(0x7f0000005540)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000c80)=""/235, 0xeb}], 0x1}}], 0x1, 0x0, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendto(r0, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000b80)=@ethernet={0x0, @local}, 0x80, 0x0}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000ac0)=[{{&(0x7f0000000880)=@caif=@util, 0x80, &(0x7f0000000540)=[{&(0x7f0000000900)=""/128, 0x80}, {&(0x7f0000000980)=""/76, 0x4c}], 0x2}, 0x3f}], 0x1, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_SYS_GET(0xffffffffffffffff, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000a00)={0x0, 0x30}}, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x374, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x14b}, {&(0x7f0000000140)=""/85, 0x20a}, {&(0x7f0000000fc0)=""/4096, 0x773}, {&(0x7f0000000400)=""/106, 0x2ce}, {&(0x7f0000000740)=""/73, 0x3dd}, {&(0x7f0000000200)=""/77, 0x96}, {&(0x7f00000007c0)=""/154, 0x40d}, {&(0x7f0000000000)=""/22, 0xa}], 0x81, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) [ 252.352386][T16337] FAULT_INJECTION: forcing a failure. [ 252.352386][T16337] name failslab, interval 1, probability 0, space 0, times 0 [ 252.365745][T16337] CPU: 1 PID: 16337 Comm: syz-executor.1 Not tainted 5.7.0-rc6-syzkaller #0 [ 252.374675][T16337] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 252.384825][T16337] Call Trace: [ 252.388292][T16337] dump_stack+0x1e9/0x30e [ 252.392957][T16337] should_fail+0x433/0x5b0 [ 252.397759][T16337] ? skb_clone+0x1b2/0x370 [ 252.402272][T16337] should_failslab+0x5/0x20 [ 252.406910][T16337] kmem_cache_alloc+0x53/0x2d0 [ 252.411691][T16337] skb_clone+0x1b2/0x370 [ 252.416183][T16337] netlink_deliver_tap+0x478/0x810 [ 252.421440][T16337] ? sk_filter_trim_cap+0x45e/0x500 [ 252.427299][T16337] netlink_dump+0x67b/0x10d0 [ 252.431965][T16337] netlink_recvmsg+0x5fc/0xfe0 [ 252.437101][T16337] ? netlink_sendmsg+0xd70/0xd70 [ 252.442195][T16337] ____sys_recvmsg+0x24a/0x510 [ 252.447114][T16337] ? import_iovec+0x12a/0x2c0 [ 252.451984][T16337] do_recvmmsg+0x426/0x1470 [ 252.456632][T16337] ? _copy_from_user+0x116/0x170 [ 252.463499][T16337] ? get_timespec64+0x11e/0x1d0 [ 252.468610][T16337] __x64_sys_recvmmsg+0x135/0x1a0 [ 252.473932][T16337] do_syscall_64+0xf3/0x1b0 [ 252.479531][T16337] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 252.485618][T16337] RIP: 0033:0x45ca29 [ 252.489922][T16337] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 252.511919][T16337] RSP: 002b:00007ff1541f4c78 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 252.521895][T16337] RAX: ffffffffffffffda RBX: 00000000004fb6c0 RCX: 000000000045ca29 [ 252.531428][T16337] RDX: 04000000000003b4 RSI: 00000000200037c0 RDI: 0000000000000003 [ 252.540839][T16337] RBP: 000000000078bf00 R08: 0000000020003700 R09: 0000000000000000 08:39:06 executing program 5: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x10, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = socket$inet6(0xa, 0x1, 0x8010800000000084) r1 = socket$kcm(0x2, 0x0, 0x2) recvmsg(r1, &(0x7f0000007500)={&(0x7f0000006f80)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x80, 0x0, 0x0, 0xffffffffffffffff}, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmmsg$inet6(r0, &(0x7f00000000c0)=[{{&(0x7f0000002c80)={0xa, 0x0, 0x0, @loopback}, 0x1c, &(0x7f0000005000)=[{&(0x7f0000002cc0)="ea", 0x1}], 0x1}}], 0x1, 0x20000040) 08:39:06 executing program 2: shmget(0x0, 0x4000, 0x780012c9, &(0x7f0000ffc000/0x4000)=nil) shmctl$IPC_RMID(0x0, 0x0) shmat(0x0, &(0x7f0000ffe000/0x1000)=nil, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x2, 0x1) r1 = open(&(0x7f0000000080)='./bus\x00', 0x430c2, 0x0) ftruncate(r1, 0x200004) sendfile(r0, r1, 0x0, 0x80001d00c0d0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) [ 252.549575][T16337] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 252.558663][T16337] R13: 00000000000008a2 R14: 00000000004cb748 R15: 00007ff1541f56d4 [ 252.617747][T16342] IPVS: ftp: loaded support on port[0] = 21 08:39:06 executing program 5: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x10, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = socket$inet6(0xa, 0x1, 0x8010800000000084) r1 = socket$kcm(0x2, 0x0, 0x2) recvmsg(r1, &(0x7f0000007500)={&(0x7f0000006f80)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x80, 0x0, 0x0, 0xffffffffffffffff}, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmmsg$inet6(r0, &(0x7f00000000c0)=[{{&(0x7f0000002c80)={0xa, 0x0, 0x0, @loopback}, 0x1c, &(0x7f0000005000)=[{&(0x7f0000002cc0)="ea", 0x1}], 0x1}}], 0x1, 0x20000040) 08:39:06 executing program 2: shmget(0x0, 0x4000, 0x780012c9, &(0x7f0000ffc000/0x4000)=nil) shmctl$IPC_RMID(0x0, 0x0) shmat(0x0, &(0x7f0000ffe000/0x1000)=nil, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x2, 0x1) r1 = open(&(0x7f0000000080)='./bus\x00', 0x430c2, 0x0) ftruncate(r1, 0x200004) sendfile(r0, r1, 0x0, 0x80001d00c0d0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) [ 252.782428][T16373] IPVS: ftp: loaded support on port[0] = 21 08:39:06 executing program 5: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x10, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = socket$inet6(0xa, 0x1, 0x8010800000000084) r1 = socket$kcm(0x2, 0x0, 0x2) recvmsg(r1, &(0x7f0000007500)={&(0x7f0000006f80)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x80, 0x0, 0x0, 0xffffffffffffffff}, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmmsg$inet6(r0, &(0x7f00000000c0)=[{{&(0x7f0000002c80)={0xa, 0x0, 0x0, @loopback}, 0x1c, &(0x7f0000005000)=[{&(0x7f0000002cc0)="ea", 0x1}], 0x1}}], 0x1, 0x20000040) 08:39:06 executing program 2: shmget(0x0, 0x4000, 0x780012c9, &(0x7f0000ffc000/0x4000)=nil) shmctl$IPC_RMID(0x0, 0x0) shmat(0x0, &(0x7f0000ffe000/0x1000)=nil, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x2, 0x1) r1 = open(&(0x7f0000000080)='./bus\x00', 0x430c2, 0x0) ftruncate(r1, 0x200004) sendfile(r0, r1, 0x0, 0x80001d00c0d0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) 08:39:06 executing program 4: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x20000000003, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00'}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newlink={0x60, 0x10, 0x1, 0x70bd25, 0xa000000, {0x0, 0x0, 0x0, r4, 0x50800}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @ip6gretap={{0xe, 0x1, 'ip6gretap\x00'}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @ipv4={[], [], @private=0xa010100}}, @IFLA_GRE_REMOTE={0x14, 0x7, @remote}]}}}]}, 0x60}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00'}) 08:39:06 executing program 3: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x20000000003, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newlink={0x60, 0x10, 0x1, 0xfcffffff, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @ip6gretap={{0xe, 0x1, 'ip6gretap\x00'}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @ipv4={[], [], @loopback}}, @IFLA_GRE_REMOTE={0x14, 0x7, @remote}]}}}]}, 0x60}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00'}) 08:39:06 executing program 1 (fault-call:8 fault-nth:10): r0 = socket(0x10, 0x803, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000005540)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000c80)=""/235, 0xeb}], 0x1}}], 0x1, 0x0, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendto(r0, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000b80)=@ethernet={0x0, @local}, 0x80, 0x0}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000ac0)=[{{&(0x7f0000000880)=@caif=@util, 0x80, &(0x7f0000000540)=[{&(0x7f0000000900)=""/128, 0x80}, {&(0x7f0000000980)=""/76, 0x4c}], 0x2}, 0x3f}], 0x1, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_SYS_GET(0xffffffffffffffff, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000a00)={0x0, 0x30}}, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x374, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x14b}, {&(0x7f0000000140)=""/85, 0x20a}, {&(0x7f0000000fc0)=""/4096, 0x773}, {&(0x7f0000000400)=""/106, 0x2ce}, {&(0x7f0000000740)=""/73, 0x3dd}, {&(0x7f0000000200)=""/77, 0x96}, {&(0x7f00000007c0)=""/154, 0x40d}, {&(0x7f0000000000)=""/22, 0xa}], 0x81, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) [ 252.997786][T16409] IPVS: ftp: loaded support on port[0] = 21 [ 253.006233][T16410] FAULT_INJECTION: forcing a failure. [ 253.006233][T16410] name failslab, interval 1, probability 0, space 0, times 0 [ 253.054726][T16410] CPU: 0 PID: 16410 Comm: syz-executor.1 Not tainted 5.7.0-rc6-syzkaller #0 [ 253.065153][T16410] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 253.076607][T16410] Call Trace: [ 253.080030][T16410] dump_stack+0x1e9/0x30e [ 253.084368][T16410] should_fail+0x433/0x5b0 [ 253.088973][T16410] should_failslab+0x5/0x20 [ 253.093482][T16410] kmem_cache_alloc_node+0x64/0x290 [ 253.098693][T16410] ? __alloc_skb+0x94/0x4f0 [ 253.103334][T16410] __alloc_skb+0x94/0x4f0 [ 253.107764][T16410] netlink_dump+0x1a0/0x10d0 [ 253.112367][T16410] ? trace_irq_enable_rcuidle+0x1f/0x1d0 [ 253.118007][T16410] ? skb_free_datagram+0x24/0xd0 [ 253.123087][T16410] netlink_recvmsg+0x5fc/0xfe0 [ 253.127975][T16410] ? netlink_sendmsg+0xd70/0xd70 [ 253.133011][T16410] ____sys_recvmsg+0x24a/0x510 [ 253.137792][T16410] ? import_iovec+0x12a/0x2c0 [ 253.142657][T16410] do_recvmmsg+0x426/0x1470 [ 253.147276][T16410] ? _copy_from_user+0x116/0x170 [ 253.152258][T16410] ? get_timespec64+0x11e/0x1d0 [ 253.157350][T16410] __x64_sys_recvmmsg+0x135/0x1a0 [ 253.162580][T16410] do_syscall_64+0xf3/0x1b0 [ 253.167336][T16410] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 253.173319][T16410] RIP: 0033:0x45ca29 [ 253.177219][T16410] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 08:39:07 executing program 2: shmget(0x0, 0x4000, 0x780012c9, &(0x7f0000ffc000/0x4000)=nil) shmctl$IPC_RMID(0x0, 0x0) shmat(0x0, &(0x7f0000ffe000/0x1000)=nil, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x2, 0x1) r1 = open(&(0x7f0000000080)='./bus\x00', 0x430c2, 0x0) ftruncate(r1, 0x200004) sendfile(r0, r1, 0x0, 0x80001d00c0d0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) [ 253.197995][T16410] RSP: 002b:00007ff1541f4c78 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 253.206499][T16410] RAX: ffffffffffffffda RBX: 00000000004fb6c0 RCX: 000000000045ca29 [ 253.214802][T16410] RDX: 04000000000003b4 RSI: 00000000200037c0 RDI: 0000000000000003 [ 253.222779][T16410] RBP: 000000000078bf00 R08: 0000000020003700 R09: 0000000000000000 [ 253.230754][T16410] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 253.238833][T16410] R13: 00000000000008a2 R14: 00000000004cb748 R15: 00007ff1541f56d4 08:39:07 executing program 1 (fault-call:8 fault-nth:11): r0 = socket(0x10, 0x803, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000005540)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000c80)=""/235, 0xeb}], 0x1}}], 0x1, 0x0, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendto(r0, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000b80)=@ethernet={0x0, @local}, 0x80, 0x0}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000ac0)=[{{&(0x7f0000000880)=@caif=@util, 0x80, &(0x7f0000000540)=[{&(0x7f0000000900)=""/128, 0x80}, {&(0x7f0000000980)=""/76, 0x4c}], 0x2}, 0x3f}], 0x1, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_SYS_GET(0xffffffffffffffff, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000a00)={0x0, 0x30}}, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x374, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x14b}, {&(0x7f0000000140)=""/85, 0x20a}, {&(0x7f0000000fc0)=""/4096, 0x773}, {&(0x7f0000000400)=""/106, 0x2ce}, {&(0x7f0000000740)=""/73, 0x3dd}, {&(0x7f0000000200)=""/77, 0x96}, {&(0x7f00000007c0)=""/154, 0x40d}, {&(0x7f0000000000)=""/22, 0xa}], 0x81, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 08:39:07 executing program 3: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x20000000003, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newlink={0x60, 0x10, 0x1, 0xfe80ffff, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @ip6gretap={{0xe, 0x1, 'ip6gretap\x00'}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @ipv4={[], [], @loopback}}, @IFLA_GRE_REMOTE={0x14, 0x7, @remote}]}}}]}, 0x60}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00'}) 08:39:07 executing program 4: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x20000000003, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00'}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newlink={0x60, 0x10, 0x1, 0x70bd25, 0xb000000, {0x0, 0x0, 0x0, r4, 0x50800}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @ip6gretap={{0xe, 0x1, 'ip6gretap\x00'}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @ipv4={[], [], @private=0xa010100}}, @IFLA_GRE_REMOTE={0x14, 0x7, @remote}]}}}]}, 0x60}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00'}) 08:39:07 executing program 2: shmget(0x0, 0x4000, 0x780012c9, &(0x7f0000ffc000/0x4000)=nil) shmctl$IPC_RMID(0x0, 0x0) shmat(0x0, &(0x7f0000ffe000/0x1000)=nil, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x2, 0x1) r1 = open(&(0x7f0000000080)='./bus\x00', 0x430c2, 0x0) ftruncate(r1, 0x200004) sendfile(r0, r1, 0x0, 0x80001d00c0d0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) [ 253.422583][T16444] FAULT_INJECTION: forcing a failure. [ 253.422583][T16444] name failslab, interval 1, probability 0, space 0, times 0 08:39:07 executing program 5: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x10, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = socket$inet6(0xa, 0x1, 0x8010800000000084) socket$kcm(0x2, 0x3, 0x2) recvmsg(0xffffffffffffffff, &(0x7f0000007500)={&(0x7f0000006f80)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x80, 0x0, 0x0, 0xffffffffffffffff}, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmmsg$inet6(r0, &(0x7f00000000c0)=[{{&(0x7f0000002c80)={0xa, 0x0, 0x0, @loopback}, 0x1c, &(0x7f0000005000)=[{&(0x7f0000002cc0)="ea", 0x1}], 0x1}}], 0x1, 0x20000040) [ 253.469363][T16444] CPU: 1 PID: 16444 Comm: syz-executor.1 Not tainted 5.7.0-rc6-syzkaller #0 [ 253.478336][T16444] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 253.488614][T16444] Call Trace: [ 253.491922][T16444] dump_stack+0x1e9/0x30e [ 253.496261][T16444] should_fail+0x433/0x5b0 [ 253.500865][T16444] should_failslab+0x5/0x20 [ 253.505510][T16444] kmem_cache_alloc_node_trace+0x69/0x2b0 [ 253.511246][T16444] ? __kmalloc_node_track_caller+0x37/0x60 [ 253.519648][T16444] __kmalloc_node_track_caller+0x37/0x60 [ 253.525380][T16444] ? netlink_dump+0x1a0/0x10d0 [ 253.526410][T16464] IPVS: ftp: loaded support on port[0] = 21 [ 253.530261][T16444] __alloc_skb+0xde/0x4f0 [ 253.530277][T16444] netlink_dump+0x1a0/0x10d0 [ 253.530290][T16444] ? trace_irq_enable_rcuidle+0x1f/0x1d0 [ 253.530306][T16444] ? skb_free_datagram+0x24/0xd0 [ 253.556093][T16444] netlink_recvmsg+0x5fc/0xfe0 [ 253.561062][T16444] ? netlink_sendmsg+0xd70/0xd70 [ 253.567038][T16444] ____sys_recvmsg+0x24a/0x510 [ 253.571959][T16444] ? import_iovec+0x12a/0x2c0 [ 253.576649][T16444] do_recvmmsg+0x426/0x1470 [ 253.581187][T16444] ? _copy_from_user+0x116/0x170 [ 253.586137][T16444] ? get_timespec64+0x11e/0x1d0 [ 253.591171][T16444] __x64_sys_recvmmsg+0x135/0x1a0 [ 253.596444][T16444] do_syscall_64+0xf3/0x1b0 [ 253.601114][T16444] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 253.607226][T16444] RIP: 0033:0x45ca29 [ 253.611405][T16444] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 253.631817][T16444] RSP: 002b:00007ff1541f4c78 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 253.640417][T16444] RAX: ffffffffffffffda RBX: 00000000004fb6c0 RCX: 000000000045ca29 [ 253.648511][T16444] RDX: 04000000000003b4 RSI: 00000000200037c0 RDI: 0000000000000003 [ 253.658624][T16444] RBP: 000000000078bf00 R08: 0000000020003700 R09: 0000000000000000 08:39:07 executing program 2: shmget(0x0, 0x4000, 0x780012c9, &(0x7f0000ffc000/0x4000)=nil) shmctl$IPC_RMID(0x0, 0x0) shmat(0x0, &(0x7f0000ffe000/0x1000)=nil, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x2, 0x1) r1 = open(&(0x7f0000000080)='./bus\x00', 0x430c2, 0x0) ftruncate(r1, 0x200004) sendfile(r0, r1, 0x0, 0x80001d00c0d0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x0) [ 253.667005][T16444] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 253.675297][T16444] R13: 00000000000008a2 R14: 00000000004cb748 R15: 00007ff1541f56d4 08:39:07 executing program 3: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x20000000003, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newlink={0x60, 0x10, 0x1, 0xfec0ffff, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @ip6gretap={{0xe, 0x1, 'ip6gretap\x00'}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @ipv4={[], [], @loopback}}, @IFLA_GRE_REMOTE={0x14, 0x7, @remote}]}}}]}, 0x60}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00'}) 08:39:07 executing program 4: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x20000000003, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00'}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newlink={0x60, 0x10, 0x1, 0x70bd25, 0xc000000, {0x0, 0x0, 0x0, r4, 0x50800}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @ip6gretap={{0xe, 0x1, 'ip6gretap\x00'}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @ipv4={[], [], @private=0xa010100}}, @IFLA_GRE_REMOTE={0x14, 0x7, @remote}]}}}]}, 0x60}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00'}) 08:39:07 executing program 1 (fault-call:8 fault-nth:12): r0 = socket(0x10, 0x803, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000005540)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000c80)=""/235, 0xeb}], 0x1}}], 0x1, 0x0, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendto(r0, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000b80)=@ethernet={0x0, @local}, 0x80, 0x0}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000ac0)=[{{&(0x7f0000000880)=@caif=@util, 0x80, &(0x7f0000000540)=[{&(0x7f0000000900)=""/128, 0x80}, {&(0x7f0000000980)=""/76, 0x4c}], 0x2}, 0x3f}], 0x1, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_SYS_GET(0xffffffffffffffff, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000a00)={0x0, 0x30}}, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x374, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x14b}, {&(0x7f0000000140)=""/85, 0x20a}, {&(0x7f0000000fc0)=""/4096, 0x773}, {&(0x7f0000000400)=""/106, 0x2ce}, {&(0x7f0000000740)=""/73, 0x3dd}, {&(0x7f0000000200)=""/77, 0x96}, {&(0x7f00000007c0)=""/154, 0x40d}, {&(0x7f0000000000)=""/22, 0xa}], 0x81, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 08:39:07 executing program 5: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x10, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = socket$inet6(0xa, 0x1, 0x8010800000000084) socket$kcm(0x2, 0x3, 0x2) recvmsg(0xffffffffffffffff, &(0x7f0000007500)={&(0x7f0000006f80)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x80, 0x0, 0x0, 0xffffffffffffffff}, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmmsg$inet6(r0, &(0x7f00000000c0)=[{{&(0x7f0000002c80)={0xa, 0x0, 0x0, @loopback}, 0x1c, &(0x7f0000005000)=[{&(0x7f0000002cc0)="ea", 0x1}], 0x1}}], 0x1, 0x20000040) [ 253.843281][T16500] FAULT_INJECTION: forcing a failure. [ 253.843281][T16500] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 253.857031][T16500] CPU: 0 PID: 16500 Comm: syz-executor.1 Not tainted 5.7.0-rc6-syzkaller #0 [ 253.857090][T16503] IPVS: ftp: loaded support on port[0] = 21 [ 253.865847][T16500] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 253.865851][T16500] Call Trace: [ 253.865869][T16500] dump_stack+0x1e9/0x30e [ 253.865881][T16500] should_fail+0x433/0x5b0 [ 253.865894][T16500] ? __kasan_kmalloc+0x114/0x160 [ 253.865906][T16500] prepare_alloc_pages+0x28c/0x4a0 [ 253.865917][T16500] __alloc_pages_nodemask+0xbc/0x5e0 [ 253.865929][T16500] kmem_getpages+0x49/0x900 [ 253.865940][T16500] cache_grow_begin+0x7b/0x2e0 [ 253.865951][T16500] cache_alloc_refill+0x359/0x3f0 [ 253.865965][T16500] ? trace_irq_disable_rcuidle+0x1f/0x1d0 [ 253.931454][T16500] ? check_preemption_disabled+0xb0/0x240 [ 253.937200][T16500] ? debug_smp_processor_id+0x5/0x20 [ 253.942703][T16500] kmem_cache_alloc_node_trace+0x1bf/0x2b0 [ 253.948980][T16500] ? __kmalloc_node_track_caller+0x37/0x60 [ 253.955593][T16500] __kmalloc_node_track_caller+0x37/0x60 [ 253.961244][T16500] ? netlink_dump+0x1a0/0x10d0 [ 253.966177][T16500] __alloc_skb+0xde/0x4f0 [ 253.970529][T16500] netlink_dump+0x1a0/0x10d0 [ 253.975227][T16500] ? trace_irq_enable_rcuidle+0x1f/0x1d0 [ 253.980869][T16500] ? skb_free_datagram+0x24/0xd0 [ 253.985924][T16500] netlink_recvmsg+0x5fc/0xfe0 [ 253.991127][T16500] ? netlink_sendmsg+0xd70/0xd70 [ 253.996366][T16500] ____sys_recvmsg+0x24a/0x510 [ 254.001417][T16500] ? import_iovec+0x12a/0x2c0 [ 254.006250][T16500] do_recvmmsg+0x426/0x1470 [ 254.011311][T16500] ? _copy_from_user+0x116/0x170 [ 254.016946][T16500] ? get_timespec64+0x11e/0x1d0 [ 254.022017][T16500] __x64_sys_recvmmsg+0x135/0x1a0 [ 254.027289][T16500] do_syscall_64+0xf3/0x1b0 [ 254.031811][T16500] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 254.037715][T16500] RIP: 0033:0x45ca29 [ 254.041625][T16500] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 254.061806][T16500] RSP: 002b:00007ff1541f4c78 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 254.070529][T16500] RAX: ffffffffffffffda RBX: 00000000004fb6c0 RCX: 000000000045ca29 [ 254.078700][T16500] RDX: 04000000000003b4 RSI: 00000000200037c0 RDI: 0000000000000003 08:39:07 executing program 2: shmget(0x0, 0x4000, 0x780012c9, &(0x7f0000ffc000/0x4000)=nil) shmctl$IPC_RMID(0x0, 0x0) shmat(0x0, &(0x7f0000ffe000/0x1000)=nil, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x2, 0x1) r1 = open(&(0x7f0000000080)='./bus\x00', 0x430c2, 0x0) ftruncate(r1, 0x200004) sendfile(r0, r1, 0x0, 0x80001d00c0d0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x0) 08:39:07 executing program 2: shmget(0x0, 0x4000, 0x780012c9, &(0x7f0000ffc000/0x4000)=nil) shmctl$IPC_RMID(0x0, 0x0) shmat(0x0, &(0x7f0000ffe000/0x1000)=nil, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x2, 0x1) r1 = open(&(0x7f0000000080)='./bus\x00', 0x430c2, 0x0) ftruncate(r1, 0x200004) sendfile(r0, r1, 0x0, 0x80001d00c0d0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x0) [ 254.086681][T16500] RBP: 000000000078bf00 R08: 0000000020003700 R09: 0000000000000000 [ 254.095253][T16500] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 254.103332][T16500] R13: 00000000000008a2 R14: 00000000004cb748 R15: 00007ff1541f56d4 08:39:08 executing program 2 (fault-call:8 fault-nth:0): shmget(0x0, 0x4000, 0x780012c9, &(0x7f0000ffc000/0x4000)=nil) shmctl$IPC_RMID(0x0, 0x0) shmat(0x0, &(0x7f0000ffe000/0x1000)=nil, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x2, 0x1) r1 = open(&(0x7f0000000080)='./bus\x00', 0x430c2, 0x0) ftruncate(r1, 0x200004) sendfile(r0, r1, 0x0, 0x80001d00c0d0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) 08:39:08 executing program 3: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x20000000003, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newlink={0x60, 0x10, 0x1, 0xff000000, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @ip6gretap={{0xe, 0x1, 'ip6gretap\x00'}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @ipv4={[], [], @loopback}}, @IFLA_GRE_REMOTE={0x14, 0x7, @remote}]}}}]}, 0x60}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00'}) [ 254.214650][T16519] FAULT_INJECTION: forcing a failure. [ 254.214650][T16519] name failslab, interval 1, probability 0, space 0, times 0 [ 254.248549][T16519] CPU: 1 PID: 16519 Comm: syz-executor.2 Not tainted 5.7.0-rc6-syzkaller #0 [ 254.257379][T16519] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 254.267981][T16519] Call Trace: [ 254.271280][T16519] dump_stack+0x1e9/0x30e [ 254.275625][T16519] should_fail+0x433/0x5b0 [ 254.280051][T16519] ? alloc_pipe_info+0xe4/0x470 [ 254.285004][T16519] should_failslab+0x5/0x20 [ 254.289833][T16519] kmem_cache_alloc_trace+0x57/0x300 [ 254.295284][T16519] alloc_pipe_info+0xe4/0x470 [ 254.300375][T16519] splice_direct_to_actor+0x95b/0xb40 [ 254.305771][T16519] ? kstrtouint_from_user+0x147/0x1a0 [ 254.311418][T16519] ? rcu_lock_release+0x9/0x20 [ 254.316283][T16519] ? do_splice_direct+0x340/0x340 [ 254.321497][T16519] ? fsnotify_perm+0x64/0x390 [ 254.326328][T16519] do_splice_direct+0x201/0x340 [ 254.331429][T16519] ? security_file_permission+0x50/0xc0 [ 254.336990][T16519] do_sendfile+0x809/0xfe0 [ 254.341624][T16519] __x64_sys_sendfile64+0x164/0x1a0 [ 254.347074][T16519] ? do_syscall_64+0x19/0x1b0 [ 254.351765][T16519] do_syscall_64+0xf3/0x1b0 [ 254.356419][T16519] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 254.362368][T16519] RIP: 0033:0x45ca29 [ 254.366271][T16519] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 254.386222][T16519] RSP: 002b:00007efeff606c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 254.394863][T16519] RAX: ffffffffffffffda RBX: 00000000004fc540 RCX: 000000000045ca29 [ 254.402868][T16519] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 08:39:08 executing program 1 (fault-call:8 fault-nth:13): r0 = socket(0x10, 0x803, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000005540)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000c80)=""/235, 0xeb}], 0x1}}], 0x1, 0x0, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendto(r0, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000b80)=@ethernet={0x0, @local}, 0x80, 0x0}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000ac0)=[{{&(0x7f0000000880)=@caif=@util, 0x80, &(0x7f0000000540)=[{&(0x7f0000000900)=""/128, 0x80}, {&(0x7f0000000980)=""/76, 0x4c}], 0x2}, 0x3f}], 0x1, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_SYS_GET(0xffffffffffffffff, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000a00)={0x0, 0x30}}, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x374, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x14b}, {&(0x7f0000000140)=""/85, 0x20a}, {&(0x7f0000000fc0)=""/4096, 0x773}, {&(0x7f0000000400)=""/106, 0x2ce}, {&(0x7f0000000740)=""/73, 0x3dd}, {&(0x7f0000000200)=""/77, 0x96}, {&(0x7f00000007c0)=""/154, 0x40d}, {&(0x7f0000000000)=""/22, 0xa}], 0x81, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 08:39:08 executing program 4: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x20000000003, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00'}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newlink={0x60, 0x10, 0x1, 0x70bd25, 0xf000000, {0x0, 0x0, 0x0, r4, 0x50800}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @ip6gretap={{0xe, 0x1, 'ip6gretap\x00'}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @ipv4={[], [], @private=0xa010100}}, @IFLA_GRE_REMOTE={0x14, 0x7, @remote}]}}}]}, 0x60}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00'}) [ 254.411074][T16519] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 254.419143][T16519] R10: 000080001d00c0d0 R11: 0000000000000246 R12: 0000000000000005 [ 254.427125][T16519] R13: 00000000000008dc R14: 00000000004cba16 R15: 00007efeff6076d4 [ 254.480573][T16538] FAULT_INJECTION: forcing a failure. [ 254.480573][T16538] name failslab, interval 1, probability 0, space 0, times 0 [ 254.498916][T16538] CPU: 1 PID: 16538 Comm: syz-executor.1 Not tainted 5.7.0-rc6-syzkaller #0 [ 254.508145][T16538] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 254.518671][T16538] Call Trace: [ 254.522293][T16538] dump_stack+0x1e9/0x30e [ 254.526657][T16538] should_fail+0x433/0x5b0 [ 254.531090][T16538] should_failslab+0x5/0x20 [ 254.535734][T16538] kmem_cache_alloc_node+0x64/0x290 [ 254.541537][T16538] ? __alloc_skb+0x94/0x4f0 [ 254.546175][T16538] __alloc_skb+0x94/0x4f0 [ 254.550519][T16538] netlink_dump+0x1a0/0x10d0 [ 254.555477][T16538] ? trace_irq_enable_rcuidle+0x1f/0x1d0 [ 254.561121][T16538] ? skb_free_datagram+0x24/0xd0 [ 254.566709][T16538] netlink_recvmsg+0x5fc/0xfe0 [ 254.571627][T16538] ? netlink_sendmsg+0xd70/0xd70 [ 254.576728][T16538] ____sys_recvmsg+0x24a/0x510 [ 254.581656][T16538] ? import_iovec+0x12a/0x2c0 [ 254.586344][T16538] do_recvmmsg+0x426/0x1470 [ 254.590873][T16538] ? _copy_from_user+0x116/0x170 [ 254.595837][T16538] ? get_timespec64+0x11e/0x1d0 [ 254.600950][T16538] __x64_sys_recvmmsg+0x135/0x1a0 [ 254.606211][T16538] do_syscall_64+0xf3/0x1b0 [ 254.610751][T16538] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 254.616900][T16538] RIP: 0033:0x45ca29 [ 254.620932][T16538] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 254.641007][T16538] RSP: 002b:00007ff1541f4c78 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 254.649573][T16538] RAX: ffffffffffffffda RBX: 00000000004fb6c0 RCX: 000000000045ca29 [ 254.658160][T16538] RDX: 04000000000003b4 RSI: 00000000200037c0 RDI: 0000000000000003 [ 254.667725][T16538] RBP: 000000000078bf00 R08: 0000000020003700 R09: 0000000000000000 [ 254.675796][T16538] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 254.683774][T16538] R13: 00000000000008a2 R14: 00000000004cb748 R15: 00007ff1541f56d4 08:39:08 executing program 2 (fault-call:8 fault-nth:1): shmget(0x0, 0x4000, 0x780012c9, &(0x7f0000ffc000/0x4000)=nil) shmctl$IPC_RMID(0x0, 0x0) shmat(0x0, &(0x7f0000ffe000/0x1000)=nil, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x2, 0x1) r1 = open(&(0x7f0000000080)='./bus\x00', 0x430c2, 0x0) ftruncate(r1, 0x200004) sendfile(r0, r1, 0x0, 0x80001d00c0d0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) [ 254.867355][T16553] FAULT_INJECTION: forcing a failure. [ 254.867355][T16553] name failslab, interval 1, probability 0, space 0, times 0 [ 254.895135][T16553] CPU: 1 PID: 16553 Comm: syz-executor.2 Not tainted 5.7.0-rc6-syzkaller #0 [ 254.904415][T16553] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 254.915073][T16553] Call Trace: [ 254.918612][T16553] dump_stack+0x1e9/0x30e [ 254.922952][T16553] should_fail+0x433/0x5b0 [ 254.927778][T16553] ? kcalloc+0x32/0x60 [ 254.931856][T16553] should_failslab+0x5/0x20 [ 254.936502][T16553] __kmalloc+0x74/0x330 [ 254.940667][T16553] ? kmem_cache_alloc_trace+0x24c/0x300 [ 254.946246][T16553] kcalloc+0x32/0x60 [ 254.950358][T16553] alloc_pipe_info+0x1fc/0x470 [ 254.955130][T16553] splice_direct_to_actor+0x95b/0xb40 [ 254.960520][T16553] ? kstrtouint_from_user+0x147/0x1a0 [ 254.966440][T16553] ? rcu_lock_release+0x9/0x20 [ 254.971222][T16553] ? do_splice_direct+0x340/0x340 [ 254.976426][T16553] ? fsnotify_perm+0x64/0x390 [ 254.981586][T16553] do_splice_direct+0x201/0x340 [ 254.986467][T16553] ? security_file_permission+0x50/0xc0 [ 254.992469][T16553] do_sendfile+0x809/0xfe0 [ 254.997094][T16553] __x64_sys_sendfile64+0x164/0x1a0 [ 255.002394][T16553] ? do_syscall_64+0x19/0x1b0 [ 255.007186][T16553] do_syscall_64+0xf3/0x1b0 [ 255.011835][T16553] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 255.017970][T16553] RIP: 0033:0x45ca29 [ 255.022121][T16553] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 255.041943][T16553] RSP: 002b:00007efeff606c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 255.050648][T16553] RAX: ffffffffffffffda RBX: 00000000004fc540 RCX: 000000000045ca29 [ 255.058801][T16553] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 255.067646][T16553] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 255.075970][T16553] R10: 000080001d00c0d0 R11: 0000000000000246 R12: 0000000000000005 [ 255.084301][T16553] R13: 00000000000008dc R14: 00000000004cba16 R15: 00007efeff6076d4 08:39:09 executing program 3: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x20000000003, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newlink={0x60, 0x10, 0x1, 0xffff80fe, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @ip6gretap={{0xe, 0x1, 'ip6gretap\x00'}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @ipv4={[], [], @loopback}}, @IFLA_GRE_REMOTE={0x14, 0x7, @remote}]}}}]}, 0x60}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00'}) 08:39:09 executing program 1 (fault-call:8 fault-nth:14): r0 = socket(0x10, 0x803, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000005540)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000c80)=""/235, 0xeb}], 0x1}}], 0x1, 0x0, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendto(r0, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000b80)=@ethernet={0x0, @local}, 0x80, 0x0}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000ac0)=[{{&(0x7f0000000880)=@caif=@util, 0x80, &(0x7f0000000540)=[{&(0x7f0000000900)=""/128, 0x80}, {&(0x7f0000000980)=""/76, 0x4c}], 0x2}, 0x3f}], 0x1, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_SYS_GET(0xffffffffffffffff, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000a00)={0x0, 0x30}}, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x374, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x14b}, {&(0x7f0000000140)=""/85, 0x20a}, {&(0x7f0000000fc0)=""/4096, 0x773}, {&(0x7f0000000400)=""/106, 0x2ce}, {&(0x7f0000000740)=""/73, 0x3dd}, {&(0x7f0000000200)=""/77, 0x96}, {&(0x7f00000007c0)=""/154, 0x40d}, {&(0x7f0000000000)=""/22, 0xa}], 0x81, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 08:39:09 executing program 4: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x20000000003, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00'}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newlink={0x60, 0x10, 0x1, 0x70bd25, 0x10000000, {0x0, 0x0, 0x0, r4, 0x50800}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @ip6gretap={{0xe, 0x1, 'ip6gretap\x00'}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @ipv4={[], [], @private=0xa010100}}, @IFLA_GRE_REMOTE={0x14, 0x7, @remote}]}}}]}, 0x60}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00'}) 08:39:09 executing program 2 (fault-call:8 fault-nth:2): shmget(0x0, 0x4000, 0x780012c9, &(0x7f0000ffc000/0x4000)=nil) shmctl$IPC_RMID(0x0, 0x0) shmat(0x0, &(0x7f0000ffe000/0x1000)=nil, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x2, 0x1) r1 = open(&(0x7f0000000080)='./bus\x00', 0x430c2, 0x0) ftruncate(r1, 0x200004) sendfile(r0, r1, 0x0, 0x80001d00c0d0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) [ 255.241947][T16565] FAULT_INJECTION: forcing a failure. [ 255.241947][T16565] name failslab, interval 1, probability 0, space 0, times 0 [ 255.286048][T16565] CPU: 1 PID: 16565 Comm: syz-executor.1 Not tainted 5.7.0-rc6-syzkaller #0 [ 255.291292][T16571] FAULT_INJECTION: forcing a failure. [ 255.291292][T16571] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 255.295073][T16565] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 255.295077][T16565] Call Trace: [ 255.295096][T16565] dump_stack+0x1e9/0x30e [ 255.295109][T16565] should_fail+0x433/0x5b0 [ 255.295122][T16565] should_failslab+0x5/0x20 [ 255.295131][T16565] kmem_cache_alloc_node+0x64/0x290 [ 255.295146][T16565] ? __alloc_skb+0x94/0x4f0 [ 255.346261][T16565] __alloc_skb+0x94/0x4f0 [ 255.350734][T16565] netlink_dump+0x1a0/0x10d0 [ 255.355325][T16565] ? trace_irq_enable_rcuidle+0x1f/0x1d0 [ 255.361364][T16565] ? skb_free_datagram+0x24/0xd0 [ 255.366310][T16565] netlink_recvmsg+0x5fc/0xfe0 [ 255.371131][T16565] ? netlink_sendmsg+0xd70/0xd70 [ 255.376467][T16565] ____sys_recvmsg+0x24a/0x510 [ 255.381277][T16565] ? import_iovec+0x12a/0x2c0 [ 255.386429][T16565] do_recvmmsg+0x426/0x1470 [ 255.390969][T16565] ? _copy_from_user+0x116/0x170 [ 255.396015][T16565] ? get_timespec64+0x11e/0x1d0 [ 255.400855][T16565] __x64_sys_recvmmsg+0x135/0x1a0 [ 255.405965][T16565] do_syscall_64+0xf3/0x1b0 [ 255.410462][T16565] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 255.416345][T16565] RIP: 0033:0x45ca29 [ 255.420234][T16565] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 255.440137][T16565] RSP: 002b:00007ff1541f4c78 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 255.448586][T16565] RAX: ffffffffffffffda RBX: 00000000004fb6c0 RCX: 000000000045ca29 [ 255.456616][T16565] RDX: 04000000000003b4 RSI: 00000000200037c0 RDI: 0000000000000003 [ 255.464664][T16565] RBP: 000000000078bf00 R08: 0000000020003700 R09: 0000000000000000 [ 255.472623][T16565] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 255.480830][T16565] R13: 00000000000008a2 R14: 00000000004cb748 R15: 00007ff1541f56d4 [ 255.489070][T16571] CPU: 0 PID: 16571 Comm: syz-executor.2 Not tainted 5.7.0-rc6-syzkaller #0 [ 255.497749][T16571] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 255.507812][T16571] Call Trace: [ 255.511120][T16571] dump_stack+0x1e9/0x30e [ 255.515560][T16571] should_fail+0x433/0x5b0 [ 255.519997][T16571] prepare_alloc_pages+0x28c/0x4a0 [ 255.525222][T16571] __alloc_pages_nodemask+0xbc/0x5e0 [ 255.530663][T16571] __do_page_cache_readahead+0x1de/0x4f0 [ 255.536308][T16571] generic_file_buffered_read+0x3ea/0x2570 [ 255.542392][T16571] generic_file_splice_read+0x452/0x700 [ 255.547973][T16571] ? splice_shrink_spd+0xb0/0xb0 [ 255.552923][T16571] splice_direct_to_actor+0x3c1/0xb40 [ 255.558312][T16571] ? do_splice_direct+0x340/0x340 [ 255.563343][T16571] do_splice_direct+0x201/0x340 [ 255.568380][T16571] ? security_file_permission+0x50/0xc0 [ 255.573930][T16571] do_sendfile+0x809/0xfe0 [ 255.578358][T16571] __x64_sys_sendfile64+0x164/0x1a0 [ 255.583829][T16571] ? do_syscall_64+0x19/0x1b0 [ 255.588525][T16571] do_syscall_64+0xf3/0x1b0 [ 255.593036][T16571] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 255.599109][T16571] RIP: 0033:0x45ca29 [ 255.603592][T16571] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 255.623745][T16571] RSP: 002b:00007efeff606c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 255.635030][T16571] RAX: ffffffffffffffda RBX: 00000000004fc540 RCX: 000000000045ca29 [ 255.643241][T16571] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 255.651227][T16571] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 255.659812][T16571] R10: 000080001d00c0d0 R11: 0000000000000246 R12: 0000000000000005 [ 255.667896][T16571] R13: 00000000000008dc R14: 00000000004cba16 R15: 00007efeff6076d4 [ 256.818982][ T0] NOHZ: local_softirq_pending 08 08:39:12 executing program 5: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x10, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = socket$inet6(0xa, 0x1, 0x8010800000000084) socket$kcm(0x2, 0x3, 0x2) recvmsg(0xffffffffffffffff, &(0x7f0000007500)={&(0x7f0000006f80)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x80, 0x0, 0x0, 0xffffffffffffffff}, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmmsg$inet6(r0, &(0x7f00000000c0)=[{{&(0x7f0000002c80)={0xa, 0x0, 0x0, @loopback}, 0x1c, &(0x7f0000005000)=[{&(0x7f0000002cc0)="ea", 0x1}], 0x1}}], 0x1, 0x20000040) 08:39:12 executing program 3: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x20000000003, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newlink={0x60, 0x10, 0x1, 0xffffa888, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @ip6gretap={{0xe, 0x1, 'ip6gretap\x00'}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @ipv4={[], [], @loopback}}, @IFLA_GRE_REMOTE={0x14, 0x7, @remote}]}}}]}, 0x60}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00'}) 08:39:12 executing program 1 (fault-call:8 fault-nth:15): r0 = socket(0x10, 0x803, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000005540)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000c80)=""/235, 0xeb}], 0x1}}], 0x1, 0x0, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendto(r0, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000b80)=@ethernet={0x0, @local}, 0x80, 0x0}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000ac0)=[{{&(0x7f0000000880)=@caif=@util, 0x80, &(0x7f0000000540)=[{&(0x7f0000000900)=""/128, 0x80}, {&(0x7f0000000980)=""/76, 0x4c}], 0x2}, 0x3f}], 0x1, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_SYS_GET(0xffffffffffffffff, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000a00)={0x0, 0x30}}, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x374, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x14b}, {&(0x7f0000000140)=""/85, 0x20a}, {&(0x7f0000000fc0)=""/4096, 0x773}, {&(0x7f0000000400)=""/106, 0x2ce}, {&(0x7f0000000740)=""/73, 0x3dd}, {&(0x7f0000000200)=""/77, 0x96}, {&(0x7f00000007c0)=""/154, 0x40d}, {&(0x7f0000000000)=""/22, 0xa}], 0x81, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 08:39:12 executing program 2 (fault-call:8 fault-nth:3): shmget(0x0, 0x4000, 0x780012c9, &(0x7f0000ffc000/0x4000)=nil) shmctl$IPC_RMID(0x0, 0x0) shmat(0x0, &(0x7f0000ffe000/0x1000)=nil, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x2, 0x1) r1 = open(&(0x7f0000000080)='./bus\x00', 0x430c2, 0x0) ftruncate(r1, 0x200004) sendfile(r0, r1, 0x0, 0x80001d00c0d0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) 08:39:12 executing program 4: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x20000000003, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00'}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newlink={0x60, 0x10, 0x1, 0x70bd25, 0x11000000, {0x0, 0x0, 0x0, r4, 0x50800}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @ip6gretap={{0xe, 0x1, 'ip6gretap\x00'}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @ipv4={[], [], @private=0xa010100}}, @IFLA_GRE_REMOTE={0x14, 0x7, @remote}]}}}]}, 0x60}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00'}) [ 258.099628][ T0] NOHZ: local_softirq_pending 08 [ 258.143454][T16603] FAULT_INJECTION: forcing a failure. [ 258.143454][T16603] name failslab, interval 1, probability 0, space 0, times 0 [ 258.170894][T16607] FAULT_INJECTION: forcing a failure. [ 258.170894][T16607] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 258.182413][T16603] CPU: 0 PID: 16603 Comm: syz-executor.1 Not tainted 5.7.0-rc6-syzkaller #0 [ 258.187281][T16604] IPVS: ftp: loaded support on port[0] = 21 [ 258.192900][T16603] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 258.192905][T16603] Call Trace: [ 258.192921][T16603] dump_stack+0x1e9/0x30e [ 258.192934][T16603] should_fail+0x433/0x5b0 [ 258.192949][T16603] should_failslab+0x5/0x20 [ 258.192961][T16603] kmem_cache_alloc_node_trace+0x69/0x2b0 [ 258.192977][T16603] ? __kmalloc_node_track_caller+0x37/0x60 [ 258.192991][T16603] __kmalloc_node_track_caller+0x37/0x60 [ 258.242916][T16603] ? netlink_dump+0x1a0/0x10d0 [ 258.247683][T16603] __alloc_skb+0xde/0x4f0 [ 258.252018][T16603] netlink_dump+0x1a0/0x10d0 [ 258.256607][T16603] ? trace_irq_enable_rcuidle+0x1f/0x1d0 [ 258.262262][T16603] ? skb_free_datagram+0x24/0xd0 [ 258.267230][T16603] netlink_recvmsg+0x5fc/0xfe0 [ 258.272001][T16603] ? netlink_sendmsg+0xd70/0xd70 [ 258.276933][T16603] ____sys_recvmsg+0x24a/0x510 [ 258.281696][T16603] ? import_iovec+0x12a/0x2c0 [ 258.286366][T16603] do_recvmmsg+0x426/0x1470 [ 258.290881][T16603] ? _copy_from_user+0x116/0x170 [ 258.296094][T16603] ? get_timespec64+0x11e/0x1d0 [ 258.300941][T16603] __x64_sys_recvmmsg+0x135/0x1a0 [ 258.307106][T16603] do_syscall_64+0xf3/0x1b0 [ 258.311615][T16603] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 258.317496][T16603] RIP: 0033:0x45ca29 [ 258.321420][T16603] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 258.341016][T16603] RSP: 002b:00007ff1541f4c78 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 258.349417][T16603] RAX: ffffffffffffffda RBX: 00000000004fb6c0 RCX: 000000000045ca29 [ 258.357384][T16603] RDX: 04000000000003b4 RSI: 00000000200037c0 RDI: 0000000000000003 [ 258.365365][T16603] RBP: 000000000078bf00 R08: 0000000020003700 R09: 0000000000000000 [ 258.373334][T16603] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 258.381297][T16603] R13: 00000000000008a2 R14: 00000000004cb748 R15: 00007ff1541f56d4 [ 258.389291][T16607] CPU: 1 PID: 16607 Comm: syz-executor.2 Not tainted 5.7.0-rc6-syzkaller #0 [ 258.397980][T16607] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 258.408061][T16607] Call Trace: [ 258.411454][T16607] dump_stack+0x1e9/0x30e [ 258.415775][T16607] should_fail+0x433/0x5b0 [ 258.420169][T16607] prepare_alloc_pages+0x28c/0x4a0 [ 258.425296][T16607] __alloc_pages_nodemask+0xbc/0x5e0 [ 258.430636][T16607] __do_page_cache_readahead+0x1de/0x4f0 [ 258.436279][T16607] generic_file_buffered_read+0x3ea/0x2570 [ 258.442095][T16607] generic_file_splice_read+0x452/0x700 [ 258.447664][T16607] ? splice_shrink_spd+0xb0/0xb0 [ 258.452593][T16607] splice_direct_to_actor+0x3c1/0xb40 [ 