3, 0x67, 0xaa26, 0xfff, 0xb294, 0x400, 0x3, 0x0, 0x9, 0xfffffbff, 0x5, 0x5, 0x1000, 0x3, 0x1, 0x9, 0xb9a0, 0x80, 0x100, 0x3, 0x5, 0x5, 0x9, 0x1bd3, 0x1, 0x0, 0x8, 0x100, 0x80000000, 0xffffff16, 0x9, 0x3, 0x7, 0x1, 0xfffffffb, 0xffffff80, 0x8, 0x1, 0x4, 0x174, 0xa3fd, 0x2, 0xfffffffa, 0x10001, 0x80000000, 0x3, 0x8, 0x2, 0x7fffffff, 0x565ce65f, 0xe47, 0x1f, 0x8, 0x8, 0x1, 0x9, 0xffffffff, 0x7a0, 0x101, 0xfffffff8, 0x3, 0x8, 0x7f], [0x1000, 0xfffeffff, 0x1, 0x30b, 0x9, 0x1, 0x6, 0x0, 0x6, 0x1ff, 0x3, 0x1, 0x2, 0xa13a, 0x5, 0x4, 0x1ff, 0x1, 0x8, 0x1ff, 0x2, 0xbb, 0x3, 0x2, 0x94, 0x9, 0x3, 0xffff, 0x6, 0x5, 0x9, 0x7, 0x8, 0x7, 0xa3, 0x5, 0x4, 0x6, 0xca, 0x80, 0x1, 0xdadb, 0x2, 0xd6, 0x10000, 0x4, 0x0, 0x5c88f700, 0x5, 0x31f1, 0x3, 0x6, 0x7fffffff, 0x7fff, 0x8, 0x5, 0x0, 0xffffff7f, 0x5, 0x1, 0x7, 0x5, 0x1f, 0xffffffff], [0xba, 0xbbc, 0x56a6, 0x401, 0x4, 0x6, 0x4, 0xc976, 0x1, 0x1, 0x6, 0x4, 0x8e4, 0x2, 0x4bd933c8, 0x5, 0x4, 0x81, 0x1ff, 0x5, 0x40, 0x8, 0x3, 0xb69, 0x1, 0x4, 0x1, 0x1, 0x5, 0x9, 0x101, 0x10001, 0x401, 0xf60, 0x2, 0x9, 0x6, 0xfffffffd, 0x3, 0x6, 0x81, 0x3, 0x8, 0x9, 0x5, 0xf1, 0xfffffffb, 0x9, 0x5, 0x8, 0x4, 0x3, 0x5, 0x4, 0x4, 0x2, 0x5316, 0x4, 0x9, 0x80000001, 0xfffff7f7, 0x3f, 0x1f, 0x4], [0xfff, 0x2, 0x800, 0x943, 0x8, 0xffffffff, 0x7f, 0x9, 0x690, 0x4, 0x5, 0xfffffff8, 0x7ff, 0x1, 0x0, 0x5, 0x8, 0xacb8, 0x7, 0x7, 0x1760, 0x8001, 0x0, 0x0, 0x401, 0x7, 0x2, 0xe8b, 0x266, 0x3f, 0x10001, 0x5, 0xff, 0x80000001, 0x0, 0xfffffffc, 0x7, 0x2, 0xfff, 0x4, 0x8, 0x6, 0x80000001, 0x401, 0xda, 0x7f, 0x0, 0x7bb, 0x3, 0x1, 0x7, 0x5, 0xdb8, 0x7fff, 0xd8c, 0x9, 0x3, 0x2, 0x202, 0x1, 0x20, 0x2, 0xa61e], 0x1, ['\x00']}, ["", "", ""]}, 0x424}, 0x1, 0x0, 0x0, 0x40000}, 0x40) (async)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x24000, 0x0) (async)
write$ppp(0xffffffffffffffff, 0x0, 0x0)

22:46:56 executing program 2:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
write$ppp(r0, &(0x7f00000002c0)="d3", 0x1) (async)
r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc00, 0x0)
ioctl$PPPIOCGIDLE64(r1, 0x8010743f, &(0x7f0000000040))

22:46:56 executing program 4:
openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x6dfc01, 0x0)

22:46:56 executing program 5:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x84d00, 0x0)
write$ppp(r0, &(0x7f00000002c0)="d3", 0x1f4f33)

22:46:56 executing program 5:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x84d00, 0x0)
write$ppp(r0, &(0x7f00000002c0)="d3", 0x1f4f33)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x84d00, 0x0) (async)
write$ppp(r0, &(0x7f00000002c0)="d3", 0x1f4f33) (async)

22:46:56 executing program 1:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
write$ppp(r0, 0x0, 0xeffdffff) (async)
sendmsg$AUDIT_TRIM(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x3f6, 0x20, 0x70bd25, 0x25dfdbfe, "", [""]}, 0x10}}, 0x20000804)

22:46:56 executing program 4:
openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x6dfc01, 0x0)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x6dfc01, 0x0) (async)

22:46:56 executing program 2:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
write$ppp(r0, &(0x7f00000002c0)="d3", 0x1) (async)
r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc00, 0x0)
ioctl$PPPIOCGIDLE64(r1, 0x8010743f, &(0x7f0000000040))

22:46:56 executing program 1:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
write$ppp(r0, 0x0, 0xeffdffff) (async)
write$ppp(r0, 0x0, 0xeffdffff)
sendmsg$AUDIT_TRIM(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x3f6, 0x20, 0x70bd25, 0x25dfdbfe, "", [""]}, 0x10}}, 0x20000804)

22:46:56 executing program 5:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(r0, 0x10f, 0x86)
r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="10002abd7000fcdb5f250800000008000a00030000000c00160000000100000000000500130005000000fe073666ccfef29ad6e8272f453a7cc96676fa1d8b97df496394d2261a3aa07ab61f12b094d2b1e3266c72f180567fce071ef78d6b5b"], 0x30}, 0x1, 0x0, 0x0, 0x4010}, 0x44040)
r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
write$ppp(r2, &(0x7f00000002c0)="d3", 0x1f4f33)
r3 = openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x8000, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(r3, 0x10f, 0x86)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x2f, 0xff, 0xff, 0x4, 0x14, @rand_addr=' \x01\x00', @mcast1, 0x700, 0x7800, 0x0, 0x8}})

22:46:56 executing program 2:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
write$ppp(r0, &(0x7f00000002c0)="d3", 0x1)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(r1, 0x10f, 0x86)
ioctl$PPPIOCATTACH(r1, 0x4004743d, &(0x7f0000000000)=0x3)

22:46:56 executing program 3:
rt_sigtimedwait(&(0x7f0000000000)={[0x5]}, &(0x7f00000001c0), &(0x7f0000000040), 0x8)
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(r1, 0x10f, 0x86)
ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x9, 0x9, 0x0, 0x1, 0x6, 0x14, "c82e22ab08c9a720caedfdc730d1e9596b3d9496cb06aedda106de761e3352ee4908868f7eaa0d8305970d1664860467e7f362683220d5659f4c13e0f17f2472", "4ef10f583399500fba6e96400a51fb56e38a37341f5c83aec2b664d4d3c35c31916bb105fa2a3a8f451ede7e82d3353531c0ad442016844a18cd39f2519cd34b", "c3fb5998fccb40b80efdd3651dc49834b360412286c3e70c9933ae2d2899fce5", [0x9, 0xffff]})
write$ppp(r0, &(0x7f00000002c0)="d3", 0xfffffdef)

22:46:56 executing program 0:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x60000, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'vxcan1\x00', <r1=>0x0})
bind$can_j1939(r0, &(0x7f00000000c0)={0x1d, r1, 0x1, {0x1, 0x0, 0x1}, 0xfd}, 0x18)
r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x7dac41, 0x0)
write$ppp(r2, 0x0, 0xeffdffffffffffff)

22:46:56 executing program 4:
openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x6dfc01, 0x0)

22:46:57 executing program 1:
openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x10400, 0x0)
openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0)
socket$tipc(0x1e, 0x7, 0x0)
socketpair(0x15, 0x0, 0xfff, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = syz_open_dev$loop(&(0x7f00000000c0), 0x146, 0x1)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$LOOP_SET_FD(r1, 0x4c00, r2)
setsockopt$TIPC_MCAST_REPLICAST(r0, 0x10f, 0x86)
r3 = openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(r3, 0x10f, 0x86)
r4 = openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(r4, 0x10f, 0x86)
socketpair(0x10, 0x80000, 0x2, &(0x7f0000000100)={<r5=>0xffffffffffffffff})
sendmsg$AUDIT_GET_FEATURE(r5, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x10, 0x3fb, 0x2, 0x70bd29, 0x25dfdbfd, "", ["", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
write$ppp(r4, 0x0, 0xc)

22:46:57 executing program 3:
rt_sigtimedwait(&(0x7f0000000000)={[0x5]}, &(0x7f00000001c0), &(0x7f0000000040), 0x8) (async)
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) (async)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(r1, 0x10f, 0x86) (async)
ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x9, 0x9, 0x0, 0x1, 0x6, 0x14, "c82e22ab08c9a720caedfdc730d1e9596b3d9496cb06aedda106de761e3352ee4908868f7eaa0d8305970d1664860467e7f362683220d5659f4c13e0f17f2472", "4ef10f583399500fba6e96400a51fb56e38a37341f5c83aec2b664d4d3c35c31916bb105fa2a3a8f451ede7e82d3353531c0ad442016844a18cd39f2519cd34b", "c3fb5998fccb40b80efdd3651dc49834b360412286c3e70c9933ae2d2899fce5", [0x9, 0xffff]})
write$ppp(r0, &(0x7f00000002c0)="d3", 0xfffffdef)

22:46:57 executing program 2:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
write$ppp(r0, &(0x7f00000002c0)="d3", 0x1) (async)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(r1, 0x10f, 0x86) (async)
ioctl$PPPIOCATTACH(r1, 0x4004743d, &(0x7f0000000000)=0x3)

22:46:57 executing program 0:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x60000, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'vxcan1\x00', <r1=>0x0})
bind$can_j1939(r0, &(0x7f00000000c0)={0x1d, r1, 0x1, {0x1, 0x0, 0x1}, 0xfd}, 0x18)
r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x7dac41, 0x0)
write$ppp(r2, 0x0, 0xeffdffffffffffff)

22:46:57 executing program 4:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
sendmsg$AUDIT_SET_FEATURE(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x20, 0x3fa, 0x200, 0x50bd2a, 0x25dfdbfa, {0x1, 0x1, 0x0, 0x1}, ["", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x400c9}, 0x80)
r1 = getuid()
setuid(r1)
quotactl_fd$Q_QUOTAON(r0, 0xffffffff80000200, r1, &(0x7f0000000000)='./file0\x00')
write$ppp(r0, 0x0, 0x0)

22:46:57 executing program 5:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(r0, 0x10f, 0x86)
r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="10002abd7000fcdb5f250800000008000a00030000000c00160000000100000000000500130005000000fe073666ccfef29ad6e8272f453a7cc96676fa1d8b97df496394d2261a3aa07ab61f12b094d2b1e3266c72f180567fce071ef78d6b5b"], 0x30}, 0x1, 0x0, 0x0, 0x4010}, 0x44040) (async, rerun: 32)
r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0) (rerun: 32)
write$ppp(r2, &(0x7f00000002c0)="d3", 0x1f4f33)
r3 = openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x8000, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(r3, 0x10f, 0x86) (async)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x2f, 0xff, 0xff, 0x4, 0x14, @rand_addr=' \x01\x00', @mcast1, 0x700, 0x7800, 0x0, 0x8}})