258.457950][T16607] ? do_splice_direct+0x340/0x340 [ 258.462957][T16607] do_splice_direct+0x201/0x340 [ 258.467785][T16607] ? security_file_permission+0x50/0xc0 [ 258.473322][T16607] do_sendfile+0x809/0xfe0 [ 258.477723][T16607] __x64_sys_sendfile64+0x164/0x1a0 [ 258.482894][T16607] ? do_syscall_64+0x19/0x1b0 [ 258.487543][T16607] do_syscall_64+0xf3/0x1b0 [ 258.492042][T16607] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 258.497908][T16607] RIP: 0033:0x45ca29 [ 258.501775][T16607] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 258.521381][T16607] RSP: 002b:00007efeff606c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 258.529787][T16607] RAX: ffffffffffffffda RBX: 00000000004fc540 RCX: 000000000045ca29 08:39:12 executing program 1 (fault-call:8 fault-nth:16): r0 = socket(0x10, 0x803, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000005540)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000c80)=""/235, 0xeb}], 0x1}}], 0x1, 0x0, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendto(r0, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000b80)=@ethernet={0x0, @local}, 0x80, 0x0}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000ac0)=[{{&(0x7f0000000880)=@caif=@util, 0x80, &(0x7f0000000540)=[{&(0x7f0000000900)=""/128, 0x80}, {&(0x7f0000000980)=""/76, 0x4c}], 0x2}, 0x3f}], 0x1, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_SYS_GET(0xffffffffffffffff, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000a00)={0x0, 0x30}}, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x374, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x14b}, {&(0x7f0000000140)=""/85, 0x20a}, {&(0x7f0000000fc0)=""/4096, 0x773}, {&(0x7f0000000400)=""/106, 0x2ce}, {&(0x7f0000000740)=""/73, 0x3dd}, {&(0x7f0000000200)=""/77, 0x96}, {&(0x7f00000007c0)=""/154, 0x40d}, {&(0x7f0000000000)=""/22, 0xa}], 0x81, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) [ 258.537750][T16607] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 258.545753][T16607] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 258.553727][T16607] R10: 000080001d00c0d0 R11: 0000000000000246 R12: 0000000000000005 [ 258.561703][T16607] R13: 00000000000008dc R14: 00000000004cba16 R15: 00007efeff6076d4 08:39:12 executing program 5: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x10, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = socket$inet6(0xa, 0x1, 0x8010800000000084) r1 = socket$kcm(0x2, 0x3, 0x2) recvmsg(r1, 0x0, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmmsg$inet6(r0, &(0x7f00000000c0)=[{{&(0x7f0000002c80)={0xa, 0x0, 0x0, @loopback}, 0x1c, &(0x7f0000005000)=[{&(0x7f0000002cc0)="ea", 0x1}], 0x1}}], 0x1, 0x20000040) 08:39:12 executing program 3: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x20000000003, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newlink={0x60, 0x10, 0x1, 0xffffc0fe, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @ip6gretap={{0xe, 0x1, 'ip6gretap\x00'}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @ipv4={[], [], @loopback}}, @IFLA_GRE_REMOTE={0x14, 0x7, @remote}]}}}]}, 0x60}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00'}) [ 258.630487][T16639] IPVS: ftp: loaded support on port[0] = 21 08:39:12 executing program 2 (fault-call:8 fault-nth:4): shmget(0x0, 0x4000, 0x780012c9, &(0x7f0000ffc000/0x4000)=nil) shmctl$IPC_RMID(0x0, 0x0) shmat(0x0, &(0x7f0000ffe000/0x1000)=nil, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x2, 0x1) r1 = open(&(0x7f0000000080)='./bus\x00', 0x430c2, 0x0) ftruncate(r1, 0x200004) sendfile(r0, r1, 0x0, 0x80001d00c0d0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) 08:39:12 executing program 4: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x20000000003, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00'}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newlink={0x60, 0x10, 0x1, 0x70bd25, 0x12000000, {0x0, 0x0, 0x0, r4, 0x50800}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @ip6gretap={{0xe, 0x1, 'ip6gretap\x00'}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @ipv4={[], [], @private=0xa010100}}, @IFLA_GRE_REMOTE={0x14, 0x7, @remote}]}}}]}, 0x60}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00'}) [ 258.695886][T16647] FAULT_INJECTION: forcing a failure. [ 258.695886][T16647] name failslab, interval 1, probability 0, space 0, times 0 08:39:12 executing program 5: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x10, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = socket$inet6(0xa, 0x1, 0x8010800000000084) r1 = socket$kcm(0x2, 0x3, 0x2) recvmsg(r1, 0x0, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmmsg$inet6(r0, &(0x7f00000000c0)=[{{&(0x7f0000002c80)={0xa, 0x0, 0x0, @loopback}, 0x1c, &(0x7f0000005000)=[{&(0x7f0000002cc0)="ea", 0x1}], 0x1}}], 0x1, 0x20000040) [ 258.767546][T16647] CPU: 0 PID: 16647 Comm: syz-executor.1 Not tainted 5.7.0-rc6-syzkaller #0 [ 258.776247][T16647] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 258.786303][T16647] Call Trace: [ 258.789624][T16647] dump_stack+0x1e9/0x30e [ 258.794041][T16647] should_fail+0x433/0x5b0 [ 258.798458][T16647] ? skb_clone+0x1b2/0x370 [ 258.802871][T16647] should_failslab+0x5/0x20 [ 258.804522][T16672] IPVS: ftp: loaded support on port[0] = 21 [ 258.807371][T16647] kmem_cache_alloc+0x53/0x2d0 [ 258.807383][T16647] skb_clone+0x1b2/0x370 [ 258.807396][T16647] netlink_deliver_tap+0x478/0x810 [ 258.807408][T16647] ? sk_filter_trim_cap+0x45e/0x500 [ 258.807423][T16647] netlink_dump+0x67b/0x10d0 [ 258.837173][T16647] netlink_recvmsg+0x5fc/0xfe0 [ 258.841939][T16647] ? netlink_sendmsg+0xd70/0xd70 [ 258.846873][T16647] ____sys_recvmsg+0x24a/0x510 [ 258.851641][T16647] ? import_iovec+0x12a/0x2c0 [ 258.856318][T16647] do_recvmmsg+0x426/0x1470 [ 258.860829][T16647] ? _copy_from_user+0x116/0x170 [ 258.865777][T16647] ? get_timespec64+0x11e/0x1d0 [ 258.870627][T16647] __x64_sys_recvmmsg+0x135/0x1a0 [ 258.875653][T16647] do_syscall_64+0xf3/0x1b0 [ 258.880161][T16647] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 258.886083][T16647] RIP: 0033:0x45ca29 [ 258.889975][T16647] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 258.910455][T16647] RSP: 002b:00007ff1541f4c78 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 258.918865][T16647] RAX: ffffffffffffffda RBX: 00000000004fb6c0 RCX: 000000000045ca29 [ 258.927159][T16647] RDX: 04000000000003b4 RSI: 00000000200037c0 RDI: 0000000000000003 [ 258.935150][T16647] RBP: 000000000078bf00 R08: 0000000020003700 R09: 0000000000000000 [ 258.943130][T16647] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 258.951100][T16647] R13: 00000000000008a2 R14: 00000000004cb748 R15: 00007ff1541f56d4 08:39:12 executing program 5: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x10, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = socket$inet6(0xa, 0x1, 0x8010800000000084) r1 = socket$kcm(0x2, 0x3, 0x2) recvmsg(r1, 0x0, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmmsg$inet6(r0, &(0x7f00000000c0)=[{{&(0x7f0000002c80)={0xa, 0x0, 0x0, @loopback}, 0x1c, &(0x7f0000005000)=[{&(0x7f0000002cc0)="ea", 0x1}], 0x1}}], 0x1, 0x20000040) 08:39:12 executing program 1 (fault-call:8 fault-nth:17): r0 = socket(0x10, 0x803, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000005540)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000c80)=""/235, 0xeb}], 0x1}}], 0x1, 0x0, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendto(r0, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000b80)=@ethernet={0x0, @local}, 0x80, 0x0}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000ac0)=[{{&(0x7f0000000880)=@caif=@util, 0x80, &(0x7f0000000540)=[{&(0x7f0000000900)=""/128, 0x80}, {&(0x7f0000000980)=""/76, 0x4c}], 0x2}, 0x3f}], 0x1, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_SYS_GET(0xffffffffffffffff, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000a00)={0x0, 0x30}}, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x374, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x14b}, {&(0x7f0000000140)=""/85, 0x20a}, {&(0x7f0000000fc0)=""/4096, 0x773}, {&(0x7f0000000400)=""/106, 0x2ce}, {&(0x7f0000000740)=""/73, 0x3dd}, {&(0x7f0000000200)=""/77, 0x96}, {&(0x7f00000007c0)=""/154, 0x40d}, {&(0x7f0000000000)=""/22, 0xa}], 0x81, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) [ 258.990276][T16695] FAULT_INJECTION: forcing a failure. [ 258.990276][T16695] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 259.031565][T16701] IPVS: ftp: loaded support on port[0] = 21 [ 259.054219][T16695] CPU: 1 PID: 16695 Comm: syz-executor.2 Not tainted 5.7.0-rc6-syzkaller #0 [ 259.063046][T16695] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 259.073124][T16695] Call Trace: [ 259.076451][T16695] dump_stack+0x1e9/0x30e [ 259.081043][T16695] should_fail+0x433/0x5b0 [ 259.085580][T16695] prepare_alloc_pages+0x28c/0x4a0 [ 259.090703][T16695] __alloc_pages_nodemask+0xbc/0x5e0 [ 259.095993][T16695] __do_page_cache_readahead+0x1de/0x4f0 [ 259.101641][T16695] generic_file_buffered_read+0x3ea/0x2570 [ 259.107472][T16695] generic_file_splice_read+0x452/0x700 [ 259.113026][T16695] ? splice_shrink_spd+0xb0/0xb0 [ 259.117967][T16695] splice_direct_to_actor+0x3c1/0xb40 [ 259.123342][T16695] ? do_splice_direct+0x340/0x340 [ 259.128374][T16695] do_splice_direct+0x201/0x340 [ 259.133228][T16695] ? security_file_permission+0x50/0xc0 [ 259.138773][T16695] do_sendfile+0x809/0xfe0 [ 259.143207][T16695] __x64_sys_sendfile64+0x164/0x1a0 [ 259.149640][T16695] ? do_syscall_64+0x19/0x1b0 [ 259.154322][T16695] do_syscall_64+0xf3/0x1b0 [ 259.159350][T16695] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 259.165239][T16695] RIP: 0033:0x45ca29 [ 259.169248][T16695] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 259.188848][T16695] RSP: 002b:00007efeff606c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 259.196659][T16709] IPVS: ftp: loaded support on port[0] = 21 [ 259.197257][T16695] RAX: ffffffffffffffda RBX: 00000000004fc540 RCX: 000000000045ca29 [ 259.211097][T16695] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 259.219069][T16695] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 08:39:13 executing program 5: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x10, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = socket$inet6(0xa, 0x1, 0x8010800000000084) r1 = socket$kcm(0x2, 0x3, 0x2) recvmsg(r1, &(0x7f0000007500)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmmsg$inet6(r0, &(0x7f00000000c0)=[{{&(0x7f0000002c80)={0xa, 0x0, 0x0, @loopback}, 0x1c, &(0x7f0000005000)=[{&(0x7f0000002cc0)="ea", 0x1}], 0x1}}], 0x1, 0x20000040) [ 259.227038][T16695] R10: 000080001d00c0d0 R11: 0000000000000246 R12: 0000000000000005 [ 259.235006][T16695] R13: 00000000000008dc R14: 00000000004cba16 R15: 00007efeff6076d4 08:39:13 executing program 4: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x20000000003, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00'}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newlink={0x60, 0x10, 0x1, 0x70bd25, 0x13000000, {0x0, 0x0, 0x0, r4, 0x50800}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @ip6gretap={{0xe, 0x1, 'ip6gretap\x00'}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @ipv4={[], [], @private=0xa010100}}, @IFLA_GRE_REMOTE={0x14, 0x7, @remote}]}}}]}, 0x60}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00'}) 08:39:13 executing program 3: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x20000000003, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newlink={0x60, 0x10, 0x1, 0xffffff7f, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @ip6gretap={{0xe, 0x1, 'ip6gretap\x00'}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @ipv4={[], [], @loopback}}, @IFLA_GRE_REMOTE={0x14, 0x7, @remote}]}}}]}, 0x60}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00'}) [ 259.280964][T16704] FAULT_INJECTION: forcing a failure. [ 259.280964][T16704] name failslab, interval 1, probability 0, space 0, times 0 [ 259.327438][T16704] CPU: 0 PID: 16704 Comm: syz-executor.1 Not tainted 5.7.0-rc6-syzkaller #0 [ 259.336158][T16704] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 259.346227][T16704] Call Trace: [ 259.349523][T16704] dump_stack+0x1e9/0x30e [ 259.353854][T16704] should_fail+0x433/0x5b0 [ 259.358274][T16704] should_failslab+0x5/0x20 [ 259.362775][T16704] kmem_cache_alloc_node+0x64/0x290 [ 259.367996][T16704] ? __alloc_skb+0x94/0x4f0 [ 259.372500][T16704] __alloc_skb+0x94/0x4f0 [ 259.377048][T16704] netlink_dump+0x1a0/0x10d0 [ 259.381651][T16704] ? trace_irq_enable_rcuidle+0x1f/0x1d0 [ 259.387282][T16704] ? skb_free_datagram+0x24/0xd0 [ 259.392776][T16704] netlink_recvmsg+0x5fc/0xfe0 [ 259.397629][T16704] ? netlink_sendmsg+0xd70/0xd70 [ 259.402567][T16704] ____sys_recvmsg+0x24a/0x510 [ 259.407364][T16704] ? import_iovec+0x12a/0x2c0 [ 259.412040][T16704] do_recvmmsg+0x426/0x1470 [ 259.416566][T16704] ? _copy_from_user+0x116/0x170 [ 259.421500][T16704] ? get_timespec64+0x11e/0x1d0 [ 259.426351][T16704] __x64_sys_recvmmsg+0x135/0x1a0 [ 259.431392][T16704] do_syscall_64+0xf3/0x1b0 [ 259.435893][T16704] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 259.441776][T16704] RIP: 0033:0x45ca29 [ 259.445665][T16704] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 259.465265][T16704] RSP: 002b:00007ff1541f4c78 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 259.474109][T16704] RAX: ffffffffffffffda RBX: 00000000004fb6c0 RCX: 000000000045ca29 [ 259.482083][T16704] RDX: 04000000000003b4 RSI: 00000000200037c0 RDI: 0000000000000003 [ 259.490151][T16704] RBP: 000000000078bf00 R08: 0000000020003700 R09: 0000000000000000 [ 259.498129][T16704] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 259.506549][T16704] R13: 00000000000008a2 R14: 00000000004cb748 R15: 00007ff1541f56d4 08:39:13 executing program 1 (fault-call:8 fault-nth:18): r0 = socket(0x10, 0x803, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000005540)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000c80)=""/235, 0xeb}], 0x1}}], 0x1, 0x0, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendto(r0, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000b80)=@ethernet={0x0, @local}, 0x80, 0x0}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000ac0)=[{{&(0x7f0000000880)=@caif=@util, 0x80, &(0x7f0000000540)=[{&(0x7f0000000900)=""/128, 0x80}, {&(0x7f0000000980)=""/76, 0x4c}], 0x2}, 0x3f}], 0x1, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_SYS_GET(0xffffffffffffffff, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000a00)={0x0, 0x30}}, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x374, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x14b}, {&(0x7f0000000140)=""/85, 0x20a}, {&(0x7f0000000fc0)=""/4096, 0x773}, {&(0x7f0000000400)=""/106, 0x2ce}, {&(0x7f0000000740)=""/73, 0x3dd}, {&(0x7f0000000200)=""/77, 0x96}, {&(0x7f00000007c0)=""/154, 0x40d}, {&(0x7f0000000000)=""/22, 0xa}], 0x81, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) [ 259.605927][T16767] FAULT_INJECTION: forcing a failure. [ 259.605927][T16767] name failslab, interval 1, probability 0, space 0, times 0 [ 259.621707][T16767] CPU: 1 PID: 16767 Comm: syz-executor.1 Not tainted 5.7.0-rc6-syzkaller #0 [ 259.630391][T16767] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 259.640444][T16767] Call Trace: [ 259.643738][T16767] dump_stack+0x1e9/0x30e [ 259.648093][T16767] should_fail+0x433/0x5b0 [ 259.652510][T16767] should_failslab+0x5/0x20 [ 259.657011][T16767] kmem_cache_alloc_node_trace+0x69/0x2b0 [ 259.663359][T16767] ? __kmalloc_node_track_caller+0x37/0x60 [ 259.669164][T16767] __kmalloc_node_track_caller+0x37/0x60 [ 259.674794][T16767] ? netlink_dump+0x1a0/0x10d0 [ 259.679554][T16767] __alloc_skb+0xde/0x4f0 [ 259.683884][T16767] netlink_dump+0x1a0/0x10d0 [ 259.688474][T16767] ? trace_irq_enable_rcuidle+0x1f/0x1d0 [ 259.694104][T16767] ? skb_free_datagram+0x24/0xd0 [ 259.699045][T16767] netlink_recvmsg+0x5fc/0xfe0 [ 259.703810][T16767] ? netlink_sendmsg+0xd70/0xd70 [ 259.708749][T16767] ____sys_recvmsg+0x24a/0x510 [ 259.713514][T16767] ? import_iovec+0x12a/0x2c0 [ 259.718189][T16767] do_recvmmsg+0x426/0x1470 [ 259.722713][T16767] ? _copy_from_user+0x116/0x170 [ 259.727642][T16767] ? get_timespec64+0x11e/0x1d0 [ 259.732490][T16767] __x64_sys_recvmmsg+0x135/0x1a0 [ 259.737545][T16767] do_syscall_64+0xf3/0x1b0 [ 259.742446][T16767] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 259.748442][T16767] RIP: 0033:0x45ca29 [ 259.752456][T16767] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 259.772501][T16767] RSP: 002b:00007ff1541f4c78 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 259.780931][T16767] RAX: ffffffffffffffda RBX: 00000000004fb6c0 RCX: 000000000045ca29 [ 259.788904][T16767] RDX: 04000000000003b4 RSI: 00000000200037c0 RDI: 0000000000000003 [ 259.796874][T16767] RBP: 000000000078bf00 R08: 0000000020003700 R09: 0000000000000000 08:39:13 executing program 2 (fault-call:8 fault-nth:5): shmget(0x0, 0x4000, 0x780012c9, &(0x7f0000ffc000/0x4000)=nil) shmctl$IPC_RMID(0x0, 0x0) shmat(0x0, &(0x7f0000ffe000/0x1000)=nil, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x2, 0x1) r1 = open(&(0x7f0000000080)='./bus\x00', 0x430c2, 0x0) ftruncate(r1, 0x200004) sendfile(r0, r1, 0x0, 0x80001d00c0d0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) [ 259.805023][T16767] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 259.813028][T16767] R13: 00000000000008a2 R14: 00000000004cb748 R15: 00007ff1541f56d4 08:39:13 executing program 4: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x20000000003, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00'}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newlink={0x60, 0x10, 0x1, 0x70bd25, 0x14000000, {0x0, 0x0, 0x0, r4, 0x50800}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @ip6gretap={{0xe, 0x1, 'ip6gretap\x00'}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @ipv4={[], [], @private=0xa010100}}, @IFLA_GRE_REMOTE={0x14, 0x7, @remote}]}}}]}, 0x60}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00'}) 08:39:13 executing program 3: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x20000000003, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newlink={0x60, 0x10, 0x1, 0xffffff9e, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @ip6gretap={{0xe, 0x1, 'ip6gretap\x00'}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @ipv4={[], [], @loopback}}, @IFLA_GRE_REMOTE={0x14, 0x7, @remote}]}}}]}, 0x60}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00'}) [ 259.900448][T16771] FAULT_INJECTION: forcing a failure. [ 259.900448][T16771] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 259.931389][T16771] CPU: 1 PID: 16771 Comm: syz-executor.2 Not tainted 5.7.0-rc6-syzkaller #0 [ 259.940085][T16771] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 259.950137][T16771] Call Trace: [ 259.953427][T16771] dump_stack+0x1e9/0x30e [ 259.957762][T16771] should_fail+0x433/0x5b0 [ 259.962219][T16771] prepare_alloc_pages+0x28c/0x4a0 [ 259.967337][T16771] __alloc_pages_nodemask+0xbc/0x5e0 [ 259.972627][T16771] __do_page_cache_readahead+0x1de/0x4f0 [ 259.978268][T16771] generic_file_buffered_read+0x3ea/0x2570 [ 259.984084][T16771] generic_file_splice_read+0x452/0x700 [ 259.989634][T16771] ? splice_shrink_spd+0xb0/0xb0 [ 259.994637][T16771] splice_direct_to_actor+0x3c1/0xb40 [ 260.000017][T16771] ? do_splice_direct+0x340/0x340 [ 260.005044][T16771] do_splice_direct+0x201/0x340 [ 260.009896][T16771] ? security_file_permission+0x50/0xc0 [ 260.015553][T16771] do_sendfile+0x809/0xfe0 [ 260.019979][T16771] __x64_sys_sendfile64+0x164/0x1a0 [ 260.025175][T16771] ? do_syscall_64+0x19/0x1b0 [ 260.029873][T16771] do_syscall_64+0xf3/0x1b0 [ 260.034394][T16771] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 260.040286][T16771] RIP: 0033:0x45ca29 [ 260.044174][T16771] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 260.063775][T16771] RSP: 002b:00007efeff606c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 260.072211][T16771] RAX: ffffffffffffffda RBX: 00000000004fc540 RCX: 000000000045ca29 [ 260.080188][T16771] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 260.088169][T16771] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 260.096239][T16771] R10: 000080001d00c0d0 R11: 0000000000000246 R12: 0000000000000005 [ 260.104383][T16771] R13: 00000000000008dc R14: 00000000004cba16 R15: 00007efeff6076d4 08:39:14 executing program 5: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x10, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = socket$inet6(0xa, 0x1, 0x8010800000000084) r1 = socket$kcm(0x2, 0x3, 0x2) recvmsg(r1, &(0x7f0000007500)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmmsg$inet6(r0, &(0x7f00000000c0)=[{{&(0x7f0000002c80)={0xa, 0x0, 0x0, @loopback}, 0x1c, &(0x7f0000005000)=[{&(0x7f0000002cc0)="ea", 0x1}], 0x1}}], 0x1, 0x20000040) [ 260.205661][T16786] IPVS: ftp: loaded support on port[0] = 21 08:39:14 executing program 1 (fault-call:8 fault-nth:19): r0 = socket(0x10, 0x803, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000005540)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000c80)=""/235, 0xeb}], 0x1}}], 0x1, 0x0, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendto(r0, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000b80)=@ethernet={0x0, @local}, 0x80, 0x0}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000ac0)=[{{&(0x7f0000000880)=@caif=@util, 0x80, &(0x7f0000000540)=[{&(0x7f0000000900)=""/128, 0x80}, {&(0x7f0000000980)=""/76, 0x4c}], 0x2}, 0x3f}], 0x1, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_SYS_GET(0xffffffffffffffff, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000a00)={0x0, 0x30}}, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x374, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x14b}, {&(0x7f0000000140)=""/85, 0x20a}, {&(0x7f0000000fc0)=""/4096, 0x773}, {&(0x7f0000000400)=""/106, 0x2ce}, {&(0x7f0000000740)=""/73, 0x3dd}, {&(0x7f0000000200)=""/77, 0x96}, {&(0x7f00000007c0)=""/154, 0x40d}, {&(0x7f0000000000)=""/22, 0xa}], 0x81, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) [ 260.342055][T16803] FAULT_INJECTION: forcing a failure. [ 260.342055][T16803] name failslab, interval 1, probability 0, space 0, times 0 [ 260.359803][T16803] CPU: 1 PID: 16803 Comm: syz-executor.1 Not tainted 5.7.0-rc6-syzkaller #0 [ 260.368619][T16803] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 260.378670][T16803] Call Trace: [ 260.381964][T16803] dump_stack+0x1e9/0x30e [ 260.386306][T16803] should_fail+0x433/0x5b0 [ 260.390732][T16803] should_failslab+0x5/0x20 [ 260.395237][T16803] kmem_cache_alloc_node_trace+0x69/0x2b0 [ 260.400961][T16803] ? __kmalloc_node_track_caller+0x37/0x60 [ 260.406798][T16803] __kmalloc_node_track_caller+0x37/0x60 [ 260.412433][T16803] ? netlink_dump+0x1a0/0x10d0 [ 260.417203][T16803] __alloc_skb+0xde/0x4f0 [ 260.421531][T16803] netlink_dump+0x1a0/0x10d0 [ 260.426121][T16803] ? trace_irq_enable_rcuidle+0x1f/0x1d0 [ 260.431751][T16803] ? skb_free_datagram+0x24/0xd0 [ 260.436696][T16803] netlink_recvmsg+0x5fc/0xfe0 [ 260.441476][T16803] ? netlink_sendmsg+0xd70/0xd70 [ 260.446417][T16803] ____sys_recvmsg+0x24a/0x510 [ 260.451192][T16803] ? import_iovec+0x12a/0x2c0 [ 260.455872][T16803] do_recvmmsg+0x426/0x1470 [ 260.460389][T16803] ? _copy_from_user+0x116/0x170 [ 260.465331][T16803] ? get_timespec64+0x11e/0x1d0 [ 260.470442][T16803] __x64_sys_recvmmsg+0x135/0x1a0 [ 260.475471][T16803] do_syscall_64+0xf3/0x1b0 [ 260.479981][T16803] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 260.485874][T16803] RIP: 0033:0x45ca29 [ 260.489766][T16803] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 260.509394][T16803] RSP: 002b:00007ff1541f4c78 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 260.517835][T16803] RAX: ffffffffffffffda RBX: 00000000004fb6c0 RCX: 000000000045ca29 [ 260.525806][T16803] RDX: 04000000000003b4 RSI: 00000000200037c0 RDI: 0000000000000003 [ 260.533801][T16803] RBP: 000000000078bf00 R08: 0000000020003700 R09: 0000000000000000 08:39:14 executing program 4: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x20000000003, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00'}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newlink={0x60, 0x10, 0x1, 0x70bd25, 0x3f000000, {0x0, 0x0, 0x0, r4, 0x50800}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @ip6gretap={{0xe, 0x1, 'ip6gretap\x00'}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @ipv4={[], [], @private=0xa010100}}, @IFLA_GRE_REMOTE={0x14, 0x7, @remote}]}}}]}, 0x60}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00'}) 08:39:14 executing program 3: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x20000000003, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newlink={0x60, 0x10, 0x1, 0xffffffe0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @ip6gretap={{0xe, 0x1, 'ip6gretap\x00'}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @ipv4={[], [], @loopback}}, @IFLA_GRE_REMOTE={0x14, 0x7, @remote}]}}}]}, 0x60}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00'}) [ 260.541774][T16803] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 260.549769][T16803] R13: 00000000000008a2 R14: 00000000004cb748 R15: 00007ff1541f56d4 08:39:14 executing program 2 (fault-call:8 fault-nth:6): shmget(0x0, 0x4000, 0x780012c9, &(0x7f0000ffc000/0x4000)=nil) shmctl$IPC_RMID(0x0, 0x0) shmat(0x0, &(0x7f0000ffe000/0x1000)=nil, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x2, 0x1) r1 = open(&(0x7f0000000080)='./bus\x00', 0x430c2, 0x0) ftruncate(r1, 0x200004) sendfile(r0, r1, 0x0, 0x80001d00c0d0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) [ 260.726923][T16823] FAULT_INJECTION: forcing a failure. [ 260.726923][T16823] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 260.756745][T16823] CPU: 1 PID: 16823 Comm: syz-executor.2 Not tainted 5.7.0-rc6-syzkaller #0 [ 260.765530][T16823] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 260.775578][T16823] Call Trace: [ 260.778856][T16823] dump_stack+0x1e9/0x30e [ 260.783308][T16823] should_fail+0x433/0x5b0 [ 260.787742][T16823] prepare_alloc_pages+0x28c/0x4a0 [ 260.792854][T16823] __alloc_pages_nodemask+0xbc/0x5e0 [ 260.798133][T16823] __do_page_cache_readahead+0x1de/0x4f0 [ 260.803762][T16823] generic_file_buffered_read+0x3ea/0x2570 [ 260.809550][T16823] generic_file_splice_read+0x452/0x700 [ 260.815074][T16823] ? splice_shrink_spd+0xb0/0xb0 [ 260.819997][T16823] splice_direct_to_actor+0x3c1/0xb40 [ 260.825345][T16823] ? do_splice_direct+0x340/0x340 [ 260.830345][T16823] do_splice_direct+0x201/0x340 [ 260.835193][T16823] ? security_file_permission+0x50/0xc0 [ 260.840731][T16823] do_sendfile+0x809/0xfe0 [ 260.845142][T16823] __x64_sys_sendfile64+0x164/0x1a0 [ 260.850316][T16823] ? do_syscall_64+0x19/0x1b0 [ 260.854981][T16823] do_syscall_64+0xf3/0x1b0 [ 260.859459][T16823] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 260.865340][T16823] RIP: 0033:0x45ca29 [ 260.869210][T16823] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 260.889257][T16823] RSP: 002b:00007efeff606c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 260.897650][T16823] RAX: ffffffffffffffda RBX: 00000000004fc540 RCX: 000000000045ca29 [ 260.905612][T16823] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 260.913671][T16823] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 260.921618][T16823] R10: 000080001d00c0d0 R11: 0000000000000246 R12: 0000000000000005 [ 260.929845][T16823] R13: 00000000000008dc R14: 00000000004cba16 R15: 00007efeff6076d4 08:39:14 executing program 5: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x10, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = socket$inet6(0xa, 0x1, 0x8010800000000084) r1 = socket$kcm(0x2, 0x3, 0x2) recvmsg(r1, &(0x7f0000007500)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmmsg$inet6(r0, &(0x7f00000000c0)=[{{&(0x7f0000002c80)={0xa, 0x0, 0x0, @loopback}, 0x1c, &(0x7f0000005000)=[{&(0x7f0000002cc0)="ea", 0x1}], 0x1}}], 0x1, 0x20000040) 08:39:15 executing program 1 (fault-call:8 fault-nth:20): r0 = socket(0x10, 0x803, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000005540)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000c80)=""/235, 0xeb}], 0x1}}], 0x1, 0x0, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendto(r0, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000b80)=@ethernet={0x0, @local}, 0x80, 0x0}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000ac0)=[{{&(0x7f0000000880)=@caif=@util, 0x80, &(0x7f0000000540)=[{&(0x7f0000000900)=""/128, 0x80}, {&(0x7f0000000980)=""/76, 0x4c}], 0x2}, 0x3f}], 0x1, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_SYS_GET(0xffffffffffffffff, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000a00)={0x0, 0x30}}, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x374, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x14b}, {&(0x7f0000000140)=""/85, 0x20a}, {&(0x7f0000000fc0)=""/4096, 0x773}, {&(0x7f0000000400)=""/106, 0x2ce}, {&(0x7f0000000740)=""/73, 0x3dd}, {&(0x7f0000000200)=""/77, 0x96}, {&(0x7f00000007c0)=""/154, 0x40d}, {&(0x7f0000000000)=""/22, 0xa}], 0x81, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 08:39:15 executing program 3: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x20000000003, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newlink={0x60, 0x10, 0x1, 0xffffffef, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @ip6gretap={{0xe, 0x1, 'ip6gretap\x00'}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @ipv4={[], [], @loopback}}, @IFLA_GRE_REMOTE={0x14, 0x7, @remote}]}}}]}, 0x60}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00'}) [ 261.070928][T16830] IPVS: ftp: loaded support on port[0] = 21 08:39:15 executing program 4: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x20000000003, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00'}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newlink={0x60, 0x10, 0x1, 0x70bd25, 0x40000000, {0x0, 0x0, 0x0, r4, 0x50800}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @ip6gretap={{0xe, 0x1, 'ip6gretap\x00'}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @ipv4={[], [], @private=0xa010100}}, @IFLA_GRE_REMOTE={0x14, 0x7, @remote}]}}}]}, 0x60}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00'}) [ 261.172991][T16838] FAULT_INJECTION: forcing a failure. [ 261.172991][T16838] name failslab, interval 1, probability 0, space 0, times 0 [ 261.225934][T16838] CPU: 0 PID: 16838 Comm: syz-executor.1 Not tainted 5.7.0-rc6-syzkaller #0 [ 261.234633][T16838] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 261.244683][T16838] Call Trace: [ 261.247981][T16838] dump_stack+0x1e9/0x30e [ 261.252315][T16838] should_fail+0x433/0x5b0 [ 261.256736][T16838] should_failslab+0x5/0x20 [ 261.261250][T16838] kmem_cache_alloc_node_trace+0x69/0x2b0 [ 261.267072][T16838] ? __kmalloc_node_track_caller+0x37/0x60 [ 261.272883][T16838] __kmalloc_node_track_caller+0x37/0x60 [ 261.278515][T16838] ? netlink_dump+0x1a0/0x10d0 [ 261.283278][T16838] __alloc_skb+0xde/0x4f0 [ 261.287619][T16838] netlink_dump+0x1a0/0x10d0 [ 261.292216][T16838] ? trace_irq_enable_rcuidle+0x1f/0x1d0 [ 261.297852][T16838] ? skb_free_datagram+0x24/0xd0 [ 261.302794][T16838] netlink_recvmsg+0x5fc/0xfe0 [ 261.307563][T16838] ? netlink_sendmsg+0xd70/0xd70 [ 261.312500][T16838] ____sys_recvmsg+0x24a/0x510 [ 261.317274][T16838] ? import_iovec+0x12a/0x2c0 [ 261.322101][T16838] do_recvmmsg+0x426/0x1470 [ 261.326614][T16838] ? _copy_from_user+0x116/0x170 [ 261.331547][T16838] ? get_timespec64+0x11e/0x1d0 [ 261.336399][T16838] __x64_sys_recvmmsg+0x135/0x1a0 [ 261.341421][T16838] do_syscall_64+0xf3/0x1b0 [ 261.345920][T16838] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 261.351804][T16838] RIP: 0033:0x45ca29 [ 261.355690][T16838] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 261.375285][T16838] RSP: 002b:00007ff1541f4c78 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 261.383695][T16838] RAX: ffffffffffffffda RBX: 00000000004fb6c0 RCX: 000000000045ca29 [ 261.391839][T16838] RDX: 04000000000003b4 RSI: 00000000200037c0 RDI: 0000000000000003 [ 261.399904][T16838] RBP: 000000000078bf00 R08: 0000000020003700 R09: 0000000000000000 [ 261.407875][T16838] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 261.416029][T16838] R13: 00000000000008a2 R14: 00000000004cb748 R15: 00007ff1541f56d4 08:39:15 executing program 2 (fault-call:8 fault-nth:7): shmget(0x0, 0x4000, 0x780012c9, &(0x7f0000ffc000/0x4000)=nil) shmctl$IPC_RMID(0x0, 0x0) shmat(0x0, &(0x7f0000ffe000/0x1000)=nil, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x2, 0x1) r1 = open(&(0x7f0000000080)='./bus\x00', 0x430c2, 0x0) ftruncate(r1, 0x200004) sendfile(r0, r1, 0x0, 0x80001d00c0d0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) [ 261.573313][T16864] FAULT_INJECTION: forcing a failure. [ 261.573313][T16864] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 261.604960][T16864] CPU: 0 PID: 16864 Comm: syz-executor.2 Not tainted 5.7.0-rc6-syzkaller #0 [ 261.613679][T16864] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 261.623738][T16864] Call Trace: [ 261.627023][T16864] dump_stack+0x1e9/0x30e [ 261.631331][T16864] should_fail+0x433/0x5b0 [ 261.635729][T16864] prepare_alloc_pages+0x28c/0x4a0 [ 261.640817][T16864] __alloc_pages_nodemask+0xbc/0x5e0 [ 261.646078][T16864] __do_page_cache_readahead+0x1de/0x4f0 [ 261.651690][T16864] generic_file_buffered_read+0x3ea/0x2570 [ 261.657476][T16864] generic_file_splice_read+0x452/0x700 [ 261.662999][T16864] ? splice_shrink_spd+0xb0/0xb0 [ 261.667916][T16864] splice_direct_to_actor+0x3c1/0xb40 [ 261.673261][T16864] ? do_splice_direct+0x340/0x340 [ 261.678259][T16864] do_splice_direct+0x201/0x340 [ 261.683086][T16864] ? security_file_permission+0x50/0xc0 [ 261.688619][T16864] do_sendfile+0x809/0xfe0 [ 261.693016][T16864] __x64_sys_sendfile64+0x164/0x1a0 [ 261.698454][T16864] ? do_syscall_64+0x19/0x1b0 [ 261.703120][T16864] do_syscall_64+0xf3/0x1b0 [ 261.707597][T16864] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 261.713471][T16864] RIP: 0033:0x45ca29 [ 261.717354][T16864] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 261.736931][T16864] RSP: 002b:00007efeff606c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 261.745321][T16864] RAX: ffffffffffffffda RBX: 00000000004fc540 RCX: 000000000045ca29 [ 261.753271][T16864] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 261.761216][T16864] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 261.769171][T16864] R10: 000080001d00c0d0 R11: 0000000000000246 R12: 0000000000000005 [ 261.777118][T16864] R13: 00000000000008dc R14: 00000000004cba16 R15: 00007efeff6076d4 08:39:15 executing program 5: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x10, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = socket$inet6(0xa, 0x1, 0x8010800000000084) r1 = socket$kcm(0x2, 0x3, 0x2) recvmsg(r1, &(0x7f0000007500)={&(0x7f0000006f80)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x80, 0x0, 0x0, 0xffffffffffffffff}, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmmsg$inet6(r0, &(0x7f00000000c0)=[{{&(0x7f0000002c80)={0xa, 0x0, 0x0, @loopback}, 0x1c, &(0x7f0000005000)=[{&(0x7f0000002cc0)="ea", 0x1}], 0x1}}], 0x1, 0x20000040) 08:39:15 executing program 1 (fault-call:8 fault-nth:21): r0 = socket(0x10, 0x803, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000005540)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000c80)=""/235, 0xeb}], 0x1}}], 0x1, 0x0, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendto(r0, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000b80)=@ethernet={0x0, @local}, 0x80, 0x0}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000ac0)=[{{&(0x7f0000000880)=@caif=@util, 0x80, &(0x7f0000000540)=[{&(0x7f0000000900)=""/128, 0x80}, {&(0x7f0000000980)=""/76, 0x4c}], 0x2}, 0x3f}], 0x1, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_SYS_GET(0xffffffffffffffff, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000a00)={0x0, 0x30}}, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x374, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x14b}, {&(0x7f0000000140)=""/85, 0x20a}, {&(0x7f0000000fc0)=""/4096, 0x773}, {&(0x7f0000000400)=""/106, 0x2ce}, {&(0x7f0000000740)=""/73, 0x3dd}, {&(0x7f0000000200)=""/77, 0x96}, {&(0x7f00000007c0)=""/154, 0x40d}, {&(0x7f0000000000)=""/22, 0xa}], 0x81, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 08:39:15 executing program 4: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x20000000003, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00'}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newlink={0x60, 0x10, 0x1, 0x70bd25, 0x60000000, {0x0, 0x0, 0x0, r4, 0x50800}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @ip6gretap={{0xe, 0x1, 'ip6gretap\x00'}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @ipv4={[], [], @private=0xa010100}}, @IFLA_GRE_REMOTE={0x14, 0x7, @remote}]}}}]}, 0x60}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00'}) 08:39:15 executing program 3: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x20000000003, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newlink={0x60, 0x10, 0x1, 0xfffffff0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @ip6gretap={{0xe, 0x1, 'ip6gretap\x00'}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @ipv4={[], [], @loopback}}, @IFLA_GRE_REMOTE={0x14, 0x7, @remote}]}}}]}, 0x60}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00'}) 08:39:15 executing program 2 (fault-call:8 fault-nth:8): shmget(0x0, 0x4000, 0x780012c9, &(0x7f0000ffc000/0x4000)=nil) shmctl$IPC_RMID(0x0, 0x0) shmat(0x0, &(0x7f0000ffe000/0x1000)=nil, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x2, 0x1) r1 = open(&(0x7f0000000080)='./bus\x00', 0x430c2, 0x0) ftruncate(r1, 0x200004) sendfile(r0, r1, 0x0, 0x80001d00c0d0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) [ 261.950922][T16877] IPVS: ftp: loaded support on port[0] = 21 [ 261.960219][T16880] FAULT_INJECTION: forcing a failure. [ 261.960219][T16880] name failslab, interval 1, probability 0, space 0, times 0 [ 262.000458][T16886] FAULT_INJECTION: forcing a failure. [ 262.000458][T16886] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 262.016342][T16886] CPU: 1 PID: 16886 Comm: syz-executor.2 Not tainted 5.7.0-rc6-syzkaller #0 [ 262.025031][T16886] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 262.035080][T16886] Call Trace: [ 262.038389][T16886] dump_stack+0x1e9/0x30e [ 262.042806][T16886] should_fail+0x433/0x5b0 [ 262.047223][T16886] prepare_alloc_pages+0x28c/0x4a0 [ 262.052362][T16886] __alloc_pages_nodemask+0xbc/0x5e0 [ 262.057643][T16886] __do_page_cache_readahead+0x1de/0x4f0 [ 262.063268][T16886] generic_file_buffered_read+0x3ea/0x2570 [ 262.069077][T16886] generic_file_splice_read+0x452/0x700 [ 262.074623][T16886] ? splice_shrink_spd+0xb0/0xb0 [ 262.079642][T16886] splice_direct_to_actor+0x3c1/0xb40 [ 262.085017][T16886] ? do_splice_direct+0x340/0x340 [ 262.090045][T16886] do_splice_direct+0x201/0x340 [ 262.094894][T16886] ? security_file_permission+0x50/0xc0 [ 262.100442][T16886] do_sendfile+0x809/0xfe0 [ 262.104881][T16886] __x64_sys_sendfile64+0x164/0x1a0 [ 262.110074][T16886] ? do_syscall_64+0x19/0x1b0 [ 262.115221][T16886] do_syscall_64+0xf3/0x1b0 [ 262.119720][T16886] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 262.125607][T16886] RIP: 0033:0x45ca29 [ 262.129498][T16886] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 262.149214][T16886] RSP: 002b:00007efeff606c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 262.157624][T16886] RAX: ffffffffffffffda RBX: 00000000004fc540 RCX: 000000000045ca29 [ 262.165594][T16886] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 262.173561][T16886] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 262.181529][T16886] R10: 000080001d00c0d0 R11: 0000000000000246 R12: 0000000000000005 [ 262.189503][T16886] R13: 00000000000008dc R14: 00000000004cba16 R15: 00007efeff6076d4 [ 262.198589][T16880] CPU: 0 PID: 16880 Comm: syz-executor.1 Not tainted 5.7.0-rc6-syzkaller #0 [ 262.207273][T16880] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 262.217355][T16880] Call Trace: [ 262.220648][T16880] dump_stack+0x1e9/0x30e [ 262.224977][T16880] should_fail+0x433/0x5b0 [ 262.229394][T16880] ? skb_clone+0x1b2/0x370 [ 262.233916][T16880] should_failslab+0x5/0x20 [ 262.238449][T16880] kmem_cache_alloc+0x53/0x2d0 [ 262.243215][T16880] skb_clone+0x1b2/0x370 [ 262.247496][T16880] netlink_deliver_tap+0x478/0x810 [ 262.252612][T16880] ? sk_filter_trim_cap+0x45e/0x500 [ 262.257814][T16880] netlink_dump+0x67b/0x10d0 [ 262.262415][T16880] netlink_recvmsg+0x5fc/0xfe0 [ 262.267190][T16880] ? netlink_sendmsg+0xd70/0xd70 [ 262.272132][T16880] ____sys_recvmsg+0x24a/0x510 [ 262.276906][T16880] ? import_iovec+0x12a/0x2c0 [ 262.281586][T16880] do_recvmmsg+0x426/0x1470 [ 262.286133][T16880] ? _copy_from_user+0x116/0x170 [ 262.291101][T16880] ? get_timespec64+0x11e/0x1d0 [ 262.295963][T16880] __x64_sys_recvmmsg+0x135/0x1a0 [ 262.300991][T16880] do_syscall_64+0xf3/0x1b0 [ 262.305502][T16880] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 262.311421][T16880] RIP: 0033:0x45ca29 [ 262.315583][T16880] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 262.335200][T16880] RSP: 002b:00007ff1541f4c78 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 262.343650][T16880] RAX: ffffffffffffffda RBX: 00000000004fb6c0 RCX: 000000000045ca29 08:39:16 executing program 1 (fault-call:8 fault-nth:22): r0 = socket(0x10, 0x803, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000005540)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000c80)=""/235, 0xeb}], 0x1}}], 0x1, 0x0, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendto(r0, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000b80)=@ethernet={0x0, @local}, 0x80, 0x0}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000ac0)=[{{&(0x7f0000000880)=@caif=@util, 0x80, &(0x7f0000000540)=[{&(0x7f0000000900)=""/128, 0x80}, {&(0x7f0000000980)=""/76, 0x4c}], 0x2}, 0x3f}], 0x1, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_SYS_GET(0xffffffffffffffff, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000a00)={0x0, 0x30}}, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x374, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x14b}, {&(0x7f0000000140)=""/85, 0x20a}, {&(0x7f0000000fc0)=""/4096, 0x773}, {&(0x7f0000000400)=""/106, 0x2ce}, {&(0x7f0000000740)=""/73, 0x3dd}, {&(0x7f0000000200)=""/77, 0x96}, {&(0x7f00000007c0)=""/154, 0x40d}, {&(0x7f0000000000)=""/22, 0xa}], 0x81, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) [ 262.351634][T16880] RDX: 04000000000003b4 RSI: 00000000200037c0 RDI: 0000000000000003 [ 262.359610][T16880] RBP: 000000000078bf00 R08: 0000000020003700 R09: 0000000000000000 [ 262.367606][T16880] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 262.375580][T16880] R13: 00000000000008a2 R14: 00000000004cb748 R15: 00007ff1541f56d4 [ 262.446701][T16917] FAULT_INJECTION: forcing a failure. [ 262.446701][T16917] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 262.459975][T16917] CPU: 1 PID: 16917 Comm: syz-executor.1 Not tainted 5.7.0-rc6-syzkaller #0 [ 262.468638][T16917] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 262.478694][T16917] Call Trace: [ 262.481990][T16917] dump_stack+0x1e9/0x30e [ 262.486329][T16917] should_fail+0x433/0x5b0 [ 262.490783][T16917] ? __kasan_kmalloc+0x114/0x160 08:39:16 executing program 3: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x20000000003, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newlink={0x60, 0x10, 0x1, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @ip6gretap={{0xe, 0x1, 'ip6gretap\x00'}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @ipv4={[], [], @loopback}}, @IFLA_GRE_REMOTE={0x14, 0x7, @remote}]}}}]}, 0x60}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00'}) [ 262.495755][T16917] prepare_alloc_pages+0x28c/0x4a0 [ 262.500878][T16917] __alloc_pages_nodemask+0xbc/0x5e0 [ 262.506184][T16917] kmem_getpages+0x49/0x900 [ 262.510697][T16917] cache_grow_begin+0x7b/0x2e0 [ 262.515554][T16917] cache_alloc_refill+0x359/0x3f0 [ 262.520581][T16917] ? trace_irq_disable_rcuidle+0x1f/0x1d0 [ 262.526300][T16917] ? check_preemption_disabled+0xb0/0x240 [ 262.532208][T16917] ? debug_smp_processor_id+0x5/0x20 [ 262.537504][T16917] kmem_cache_alloc_node_trace+0x1bf/0x2b0 [ 262.543313][T16917] ? __kmalloc_node_track_caller+0x37/0x60 [ 262.549251][T16917] __kmalloc_node_track_caller+0x37/0x60 [ 262.554899][T16917] ? netlink_dump+0x1a0/0x10d0 [ 262.559644][T16917] __alloc_skb+0xde/0x4f0 [ 262.563981][T16917] netlink_dump+0x1a0/0x10d0 [ 262.568549][T16917] ? trace_irq_enable_rcuidle+0x1f/0x1d0 [ 262.574193][T16917] ? skb_free_datagram+0x24/0xd0 [ 262.579114][T16917] netlink_recvmsg+0x5fc/0xfe0 [ 262.583868][T16917] ? netlink_sendmsg+0xd70/0xd70 [ 262.588793][T16917] ____sys_recvmsg+0x24a/0x510 [ 262.593539][T16917] ? import_iovec+0x12a/0x2c0 [ 262.598219][T16917] do_recvmmsg+0x426/0x1470 [ 262.602734][T16917] ? _copy_from_user+0x116/0x170 [ 262.607654][T16917] ? get_timespec64+0x11e/0x1d0 [ 262.612500][T16917] __x64_sys_recvmmsg+0x135/0x1a0 [ 262.617536][T16917] do_syscall_64+0xf3/0x1b0 [ 262.622031][T16917] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 262.627938][T16917] RIP: 0033:0x45ca29 [ 262.631828][T16917] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 262.651452][T16917] RSP: 002b:00007ff1541f4c78 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 262.659866][T16917] RAX: ffffffffffffffda RBX: 00000000004fb6c0 RCX: 000000000045ca29 [ 262.667837][T16917] RDX: 04000000000003b4 RSI: 00000000200037c0 RDI: 0000000000000003 [ 262.675857][T16917] RBP: 000000000078bf00 R08: 0000000020003700 R09: 0000000000000000 [ 262.683945][T16917] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 08:39:16 executing program 2 (fault-call:8 fault-nth:9): shmget(0x0, 0x4000, 0x780012c9, &(0x7f0000ffc000/0x4000)=nil) shmctl$IPC_RMID(0x0, 0x0) shmat(0x0, &(0x7f0000ffe000/0x1000)=nil, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x2, 0x1) r1 = open(&(0x7f0000000080)='./bus\x00', 0x430c2, 0x0) ftruncate(r1, 0x200004) sendfile(r0, r1, 0x0, 0x80001d00c0d0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) [ 262.691918][T16917] R13: 00000000000008a2 R14: 00000000004cb748 R15: 00007ff1541f56d4 08:39:16 executing program 1 (fault-call:8 fault-nth:23): r0 = socket(0x10, 0x803, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000005540)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000c80)=""/235, 0xeb}], 0x1}}], 0x1, 0x0, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendto(r0, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000b80)=@ethernet={0x0, @local}, 0x80, 0x0}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000ac0)=[{{&(0x7f0000000880)=@caif=@util, 0x80, &(0x7f0000000540)=[{&(0x7f0000000900)=""/128, 0x80}, {&(0x7f0000000980)=""/76, 0x4c}], 0x2}, 0x3f}], 0x1, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_SYS_GET(0xffffffffffffffff, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000a00)={0x0, 0x30}}, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x374, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x14b}, {&(0x7f0000000140)=""/85, 0x20a}, {&(0x7f0000000fc0)=""/4096, 0x773}, {&(0x7f0000000400)=""/106, 0x2ce}, {&(0x7f0000000740)=""/73, 0x3dd}, {&(0x7f0000000200)=""/77, 0x96}, {&(0x7f00000007c0)=""/154, 0x40d}, {&(0x7f0000000000)=""/22, 0xa}], 0x81, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 08:39:16 executing program 5: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x10, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = socket$inet6(0xa, 0x1, 0x8010800000000084) r1 = socket$kcm(0x2, 0x3, 0x2) recvmsg(r1, &(0x7f0000007500)={&(0x7f0000006f80)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x80, 0x0, 0x0, 0xffffffffffffffff}, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmmsg$inet6(r0, &(0x7f00000000c0)=[{{&(0x7f0000002c80)={0xa, 0x0, 0x0, @loopback}, 0x1c, &(0x7f0000005000)=[{&(0x7f0000002cc0)="ea", 0x1}], 0x1}}], 0x1, 0x20000040) 08:39:16 executing program 4: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x20000000003, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00'}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newlink={0x60, 0x10, 0x1, 0x70bd25, 0x63010000, {0x0, 0x0, 0x0, r4, 0x50800}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @ip6gretap={{0xe, 0x1, 'ip6gretap\x00'}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @ipv4={[], [], @private=0xa010100}}, @IFLA_GRE_REMOTE={0x14, 0x7, @remote}]}}}]}, 0x60}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00'}) [ 262.739580][T16930] FAULT_INJECTION: forcing a failure. [ 262.739580][T16930] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 262.756534][T16930] CPU: 1 PID: 16930 Comm: syz-executor.2 Not tainted 5.7.0-rc6-syzkaller #0 [ 262.765596][T16930] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 262.775835][T16930] Call Trace: [ 262.779131][T16930] dump_stack+0x1e9/0x30e [ 262.783466][T16930] should_fail+0x433/0x5b0 08:39:16 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_setup(0x5f, &(0x7f00000000c0)=0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x806, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'\x00', 0x20000005002}) io_submit(r0, 0x8, &(0x7f0000000280)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000040), 0x2000004a}]) r2 = socket$inet6(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f00000001c0)={'batadv0\x00'}) ioctl$sock_inet6_tcp_SIOCINQ(r2, 0x541b, &(0x7f0000000040)) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newlink={0x60, 0x10, 0x1, 0x2, 0x0, {0x0, 0x0, 0x0, r6}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @ip6gretap={{0xe, 0x1, 'ip6gretap\x00'}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @ipv4={[], [], @loopback}}, @IFLA_GRE_REMOTE={0x14, 0x7, @remote}]}}}]}, 0x60}}, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r4, 0xc0205647, &(0x7f0000000100)={0x70000, 0x4, 0x6, r5, 0x0, &(0x7f0000000080)={0x9f0902, 0xe2, [], @value=0x4}}) r8 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r9 = dup(r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) ioctl$DRM_IOCTL_AGP_ALLOC(r9, 0xc0206434, &(0x7f0000000200)={0x80000001, 0x0, 0x1, 0xb19a}) ioctl$DRM_IOCTL_AGP_FREE(r7, 0x40206435, &(0x7f0000000240)={0xa66, r10, 0x1, 0xffffffff}) [ 262.787891][T16930] prepare_alloc_pages+0x28c/0x4a0 [ 262.793008][T16930] __alloc_pages_nodemask+0xbc/0x5e0 [ 262.798301][T16930] __do_page_cache_readahead+0x1de/0x4f0 [ 262.803944][T16930] generic_file_buffered_read+0x3ea/0x2570 [ 262.809766][T16930] generic_file_splice_read+0x452/0x700 [ 262.815345][T16930] ? splice_shrink_spd+0xb0/0xb0 [ 262.820288][T16930] splice_direct_to_actor+0x3c1/0xb40 [ 262.825665][T16930] ? do_splice_direct+0x340/0x340 [ 262.830692][T16930] do_splice_direct+0x201/0x340 [ 262.835545][T16930] ? security_file_permission+0x50/0xc0 [ 262.841089][T16930] do_sendfile+0x809/0xfe0 [ 262.845511][T16930] __x64_sys_sendfile64+0x164/0x1a0 [ 262.850712][T16930] ? do_syscall_64+0x19/0x1b0 [ 262.855403][T16930] do_syscall_64+0xf3/0x1b0 [ 262.859911][T16930] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 262.865894][T16930] RIP: 0033:0x45ca29 [ 262.869813][T16930] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 262.889761][T16930] RSP: 002b:00007efeff606c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 262.898342][T16930] RAX: ffffffffffffffda RBX: 00000000004fc540 RCX: 000000000045ca29 [ 262.906310][T16930] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 262.914284][T16930] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 262.922272][T16930] R10: 000080001d00c0d0 R11: 0000000000000246 R12: 0000000000000005 [ 262.930242][T16930] R13: 00000000000008dc R14: 00000000004cba16 R15: 00007efeff6076d4 [ 262.930994][T16941] FAULT_INJECTION: forcing a failure. [ 262.930994][T16941] name failslab, interval 1, probability 0, space 0, times 0 [ 262.971679][T16944] IPVS: ftp: loaded support on port[0] = 21 [ 262.975504][T16941] CPU: 0 PID: 16941 Comm: syz-executor.1 Not tainted 5.7.0-rc6-syzkaller #0 [ 262.986374][T16941] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 262.996602][T16941] Call Trace: [ 262.999894][T16941] dump_stack+0x1e9/0x30e [ 263.004238][T16941] should_fail+0x433/0x5b0 [ 263.008666][T16941] should_failslab+0x5/0x20 [ 263.013170][T16941] kmem_cache_alloc_node+0x64/0x290 [ 263.018372][T16941] ? __alloc_skb+0x94/0x4f0 [ 263.022866][T16941] __alloc_skb+0x94/0x4f0 [ 263.027177][T16941] netlink_dump+0x1a0/0x10d0 [ 263.031772][T16941] ? trace_irq_enable_rcuidle+0x1f/0x1d0 [ 263.037422][T16941] ? skb_free_datagram+0x24/0xd0 [ 263.042395][T16941] netlink_recvmsg+0x5fc/0xfe0 [ 263.047151][T16941] ? netlink_sendmsg+0xd70/0xd70 [ 263.052100][T16941] ____sys_recvmsg+0x24a/0x510 [ 263.056872][T16941] ? import_iovec+0x12a/0x2c0 [ 263.061529][T16941] do_recvmmsg+0x426/0x1470 [ 263.066272][T16941] ? _copy_from_user+0x116/0x170 [ 263.071232][T16941] ? get_timespec64+0x11e/0x1d0 [ 263.076078][T16941] __x64_sys_recvmmsg+0x135/0x1a0 [ 263.081109][T16941] do_syscall_64+0xf3/0x1b0 [ 263.085612][T16941] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 263.091499][T16941] RIP: 0033:0x45ca29 [ 263.095454][T16941] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 263.115053][T16941] RSP: 002b:00007ff1541f4c78 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 263.123581][T16941] RAX: ffffffffffffffda RBX: 00000000004fb6c0 RCX: 000000000045ca29 [ 263.131602][T16941] RDX: 04000000000003b4 RSI: 00000000200037c0 RDI: 0000000000000003 08:39:17 executing program 1 (fault-call:8 fault-nth:24): r0 = socket(0x10, 0x803, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000005540)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000c80)=""/235, 0xeb}], 0x1}}], 0x1, 0x0, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendto(r0, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000b80)=@ethernet={0x0, @local}, 0x80, 0x0}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000ac0)=[{{&(0x7f0000000880)=@caif=@util, 0x80, &(0x7f0000000540)=[{&(0x7f0000000900)=""/128, 0x80}, {&(0x7f0000000980)=""/76, 0x4c}], 0x2}, 0x3f}], 0x1, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_SYS_GET(0xffffffffffffffff, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000a00)={0x0, 0x30}}, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x374, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x14b}, {&(0x7f0000000140)=""/85, 0x20a}, {&(0x7f0000000fc0)=""/4096, 0x773}, {&(0x7f0000000400)=""/106, 0x2ce}, {&(0x7f0000000740)=""/73, 0x3dd}, {&(0x7f0000000200)=""/77, 0x96}, {&(0x7f00000007c0)=""/154, 0x40d}, {&(0x7f0000000000)=""/22, 0xa}], 0x81, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) [ 263.139577][T16941] RBP: 000000000078bf00 R08: 0000000020003700 R09: 0000000000000000 [ 263.147815][T16941] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 263.155777][T16941] R13: 00000000000008a2 R14: 00000000004cb748 R15: 00007ff1541f56d4 08:39:17 executing program 3: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x20000000003, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newlink={0x60, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @ip6gretap={{0xe, 0x1, 'ip6gretap\x00'}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @ipv4={[], [], @loopback}}, @IFLA_GRE_REMOTE={0x14, 0x7, @remote}]}}}]}, 0x60}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00'}) 08:39:17 executing program 4: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x20000000003, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00'}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newlink={0x60, 0x10, 0x1, 0x70bd25, 0x65580000, {0x0, 0x0, 0x0, r4, 0x50800}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @ip6gretap={{0xe, 0x1, 'ip6gretap\x00'}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @ipv4={[], [], @private=0xa010100}}, @IFLA_GRE_REMOTE={0x14, 0x7, @remote}]}}}]}, 0x60}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00'}) 08:39:17 executing program 2 (fault-call:8 fault-nth:10): shmget(0x0, 0x4000, 0x780012c9, &(0x7f0000ffc000/0x4000)=nil) shmctl$IPC_RMID(0x0, 0x0) shmat(0x0, &(0x7f0000ffe000/0x1000)=nil, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x2, 0x1) r1 = open(&(0x7f0000000080)='./bus\x00', 0x430c2, 0x0) ftruncate(r1, 0x200004) sendfile(r0, r1, 0x0, 0x80001d00c0d0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) [ 263.283785][T16981] FAULT_INJECTION: forcing a failure. [ 263.283785][T16981] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 263.284191][T16985] FAULT_INJECTION: forcing a failure. [ 263.284191][T16985] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 263.297234][T16981] CPU: 1 PID: 16981 Comm: syz-executor.1 Not tainted 5.7.0-rc6-syzkaller #0 [ 263.297240][T16981] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 263.297243][T16981] Call Trace: [ 263.297262][T16981] dump_stack+0x1e9/0x30e [ 263.297273][T16981] should_fail+0x433/0x5b0 [ 263.297285][T16981] ? __kasan_kmalloc+0x114/0x160 [ 263.297297][T16981] prepare_alloc_pages+0x28c/0x4a0 [ 263.297308][T16981] __alloc_pages_nodemask+0xbc/0x5e0 [ 263.297321][T16981] kmem_getpages+0x49/0x900 [ 263.297333][T16981] cache_grow_begin+0x7b/0x2e0 [ 263.297344][T16981] cache_alloc_refill+0x359/0x3f0 [ 263.297354][T16981] ? trace_irq_disable_rcuidle+0x1f/0x1d0 [ 263.297368][T16981] ? check_preemption_disabled+0xb0/0x240 [ 263.382602][T16981] ? debug_smp_processor_id+0x5/0x20 [ 263.388512][T16981] kmem_cache_alloc_node_trace+0x1bf/0x2b0 [ 263.394409][T16981] ? __kmalloc_node_track_caller+0x37/0x60 [ 263.400258][T16981] __kmalloc_node_track_caller+0x37/0x60 [ 263.405888][T16981] ? netlink_dump+0x1a0/0x10d0 [ 263.412543][T16981] __alloc_skb+0xde/0x4f0 [ 263.416882][T16981] netlink_dump+0x1a0/0x10d0 [ 263.421468][T16981] ? trace_irq_enable_rcuidle+0x1f/0x1d0 [ 263.427085][T16981] ? skb_free_datagram+0x24/0xd0 [ 263.432010][T16981] netlink_recvmsg+0x5fc/0xfe0 [ 263.436772][T16981] ? netlink_sendmsg+0xd70/0xd70 [ 263.441688][T16981] ____sys_recvmsg+0x24a/0x510 [ 263.446451][T16981] ? import_iovec+0x12a/0x2c0 [ 263.451123][T16981] do_recvmmsg+0x426/0x1470 [ 263.455628][T16981] ? _copy_from_user+0x116/0x170 [ 263.460543][T16981] ? get_timespec64+0x11e/0x1d0 [ 263.466328][T16981] __x64_sys_recvmmsg+0x135/0x1a0 [ 263.472304][T16981] do_syscall_64+0xf3/0x1b0 [ 263.476793][T16981] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 263.482666][T16981] RIP: 0033:0x45ca29 [ 263.486806][T16981] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 263.506389][T16981] RSP: 002b:00007ff1541f4c78 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 263.514795][T16981] RAX: ffffffffffffffda RBX: 00000000004fb6c0 RCX: 000000000045ca29 [ 263.522835][T16981] RDX: 04000000000003b4 RSI: 00000000200037c0 RDI: 0000000000000003 [ 263.530788][T16981] RBP: 000000000078bf00 R08: 0000000020003700 R09: 0000000000000000 [ 263.538737][T16981] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 263.546712][T16981] R13: 00000000000008a2 R14: 00000000004cb748 R15: 00007ff1541f56d4 [ 263.554687][T16985] CPU: 0 PID: 16985 Comm: syz-executor.2 Not tainted 5.7.0-rc6-syzkaller #0 [ 263.564240][T16985] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 263.574898][T16985] Call Trace: [ 263.578214][T16985] dump_stack+0x1e9/0x30e [ 263.582578][T16985] should_fail+0x433/0x5b0 [ 263.587000][T16985] prepare_alloc_pages+0x28c/0x4a0 [ 263.592111][T16985] __alloc_pages_nodemask+0xbc/0x5e0 [ 263.597396][T16985] __do_page_cache_readahead+0x1de/0x4f0 [ 263.603031][T16985] generic_file_buffered_read+0x3ea/0x2570 [ 263.608845][T16985] generic_file_splice_read+0x452/0x700 [ 263.614394][T16985] ? splice_shrink_spd+0xb0/0xb0 [ 263.619334][T16985] splice_direct_to_actor+0x3c1/0xb40 [ 263.624737][T16985] ? do_splice_direct+0x340/0x340 [ 263.630147][T16985] do_splice_direct+0x201/0x340 [ 263.635014][T16985] ? security_file_permission+0x50/0xc0 [ 263.640605][T16985] do_sendfile+0x809/0xfe0 [ 263.645054][T16985] __x64_sys_sendfile64+0x164/0x1a0 [ 263.651103][T16985] ? do_syscall_64+0x19/0x1b0 [ 263.656130][T16985] do_syscall_64+0xf3/0x1b0 [ 263.660720][T16985] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 263.666608][T16985] RIP: 0033:0x45ca29 [ 263.670529][T16985] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 263.690129][T16985] RSP: 002b:00007efeff606c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 263.698531][T16985] RAX: ffffffffffffffda RBX: 00000000004fc540 RCX: 000000000045ca29 [ 263.706493][T16985] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 263.714454][T16985] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 263.722577][T16985] R10: 000080001d00c0d0 R11: 0000000000000246 R12: 0000000000000005 08:39:17 executing program 1 (fault-call:8 fault-nth:25): r0 = socket(0x10, 0x803, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000005540)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000c80)=""/235, 0xeb}], 0x1}}], 0x1, 0x0, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendto(r0, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000b80)=@ethernet={0x0, @local}, 0x80, 0x0}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000ac0)=[{{&(0x7f0000000880)=@caif=@util, 0x80, &(0x7f0000000540)=[{&(0x7f0000000900)=""/128, 0x80}, {&(0x7f0000000980)=""/76, 0x4c}], 0x2}, 0x3f}], 0x1, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_SYS_GET(0xffffffffffffffff, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000a00)={0x0, 0x30}}, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x374, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x14b}, {&(0x7f0000000140)=""/85, 0x20a}, {&(0x7f0000000fc0)=""/4096, 0x773}, {&(0x7f0000000400)=""/106, 0x2ce}, {&(0x7f0000000740)=""/73, 0x3dd}, {&(0x7f0000000200)=""/77, 0x96}, {&(0x7f00000007c0)=""/154, 0x40d}, {&(0x7f0000000000)=""/22, 0xa}], 0x81, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) [ 263.730522][T16985] R13: 00000000000008dc R14: 00000000004cba16 R15: 00007efeff6076d4 08:39:17 executing program 5: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x10, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = socket$inet6(0xa, 0x1, 0x8010800000000084) r1 = socket$kcm(0x2, 0x3, 0x2) recvmsg(r1, &(0x7f0000007500)={&(0x7f0000006f80)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x80, 0x0, 0x0, 0xffffffffffffffff}, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmmsg$inet6(r0, &(0x7f00000000c0)=[{{&(0x7f0000002c80)={0xa, 0x0, 0x0, @loopback}, 0x1c, &(0x7f0000005000)=[{&(0x7f0000002cc0)="ea", 0x1}], 0x1}}], 0x1, 0x20000040) 08:39:17 executing program 3: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x20000000003, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newlink={0x60, 0x10, 0x1, 0x0, 0x2, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @ip6gretap={{0xe, 0x1, 'ip6gretap\x00'}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @ipv4={[], [], @loopback}}, @IFLA_GRE_REMOTE={0x14, 0x7, @remote}]}}}]}, 0x60}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00'}) 08:39:17 executing program 4: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x20000000003, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00'}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newlink={0x60, 0x10, 0x1, 0x70bd25, 0x81000000, {0x0, 0x0, 0x0, r4, 0x50800}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @ip6gretap={{0xe, 0x1, 'ip6gretap\x00'}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @ipv4={[], [], @private=0xa010100}}, @IFLA_GRE_REMOTE={0x14, 0x7, @remote}]}}}]}, 0x60}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00'}) 08:39:17 executing program 2 (fault-call:8 fault-nth:11): shmget(0x0, 0x4000, 0x780012c9, &(0x7f0000ffc000/0x4000)=nil) shmctl$IPC_RMID(0x0, 0x0) shmat(0x0, &(0x7f0000ffe000/0x1000)=nil, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x2, 0x1) r1 = open(&(0x7f0000000080)='./bus\x00', 0x430c2, 0x0) ftruncate(r1, 0x200004) sendfile(r0, r1, 0x0, 0x80001d00c0d0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) [ 263.807260][T17000] IPVS: ftp: loaded support on port[0] = 21 [ 263.882713][T17012] FAULT_INJECTION: forcing a failure. [ 263.882713][T17012] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 263.914518][T17012] CPU: 0 PID: 17012 Comm: syz-executor.2 Not tainted 5.7.0-rc6-syzkaller #0 [ 263.923229][T17012] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 263.933282][T17012] Call Trace: [ 263.936604][T17012] dump_stack+0x1e9/0x30e [ 263.940946][T17012] should_fail+0x433/0x5b0 [ 263.945379][T17012] prepare_alloc_pages+0x28c/0x4a0 [ 263.950496][T17012] __alloc_pages_nodemask+0xbc/0x5e0 [ 263.955788][T17012] __do_page_cache_readahead+0x1de/0x4f0 [ 263.961429][T17012] generic_file_buffered_read+0x3ea/0x2570 [ 263.967246][T17012] generic_file_splice_read+0x452/0x700 [ 263.972793][T17012] ? splice_shrink_spd+0xb0/0xb0 [ 263.977729][T17012] splice_direct_to_actor+0x3c1/0xb40 [ 263.983102][T17012] ? do_splice_direct+0x340/0x340 [ 263.988134][T17012] do_splice_direct+0x201/0x340 [ 263.992992][T17012] ? security_file_permission+0x50/0xc0 [ 263.998573][T17012] do_sendfile+0x809/0xfe0 [ 264.002996][T17012] __x64_sys_sendfile64+0x164/0x1a0 [ 264.008199][T17012] ? do_syscall_64+0x19/0x1b0 [ 264.012855][T17012] do_syscall_64+0xf3/0x1b0 [ 264.017358][T17012] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 264.023239][T17012] RIP: 0033:0x45ca29 [ 264.027122][T17012] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 264.046718][T17012] RSP: 002b:00007efeff606c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 264.055104][T17012] RAX: ffffffffffffffda RBX: 00000000004fc540 RCX: 000000000045ca29 [ 264.063142][T17012] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 264.071092][T17012] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 264.079045][T17012] R10: 000080001d00c0d0 R11: 0000000000000246 R12: 0000000000000005 [ 264.087099][T17012] R13: 00000000000008dc R14: 00000000004cba16 R15: 00007efeff6076d4 08:39:18 executing program 1: r0 = socket(0x10, 0x803, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000005540)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000c80)=""/235, 0xeb}], 0x1}}], 0x1, 0x0, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendto(r0, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000b80)=@ethernet={0x0, @local}, 0x80, 0x0}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000ac0)=[{{&(0x7f0000000880)=@caif=@util, 0x80, &(0x7f0000000540)=[{&(0x7f0000000900)=""/128, 0x80}, {&(0x7f0000000980)=""/76, 0x4c}], 0x2}, 0x3f}], 0x1, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_SYS_GET(0xffffffffffffffff, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000a00)={0x0, 0x30}}, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x374, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x14b}, {&(0x7f0000000140)=""/85, 0x20a}, {&(0x7f0000000fc0)=""/4096, 0x773}, {&(0x7f0000000400)=""/106, 0x2ce}, {&(0x7f0000000740)=""/73, 0x3dd}, {&(0x7f0000000200)=""/77, 0x96}, {&(0x7f00000007c0)=""/154, 0x40d}, {&(0x7f0000000000)=""/22, 0xa}], 0x81, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 08:39:18 executing program 3: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x20000000003, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newlink={0x60, 0x10, 0x1, 0x0, 0x3, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @ip6gretap={{0xe, 0x1, 'ip6gretap\x00'}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @ipv4={[], [], @loopback}}, @IFLA_GRE_REMOTE={0x14, 0x7, @remote}]}}}]}, 0x60}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00'}) 08:39:18 executing program 0: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x20000000003, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00'}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newlink={0x60, 0x10, 0x1, 0x70bd25, 0x63010000, {0x0, 0x0, 0x0, r4, 0x50800}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @ip6gretap={{0xe, 0x1, 'ip6gretap\x00'}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @ipv4={[], [], @private=0xa010100}}, @IFLA_GRE_REMOTE={0x14, 0x7, @remote}]}}}]}, 0x60}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00'}) 08:39:18 executing program 1: r0 = socket(0x10, 0x803, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000005540)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000c80)=""/235, 0xeb}], 0x1}}], 0x1, 0x0, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendto(r0, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000b80)=@ethernet={0x0, @local}, 0x80, 0x0}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000ac0)=[{{&(0x7f0000000880)=@caif=@util, 0x80, &(0x7f0000000540)=[{&(0x7f0000000900)=""/128, 0x80}, {&(0x7f0000000980)=""/76, 0x4c}], 0x2}, 0x3f}], 0x1, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_SYS_GET(0xffffffffffffffff, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000a00)={0x0, 0x30}}, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x8, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x14b}, {&(0x7f0000000140)=""/85, 0x20a}, {&(0x7f0000000fc0)=""/4096, 0x773}, {&(0x7f0000000400)=""/106, 0x2ce}, {&(0x7f0000000740)=""/73, 0x3dd}, {&(0x7f0000000200)=""/77, 0x96}, {&(0x7f00000007c0)=""/154, 0x40d}, {&(0x7f0000000000)=""/22, 0xa}], 0x81, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 08:39:18 executing program 4: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x20000000003, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00'}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newlink={0x60, 0x10, 0x1, 0x70bd25, 0x88470000, {0x0, 0x0, 0x0, r4, 0x50800}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @ip6gretap={{0xe, 0x1, 'ip6gretap\x00'}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @ipv4={[], [], @private=0xa010100}}, @IFLA_GRE_REMOTE={0x14, 0x7, @remote}]}}}]}, 0x60}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00'}) 08:39:18 executing program 2 (fault-call:8 fault-nth:12): shmget(0x0, 0x4000, 0x780012c9, &(0x7f0000ffc000/0x4000)=nil) shmctl$IPC_RMID(0x0, 0x0) shmat(0x0, &(0x7f0000ffe000/0x1000)=nil, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x2, 0x1) r1 = open(&(0x7f0000000080)='./bus\x00', 0x430c2, 0x0) ftruncate(r1, 0x200004) sendfile(r0, r1, 0x0, 0x80001d00c0d0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) 08:39:18 executing program 3: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x20000000003, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newlink={0x60, 0x10, 0x1, 0x0, 0x4, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @ip6gretap={{0xe, 0x1, 'ip6gretap\x00'}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @ipv4={[], [], @loopback}}, @IFLA_GRE_REMOTE={0x14, 0x7, @remote}]}}}]}, 0x60}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00'}) [ 264.462138][T17066] FAULT_INJECTION: forcing a failure. [ 264.462138][T17066] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 264.475687][T17066] CPU: 1 PID: 17066 Comm: syz-executor.2 Not tainted 5.7.0-rc6-syzkaller #0 [ 264.484364][T17066] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 264.494428][T17066] Call Trace: [ 264.497755][T17066] dump_stack+0x1e9/0x30e [ 264.502804][T17066] should_fail+0x433/0x5b0 [ 264.507245][T17066] prepare_alloc_pages+0x28c/0x4a0 [ 264.512359][T17066] __alloc_pages_nodemask+0xbc/0x5e0 [ 264.517640][T17066] __do_page_cache_readahead+0x1de/0x4f0 [ 264.523274][T17066] generic_file_buffered_read+0x3ea/0x2570 [ 264.529079][T17066] generic_file_splice_read+0x452/0x700 [ 264.534634][T17066] ? splice_shrink_spd+0xb0/0xb0 [ 264.540482][T17066] splice_direct_to_actor+0x3c1/0xb40 [ 264.545863][T17066] ? do_splice_direct+0x340/0x340 [ 264.550882][T17066] do_splice_direct+0x201/0x340 [ 264.555725][T17066] ? security_file_permission+0x50/0xc0 [ 264.561267][T17066] do_sendfile+0x809/0xfe0 [ 264.565683][T17066] __x64_sys_sendfile64+0x164/0x1a0 [ 264.570871][T17066] ? do_syscall_64+0x19/0x1b0 [ 264.575521][T17066] do_syscall_64+0xf3/0x1b0 [ 264.580000][T17066] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 264.585883][T17066] RIP: 0033:0x45ca29 [ 264.589750][T17066] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 08:39:18 executing program 5: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x10, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = socket$inet6(0xa, 0x1, 0x8010800000000084) r1 = socket$kcm(0x2, 0x3, 0x2) recvmsg(r1, &(0x7f0000007500)={&(0x7f0000006f80)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x80, 0x0, 0x0, 0xffffffffffffffff}, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) sendmmsg$inet6(r0, &(0x7f00000000c0)=[{{&(0x7f0000002c80)={0xa, 0x0, 0x0, @loopback}, 0x1c, &(0x7f0000005000)=[{&(0x7f0000002cc0)="ea", 0x1}], 0x1}}], 0x1, 0x20000040) [ 264.609788][T17066] RSP: 002b:00007efeff606c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 264.618224][T17066] RAX: ffffffffffffffda RBX: 00000000004fc540 RCX: 000000000045ca29 [ 264.626624][T17066] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 264.631344][T17073] IPVS: ftp: loaded support on port[0] = 21 [ 264.634763][T17066] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 264.634769][T17066] R10: 000080001d00c0d0 R11: 0000000000000246 R12: 0000000000000005 08:39:18 executing program 1: r0 = socket(0x10, 0x803, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000005540)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000c80)=""/235, 0xeb}], 0x1}}], 0x1, 0x0, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendto(r0, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000b80)=@ethernet={0x0, @local}, 0x80, 0x0}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000ac0)=[{{&(0x7f0000000880)=@caif=@util, 0x80, &(0x7f0000000540)=[{&(0x7f0000000900)=""/128, 0x80}, {&(0x7f0000000980)=""/76, 0x4c}], 0x2}, 0x3f}], 0x1, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_SYS_GET(0xffffffffffffffff, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000a00)={0x0, 0x30}}, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xc, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x14b}, {&(0x7f0000000140)=""/85, 0x20a}, {&(0x7f0000000fc0)=""/4096, 0x773}, {&(0x7f0000000400)=""/106, 0x2ce}, {&(0x7f0000000740)=""/73, 0x3dd}, {&(0x7f0000000200)=""/77, 0x96}, {&(0x7f00000007c0)=""/154, 0x40d}, {&(0x7f0000000000)=""/22, 0xa}], 0x81, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 08:39:18 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x81) ioctl$KVM_SET_LAPIC(r3, 0x4400ae8f, &(0x7f0000000580)={"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"}) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = dup3(r1, r2, 0x0) ioctl$KVM_SET_CPUID(r3, 0xc008ae88, &(0x7f0000000240)=ANY=[@ANYBLOB="0100df45000000000001070100400000000000000000000000000000000000000000f80c83b84783ee281468a20d17fb3383c28cd866501f013bed6587bc1ac8a4aafaacf3dfc9b5b3605dc061930101220b898f0059a6ceea92e165e3d50bbe816c79681f542b448d5fd92ce8c4ebd6d10f0e6f4cb8deaf0736e6c2b7fa1798a6cd2f4366d03f23bf34a6d6ae0eedd6cbf8a0e7a17f0aaac056d2bb2fe0d319eb3a7bc7392bfb5f8886da74c6b746a34f50329ae6b9af3cbf32e57dda7a83f3f5009c64f6eb500cf9bf6ba6da4b75aaaeec4c9b0a9467cbcb8203d500db37b36ed5d84fb64ba15598232f522ab157a3c8c5dcb442a733789f623f"]) dup2(r4, r3) dup2(r0, r0) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r8 = dup(r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(r6, r8, &(0x7f0000fe5000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, &(0x7f0000000040)="b805000000b95d057f8c0f01c1d93065430f2211460faeb418b7a1ef2742d85a0066baf80cb8b76fb483ef66bafc0cec6666400f73f7000f213af2095d020fc718", 0x41}], 0x1, 0x1, &(0x7f0000000100), 0x0) [ 264.634775][T17066] R13: 00000000000008dc R14: 00000000004cba16 R15: 00007efeff6076d4 08:39:18 executing program 4: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x20000000003, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00'}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newlink={0x60, 0x10, 0x1, 0x70bd25, 0x88480000, {0x0, 0x0, 0x0, r4, 0x50800}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @ip6gretap={{0xe, 0x1, 'ip6gretap\x00'}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @ipv4={[], [], @private=0xa010100}}, @IFLA_GRE_REMOTE={0x14, 0x7, @remote}]}}}]}, 0x60}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00'}) 08:39:18 executing program 3: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x20000000003, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newlink={0x60, 0x10, 0x1, 0x0, 0x5, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @ip6gretap={{0xe, 0x1, 'ip6gretap\x00'}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @ipv4={[], [], @loopback}}, @IFLA_GRE_REMOTE={0x14, 0x7, @remote}]}}}]}, 0x60}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00'}) 08:39:18 executing program 1: r0 = socket(0x10, 0x803, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000005540)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000c80)=""/235, 0xeb}], 0x1}}], 0x1, 0x0, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendto(r0, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000b80)=@ethernet={0x0, @local}, 0x80, 0x0}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000ac0)=[{{&(0x7f0000000880)=@caif=@util, 0x80, &(0x7f0000000540)=[{&(0x7f0000000900)=""/128, 0x80}, {&(0x7f0000000980)=""/76, 0x4c}], 0x2}, 0x3f}], 0x1, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_SYS_GET(0xffffffffffffffff, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000a00)={0x0, 0x30}}, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x34, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x14b}, {&(0x7f0000000140)=""/85, 0x20a}, {&(0x7f0000000fc0)=""/4096, 0x773}, {&(0x7f0000000400)=""/106, 0x2ce}, {&(0x7f0000000740)=""/73, 0x3dd}, {&(0x7f0000000200)=""/77, 0x96}, {&(0x7f00000007c0)=""/154, 0x40d}, {&(0x7f0000000000)=""/22, 0xa}], 0x81, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 08:39:18 executing program 2 (fault-call:8 fault-nth:13): shmget(0x0, 0x4000, 0x780012c9, &(0x7f0000ffc000/0x4000)=nil) shmctl$IPC_RMID(0x0, 0x0) shmat(0x0, &(0x7f0000ffe000/0x1000)=nil, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x2, 0x1) r1 = open(&(0x7f0000000080)='./bus\x00', 0x430c2, 0x0) ftruncate(r1, 0x200004) sendfile(r0, r1, 0x0, 0x80001d00c0d0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) 08:39:18 executing program 4: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x20000000003, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00'}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newlink={0x60, 0x10, 0x1, 0x70bd25, 0x88a8ffff, {0x0, 0x0, 0x0, r4, 0x50800}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @ip6gretap={{0xe, 0x1, 'ip6gretap\x00'}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @ipv4={[], [], @private=0xa010100}}, @IFLA_GRE_REMOTE={0x14, 0x7, @remote}]}}}]}, 0x60}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00'}) 08:39:18 executing program 3: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x20000000003, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newlink={0x60, 0x10, 0x1, 0x0, 0x6, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @ip6gretap={{0xe, 0x1, 'ip6gretap\x00'}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @ipv4={[], [], @loopback}}, @IFLA_GRE_REMOTE={0x14, 0x7, @remote}]}}}]}, 0x60}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00'}) 08:39:18 executing program 1: r0 = socket(0x10, 0x803, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000005540)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000c80)=""/235, 0xeb}], 0x1}}], 0x1, 0x0, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendto(r0, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000b80)=@ethernet={0x0, @local}, 0x80, 0x0}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000ac0)=[{{&(0x7f0000000880)=@caif=@util, 0x80, &(0x7f0000000540)=[{&(0x7f0000000900)=""/128, 0x80}, {&(0x7f0000000980)=""/76, 0x4c}], 0x2}, 0x3f}], 0x1, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_SYS_GET(0xffffffffffffffff, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000a00)={0x0, 0x30}}, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x308, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x14b}, {&(0x7f0000000140)=""/85, 0x20a}, {&(0x7f0000000fc0)=""/4096, 0x773}, {&(0x7f0000000400)=""/106, 0x2ce}, {&(0x7f0000000740)=""/73, 0x3dd}, {&(0x7f0000000200)=""/77, 0x96}, {&(0x7f00000007c0)=""/154, 0x40d}, {&(0x7f0000000000)=""/22, 0xa}], 0x81, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 08:39:18 executing program 1: r0 = socket(0x10, 0x803, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000005540)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000c80)=""/235, 0xeb}], 0x1}}], 0x1, 0x0, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendto(r0, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000b80)=@ethernet={0x0, @local}, 0x80, 0x0}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000ac0)=[{{&(0x7f0000000880)=@caif=@util, 0x80, &(0x7f0000000540)=[{&(0x7f0000000900)=""/128, 0x80}, {&(0x7f0000000980)=""/76, 0x4c}], 0x2}, 0x3f}], 0x1, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_SYS_GET(0xffffffffffffffff, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000a00)={0x0, 0x30}}, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x30c, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x14b}, {&(0x7f0000000140)=""/85, 0x20a}, {&(0x7f0000000fc0)=""/4096, 0x773}, {&(0x7f0000000400)=""/106, 0x2ce}, {&(0x7f0000000740)=""/73, 0x3dd}, {&(0x7f0000000200)=""/77, 0x96}, {&(0x7f00000007c0)=""/154, 0x40d}, {&(0x7f0000000000)=""/22, 0xa}], 0x81, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) [ 264.925581][T17127] FAULT_INJECTION: forcing a failure. [ 264.925581][T17127] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 264.953465][T17127] CPU: 1 PID: 17127 Comm: syz-executor.2 Not tainted 5.7.0-rc6-syzkaller #0 [ 264.962163][T17127] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 264.972210][T17127] Call Trace: 08:39:18 executing program 1: r0 = socket(0x10, 0x803, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000005540)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000c80)=""/235, 0xeb}], 0x1}}], 0x1, 0x0, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendto(r0, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000b80)=@ethernet={0x0, @local}, 0x80, 0x0}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000ac0)=[{{&(0x7f0000000880)=@caif=@util, 0x80, &(0x7f0000000540)=[{&(0x7f0000000900)=""/128, 0x80}, {&(0x7f0000000980)=""/76, 0x4c}], 0x2}, 0x3f}], 0x1, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_SYS_GET(0xffffffffffffffff, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000a00)={0x0, 0x30}}, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x374, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0xac8}, {&(0x7f0000000140)=""/85, 0x20a}, {&(0x7f0000000fc0)=""/4096, 0x773}, {&(0x7f0000000400)=""/106, 0x2ce}, {&(0x7f0000000740)=""/73, 0x3dd}, {&(0x7f0000000200)=""/77, 0x96}, {&(0x7f00000007c0)=""/154, 0x40d}, {&(0x7f0000000000)=""/22, 0xa}], 0x81, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) [ 264.975499][T17127] dump_stack+0x1e9/0x30e [ 264.979827][T17127] should_fail+0x433/0x5b0 [ 264.984425][T17127] prepare_alloc_pages+0x28c/0x4a0 [ 264.989542][T17127] __alloc_pages_nodemask+0xbc/0x5e0 [ 264.994835][T17127] __do_page_cache_readahead+0x1de/0x4f0 [ 265.000476][T17127] generic_file_buffered_read+0x3ea/0x2570 [ 265.006294][T17127] generic_file_splice_read+0x452/0x700 [ 265.011855][T17127] ? splice_shrink_spd+0xb0/0xb0 [ 265.016826][T17127] splice_direct_to_actor+0x3c1/0xb40 [ 265.022201][T17127] ? do_splice_direct+0x340/0x340 [ 265.027318][T17127] do_splice_direct+0x201/0x340 [ 265.032189][T17127] ? security_file_permission+0x50/0xc0 [ 265.037733][T17127] do_sendfile+0x809/0xfe0 [ 265.042157][T17127] __x64_sys_sendfile64+0x164/0x1a0 [ 265.047370][T17127] ? do_syscall_64+0x19/0x1b0 [ 265.052048][T17127] do_syscall_64+0xf3/0x1b0 [ 265.056552][T17127] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 265.062440][T17127] RIP: 0033:0x45ca29 [ 265.066330][T17127] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 265.085948][T17127] RSP: 002b:00007efeff606c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 265.094363][T17127] RAX: ffffffffffffffda RBX: 00000000004fc540 RCX: 000000000045ca29 [ 265.102935][T17127] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 265.111140][T17127] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 265.119274][T17127] R10: 000080001d00c0d0 R11: 0000000000000246 R12: 0000000000000005 [ 265.127217][T17127] R13: 00000000000008dc R14: 00000000004cba16 R15: 00007efeff6076d4 08:39:19 executing program 5: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x10, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = socket$inet6(0xa, 0x1, 0x8010800000000084) r1 = socket$kcm(0x2, 0x3, 0x2) recvmsg(r1, &(0x7f0000007500)={&(0x7f0000006f80)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x80, 0x0, 0x0, 0xffffffffffffffff}, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) sendmmsg$inet6(r0, &(0x7f00000000c0)=[{{&(0x7f0000002c80)={0xa, 0x0, 0x0, @loopback}, 0x1c, &(0x7f0000005000)=[{&(0x7f0000002cc0)="ea", 0x1}], 0x1}}], 0x1, 0x20000040) 08:39:19 executing program 1: r0 = socket(0x10, 0x803, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000005540)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000c80)=""/235, 0xeb}], 0x1}}], 0x1, 0x0, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendto(r0, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000b80)=@ethernet={0x0, @local}, 0x80, 0x0}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000ac0)=[{{&(0x7f0000000880)=@caif=@util, 0x80, &(0x7f0000000540)=[{&(0x7f0000000900)=""/128, 0x80}, {&(0x7f0000000980)=""/76, 0x4c}], 0x2}, 0x3f}], 0x1, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_SYS_GET(0xffffffffffffffff, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000a00)={0x0, 0x30}}, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x374, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x2000018b}, {&(0x7f0000000140)=""/85, 0x20a}, {&(0x7f0000000fc0)=""/4096, 0x773}, {&(0x7f0000000400)=""/106, 0x2ce}, {&(0x7f0000000740)=""/73, 0x3dd}, {&(0x7f0000000200)=""/77, 0x96}, {&(0x7f00000007c0)=""/154, 0x40d}, {&(0x7f0000000000)=""/22, 0xa}], 0x81, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 08:39:19 executing program 4: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x20000000003, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00'}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newlink={0x60, 0x10, 0x1, 0x70bd25, 0x9effffff, {0x0, 0x0, 0x0, r4, 0x50800}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @ip6gretap={{0xe, 0x1, 'ip6gretap\x00'}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @ipv4={[], [], @private=0xa010100}}, @IFLA_GRE_REMOTE={0x14, 0x7, @remote}]}}}]}, 0x60}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00'}) 08:39:19 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001280)=@newsa={0xf0, 0x10, 0x713, 0x0, 0x0, {{@in6=@dev, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x2, 0xa0}, {@in6, 0x4d2}, @in6=@private2, {0x0, 0xeb}, {0x4}, {}, 0x0, 0x0, 0xa}}, 0xf0}}, 0x0) 08:39:19 executing program 2 (fault-call:8 fault-nth:14): shmget(0x0, 0x4000, 0x780012c9, &(0x7f0000ffc000/0x4000)=nil) shmctl$IPC_RMID(0x0, 0x0) shmat(0x0, &(0x7f0000ffe000/0x1000)=nil, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x2, 0x1) r1 = open(&(0x7f0000000080)='./bus\x00', 0x430c2, 0x0) ftruncate(r1, 0x200004) sendfile(r0, r1, 0x0, 0x80001d00c0d0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) 08:39:19 executing program 3: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x20000000003, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newlink={0x60, 0x10, 0x1, 0x0, 0x8, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @ip6gretap={{0xe, 0x1, 'ip6gretap\x00'}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @ipv4={[], [], @loopback}}, @IFLA_GRE_REMOTE={0x14, 0x7, @remote}]}}}]}, 0x60}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00'}) [ 265.480962][T17159] FAULT_INJECTION: forcing a failure. [ 265.480962][T17159] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 265.481743][T17164] IPVS: ftp: loaded support on port[0] = 21 [ 265.513162][T17159] CPU: 0 PID: 17159 Comm: syz-executor.2 Not tainted 