22:46:57 executing program 3:
rt_sigtimedwait(&(0x7f0000000000)={[0x5]}, &(0x7f00000001c0), &(0x7f0000000040), 0x8) (async)
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(r1, 0x10f, 0x86) (async)
ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x9, 0x9, 0x0, 0x1, 0x6, 0x14, "c82e22ab08c9a720caedfdc730d1e9596b3d9496cb06aedda106de761e3352ee4908868f7eaa0d8305970d1664860467e7f362683220d5659f4c13e0f17f2472", "4ef10f583399500fba6e96400a51fb56e38a37341f5c83aec2b664d4d3c35c31916bb105fa2a3a8f451ede7e82d3353531c0ad442016844a18cd39f2519cd34b", "c3fb5998fccb40b80efdd3651dc49834b360412286c3e70c9933ae2d2899fce5", [0x9, 0xffff]}) (async)
write$ppp(r0, &(0x7f00000002c0)="d3", 0xfffffdef)

22:46:57 executing program 1:
openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0) (async)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x10400, 0x0) (async)
openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0) (async)
socket$tipc(0x1e, 0x7, 0x0) (async)
socketpair(0x15, 0x0, 0xfff, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff}) (async)
r1 = syz_open_dev$loop(&(0x7f00000000c0), 0x146, 0x1) (async)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$LOOP_SET_FD(r1, 0x4c00, r2)
setsockopt$TIPC_MCAST_REPLICAST(r0, 0x10f, 0x86) (async)
r3 = openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(r3, 0x10f, 0x86)
r4 = openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(r4, 0x10f, 0x86) (async)
socketpair(0x10, 0x80000, 0x2, &(0x7f0000000100)={<r5=>0xffffffffffffffff})
sendmsg$AUDIT_GET_FEATURE(r5, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x10, 0x3fb, 0x2, 0x70bd29, 0x25dfdbfd, "", ["", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
write$ppp(r4, 0x0, 0xc)

22:46:57 executing program 2:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
write$ppp(r0, &(0x7f00000002c0)="d3", 0x1)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(r1, 0x10f, 0x86)
ioctl$PPPIOCATTACH(r1, 0x4004743d, &(0x7f0000000000)=0x3)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0) (async)
write$ppp(r0, &(0x7f00000002c0)="d3", 0x1) (async)
openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0) (async)
setsockopt$TIPC_MCAST_REPLICAST(r1, 0x10f, 0x86) (async)
ioctl$PPPIOCATTACH(r1, 0x4004743d, &(0x7f0000000000)=0x3) (async)

22:46:57 executing program 0:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x60000, 0x0) (async, rerun: 64)
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'vxcan1\x00', <r1=>0x0}) (rerun: 64)
bind$can_j1939(r0, &(0x7f00000000c0)={0x1d, r1, 0x1, {0x1, 0x0, 0x1}, 0xfd}, 0x18)
r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x7dac41, 0x0)
write$ppp(r2, 0x0, 0xeffdffffffffffff)

22:46:57 executing program 4:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
sendmsg$AUDIT_SET_FEATURE(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x20, 0x3fa, 0x200, 0x50bd2a, 0x25dfdbfa, {0x1, 0x1, 0x0, 0x1}, ["", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x400c9}, 0x80)
r1 = getuid()
setuid(r1) (async)
setuid(r1)
quotactl_fd$Q_QUOTAON(r0, 0xffffffff80000200, r1, &(0x7f0000000000)='./file0\x00') (async)
quotactl_fd$Q_QUOTAON(r0, 0xffffffff80000200, r1, &(0x7f0000000000)='./file0\x00')
write$ppp(r0, 0x0, 0x0)

22:46:57 executing program 4:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
sendmsg$AUDIT_SET_FEATURE(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x20, 0x3fa, 0x200, 0x50bd2a, 0x25dfdbfa, {0x1, 0x1, 0x0, 0x1}, ["", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x400c9}, 0x80)
r1 = getuid()
setuid(r1)
quotactl_fd$Q_QUOTAON(r0, 0xffffffff80000200, r1, &(0x7f0000000000)='./file0\x00')
write$ppp(r0, 0x0, 0x0)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0) (async)
sendmsg$AUDIT_SET_FEATURE(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x20, 0x3fa, 0x200, 0x50bd2a, 0x25dfdbfa, {0x1, 0x1, 0x0, 0x1}, ["", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x400c9}, 0x80) (async)
getuid() (async)
setuid(r1) (async)
quotactl_fd$Q_QUOTAON(r0, 0xffffffff80000200, r1, &(0x7f0000000000)='./file0\x00') (async)
write$ppp(r0, 0x0, 0x0) (async)

22:46:57 executing program 0:
ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff)
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x5dec01, 0x0)
write$ppp(r0, 0x0, 0xeffdffffffffffff)