5.7.0-rc6-syzkaller #0 [ 265.521857][T17159] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 265.531915][T17159] Call Trace: [ 265.535193][T17159] dump_stack+0x1e9/0x30e [ 265.539540][T17159] should_fail+0x433/0x5b0 [ 265.543935][T17159] prepare_alloc_pages+0x28c/0x4a0 [ 265.549035][T17159] __alloc_pages_nodemask+0xbc/0x5e0 [ 265.554298][T17159] __do_page_cache_readahead+0x1de/0x4f0 [ 265.559912][T17159] generic_file_buffered_read+0x3ea/0x2570 [ 265.565715][T17159] generic_file_splice_read+0x452/0x700 [ 265.571255][T17159] ? splice_shrink_spd+0xb0/0xb0 [ 265.576183][T17159] splice_direct_to_actor+0x3c1/0xb40 [ 265.581546][T17159] ? do_splice_direct+0x340/0x340 [ 265.586564][T17159] do_splice_direct+0x201/0x340 [ 265.591434][T17159] ? security_file_permission+0x50/0xc0 [ 265.596955][T17159] do_sendfile+0x809/0xfe0 [ 265.601371][T17159] __x64_sys_sendfile64+0x164/0x1a0 [ 265.606542][T17159] ? do_syscall_64+0x19/0x1b0 [ 265.611194][T17159] do_syscall_64+0xf3/0x1b0 [ 265.615673][T17159] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 265.621539][T17159] RIP: 0033:0x45ca29 [ 265.625422][T17159] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 265.645005][T17159] RSP: 002b:00007efeff606c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 265.653417][T17159] RAX: ffffffffffffffda RBX: 00000000004fc540 RCX: 000000000045ca29 [ 265.661369][T17159] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 265.669412][T17159] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 08:39:19 executing program 0: r0 = msgget$private(0x0, 0x0) msgsnd(r0, &(0x7f00000003c0)=ANY=[@ANYRESHEX], 0x1, 0x0) msgctl$IPC_SET(r0, 0x1, &(0x7f0000000340)={{0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}) msgctl$MSG_INFO(r0, 0xc, &(0x7f0000000440)=""/25) msgctl$MSG_STAT_ANY(r0, 0xd, &(0x7f0000000300)=""/140) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e62}, 0x1c) listen(0xffffffffffffffff, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000000)) r1 = open(&(0x7f0000000080)='./file0\x00', 0x20002, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x4, 0x0, 0x0, 0x41c1, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x15}, 0x2080, 0x1, 0xfffffffc, 0x1, 0x0, 0xfffffffd}, 0xffffffffffffffff, 0xbfffffffffffffff, 0xffffffffffffffff, 0x10) r2 = socket$inet6(0xa, 0x3, 0x3c) ioctl$BLKTRACESTOP(0xffffffffffffffff, 0x1275, 0x0) msgsnd(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="c2220f0000000000783803d9a83e2956080000"], 0x2000, 0x0) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000340)={{}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}) msgctl$MSG_INFO(0x0, 0xc, &(0x7f0000000440)=""/25) msgctl$IPC_RMID(0x0, 0x0) sendto$inet6(r2, &(0x7f0000000000), 0xffa7, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x18) ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r1, 0x8983, &(0x7f00000000c0)={0x8, 'team_slave_1\x00', {'ip6_vti0\x00'}, 0x2}) socket(0x0, 0x0, 0x0) execve(&(0x7f0000000100)='./file0\x00', &(0x7f00000002c0)=[&(0x7f0000000140)='teLm_slave_1\x00', 0x0, &(0x7f00000001c0)='team_slave_1\x00', &(0x7f0000000240)='team_slave_1\x00', &(0x7f0000000280)='ip6_vti0\x00'], 0x0) [ 265.677371][T17159] R10: 000080001d00c0d0 R11: 0000000000000246 R12: 0000000000000005 [ 265.685316][T17159] R13: 00000000000008dc R14: 00000000004cba16 R15: 00007efeff6076d4 08:39:19 executing program 1: r0 = socket(0x10, 0x803, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000005540)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000c80)=""/235, 0xeb}], 0x1}}], 0x1, 0x0, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendto(r0, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000b80)=@ethernet={0x0, @local}, 0x80, 0x0}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000ac0)=[{{&(0x7f0000000880)=@caif=@util, 0x80, &(0x7f0000000540)=[{&(0x7f0000000900)=""/128, 0x80}, {&(0x7f0000000980)=""/76, 0x4c}], 0x2}, 0x3f}], 0x1, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_SYS_GET(0xffffffffffffffff, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000a00)={0x0, 0x30}}, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x374, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x7ffff000}, {&(0x7f0000000140)=""/85, 0x20a}, {&(0x7f0000000fc0)=""/4096, 0x773}, {&(0x7f0000000400)=""/106, 0x2ce}, {&(0x7f0000000740)=""/73, 0x3dd}, {&(0x7f0000000200)=""/77, 0x96}, {&(0x7f00000007c0)=""/154, 0x40d}, {&(0x7f0000000000)=""/22, 0xa}], 0x81, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 08:39:19 executing program 3: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x20000000003, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newlink={0x60, 0x10, 0x1, 0x0, 0x9, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @ip6gretap={{0xe, 0x1, 'ip6gretap\x00'}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @ipv4={[], [], @loopback}}, @IFLA_GRE_REMOTE={0x14, 0x7, @remote}]}}}]}, 0x60}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00'}) 08:39:19 executing program 4: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x20000000003, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00'}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newlink={0x60, 0x10, 0x1, 0x70bd25, 0xe0ffffff, {0x0, 0x0, 0x0, r4, 0x50800}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @ip6gretap={{0xe, 0x1, 'ip6gretap\x00'}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @ipv4={[], [], @private=0xa010100}}, @IFLA_GRE_REMOTE={0x14, 0x7, @remote}]}}}]}, 0x60}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00'}) 08:39:19 executing program 1: r0 = socket(0x10, 0x803, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000005540)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000c80)=""/235, 0xeb}], 0x1}}], 0x1, 0x0, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendto(r0, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000b80)=@ethernet={0x0, @local}, 0x80, 0x0}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000ac0)=[{{&(0x7f0000000880)=@caif=@util, 0x80, &(0x7f0000000540)=[{&(0x7f0000000900)=""/128, 0x80}, {&(0x7f0000000980)=""/76, 0x4c}], 0x2}, 0x3f}], 0x1, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_SYS_GET(0xffffffffffffffff, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000a00)={0x0, 0x30}}, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x374, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x14b}, {&(0x7f0000000140)=""/85, 0x202}, {&(0x7f0000000fc0)=""/4096, 0x773}, {&(0x7f0000000400)=""/106, 0x2ce}, {&(0x7f0000000740)=""/73, 0x3dd}, {&(0x7f0000000200)=""/77, 0x96}, {&(0x7f00000007c0)=""/154, 0x40d}, {&(0x7f0000000000)=""/22, 0xa}], 0x81, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 08:39:19 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_init_net_socket$llc(0x1a, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r3, 0x4008ae8a, &(0x7f0000000080)=ANY=[@ANYBLOB="010000000000000001000080000000000000000000843a6d44fd2772"]) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4040aea0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x13}) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(0xffffffffffffffff, &(0x7f0000000000)="1f0000000104fffffd3b000007110600f30501000b00010002", 0x19) r6 = socket$inet_udp(0x2, 0x2, 0x0) close(r6) write(r5, &(0x7f0000000080)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c00000001040300000047cd00000000000000000500010001000000"], 0x1c}}, 0x0) write$binfmt_misc(r5, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r4, 0x0, r6, 0x0, 0x4ffe0, 0x0) ioctl$KVM_SET_CPUID(r3, 0xae80, 0x0) [ 266.036994][T17224] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.0'. 08:39:20 executing program 5: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x10, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = socket$inet6(0xa, 0x1, 0x8010800000000084) r1 = socket$kcm(0x2, 0x3, 0x2) recvmsg(r1, &(0x7f0000007500)={&(0x7f0000006f80)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x80, 0x0, 0x0, 0xffffffffffffffff}, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) sendmmsg$inet6(r0, &(0x7f00000000c0)=[{{&(0x7f0000002c80)={0xa, 0x0, 0x0, @loopback}, 0x1c, &(0x7f0000005000)=[{&(0x7f0000002cc0)="ea", 0x1}], 0x1}}], 0x1, 0x20000040) 08:39:20 executing program 1: r0 = socket(0x10, 0x803, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000005540)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000c80)=""/235, 0xeb}], 0x1}}], 0x1, 0x0, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendto(r0, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000b80)=@ethernet={0x0, @local}, 0x80, 0x0}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000ac0)=[{{&(0x7f0000000880)=@caif=@util, 0x80, &(0x7f0000000540)=[{&(0x7f0000000900)=""/128, 0x80}, {&(0x7f0000000980)=""/76, 0x4c}], 0x2}, 0x3f}], 0x1, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_SYS_GET(0xffffffffffffffff, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000a00)={0x0, 0x30}}, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x374, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x14b}, {&(0x7f0000000140)=""/85, 0x203}, {&(0x7f0000000fc0)=""/4096, 0x773}, {&(0x7f0000000400)=""/106, 0x2ce}, {&(0x7f0000000740)=""/73, 0x3dd}, {&(0x7f0000000200)=""/77, 0x96}, {&(0x7f00000007c0)=""/154, 0x40d}, {&(0x7f0000000000)=""/22, 0xa}], 0x81, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 08:39:20 executing program 3: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x20000000003, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newlink={0x60, 0x10, 0x1, 0x0, 0xa, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @ip6gretap={{0xe, 0x1, 'ip6gretap\x00'}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @ipv4={[], [], @loopback}}, @IFLA_GRE_REMOTE={0x14, 0x7, @remote}]}}}]}, 0x60}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00'}) 08:39:20 executing program 4: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x20000000003, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00'}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newlink={0x60, 0x10, 0x1, 0x70bd25, 0xefffffff, {0x0, 0x0, 0x0, r4, 0x50800}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @ip6gretap={{0xe, 0x1, 'ip6gretap\x00'}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @ipv4={[], [], @private=0xa010100}}, @IFLA_GRE_REMOTE={0x14, 0x7, @remote}]}}}]}, 0x60}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00'}) 08:39:20 executing program 2 (fault-call:8 fault-nth:15): shmget(0x0, 0x4000, 0x780012c9, &(0x7f0000ffc000/0x4000)=nil) shmctl$IPC_RMID(0x0, 0x0) shmat(0x0, &(0x7f0000ffe000/0x1000)=nil, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x2, 0x1) r1 = open(&(0x7f0000000080)='./bus\x00', 0x430c2, 0x0) ftruncate(r1, 0x200004) sendfile(r0, r1, 0x0, 0x80001d00c0d0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) 08:39:20 executing program 1: r0 = socket(0x10, 0x803, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000005540)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000c80)=""/235, 0xeb}], 0x1}}], 0x1, 0x0, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendto(r0, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000b80)=@ethernet={0x0, @local}, 0x80, 0x0}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000ac0)=[{{&(0x7f0000000880)=@caif=@util, 0x80, &(0x7f0000000540)=[{&(0x7f0000000900)=""/128, 0x80}, {&(0x7f0000000980)=""/76, 0x4c}], 0x2}, 0x3f}], 0x1, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_SYS_GET(0xffffffffffffffff, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000a00)={0x0, 0x30}}, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x374, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x14b}, {&(0x7f0000000140)=""/85, 0x204}, {&(0x7f0000000fc0)=""/4096, 0x773}, {&(0x7f0000000400)=""/106, 0x2ce}, {&(0x7f0000000740)=""/73, 0x3dd}, {&(0x7f0000000200)=""/77, 0x96}, {&(0x7f00000007c0)=""/154, 0x40d}, {&(0x7f0000000000)=""/22, 0xa}], 0x81, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) [ 266.342525][T17234] IPVS: ftp: loaded support on port[0] = 21 [ 266.348654][T17236] FAULT_INJECTION: forcing a failure. [ 266.348654][T17236] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 266.386116][T17236] CPU: 1 PID: 17236 Comm: syz-executor.2 Not tainted 5.7.0-rc6-syzkaller #0 [ 266.394854][T17236] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 266.405122][T17236] Call Trace: [ 266.408443][T17236] dump_stack+0x1e9/0x30e [ 266.412778][T17236] should_fail+0x433/0x5b0 [ 266.417198][T17236] prepare_alloc_pages+0x28c/0x4a0 [ 266.422315][T17236] __alloc_pages_nodemask+0xbc/0x5e0 [ 266.427607][T17236] __do_page_cache_readahead+0x1de/0x4f0 [ 266.433265][T17236] generic_file_buffered_read+0x3ea/0x2570 [ 266.439068][T17236] generic_file_splice_read+0x452/0x700 [ 266.444602][T17236] ? splice_shrink_spd+0xb0/0xb0 [ 266.449517][T17236] splice_direct_to_actor+0x3c1/0xb40 [ 266.454874][T17236] ? do_splice_direct+0x340/0x340 [ 266.459879][T17236] do_splice_direct+0x201/0x340 [ 266.464707][T17236] ? security_file_permission+0x50/0xc0 [ 266.470233][T17236] do_sendfile+0x809/0xfe0 [ 266.474735][T17236] __x64_sys_sendfile64+0x164/0x1a0 [ 266.479996][T17236] ? do_syscall_64+0x19/0x1b0 [ 266.484647][T17236] do_syscall_64+0xf3/0x1b0 [ 266.489126][T17236] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 266.494991][T17236] RIP: 0033:0x45ca29 [ 266.498959][T17236] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 266.518634][T17236] RSP: 002b:00007efeff606c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 266.527018][T17236] RAX: ffffffffffffffda RBX: 00000000004fc540 RCX: 000000000045ca29 08:39:20 executing program 3: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x20000000003, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newlink={0x60, 0x10, 0x1, 0x0, 0xb, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @ip6gretap={{0xe, 0x1, 'ip6gretap\x00'}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @ipv4={[], [], @loopback}}, @IFLA_GRE_REMOTE={0x14, 0x7, @remote}]}}}]}, 0x60}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00'}) [ 266.534974][T17236] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 266.542919][T17236] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 266.550869][T17236] R10: 000080001d00c0d0 R11: 0000000000000246 R12: 0000000000000005 [ 266.558994][T17236] R13: 00000000000008dc R14: 00000000004cba16 R15: 00007efeff6076d4 08:39:20 executing program 4: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x20000000003, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00'}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newlink={0x60, 0x10, 0x1, 0x70bd25, 0xf0ffffff, {0x0, 0x0, 0x0, r4, 0x50800}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @ip6gretap={{0xe, 0x1, 'ip6gretap\x00'}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @ipv4={[], [], @private=0xa010100}}, @IFLA_GRE_REMOTE={0x14, 0x7, @remote}]}}}]}, 0x60}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00'}) 08:39:20 executing program 1: r0 = socket(0x10, 0x803, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000005540)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000c80)=""/235, 0xeb}], 0x1}}], 0x1, 0x0, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendto(r0, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000b80)=@ethernet={0x0, @local}, 0x80, 0x0}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000ac0)=[{{&(0x7f0000000880)=@caif=@util, 0x80, &(0x7f0000000540)=[{&(0x7f0000000900)=""/128, 0x80}, {&(0x7f0000000980)=""/76, 0x4c}], 0x2}, 0x3f}], 0x1, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_SYS_GET(0xffffffffffffffff, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000a00)={0x0, 0x30}}, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x374, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x14b}, {&(0x7f0000000140)=""/85, 0x97d}, {&(0x7f0000000fc0)=""/4096, 0x773}, {&(0x7f0000000400)=""/106, 0x2ce}, {&(0x7f0000000740)=""/73, 0x3dd}, {&(0x7f0000000200)=""/77, 0x96}, {&(0x7f00000007c0)=""/154, 0x40d}, {&(0x7f0000000000)=""/22, 0xa}], 0x81, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 08:39:20 executing program 2 (fault-call:8 fault-nth:16): shmget(0x0, 0x4000, 0x780012c9, &(0x7f0000ffc000/0x4000)=nil) shmctl$IPC_RMID(0x0, 0x0) shmat(0x0, &(0x7f0000ffe000/0x1000)=nil, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x2, 0x1) r1 = open(&(0x7f0000000080)='./bus\x00', 0x430c2, 0x0) ftruncate(r1, 0x200004) sendfile(r0, r1, 0x0, 0x80001d00c0d0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) 08:39:20 executing program 1: r0 = socket(0x10, 0x803, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000005540)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000c80)=""/235, 0xeb}], 0x1}}], 0x1, 0x0, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendto(r0, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000b80)=@ethernet={0x0, @local}, 0x80, 0x0}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000ac0)=[{{&(0x7f0000000880)=@caif=@util, 0x80, &(0x7f0000000540)=[{&(0x7f0000000900)=""/128, 0x80}, {&(0x7f0000000980)=""/76, 0x4c}], 0x2}, 0x3f}], 0x1, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_SYS_GET(0xffffffffffffffff, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000a00)={0x0, 0x30}}, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x374, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x14b}, {&(0x7f0000000140)=""/85, 0x2000034a}, {&(0x7f0000000fc0)=""/4096, 0x773}, {&(0x7f0000000400)=""/106, 0x2ce}, {&(0x7f0000000740)=""/73, 0x3dd}, {&(0x7f0000000200)=""/77, 0x96}, {&(0x7f00000007c0)=""/154, 0x40d}, {&(0x7f0000000000)=""/22, 0xa}], 0x81, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) [ 266.717926][T17282] FAULT_INJECTION: forcing a failure. [ 266.717926][T17282] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 266.764850][T17282] CPU: 0 PID: 17282 Comm: syz-executor.2 Not tainted 5.7.0-rc6-syzkaller #0 [ 266.773550][T17282] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 266.783604][T17282] Call Trace: [ 266.786928][T17282] dump_stack+0x1e9/0x30e [ 266.791270][T17282] should_fail+0x433/0x5b0 [ 266.795694][T17282] prepare_alloc_pages+0x28c/0x4a0 [ 266.800814][T17282] __alloc_pages_nodemask+0xbc/0x5e0 [ 266.806102][T17282] __do_page_cache_readahead+0x1de/0x4f0 [ 266.811743][T17282] generic_file_buffered_read+0x3ea/0x2570 [ 266.817556][T17282] generic_file_splice_read+0x452/0x700 [ 266.823108][T17282] ? splice_shrink_spd+0xb0/0xb0 [ 266.828051][T17282] splice_direct_to_actor+0x3c1/0xb40 [ 266.833430][T17282] ? do_splice_direct+0x340/0x340 [ 266.838457][T17282] do_splice_direct+0x201/0x340 [ 266.843310][T17282] ? security_file_permission+0x50/0xc0 [ 266.848856][T17282] do_sendfile+0x809/0xfe0 [ 266.853281][T17282] __x64_sys_sendfile64+0x164/0x1a0 [ 266.858477][T17282] ? do_syscall_64+0x19/0x1b0 [ 266.863488][T17282] do_syscall_64+0xf3/0x1b0 [ 266.867981][T17282] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 266.873847][T17282] RIP: 0033:0x45ca29 [ 266.877717][T17282] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 266.897383][T17282] RSP: 002b:00007efeff606c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 266.905797][T17282] RAX: ffffffffffffffda RBX: 00000000004fc540 RCX: 000000000045ca29 [ 266.913756][T17282] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 266.921720][T17282] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 266.929680][T17282] R10: 000080001d00c0d0 R11: 0000000000000246 R12: 0000000000000005 [ 266.937629][T17282] R13: 00000000000008dc R14: 00000000004cba16 R15: 00007efeff6076d4 08:39:20 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_init_net_socket$llc(0x1a, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r3, 0x4008ae8a, &(0x7f0000000080)=ANY=[@ANYBLOB="010000000000000001000080000000000000000000843a6d44fd2772"]) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4040aea0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x13}) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(0xffffffffffffffff, &(0x7f0000000000)="1f0000000104fffffd3b000007110600f30501000b00010002", 0x19) r6 = socket$inet_udp(0x2, 0x2, 0x0) close(r6) write(r5, &(0x7f0000000080)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c00000001040300000047cd00000000000000000500010001000000"], 0x1c}}, 0x0) write$binfmt_misc(r5, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r4, 0x0, r6, 0x0, 0x4ffe0, 0x0) ioctl$KVM_SET_CPUID(r3, 0xae80, 0x0) 08:39:21 executing program 5: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x10, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = socket$inet6(0xa, 0x1, 0x8010800000000084) r1 = socket$kcm(0x2, 0x3, 0x2) recvmsg(r1, &(0x7f0000007500)={&(0x7f0000006f80)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x80, 0x0, 0x0, 0xffffffffffffffff}, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x0) sendmmsg$inet6(r0, &(0x7f00000000c0)=[{{&(0x7f0000002c80)={0xa, 0x0, 0x0, @loopback}, 0x1c, &(0x7f0000005000)=[{&(0x7f0000002cc0)="ea", 0x1}], 0x1}}], 0x1, 0x20000040) 08:39:21 executing program 3: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x20000000003, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newlink={0x60, 0x10, 0x1, 0x0, 0xc, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @ip6gretap={{0xe, 0x1, 'ip6gretap\x00'}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @ipv4={[], [], @loopback}}, @IFLA_GRE_REMOTE={0x14, 0x7, @remote}]}}}]}, 0x60}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00'}) 08:39:21 executing program 1: r0 = socket(0x10, 0x803, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000005540)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000c80)=""/235, 0xeb}], 0x1}}], 0x1, 0x0, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendto(r0, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000b80)=@ethernet={0x0, @local}, 0x80, 0x0}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000ac0)=[{{&(0x7f0000000880)=@caif=@util, 0x80, &(0x7f0000000540)=[{&(0x7f0000000900)=""/128, 0x80}, {&(0x7f0000000980)=""/76, 0x4c}], 0x2}, 0x3f}], 0x1, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_SYS_GET(0xffffffffffffffff, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000a00)={0x0, 0x30}}, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x374, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x14b}, {&(0x7f0000000140)=""/85, 0x7fffeeb5}, {&(0x7f0000000fc0)=""/4096, 0x773}, {&(0x7f0000000400)=""/106, 0x2ce}, {&(0x7f0000000740)=""/73, 0x3dd}, {&(0x7f0000000200)=""/77, 0x96}, {&(0x7f00000007c0)=""/154, 0x40d}, {&(0x7f0000000000)=""/22, 0xa}], 0x81, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 08:39:21 executing program 4: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x20000000003, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00'}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newlink={0x60, 0x10, 0x1, 0x70bd25, 0xfc000000, {0x0, 0x0, 0x0, r4, 0x50800}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @ip6gretap={{0xe, 0x1, 'ip6gretap\x00'}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @ipv4={[], [], @private=0xa010100}}, @IFLA_GRE_REMOTE={0x14, 0x7, @remote}]}}}]}, 0x60}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00'}) 08:39:21 executing program 2 (fault-call:8 fault-nth:17): shmget(0x0, 0x4000, 0x780012c9, &(0x7f0000ffc000/0x4000)=nil) shmctl$IPC_RMID(0x0, 0x0) shmat(0x0, &(0x7f0000ffe000/0x1000)=nil, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x2, 0x1) r1 = open(&(0x7f0000000080)='./bus\x00', 0x430c2, 0x0) ftruncate(r1, 0x200004) sendfile(r0, r1, 0x0, 0x80001d00c0d0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) [ 267.079665][T17302] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.0'. [ 267.152757][T17307] FAULT_INJECTION: forcing a failure. [ 267.152757][T17307] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 267.165925][T17312] IPVS: ftp: loaded support on port[0] = 21 [ 267.188310][T17307] CPU: 1 PID: 17307 Comm: syz-executor.2 Not tainted 5.7.0-rc6-syzkaller #0 [ 267.197013][T17307] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 267.207063][T17307] Call Trace: [ 267.210363][T17307] dump_stack+0x1e9/0x30e [ 267.214786][T17307] should_fail+0x433/0x5b0 [ 267.219213][T17307] prepare_alloc_pages+0x28c/0x4a0 [ 267.224328][T17307] __alloc_pages_nodemask+0xbc/0x5e0 [ 267.229621][T17307] __do_page_cache_readahead+0x1de/0x4f0 [ 267.235262][T17307] generic_file_buffered_read+0x3ea/0x2570 [ 267.241083][T17307] generic_file_splice_read+0x452/0x700 [ 267.246640][T17307] ? splice_shrink_spd+0xb0/0xb0 08:39:21 executing program 1: r0 = socket(0x10, 0x803, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000005540)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000c80)=""/235, 0xeb}], 0x1}}], 0x1, 0x0, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendto(r0, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000b80)=@ethernet={0x0, @local}, 0x80, 0x0}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000ac0)=[{{&(0x7f0000000880)=@caif=@util, 0x80, &(0x7f0000000540)=[{&(0x7f0000000900)=""/128, 0x80}, {&(0x7f0000000980)=""/76, 0x4c}], 0x2}, 0x3f}], 0x1, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_SYS_GET(0xffffffffffffffff, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000a00)={0x0, 0x30}}, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x374, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x14b}, {&(0x7f0000000140)=""/85, 0x20a}, {&(0x7f0000000fc0)=""/4096, 0x20001733}, {&(0x7f0000000400)=""/106, 0x2ce}, {&(0x7f0000000740)=""/73, 0x3dd}, {&(0x7f0000000200)=""/77, 0x96}, {&(0x7f00000007c0)=""/154, 0x40d}, {&(0x7f0000000000)=""/22, 0xa}], 0x81, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) [ 267.251610][T17307] splice_direct_to_actor+0x3c1/0xb40 [ 267.256982][T17307] ? do_splice_direct+0x340/0x340 [ 267.262016][T17307] do_splice_direct+0x201/0x340 [ 267.266872][T17307] ? security_file_permission+0x50/0xc0 [ 267.272421][T17307] do_sendfile+0x809/0xfe0 [ 267.276843][T17307] __x64_sys_sendfile64+0x164/0x1a0 [ 267.282038][T17307] ? do_syscall_64+0x19/0x1b0 [ 267.286714][T17307] do_syscall_64+0xf3/0x1b0 [ 267.291314][T17307] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 267.297212][T17307] RIP: 0033:0x45ca29 08:39:21 executing program 1: r0 = socket(0x10, 0x803, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000005540)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000c80)=""/235, 0xeb}], 0x1}}], 0x1, 0x0, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendto(r0, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000b80)=@ethernet={0x0, @local}, 0x80, 0x0}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000ac0)=[{{&(0x7f0000000880)=@caif=@util, 0x80, &(0x7f0000000540)=[{&(0x7f0000000900)=""/128, 0x80}, {&(0x7f0000000980)=""/76, 0x4c}], 0x2}, 0x3f}], 0x1, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_SYS_GET(0xffffffffffffffff, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000a00)={0x0, 0x30}}, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x374, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x14b}, {&(0x7f0000000140)=""/85, 0x20a}, {&(0x7f0000000fc0)=""/4096, 0x7fffecab}, {&(0x7f0000000400)=""/106, 0x2ce}, {&(0x7f0000000740)=""/73, 0x3dd}, {&(0x7f0000000200)=""/77, 0x96}, {&(0x7f00000007c0)=""/154, 0x40d}, {&(0x7f0000000000)=""/22, 0xa}], 0x81, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) [ 267.301192][T17307] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 267.320799][T17307] RSP: 002b:00007efeff606c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 267.329218][T17307] RAX: ffffffffffffffda RBX: 00000000004fc540 RCX: 000000000045ca29 [ 267.337186][T17307] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 267.345160][T17307] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 08:39:21 executing program 4: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x20000000003, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00'}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newlink={0x60, 0x10, 0x1, 0x70bd25, 0xfcffffff, {0x0, 0x0, 0x0, r4, 0x50800}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @ip6gretap={{0xe, 0x1, 'ip6gretap\x00'}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @ipv4={[], [], @private=0xa010100}}, @IFLA_GRE_REMOTE={0x14, 0x7, @remote}]}}}]}, 0x60}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00'}) [ 267.353142][T17307] R10: 000080001d00c0d0 R11: 0000000000000246 R12: 0000000000000005 [ 267.361115][T17307] R13: 00000000000008dc R14: 00000000004cba16 R15: 00007efeff6076d4 08:39:21 executing program 3: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x20000000003, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newlink={0x60, 0x10, 0x1, 0x0, 0xf, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @ip6gretap={{0xe, 0x1, 'ip6gretap\x00'}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @ipv4={[], [], @loopback}}, @IFLA_GRE_REMOTE={0x14, 0x7, @remote}]}}}]}, 0x60}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00'}) 08:39:21 executing program 1: r0 = socket(0x10, 0x803, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000005540)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000c80)=""/235, 0xeb}], 0x1}}], 0x1, 0x0, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendto(r0, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000b80)=@ethernet={0x0, @local}, 0x80, 0x0}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000ac0)=[{{&(0x7f0000000880)=@caif=@util, 0x80, &(0x7f0000000540)=[{&(0x7f0000000900)=""/128, 0x80}, {&(0x7f0000000980)=""/76, 0x4c}], 0x2}, 0x3f}], 0x1, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_SYS_GET(0xffffffffffffffff, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000a00)={0x0, 0x30}}, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x374, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x14b}, {&(0x7f0000000140)=""/85, 0x20a}, {&(0x7f0000000fc0)=""/4096, 0x773}, {&(0x7f0000000400)=""/106, 0x200006ce}, {&(0x7f0000000740)=""/73, 0x3dd}, {&(0x7f0000000200)=""/77, 0x96}, {&(0x7f00000007c0)=""/154, 0x40d}, {&(0x7f0000000000)=""/22, 0xa}], 0x81, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 08:39:21 executing program 2 (fault-call:8 fault-nth:18): shmget(0x0, 0x4000, 0x780012c9, &(0x7f0000ffc000/0x4000)=nil) shmctl$IPC_RMID(0x0, 0x0) shmat(0x0, &(0x7f0000ffe000/0x1000)=nil, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x2, 0x1) r1 = open(&(0x7f0000000080)='./bus\x00', 0x430c2, 0x0) ftruncate(r1, 0x200004) sendfile(r0, r1, 0x0, 0x80001d00c0d0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) [ 267.530115][T17362] FAULT_INJECTION: forcing a failure. [ 267.530115][T17362] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 267.546069][T17362] CPU: 0 PID: 17362 Comm: syz-executor.2 Not tainted 5.7.0-rc6-syzkaller #0 [ 267.554942][T17362] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 267.565004][T17362] Call Trace: [ 267.568299][T17362] dump_stack+0x1e9/0x30e [ 267.572634][T17362] should_fail+0x433/0x5b0 [ 267.577057][T17362] prepare_alloc_pages+0x28c/0x4a0 [ 267.582175][T17362] __alloc_pages_nodemask+0xbc/0x5e0 [ 267.587466][T17362] __do_page_cache_readahead+0x1de/0x4f0 [ 267.593203][T17362] generic_file_buffered_read+0x3ea/0x2570 [ 267.599045][T17362] generic_file_splice_read+0x452/0x700 [ 267.604588][T17362] ? splice_shrink_spd+0xb0/0xb0 [ 267.609518][T17362] splice_direct_to_actor+0x3c1/0xb40 [ 267.614896][T17362] ? do_splice_direct+0x340/0x340 [ 267.619900][T17362] do_splice_direct+0x201/0x340 [ 267.624780][T17362] ? security_file_permission+0x50/0xc0 [ 267.630322][T17362] do_sendfile+0x809/0xfe0 [ 267.634736][T17362] __x64_sys_sendfile64+0x164/0x1a0 [ 267.639935][T17362] ? do_syscall_64+0x19/0x1b0 [ 267.644584][T17362] do_syscall_64+0xf3/0x1b0 [ 267.649078][T17362] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 267.654963][T17362] RIP: 0033:0x45ca29 [ 267.658831][T17362] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 267.678529][T17362] RSP: 002b:00007efeff606c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 267.686920][T17362] RAX: ffffffffffffffda RBX: 00000000004fc540 RCX: 000000000045ca29 [ 267.694868][T17362] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 267.702822][T17362] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 267.710772][T17362] R10: 000080001d00c0d0 R11: 0000000000000246 R12: 0000000000000005 [ 267.718724][T17362] R13: 00000000000008dc R14: 00000000004cba16 R15: 00007efeff6076d4 08:39:21 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x44, 0x2, 0x1, 0x3, 0x0, 0x0, {}, [@CTA_TUPLE_REPLY={0x30, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2={0xfc, 0x2, [], 0x1}}, {0x14, 0x4, @private0}}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x40040}, 0x0) recvfrom$inet6(0xffffffffffffffff, &(0x7f0000000180)=""/200, 0xc8, 0x20, 0x0, 0x0) 08:39:21 executing program 5: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x10, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = socket$inet6(0xa, 0x1, 0x8010800000000084) r1 = socket$kcm(0x2, 0x3, 0x2) recvmsg(r1, &(0x7f0000007500)={&(0x7f0000006f80)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x80, 0x0, 0x0, 0xffffffffffffffff}, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x0) sendmmsg$inet6(r0, &(0x7f00000000c0)=[{{&(0x7f0000002c80)={0xa, 0x0, 0x0, @loopback}, 0x1c, &(0x7f0000005000)=[{&(0x7f0000002cc0)="ea", 0x1}], 0x1}}], 0x1, 0x20000040) 08:39:21 executing program 1: r0 = socket(0x10, 0x803, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000005540)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000c80)=""/235, 0xeb}], 0x1}}], 0x1, 0x0, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendto(r0, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000b80)=@ethernet={0x0, @local}, 0x80, 0x0}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000ac0)=[{{&(0x7f0000000880)=@caif=@util, 0x80, &(0x7f0000000540)=[{&(0x7f0000000900)=""/128, 0x80}, {&(0x7f0000000980)=""/76, 0x4c}], 0x2}, 0x3f}], 0x1, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_SYS_GET(0xffffffffffffffff, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000a00)={0x0, 0x30}}, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x374, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x14b}, {&(0x7f0000000140)=""/85, 0x20a}, {&(0x7f0000000fc0)=""/4096, 0x773}, {&(0x7f0000000400)=""/106, 0x7fffe538}, {&(0x7f0000000740)=""/73, 0x3dd}, {&(0x7f0000000200)=""/77, 0x96}, {&(0x7f00000007c0)=""/154, 0x40d}, {&(0x7f0000000000)=""/22, 0xa}], 0x81, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 08:39:21 executing program 4: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x20000000003, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00'}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newlink={0x60, 0x10, 0x1, 0x70bd25, 0xfe80ffff, {0x0, 0x0, 0x0, r4, 0x50800}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @ip6gretap={{0xe, 0x1, 'ip6gretap\x00'}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @ipv4={[], [], @private=0xa010100}}, @IFLA_GRE_REMOTE={0x14, 0x7, @remote}]}}}]}, 0x60}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00'}) 08:39:21 executing program 3: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x20000000003, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newlink={0x60, 0x10, 0x1, 0x0, 0x10, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @ip6gretap={{0xe, 0x1, 'ip6gretap\x00'}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @ipv4={[], [], @loopback}}, @IFLA_GRE_REMOTE={0x14, 0x7, @remote}]}}}]}, 0x60}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00'}) 08:39:21 executing program 2 (fault-call:8 fault-nth:19): shmget(0x0, 0x4000, 0x780012c9, &(0x7f0000ffc000/0x4000)=nil) shmctl$IPC_RMID(0x0, 0x0) shmat(0x0, &(0x7f0000ffe000/0x1000)=nil, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x2, 0x1) r1 = open(&(0x7f0000000080)='./bus\x00', 0x430c2, 0x0) ftruncate(r1, 0x200004) sendfile(r0, r1, 0x0, 0x80001d00c0d0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) 08:39:21 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00'}) r3 = socket$kcm(0x2, 0x2, 0x0) r4 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r4, &(0x7f000000c280)={&(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000140)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @remote}}}], 0x20}, 0x0) recvmsg(r4, &(0x7f0000007500)={&(0x7f0000006f80)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x80, 0x0, 0x0, 0xffffffffffffffff}, 0x0) sendmsg$inet(r3, &(0x7f00000003c0)={&(0x7f0000000080)={0x2, 0x4e20, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000001740)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r5, @local, @multicast2}}}], 0x20}, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newlink={0x20, 0x10, 0x200, 0x0, 0x0, {0x0, 0x0, 0x0, r5}}, 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="380000001000010000000000000000403f75cf3aa2b6bba47526907f2808e86b49a33cb3e8117f3e12cf0f43a58bd5c482db925711cf4b2dcda3c6b3a891727cc60086323796ba0bd07e957883a9fcba98245207baeec00180eea60c7d8ba5b1dac799361d2bd71d766cc43b617fe496161bfd9ace6f3e9a6ed7", @ANYRES32=r1, @ANYBLOB="00000000000000001800128008000100707070000c00028008000100", @ANYRES32=r2, @ANYBLOB], 0x38}}, 0x20040850) syz_emit_ethernet(0x4a, &(0x7f0000000140)=ANY=[@ANYRESHEX=r1, @ANYRES16=r0, @ANYRES32=0x41424344, @ANYBLOB="50001f0dda0b0000"], 0x0) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$SNDCTL_DSP_STEREO(r7, 0xc0045003, &(0x7f0000000000)) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r7, 0xc05c5340, &(0x7f0000000180)={0x0, 0x200, 0x4000000, {0x40, 0x1}, 0xa00, 0x200}) [ 267.991563][T17384] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 268.005958][T17383] FAULT_INJECTION: forcing a failure. [ 268.005958][T17383] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 268.034215][T17390] IPVS: ftp: loaded support on port[0] = 21 [ 268.041487][T17384] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 268.047192][T17383] CPU: 1 PID: 17383 Comm: syz-executor.2 Not tainted 5.7.0-rc6-syzkaller #0 [ 268.059462][T17383] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 268.069502][T17383] Call Trace: [ 268.072789][T17383] dump_stack+0x1e9/0x30e [ 268.077111][T17383] should_fail+0x433/0x5b0 [ 268.081505][T17383] prepare_alloc_pages+0x28c/0x4a0 [ 268.086609][T17383] __alloc_pages_nodemask+0xbc/0x5e0 [ 268.091880][T17383] __do_page_cache_readahead+0x1de/0x4f0 [ 268.097505][T17383] generic_file_buffered_read+0x3ea/0x2570 [ 268.104074][T17383] generic_file_splice_read+0x452/0x700 [ 268.109602][T17383] ? splice_shrink_spd+0xb0/0xb0 [ 268.114512][T17383] splice_direct_to_actor+0x3c1/0xb40 [ 268.119874][T17383] ? do_splice_direct+0x340/0x340 [ 268.124887][T17383] do_splice_direct+0x201/0x340 [ 268.129715][T17383] ? security_file_permission+0x50/0xc0 [ 268.135234][T17383] do_sendfile+0x809/0xfe0 [ 268.140106][T17383] __x64_sys_sendfile64+0x164/0x1a0 [ 268.145387][T17383] ? do_syscall_64+0x19/0x1b0 [ 268.150136][T17383] do_syscall_64+0xf3/0x1b0 [ 268.154640][T17383] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 268.160508][T17383] RIP: 0033:0x45ca29 [ 268.164378][T17383] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 268.183955][T17383] RSP: 002b:00007efeff606c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 268.192619][T17383] RAX: ffffffffffffffda RBX: 00000000004fc540 RCX: 000000000045ca29 [ 268.200565][T17383] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 268.208521][T17383] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 268.216483][T17383] R10: 000080001d00c0d0 R11: 0000000000000246 R12: 0000000000000005 [ 268.224428][T17383] R13: 00000000000008dc R14: 00000000004cba16 R15: 00007efeff6076d4 08:39:22 executing program 1: r0 = socket(0x10, 0x803, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000005540)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000c80)=""/235, 0xeb}], 0x1}}], 0x1, 0x0, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendto(r0, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000b80)=@ethernet={0x0, @local}, 0x80, 0x0}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000ac0)=[{{&(0x7f0000000880)=@caif=@util, 0x80, &(0x7f0000000540)=[{&(0x7f0000000900)=""/128, 0x80}, {&(0x7f0000000980)=""/76, 0x4c}], 0x2}, 0x3f}], 0x1, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_SYS_GET(0xffffffffffffffff, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000a00)={0x0, 0x30}}, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x374, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x14b}, {&(0x7f0000000140)=""/85, 0x20a}, {&(0x7f0000000fc0)=""/4096, 0x773}, {&(0x7f0000000400)=""/106, 0x2ce}, {&(0x7f0000000740)=""/73, 0x20000b1d}, {&(0x7f0000000200)=""/77, 0x96}, {&(0x7f00000007c0)=""/154, 0x40d}, {&(0x7f0000000000)=""/22, 0xa}], 0x81, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 08:39:22 executing program 3: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x20000000003, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newlink={0x60, 0x10, 0x1, 0x0, 0x11, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @ip6gretap={{0xe, 0x1, 'ip6gretap\x00'}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @ipv4={[], [], @loopback}}, @IFLA_GRE_REMOTE={0x14, 0x7, @remote}]}}}]}, 0x60}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00'}) [ 268.246706][T17391] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 08:39:22 executing program 0: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1003f, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x6113}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, r0, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) syz_open_procfs(0x0, &(0x7f0000272000)) 08:39:22 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x2349, &(0x7f0000000240)=0x0) io_submit(r2, 0x2, &(0x7f0000000100)=[&(0x7f00000000c0)={0x0, 0x0, 0x80000000000000, 0x1, 0x0, r1, 0x0}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) r3 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x2349, &(0x7f0000000240)) ioctl$NBD_CLEAR_QUE(r3, 0xab05) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) socket$nl_route(0x10, 0x3, 0x0) 08:39:22 executing program 4: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x20000000003, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00'}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newlink={0x60, 0x10, 0x1, 0x70bd25, 0xfec0ffff, {0x0, 0x0, 0x0, r4, 0x50800}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @ip6gretap={{0xe, 0x1, 'ip6gretap\x00'}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @ipv4={[], [], @private=0xa010100}}, @IFLA_GRE_REMOTE={0x14, 0x7, @remote}]}}}]}, 0x60}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00'}) 08:39:22 executing program 1: r0 = socket(0x10, 0x803, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000005540)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000c80)=""/235, 0xeb}], 0x1}}], 0x1, 0x0, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendto(r0, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000b80)=@ethernet={0x0, @local}, 0x80, 0x0}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000ac0)=[{{&(0x7f0000000880)=@caif=@util, 0x80, &(0x7f0000000540)=[{&(0x7f0000000900)=""/128, 0x80}, {&(0x7f0000000980)=""/76, 0x4c}], 0x2}, 0x3f}], 0x1, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_SYS_GET(0xffffffffffffffff, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000a00)={0x0, 0x30}}, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x374, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x14b}, {&(0x7f0000000140)=""/85, 0x20a}, {&(0x7f0000000fc0)=""/4096, 0x773}, {&(0x7f0000000400)=""/106, 0x2ce}, {&(0x7f0000000740)=""/73, 0x7fffe26a}, {&(0x7f0000000200)=""/77, 0x96}, {&(0x7f00000007c0)=""/154, 0x40d}, {&(0x7f0000000000)=""/22, 0xa}], 0x81, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 08:39:22 executing program 5: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x10, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = socket$inet6(0xa, 0x1, 0x8010800000000084) r1 = socket$kcm(0x2, 0x3, 0x2) recvmsg(r1, &(0x7f0000007500)={&(0x7f0000006f80)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x80, 0x0, 0x0, 