22:46:57 executing program 2:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
syz_io_uring_setup(0x4b31, &(0x7f0000000280)={0x0, 0x9bb0, 0x0, 0x0, 0x16e}, &(0x7f0000000300)=<r1=>0x0, &(0x7f0000000340))
r2 = syz_open_dev$loop(&(0x7f0000000380), 0x6, 0x80000)
syz_io_uring_submit(r1, 0x0, &(0x7f00000003c0)=@IORING_OP_FSYNC={0x3, 0x20, 0x0, @fd=r2, 0x0, 0x0, 0x0, 0x0, 0x1})
syz_io_uring_setup(0x97b, &(0x7f0000000140)={0x0, 0xfd9f, 0x2, 0x2, 0x2f2}, &(0x7f00000001c0), &(0x7f0000000200)=<r3=>0x0)
r4 = openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0)
ioctl$TUNSETOFFLOAD(r4, 0x400454d0, 0x10)
syz_io_uring_setup(0x2a05, &(0x7f0000001400)={0x0, 0xb8cf, 0x80, 0x2, 0x8e}, &(0x7f0000001480), &(0x7f00000014c0))
setsockopt$TIPC_MCAST_REPLICAST(r4, 0x10f, 0x86)
ioctl$TUNGETDEVNETNS(r0, 0x54e3, 0x0)
getsockopt$TIPC_NODE_RECVQ_DEPTH(r0, 0x10f, 0x83, &(0x7f0000001500), &(0x7f0000001540)=0x4)
syz_io_uring_submit(r1, r3, &(0x7f0000000240)=@IORING_OP_WRITE={0x17, 0x12, 0x4000, @fd=r4, 0x7f, &(0x7f0000000300)="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", 0x1000})
write$ppp(r0, &(0x7f00000002c0)="d3", 0x1)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000001380)={'syztnl1\x00', &(0x7f0000001300)={'syztnl1\x00', <r5=>0x0, 0x2f, 0xfa, 0xff, 0xfff, 0x20, @local, @private2, 0x20, 0x8000, 0x4, 0x3}})
ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f00000013c0)=r5)
r6 = socket$nl_audit(0x10, 0x3, 0x9)
sendmsg$AUDIT_TTY_SET(r6, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x18, 0x3f9, 0x100, 0x70bd2a, 0x25dfdbff, {0x1}, ["", "", "", "", "", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x4}, 0x2001005)

22:46:57 executing program 1:
openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x10400, 0x0)
openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0)
socket$tipc(0x1e, 0x7, 0x0)
socketpair(0x15, 0x0, 0xfff, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = syz_open_dev$loop(&(0x7f00000000c0), 0x146, 0x1)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$LOOP_SET_FD(r1, 0x4c00, r2)
setsockopt$TIPC_MCAST_REPLICAST(r0, 0x10f, 0x86)
r3 = openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(r3, 0x10f, 0x86)
r4 = openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(r4, 0x10f, 0x86)
socketpair(0x10, 0x80000, 0x2, &(0x7f0000000100)={<r5=>0xffffffffffffffff})
sendmsg$AUDIT_GET_FEATURE(r5, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x10, 0x3fb, 0x2, 0x70bd29, 0x25dfdbfd, "", ["", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
write$ppp(r4, 0x0, 0xc)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0) (async)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x10400, 0x0) (async)
openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0) (async)
socket$tipc(0x1e, 0x7, 0x0) (async)
socketpair(0x15, 0x0, 0xfff, &(0x7f0000000040)) (async)
syz_open_dev$loop(&(0x7f00000000c0), 0x146, 0x1) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
ioctl$LOOP_SET_FD(r1, 0x4c00, r2) (async)
setsockopt$TIPC_MCAST_REPLICAST(r0, 0x10f, 0x86) (async)
openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0) (async)
setsockopt$TIPC_MCAST_REPLICAST(r3, 0x10f, 0x86) (async)
openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0) (async)
setsockopt$TIPC_MCAST_REPLICAST(r4, 0x10f, 0x86) (async)
socketpair(0x10, 0x80000, 0x2, &(0x7f0000000100)) (async)
sendmsg$AUDIT_GET_FEATURE(r5, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x10, 0x3fb, 0x2, 0x70bd29, 0x25dfdbfd, "", ["", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (async)
write$ppp(r4, 0x0, 0xc) (async)

22:46:57 executing program 5:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(r0, 0x10f, 0x86) (async)
r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="10002abd7000fcdb5f250800000008000a00030000000c00160000000100000000000500130005000000fe073666ccfef29ad6e8272f453a7cc96676fa1d8b97df496394d2261a3aa07ab61f12b094d2b1e3266c72f180567fce071ef78d6b5b"], 0x30}, 0x1, 0x0, 0x0, 0x4010}, 0x44040) (async, rerun: 32)
r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0) (rerun: 32)
write$ppp(r2, &(0x7f00000002c0)="d3", 0x1f4f33)
r3 = openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x8000, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(r3, 0x10f, 0x86) (async)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x2f, 0xff, 0xff, 0x4, 0x14, @rand_addr=' \x01\x00', @mcast1, 0x700, 0x7800, 0x0, 0x8}})

22:46:57 executing program 3:
openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x40000, 0x0)
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
write$ppp(r0, &(0x7f00000002c0)="d3", 0xfffffdef)
syz_io_uring_setup(0x546a, &(0x7f0000000000)={0x0, 0x1de3, 0x10, 0x2, 0x12b}, &(0x7f00000000c0)=<r1=>0x0, &(0x7f0000000100))
syz_io_uring_submit(r1, 0x0, &(0x7f0000000180)=@IORING_OP_UNLINKAT={0x24, 0x14, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x200, 0x1})

22:46:57 executing program 4:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
write$ppp(r0, 0x0, 0x0)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(r1, 0x10f, 0x86)
pselect6(0x40, &(0x7f0000000040)={0x7c, 0x3ff, 0x0, 0x6, 0x9, 0x4, 0x898, 0x8}, &(0x7f00000000c0)={0x10000, 0x10001, 0xa826, 0x94, 0xff, 0xfff, 0x57c, 0x8000000000000000}, &(0x7f0000000100)={0x9, 0x5, 0x8, 0x4, 0x81, 0x32, 0xfffffffffffff18f, 0x2}, &(0x7f0000000140)={0x77359400}, &(0x7f00000001c0)={&(0x7f0000000180)={[0x4]}, 0x8})
ioctl$PPPIOCGIDLE32(r1, 0x8008743f, &(0x7f0000000000))

22:46:57 executing program 0:
ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) (async)
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x5dec01, 0x0)
write$ppp(r0, 0x0, 0xeffdffffffffffff)

22:46:57 executing program 2:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
syz_io_uring_setup(0x4b31, &(0x7f0000000280)={0x0, 0x9bb0, 0x0, 0x0, 0x16e}, &(0x7f0000000300)=<r1=>0x0, &(0x7f0000000340)) (async)
r2 = syz_open_dev$loop(&(0x7f0000000380), 0x6, 0x80000)
syz_io_uring_submit(r1, 0x0, &(0x7f00000003c0)=@IORING_OP_FSYNC={0x3, 0x20, 0x0, @fd=r2, 0x0, 0x0, 0x0, 0x0, 0x1}) (async)
syz_io_uring_setup(0x97b, &(0x7f0000000140)={0x0, 0xfd9f, 0x2, 0x2, 0x2f2}, &(0x7f00000001c0), &(0x7f0000000200)=<r3=>0x0) (async, rerun: 32)
r4 = openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0) (rerun: 32)
ioctl$TUNSETOFFLOAD(r4, 0x400454d0, 0x10) (async)
syz_io_uring_setup(0x2a05, &(0x7f0000001400)={0x0, 0xb8cf, 0x80, 0x2, 0x8e}, &(0x7f0000001480), &(0x7f00000014c0)) (async)
setsockopt$TIPC_MCAST_REPLICAST(r4, 0x10f, 0x86) (async)
ioctl$TUNGETDEVNETNS(r0, 0x54e3, 0x0) (async)
getsockopt$TIPC_NODE_RECVQ_DEPTH(r0, 0x10f, 0x83, &(0x7f0000001500), &(0x7f0000001540)=0x4)
syz_io_uring_submit(r1, r3, &(0x7f0000000240)=@IORING_OP_WRITE={0x17, 0x12, 0x4000, @fd=r4, 0x7f, &(0x7f0000000300)="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", 0x1000}) (async)
write$ppp(r0, &(0x7f00000002c0)="d3", 0x1) (async)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000001380)={'syztnl1\x00', &(0x7f0000001300)={'syztnl1\x00', <r5=>0x0, 0x2f, 0xfa, 0xff, 0xfff, 0x20, @local, @private2, 0x20, 0x8000, 0x4, 0x3}})
ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f00000013c0)=r5)
r6 = socket$nl_audit(0x10, 0x3, 0x9)
sendmsg$AUDIT_TTY_SET(r6, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x18, 0x3f9, 0x100, 0x70bd2a, 0x25dfdbff, {0x1}, ["", "", "", "", "", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x4}, 0x2001005)

22:46:57 executing program 4:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
write$ppp(r0, 0x0, 0x0)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(r1, 0x10f, 0x86) (async, rerun: 32)
pselect6(0x40, &(0x7f0000000040)={0x7c, 0x3ff, 0x0, 0x6, 0x9, 0x4, 0x898, 0x8}, &(0x7f00000000c0)={0x10000, 0x10001, 0xa826, 0x94, 0xff, 0xfff, 0x57c, 0x8000000000000000}, &(0x7f0000000100)={0x9, 0x5, 0x8, 0x4, 0x81, 0x32, 0xfffffffffffff18f, 0x2}, &(0x7f0000000140)={0x77359400}, &(0x7f00000001c0)={&(0x7f0000000180)={[0x4]}, 0x8}) (rerun: 32)
ioctl$PPPIOCGIDLE32(r1, 0x8008743f, &(0x7f0000000000))

22:46:57 executing program 0:
ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) (async)
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x5dec01, 0x0)
write$ppp(r0, 0x0, 0xeffdffffffffffff)

22:46:57 executing program 1:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5de401, 0x0)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x20800, 0x0)
r2 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000180)={'vcan0\x00', <r3=>0x0})
bind$can_j1939(r2, &(0x7f00000001c0)={0x1d, r3, 0x0, {0x1}}, 0x18)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000240)=[@sack_perm, @timestamp, @window={0x3, 0xf800, 0x8}, @sack_perm], 0x4)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000040)={'ip6gre0\x00', &(0x7f00000000c0)={'syztnl1\x00', r3, 0x29, 0x4, 0x7, 0x80, 0x78, @dev={0xfe, 0x80, '\x00', 0x28}, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x7800, 0x7800, 0xffffd49a}})
write$ppp(r0, 0x0, 0xeffdffff)
sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, 0x0, 0x200, 0x70bd27, 0x25dfdbfd}, 0x14}}, 0x40000)

22:46:57 executing program 0:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x181c00, 0x0)
write$ppp(r0, 0x0, 0xeffdffffffffffff)
socket$isdn_base(0x22, 0x3, 0x0)

22:46:57 executing program 1:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5de401, 0x0) (async)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x20800, 0x0) (async)
r2 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000180)={'vcan0\x00', <r3=>0x0})
bind$can_j1939(r2, &(0x7f00000001c0)={0x1d, r3, 0x0, {0x1}}, 0x18) (async)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000240)=[@sack_perm, @timestamp, @window={0x3, 0xf800, 0x8}, @sack_perm], 0x4) (async)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000040)={'ip6gre0\x00', &(0x7f00000000c0)={'syztnl1\x00', r3, 0x29, 0x4, 0x7, 0x80, 0x78, @dev={0xfe, 0x80, '\x00', 0x28}, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x7800, 0x7800, 0xffffd49a}})
write$ppp(r0, 0x0, 0xeffdffff) (async)
sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, 0x0, 0x200, 0x70bd27, 0x25dfdbfd}, 0x14}}, 0x40000)