0xffffffffffffffff}, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x0) sendmmsg$inet6(r0, &(0x7f00000000c0)=[{{&(0x7f0000002c80)={0xa, 0x0, 0x0, @loopback}, 0x1c, &(0x7f0000005000)=[{&(0x7f0000002cc0)="ea", 0x1}], 0x1}}], 0x1, 0x20000040) 08:39:22 executing program 3: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x20000000003, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newlink={0x60, 0x10, 0x1, 0x0, 0x12, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @ip6gretap={{0xe, 0x1, 'ip6gretap\x00'}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @ipv4={[], [], @loopback}}, @IFLA_GRE_REMOTE={0x14, 0x7, @remote}]}}}]}, 0x60}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00'}) 08:39:22 executing program 2 (fault-call:8 fault-nth:20): shmget(0x0, 0x4000, 0x780012c9, &(0x7f0000ffc000/0x4000)=nil) shmctl$IPC_RMID(0x0, 0x0) shmat(0x0, &(0x7f0000ffe000/0x1000)=nil, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x2, 0x1) r1 = open(&(0x7f0000000080)='./bus\x00', 0x430c2, 0x0) ftruncate(r1, 0x200004) sendfile(r0, r1, 0x0, 0x80001d00c0d0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) 08:39:22 executing program 1: r0 = socket(0x10, 0x803, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000005540)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000c80)=""/235, 0xeb}], 0x1}}], 0x1, 0x0, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendto(r0, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000b80)=@ethernet={0x0, @local}, 0x80, 0x0}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000ac0)=[{{&(0x7f0000000880)=@caif=@util, 0x80, &(0x7f0000000540)=[{&(0x7f0000000900)=""/128, 0x80}, {&(0x7f0000000980)=""/76, 0x4c}], 0x2}, 0x3f}], 0x1, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_SYS_GET(0xffffffffffffffff, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000a00)={0x0, 0x30}}, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x374, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x14b}, {&(0x7f0000000140)=""/85, 0x20a}, {&(0x7f0000000fc0)=""/4096, 0x773}, {&(0x7f0000000400)=""/106, 0x2ce}, {&(0x7f0000000740)=""/73, 0x3dd}, {&(0x7f0000000200)=""/77, 0x20000296}, {&(0x7f00000007c0)=""/154, 0x40d}, {&(0x7f0000000000)=""/22, 0xa}], 0x81, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 08:39:22 executing program 4: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x20000000003, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00'}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newlink={0x60, 0x10, 0x1, 0x70bd25, 0xff000000, {0x0, 0x0, 0x0, r4, 0x50800}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @ip6gretap={{0xe, 0x1, 'ip6gretap\x00'}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @ipv4={[], [], @private=0xa010100}}, @IFLA_GRE_REMOTE={0x14, 0x7, @remote}]}}}]}, 0x60}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00'}) 08:39:22 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x2349, &(0x7f0000000240)=0x0) io_submit(r2, 0x2, &(0x7f0000000100)=[&(0x7f00000000c0)={0x0, 0x0, 0x80000000000000, 0x1, 0x0, r1, 0x0}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) r3 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x2349, &(0x7f0000000240)) ioctl$NBD_CLEAR_QUE(r3, 0xab05) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) socket$nl_route(0x10, 0x3, 0x0) 08:39:22 executing program 1: r0 = socket(0x10, 0x803, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000005540)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000c80)=""/235, 0xeb}], 0x1}}], 0x1, 0x0, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendto(r0, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000b80)=@ethernet={0x0, @local}, 0x80, 0x0}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000ac0)=[{{&(0x7f0000000880)=@caif=@util, 0x80, &(0x7f0000000540)=[{&(0x7f0000000900)=""/128, 0x80}, {&(0x7f0000000980)=""/76, 0x4c}], 0x2}, 0x3f}], 0x1, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_SYS_GET(0xffffffffffffffff, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000a00)={0x0, 0x30}}, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x374, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x14b}, {&(0x7f0000000140)=""/85, 0x20a}, {&(0x7f0000000fc0)=""/4096, 0x773}, {&(0x7f0000000400)=""/106, 0x2ce}, {&(0x7f0000000740)=""/73, 0x3dd}, {&(0x7f0000000200)=""/77, 0x7fffde8d}, {&(0x7f00000007c0)=""/154, 0x40d}, {&(0x7f0000000000)=""/22, 0xa}], 0x81, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) [ 268.896365][T17460] IPVS: ftp: loaded support on port[0] = 21 [ 268.898024][T17458] FAULT_INJECTION: forcing a failure. [ 268.898024][T17458] name fail_page_alloc, interval 1, probability 0, space 0, times 0 08:39:22 executing program 4: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x20000000003, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00'}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newlink={0x60, 0x10, 0x1, 0x70bd25, 0xffff80fe, {0x0, 0x0, 0x0, r4, 0x50800}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @ip6gretap={{0xe, 0x1, 'ip6gretap\x00'}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @ipv4={[], [], @private=0xa010100}}, @IFLA_GRE_REMOTE={0x14, 0x7, @remote}]}}}]}, 0x60}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00'}) [ 268.960342][T17458] CPU: 1 PID: 17458 Comm: syz-executor.2 Not tainted 5.7.0-rc6-syzkaller #0 [ 268.969044][T17458] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 268.979088][T17458] Call Trace: [ 268.982404][T17458] dump_stack+0x1e9/0x30e [ 268.986766][T17458] should_fail+0x433/0x5b0 [ 268.991193][T17458] prepare_alloc_pages+0x28c/0x4a0 [ 268.996346][T17458] __alloc_pages_nodemask+0xbc/0x5e0 [ 269.001670][T17458] __do_page_cache_readahead+0x1de/0x4f0 [ 269.007485][T17458] generic_file_buffered_read+0x3ea/0x2570 [ 269.013300][T17458] generic_file_splice_read+0x452/0x700 [ 269.018852][T17458] ? splice_shrink_spd+0xb0/0xb0 [ 269.023818][T17458] splice_direct_to_actor+0x3c1/0xb40 [ 269.029190][T17458] ? do_splice_direct+0x340/0x340 [ 269.034214][T17458] do_splice_direct+0x201/0x340 [ 269.039066][T17458] ? security_file_permission+0x50/0xc0 [ 269.044613][T17458] do_sendfile+0x809/0xfe0 [ 269.049041][T17458] __x64_sys_sendfile64+0x164/0x1a0 [ 269.054238][T17458] ? do_syscall_64+0x19/0x1b0 [ 269.058919][T17458] do_syscall_64+0xf3/0x1b0 [ 269.063420][T17458] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 269.069330][T17458] RIP: 0033:0x45ca29 [ 269.073298][T17458] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 269.093315][T17458] RSP: 002b:00007efeff606c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 269.101706][T17458] RAX: ffffffffffffffda RBX: 00000000004fc540 RCX: 000000000045ca29 08:39:23 executing program 3: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x20000000003, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newlink={0x60, 0x10, 0x1, 0x0, 0x13, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @ip6gretap={{0xe, 0x1, 'ip6gretap\x00'}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @ipv4={[], [], @loopback}}, @IFLA_GRE_REMOTE={0x14, 0x7, @remote}]}}}]}, 0x60}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00'}) [ 269.110100][T17458] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 269.118080][T17458] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 269.126048][T17458] R10: 000080001d00c0d0 R11: 0000000000000246 R12: 0000000000000005 [ 269.133997][T17458] R13: 00000000000008dc R14: 00000000004cba16 R15: 00007efeff6076d4 08:39:23 executing program 1: r0 = socket(0x10, 0x803, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000005540)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000c80)=""/235, 0xeb}], 0x1}}], 0x1, 0x0, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendto(r0, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000b80)=@ethernet={0x0, @local}, 0x80, 0x0}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000ac0)=[{{&(0x7f0000000880)=@caif=@util, 0x80, &(0x7f0000000540)=[{&(0x7f0000000900)=""/128, 0x80}, {&(0x7f0000000980)=""/76, 0x4c}], 0x2}, 0x3f}], 0x1, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_SYS_GET(0xffffffffffffffff, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000a00)={0x0, 0x30}}, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x374, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x14b}, {&(0x7f0000000140)=""/85, 0x20a}, {&(0x7f0000000fc0)=""/4096, 0x773}, {&(0x7f0000000400)=""/106, 0x2ce}, {&(0x7f0000000740)=""/73, 0x3dd}, {&(0x7f0000000200)=""/77, 0x96}, {&(0x7f00000007c0)=""/154, 0xc00}, {&(0x7f0000000000)=""/22, 0xa}], 0x81, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 08:39:23 executing program 4: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x20000000003, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00'}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newlink={0x60, 0x10, 0x1, 0x70bd25, 0xffffa888, {0x0, 0x0, 0x0, r4, 0x50800}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @ip6gretap={{0xe, 0x1, 'ip6gretap\x00'}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @ipv4={[], [], @private=0xa010100}}, @IFLA_GRE_REMOTE={0x14, 0x7, @remote}]}}}]}, 0x60}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00'}) 08:39:23 executing program 1: r0 = socket(0x10, 0x803, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000005540)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000c80)=""/235, 0xeb}], 0x1}}], 0x1, 0x0, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendto(r0, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000b80)=@ethernet={0x0, @local}, 0x80, 0x0}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000ac0)=[{{&(0x7f0000000880)=@caif=@util, 0x80, &(0x7f0000000540)=[{&(0x7f0000000900)=""/128, 0x80}, {&(0x7f0000000980)=""/76, 0x4c}], 0x2}, 0x3f}], 0x1, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_SYS_GET(0xffffffffffffffff, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000a00)={0x0, 0x30}}, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x374, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x14b}, {&(0x7f0000000140)=""/85, 0x20a}, {&(0x7f0000000fc0)=""/4096, 0x773}, {&(0x7f0000000400)=""/106, 0x2ce}, {&(0x7f0000000740)=""/73, 0x3dd}, {&(0x7f0000000200)=""/77, 0x96}, {&(0x7f00000007c0)=""/154, 0xc01e}, {&(0x7f0000000000)=""/22, 0xa}], 0x81, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 08:39:23 executing program 5: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x10, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$inet6(0xa, 0x1, 0x8010800000000084) r0 = socket$kcm(0x2, 0x3, 0x2) recvmsg(r0, &(0x7f0000007500)={&(0x7f0000006f80)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x80, 0x0, 0x0, 0xffffffffffffffff}, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000000c0)=[{{&(0x7f0000002c80)={0xa, 0x0, 0x0, @loopback}, 0x1c, &(0x7f0000005000)=[{&(0x7f0000002cc0)="ea", 0x1}], 0x1}}], 0x1, 0x20000040) 08:39:23 executing program 3: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x20000000003, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newlink={0x60, 0x10, 0x1, 0x0, 0x14, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @ip6gretap={{0xe, 0x1, 'ip6gretap\x00'}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @ipv4={[], [], @loopback}}, @IFLA_GRE_REMOTE={0x14, 0x7, @remote}]}}}]}, 0x60}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00'}) 08:39:23 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x2349, &(0x7f0000000240)=0x0) io_submit(r2, 0x2, &(0x7f0000000100)=[&(0x7f00000000c0)={0x0, 0x0, 0x80000000000000, 0x1, 0x0, r1, 0x0}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) r3 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x2349, &(0x7f0000000240)) ioctl$NBD_CLEAR_QUE(r3, 0xab05) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) socket$nl_route(0x10, 0x3, 0x0) 08:39:23 executing program 1: r0 = socket(0x10, 0x803, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000005540)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000c80)=""/235, 0xeb}], 0x1}}], 0x1, 0x0, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendto(r0, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000b80)=@ethernet={0x0, @local}, 0x80, 0x0}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000ac0)=[{{&(0x7f0000000880)=@caif=@util, 0x80, &(0x7f0000000540)=[{&(0x7f0000000900)=""/128, 0x80}, {&(0x7f0000000980)=""/76, 0x4c}], 0x2}, 0x3f}], 0x1, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_SYS_GET(0xffffffffffffffff, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000a00)={0x0, 0x30}}, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x374, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x14b}, {&(0x7f0000000140)=""/85, 0x20a}, {&(0x7f0000000fc0)=""/4096, 0x773}, {&(0x7f0000000400)=""/106, 0x2ce}, {&(0x7f0000000740)=""/73, 0x3dd}, {&(0x7f0000000200)=""/77, 0x96}, {&(0x7f00000007c0)=""/154, 0x20000bcd}, {&(0x7f0000000000)=""/22, 0xa}], 0x81, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 08:39:23 executing program 2 (fault-call:8 fault-nth:21): shmget(0x0, 0x4000, 0x780012c9, &(0x7f0000ffc000/0x4000)=nil) shmctl$IPC_RMID(0x0, 0x0) shmat(0x0, &(0x7f0000ffe000/0x1000)=nil, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x2, 0x1) r1 = open(&(0x7f0000000080)='./bus\x00', 0x430c2, 0x0) ftruncate(r1, 0x200004) sendfile(r0, r1, 0x0, 0x80001d00c0d0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) 08:39:23 executing program 4: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x20000000003, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00'}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newlink={0x60, 0x10, 0x1, 0x70bd25, 0xffffc0fe, {0x0, 0x0, 0x0, r4, 0x50800}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @ip6gretap={{0xe, 0x1, 'ip6gretap\x00'}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @ipv4={[], [], @private=0xa010100}}, @IFLA_GRE_REMOTE={0x14, 0x7, @remote}]}}}]}, 0x60}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00'}) [ 269.751563][T17526] FAULT_INJECTION: forcing a failure. [ 269.751563][T17526] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 269.782258][T17529] IPVS: ftp: loaded support on port[0] = 21 [ 269.804661][T17526] CPU: 1 PID: 17526 Comm: syz-executor.2 Not tainted 5.7.0-rc6-syzkaller #0 [ 269.813369][T17526] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 269.823511][T17526] Call Trace: [ 269.826803][T17526] dump_stack+0x1e9/0x30e [ 269.831133][T17526] should_fail+0x433/0x5b0 [ 269.835549][T17526] prepare_alloc_pages+0x28c/0x4a0 [ 269.840815][T17526] __alloc_pages_nodemask+0xbc/0x5e0 [ 269.846100][T17526] __do_page_cache_readahead+0x1de/0x4f0 [ 269.851730][T17526] generic_file_buffered_read+0x3ea/0x2570 [ 269.857519][T17526] generic_file_splice_read+0x452/0x700 [ 269.863348][T17526] ? splice_shrink_spd+0xb0/0xb0 [ 269.868277][T17526] splice_direct_to_actor+0x3c1/0xb40 [ 269.873627][T17526] ? do_splice_direct+0x340/0x340 [ 269.878628][T17526] do_splice_direct+0x201/0x340 [ 269.883545][T17526] ? security_file_permission+0x50/0xc0 [ 269.889088][T17526] do_sendfile+0x809/0xfe0 [ 269.893484][T17526] __x64_sys_sendfile64+0x164/0x1a0 [ 269.898658][T17526] ? do_syscall_64+0x19/0x1b0 [ 269.903319][T17526] do_syscall_64+0xf3/0x1b0 [ 269.907800][T17526] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 269.913682][T17526] RIP: 0033:0x45ca29 [ 269.917572][T17526] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 269.937238][T17526] RSP: 002b:00007efeff606c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 269.946198][T17526] RAX: ffffffffffffffda RBX: 00000000004fc540 RCX: 000000000045ca29 08:39:23 executing program 1: r0 = socket(0x10, 0x803, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000005540)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000c80)=""/235, 0xeb}], 0x1}}], 0x1, 0x0, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendto(r0, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000b80)=@ethernet={0x0, @local}, 0x80, 0x0}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000ac0)=[{{&(0x7f0000000880)=@caif=@util, 0x80, &(0x7f0000000540)=[{&(0x7f0000000900)=""/128, 0x80}, {&(0x7f0000000980)=""/76, 0x4c}], 0x2}, 0x3f}], 0x1, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_SYS_GET(0xffffffffffffffff, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000a00)={0x0, 0x30}}, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x374, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x14b}, {&(0x7f0000000140)=""/85, 0x20a}, {&(0x7f0000000fc0)=""/4096, 0x773}, {&(0x7f0000000400)=""/106, 0x2ce}, {&(0x7f0000000740)=""/73, 0x3dd}, {&(0x7f0000000200)=""/77, 0x96}, {&(0x7f00000007c0)=""/154, 0x7fffddf7}, {&(0x7f0000000000)=""/22, 0xa}], 0x81, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 08:39:23 executing program 3: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x20000000003, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newlink={0x60, 0x10, 0x1, 0x0, 0x60, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @ip6gretap={{0xe, 0x1, 'ip6gretap\x00'}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @ipv4={[], [], @loopback}}, @IFLA_GRE_REMOTE={0x14, 0x7, @remote}]}}}]}, 0x60}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00'}) [ 269.954152][T17526] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 269.962142][T17526] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 269.970094][T17526] R10: 000080001d00c0d0 R11: 0000000000000246 R12: 0000000000000005 [ 269.978055][T17526] R13: 00000000000008dc R14: 00000000004cba16 R15: 00007efeff6076d4 08:39:23 executing program 4: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x20000000003, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00'}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newlink={0x60, 0x10, 0x1, 0x70bd25, 0xffffff7f, {0x0, 0x0, 0x0, r4, 0x50800}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @ip6gretap={{0xe, 0x1, 'ip6gretap\x00'}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @ipv4={[], [], @private=0xa010100}}, @IFLA_GRE_REMOTE={0x14, 0x7, @remote}]}}}]}, 0x60}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00'}) 08:39:24 executing program 1: r0 = socket(0x10, 0x803, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000005540)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000c80)=""/235, 0xeb}], 0x1}}], 0x1, 0x0, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendto(r0, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000b80)=@ethernet={0x0, @local}, 0x80, 0x0}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000ac0)=[{{&(0x7f0000000880)=@caif=@util, 0x80, &(0x7f0000000540)=[{&(0x7f0000000900)=""/128, 0x80}, {&(0x7f0000000980)=""/76, 0x4c}], 0x2}, 0x3f}], 0x1, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_SYS_GET(0xffffffffffffffff, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000a00)={0x0, 0x30}}, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x374, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x14b}, {&(0x7f0000000140)=""/85, 0x20a}, {&(0x7f0000000fc0)=""/4096, 0x773}, {&(0x7f0000000400)=""/106, 0x2ce}, {&(0x7f0000000740)=""/73, 0x3dd}, {&(0x7f0000000200)=""/77, 0x96}, {&(0x7f00000007c0)=""/154, 0x40d}, {&(0x7f0000000000)=""/22, 0x2}], 0x81, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 08:39:24 executing program 3: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x20000000003, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newlink={0x60, 0x10, 0x1, 0x0, 0xfc, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @ip6gretap={{0xe, 0x1, 'ip6gretap\x00'}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @ipv4={[], [], @loopback}}, @IFLA_GRE_REMOTE={0x14, 0x7, @remote}]}}}]}, 0x60}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00'}) 08:39:24 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x2349, &(0x7f0000000240)=0x0) io_submit(r2, 0x2, &(0x7f0000000100)=[&(0x7f00000000c0)={0x0, 0x0, 0x80000000000000, 0x1, 0x0, r1, 0x0}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) r3 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x2349, &(0x7f0000000240)) ioctl$NBD_CLEAR_QUE(r3, 0xab05) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) socket$nl_route(0x10, 0x3, 0x0) 08:39:24 executing program 5: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x10, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$inet6(0xa, 0x1, 0x8010800000000084) r0 = socket$kcm(0x2, 0x3, 0x2) recvmsg(r0, &(0x7f0000007500)={&(0x7f0000006f80)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x80, 0x0, 0x0, 0xffffffffffffffff}, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000000c0)=[{{&(0x7f0000002c80)={0xa, 0x0, 0x0, @loopback}, 0x1c, &(0x7f0000005000)=[{&(0x7f0000002cc0)="ea", 0x1}], 0x1}}], 0x1, 0x20000040) 08:39:24 executing program 4: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x20000000003, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00'}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newlink={0x60, 0x10, 0x1, 0x70bd25, 0xffffff9e, {0x0, 0x0, 0x0, r4, 0x50800}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @ip6gretap={{0xe, 0x1, 'ip6gretap\x00'}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @ipv4={[], [], @private=0xa010100}}, @IFLA_GRE_REMOTE={0x14, 0x7, @remote}]}}}]}, 0x60}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00'}) 08:39:24 executing program 2 (fault-call:8 fault-nth:22): shmget(0x0, 0x4000, 0x780012c9, &(0x7f0000ffc000/0x4000)=nil) shmctl$IPC_RMID(0x0, 0x0) shmat(0x0, &(0x7f0000ffe000/0x1000)=nil, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x2, 0x1) r1 = open(&(0x7f0000000080)='./bus\x00', 0x430c2, 0x0) ftruncate(r1, 0x200004) sendfile(r0, r1, 0x0, 0x80001d00c0d0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) 08:39:24 executing program 1: r0 = socket(0x10, 0x803, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000005540)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000c80)=""/235, 0xeb}], 0x1}}], 0x1, 0x0, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendto(r0, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000b80)=@ethernet={0x0, @local}, 0x80, 0x0}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000ac0)=[{{&(0x7f0000000880)=@caif=@util, 0x80, &(0x7f0000000540)=[{&(0x7f0000000900)=""/128, 0x80}, {&(0x7f0000000980)=""/76, 0x4c}], 0x2}, 0x3f}], 0x1, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_SYS_GET(0xffffffffffffffff, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000a00)={0x0, 0x30}}, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x374, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x14b}, {&(0x7f0000000140)=""/85, 0x20a}, {&(0x7f0000000fc0)=""/4096, 0x773}, {&(0x7f0000000400)=""/106, 0x2ce}, {&(0x7f0000000740)=""/73, 0x3dd}, {&(0x7f0000000200)=""/77, 0x96}, {&(0x7f00000007c0)=""/154, 0x40d}, {&(0x7f0000000000)=""/22, 0x3}], 0x81, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 08:39:24 executing program 3: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x20000000003, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newlink={0x60, 0x10, 0x1, 0x0, 0x155, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @ip6gretap={{0xe, 0x1, 'ip6gretap\x00'}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @ipv4={[], [], @loopback}}, @IFLA_GRE_REMOTE={0x14, 0x7, @remote}]}}}]}, 0x60}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00'}) 08:39:24 executing program 0: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x20000000003, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00'}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newlink={0x60, 0x10, 0x1, 0x70bd25, 0xffffc0fe, {0x0, 0x0, 0x0, r4, 0x50800}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @ip6gretap={{0xe, 0x1, 'ip6gretap\x00'}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @ipv4={[], [], @private=0xa010100}}, @IFLA_GRE_REMOTE={0x14, 0x7, @remote}]}}}]}, 0x60}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00'}) 08:39:24 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x2349, &(0x7f0000000240)=0x0) io_submit(r2, 0x2, &(0x7f0000000100)=[&(0x7f00000000c0)={0x0, 0x0, 0x80000000000000, 0x1, 0x0, r1, 0x0}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) r3 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x2349, &(0x7f0000000240)) ioctl$NBD_CLEAR_QUE(r3, 0xab05) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) socket$nl_route(0x10, 0x3, 0x0) [ 270.599589][T17596] FAULT_INJECTION: forcing a failure. [ 270.599589][T17596] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 270.614224][T17594] IPVS: ftp: loaded support on port[0] = 21 [ 270.634222][T17596] CPU: 0 PID: 17596 Comm: syz-executor.2 Not tainted 5.7.0-rc6-syzkaller #0 [ 270.642920][T17596] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 270.652978][T17596] Call Trace: [ 270.656369][T17596] dump_stack+0x1e9/0x30e [ 270.660693][T17596] should_fail+0x433/0x5b0 [ 270.665456][T17596] prepare_alloc_pages+0x28c/0x4a0 [ 270.670808][T17596] __alloc_pages_nodemask+0xbc/0x5e0 [ 270.676071][T17596] __do_page_cache_readahead+0x1de/0x4f0 [ 270.681681][T17596] generic_file_buffered_read+0x3ea/0x2570 [ 270.687555][T17596] generic_file_splice_read+0x452/0x700 [ 270.693078][T17596] ? splice_shrink_spd+0xb0/0xb0 [ 270.698003][T17596] splice_direct_to_actor+0x3c1/0xb40 [ 270.703361][T17596] ? do_splice_direct+0x340/0x340 [ 270.708358][T17596] do_splice_direct+0x201/0x340 [ 270.713184][T17596] ? security_file_permission+0x50/0xc0 [ 270.718701][T17596] do_sendfile+0x809/0xfe0 [ 270.723097][T17596] __x64_sys_sendfile64+0x164/0x1a0 [ 270.728270][T17596] ? do_syscall_64+0x19/0x1b0 [ 270.732923][T17596] do_syscall_64+0xf3/0x1b0 [ 270.738373][T17596] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 270.744248][T17596] RIP: 0033:0x45ca29 [ 270.748129][T17596] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 270.767716][T17596] RSP: 002b:00007efeff606c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 270.776098][T17596] RAX: ffffffffffffffda RBX: 00000000004fc540 RCX: 000000000045ca29 [ 270.784054][T17596] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 270.792172][T17596] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 08:39:24 executing program 4: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x20000000003, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00'}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newlink={0x60, 0x10, 0x1, 0x70bd25, 0xffffffe0, {0x0, 0x0, 0x0, r4, 0x50800}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @ip6gretap={{0xe, 0x1, 'ip6gretap\x00'}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @ipv4={[], [], @private=0xa010100}}, @IFLA_GRE_REMOTE={0x14, 0x7, @remote}]}}}]}, 0x60}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00'}) [ 270.800116][T17596] R10: 000080001d00c0d0 R11: 0000000000000246 R12: 0000000000000005 [ 270.808061][T17596] R13: 00000000000008dc R14: 00000000004cba16 R15: 00007efeff6076d4 08:39:24 executing program 1: r0 = socket(0x10, 0x803, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000005540)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000c80)=""/235, 0xeb}], 0x1}}], 0x1, 0x0, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendto(r0, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000b80)=@ethernet={0x0, @local}, 0x80, 0x0}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000ac0)=[{{&(0x7f0000000880)=@caif=@util, 0x80, &(0x7f0000000540)=[{&(0x7f0000000900)=""/128, 0x80}, {&(0x7f0000000980)=""/76, 0x4c}], 0x2}, 0x3f}], 0x1, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_SYS_GET(0xffffffffffffffff, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000a00)={0x0, 0x30}}, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x374, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x14b}, {&(0x7f0000000140)=""/85, 0x20a}, {&(0x7f0000000fc0)=""/4096, 0x773}, {&(0x7f0000000400)=""/106, 0x2ce}, {&(0x7f0000000740)=""/73, 0x3dd}, {&(0x7f0000000200)=""/77, 0x96}, {&(0x7f00000007c0)=""/154, 0x40d}, {&(0x7f0000000000)=""/22, 0x4}], 0x81, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 08:39:24 executing program 3: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x20000000003, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newlink={0x60, 0x10, 0x1, 0x0, 0x300, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @ip6gretap={{0xe, 0x1, 'ip6gretap\x00'}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @ipv4={[], [], @loopback}}, @IFLA_GRE_REMOTE={0x14, 0x7, @remote}]}}}]}, 0x60}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00'}) 08:39:24 executing program 1: r0 = socket(0x10, 0x803, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000005540)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000c80)=""/235, 0xeb}], 0x1}}], 0x1, 0x0, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendto(r0, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000b80)=@ethernet={0x0, @local}, 0x80, 0x0}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000ac0)=[{{&(0x7f0000000880)=@caif=@util, 0x80, &(0x7f0000000540)=[{&(0x7f0000000900)=""/128, 0x80}, {&(0x7f0000000980)=""/76, 0x4c}], 0x2}, 0x3f}], 0x1, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_SYS_GET(0xffffffffffffffff, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000a00)={0x0, 0x30}}, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x374, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x14b}, {&(0x7f0000000140)=""/85, 0x20a}, {&(0x7f0000000fc0)=""/4096, 0x773}, {&(0x7f0000000400)=""/106, 0x2ce}, {&(0x7f0000000740)=""/73, 0x3dd}, {&(0x7f0000000200)=""/77, 0x96}, {&(0x7f00000007c0)=""/154, 0x40d}, {&(0x7f0000000000)=""/22, 0x2000000a}], 0x81, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 08:39:24 executing program 4: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x20000000003, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00'}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newlink={0x60, 0x10, 0x1, 0x70bd25, 0xffffffef, {0x0, 0x0, 0x0, r4, 0x50800}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @ip6gretap={{0xe, 0x1, 'ip6gretap\x00'}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @ipv4={[], [], @private=0xa010100}}, @IFLA_GRE_REMOTE={0x14, 0x7, @remote}]}}}]}, 0x60}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00'}) 08:39:25 executing program 5: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x10, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$inet6(0xa, 0x1, 0x8010800000000084) r0 = socket$kcm(0x2, 0x3, 0x2) recvmsg(r0, &(0x7f0000007500)={&(0x7f0000006f80)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x80, 0x0, 0x0, 0xffffffffffffffff}, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000000c0)=[{{&(0x7f0000002c80)={0xa, 0x0, 0x0, @loopback}, 0x1c, &(0x7f0000005000)=[{&(0x7f0000002cc0)="ea", 0x1}], 0x1}}], 0x1, 0x20000040) 08:39:25 executing program 3: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x20000000003, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newlink={0x60, 0x10, 0x1, 0x0, 0x500, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @ip6gretap={{0xe, 0x1, 'ip6gretap\x00'}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @ipv4={[], [], @loopback}}, @IFLA_GRE_REMOTE={0x14, 0x7, @remote}]}}}]}, 0x60}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00'}) 08:39:25 executing program 1: r0 = socket(0x10, 0x803, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000005540)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000c80)=""/235, 0xeb}], 0x1}}], 0x1, 0x0, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendto(r0, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000b80)=@ethernet={0x0, @local}, 0x80, 0x0}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000ac0)=[{{&(0x7f0000000880)=@caif=@util, 0x80, &(0x7f0000000540)=[{&(0x7f0000000900)=""/128, 0x80}, {&(0x7f0000000980)=""/76, 0x4c}], 0x2}, 0x3f}], 0x1, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_SYS_GET(0xffffffffffffffff, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000a00)={0x0, 0x30}}, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x374, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x14b}, {&(0x7f0000000140)=""/85, 0x20a}, {&(0x7f0000000fc0)=""/4096, 0x773}, {&(0x7f0000000400)=""/106, 0x2ce}, {&(0x7f0000000740)=""/73, 0x3dd}, {&(0x7f0000000200)=""/77, 0x96}, {&(0x7f00000007c0)=""/154, 0x40d}, {&(0x7f0000000000)=""/22, 0x7fffd9ea}], 0x81, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 08:39:25 executing program 2 (fault-call:8 fault-nth:23): shmget(0x0, 0x4000, 0x780012c9, &(0x7f0000ffc000/0x4000)=nil) shmctl$IPC_RMID(0x0, 0x0) shmat(0x0, &(0x7f0000ffe000/0x1000)=nil, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x2, 0x1) r1 = open(&(0x7f0000000080)='./bus\x00', 0x430c2, 0x0) ftruncate(r1, 0x200004) sendfile(r0, r1, 0x0, 0x80001d00c0d0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) 08:39:25 executing program 4: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x20000000003, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00'}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newlink={0x60, 0x10, 0x1, 0x70bd25, 0xfffffff0, {0x0, 0x0, 0x0, r4, 0x50800}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @ip6gretap={{0xe, 0x1, 'ip6gretap\x00'}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @ipv4={[], [], @private=0xa010100}}, @IFLA_GRE_REMOTE={0x14, 0x7, @remote}]}}}]}, 0x60}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00'}) 08:39:25 executing program 0: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x20000000003, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00'}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newlink={0x60, 0x10, 0x1, 0x70bd25, 0xffffffe0, {0x0, 0x0, 0x0, r4, 0x50800}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @ip6gretap={{0xe, 0x1, 'ip6gretap\x00'}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @ipv4={[], [], @private=0xa010100}}, @IFLA_GRE_REMOTE={0x14, 0x7, @remote}]}}}]}, 0x60}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00'}) 08:39:25 executing program 1: r0 = socket(0x10, 0x803, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000005540)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000c80)=""/235, 0xeb}], 0x1}}], 0x1, 0x0, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendto(r0, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000b80)=@ethernet={0x0, @local}, 0x80, 0x0}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000ac0)=[{{&(0x7f0000000880)=@caif=@util, 0x80, &(0x7f0000000540)=[{&(0x7f0000000900)=""/128, 0x80}, {&(0x7f0000000980)=""/76, 0x4c}], 0x2}, 0x3f}], 0x1, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_SYS_GET(0xffffffffffffffff, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000a00)={0x0, 0x30}}, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x374, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x14b}, {&(0x7f0000000140)=""/85, 0x20a}, {&(0x7f0000000fc0)=""/4096, 0x773}, {&(0x7f0000000400)=""/106, 0x2ce}, {&(0x7f0000000740)=""/73, 0x3dd}, {&(0x7f0000000200)=""/77, 0x96}, {&(0x7f00000007c0)=""/154, 0x40d}, {&(0x7f0000000000)=""/22, 0xa}], 0x8, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) [ 271.446383][T17667] FAULT_INJECTION: forcing a failure. [ 271.446383][T17667] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 271.453023][T17668] IPVS: ftp: loaded support on port[0] = 21 [ 271.478231][T17667] CPU: 0 PID: 17667 Comm: syz-executor.2 Not tainted 5.7.0-rc6-syzkaller #0 [ 271.486937][T17667] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 271.496984][T17667] Call Trace: [ 271.500274][T17667] dump_stack+0x1e9/0x30e [ 271.504623][T17667] should_fail+0x433/0x5b0 [ 271.509040][T17667] prepare_alloc_pages+0x28c/0x4a0 [ 271.514155][T17667] __alloc_pages_nodemask+0xbc/0x5e0 [ 271.519446][T17667] __do_page_cache_readahead+0x1de/0x4f0 [ 271.525082][T17667] generic_file_buffered_read+0x3ea/0x2570 [ 271.531076][T17667] generic_file_splice_read+0x452/0x700 [ 271.536628][T17667] ? splice_shrink_spd+0xb0/0xb0 [ 271.541579][T17667] splice_direct_to_actor+0x3c1/0xb40 [ 271.546954][T17667] ? do_splice_direct+0x340/0x340 [ 271.551976][T17667] do_splice_direct+0x201/0x340 [ 271.556832][T17667] ? security_file_permission+0x50/0xc0 [ 271.562378][T17667] do_sendfile+0x809/0xfe0 [ 271.566821][T17667] __x64_sys_sendfile64+0x164/0x1a0 [ 271.572016][T17667] ? do_syscall_64+0x19/0x1b0 [ 271.576691][T17667] do_syscall_64+0xf3/0x1b0 [ 271.581192][T17667] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 271.587077][T17667] RIP: 0033:0x45ca29 [ 271.590970][T17667] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 271.610593][T17667] RSP: 002b:00007efeff606c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 271.619080][T17667] RAX: ffffffffffffffda RBX: 00000000004fc540 RCX: 000000000045ca29 [ 271.627151][T17667] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 271.635105][T17667] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 08:39:25 executing program 1: r0 = socket(0x10, 0x803, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000005540)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000c80)=""/235, 0xeb}], 0x1}}], 0x1, 0x0, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendto(r0, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000b80)=@ethernet={0x0, @local}, 0x80, 0x0}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000ac0)=[{{&(0x7f0000000880)=@caif=@util, 0x80, &(0x7f0000000540)=[{&(0x7f0000000900)=""/128, 0x80}, {&(0x7f0000000980)=""/76, 0x4c}], 0x2}, 0x3f}], 0x1, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_SYS_GET(0xffffffffffffffff, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000a00)={0x0, 0x30}}, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x374, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x14b}, {&(0x7f0000000140)=""/85, 0x20a}, {&(0x7f0000000fc0)=""/4096, 0x773}, {&(0x7f0000000400)=""/106, 0x2ce}, {&(0x7f0000000740)=""/73, 0x3dd}, {&(0x7f0000000200)=""/77, 0x96}, {&(0x7f00000007c0)=""/154, 0x40d}, {&(0x7f0000000000)=""/22, 0xa}], 0x81, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 08:39:25 executing program 0: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x20000000003, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00'}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newlink={0x60, 0x10, 0x1, 0x70bd25, 0xfec0ffff, {0x0, 0x0, 0x0, r4, 0x50800}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @ip6gretap={{0xe, 0x1, 'ip6gretap\x00'}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @ipv4={[], [], @private=0xa010100}}, @IFLA_GRE_REMOTE={0x14, 0x7, @remote}]}}}]}, 0x60}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00'}) [ 271.643079][T17667] R10: 000080001d00c0d0 R11: 0000000000000246 R12: 0000000000000005 [ 271.651121][T17667] R13: 00000000000008dc R14: 00000000004cba16 R15: 00007efeff6076d4 08:39:25 executing program 1: r0 = socket(0x10, 0x803, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000005540)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000c80)=""/235, 0xeb}], 0x1}}], 0x1, 0x0, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendto(r0, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000b80)=@ethernet={0x0, @local}, 0x80, 0x0}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000ac0)=[{{&(0x7f0000000880)=@caif=@util, 0x80, &(0x7f0000000540)=[{&(0x7f0000000900)=""/128, 0x80}, {&(0x7f0000000980)=""/76, 0x4c}], 0x2}, 0x3f}], 0x1, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_SYS_GET(0xffffffffffffffff, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000a00)={0x0, 0x30}}, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x374, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x14b}, {&(0x7f0000000140)=""/85, 0x20a}, {&(0x7f0000000fc0)=""/4096, 0x773}, {&(0x7f0000000400)=""/106, 0x2ce}, {&(0x7f0000000740)=""/73, 0x3dd}, {&(0x7f0000000200)=""/77, 0x96}, {&(0x7f00000007c0)=""/154, 0x40d}, {&(0x7f0000000000)=""/22, 0xa}], 0x81, &(0x7f0000000600)=""/191, 0x41, 0x2}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 08:39:25 executing program 4: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x20000000003, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00'}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newlink={0x60, 0x10, 0x1, 0x70bd25, 0xfffffffc, {0x0, 0x0, 0x0, r4, 0x50800}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @ip6gretap={{0xe, 0x1, 'ip6gretap\x00'}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @ipv4={[], [], @private=0xa010100}}, @IFLA_GRE_REMOTE={0x14, 0x7, @remote}]}}}]}, 0x60}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00'}) 08:39:25 executing program 3: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x20000000003, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newlink={0x60, 0x10, 0x1, 0x0, 0x600, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @ip6gretap={{0xe, 0x1, 'ip6gretap\x00'}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @ipv4={[], [], @loopback}}, @IFLA_GRE_REMOTE={0x14, 0x7, @remote}]}}}]}, 0x60}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00'}) 08:39:26 executing program 5: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x10, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = socket$inet6(0xa, 0x1, 0x8010800000000084) r1 = socket$kcm(0x2, 0x3, 0x2) recvmsg(r1, &(0x7f0000007500)={&(0x7f0000006f80)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x80, 0x0, 0x0, 0xffffffffffffffff}, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmmsg$inet6(r0, 0x0, 0x0, 0x20000040) 08:39:26 executing program 1: r0 = socket(0x10, 0x803, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000005540)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000c80)=""/235, 0xeb}], 0x1}}], 0x1, 0x0, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendto(r0, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000b80)=@ethernet={0x0, @local}, 0x80, 0x0}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000ac0)=[{{&(0x7f0000000880)=@caif=@util, 0x80, &(0x7f0000000540)=[{&(0x7f0000000900)=""/128, 0x80}, {&(0x7f0000000980)=""/76, 0x4c}], 0x2}, 0x3f}], 0x1, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_SYS_GET(0xffffffffffffffff, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000a00)={0x0, 0x30}}, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x374, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x14b}, {&(0x7f0000000140)=""/85, 0x20a}, {&(0x7f0000000fc0)=""/4096, 0x773}, {&(0x7f0000000400)=""/106, 0x2ce}, {&(0x7f0000000740)=""/73, 0x3dd}, {&(0x7f0000000200)=""/77, 0x96}, {&(0x7f00000007c0)=""/154, 0x40d}, {&(0x7f0000000000)=""/22, 0xa}], 0x81, &(0x7f0000000600)=""/191, 0x41, 0x3}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 08:39:26 executing program 0: pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x424200, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f00000000c0)=0x800000100000001, 0x4) connect$inet6(r1, &(0x7f0000000140), 0x1c) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x355) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000a40)=@gcm_128={{0x303}, "658bdce8f16b6901", "9fae1947fe62576d6d7573c55f795e68", "a43cc80d", "ca90bc29c8f91cf6"}, 0x28) 08:39:26 executing program 2 (fault-call:8 fault-nth:24): shmget(0x0, 0x4000, 0x780012c9, &(0x7f0000ffc000/0x4000)=nil) shmctl$IPC_RMID(0x0, 0x0) shmat(0x0, &(0x7f0000ffe000/0x1000)=nil, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x2, 0x1) r1 = open(&(0x7f0000000080)='./bus\x00', 0x430c2, 0x0) ftruncate(r1, 0x200004) sendfile(r0, r1, 0x0, 0x80001d00c0d0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) 08:39:26 executing program 3: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x20000000003, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newlink={0x60, 0x10, 0x1, 0x0, 0x900, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @ip6gretap={{0xe, 0x1, 'ip6gretap\x00'}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @ipv4={[], [], @loopback}}, @IFLA_GRE_REMOTE={0x14, 0x7, @remote}]}}}]}, 0x60}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00'}) 08:39:26 executing program 4: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x20000000003, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00'}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newlink={0x60, 0x10, 0x1, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r4, 