22:46:57 executing program 4:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
write$ppp(r0, 0x0, 0x0)
openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0) (async)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(r1, 0x10f, 0x86) (async)
setsockopt$TIPC_MCAST_REPLICAST(r1, 0x10f, 0x86)
pselect6(0x40, &(0x7f0000000040)={0x7c, 0x3ff, 0x0, 0x6, 0x9, 0x4, 0x898, 0x8}, &(0x7f00000000c0)={0x10000, 0x10001, 0xa826, 0x94, 0xff, 0xfff, 0x57c, 0x8000000000000000}, &(0x7f0000000100)={0x9, 0x5, 0x8, 0x4, 0x81, 0x32, 0xfffffffffffff18f, 0x2}, &(0x7f0000000140)={0x77359400}, &(0x7f00000001c0)={&(0x7f0000000180)={[0x4]}, 0x8})
ioctl$PPPIOCGIDLE32(r1, 0x8008743f, &(0x7f0000000000))

22:46:57 executing program 2:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0) (async)
syz_io_uring_setup(0x4b31, &(0x7f0000000280)={0x0, 0x9bb0, 0x0, 0x0, 0x16e}, &(0x7f0000000300)=<r1=>0x0, &(0x7f0000000340)) (async)
r2 = syz_open_dev$loop(&(0x7f0000000380), 0x6, 0x80000)
syz_io_uring_submit(r1, 0x0, &(0x7f00000003c0)=@IORING_OP_FSYNC={0x3, 0x20, 0x0, @fd=r2, 0x0, 0x0, 0x0, 0x0, 0x1}) (async)
syz_io_uring_setup(0x97b, &(0x7f0000000140)={0x0, 0xfd9f, 0x2, 0x2, 0x2f2}, &(0x7f00000001c0), &(0x7f0000000200)=<r3=>0x0) (async)
r4 = openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0)
ioctl$TUNSETOFFLOAD(r4, 0x400454d0, 0x10) (async)
syz_io_uring_setup(0x2a05, &(0x7f0000001400)={0x0, 0xb8cf, 0x80, 0x2, 0x8e}, &(0x7f0000001480), &(0x7f00000014c0))
setsockopt$TIPC_MCAST_REPLICAST(r4, 0x10f, 0x86) (async)
ioctl$TUNGETDEVNETNS(r0, 0x54e3, 0x0)
getsockopt$TIPC_NODE_RECVQ_DEPTH(r0, 0x10f, 0x83, &(0x7f0000001500), &(0x7f0000001540)=0x4)
syz_io_uring_submit(r1, r3, &(0x7f0000000240)=@IORING_OP_WRITE={0x17, 0x12, 0x4000, @fd=r4, 0x7f, &(0x7f0000000300)="a59628a276402fec7f4b4e2d390cbce2d768cc0ebc18ac523449a10946ab0e652567e480f33f2800fafbbcc0d825665f1dd4b4930dfb0d9da14e5023c7ffee044e2760f343bcae162484a44684c2c574737a2d1ad6b1ac03b57b7728c7603a0689b362c0d449ce179fc901903e8cd8393ef7143626e297015960d55b3b5cf1ad7d65fc5ed58709a97c8141c8720fc5adc22e2a96aebd05c1077857a6119d0c2563a1532cc7488722f4edc3d180babe86db28e7bd808d8a6136735167346b06a83dc0cffbc1d362797d39bb7be1d959ac1d913c7a2a7c7e43b1fd24bf5907b8e5903441a5b9811baa46d3fde83e55f6ef6903ef064d00cf97bcb2839a3bac2164f1d9fe84c916b1b7f17385e760513e1f0ae15ea1d1e18439060cb8f4202971bfac5af01153eaf27274c81b39cfdf68a2d9ac81c0a0a3db16e43307f351408dafa3426a2d697bdbe2533f0a0f23b6b02710578ab52c46673f109886fb5b8e6f2d0a8a2f6207163608d55a7d3d46674839edf5e5667a086c6460d3e3c15010e1318a34d4751e2221ff5a8695d3d3940aae1da28bfdcf3d254c4b2cfd2021262431f73927586a732679293b66488e918a71a9497a717997b5448e65c92159d8806c725b30748703fb092ae5a51d0ac3761abadef026ff3d4de1cfb34591447e7b5c2a6f3e60ae81f56e6cb0debb6ca60d05b59df44a505b5a53d53e56d396348d43112ab857b7958366187241f3d32c2b00e45a738a836958b5cf59fb9a99566b25805c05ed993c47df5f2c0fe9692aa7d40af1f70b3b2d647860f3fc9d45f3dc188cb911cf4cf56585f8dad1aef210b74c26ac72f7c105c77792d632f2c166a255be39f901f55b32e68b5fc5bf0718704695d699eb7bb3696a517763c3e954cd6da0d176d9a6a30867601c94bbe6b66fff053fc8e2712bbfc34eabaa5cd3c19858d57d96cfb97e544ad1ef7282e2e79a98ab2554fd0a1777dcf4a0642ea9c89713250c0a4fbb48af540e8ff507ad3111be64879257571e0554690041e17afb70f47fb73dc6ad09e7c963117cb8a1092c3d8b5506ed1db342fde6c356ef5879cc71a609cabb92d87d4f40990fd78e54bb686bf8e838e542f7b9d969da755fd9d469c0b355345ee6e3d5ef8ad4dd73f30289b7bcd62f69187ff9dc84eb69f0221037084b97b18d57d7ab4b5edc3bf33ce2461b7bc05fcf1c8d21377c740d5a1374a82524313b0e73bcb8ea18be9243ff86ac371cdbcbe37a9439f34453e6e979d71da186e7ecd56d25dd336db032a351f7a6192291167c81b9ed9a6710e5fc74661242706c315d4c0e130359bace1283e9a9b06033c21620be65e258eacd115215a422da875b14411f4c3672deaa96f10285090a72855828ac1028f15045188f629cf338fdb17a781e5fdbffd3147684aa8e970bb40c04d35632f660319edec53b2377b2ae7061442c6b394d0ce481e2eb76bb217a4353471d0bb40aba69af0ec12ec49c6d6f3be04b229e7f87e439d6f38f47b1d95572acc8b389341c195cee4f2cf9f61d85b15f86eba9ba3f580ffe27c6d5fd95e80ce8aaade9a23172708180f471d3d377f55282a594797048398614590398afb5a566298b12e6b257e9af2506093c0a74082b59f466022dbd11904de20f999223193ae686d0300bf625806a83602bf1de0ce107b2c86b1602f6b3c08cbfb4682e3625c4a0ea354b7b35b5d9a7e3a962281e48074ac4a717f2e68199ab7bbbc6020e7dac70c39a36c7fe645fa3577fe31928618f0c2dbcad36fc878e68dbbb1a6fdd3a3c6d0a855ba6d50edd800c2eda6d8b591d272268e31485795de748cbb0b887d820210c9e7bb6ad19f61082c670368b029c2b9aaa12689ac1cc25b657f3c48d4035b522df6101e0aaca73468577875f59762bc405edbd23882cdb82ffe33a38f45d6caf00aa98d1dc6fcdcf9fb828c08937eb46f979c0c72beaebec590cb8b9ed0b5c0e6eeecf220defd40c59cd0e9c883c1816e7c4254beb39ddc3e06c748d87243678516c1ddf21c8562ea64a1f7af0e532e4ad6bfe3308c685ff208bc1fa99033f2e3d7971156a5be6b0f1ef76a2f3ddaeb8a8c88f7bbb6210c4be7545a3b382fa8e178e016bbe9f3b3163a79c70345be0de73cdda19f50b79c6e995609be14e2a743da2a9ab639ad0d848ed78bbeb4d40c6c5536e2abeb88de03ff0f08d49beff7f0d36f4669a1e80c2cf26c5faa7255794eb4811a8af9eff1af54bc85e3813c41debf02af7fd5ec05db3086d3daba010b4f6f3d7868a38627efa917b5ab58c6c8cf5a4cc835faba48d306f447e645f97b9bce42b7bbc522bef4ae30b70de95ecf5016229ce8859af875ac84799050faadc965328a5159c3786e6ae3fba643cc54d320020149b1832d3e0651ed31373cef1b8aa7b1c06e89d53c38f5607259ecfd4161fdb80b3fc3759d29880137c3f97b89f85b2f729c35e7f60a795ddcb7fef956b00b13ea0c26b4dcf337d70fda7e8fdbbd59f91b9a0afd5c386c0d656ba2c10e969f35a83796ba5b7c7a241a29316968a3f985c6bef5a854077249d7f8c38761240892303669b3742680f39949382a797001c760045993b88d23542a618e8f2cab347750752f67ffe0e7429ee454081ca22edb186653a7b7822e5a77919ab96109dc9e6630a449058671cd578ddaed56f092945e146f46f3ee9f71d9f866c353572924471ccd4f160806e0e0c0a3097076afceb9bae10067b1e5688cebb328a3d9734d27089e3bcfe6d0e99319000cb3af024a940769a31b71b9d12318023ce9b507b578bd4b73c0cec50e03f11e5c84ed6e6076a9ee991658b526d1fd94d06a66ea7c0e6fed0b74c6e431e19e395d759904b9d777d864bba43c0059533203a69d9b4c1590fce561fe301b1bc899fd97ce89dfb2109788c3079c13c45e1c2530ffb5503b851a04c74b719177a2e45e03fa1bb4486142b5aac880bc2bc8f219a36986bda153b77fde225426a9e86f65cbfa4cc3d808018df155eaa557818b97e2374cd504c573d8369f0ded0f5badf70ea7fc8889ef0eb838149f56693785cbc0b6470c4636108c39603e39f42f71a587d471b41e371e7ca3c28dea722d1271b873262f9495b0cc30fe95b0229df6f297e151dbe0ad307dd4e7ac8c4259d1cf56f07738354e404cba1fb9a0272c83ae0b3c7cc38a9b6c4011f185c2e762c07e62a78a46f611a264359ad25577cc9b5e45ace14bd5d1e85b6668b28a85adf30c8d77aa4e7b5aa5167b0d817d4796324d8e4e5f5baaaf76392e576ea274f8b5eb5f8586850f859634b24b08c3e7bdd9961d8c2f37fc717d000f30994e4976ac3b0e1f0e05c07f161fb8e2af80869a48cdd6fd62a257bc5103b84a3fb9924ca97e0c6b2ff50b6ec25d0a7b7a04ce98eae44bdbbd1383fa6dc7efa8d8d5e5d2d30f1b173a3cbee3a272eeb90838af91520f4bc28da710afd9d9195cc468ab72aeae50bc5bc2294d9f1e6d9b052ccec6252f23d74e4e85f83d784e6f491d51bd47680c747fb81c94e6360456a4f41a1d4738cff994c54c9485442b499183a88dffd6f52450c3e057ea824828e276938a7c30e512763401d7120a262b035f312af54f37b8ea0854640da832475255a385aaa6bb8fc23e55d50db08824eea49549c32c029603c818f61336f7e35572a383454ac8bde60d3efe1eac9d7761dab17c9e440d07f82d97e97ce1d6e3727aec82c411d402d8e58da8d3d1b3e4e2f8e3b89dff6b723988434491b301e8554b822c3a413c863ae20592f79554968f3e62dace2be4013bf898ae0f2513