0x50800}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @ip6gretap={{0xe, 0x1, 'ip6gretap\x00'}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @ipv4={[], [], @private=0xa010100}}, @IFLA_GRE_REMOTE={0x14, 0x7, @remote}]}}}]}, 0x60}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00'}) [ 272.270869][T17735] tls_set_device_offload: netdev not found [ 272.289845][T17738] IPVS: ftp: loaded support on port[0] = 21 [ 272.290490][T17734] FAULT_INJECTION: forcing a failure. [ 272.290490][T17734] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 272.322820][T17734] CPU: 1 PID: 17734 Comm: syz-executor.2 Not tainted 5.7.0-rc6-syzkaller #0 [ 272.331521][T17734] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 272.341569][T17734] Call Trace: [ 272.344868][T17734] dump_stack+0x1e9/0x30e [ 272.349200][T17734] should_fail+0x433/0x5b0 [ 272.353632][T17734] prepare_alloc_pages+0x28c/0x4a0 [ 272.357753][T17767] tls_set_device_offload: netdev not found [ 272.358750][T17734] __alloc_pages_nodemask+0xbc/0x5e0 08:39:26 executing program 0: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = open(&(0x7f0000002000)='./bus\x00', 0x1c1042, 0x0) ftruncate(r1, 0x2007fff) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = dup(r0) bind$inet6(r0, &(0x7f0000000600)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet_tcp_int(r4, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet_tcp_int(r4, 0x6, 0x18, &(0x7f00000001c0), 0x4) syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x5, 0x900) r5 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r5, 0x0, 0x8000fffffffe) connect$unix(r4, &(0x7f0000000400)=@file={0x0, './bus\x00'}, 0x6e) 08:39:26 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="440000001000010e00"/20, @ANYRES32=0x0, @ANYBLOB="00000001006f726964f9aa00028008000500010000000600062000000000"], 0x44}}, 0x80) [ 272.358767][T17734] __do_page_cache_readahead+0x1de/0x4f0 [ 272.358783][T17734] generic_file_buffered_read+0x3ea/0x2570 [ 272.381259][T17734] generic_file_splice_read+0x452/0x700 [ 272.386809][T17734] ? splice_shrink_spd+0xb0/0xb0 [ 272.391746][T17734] splice_direct_to_actor+0x3c1/0xb40 [ 272.397129][T17734] ? do_splice_direct+0x340/0x340 [ 272.402158][T17734] do_splice_direct+0x201/0x340 [ 272.407006][T17734] ? security_file_permission+0x50/0xc0 [ 272.412590][T17734] do_sendfile+0x809/0xfe0 [ 272.417103][T17734] __x64_sys_sendfile64+0x164/0x1a0 08:39:26 executing program 0: r0 = socket$kcm(0x11, 0x200000000000002, 0x300) r1 = socket$kcm(0x11, 0x2, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0x12, &(0x7f00000000c0)=r1, 0x4) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000480)=ANY=[@ANYBLOB="b702000007000000bfa30000000000000703000000fefffe7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b7000000000000009500000000000000c9be17044171e1d3d7b196d079c4d4758fa35d17c668a4b63e069efb29797573b8530e31ec24925095a163b9d4e76be266e31a80212240baa44e080addde36e5fdc6c42a7b3f912f6906a6e2313091dd61258a1fda45991fbdce6793c8a4785ee8b60092659b941bbd694d1f8898b3e6"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x10000000}, 0x10, 0x0, r3}, 0x78) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r4, 0x18000000000002a0, 0x2d1, 0x0, &(0x7f00000000c0)="b9ff0300000d698cb89e40f008001fffffff00004000633377", 0x0, 0x100, 0x6000000000000000}, 0x28) [ 272.422304][T17734] ? do_syscall_64+0x19/0x1b0 [ 272.426991][T17734] do_syscall_64+0xf3/0x1b0 [ 272.427615][T17772] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.0'. [ 272.431500][T17734] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 272.431510][T17734] RIP: 0033:0x45ca29 [ 272.431520][T17734] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 08:39:26 executing program 1: r0 = socket(0x10, 0x803, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000005540)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000c80)=""/235, 0xeb}], 0x1}}], 0x1, 0x0, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendto(r0, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000b80)=@ethernet={0x0, @local}, 0x80, 0x0}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000ac0)=[{{&(0x7f0000000880)=@caif=@util, 0x80, &(0x7f0000000540)=[{&(0x7f0000000900)=""/128, 0x80}, {&(0x7f0000000980)=""/76, 0x4c}], 0x2}, 0x3f}], 0x1, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_SYS_GET(0xffffffffffffffff, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000a00)={0x0, 0x30}}, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x374, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x14b}, {&(0x7f0000000140)=""/85, 0x20a}, {&(0x7f0000000fc0)=""/4096, 0x773}, {&(0x7f0000000400)=""/106, 0x2ce}, {&(0x7f0000000740)=""/73, 0x3dd}, {&(0x7f0000000200)=""/77, 0x96}, {&(0x7f00000007c0)=""/154, 0x40d}, {&(0x7f0000000000)=""/22, 0xa}], 0x81, &(0x7f0000000600)=""/191, 0x41, 0x4}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 08:39:26 executing program 1: r0 = socket(0x10, 0x803, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000005540)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000c80)=""/235, 0xeb}], 0x1}}], 0x1, 0x0, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendto(r0, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000b80)=@ethernet={0x0, @local}, 0x80, 0x0}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000ac0)=[{{&(0x7f0000000880)=@caif=@util, 0x80, &(0x7f0000000540)=[{&(0x7f0000000900)=""/128, 0x80}, {&(0x7f0000000980)=""/76, 0x4c}], 0x2}, 0x3f}], 0x1, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_SYS_GET(0xffffffffffffffff, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000a00)={0x0, 0x30}}, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x374, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x14b}, {&(0x7f0000000140)=""/85, 0x20a}, {&(0x7f0000000fc0)=""/4096, 0x773}, {&(0x7f0000000400)=""/106, 0x2ce}, {&(0x7f0000000740)=""/73, 0x3dd}, {&(0x7f0000000200)=""/77, 0x96}, {&(0x7f00000007c0)=""/154, 0x40d}, {&(0x7f0000000000)=""/22, 0xa}], 0x81, &(0x7f0000000600)=""/191, 0x41, 0x5}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) [ 272.431530][T17734] RSP: 002b:00007efeff606c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 272.481950][T17734] RAX: ffffffffffffffda RBX: 00000000004fc540 RCX: 000000000045ca29 [ 272.489952][T17734] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 272.497969][T17734] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 272.505939][T17734] R10: 000080001d00c0d0 R11: 0000000000000246 R12: 0000000000000005 [ 272.513916][T17734] R13: 00000000000008dc R14: 00000000004cba16 R15: 00007efeff6076d4 08:39:26 executing program 3: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x20000000003, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newlink={0x60, 0x10, 0x1, 0x0, 0xa00, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @ip6gretap={{0xe, 0x1, 'ip6gretap\x00'}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @ipv4={[], [], @loopback}}, @IFLA_GRE_REMOTE={0x14, 0x7, @remote}]}}}]}, 0x60}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00'}) 08:39:27 executing program 5: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x10, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = socket$inet6(0xa, 0x1, 0x8010800000000084) r1 = socket$kcm(0x2, 0x3, 0x2) recvmsg(r1, &(0x7f0000007500)={&(0x7f0000006f80)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x80, 0x0, 0x0, 0xffffffffffffffff}, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmmsg$inet6(r0, 0x0, 0x0, 0x20000040) 08:39:27 executing program 4: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x20000000003, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00'}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newlink={0x60, 0x10, 0x1, 0x70bd25, 0x0, {0x2, 0x0, 0x0, r4, 0x50800}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @ip6gretap={{0xe, 0x1, 'ip6gretap\x00'}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @ipv4={[], [], @private=0xa010100}}, @IFLA_GRE_REMOTE={0x14, 0x7, @remote}]}}}]}, 0x60}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00'}) 08:39:27 executing program 2 (fault-call:8 fault-nth:25): shmget(0x0, 0x4000, 0x780012c9, &(0x7f0000ffc000/0x4000)=nil) shmctl$IPC_RMID(0x0, 0x0) shmat(0x0, &(0x7f0000ffe000/0x1000)=nil, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x2, 0x1) r1 = open(&(0x7f0000000080)='./bus\x00', 0x430c2, 0x0) ftruncate(r1, 0x200004) sendfile(r0, r1, 0x0, 0x80001d00c0d0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) 08:39:27 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000000)=@mpls_delroute={0x30, 0x19, 0x1, 0x0, 0x20000000, {0x1c, 0x14, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x1}, [@RTA_VIA={0x14, 0x1e, {0x0, "223995888961ec6ee2df59da5373"}}]}, 0x30}}, 0x0) r1 = socket$inet6(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000300)='batadv\x00') sendmsg$BATADV_CMD_GET_DAT_CACHE(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000580)={0x1c, r4, 0x31905e13403123b7, 0x0, 0x0, {0xc}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}]}, 0x1c}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$fou(&(0x7f0000000080)='fou\x00') sendmsg$FOU_CMD_ADD(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000200)={0x30, r6, 0x209, 0x0, 0x0, {}, [@FOU_ATTR_LOCAL_V6={0x14, 0x7, @ipv4={[], [], @multicast1}}, @FOU_ATTR_AF={0x5, 0x2, 0xa}]}, 0x30}}, 0x0) r7 = socket$kcm(0x2, 0x2, 0x0) r8 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r8, &(0x7f000000c280)={&(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000140)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @remote}}}], 0x20}, 0x0) recvmsg(r8, &(0x7f0000007500)={&(0x7f0000006f80)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x80, 0x0, 0x0, 0xffffffffffffffff}, 0x0) sendmsg$inet(r7, &(0x7f00000003c0)={&(0x7f0000000080)={0x2, 0x4e20, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000001740)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r9, @local, @multicast2}}}], 0x20}, 0x0) sendmsg$FOU_CMD_ADD(r3, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, r6, 0x20, 0x70bd2c, 0x25dfdbfe, {}, [@FOU_ATTR_LOCAL_V4={0x8, 0x6, @initdev={0xac, 0x1e, 0x1, 0x0}}, @FOU_ATTR_PEER_V4={0x8, 0x8, @initdev={0xac, 0x1e, 0x1, 0x0}}, @FOU_ATTR_IFINDEX={0x8, 0xb, r9}, @FOU_ATTR_AF={0x5, 0x2, 0xa}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000041}, 0xc4) 08:39:27 executing program 1: r0 = socket(0x10, 0x803, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000005540)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000c80)=""/235, 0xeb}], 0x1}}], 0x1, 0x0, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendto(r0, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000b80)=@ethernet={0x0, @local}, 0x80, 0x0}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000ac0)=[{{&(0x7f0000000880)=@caif=@util, 0x80, &(0x7f0000000540)=[{&(0x7f0000000900)=""/128, 0x80}, {&(0x7f0000000980)=""/76, 0x4c}], 0x2}, 0x3f}], 0x1, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_SYS_GET(0xffffffffffffffff, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000a00)={0x0, 0x30}}, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x374, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x14b}, {&(0x7f0000000140)=""/85, 0x20a}, {&(0x7f0000000fc0)=""/4096, 0x773}, {&(0x7f0000000400)=""/106, 0x2ce}, {&(0x7f0000000740)=""/73, 0x3dd}, {&(0x7f0000000200)=""/77, 0x96}, {&(0x7f00000007c0)=""/154, 0x40d}, {&(0x7f0000000000)=""/22, 0xa}], 0x81, &(0x7f0000000600)=""/191, 0x41, 0x6}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 08:39:27 executing program 3: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x20000000003, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newlink={0x60, 0x10, 0x1, 0x0, 0xb00, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @ip6gretap={{0xe, 0x1, 'ip6gretap\x00'}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @ipv4={[], [], @loopback}}, @IFLA_GRE_REMOTE={0x14, 0x7, @remote}]}}}]}, 0x60}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00'}) 08:39:27 executing program 1: r0 = socket(0x10, 0x803, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000005540)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000c80)=""/235, 0xeb}], 0x1}}], 0x1, 0x0, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendto(r0, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000b80)=@ethernet={0x0, @local}, 0x80, 0x0}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000ac0)=[{{&(0x7f0000000880)=@caif=@util, 0x80, &(0x7f0000000540)=[{&(0x7f0000000900)=""/128, 0x80}, {&(0x7f0000000980)=""/76, 0x4c}], 0x2}, 0x3f}], 0x1, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_SYS_GET(0xffffffffffffffff, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000a00)={0x0, 0x30}}, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x374, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x14b}, {&(0x7f0000000140)=""/85, 0x20a}, {&(0x7f0000000fc0)=""/4096, 0x773}, {&(0x7f0000000400)=""/106, 0x2ce}, {&(0x7f0000000740)=""/73, 0x3dd}, {&(0x7f0000000200)=""/77, 0x96}, {&(0x7f00000007c0)=""/154, 0x40d}, {&(0x7f0000000000)=""/22, 0xa}], 0x81, &(0x7f0000000600)=""/191, 0x41, 0x7}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) [ 273.110447][T17805] FAULT_INJECTION: forcing a failure. [ 273.110447][T17805] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 273.150811][T17805] CPU: 1 PID: 17805 Comm: syz-executor.2 Not tainted 5.7.0-rc6-syzkaller #0 [ 273.159511][T17805] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 273.171647][T17805] Call Trace: [ 273.174975][T17805] dump_stack+0x1e9/0x30e [ 273.179330][T17805] should_fail+0x433/0x5b0 [ 273.183758][T17805] prepare_alloc_pages+0x28c/0x4a0 [ 273.188878][T17805] __alloc_pages_nodemask+0xbc/0x5e0 [ 273.194189][T17805] __do_page_cache_readahead+0x1de/0x4f0 [ 273.200001][T17805] generic_file_buffered_read+0x3ea/0x2570 [ 273.205821][T17805] generic_file_splice_read+0x452/0x700 [ 273.211379][T17805] ? splice_shrink_spd+0xb0/0xb0 [ 273.216318][T17805] splice_direct_to_actor+0x3c1/0xb40 [ 273.221691][T17805] ? do_splice_direct+0x340/0x340 [ 273.226721][T17805] do_splice_direct+0x201/0x340 [ 273.231701][T17805] ? security_file_permission+0x50/0xc0 [ 273.237248][T17805] do_sendfile+0x809/0xfe0 [ 273.241600][T17808] IPVS: ftp: loaded support on port[0] = 21 [ 273.241668][T17805] __x64_sys_sendfile64+0x164/0x1a0 [ 273.253072][T17805] ? do_syscall_64+0x19/0x1b0 [ 273.257747][T17805] do_syscall_64+0xf3/0x1b0 [ 273.262290][T17805] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 273.268179][T17805] RIP: 0033:0x45ca29 [ 273.272120][T17805] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 273.291758][T17805] RSP: 002b:00007efeff606c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 273.300518][T17805] RAX: ffffffffffffffda RBX: 00000000004fc540 RCX: 000000000045ca29 [ 273.308647][T17805] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 273.317145][T17805] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 273.325106][T17805] R10: 000080001d00c0d0 R11: 0000000000000246 R12: 0000000000000005 [ 273.333082][T17805] R13: 00000000000008dc R14: 00000000004cba16 R15: 00007efeff6076d4 08:39:27 executing program 3: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x20000000003, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newlink={0x60, 0x10, 0x1, 0x0, 0xc00, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @ip6gretap={{0xe, 0x1, 'ip6gretap\x00'}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @ipv4={[], [], @loopback}}, @IFLA_GRE_REMOTE={0x14, 0x7, @remote}]}}}]}, 0x60}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00'}) 08:39:27 executing program 0: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x20240, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, r0, 0x2) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_int(r1, 0x29, 0x43, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000000080)=0x4, 0x4) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000180)='dctcp\x00', 0x6) sendto$inet6(r1, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) 08:39:27 executing program 1: r0 = socket(0x10, 0x803, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000005540)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000c80)=""/235, 0xeb}], 0x1}}], 0x1, 0x0, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendto(r0, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000b80)=@ethernet={0x0, @local}, 0x80, 0x0}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000ac0)=[{{&(0x7f0000000880)=@caif=@util, 0x80, &(0x7f0000000540)=[{&(0x7f0000000900)=""/128, 0x80}, {&(0x7f0000000980)=""/76, 0x4c}], 0x2}, 0x3f}], 0x1, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_SYS_GET(0xffffffffffffffff, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000a00)={0x0, 0x30}}, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x374, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x14b}, {&(0x7f0000000140)=""/85, 0x20a}, {&(0x7f0000000fc0)=""/4096, 0x773}, {&(0x7f0000000400)=""/106, 0x2ce}, {&(0x7f0000000740)=""/73, 0x3dd}, {&(0x7f0000000200)=""/77, 0x96}, {&(0x7f00000007c0)=""/154, 0x40d}, {&(0x7f0000000000)=""/22, 0xa}], 0x81, &(0x7f0000000600)=""/191, 0x41, 0x8}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 08:39:27 executing program 4: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x20000000003, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00'}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newlink={0x60, 0x10, 0x1, 0x70bd25, 0x0, {0x3, 0x0, 0x0, r4, 0x50800}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @ip6gretap={{0xe, 0x1, 'ip6gretap\x00'}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @ipv4={[], [], @private=0xa010100}}, @IFLA_GRE_REMOTE={0x14, 0x7, @remote}]}}}]}, 0x60}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00'}) 08:39:27 executing program 2 (fault-call:8 fault-nth:26): shmget(0x0, 0x4000, 0x780012c9, &(0x7f0000ffc000/0x4000)=nil) shmctl$IPC_RMID(0x0, 0x0) shmat(0x0, &(0x7f0000ffe000/0x1000)=nil, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x2, 0x1) r1 = open(&(0x7f0000000080)='./bus\x00', 0x430c2, 0x0) ftruncate(r1, 0x200004) sendfile(r0, r1, 0x0, 0x80001d00c0d0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) [ 273.541903][T17862] FAULT_INJECTION: forcing a failure. [ 273.541903][T17862] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 273.583670][T17862] CPU: 0 PID: 17862 Comm: syz-executor.2 Not tainted 5.7.0-rc6-syzkaller #0 [ 273.592369][T17862] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 273.602458][T17862] Call Trace: [ 273.605753][T17862] dump_stack+0x1e9/0x30e [ 273.610108][T17862] should_fail+0x433/0x5b0 [ 273.614984][T17862] prepare_alloc_pages+0x28c/0x4a0 [ 273.620095][T17862] __alloc_pages_nodemask+0xbc/0x5e0 [ 273.625401][T17862] __do_page_cache_readahead+0x1de/0x4f0 [ 273.631165][T17862] generic_file_buffered_read+0x3ea/0x2570 [ 273.636984][T17862] generic_file_splice_read+0x452/0x700 [ 273.642540][T17862] ? splice_shrink_spd+0xb0/0xb0 [ 273.647482][T17862] splice_direct_to_actor+0x3c1/0xb40 [ 273.652857][T17862] ? do_splice_direct+0x340/0x340 [ 273.657889][T17862] do_splice_direct+0x201/0x340 [ 273.662747][T17862] ? security_file_permission+0x50/0xc0 [ 273.668295][T17862] do_sendfile+0x809/0xfe0 [ 273.672722][T17862] __x64_sys_sendfile64+0x164/0x1a0 [ 273.677928][T17862] ? do_syscall_64+0x19/0x1b0 [ 273.682635][T17862] do_syscall_64+0xf3/0x1b0 [ 273.687141][T17862] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 273.693163][T17862] RIP: 0033:0x45ca29 [ 273.697041][T17862] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 273.716723][T17862] RSP: 002b:00007efeff606c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 273.725130][T17862] RAX: ffffffffffffffda RBX: 00000000004fc540 RCX: 000000000045ca29 [ 273.733269][T17862] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 273.741224][T17862] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 273.749783][T17862] R10: 000080001d00c0d0 R11: 0000000000000246 R12: 0000000000000005 [ 273.759579][T17862] R13: 00000000000008dc R14: 00000000004cba16 R15: 00007efeff6076d4 08:39:27 executing program 5: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x10, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = socket$inet6(0xa, 0x1, 0x8010800000000084) r1 = socket$kcm(0x2, 0x3, 0x2) recvmsg(r1, &(0x7f0000007500)={&(0x7f0000006f80)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x80, 0x0, 0x0, 0xffffffffffffffff}, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmmsg$inet6(r0, 0x0, 0x0, 0x20000040) 08:39:27 executing program 3: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x20000000003, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newlink={0x60, 0x10, 0x1, 0x0, 0xf00, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @ip6gretap={{0xe, 0x1, 'ip6gretap\x00'}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @ipv4={[], [], @loopback}}, @IFLA_GRE_REMOTE={0x14, 0x7, @remote}]}}}]}, 0x60}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00'}) 08:39:27 executing program 1: r0 = socket(0x10, 0x803, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000005540)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000c80)=""/235, 0xeb}], 0x1}}], 0x1, 0x0, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendto(r0, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000b80)=@ethernet={0x0, @local}, 0x80, 0x0}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000ac0)=[{{&(0x7f0000000880)=@caif=@util, 0x80, &(0x7f0000000540)=[{&(0x7f0000000900)=""/128, 0x80}, {&(0x7f0000000980)=""/76, 0x4c}], 0x2}, 0x3f}], 0x1, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_SYS_GET(0xffffffffffffffff, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000a00)={0x0, 0x30}}, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x374, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x14b}, {&(0x7f0000000140)=""/85, 0x20a}, {&(0x7f0000000fc0)=""/4096, 0x773}, {&(0x7f0000000400)=""/106, 0x2ce}, {&(0x7f0000000740)=""/73, 0x3dd}, {&(0x7f0000000200)=""/77, 0x96}, {&(0x7f00000007c0)=""/154, 0x40d}, {&(0x7f0000000000)=""/22, 0xa}], 0x81, &(0x7f0000000600)=""/191, 0x41, 0x9}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 08:39:27 executing program 4: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x20000000003, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00'}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newlink={0x60, 0x10, 0x1, 0x70bd25, 0x0, {0x4, 0x0, 0x0, r4, 0x50800}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @ip6gretap={{0xe, 0x1, 'ip6gretap\x00'}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @ipv4={[], [], @private=0xa010100}}, @IFLA_GRE_REMOTE={0x14, 0x7, @remote}]}}}]}, 0x60}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00'}) 08:39:27 executing program 0: r0 = gettid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) readv(r1, &(0x7f0000001400)=[{&(0x7f00000010c0)=""/247, 0xf7}], 0x1) ppoll(&(0x7f0000001080), 0x0, 0x0, 0x0, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000140)=0x6) fcntl$setsig(r1, 0xa, 0x12) dup2(r1, r2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'\x00', 0x10005812}) io_setup(0x20000000002, &(0x7f0000000440)=0x0) io_submit(r5, 0x2, &(0x7f0000000180)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r4, &(0x7f0000000740)="1c", 0x1}, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x3, 0x0, r3, 0x0, 0x0, 0x9, 0x0, 0x3}]) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00'}) dup3(0xffffffffffffffff, r6, 0x0) fcntl$setown(r1, 0x8, r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = fcntl$dupfd(r8, 0x0, r7) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) tkill(0x0, 0x4000000c) 08:39:27 executing program 2 (fault-call:8 fault-nth:27): shmget(0x0, 0x4000, 0x780012c9, &(0x7f0000ffc000/0x4000)=nil) shmctl$IPC_RMID(0x0, 0x0) shmat(0x0, &(0x7f0000ffe000/0x1000)=nil, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x2, 0x1) r1 = open(&(0x7f0000000080)='./bus\x00', 0x430c2, 0x0) ftruncate(r1, 0x200004) sendfile(r0, r1, 0x0, 0x80001d00c0d0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) [ 273.978597][T17879] IPVS: ftp: loaded support on port[0] = 21 [ 273.983126][T17883] FAULT_INJECTION: forcing a failure. [ 273.983126][T17883] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 274.001539][T17883] CPU: 1 PID: 17883 Comm: syz-executor.2 Not tainted 5.7.0-rc6-syzkaller #0 [ 274.010228][T17883] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 274.020366][T17883] Call Trace: [ 274.023653][T17883] dump_stack+0x1e9/0x30e [ 274.027985][T17883] should_fail+0x433/0x5b0 [ 274.032399][T17883] prepare_alloc_pages+0x28c/0x4a0 [ 274.037512][T17883] __alloc_pages_nodemask+0xbc/0x5e0 [ 274.042797][T17883] __do_page_cache_readahead+0x1de/0x4f0 [ 274.048433][T17883] generic_file_buffered_read+0x3ea/0x2570 [ 274.054252][T17883] generic_file_splice_read+0x452/0x700 [ 274.059890][T17883] ? splice_shrink_spd+0xb0/0xb0 [ 274.064829][T17883] splice_direct_to_actor+0x3c1/0xb40 [ 274.070206][T17883] ? do_splice_direct+0x340/0x340 08:39:28 executing program 1: r0 = socket(0x10, 0x803, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000005540)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000c80)=""/235, 0xeb}], 0x1}}], 0x1, 0x0, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendto(r0, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000b80)=@ethernet={0x0, @local}, 0x80, 0x0}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000ac0)=[{{&(0x7f0000000880)=@caif=@util, 0x80, &(0x7f0000000540)=[{&(0x7f0000000900)=""/128, 0x80}, {&(0x7f0000000980)=""/76, 0x4c}], 0x2}, 0x3f}], 0x1, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_SYS_GET(0xffffffffffffffff, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000a00)={0x0, 0x30}}, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x374, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x14b}, {&(0x7f0000000140)=""/85, 0x20a}, {&(0x7f0000000fc0)=""/4096, 0x773}, {&(0x7f0000000400)=""/106, 0x2ce}, {&(0x7f0000000740)=""/73, 0x3dd}, {&(0x7f0000000200)=""/77, 0x96}, {&(0x7f00000007c0)=""/154, 0x40d}, {&(0x7f0000000000)=""/22, 0xa}], 0x81, &(0x7f0000000600)=""/191, 0x41, 0xa}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) [ 274.075260][T17883] do_splice_direct+0x201/0x340 [ 274.080116][T17883] ? security_file_permission+0x50/0xc0 [ 274.085674][T17883] do_sendfile+0x809/0xfe0 [ 274.090099][T17883] __x64_sys_sendfile64+0x164/0x1a0 [ 274.095300][T17883] ? do_syscall_64+0x19/0x1b0 [ 274.099971][T17883] do_syscall_64+0xf3/0x1b0 [ 274.104465][T17883] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 274.110348][T17883] RIP: 0033:0x45ca29 08:39:28 executing program 1: r0 = socket(0x10, 0x803, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000005540)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000c80)=""/235, 0xeb}], 0x1}}], 0x1, 0x0, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendto(r0, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000b80)=@ethernet={0x0, @local}, 0x80, 0x0}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000ac0)=[{{&(0x7f0000000880)=@caif=@util, 0x80, &(0x7f0000000540)=[{&(0x7f0000000900)=""/128, 0x80}, {&(0x7f0000000980)=""/76, 0x4c}], 0x2}, 0x3f}], 0x1, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_SYS_GET(0xffffffffffffffff, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000a00)={0x0, 0x30}}, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x374, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x14b}, {&(0x7f0000000140)=""/85, 0x20a}, {&(0x7f0000000fc0)=""/4096, 0x773}, {&(0x7f0000000400)=""/106, 0x2ce}, {&(0x7f0000000740)=""/73, 0x3dd}, {&(0x7f0000000200)=""/77, 0x96}, {&(0x7f00000007c0)=""/154, 0x40d}, {&(0x7f0000000000)=""/22, 0xa}], 0x81, &(0x7f0000000600)=""/191, 0x41, 0xb}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) [ 274.114240][T17883] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 274.134378][T17883] RSP: 002b:00007efeff606c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 274.142912][T17883] RAX: ffffffffffffffda RBX: 00000000004fc540 RCX: 000000000045ca29 [ 274.150879][T17883] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 274.158844][T17883] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 274.166823][T17883] R10: 000080001d00c0d0 R11: 0000000000000246 R12: 0000000000000005 [ 274.174791][T17883] R13: 00000000000008dc R14: 00000000004cba16 R15: 00007efeff6076d4 08:39:28 executing program 1: r0 = socket(0x10, 0x803, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000005540)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000c80)=""/235, 0xeb}], 0x1}}], 0x1, 0x0, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendto(r0, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000b80)=@ethernet={0x0, @local}, 0x80, 0x0}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000ac0)=[{{&(0x7f0000000880)=@caif=@util, 0x80, &(0x7f0000000540)=[{&(0x7f0000000900)=""/128, 0x80}, {&(0x7f0000000980)=""/76, 0x4c}], 0x2}, 0x3f}], 0x1, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_SYS_GET(0xffffffffffffffff, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000a00)={0x0, 0x30}}, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x374, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x14b}, {&(0x7f0000000140)=""/85, 0x20a}, {&(0x7f0000000fc0)=""/4096, 0x773}, {&(0x7f0000000400)=""/106, 0x2ce}, {&(0x7f0000000740)=""/73, 0x3dd}, {&(0x7f0000000200)=""/77, 0x96}, {&(0x7f00000007c0)=""/154, 0x40d}, {&(0x7f0000000000)=""/22, 0xa}], 0x81, &(0x7f0000000600)=""/191, 0x41, 0xc}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 08:39:28 executing program 3: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x20000000003, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newlink={0x60, 0x10, 0x1, 0x0, 0x1100, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @ip6gretap={{0xe, 0x1, 'ip6gretap\x00'}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @ipv4={[], [], @loopback}}, @IFLA_GRE_REMOTE={0x14, 0x7, @remote}]}}}]}, 0x60}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00'}) 08:39:28 executing program 1: r0 = socket(0x10, 0x803, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000005540)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000c80)=""/235, 0xeb}], 0x1}}], 0x1, 0x0, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendto(r0, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000b80)=@ethernet={0x0, @local}, 0x80, 0x0}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000ac0)=[{{&(0x7f0000000880)=@caif=@util, 0x80, &(0x7f0000000540)=[{&(0x7f0000000900)=""/128, 0x80}, {&(0x7f0000000980)=""/76, 0x4c}], 0x2}, 0x3f}], 0x1, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_SYS_GET(0xffffffffffffffff, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000a00)={0x0, 0x30}}, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x374, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x14b}, {&(0x7f0000000140)=""/85, 0x20a}, {&(0x7f0000000fc0)=""/4096, 0x773}, {&(0x7f0000000400)=""/106, 0x2ce}, {&(0x7f0000000740)=""/73, 0x3dd}, {&(0x7f0000000200)=""/77, 0x96}, {&(0x7f00000007c0)=""/154, 0x40d}, {&(0x7f0000000000)=""/22, 0xa}], 0x81, &(0x7f0000000600)=""/191, 0x41, 0xd}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 08:39:28 executing program 4: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x20000000003, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00'}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newlink={0x60, 0x10, 0x1, 0x70bd25, 0x0, {0x5, 0x0, 0x0, r4, 0x50800}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @ip6gretap={{0xe, 0x1, 'ip6gretap\x00'}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @ipv4={[], [], @private=0xa010100}}, @IFLA_GRE_REMOTE={0x14, 0x7, @remote}]}}}]}, 0x60}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00'}) 08:39:28 executing program 5: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x10, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = socket$inet6(0xa, 0x1, 0x8010800000000084) r1 = socket$kcm(0x2, 0x3, 0x2) recvmsg(r1, &(0x7f0000007500)={&(0x7f0000006f80)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x80, 0x0, 0x0, 0xffffffffffffffff}, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmmsg$inet6(r0, &(0x7f00000000c0), 0x0, 0x20000040) 08:39:28 executing program 1: r0 = socket(0x10, 0x803, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000005540)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000c80)=""/235, 0xeb}], 0x1}}], 0x1, 0x0, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendto(r0, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000b80)=@ethernet={0x0, @local}, 0x80, 0x0}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000ac0)=[{{&(0x7f0000000880)=@caif=@util, 0x80, &(0x7f0000000540)=[{&(0x7f0000000900)=""/128, 0x80}, {&(0x7f0000000980)=""/76, 0x4c}], 0x2}, 0x3f}], 0x1, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_SYS_GET(0xffffffffffffffff, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000a00)={0x0, 0x30}}, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x374, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x14b}, {&(0x7f0000000140)=""/85, 0x20a}, {&(0x7f0000000fc0)=""/4096, 0x773}, {&(0x7f0000000400)=""/106, 0x2ce}, {&(0x7f0000000740)=""/73, 0x3dd}, {&(0x7f0000000200)=""/77, 0x96}, {&(0x7f00000007c0)=""/154, 0x40d}, {&(0x7f0000000000)=""/22, 0xa}], 0x81, &(0x7f0000000600)=""/191, 0x41, 0xe}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 08:39:28 executing program 2 (fault-call:8 fault-nth:28): shmget(0x0, 0x4000, 0x780012c9, &(0x7f0000ffc000/0x4000)=nil) shmctl$IPC_RMID(0x0, 0x0) shmat(0x0, &(0x7f0000ffe000/0x1000)=nil, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x2, 0x1) r1 = open(&(0x7f0000000080)='./bus\x00', 0x430c2, 0x0) ftruncate(r1, 0x200004) sendfile(r0, r1, 0x0, 0x80001d00c0d0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) 08:39:28 executing program 3: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x20000000003, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newlink={0x60, 0x10, 0x1, 0x0, 0x1200, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @ip6gretap={{0xe, 0x1, 'ip6gretap\x00'}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @ipv4={[], [], @loopback}}, @IFLA_GRE_REMOTE={0x14, 0x7, @remote}]}}}]}, 0x60}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00'}) [ 274.797232][T17950] FAULT_INJECTION: forcing a failure. [ 274.797232][T17950] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 274.801415][T17954] IPVS: ftp: loaded support on port[0] = 21 [ 274.837343][T17950] CPU: 1 PID: 17950 Comm: syz-executor.2 Not tainted 5.7.0-rc6-syzkaller #0 [ 274.846058][T17950] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 274.856101][T17950] Call Trace: [ 274.859643][T17950] dump_stack+0x1e9/0x30e [ 274.863948][T17950] should_fail+0x433/0x5b0 [ 274.868341][T17950] prepare_alloc_pages+0x28c/0x4a0 [ 274.873425][T17950] __alloc_pages_nodemask+0xbc/0x5e0 [ 274.878691][T17950] __do_page_cache_readahead+0x1de/0x4f0 [ 274.884429][T17950] generic_file_buffered_read+0x3ea/0x2570 [ 274.890214][T17950] generic_file_splice_read+0x452/0x700 [ 274.895737][T17950] ? splice_shrink_spd+0xb0/0xb0 [ 274.900649][T17950] splice_direct_to_actor+0x3c1/0xb40 [ 274.906002][T17950] ? do_splice_direct+0x340/0x340 [ 274.911014][T17950] do_splice_direct+0x201/0x340 [ 274.915927][T17950] ? security_file_permission+0x50/0xc0 [ 274.921456][T17950] do_sendfile+0x809/0xfe0 [ 274.925854][T17950] __x64_sys_sendfile64+0x164/0x1a0 [ 274.931028][T17950] ? do_syscall_64+0x19/0x1b0 [ 274.935677][T17950] do_syscall_64+0xf3/0x1b0 [ 274.940152][T17950] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 274.947155][T17950] RIP: 0033:0x45ca29 [ 274.951024][T17950] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 274.970609][T17950] RSP: 002b:00007efeff606c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 274.978991][T17950] RAX: ffffffffffffffda RBX: 00000000004fc540 RCX: 000000000045ca29 [ 274.986944][T17950] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 274.994897][T17950] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 275.002841][T17950] R10: 000080001d00c0d0 R11: 0000000000000246 R12: 0000000000000005 [ 275.010872][T17950] R13: 00000000000008dc R14: 00000000004cba16 R15: 00007efeff6076d4 08:39:29 executing program 1: r0 = socket(0x10, 0x803, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000005540)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000c80)=""/235, 0xeb}], 0x1}}], 0x1, 0x0, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendto(r0, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000b80)=@ethernet={0x0, @local}, 0x80, 0x0}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000ac0)=[{{&(0x7f0000000880)=@caif=@util, 0x80, &(0x7f0000000540)=[{&(0x7f0000000900)=""/128, 0x80}, {&(0x7f0000000980)=""/76, 0x4c}], 0x2}, 0x3f}], 0x1, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_SYS_GET(0xffffffffffffffff, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000a00)={0x0, 0x30}}, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x374, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x14b}, {&(0x7f0000000140)=""/85, 0x20a}, {&(0x7f0000000fc0)=""/4096, 0x773}, {&(0x7f0000000400)=""/106, 0x2ce}, {&(0x7f0000000740)=""/73, 0x3dd}, {&(0x7f0000000200)=""/77, 0x96}, {&(0x7f00000007c0)=""/154, 0x40d}, {&(0x7f0000000000)=""/22, 0xa}], 0x81, &(0x7f0000000600)=""/191, 0x41, 0xf}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 08:39:29 executing program 4: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x20000000003, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00'}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newlink={0x60, 0x10, 0x1, 0x70bd25, 0x0, {0x6, 0x0, 0x0, r4, 0x50800}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @ip6gretap={{0xe, 0x1, 'ip6gretap\x00'}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @ipv4={[], [], @private=0xa010100}}, @IFLA_GRE_REMOTE={0x14, 0x7, @remote}]}}}]}, 0x60}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00'}) 08:39:29 executing program 3: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x20000000003, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newlink={0x60, 0x10, 0x1, 0x0, 0x1300, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @ip6gretap={{0xe, 0x1, 'ip6gretap\x00'}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @ipv4={[], [], @loopback}}, @IFLA_GRE_REMOTE={0x14, 0x7, @remote}]}}}]}, 0x60}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00'}) 08:39:29 executing program 2 (fault-call:8 fault-nth:29): shmget(0x0, 0x4000, 0x780012c9, &(0x7f0000ffc000/0x4000)=nil) shmctl$IPC_RMID(0x0, 0x0) shmat(0x0, &(0x7f0000ffe000/0x1000)=nil, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x2, 0x1) r1 = open(&(0x7f0000000080)='./bus\x00', 0x430c2, 0x0) ftruncate(r1, 0x200004) sendfile(r0, r1, 0x0, 0x80001d00c0d0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) 08:39:29 executing program 0: recvfrom$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket(0x200000000000011, 0x4000000000080002, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000002c0)=0xffffffffffffff27) bind$packet(r0, &(0x7f00000000c0)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @dev}, 0x14) sendmmsg(r0, &(0x7f0000000d00), 0x400000000000229, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) lchown(&(0x7f00000001c0)='./file0\x00', r4, 0x0) syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x80e8, 0x3, &(0x7f00000003c0)=[{&(0x7f0000000140), 0x0, 0x7fffffff}, {&(0x7f0000000180)="4994149c9230fe601f1e8cd23459330a88b06a3dc409d6320a69fd2124fa427faa9d6db703bbf42e4d4890e03c74d9e105a050c4fef4ba3aca5794fabaf8479e7766c427123eaa1b6f56ad204b6031b9f175c842f8ef15d69da9bd7e68023f95da1a82112440ba5b72e720a4b3c2be9461d8ee0d4acf9d0eb18b9f4012de26bcc4fb633063f0c9cde08619a47cb8dc9586bfb38714d67283cd41b656d540c34614be3e6274c2c4e0dd19a70de56ec511653f0ddc021a1760474b17948bf9d42872405fab5a94667982c8e79fd7da0163815caaf63a1d1e339858f89861", 0xdd, 0xb72}, {&(0x7f0000000300)="d4231c4eac89e794562e81e439298f7b68c77a5d718afd4e1bbb78065c83abfb99f10829bc4b10b56166070e96b59d07ad63326cfff15da8b65aa31c3d9a40bc369cd8b591c099bd6207c93ca63433664d7599b173fb0df08ce154bab54c6c79adc4d1c3f6faf31f08603531a79d46f3dee520506a49aed8f11a1a03216b3ae65d55434047a92fc8cba39beb91b5c75adf910646dd", 0x95, 0x200}], 0x4020, &(0x7f0000000440)={[{@shortname_winnt='shortname=winnt'}, {@shortname_win95='shortname=win95'}, {@iocharset={'iocharset', 0x3d, 'maciceland'}}, {@fat=@umask={'umask', 0x3d, 0xa4}}, {@rodir='rodir'}, {@shortname_lower='shortname=lower'}, {@rodir='rodir'}, {@uni_xlateno='uni_xlate=0'}, {@shortname_lower='shortname=lower'}], [{@smackfshat={'smackfshat', 0x3d, 'wlan0vmnet0+eth1//-'}}, {@func={'func', 0x3d, 'PATH_CHECK'}}, {@seclabel='seclabel'}, {@uid_lt={'uid<', r4}}, {@context={'context', 0x3d, 'sysadm_u'}}]}) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r6, 0x84, 0x8, &(0x7f0000000940), &(0x7f0000000980)=0x4) r7 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) lchown(&(0x7f00000001c0)='./file0\x00', r8, 0x0) syz_mount_image$hfs(&(0x7f0000000140)='hfs\x00', &(0x7f0000000280)='./file0\x00', 0x3, 0x5, &(0x7f0000000780)=[{&(0x7f0000000540)="87646ee080ef8f97497e88a06edc5fb99830ed7ca1a56ddae424c172ef0baade46a98fc7573263193f633e1aecda6e420b6b84e361c3cf6855a9c0bbdf53cf7d3f627e284869d82e922f51bce0c6f4fa0dec10d84a5773ae25c32d732467f49293321513e2", 0x65, 0x7}, {&(0x7f00000005c0)="e2ff2e81ddecf5b08d1599b3b0292440f03e20c5383b8761b965e553863c8df6a8e946d8d560d147b89ea4a34eaba8ef9c28f9b59f0cf1e5db938ed701e8968a2f81822391be7162e4", 0x49, 0xffff}, {&(0x7f0000000640)="baa1511113593d651b7ab4976338579029f6450cb1d1a313c5bcb0ccc1", 0x1d, 0xfffffffffffffffe}, {&(0x7f0000000680)="38eca073133ca1bb925ffaee292b2249f664a975ae4116a4cd8057648b96026d", 0x20, 0x1f}, {&(0x7f00000006c0)="5382ca125067fdcedfb3538b3d9a47eaff6bda0fa3b93a3420543aad90abfbe75158075a456d2f68b1b57129fa9252237f7f5e0257dea40d5e1404ee4f6602842815b28f14a654826a01c49d4f00b000a08d6fc32133d69d495cc0424b56c13fd72668eeca8ba2f42b255af79101e2ae50ee9848b40f8e1c730d4a8354a6a5f6cf35828b06d8ac5c0c9a9e48829f3ac152aedd9d2c655569d35bdc42ccefdb2a2d189a3e7b900d97", 0xa8, 0x3}], 0x80, &(0x7f0000000800)={[{@part={'part', 0x3d, 0x1ff}}, {@codepage={'codepage', 0x3d, 'macceltic'}}, {@type={'type', 0x3d, "f133f73c"}}, {@uid={'uid', 0x3d, r8}}, {@codepage={'codepage', 0x3d, 'cp950'}}, {@creator={'creator', 0x3d, "1dfd34c4"}}, {@umask={'umask'}}, {@creator={'creator', 0x3d, "844e0818"}}, {@file_umask={'file_umask', 0x3d, 0x1}}], [{@fsuuid={'fsuuid', 0x3d, {[0x63, 0x32, 0x63, 0x5, 0x38, 0x32, 0x36, 0x61], 0x2d, [0x32, 0x54, 0x64, 0x63], 0x2d, [0x32, 0x65, 0x35, 0x36], 0x2d, [0x36, 0x36, 0x61, 0x62], 0x2d, [0x33, 0x66, 0x62, 0x39, 0x64, 0x31, 0x32, 0x31]}}}, {@dont_hash='dont_hash'}, {@subj_user={'subj_user', 0x3d, 'iocharset'}}, {@fscontext={'fscontext', 0x3d, 'root'}}, {@obj_type={'obj_type', 0x3d, 'maciceland'}}]}) 08:39:29 executing program 1: r0 = socket(0x10, 0x803, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000005540)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000c80)=""/235, 0xeb}], 0x1}}], 0x1, 0x0, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendto(r0, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000b80)=@ethernet={0x0, @local}, 0x80, 0x0}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000ac0)=[{{&(0x7f0000000880)=@caif=@util, 0x80, &(0x7f0000000540)=[{&(0x7f0000000900)=""/128, 0x80}, {&(0x7f0000000980)=""/76, 0x4c}], 0x2}, 0x3f}], 0x1, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_SYS_GET(0xffffffffffffffff, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000a00)={0x0, 0x30}}, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x374, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x14b}, {&(0x7f0000000140)=""/85, 0x20a}, {&(0x7f0000000fc0)=""/4096, 0x773}, {&(0x7f0000000400)=""/106, 0x2ce}, {&(0x7f0000000740)=""/73, 0x3dd}, {&(0x7f0000000200)=""/77, 0x96}, {&(0x7f00000007c0)=""/154, 0x40d}, {&(0x7f0000000000)=""/22, 0xa}], 0x81, &(0x7f0000000600)=""/191, 0x41, 0x10}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) [ 275.288123][T18002] FAULT_INJECTION: forcing a failure. [ 