514a5088ca20e6f936db829df1a94d4b6f6523f1a1bb0568d2803f0ac81fa80b6d736e411ae87a989d7023da3adb906458306cae5a5e076670ac4303f9c064075c5c58790fb4561ff8fcf9971b5d2e4aa3bd1e2b9fe907ef0705db0b6d20cea4698385b31a3377bb66d87efb0ec48e44c6135493b60c24b41b321ac9c2935308bbeb25fd382d8d208994dab584d1d28fdec394af755501a722c8078c9621c7c041c515d118f7ce588f598e63853635387db64cd563f1b7e25304dc1ed16254476fcce9a75ccad3e0fe53cdff7034e35a997df828ef8f51998e51443022bf4eef35623a9f16062c3dbadde427b98db00a609ada44380799c6c31b3a679bd7b9d06d6a76fc3c70eba80339286a05be1e65bcaf93c735052ef6073c9bf1b401522feafffbbe4a6f9202db74d7eb5bdbc7e23b2715bafa88e4d5c8928b92ac97d60bee5cff05994ea9e32384304d71c1a01ce022323b5c0edf7d4a35abed399e3be752dc6cbf8daf24da7cbe167ad5364a2b68c22f0851b88424073901bc8a1d321959f2e21ac8e5200bf259c803073ad1c251d94ce334903a019031a17fabcad63934d2dda1f6ae250b3be8149c11da4d1161d57d93c0efecf2b94349e65e077e6e1ae449c741a4e6ca688706b330eb887f4acf0e14acac028ccb06b8320d28772aacef118dc3864ad16bbca7294dd34773cdea0774524218b24182e6ea4af075a35fe33e5d9972d047bcc05a387638652142482be38a707df3a030d101e6f78501d8378c169b56e931ceecba34c585c54712e3d3a45c49db044c53c82c7d0edda04786a931f53bc56b00aa982e9a31fc7c9b2ccfd9d3b522ab1f1c2cee5ca6d5015730bb0c5c33080648dcc3ad9686d99b5c76de0e7a9307f75aabb8ee9a7d31a7aed71339e0dc5121a42b133c882a818a59c6a13c78d04b90b8455db1d36b422e1eaa424c979aa032fe99c8ccccda0589f642fe7d8afe9d3c1116f371ccd08ea694e78887d738ab53db284e48badc5c44717f87ffd37658f20c7350d94683e4446a70bc363239cc8c21a5bc3d03efa845ee418e96e2c53d6d9963493d4b05a38948d3bb106c209a981bdfe66c208028e3599cb8a24f4165235c98ef2b9ada8fd4fe3bef88be5e516c477e304136ca521e8fd0506ba5ece06783132cdcf414650ab94d72e9ba787785e2207b81aa3d194e4b11dae1398f0288864b0233f6441259e70218fc5abf5d25d44786329c6b0c91a0eaf7f0118b391f32e4ce77bee8b6c49b4835287e0c95e37c228704ca626f7cceb4820dc2c5a219b42fcdbfc46e266fe758dc3a7b12c36f24f892cf838388325050e59e4b6707fa689a77025af8b1686653028c1cbfd919ea2791c8b8070bf778c3efea405b5ca28cece4d855ecf5a637539a40e4f3825b4bc48658142856361da753f0c66c3b5cbdd31567f7ea18ed28cbe3854517d06955be0f5b178817056eb6777c00592353eb55b634739eee43d7a3640a57261bddba634c20171359da93fc409c24b0eb2c62ffa03d79ade50f0d915e13f1e0ce4c242a3c7ab04b8822e4b0c1d52bd33ab908c91ab6721fd06921897f646419d6bf58d073887c6b75649202f5936cc8b30d56a5496d3a217ce4c93cf18346facd080bfd29940d743fd9a86eec81624910d237345f0413a812b70377e677498830b2c45c4e57f1c0eab19ca722afef9dbdd28b41d6ff766884df631b6d31d1536d50c73c480d9924940ddf44517d1f24a723b5a3162c45f9beaace8c0dc0b6a18cf0dd90196cf2d7674f6cd880031120943aa0998659c3565664e05fe3fb9b769f29f6869fd2320d640f3017497e83e243e170492fcc3ba63ebbfce74e4eb4abacfe7c299e6110cfe36fc35fa33770a02818510b3c92b3fb57b44b502282c5e13d0cc22f3cb41d21f3d3409c3840e93f5e67af6d67777053d4d106afc13e05c67b4688ff353b46ab033a05ea2bbeb5c94d2358480c0e62fc3", 0x1000}) (async)
write$ppp(r0, &(0x7f00000002c0)="d3", 0x1) (async)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000001380)={'syztnl1\x00', &(0x7f0000001300)={'syztnl1\x00', <r5=>0x0, 0x2f, 0xfa, 0xff, 0xfff, 0x20, @local, @private2, 0x20, 0x8000, 0x4, 0x3}})
ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f00000013c0)=r5) (async)
r6 = socket$nl_audit(0x10, 0x3, 0x9)
sendmsg$AUDIT_TTY_SET(r6, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x18, 0x3f9, 0x100, 0x70bd2a, 0x25dfdbff, {0x1}, ["", "", "", "", "", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x4}, 0x2001005)

22:46:57 executing program 5:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5dec01, 0x0)
write$ppp(r0, &(0x7f00000002c0)="d3", 0x1f4f33)
r1 = opena