275.288123][T18002] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 275.304565][T18002] CPU: 0 PID: 18002 Comm: syz-executor.2 Not tainted 5.7.0-rc6-syzkaller #0 [ 275.313264][T18002] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 275.323317][T18002] Call Trace: [ 275.326681][T18002] dump_stack+0x1e9/0x30e [ 275.331002][T18002] should_fail+0x433/0x5b0 08:39:29 executing program 1: r0 = socket(0x10, 0x803, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000005540)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000c80)=""/235, 0xeb}], 0x1}}], 0x1, 0x0, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendto(r0, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000b80)=@ethernet={0x0, @local}, 0x80, 0x0}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000ac0)=[{{&(0x7f0000000880)=@caif=@util, 0x80, &(0x7f0000000540)=[{&(0x7f0000000900)=""/128, 0x80}, {&(0x7f0000000980)=""/76, 0x4c}], 0x2}, 0x3f}], 0x1, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_SYS_GET(0xffffffffffffffff, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000a00)={0x0, 0x30}}, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x374, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x14b}, {&(0x7f0000000140)=""/85, 0x20a}, {&(0x7f0000000fc0)=""/4096, 0x773}, {&(0x7f0000000400)=""/106, 0x2ce}, {&(0x7f0000000740)=""/73, 0x3dd}, {&(0x7f0000000200)=""/77, 0x96}, {&(0x7f00000007c0)=""/154, 0x40d}, {&(0x7f0000000000)=""/22, 0xa}], 0x81, &(0x7f0000000600)=""/191, 0x41, 0x11}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) [ 275.335423][T18002] prepare_alloc_pages+0x28c/0x4a0 [ 275.340619][T18002] __alloc_pages_nodemask+0xbc/0x5e0 [ 275.345903][T18002] __do_page_cache_readahead+0x1de/0x4f0 [ 275.351544][T18002] generic_file_buffered_read+0x3ea/0x2570 [ 275.357358][T18002] generic_file_splice_read+0x452/0x700 [ 275.362909][T18002] ? splice_shrink_spd+0xb0/0xb0 [ 275.367847][T18002] splice_direct_to_actor+0x3c1/0xb40 [ 275.373219][T18002] ? do_splice_direct+0x340/0x340 [ 275.378249][T18002] do_splice_direct+0x201/0x340 [ 275.383104][T18002] ? security_file_permission+0x50/0xc0 [ 275.388660][T18002] do_sendfile+0x809/0xfe0 [ 275.393084][T18002] __x64_sys_sendfile64+0x164/0x1a0 [ 275.398279][T18002] ? do_syscall_64+0x19/0x1b0 [ 275.402985][T18002] do_syscall_64+0xf3/0x1b0 [ 275.407492][T18002] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 275.413379][T18002] RIP: 0033:0x45ca29 [ 275.417268][T18002] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 08:39:29 executing program 1: r0 = socket(0x10, 0x803, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000005540)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000c80)=""/235, 0xeb}], 0x1}}], 0x1, 0x0, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendto(r0, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000b80)=@ethernet={0x0, @local}, 0x80, 0x0}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000ac0)=[{{&(0x7f0000000880)=@caif=@util, 0x80, &(0x7f0000000540)=[{&(0x7f0000000900)=""/128, 0x80}, {&(0x7f0000000980)=""/76, 0x4c}], 0x2}, 0x3f}], 0x1, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_SYS_GET(0xffffffffffffffff, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000a00)={0x0, 0x30}}, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x374, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x14b}, {&(0x7f0000000140)=""/85, 0x20a}, {&(0x7f0000000fc0)=""/4096, 0x773}, {&(0x7f0000000400)=""/106, 0x2ce}, {&(0x7f0000000740)=""/73, 0x3dd}, {&(0x7f0000000200)=""/77, 0x96}, {&(0x7f00000007c0)=""/154, 0x40d}, {&(0x7f0000000000)=""/22, 0xa}], 0x81, &(0x7f0000000600)=""/191, 0x41, 0x12}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) [ 275.436867][T18002] RSP: 002b:00007efeff606c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 275.445282][T18002] RAX: ffffffffffffffda RBX: 00000000004fc540 RCX: 000000000045ca29 [ 275.453426][T18002] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 275.461390][T18002] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 275.469366][T18002] R10: 000080001d00c0d0 R11: 0000000000000246 R12: 0000000000000005 [ 275.477335][T18002] R13: 00000000000008dc R14: 00000000004cba16 R15: 00007efeff6076d4 08:39:29 executing program 5: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x10, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = socket$inet6(0xa, 0x1, 0x8010800000000084) r1 = socket$kcm(0x2, 0x3, 0x2) recvmsg(r1, &(0x7f0000007500)={&(0x7f0000006f80)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x80, 0x0, 0x0, 0xffffffffffffffff}, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmmsg$inet6(r0, &(0x7f00000000c0), 0x0, 0x20000040) 08:39:29 executing program 1: r0 = socket(0x10, 0x803, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000005540)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000c80)=""/235, 0xeb}], 0x1}}], 0x1, 0x0, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendto(r0, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000b80)=@ethernet={0x0, @local}, 0x80, 0x0}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000ac0)=[{{&(0x7f0000000880)=@caif=@util, 0x80, &(0x7f0000000540)=[{&(0x7f0000000900)=""/128, 0x80}, {&(0x7f0000000980)=""/76, 0x4c}], 0x2}, 0x3f}], 0x1, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_SYS_GET(0xffffffffffffffff, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000a00)={0x0, 0x30}}, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x374, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x14b}, {&(0x7f0000000140)=""/85, 0x20a}, {&(0x7f0000000fc0)=""/4096, 0x773}, {&(0x7f0000000400)=""/106, 0x2ce}, {&(0x7f0000000740)=""/73, 0x3dd}, {&(0x7f0000000200)=""/77, 0x96}, {&(0x7f00000007c0)=""/154, 0x40d}, {&(0x7f0000000000)=""/22, 0xa}], 0x81, &(0x7f0000000600)=""/191, 0x41, 0x14}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 08:39:29 executing program 3: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x20000000003, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newlink={0x60, 0x10, 0x1, 0x0, 0x1400, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @ip6gretap={{0xe, 0x1, 'ip6gretap\x00'}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @ipv4={[], [], @loopback}}, @IFLA_GRE_REMOTE={0x14, 0x7, @remote}]}}}]}, 0x60}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00'}) 08:39:29 executing program 4: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x20000000003, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00'}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newlink={0x60, 0x10, 0x1, 0x70bd25, 0x0, {0x8, 0x0, 0x0, r4, 0x50800}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @ip6gretap={{0xe, 0x1, 'ip6gretap\x00'}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @ipv4={[], [], @private=0xa010100}}, @IFLA_GRE_REMOTE={0x14, 0x7, @remote}]}}}]}, 0x60}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00'}) 08:39:29 executing program 2 (fault-call:8 fault-nth:30): shmget(0x0, 0x4000, 0x780012c9, &(0x7f0000ffc000/0x4000)=nil) shmctl$IPC_RMID(0x0, 0x0) shmat(0x0, &(0x7f0000ffe000/0x1000)=nil, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x2, 0x1) r1 = open(&(0x7f0000000080)='./bus\x00', 0x430c2, 0x0) ftruncate(r1, 0x200004) sendfile(r0, r1, 0x0, 0x80001d00c0d0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) 08:39:29 executing program 0: mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) symlink(&(0x7f00000002c0)='./bus/file1\x00', &(0x7f00000003c0)='./bus/file0\x00') mkdir(&(0x7f0000000280)='./file0\x00', 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) stat(&(0x7f0000000540)='./file2\x00', &(0x7f00000005c0)) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_INTERVAL(r1, 0xc040564b, &(0x7f0000000240)={0x1, 0x0, 0x201d, 0x1, 0x1, {0x9, 0x80000000}, 0x1}) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$sock_inet_tcp_SIOCOUTQNSD(r3, 0x894b, &(0x7f0000000000)) mount$overlay(0x400000, &(0x7f0000000380)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x1024, &(0x7f0000000540)=ANY=[]) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r1, 0x84, 0x1e, &(0x7f0000000300)=0xdda, 0x4) rename(&(0x7f0000000080)='./bus/file0\x00', &(0x7f0000000140)='./bus/file1\x00') link(&(0x7f0000000200)='./bus\x00', &(0x7f0000000340)='./bus/file1\x00') readlink(&(0x7f0000000040)='./bus/file0\x00', &(0x7f0000000640)=""/4096, 0x1000) creat(&(0x7f0000000400)='./file0\x00', 0x1) readlink(&(0x7f00000001c0)='./bus/file1\x00', &(0x7f0000000440)=""/229, 0xe5) [ 275.657787][T18033] IPVS: ftp: loaded support on port[0] = 21 [ 275.694506][T18037] FAULT_INJECTION: forcing a failure. [ 275.694506][T18037] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 275.724005][T18037] CPU: 0 PID: 18037 Comm: syz-executor.2 Not tainted 5.7.0-rc6-syzkaller #0 [ 275.732707][T18037] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 275.742761][T18037] Call Trace: [ 275.746044][T18037] dump_stack+0x1e9/0x30e [ 275.750352][T18037] should_fail+0x433/0x5b0 [ 275.754761][T18037] prepare_alloc_pages+0x28c/0x4a0 [ 275.759855][T18037] __alloc_pages_nodemask+0xbc/0x5e0 [ 275.765203][T18037] __do_page_cache_readahead+0x1de/0x4f0 [ 275.770814][T18037] generic_file_buffered_read+0x3ea/0x2570 [ 275.776600][T18037] generic_file_splice_read+0x452/0x700 [ 275.782120][T18037] ? splice_shrink_spd+0xb0/0xb0 [ 275.787057][T18037] splice_direct_to_actor+0x3c1/0xb40 [ 275.792405][T18037] ? do_splice_direct+0x340/0x340 [ 275.797736][T18037] do_splice_direct+0x201/0x340 [ 275.802571][T18037] ? security_file_permission+0x50/0xc0 [ 275.808088][T18037] do_sendfile+0x809/0xfe0 [ 275.812500][T18037] __x64_sys_sendfile64+0x164/0x1a0 [ 275.817676][T18037] ? do_syscall_64+0x19/0x1b0 [ 275.822325][T18037] do_syscall_64+0xf3/0x1b0 [ 275.826812][T18037] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 275.832687][T18037] RIP: 0033:0x45ca29 [ 275.836554][T18037] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 275.856128][T18037] RSP: 002b:00007efeff606c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 275.864513][T18037] RAX: ffffffffffffffda RBX: 00000000004fc540 RCX: 000000000045ca29 08:39:29 executing program 4: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x20000000003, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00'}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newlink={0x60, 0x10, 0x1, 0x70bd25, 0x0, {0x9, 0x0, 0x0, r4, 0x50800}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @ip6gretap={{0xe, 0x1, 'ip6gretap\x00'}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @ipv4={[], [], @private=0xa010100}}, @IFLA_GRE_REMOTE={0x14, 0x7, @remote}]}}}]}, 0x60}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00'}) [ 275.872461][T18037] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 275.880405][T18037] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 275.888360][T18037] R10: 000080001d00c0d0 R11: 0000000000000246 R12: 0000000000000005 [ 275.896307][T18037] R13: 00000000000008dc R14: 00000000004cba16 R15: 00007efeff6076d4 08:39:29 executing program 1: r0 = socket(0x10, 0x803, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000005540)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000c80)=""/235, 0xeb}], 0x1}}], 0x1, 0x0, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendto(r0, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000b80)=@ethernet={0x0, @local}, 0x80, 0x0}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000ac0)=[{{&(0x7f0000000880)=@caif=@util, 0x80, &(0x7f0000000540)=[{&(0x7f0000000900)=""/128, 0x80}, {&(0x7f0000000980)=""/76, 0x4c}], 0x2}, 0x3f}], 0x1, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_SYS_GET(0xffffffffffffffff, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000a00)={0x0, 0x30}}, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x374, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x14b}, {&(0x7f0000000140)=""/85, 0x20a}, {&(0x7f0000000fc0)=""/4096, 0x773}, {&(0x7f0000000400)=""/106, 0x2ce}, {&(0x7f0000000740)=""/73, 0x3dd}, {&(0x7f0000000200)=""/77, 0x96}, {&(0x7f00000007c0)=""/154, 0x40d}, {&(0x7f0000000000)=""/22, 0xa}], 0x81, &(0x7f0000000600)=""/191, 0x41, 0x19}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 08:39:29 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000030000/0x18000)=nil, &(0x7f0000000280)=[@text16={0x10, &(0x7f0000000140)="0f0766b9044d564b66b849e1910166ba000000000f3066b8010000000f01d92e3e0fc7ad090066b82e6d00000f23c00f21f8663502000f000f23f8de6200baf80c66b87c757a8b66efbafc0c66ed3e9c3e3626262e0f74d166b9800000c00f326635008000000f30", 0x68}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x2, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x7d, &(0x7f0000000100)={r5}, &(0x7f0000000140)=0x10) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r6, 0x84, 0x70, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0x8) r7 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_RTOINFO(r6, 0x84, 0x7d, &(0x7f0000000100)={r8}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f00000001c0)={r5, 0x2, 0x6, 0x3b, 0x8, 0x6, 0x800, 0x1, {r8, @in={{0x2, 0x4e21, @empty}}, 0x18000, 0x0, 0x8, 0x3, 0x17d}}, &(0x7f00000000c0)=0xb0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 08:39:29 executing program 3: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x20000000003, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newlink={0x60, 0x10, 0x1, 0x0, 0x3f00, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @ip6gretap={{0xe, 0x1, 'ip6gretap\x00'}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @ipv4={[], [], @loopback}}, @IFLA_GRE_REMOTE={0x14, 0x7, @remote}]}}}]}, 0x60}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00'}) 08:39:29 executing program 2 (fault-call:8 fault-nth:31): shmget(0x0, 0x4000, 0x780012c9, &(0x7f0000ffc000/0x4000)=nil) shmctl$IPC_RMID(0x0, 0x0) shmat(0x0, &(0x7f0000ffe000/0x1000)=nil, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x2, 0x1) r1 = open(&(0x7f0000000080)='./bus\x00', 0x430c2, 0x0) ftruncate(r1, 0x200004) sendfile(r0, r1, 0x0, 0x80001d00c0d0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) 08:39:30 executing program 1: r0 = socket(0x10, 0x803, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000005540)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000c80)=""/235, 0xeb}], 0x1}}], 0x1, 0x0, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendto(r0, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000b80)=@ethernet={0x0, @local}, 0x80, 0x0}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000ac0)=[{{&(0x7f0000000880)=@caif=@util, 0x80, &(0x7f0000000540)=[{&(0x7f0000000900)=""/128, 0x80}, {&(0x7f0000000980)=""/76, 0x4c}], 0x2}, 0x3f}], 0x1, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_SYS_GET(0xffffffffffffffff, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000a00)={0x0, 0x30}}, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x374, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x14b}, {&(0x7f0000000140)=""/85, 0x20a}, {&(0x7f0000000fc0)=""/4096, 0x773}, {&(0x7f0000000400)=""/106, 0x2ce}, {&(0x7f0000000740)=""/73, 0x3dd}, {&(0x7f0000000200)=""/77, 0x96}, {&(0x7f00000007c0)=""/154, 0x40d}, {&(0x7f0000000000)=""/22, 0xa}], 0x81, &(0x7f0000000600)=""/191, 0x41, 0x48}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) [ 276.070840][T18083] FAULT_INJECTION: forcing a failure. [ 276.070840][T18083] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 276.119443][T18083] CPU: 0 PID: 18083 Comm: syz-executor.2 Not tainted 5.7.0-rc6-syzkaller #0 [ 276.128152][T18083] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 276.138206][T18083] Call Trace: [ 276.141802][T18083] dump_stack+0x1e9/0x30e [ 276.146577][T18083] should_fail+0x433/0x5b0 [ 276.151001][T18083] prepare_alloc_pages+0x28c/0x4a0 [ 276.156128][T18083] __alloc_pages_nodemask+0xbc/0x5e0 [ 276.161418][T18083] __do_page_cache_readahead+0x1de/0x4f0 [ 276.167065][T18083] generic_file_buffered_read+0x3ea/0x2570 [ 276.172882][T18083] generic_file_splice_read+0x452/0x700 [ 276.178445][T18083] ? splice_shrink_spd+0xb0/0xb0 [ 276.183384][T18083] splice_direct_to_actor+0x3c1/0xb40 [ 276.188759][T18083] ? do_splice_direct+0x340/0x340 [ 276.193784][T18083] do_splice_direct+0x201/0x340 [ 276.198631][T18083] ? security_file_permission+0x50/0xc0 [ 276.204158][T18083] do_sendfile+0x809/0xfe0 [ 276.208563][T18083] __x64_sys_sendfile64+0x164/0x1a0 [ 276.213741][T18083] ? do_syscall_64+0x19/0x1b0 [ 276.218397][T18083] do_syscall_64+0xf3/0x1b0 [ 276.222875][T18083] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 276.228828][T18083] RIP: 0033:0x45ca29 [ 276.232704][T18083] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 276.252310][T18083] RSP: 002b:00007efeff606c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 276.260785][T18083] RAX: ffffffffffffffda RBX: 00000000004fc540 RCX: 000000000045ca29 [ 276.268732][T18083] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 276.276687][T18083] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 276.284641][T18083] R10: 000080001d00c0d0 R11: 0000000000000246 R12: 0000000000000005 [ 276.292585][T18083] R13: 00000000000008dc R14: 00000000004cba16 R15: 00007efeff6076d4 08:39:30 executing program 5: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x10, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = socket$inet6(0xa, 0x1, 0x8010800000000084) r1 = socket$kcm(0x2, 0x3, 0x2) recvmsg(r1, &(0x7f0000007500)={&(0x7f0000006f80)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x80, 0x0, 0x0, 0xffffffffffffffff}, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmmsg$inet6(r0, &(0x7f00000000c0), 0x0, 0x20000040) 08:39:30 executing program 4: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x20000000003, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00'}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newlink={0x60, 0x10, 0x1, 0x70bd25, 0x0, {0xa, 0x0, 0x0, r4, 0x50800}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @ip6gretap={{0xe, 0x1, 'ip6gretap\x00'}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @ipv4={[], [], @private=0xa010100}}, @IFLA_GRE_REMOTE={0x14, 0x7, @remote}]}}}]}, 0x60}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00'}) 08:39:30 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newlink={0x60, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @ip6gretap={{0xe, 0x1, 'ip6gretap\x00'}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @ipv4={[], [], @loopback}}, @IFLA_GRE_REMOTE={0x14, 0x7, @remote}]}}}]}, 0x60}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newlink={0x60, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @ip6gretap={{0xe, 0x1, 'ip6gretap\x00'}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @ipv4={[], [], @loopback}}, @IFLA_GRE_REMOTE={0x14, 0x7, @remote}]}}}]}, 0x60}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c00000010001fff00"/20, @ANYRESDEC=r0, @ANYBLOB="ff7f000000000000140012800a00010076786c616e00000004000280080004003645", @ANYRESOCT=r1, @ANYBLOB="5022964dbddc6dd00ebc42a0c961001147137d3ac57b15c4267964b13d90ff70c371a39d1682cd48303acecb92a6243c06ba42a32225cffd8c3c9932afd1210ff9e2446c3d833789c7a0dee71a809ee2afc41d1482134ad691d48cdfe90a01d2caf2d36e84caa4dd97a0c90763f6c223569271cb5537e9569a2038c7c2d563664de98489c092b82ca4cd0df0b3ddeba6eee69e3b20ad74b40df520dc8778624d5e4af56f1c185519c5426145c5703fbb319fc9f1a5142476a10fa85afd68e8c34876721fb71da718e899884bcc4d9cc02d6e5d46438445a12f44b93b058314ab27d8513e563b2c47", @ANYRES32, @ANYRES64=r2, @ANYRESHEX], 0x3c}, 0x1, 0x8000a0ffffffff}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="6000000010000100"/20, @ANYRES32=r5, @ANYBLOB="000000000000c9236d11a2a22e3f349d000040f3be1d050001006970366772657461700000002c0002801400060000000000000000000000ffff7f00000114000700fe8000000000000000000000000000bb"], 0x60}}, 0x0) ioctl$sock_SIOCSIFBR(r4, 0x8941, &(0x7f0000000080)=@get={0x1, &(0x7f0000000000)=""/100, 0x8}) r6 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r6, &(0x7f00000000c0), 0x492492492492627, 0x0) 08:39:30 executing program 1: r0 = socket(0x10, 0x803, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000005540)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000c80)=""/235, 0xeb}], 0x1}}], 0x1, 0x0, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendto(r0, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000b80)=@ethernet={0x0, @local}, 0x80, 0x0}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000ac0)=[{{&(0x7f0000000880)=@caif=@util, 0x80, &(0x7f0000000540)=[{&(0x7f0000000900)=""/128, 0x80}, {&(0x7f0000000980)=""/76, 0x4c}], 0x2}, 0x3f}], 0x1, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_SYS_GET(0xffffffffffffffff, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000a00)={0x0, 0x30}}, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x374, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x14b}, {&(0x7f0000000140)=""/85, 0x20a}, {&(0x7f0000000fc0)=""/4096, 0x773}, {&(0x7f0000000400)=""/106, 0x2ce}, {&(0x7f0000000740)=""/73, 0x3dd}, {&(0x7f0000000200)=""/77, 0x96}, {&(0x7f00000007c0)=""/154, 0x40d}, {&(0x7f0000000000)=""/22, 0xa}], 0x81, &(0x7f0000000600)=""/191, 0x41, 0x4c}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 08:39:30 executing program 3: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x20000000003, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newlink={0x60, 0x10, 0x1, 0x0, 0x4000, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @ip6gretap={{0xe, 0x1, 'ip6gretap\x00'}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @ipv4={[], [], @loopback}}, @IFLA_GRE_REMOTE={0x14, 0x7, @remote}]}}}]}, 0x60}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00'}) 08:39:30 executing program 2 (fault-call:8 fault-nth:32): shmget(0x0, 0x4000, 0x780012c9, &(0x7f0000ffc000/0x4000)=nil) shmctl$IPC_RMID(0x0, 0x0) shmat(0x0, &(0x7f0000ffe000/0x1000)=nil, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x2, 0x1) r1 = open(&(0x7f0000000080)='./bus\x00', 0x430c2, 0x0) ftruncate(r1, 0x200004) sendfile(r0, r1, 0x0, 0x80001d00c0d0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) [ 276.492269][T18113] IPVS: ftp: loaded support on port[0] = 21 [ 276.502751][T18112] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.0'. [ 276.522103][T18116] FAULT_INJECTION: forcing a failure. [ 276.522103][T18116] name fail_page_alloc, interval 1, probability 0, space 0, times 0 08:39:30 executing program 1: r0 = socket(0x10, 0x803, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000005540)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000c80)=""/235, 0xeb}], 0x1}}], 0x1, 0x0, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendto(r0, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000b80)=@ethernet={0x0, @local}, 0x80, 0x0}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000ac0)=[{{&(0x7f0000000880)=@caif=@util, 0x80, &(0x7f0000000540)=[{&(0x7f0000000900)=""/128, 0x80}, {&(0x7f0000000980)=""/76, 0x4c}], 0x2}, 0x3f}], 0x1, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_SYS_GET(0xffffffffffffffff, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000a00)={0x0, 0x30}}, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x374, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x14b}, {&(0x7f0000000140)=""/85, 0x20a}, {&(0x7f0000000fc0)=""/4096, 0x773}, {&(0x7f0000000400)=""/106, 0x2ce}, {&(0x7f0000000740)=""/73, 0x3dd}, {&(0x7f0000000200)=""/77, 0x96}, {&(0x7f00000007c0)=""/154, 0x40d}, {&(0x7f0000000000)=""/22, 0xa}], 0x81, &(0x7f0000000600)=""/191, 0x41, 0x60}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) [ 276.529378][T18112] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.0'. 08:39:30 executing program 4: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x20000000003, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00'}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newlink={0x60, 0x10, 0x1, 0x70bd25, 0x0, {0xb, 0x0, 0x0, r4, 0x50800}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @ip6gretap={{0xe, 0x1, 'ip6gretap\x00'}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @ipv4={[], [], @private=0xa010100}}, @IFLA_GRE_REMOTE={0x14, 0x7, @remote}]}}}]}, 0x60}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00'}) 08:39:30 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f00000001c0)={'batadv0\x00'}) r4 = socket$inet6(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f00000001c0)={'batadv0\x00'}) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r4, 0x84, 0x73, &(0x7f0000000040)={0x0, 0x1ef, 0x10, 0x6, 0xff}, &(0x7f0000000080)=0x18) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x1f, &(0x7f0000000140)={r5, @in={{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x17}}}, 0x5, 0x2}, 0x90) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x404e21, 0x0, @ipv4={[], [], @local}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x25, &(0x7f0000000240)={0x0, @in6={{0x2, 0x0, 0x0, @dev}}, 0x0, 0x2}, 0x9c) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$TIOCSRS485(0xffffffffffffffff, 0x542f, &(0x7f0000000000)={0x9, 0x1, 0x81}) [ 276.620813][T18116] CPU: 1 PID: 18116 Comm: syz-executor.2 Not tainted 5.7.0-rc6-syzkaller #0 [ 276.629535][T18116] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 276.639589][T18116] Call Trace: [ 276.642887][T18116] dump_stack+0x1e9/0x30e [ 276.647222][T18116] should_fail+0x433/0x5b0 [ 276.651672][T18116] prepare_alloc_pages+0x28c/0x4a0 [ 276.656785][T18116] __alloc_pages_nodemask+0xbc/0x5e0 [ 276.662086][T18116] __do_page_cache_readahead+0x1de/0x4f0 [ 276.667730][T18116] generic_file_buffered_read+0x3ea/0x2570 [ 276.673549][T18116] generic_file_splice_read+0x452/0x700 [ 276.679105][T18116] ? splice_shrink_spd+0xb0/0xb0 [ 276.684046][T18116] splice_direct_to_actor+0x3c1/0xb40 [ 276.689423][T18116] ? do_splice_direct+0x340/0x340 [ 276.694544][T18116] do_splice_direct+0x201/0x340 [ 276.699521][T18116] ? security_file_permission+0x50/0xc0 [ 276.705067][T18116] do_sendfile+0x809/0xfe0 [ 276.709492][T18116] __x64_sys_sendfile64+0x164/0x1a0 [ 276.714690][T18116] ? do_syscall_64+0x19/0x1b0 08:39:30 executing program 3: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x20000000003, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newlink={0x60, 0x10, 0x1, 0x0, 0x4788, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @ip6gretap={{0xe, 0x1, 'ip6gretap\x00'}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @ipv4={[], [], @loopback}}, @IFLA_GRE_REMOTE={0x14, 0x7, @remote}]}}}]}, 0x60}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00'}) [ 276.719399][T18116] do_syscall_64+0xf3/0x1b0 [ 276.723907][T18116] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 276.729795][T18116] RIP: 0033:0x45ca29 [ 276.733691][T18116] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 276.753290][T18116] RSP: 002b:00007efeff606c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 276.761788][T18116] RAX: ffffffffffffffda RBX: 00000000004fc540 RCX: 000000000045ca29 08:39:30 executing program 1: r0 = socket(0x10, 0x803, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000005540)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000c80)=""/235, 0xeb}], 0x1}}], 0x1, 0x0, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendto(r0, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000b80)=@ethernet={0x0, @local}, 0x80, 0x0}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000ac0)=[{{&(0x7f0000000880)=@caif=@util, 0x80, &(0x7f0000000540)=[{&(0x7f0000000900)=""/128, 0x80}, {&(0x7f0000000980)=""/76, 0x4c}], 0x2}, 0x3f}], 0x1, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_SYS_GET(0xffffffffffffffff, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000a00)={0x0, 0x30}}, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x374, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x14b}, {&(0x7f0000000140)=""/85, 0x20a}, {&(0x7f0000000fc0)=""/4096, 0x773}, {&(0x7f0000000400)=""/106, 0x2ce}, {&(0x7f0000000740)=""/73, 0x3dd}, {&(0x7f0000000200)=""/77, 0x96}, {&(0x7f00000007c0)=""/154, 0x40d}, {&(0x7f0000000000)=""/22, 0xa}], 0x81, &(0x7f0000000600)=""/191, 0x41, 0x68}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) [ 276.770021][T18116] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 276.777993][T18116] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 276.785963][T18116] R10: 000080001d00c0d0 R11: 0000000000000246 R12: 0000000000000005 [ 276.793934][T18116] R13: 00000000000008dc R14: 00000000004cba16 R15: 00007efeff6076d4 08:39:30 executing program 4: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x20000000003, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00'}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newlink={0x60, 0x10, 0x1, 0x70bd25, 0x0, {0xc, 0x0, 0x0, r4, 0x50800}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @ip6gretap={{0xe, 0x1, 'ip6gretap\x00'}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @ipv4={[], [], @private=0xa010100}}, @IFLA_GRE_REMOTE={0x14, 0x7, @remote}]}}}]}, 0x60}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00'}) 08:39:31 executing program 5: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x10, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = socket$inet6(0xa, 0x1, 0x8010800000000084) r1 = socket$kcm(0x2, 0x3, 0x2) recvmsg(r1, &(0x7f0000007500)={&(0x7f0000006f80)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x80, 0x0, 0x0, 0xffffffffffffffff}, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmmsg$inet6(r0, &(0x7f00000000c0)=[{{0x0, 0x0, &(0x7f0000005000)=[{&(0x7f0000002cc0)="ea", 0x1}], 0x1}}], 0x1, 0x20000040) 08:39:31 executing program 2 (fault-call:8 fault-nth:33): shmget(0x0, 0x4000, 0x780012c9, &(0x7f0000ffc000/0x4000)=nil) shmctl$IPC_RMID(0x0, 0x0) shmat(0x0, &(0x7f0000ffe000/0x1000)=nil, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x2, 0x1) r1 = open(&(0x7f0000000080)='./bus\x00', 0x430c2, 0x0) ftruncate(r1, 0x200004) sendfile(r0, r1, 0x0, 0x80001d00c0d0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) 08:39:31 executing program 3: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x20000000003, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newlink={0x60, 0x10, 0x1, 0x0, 0x4888, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @ip6gretap={{0xe, 0x1, 'ip6gretap\x00'}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @ipv4={[], [], @loopback}}, @IFLA_GRE_REMOTE={0x14, 0x7, @remote}]}}}]}, 0x60}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00'}) 08:39:31 executing program 1: r0 = socket(0x10, 0x803, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000005540)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000c80)=""/235, 0xeb}], 0x1}}], 0x1, 0x0, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendto(r0, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000b80)=@ethernet={0x0, @local}, 0x80, 0x0}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000ac0)=[{{&(0x7f0000000880)=@caif=@util, 0x80, &(0x7f0000000540)=[{&(0x7f0000000900)=""/128, 0x80}, {&(0x7f0000000980)=""/76, 0x4c}], 0x2}, 0x3f}], 0x1, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_SYS_GET(0xffffffffffffffff, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000a00)={0x0, 0x30}}, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x374, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x14b}, {&(0x7f0000000140)=""/85, 0x20a}, {&(0x7f0000000fc0)=""/4096, 0x773}, {&(0x7f0000000400)=""/106, 0x2ce}, {&(0x7f0000000740)=""/73, 0x3dd}, {&(0x7f0000000200)=""/77, 0x96}, {&(0x7f00000007c0)=""/154, 0x40d}, {&(0x7f0000000000)=""/22, 0xa}], 0x81, &(0x7f0000000600)=""/191, 0x41, 0x6c}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 08:39:31 executing program 0: mknod(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newlink={0x60, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r0}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @ip6gretap={{0xe, 0x1, 'ip6gretap\x00'}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @ipv4={[], [], @loopback}}, @IFLA_GRE_REMOTE={0x14, 0x7, @remote}]}}}]}, 0x60}}, 0x0) r1 = accept(0xffffffffffffffff, &(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @empty}}, &(0x7f0000000080)=0x80) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r2, 0x84, 0x70, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0x8) r3 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_RTOINFO(r2, 0x84, 0x7d, &(0x7f0000000100)={r4}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000100)={r4, 0x800}, &(0x7f0000000340)=0x8) r5 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000140), 0xcc, 0x0) getsockopt$inet_sctp6_SCTP_HMAC_IDENT(0xffffffffffffffff, 0x84, 0x16, &(0x7f0000000400)=ANY=[], &(0x7f00000003c0)=0xa) recvfrom$packet(0xffffffffffffffff, &(0x7f0000000200)=""/251, 0xfb, 0x0, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x14) clone(0x180000105, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000000c0)='rpc_pipefs\x00', 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0xfffffffffffffe3a, 0x1}], 0x100488, 0x0) 08:39:31 executing program 4: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x20000000003, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00'}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newlink={0x60, 0x10, 0x1, 0x70bd25, 0x0, {0xf, 0x0, 0x0, r4, 0x50800}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @ip6gretap={{0xe, 0x1, 'ip6gretap\x00'}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @ipv4={[], [], @private=0xa010100}}, @IFLA_GRE_REMOTE={0x14, 0x7, @remote}]}}}]}, 0x60}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00'}) 08:39:31 executing program 0: mknod(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newlink={0x60, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r0}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @ip6gretap={{0xe, 0x1, 'ip6gretap\x00'}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @ipv4={[], [], @loopback}}, @IFLA_GRE_REMOTE={0x14, 0x7, @remote}]}}}]}, 0x60}}, 0x0) r1 = accept(0xffffffffffffffff, &(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @empty}}, &(0x7f0000000080)=0x80) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r2, 0x84, 0x70, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0x8) r3 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_RTOINFO(r2, 0x84, 0x7d, &(0x7f0000000100)={r4}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000100)={r4, 0x800}, &(0x7f0000000340)=0x8) r5 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000140), 0xcc, 0x0) getsockopt$inet_sctp6_SCTP_HMAC_IDENT(0xffffffffffffffff, 0x84, 0x16, &(0x7f0000000400)=ANY=[], &(0x7f00000003c0)=0xa) recvfrom$packet(0xffffffffffffffff, &(0x7f0000000200)=""/251, 0xfb, 0x0, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x14) clone(0x180000105, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000000c0)='rpc_pipefs\x00', 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0xfffffffffffffe3a, 0x1}], 0x100488, 0x0) [ 277.344726][T18194] FAULT_INJECTION: forcing a failure. [ 277.344726][T18194] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 277.362185][T18195] IPVS: ftp: loaded support on port[0] = 21 [ 277.403345][T18194] CPU: 1 PID: 18194 Comm: syz-executor.2 Not tainted 5.7.0-rc6-syzkaller #0 [ 277.412084][T18194] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 277.422171][T18194] Call Trace: [ 277.425462][T18194] dump_stack+0x1e9/0x30e [ 277.429790][T18194] should_fail+0x433/0x5b0 [ 277.434644][T18194] prepare_alloc_pages+0x28c/0x4a0 [ 277.439758][T18194] __alloc_pages_nodemask+0xbc/0x5e0 [ 277.445078][T18194] __do_page_cache_readahead+0x1de/0x4f0 08:39:31 executing program 1: r0 = socket(0x10, 0x803, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000005540)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000c80)=""/235, 0xeb}], 0x1}}], 0x1, 0x0, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendto(r0, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000b80)=@ethernet={0x0, @local}, 0x80, 0x0}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000ac0)=[{{&(0x7f0000000880)=@caif=@util, 0x80, &(0x7f0000000540)=[{&(0x7f0000000900)=""/128, 0x80}, {&(0x7f0000000980)=""/76, 0x4c}], 0x2}, 0x3f}], 0x1, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_SYS_GET(0xffffffffffffffff, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000a00)={0x0, 0x30}}, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x374, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x14b}, {&(0x7f0000000140)=""/85, 0x20a}, {&(0x7f0000000fc0)=""/4096, 0x773}, {&(0x7f0000000400)=""/106, 0x2ce}, {&(0x7f0000000740)=""/73, 0x3dd}, {&(0x7f0000000200)=""/77, 0x96}, {&(0x7f00000007c0)=""/154, 0x40d}, {&(0x7f0000000000)=""/22, 0xa}], 0x81, &(0x7f0000000600)=""/191, 0x41, 0x74}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) [ 277.450717][T18194] generic_file_buffered_read+0x3ea/0x2570 [ 277.456622][T18194] generic_file_splice_read+0x452/0x700 [ 277.462173][T18194] ? splice_shrink_spd+0xb0/0xb0 [ 277.467113][T18194] splice_direct_to_actor+0x3c1/0xb40 [ 277.472489][T18194] ? do_splice_direct+0x340/0x340 [ 277.477641][T18194] do_splice_direct+0x201/0x340 [ 277.482493][T18194] ? security_file_permission+0x50/0xc0 [ 277.488145][T18194] do_sendfile+0x809/0xfe0 [ 277.492662][T18194] __x64_sys_sendfile64+0x164/0x1a0 [ 277.497867][T18194] ? do_syscall_64+0x19/0x1b0 [ 277.502574][T18194] do_syscall_64+0xf3/0x1b0 [ 277.507076][T18194] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 277.512954][T18194] RIP: 0033:0x45ca29 [ 277.516830][T18194] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 277.536451][T18194] RSP: 002b:00007efeff606c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 277.544855][T18194] RAX: ffffffffffffffda RBX: 00000000004fc540 RCX: 000000000045ca29 08:39:31 executing program 4: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x20000000003, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00'}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newlink={0x60, 0x10, 0x1, 0x70bd25, 0x0, {0x10, 0x0, 0x0, r4, 0x50800}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @ip6gretap={{0xe, 0x1, 'ip6gretap\x00'}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @ipv4={[], [], @private=0xa010100}}, @IFLA_GRE_REMOTE={0x14, 0x7, @remote}]}}}]}, 0x60}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00'}) 08:39:31 executing program 3: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x20000000003, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newlink={0x60, 0x10, 0x1, 0x0, 0x5501, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @ip6gretap={{0xe, 0x1, 'ip6gretap\x00'}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @ipv4={[], [], @loopback}}, @IFLA_GRE_REMOTE={0x14, 0x7, @remote}]}}}]}, 0x60}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00'}) [ 277.552802][T18194] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 277.560788][T18194] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 277.568735][T18194] R10: 000080001d00c0d0 R11: 0000000000000246 R12: 0000000000000005 [ 277.576768][T18194] R13: 00000000000008dc R14: 00000000004cba16 R15: 00007efeff6076d4 08:39:31 executing program 0: mknod(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newlink={0x60, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r0}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @ip6gretap={{0xe, 0x1, 'ip6gretap\x00'}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @ipv4={[], [], @loopback}}, @IFLA_GRE_REMOTE={0x14, 0x7, @remote}]}}}]}, 0x60}}, 0x0) r1 = accept(0xffffffffffffffff, &(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @empty}}, &(0x7f0000000080)=0x80) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r2, 0x84, 0x70, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0x8) r3 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_RTOINFO(r2, 0x84, 0x7d, &(0x7f0000000100)={r4}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000100)={r4, 0x800}, &(0x7f0000000340)=0x8) r5 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000140), 0xcc, 0x0) getsockopt$inet_sctp6_SCTP_HMAC_IDENT(0xffffffffffffffff, 0x84, 0x16, &(0x7f0000000400)=ANY=[], &(0x7f00000003c0)=0xa) recvfrom$packet(0xffffffffffffffff, &(0x7f0000000200)=""/251, 0xfb, 0x0, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x14) clone(0x180000105, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000000c0)='rpc_pipefs\x00', 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0xfffffffffffffe3a, 0x1}], 0x100488, 0x0) 08:39:31 executing program 1: r0 = socket(0x10, 0x803, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000005540)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000c80)=""/235, 0xeb}], 0x1}}], 0x1, 0x0, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendto(r0, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000b80)=@ethernet={0x0, @local}, 0x80, 0x0}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000ac0)=[{{&(0x7f0000000880)=@caif=@util, 0x80, &(0x7f0000000540)=[{&(0x7f0000000900)=""/128, 0x80}, {&(0x7f0000000980)=""/76, 0x4c}], 0x2}, 0x3f}], 0x1, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_SYS_GET(0xffffffffffffffff, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000a00)={0x0, 0x30}}, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x374, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x14b}, {&(0x7f0000000140)=""/85, 0x20a}, {&(0x7f0000000fc0)=""/4096, 0x773}, {&(0x7f0000000400)=""/106, 0x2ce}, {&(0x7f0000000740)=""/73, 0x3dd}, {&(0x7f0000000200)=""/77, 0x96}, {&(0x7f00000007c0)=""/154, 0x40d}, {&(0x7f0000000000)=""/22, 0xa}], 0x81, &(0x7f0000000600)=""/191, 0x41, 0x7a}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 08:39:31 executing program 5: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x10, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = socket$inet6(0xa, 0x1, 0x8010800000000084) r1 = socket$kcm(0x2, 0x3, 0x2) recvmsg(r1, &(0x7f0000007500)={&(0x7f0000006f80)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x80, 0x0, 0x0, 0xffffffffffffffff}, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmmsg$inet6(r0, &(0x7f00000000c0)=[{{0x0, 0x0, &(0x7f0000005000)=[{&(0x7f0000002cc0)="ea", 0x1}], 0x1}}], 0x1, 0x20000040) 08:39:31 executing program 2 (fault-call:8 fault-nth:34): shmget(0x0, 0x4000, 0x780012c9, &(0x7f0000ffc000/0x4000)=nil) shmctl$IPC_RMID(0x0, 0x0) shmat(0x0, &(0x7f0000ffe000/0x1000)=nil, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x2, 0x1) r1 = open(&(0x7f0000000080)='./bus\x00', 0x430c2, 0x0) ftruncate(r1, 0x200004) sendfile(r0, r1, 0x0, 0x80001d00c0d0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) 08:39:31 executing program 1: r0 = socket(0x10, 0x803, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000005540)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000c80)=""/235, 0xeb}], 0x1}}], 0x1, 0x0, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendto(r0, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000b80)=@ethernet={0x0, @local}, 0x80, 0x0}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000ac0)=[{{&(0x7f0000000880)=@caif=@util, 0x80, &(0x7f0000000540)=[{&(0x7f0000000900)=""/128, 0x80}, {&(0x7f0000000980)=""/76, 0x4c}], 0x2}, 0x3f}], 0x1, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_SYS_GET(0xffffffffffffffff, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000a00)={0x0, 0x30}}, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x374, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x14b}, {&(0x7f0000000140)=""/85, 0x20a}, {&(0x7f0000000fc0)=""/4096, 0x773}, {&(0x7f0000000400)=""/106, 0x2ce}, {&(0x7f0000000740)=""/73, 0x3dd}, {&(0x7f0000000200)=""/77, 0x96}, {&(0x7f00000007c0)=""/154, 0x40d}, {&(0x7f0000000000)=""/22, 0xa}], 0x81, &(0x7f0000000600)=""/191, 0x41, 0x12c}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 08:39:31 executing program 3: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x20000000003, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newlink={0x60, 0x10, 0x1, 0x0, 0x5865, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @ip6gretap={{0xe, 0x1, 'ip6gretap\x00'}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @ipv4={[], [], @loopback}}, @IFLA_GRE_REMOTE={0x14, 0x7, @remote}]}}}]}, 0x60}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00'}) [ 277.754688][T18247] IPVS: ftp: loaded support on port[0] = 21 08:39:31 executing program 4: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x20000000003, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00'}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newlink={0x60, 0x10, 0x1, 0x70bd25, 0x0, {0x11, 0x0, 0x0, r4, 0x50800}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @ip6gretap={{0xe, 0x1, 'ip6gretap\x00'}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @ipv4={[], [], @private=0xa010100}}, @IFLA_GRE_REMOTE={0x14, 0x7, @remote}]}}}]}, 0x60}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00'}) 08:39:31 executing program 0: r0 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="46000000050000003500970000f70000850000002ac13e872259d3b471000000"], &(0x7f0000000140)='GPL\x00', 0x0, 0xa0, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x15) r1 = socket(0x10, 0x80002, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=@newlink={0x60, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x9b, 0x12, 0x0, 0x1, @veth={{0x0, 0x1, 'veth\x00'}, {0x0, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x0, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x800d, 0x6ab31}}}}}}]}, 0x60}, 0x1, 0x0, 0x0, 0x2050}, 0x0) bind$netlink(r2, &(0x7f0000000240)={0x10, 0x0, 0x3, 0x40000}, 0xc) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x7d, &(0x7f0000000100)={r4}, &(0x7f0000000140)=0x10) setsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000280)={r4, 0x4, 0x7, [0x7, 0x9, 0x8, 0x1, 0x76a6, 0x20, 0x401]}, 0x16) bind$netlink(r1, &(0x7f0000177ff4)={0x10, 0x0, 0x1}, 0xc) connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e24, @local}, 0x10) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r0, 0x0, 0xe, 0x0, &(0x7f00000000c0)="61df712bc884fed5722780b6c2a7", 0x0, 0x8000}, 0x28) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@setlink={0x30, 0x13, 0x10, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x100e0, 0x2100}, [@IFLA_EVENT={0x8, 0x2c, 0x7}, @IFLA_LINK={0x8, 0x5, r8}]}, 0x30}}, 0x0) ioctl$FS_IOC_RESVSP(r7, 0x40305828, &(0x7f0000000080)={0x0, 0x4, 0x6, 0x40}) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000008, 0x4004010, r6, 0x8000000) 08:39:31 executing program 5: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x10, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = socket$inet6(0xa, 0x1, 0x8010800000000084) r1 = socket$kcm(0x2, 0x3, 0x2) recvmsg(r1, &(0x7f0000007500)={&(0x7f0000006f80)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x80, 0x0, 0x0, 0xffffffffffffffff}, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmmsg$inet6(r0, &(0x7f00000000c0)=[{{0x0, 0x0, &(0x7f0000005000)=[{&(0x7f0000002cc0)="ea", 0x1}], 0x1}}], 0x1, 0x20000040) [ 277.893843][T18278] FAULT_INJECTION: forcing a failure. [ 277.893843][T18278] name failslab, interval 1, probability 0, space 0, times 0 [ 277.917822][T18281] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.0'. [ 277.941504][T18278] CPU: 1 PID: 18278 Comm: syz-executor.2 Not tainted 5.7.0-rc6-syzkaller #0 [ 277.950228][T18278] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 277.960279][T18278] Call Trace: [ 277.963778][T18278] dump_stack+0x1e9/0x30e [ 277.968723][T18278] should_fail+0x433/0x5b0 [ 277.973147][T18278] ? kcalloc+0x2b/0x50 [ 277.977218][T18278] should_failslab+0x5/0x20 [ 277.981726][T18278] __kmalloc+0x74/0x330 [ 277.985894][T18278] kcalloc+0x2b/0x50 [ 277.989790][T18278] ext4_find_extent+0x2cb/0xcf0 [ 277.994642][T18278] ? trace_ext4_ext_map_blocks_enter+0x29d/0x2e0 [ 278.001000][T18278] ext4_ext_map_blocks+0x13e/0x6db0 [ 278.006224][T18278] ? check_preemption_disabled+0xb0/0x240 [ 278.011953][T18278] ? lock_acquire+0x169/0x480 [ 278.016631][T18278] ? ext4_map_blocks+0x2ad/0x1b00 [ 278.022008][T18278] ? __down_read+0x152/0x360 [ 278.026603][T18278] ext4_map_blocks+0x43b/0x1b00 [ 278.031457][T18278] ? add_to_page_cache_lru+0x307/0x4d0 [ 278.036921][T18278] ext4_mpage_readpages+0x93a/0x1f30 [ 278.042208][T18278] ? rmqueue+0xdd/0x1bd0 [ 278.046466][T18278] ? kernel_poison_pages+0x10d/0x260 [ 278.051758][T18278] ? ext4_readpages+0x8b/0x110 [ 278.056524][T18278] ? ext4_journalled_set_page_dirty+0x100/0x100 [ 278.062762][T18278] read_pages+0xb0/0x4c0 [ 278.067013][T18278] __do_page_cache_readahead+0x43e/0x4f0 [ 278.072658][T18278] generic_file_buffered_read+0x3ea/0x2570 [ 278.078480][T18278] generic_file_splice_read+0x452/0x700 [ 278.084031][T18278] ? splice_shrink_spd+0xb0/0xb0 [ 278.088974][T18278] splice_direct_to_actor+0x3c1/0xb40 [ 278.094349][T18278] ? do_splice_direct+0x340/0x340 [ 278.097535][T18291] IPVS: ftp: loaded support on port[0] = 21 [ 278.099392][T18278] do_splice_direct+0x201/0x340 [ 278.099407][T18278] ? security_file_permission+0x50/0xc0 [ 278.099421][T18278] do_sendfile+0x809/0xfe0 [ 278.120119][T18278] __x64_sys_sendfile64+0x164/0x1a0 [ 278.125320][T18278] ? do_syscall_64+0x19/0x1b0 [ 278.130000][T18278] do_syscall_64+0xf3/0x1b0 [ 278.134508][T18278] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 278.140424][T18278] RIP: 0033:0x45ca29 [ 278.144319][T18278] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 278.164200][T18278] RSP: 002b:00007efeff606c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 278.172704][T18278] RAX: ffffffffffffffda RBX: 00000000004fc540 RCX: 000000000045ca29 [ 278.180662][T18278] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 08:39:32 executing program 1: r0 = socket(0x10, 0x803, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000005540)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000c80)=""/235, 0xeb}], 0x1}}], 0x1, 0x0, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendto(r0, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000b80)=@ethernet={0x0, @local}, 0x80, 0x0}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000ac0)=[{{&(0x7f0000000880)=@caif=@util, 0x80, &(0x7f0000000540)=[{&(0x7f0000000900)=""/128, 0x80}, {&(0x7f0000000980)=""/76, 0x4c}], 0x2}, 0x3f}], 0x1, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_SYS_GET(0xffffffffffffffff, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000a00)={0x0, 0x30}}, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x374, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x14b}, {&(0x7f0000000140)=""/85, 0x20a}, {&(0x7f0000000fc0)=""/4096, 0x773}, {&(0x7f0000000400)=""/106, 0x2ce}, {&(0x7f0000000740)=""/73, 0x3dd}, {&(0x7f0000000200)=""/77, 0x96}, {&(0x7f00000007c0)=""/154, 0x40d}, {&(0x7f0000000000)=""/22, 0xa}], 0x81, &(0x7f0000000600)=""/191, 0x41, 0x300}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) [ 278.188624][T18278] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 278.196572][T18278] R10: 000080001d00c0d0 R11: 0000000000000246 R12: 0000000000000005 [ 278.204534][T18278] R13: 00000000000008dc R14: 00000000004cba16 R15: 00007efeff6076d4 08:39:32 executing program 3: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x20000000003, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newlink={0x60, 0x10, 0x1, 0x0, 0x6000, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @ip6gretap={{0xe, 0x1, 'ip6gretap\x00'}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @ipv4={[], [], @loopback}}, @IFLA_GRE_REMOTE={0x14, 0x7, @remote}]}}}]}, 0x60}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00'}) 08:39:32 executing program 5: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x10, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = socket$inet6(0xa, 0x1, 0x8010800000000084) r1 = socket$kcm(0x2, 0x3, 0x2) recvmsg(r1, &(0x7f0000007500)={&(0x7f0000006f80)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x80, 0x0, 0x0, 0xffffffffffffffff}, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmmsg$inet6(r0, &(0x7f00000000c0)=[{{&(0x7f0000002c80)={0xa, 0x0, 0x0, @loopback}, 0x1c, 0x0}}], 0x1, 0x20000040) 08:39:32 executing program 4: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x20000000003, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00'}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newlink={0x60, 0x10, 0x1, 0x70bd25, 0x0, {0x12, 0x0, 0x0, r4, 0x50800}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @ip6gretap={{0xe, 0x1, 'ip6gretap\x00'}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @ipv4={[], [], @private=0xa010100}}, @IFLA_GRE_REMOTE={0x14, 0x7, @remote}]}}}]}, 0x60}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00'}) [ 278.272859][T18315] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.0'. 08:39:32 executing program 2 (fault-call:8 fault-nth:35): shmget(0x0, 0x4000, 0x780012c9, &(0x7f0000ffc000/0x4000)=nil) shmctl$IPC_RMID(0x0, 0x0) shmat(0x0, &(0x7f0000ffe000/0x1000)=nil, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x2, 0x1) r1 = open(&(0x7f0000000080)='./bus\x00', 0x430c2, 0x0) ftruncate(r1, 0x200004) sendfile(r0, r1, 0x0, 0x80001d00c0d0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) 08:39:32 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0x4) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) splice(r1, 0x0, 0xffffffffffffffff, 0x0, 0xffffff01, 0x0) ioctl$VHOST_SET_VRING_CALL(0xffffffffffffffff, 0x4008af21, &(0x7f0000000040)) ioctl$SOUND_MIXER_WRITE_VOLUME(0xffffffffffffffff, 0xc0044d1b, &(0x7f0000000000)=0x59) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, &(0x7f00000000c0)={0x0, 0x2, &(0x7f0000000080)=[{&(0x7f0000000100)="2e00000033000535a4abd32b8018007a0124fc60100002400c000200053582c137153e370900018001251d00d1bd", 0x2e}], 0x1}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140)='nl80211\x00') r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newlink={0x20, 0x10, 0x401}, 0x20}}, 0x0) 08:39:32 executing program 1: r0 = socket(0x10, 0x803, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000005540)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000c80)=""/235, 0xeb}], 0x1}}], 0x1, 0x0, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendto(r0, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000b80)=@ethernet={0x0, @local}, 0x80, 0x0}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000ac0)=[{{&(0x7f0000000880)=@caif=@util, 0x80, &(0x7f0000000540)=[{&(0x7f0000000900)=""/128, 0x80}, {&(0x7f0000000980)=""/76, 0x4c}], 0x2}, 0x3f}], 0x1, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_SYS_GET(0xffffffffffffffff, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000a00)={0x0, 0x30}}, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x374, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x14b}, {&(0x7f0000000140)=""/85, 0x20a}, {&(0x7f0000000fc0)=""/4096, 0x773}, {&(0x7f0000000400)=""/106, 0x2ce}, {&(0x7f0000000740)=""/73, 0x3dd}, {&(0x7f0000000200)=""/77, 0x96}, {&(0x7f00000007c0)=""/154, 0x40d}, {&(0x7f0000000000)=""/22, 0xa}], 0x81, &(0x7f0000000600)=""/191, 0x41, 0x500}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) [ 278.389275][T18326] IPVS: ftp: loaded support on port[0] = 21 [ 278.422520][T18331] FAULT_INJECTION: forcing a failure. [ 278.422520][T18331] name failslab, interval 1, probability 0, space 0, times 0 [ 278.435629][T18331] CPU: 0 PID: 18331 Comm: syz-executor.2 Not tainted 5.7.0-rc6-syzkaller #0 [ 278.441439][T18336] netlink: 'syz-executor.0': attribute type 2 has an invalid length. [ 278.444295][T18331] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 278.444299][T18331] Call Trace: [ 278.444316][T18331] dump_stack+0x1e9/0x30e [ 278.444328][T18331] should_fail+0x433/0x5b0 [ 278.444340][T18331] ? __es_insert_extent+0x7a4/0x1760 [ 278.444354][T18331] should_failslab+0x5/0x20 [ 278.484453][T18331] kmem_cache_alloc+0x53/0x2d0 [ 278.489223][T18331] __es_insert_extent+0x7a4/0x1760 [ 278.494341][T18331] ? lock_acquire+0x169/0x480 [ 278.499023][T18331] ? ext4_es_insert_extent+0x1c1/0x2c30 [ 278.504576][T18331] ? do_raw_write_lock+0xf1/0x440 [ 278.509789][T18331] ext4_es_insert_extent+0x22b/0x2c30 [ 278.515174][T18331] ? do_raw_read_unlock+0x3e/0xf0 [ 278.520237][T18331] ext4_ext_map_blocks+0x19a2/0x6db0 [ 278.525706][T18331] ? lock_acquire+0x169/0x480 [ 278.530389][T18331] ? ext4_map_blocks+0x2ad/0x1b00 [ 278.535417][T18331] ? __down_read+0x152/0x360 [ 278.540012][T18331] ext4_map_blocks+0x43b/0x1b00 [ 278.544904][T18331] ? add_to_page_cache_lru+0x307/0x4d0 [ 278.550381][T18331] ext4_mpage_readpages+0x93a/0x1f30 [ 278.555663][T18331] ? rmqueue+0xdd/0x1bd0 [ 278.559911][T18331] ? kernel_poison_pages+0x10d/0x260 [ 278.565209][T18331] ? ext4_readpages+0x8b/0x110 [ 278.569976][T18331] ? ext4_journalled_set_page_dirty+0x100/0x100 [ 278.576217][T18331] read_pages+0xb0/0x4c0 [ 278.580472][T18331] __do_page_cache_readahead+0x43e/0x4f0 [ 278.586112][T18331] generic_file_buffered_read+0x3ea/0x2570 [ 278.591957][T18331] generic_file_splice_read+0x452/0x700 [ 278.597511][T18331] ? splice_shrink_spd+0xb0/0xb0 [ 278.602455][T18331] splice_direct_to_actor+0x3c1/0xb40 [ 278.607840][T18331] ? do_splice_direct+0x340/0x340 [ 278.612876][T18331] do_splice_direct+0x201/0x340 [ 278.617731][T18331] ? security_file_permission+0x50/0xc0 [ 278.623274][T18331] do_sendfile+0x809/0xfe0 [ 278.628651][T18331] __x64_sys_sendfile64+0x164/0x1a0 [ 278.633847][T18331] ? do_syscall_64+0x19/0x1b0 [ 278.638523][T18331] do_syscall_64+0xf3/0x1b0 [ 278.643021][T18331] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 278.648904][T18331] RIP: 0033:0x45ca29 [ 278.652795][T18331] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 278.672416][T18331] RSP: 002b:00007efeff606c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 278.680829][T18331] RAX: ffffffffffffffda RBX: 00000000004fc540 RCX: 000000000045ca29 08:39:32 executing program 1: r0 = socket(0x10, 0x803, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000005540)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000c80)=""/235, 0xeb}], 0x1}}], 0x1, 0x0, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendto(r0, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000b80)=@ethernet={0x0, @local}, 0x80, 0x0}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000ac0)=[{{&(0x7f0000000880)=@caif=@util, 0x80, &(0x7f0000000540)=[{&(0x7f0000000900)=""/128, 0x80}, {&(0x7f0000000980)=""/76, 0x4c}], 0x2}, 0x3f}], 0x1, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_SYS_GET(0xffffffffffffffff, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000a00)={0x0, 0x30}}, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x374, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x14b}, {&(0x7f0000000140)=""/85, 0x20a}, {&(0x7f0000000fc0)=""/4096, 0x773}, {&(0x7f0000000400)=""/106, 0x2ce}, {&(0x7f0000000740)=""/73, 0x3dd}, {&(0x7f0000000200)=""/77, 0x96}, {&(0x7f00000007c0)=""/154, 0x40d}, {&(0x7f0000000000)=""/22, 0xa}], 0x81, &(0x7f0000000600)=""/191, 0x41, 0x600}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 08:39:32 executing program 1: r0 = socket(0x10, 0x803, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000005540)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000c80)=""/235, 0xeb}], 0x1}}], 0x1, 0x0, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendto(r0, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000b80)=@ethernet={0x0, @local}, 0x80, 0x0}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000ac0)=[{{&(0x7f0000000880)=@caif=@util, 0x80, &(0x7f0000000540)=[{&(0x7f0000000900)=""/128, 0x80}, {&(0x7f0000000980)=""/76, 0x4c}], 0x2}, 0x3f}], 0x1, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_SYS_GET(0xffffffffffffffff, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000a00)={0x0, 0x30}}, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x374, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x14b}, {&(0x7f0000000140)=""/85, 0x20a}, {&(0x7f0000000fc0)=""/4096, 0x773}, {&(0x7f0000000400)=""/106, 0x2ce}, {&(0x7f0000000740)=""/73, 0x3dd}, {&(0x7f0000000200)=""/77, 0x96}, {&(0x7f00000007c0)=""/154, 0x40d}, {&(0x7f0000000000)=""/22, 0xa}], 0x81, &(0x7f0000000600)=""/191, 0x41, 0x700}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 08:39:32 executing program 1: r0 = socket(0x10, 0x803, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000005540)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000c80)=""/235, 0xeb}], 0x1}}], 0x1, 0x0, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendto(r0, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000b80)=@ethernet={0x0, @local}, 0x80, 0x0}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000ac0)=[{{&(0x7f0000000880)=@caif=@util, 0x80, &(0x7f0000000540)=[{&(0x7f0000000900)=""/128, 0x80}, {&(0x7f0000000980)=""/76, 0x4c}], 0x2}, 0x3f}], 0x1, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_SYS_GET(0xffffffffffffffff, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000a00)={0x0, 0x30}}, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x374, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x14b}, {&(0x7f0000000140)=""/85, 0x20a}, {&(0x7f0000000fc0)=""/4096, 0x773}, {&(0x7f0000000400)=""/106, 0x2ce}, {&(0x7f0000000740)=""/73, 0x3dd}, {&(0x7f0000000200)=""/77, 0x96}, {&(0x7f00000007c0)=""/154, 0x40d}, {&(0x7f0000000000)=""/22, 0xa}], 0x81, &(0x7f0000000600)=""/191, 0x41, 0x900}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 08:39:32 executing program 3: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x20000000003, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newlink={0x60, 0x10, 0x1, 0x0, 0x6558, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @ip6gretap={{0xe, 0x1, 'ip6gretap\x00'}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @ipv4={[], [], @loopback}}, @IFLA_GRE_REMOTE={0x14, 0x7, @remote}]}}}]}, 0x60}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00'}) [ 278.688802][T18331] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 278.696770][T18331] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 278.704751][T18331] R10: 000080001d00c0d0 R11: 0000000000000246 R12: 0000000000000005 [ 278.712722][T18331] R13: 00000000000008dc R14: 00000000004cba16 R15: 00007efeff6076d4 08:39:32 executing program 1: r0 = socket(0x10, 0x803, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000005540)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000c80)=""/235, 0xeb}], 0x1}}], 0x1, 0x0, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendto(r0, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000b80)=@ethernet={0x0, @local}, 0x80, 0x0}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000ac0)=[{{&(0x7f0000000880)=@caif=@util, 0x80, &(0x7f0000000540)=[{&(0x7f0000000900)=""/128, 0x80}, {&(0x7f0000000980)=""/76, 0x4c}], 0x2}, 0x3f}], 0x1, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_SYS_GET(0xffffffffffffffff, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000a00)={0x0, 0x30}}, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x374, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x14b}, {&(0x7f0000000140)=""/85, 0x20a}, {&(0x7f0000000fc0)=""/4096, 0x773}, {&(0x7f0000000400)=""/106, 0x2ce}, {&(0x7f0000000740)=""/73, 0x3dd}, {&(0x7f0000000200)=""/77, 0x96}, {&(0x7f00000007c0)=""/154, 0x40d}, {&(0x7f0000000000)=""/22, 0xa}], 0x81, &(0x7f0000000600)=""/191, 0x41, 0xa00}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 08:39:32 executing program 4: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x20000000003, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00'}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newlink={0x60, 0x10, 0x1, 0x70bd25, 0x0, {0x13, 0x0, 0x0, r4, 0x50800}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @ip6gretap={{0xe, 0x1, 'ip6gretap\x00'}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @ipv4={[], [], @private=0xa010100}}, @IFLA_GRE_REMOTE={0x14, 0x7, @remote}]}}}]}, 0x60}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00'}) [ 278.838629][T18384] netlink: 'syz-executor.0': attribute type 2 has an invalid length. 08:39:32 executing program 4: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x20000000003, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00'}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newlink={0x60, 0x10, 0x1, 0x70bd25, 0x0, {0x14, 0x0, 0x0, r4, 0x50800}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @ip6gretap={{0xe, 0x1, 'ip6gretap\x00'}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @ipv4={[], [], @private=0xa010100}}, @IFLA_GRE_REMOTE={0x14, 0x7, @remote}]}}}]}, 0x60}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00'}) 08:39:33 executing program 5: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x10, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = socket$inet6(0xa, 0x1, 0x8010800000000084) r1 = socket$kcm(0x2, 0x3, 0x2) recvmsg(r1, &(0x7f0000007500)={&(0x7f0000006f80)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x80, 0x0, 0x0, 0xffffffffffffffff}, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmmsg$inet6(r0, &(0x7f00000000c0)=[{{&(0x7f0000002c80)={0xa, 0x0, 0x0, @loopback}, 0x1c, 0x0}}], 0x1, 0x20000040) 08:39:33 executing program 1: r0 = socket(0x10, 0x803, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000005540)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000c80)=""/235, 0xeb}], 0x1}}], 0x1, 0x0, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendto(r0, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000b80)=@ethernet={0x0, @local}, 0x80, 0x0}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000ac0)=[{{&(0x7f0000000880)=@caif=@util, 0x80, &(0x7f0000000540)=[{&(0x7f0000000900)=""/128, 0x80}, {&(0x7f0000000980)=""/76, 0x4c}], 0x2}, 0x3f}], 0x1, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_SYS_GET(0xffffffffffffffff, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000a00)={0x0, 0x30}}, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x374, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x14b}, {&(0x7f0000000140)=""/85, 0x20a}, {&(0x7f0000000fc0)=""/4096, 0x773}, {&(0x7f0000000400)=""/106, 0x2ce}, {&(0x7f0000000740)=""/73, 0x3dd}, {&(0x7f0000000200)=""/77, 0x96}, {&(0x7f00000007c0)=""/154, 0x40d}, {&(0x7f0000000000)=""/22, 0xa}], 0x81, &(0x7f0000000600)=""/191, 0x41, 0xb00}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 08:39:33 executing program 3: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x20000000003, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newlink={0x60, 0x10, 0x1, 0x0, 0x8100, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @ip6gretap={{0xe, 0x1, 'ip6gretap\x00'}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @ipv4={[], [], @loopback}}, @IFLA_GRE_REMOTE={0x14, 0x7, @remote}]}}}]}, 0x60}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00'}) 08:39:33 executing program 2 (fault-call:8 fault-nth:36): shmget(0x0, 0x4000, 0x780012c9, &(0x7f0000ffc000/0x4000)=nil) shmctl$IPC_RMID(0x0, 0x0) shmat(0x0, &(0x7f0000ffe000/0x1000)=nil, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x2, 0x1) r1 = open(&(0x7f0000000080)='./bus\x00', 0x430c2, 0x0) ftruncate(r1, 0x200004) sendfile(r0, r1, 0x0, 0x80001d00c0d0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) 08:39:33 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0x4) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) splice(r1, 0x0, 0xffffffffffffffff, 0x0, 0xffffff01, 0x0) ioctl$VHOST_SET_VRING_CALL(0xffffffffffffffff, 0x4008af21, &(0x7f0000000040)) ioctl$SOUND_MIXER_WRITE_VOLUME(0xffffffffffffffff, 0xc0044d1b, &(0x7f0000000000)=0x59) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, &(0x7f00000000c0)={0x0, 0x2, &(0x7f0000000080)=[{&(0x7f0000000100)="2e00000033000535a4abd32b8018007a0124fc60100002400c000200053582c137153e370900018001251d00d1bd", 0x2e}], 0x1}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140)='nl80211\x00') r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newlink={0x20, 0x10, 0x401}, 0x20}}, 0x0) 08:39:33 executing program 4: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x20000000003, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00'}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newlink={0x60, 0x10, 0x1, 0x70bd25, 0x0, {0x60, 0x0, 0x0, r4, 0x50800}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @ip6gretap={{0xe, 0x1, 'ip6gretap\x00'}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @ipv4={[], [], @private=0xa010100}}, @IFLA_GRE_REMOTE={0x14, 0x7, @remote}]}}}]}, 0x60}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00'}) [ 279.210452][T18408] netlink: 'syz-executor.0': attribute type 2 has an invalid length. [ 279.222881][T18407] FAULT_INJECTION: forcing a failure. [ 279.222881][T18407] name failslab, interval 1, probability 0, space 0, times 0 [ 279.235493][T18407] CPU: 0 PID: 18407 Comm: syz-executor.2 Not tainted 5.7.0-rc6-syzkaller #0 [ 279.244171][T18407] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 279.254310][T18407] Call Trace: [ 279.257634][T18407] dump_stack+0x1e9/0x30e [ 279.261965][T18407] should_fail+0x433/0x5b0 [ 279.266383][T18407] ? xas_create+0x6ba/0x18e0 [ 279.270975][T18407] should_failslab+0x5/0x20 [ 279.275475][T18407] kmem_cache_alloc+0x53/0x2d0 [ 279.280259][T18407] xas_create+0x6ba/0x18e0 [ 279.284700][T18407] xas_store+0x89/0x16d0 [ 279.288950][T18407] ? xas_load+0x3e4/0x410 [ 279.293321][T18407] __add_to_page_cache_locked+0x5b3/0xc70 [ 279.299048][T18407] ? workingset_activation+0x340/0x340 [ 279.304518][T18407] add_to_page_cache_lru+0x17f/0x4d0 08:39:33 executing program 1: r0 = socket(0x10, 0x803, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000005540)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000c80)=""/235, 0xeb}], 0x1}}], 0x1, 0x0, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendto(r0, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000b80)=@ethernet={0x0, @local}, 0x80, 0x0}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000ac0)=[{{&(0x7f0000000880)=@caif=@util, 0x80, &(0x7f0000000540)=[{&(0x7f0000000900)=""/128, 0x80}, {&(0x7f0000000980)=""/76, 0x4c}], 0x2}, 0x3f}], 0x1, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_SYS_GET(0xffffffffffffffff, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000a00)={0x0, 0x30}}, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x374, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x14b}, {&(0x7f0000000140)=""/85, 0x20a}, {&(0x7f0000000fc0)=""/4096, 0x773}, {&(0x7f0000000400)=""/106, 0x2ce}, {&(0x7f0000000740)=""/73, 0x3dd}, {&(0x7f0000000200)=""/77, 0x96}, {&(0x7f00000007c0)=""/154, 0x40d}, {&(0x7f0000000000)=""/22, 0xa}], 0x81, &(0x7f0000000600)=""/191, 0x41, 0xc00}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 08:39:33 executing program 1: r0 = socket(0x10, 0x803, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000005540)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000c80)=""/235, 0xeb}], 0x1}}], 0x1, 0x0, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendto(r0, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000b80)=@ethernet={0x0, @local}, 0x80, 0x0}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000ac0)=[{{&(0x7f0000000880)=@caif=@util, 0x80, &(0x7f0000000540)=[{&(0x7f0000000900)=""/128, 0x80}, {&(0x7f0000000980)=""/76, 0x4c}], 0x2}, 0x3f}], 0x1, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_SYS_GET(0xffffffffffffffff, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000a00)={0x0, 0x30}}, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x374, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x14b}, {&(0x7f0000000140)=""/85, 0x20a}, {&(0x7f0000000fc0)=""/4096, 0x773}, {&(0x7f0000000400)=""/106, 0x2ce}, {&(0x7f0000000740)=""/73, 0x3dd}, {&(0x7f0000000200)=""/77, 0x96}, {&(0x7f00000007c0)=""/154, 0x40d}, {&(0x7f0000000000)=""/22, 0xa}], 0x81, &(0x7f0000000600)=""/191, 0x41, 0xd00}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 08:39:33 executing program 1: r0 = socket(0x10, 0x803, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000005540)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000c80)=""/235, 0xeb}], 0x1}}], 0x1, 0x0, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendto(r0, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000b80)=@ethernet={0x0, @local}, 0x80, 0x0}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000ac0)=[{{&(0x7f0000000880)=@caif=@util, 0x80, &(0x7f0000000540)=[{&(0x7f0000000900)=""/128, 0x80}, {&(0x7f0000000980)=""/76, 0x4c}], 0x2}, 0x3f}], 0x1, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_SYS_GET(0xffffffffffffffff, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000a00)={0x0, 0x30}}, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x374, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x14b}, {&(0x7f0000000140)=""/85, 0x20a}, {&(0x7f0000000fc0)=""/4096, 0x773}, {&(0x7f0000000400)=""/106, 0x2ce}, {&(0x7f0000000740)=""/73, 0x3dd}, {&(0x7f0000000200)=""/77, 0x96}, {&(0x7f00000007c0)=""/154, 0x40d}, {&(0x7f0000000000)=""/22, 0xa}], 0x81, &(0x7f0000000600)=""/191, 0x41, 0xe00}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) [ 279.309807][T18407] ext4_mpage_readpages+0x418/0x1f30 [ 279.315093][T18407] ? rmqueue+0xdd/0x1bd0 [ 279.319346][T18407] ? kernel_poison_pages+0x10d/0x260 [ 279.324642][T18407] ? ext4_readpages+0x8b/0x110 [ 279.329405][T18407] ? ext4_journalled_set_page_dirty+0x100/0x100 [ 279.335643][T18407] read_pages+0xb0/0x4c0 [ 279.339891][T18407] __do_page_cache_readahead+0x43e/0x4f0 [ 279.345528][T18407] generic_file_buffered_read+0x3ea/0x2570 [ 279.351346][T18407] generic_file_splice_read+0x452/0x700 [ 279.356908][T18407] ? splice_shrink_spd+0xb0/0xb0 [ 279.361847][T18407] splice_direct_to_actor+0x3c1/0xb40 [ 279.367226][T18407] ? do_splice_direct+0x340/0x340 [ 279.372252][T18407] do_splice_direct+0x201/0x340 [ 279.375932][T18410] IPVS: ftp: loaded support on port[0] = 21 [ 279.377128][T18407] ? security_file_permission+0x50/0xc0 [ 279.377144][T18407] do_sendfile+0x809/0xfe0 [ 279.392967][T18407] __x64_sys_sendfile64+0x164/0x1a0 [ 279.398166][T18407] ? do_syscall_64+0x19/0x1b0 [ 279.403451][T18407] do_syscall_64+0xf3/0x1b0 [ 279.407952][T18407] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 279.413839][T18407] RIP: 0033:0x45ca29 [ 279.417735][T18407] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 279.437367][T18407] RSP: 002b:00007efeff606c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 279.445772][T18407] RAX: ffffffffffffffda RBX: 00000000004fc540 RCX: 000000000045ca29 [ 279.453741][T18407] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 08:39:33 executing program 1: r0 = socket(0x10, 0x803, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000005540)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000c80)=""/235, 0xeb}], 0x1}}], 0x1, 0x0, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendto(r0, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000b80)=@ethernet={0x0, @local}, 0x80, 0x0}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000ac0)=[{{&(0x7f0000000880)=@caif=@util, 0x80, &(0x7f0000000540)=[{&(0x7f0000000900)=""/128, 0x80}, {&(0x7f0000000980)=""/76, 0x4c}], 0x2}, 0x3f}], 0x1, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_SYS_GET(0xffffffffffffffff, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000a00)={0x0, 0x30}}, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x374, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x14b}, {&(0x7f0000000140)=""/85, 0x20a}, {&(0x7f0000000fc0)=""/4096, 0x773}, {&(0x7f0000000400)=""/106, 0x2ce}, {&(0x7f0000000740)=""/73, 0x3dd}, {&(0x7f0000000200)=""/77, 0x96}, {&(0x7f00000007c0)=""/154, 0x40d}, {&(0x7f0000000000)=""/22, 0xa}], 0x81, &(0x7f0000000600)=""/191, 0x41, 0xf00}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) [ 279.461719][T18407] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 279.469730][T18407] R10: 000080001d00c0d0 R11: 0000000000000246 R12: 0000000000000005 [ 279.477707][T18407] R13: 00000000000008dc R14: 00000000004cba16 R15: 00007efeff6076d4 08:39:33 executing program 4: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x20000000003, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00'}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newlink={0x60, 0x10, 0x1, 0x70bd25, 0x0, {0xfc, 0x0, 0x0, r4, 0x50800}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @ip6gretap={{0xe, 0x1, 'ip6gretap\x00'}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @ipv4={[], [], @private=0xa010100}}, @IFLA_GRE_REMOTE={0x14, 0x7, @remote}]}}}]}, 0x60}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00'}) 08:39:33 executing program 1: r0 = socket(0x10, 0x803, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000005540)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000c80)=""/235, 0xeb}], 0x1}}], 0x1, 0x0, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendto(r0, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000b80)=@ethernet={0x0, @local}, 0x80, 0x0}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000ac0)=[{{&(0x7f0000000880)=@caif=@util, 0x80, &(0x7f0000000540)=[{&(0x7f0000000900)=""/128, 0x80}, {&(0x7f0000000980)=""/76, 0x4c}], 0x2}, 0x3f}], 0x1, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_SYS_GET(0xffffffffffffffff, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000a00)={0x0, 0x30}}, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x374, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x14b}, {&(0x7f0000000140)=""/85, 0x20a}, {&(0x7f0000000fc0)=""/4096, 0x773}, {&(0x7f0000000400)=""/106, 0x2ce}, {&(0x7f0000000740)=""/73, 0x3dd}, {&(0x7f0000000200)=""/77, 0x96}, {&(0x7f00000007c0)=""/154, 0x40d}, {&(0x7f0000000000)=""/22, 0xa}], 0x81, &(0x7f0000000600)=""/191, 0x41, 0x1014}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 08:39:33 executing program 5: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x10, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = socket$inet6(0xa, 0x1, 0x8010800000000084) r1 = socket$kcm(0x2, 0x3, 0x2) recvmsg(r1, &(0x7f0000007500)={&(0x7f0000006f80)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x80, 0x0, 0x0, 0xffffffffffffffff}, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmmsg$inet6(r0, &(0x7f00000000c0)=[{{&(0x7f0000002c80)={0xa, 0x0, 0x0, @loopback}, 0x1c, 0x0}}], 0x1, 0x20000040) 08:39:33 executing program 3: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x20000000003, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newlink={0x60, 0x10, 0x1, 0x0, 0x8847, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @ip6gretap={{0xe, 0x1, 'ip6gretap\x00'}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @ipv4={[], [], @loopback}}, @IFLA_GRE_REMOTE={0x14, 0x7, @remote}]}}}]}, 0x60}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00'}) 08:39:33 executing program 2 (fault-call:8 fault-nth:37): shmget(0x0, 0x4000, 0x780012c9, &(0x7f0000ffc000/0x4000)=nil) shmctl$IPC_RMID(0x0, 0x0) shmat(0x0, &(0x7f0000ffe000/0x1000)=nil, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x2, 0x1) r1 = open(&(0x7f0000000080)='./bus\x00', 0x430c2, 0x0) ftruncate(r1, 0x200004) sendfile(r0, r1, 0x0, 0x80001d00c0d0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) 08:39:33 executing program 1: r0 = socket(0x10, 0x803, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000005540)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000c80)=""/235, 0xeb}], 0x1}}], 0x1, 0x0, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendto(r0, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000b80)=@ethernet={0x0, @local}, 0x80, 0x0}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000ac0)=[{{&(0x7f0000000880)=@caif=@util, 0x80, &(0x7f0000000540)=[{&(0x7f0000000900)=""/128, 0x80}, {&(0x7f0000000980)=""/76, 0x4c}], 0x2}, 0x3f}], 0x1, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_SYS_GET(0xffffffffffffffff, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000a00)={0x0, 0x30}}, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x374, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x14b}, {&(0x7f0000000140)=""/85, 0x20a}, {&(0x7f0000000fc0)=""/4096, 0x773}, {&(0x7f0000000400)=""/106, 0x2ce}, {&(0x7f0000000740)=""/73, 0x3dd}, {&(0x7f0000000200)=""/77, 0x96}, {&(0x7f00000007c0)=""/154, 0x40d}, {&(0x7f0000000000)=""/22, 0xa}], 0x81, &(0x7f0000000600)=""/191, 0x41, 0x1100}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 08:39:33 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@newtaction={0x1820, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x44, 0x1, [@m_tunnel_key={0x40, 0x1, 0x0, 0x0, {{0xf, 0x1, 'tunnel_key\x00'}, {0x28, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0xb, @broadcast=0x4000000}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{}, 0x1}}]}, {0x4}}}]}, {0x9c, 0x1, [@m_bpf={0x98, 0x1a, 0x0, 0x0, {{0x8, 0x1, 'bpf\x00'}, {0x60, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0xfffffffc, 0x1ff, 0x8, 0xffffff7f, 0xfffffffb}}, @TCA_ACT_BPF_OPS={0x44, 0x4, [{0x0, 0x3f, 0x75}, {0x9, 0xec, 0x0, 0x2}, {0x1, 0x81, 0x9, 0x9}, {0x4e, 0x2, 0x1f, 0x4e6}, {0x6, 0x0, 0xf8, 0x6}, {0xffff, 0x27, 0x0, 0xbc}, {0x3, 0xa6, 0x7f, 0x1f}, {0x7fff, 0x20, 0x3f, 0x7}]}]}, {0x2b, 0x6, "f8f7e41142387d75ebc75d08dc8a84dece9fa235f846179f0edb4d79c84bfcc84c098035b338b2"}}}]}, {0x172c, 0x1, [@m_skbedit={0x64, 0x2, 0x0, 0x0, {{0xc, 0x1, 'skbedit\x00'}, {0x3c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PTYPE={0x6}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0xd, 0xe}}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x5663a8f34ec80fb0}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x5}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x7fffffff, 0x10001, 0x0, 0x0, 0x4}}]}, {0x15, 0x6, "ccf8a3b48e0f6a7fdeb2fa17300c932ded"}}}, @m_ipt={0x114, 0x5, 0x0, 0x0, {{0x8, 0x1, 'ipt\x00'}, {0x48, 0x2, 0x0, 0x1, [@TCA_IPT_INDEX={0x8, 0x3, 0x203}, @TCA_IPT_INDEX={0x8, 0x3, 0x3cc6}, @TCA_IPT_HOOK={0x8, 0x2, 0x1}, @TCA_IPT_TARG={0x2a, 0x6, {0x7, 'filter\x00', 0x20, 0xf}}]}, {0xbd, 0x6, "67d4dd93f0c04f110de837dd92af9f1f3c11c260fab1b2d9261973b55862f83ea54487405469a9825a650c5a993475c93467a934abb893ab7b6a19783de9a745aabcf95418de30b9584bb1f4c04af25b33f4d4b4053d28448146832722b22860cbd85338389a9d872beda4977e31ea930ed873906374ad89aeba69a260a52bdcfb6eadee9466a0672383ef65776308c796e2a9c5966a6cb33bf02fae0e49f850dcc0914f5f3f5a7debdaf40c8f3878bdb0368ff17192192bc6"}}}, @m_bpf={0x98, 0x6, 0x0, 0x0, {{0x8, 0x1, 'bpf\x00'}, {0x3c, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0xb627, 0x1, 0x8, 0x6, 0x77cc}}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x5, 0x1, 0x8, 0xe57, 0xd550}}, @TCA_ACT_BPF_OPS_LEN={0x6}]}, {0x4e, 0x6, "682db899da420ddb74861724d44c65488d6cd3edd7c43d8c01351a1ba54c77c1d04501ac9de63ac60b234f8356d4220da3c87c521b32830063053442e90481021098257fc712f449dcf9"}}}, @m_pedit={0xee4, 0xe, 0x0, 0x0, {{0xa, 0x1, 'pedit\x00'}, {0xe6c, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe68, 0x4, {{{0x3, 0x8001, 0x4, 0x8, 0x20}, 0xd7, 0x81, [{0x0, 0x4, 0x9f, 0x3, 0x0, 0x6}, {0x4, 0x1, 0x2, 0xfffffff7, 0x3f, 0x9}, {0x7ff, 0x7, 0xfffffe00, 0x101, 0x401, 0x4}]}, [{0x9, 0x0, 0x5, 0x3, 0x100, 0x1}, {0x2, 0x1, 0x0, 0x10000, 0x0, 0xf5}, {0x7ff, 0x6, 0x3, 0xdc, 0xa3ee, 0x80000000}, {0x12, 0x3, 0x5c, 0x1800, 0x6}, {0x0, 0x1, 0x100, 0x3, 0x5, 0x100}, {0x6, 0x101, 0xb6, 0x8, 0x7, 0x6}, {0xb19f, 0x7ff, 0x7, 0xfff, 0x3, 0x5}, {0x7, 0xfffffffc, 0x14000, 0x94, 0x8, 0x6}, {0x8, 0xffffffff, 0x4, 0x0, 0x8, 0xa}, {0x23, 0x9, 0x708, 0x6, 0x1, 0x2}, {0x4, 0x0, 0x5, 0xe4, 0x8de, 0x1}, {0x5, 0x4, 0x7, 0x8, 0x3ff}, {0x7, 0xcb2, 0x81, 0x9, 0x8, 0x2}, {0x9, 0x0, 0x8, 0x6, 0x3, 0x3f}, {0x10000, 0x0, 0x80, 0x7fffffff, 0x7, 0x8001}, {0x1, 0x7, 0x2, 0x4, 0xffffffff, 0x2}, {0xe9, 0x1f, 0x100, 0x8, 0x3, 0x72}, {0x9, 0xbb70, 0x8, 0x1, 0x4, 0x7}, {0xb785, 0x9, 0xff, 0x29ac, 0x0, 0x80000000}, {0x1, 0x0, 0x6, 0x7fffffff, 0x80000001, 0x10001}, {0x9977, 0xffff, 0x1, 0x80, 0x8, 0x6}, {0x0, 0x200, 0x2, 0x80000000, 0x9, 0x3ff}, {0x2, 0x8, 0x8, 0x4f, 0xd6ef, 0x3f}, {0x1, 0x7, 0x8, 0x9, 0x100, 0x81}, {0xfffffff7, 0x2, 0x3, 0x2, 0xfffffff8, 0x6}, {0x1, 0xffffff81, 0x37, 0x9, 0x800, 0xff}, {0x9, 0x9, 0xd0, 0x1, 0x4, 0x7}, {0x8001, 0x7fffffff, 0x2, 0x1, 0x401, 0x101}, {0x30c0, 0x0, 0x7ff, 0x3, 0x3ef, 0x27c}, {0x40, 0x6, 0xda4, 0x0, 0xa53, 0x1f}, {0xff, 0x3, 0x9, 0xf357, 0x0, 0x5}, {0x81, 0x1, 0x1f, 0x0, 0x33c, 0x8}, {0x3, 0x400, 0x368, 0x3, 0xf64f, 0x4}, {0x10000, 0x2, 0x7, 0x80, 0x6, 0x4000000}, {0x3f, 0x1ff, 0x2, 0x5, 0x2a1, 0x1}, {0x3, 0x1, 0x8, 0x3ff, 0x0, 0xffffffff}, {0x0, 0x401, 0x8001, 0x1, 0x6, 0x6}, {0x5, 0x6, 0x4, 0x89, 0x8, 0xb4}, {0x0, 0x5, 0x20, 0x9, 0x1, 0x7}, {0x4, 0xfffffff8, 0xcf4, 0xce, 0x7, 0x3f}, {0x1000, 0x5, 0x1fffe, 0x1, 0xcbbe, 0x9}, {0xffffff9a, 0x0, 0x3, 0x3ff, 0x1, 0x2}, {0x6, 0x8, 0x5, 0x4, 0x200000, 0xfffffeff}, {0x10000, 0x0, 0x7, 0x3, 0x6, 0xfffffff9}, {0x7, 0x7, 0xfffffbff, 0x8, 0x6, 0x9}, {0x0, 0x7fff, 0x1, 0x75, 0xe0000000, 0x2a}, {0x8, 0x1ff, 0x2, 0x7, 0x1a, 0xffff}, {0x8, 0x2, 0x596c, 0xfffffffb, 0xede6}, {0x6, 0x5, 0xffff, 0x4, 0x0, 0x5}, {0x2, 0x5e8b, 0x7f, 0x8, 0x8, 0x10000}, {0x8c1, 0x2, 0x3f, 0x585d, 0x21b8, 0x1}, {0x7, 0x3d1, 0x200, 0x3, 0x2, 0x100}, {0xc0f3, 0x3, 0x6, 0x6, 0x6, 0x5}, {0x6fee18b1, 0x1a5, 0x5, 0xfffff0c0, 0x6, 0x1}, {0x200, 0x8, 0xfff, 0x3, 0x6}, {0xfffffffa, 0xe8a, 0x3, 0x80000000, 0xfffffffd}, {0x3f, 0x10001, 0x10001, 0xffffffff, 0xffff3dff, 0x2}, {0x4, 0x20000, 0x1, 0x2, 0xf4, 0x80000000}, {0x4, 0x1, 0x7, 0x1, 0x91, 0x80000000}, {0x8, 0x7, 0x3a4, 0x7, 0x3, 0x3}, {0x4, 0x3, 0x3, 0xaf9a, 0x4}, {0x8, 0x1, 0x1, 0x3, 0x20, 0x6}, {0xf604, 0x8, 0xfffff801, 0x7, 0x1b200, 0x7fff}, {0x6, 0xfbf95fd, 0x3, 0x3ff, 0x9, 0x4}, {0x5, 0xffffffc0, 0xffffffff, 0x5, 0x1, 0x54af02e8}, {0xfff, 0x3, 0x5, 0x1, 0x73b, 0x8000}, {0x9, 0x5, 0x81, 0x800000, 0x7fffffff, 0x8}, {0x2, 0x100, 0x10001, 0x20, 0xd7, 0xffff}, {0x2, 0x800, 0x4, 0xfffeffff, 0x4, 0x6}, {0x7, 0x0, 0xfffffff8, 0xfff, 0x8, 0x7fff}, {0x10001, 0x2, 0xfffffff9, 0x8001, 0x0, 0x3ff}, {0x800, 0x9, 0x0, 0x7fff, 0x101}, {0x7, 0x2, 0x7, 0x3ff, 0x52, 0x9}, {0x7ff, 0x8, 0x5, 0x1, 0x400, 0x7}, {0x1, 0x4, 0x40, 0x4, 0xff, 0x3f}, {0xfffff476, 0x6, 0x8000, 0x1, 0x5, 0x8}, {0x4, 0x7, 0x0, 0x5, 0xffffffff, 0x9}, {0x6, 0x1, 0x8, 0x3, 0x4, 0x8}, {0xe56, 0x100, 0x9, 0x7f, 0x8, 0x3}, {0xc93, 0x1, 0x81, 0x6, 0x8, 0x200}, {0x6, 0x400, 0x7f, 0x8001, 0x4, 0x6}, {0x12, 0x7ff, 0x2, 0xcf, 0x4, 0xaa4}, {0xfffffff7, 0x3ff, 0x3, 0xf3000, 0x6, 0x2}, {0x5, 0x7, 0x6, 0x7, 0x5, 0xff}, {0x80000000, 0x3, 0x2, 0xb8f, 0x0, 0x2}, {0x10000, 0x1, 0x5, 0x2, 0x7fffffff, 0x401}, {0x101, 0x400, 0xfffffffc, 0x7f, 0x6, 0x40}, {0x80, 0x9, 0x5, 0x4, 0x5, 0x8}, {0x4, 0x1, 0x0, 0x3, 0x800, 0x5}, {0x1, 0x81, 0x2, 0x1, 0x31, 0x156}, {0x40, 0xffffffff, 0x800, 0x7, 0x1, 0x9404}, {0x40, 0x8000, 0xf6, 0x3, 0x5, 0x3ff}, {0x1, 0x8, 0x0, 0x7, 0xffff, 0x8000}, {0x1, 0x7, 0x81, 0xbfec, 0x5, 0x9}, {0xc3, 0xbd, 0x0, 0x179397f4, 0x3, 0x4}, {0x7, 0xb25, 0x8, 0x1, 0x1, 0x800}, {0x2, 0x8, 0x19, 0x0, 0x800, 0x4}, {0x101, 0x401, 0x6, 0x0, 0x101, 0x2}, {0x9, 0x7, 0x3, 0x3, 0xb3, 0xcb1b}, {0x6, 0x3, 0x5, 0x7f, 0x7, 0x80000001}, {0x3, 0x1, 0x8, 0x9e86, 0x4}, {0x7055000, 0x6, 0x1ff, 0x2, 0x1f, 0xffff}, {0x6, 0x6, 0x9, 0x80, 0x2, 0x10000}, {0xfff, 0x8, 0x6, 0x0, 0x800, 0x1ff}, {0x81, 0xde, 0x0, 0x9, 0x8000, 0x4}, {0x2, 0x6, 0xf1a2, 0x5, 0x3, 0x6}, {0xec1, 0x2, 0x2, 0x7, 0x0, 0x143}, {0x2, 0x4, 0x5, 0x9, 0x9be3, 0x9}, {0x7f, 0x10001, 0x6, 0xfc5, 0x7, 0x2}, {0x1, 0xfffffffa, 0x80, 0x9, 0xcf}, {0xfffffffc, 0x10000, 0x1ff, 0x9, 0x5, 0x4f}, {0x8001, 0x81, 0x970, 0x6, 0x3, 0x562}, {0x3f, 0x32, 0x80000000, 0x4, 0x1ff, 0x66b}, {0x3ff, 0x2, 0x8, 0x5b5, 0xffffff00, 0x9}, {0x1000, 0x5, 0x6, 0x6, 0xffff8001, 0x3}, {0x800, 0x1, 0x9, 0x401, 0x6, 0xfff}, {0x80000001, 0x7, 0x10001, 0x8, 0x0, 0xffff}, {0x7, 0x0, 0x4, 0x7, 0x0, 0x1000}, {0x5, 0x1, 0x6, 0x8, 0x9}, {0x7f, 0xf904, 0x80000001, 0x401, 0x5}, {0x8, 0xffffffff, 0x1, 0x8, 0x3}, {0xfffffffc, 0x6, 0x7, 0x0, 0x8, 0x8}, {0x9, 0x7, 0xe05, 0xfffffffb, 0x2, 0x8}, {0xad, 0x9, 0x4, 0x3ff, 0x9}, {0x0, 0xfffffff7, 0x9, 0x9, 0x1, 0x100}, {0x7ff, 0x5, 0x16, 0x6, 0x3, 0x7}, {0x7, 0x7, 0x4, 0x7, 0x0, 0x9}, {0x0, 0x0, 0x0, 0xffffffff, 0x3, 0x9}], [{0x2, 0x1}, {0x5, 0x1}, {0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x1}, {0x4, 0x1}, {0x3, 0x1}, {}, {0x1, 0x1}, {0x4}, {0x5, 0x1}, {}, {0x2, 0x1}, {0x2, 0x1}, {0x5}, {}, {0x1}, {0x3, 0x1}, {0x2}, {0x2}, {0x3}, {0x4}, {0x4, 0x1}, {}, {}, {0x4, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x2}, {0x4, 0x1}, {0x5}, {0x2}, {0x1, 0x1}, {0x5}, {0x4}, {0x1, 0x1}, {0x5}, {0x2}, {0x4, 0x1}, {0x3}, {0x4, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x5}, {0x0, 0x1}, {0x3, 0x1}, {0x4}, {0x2, 0x1}, {0x1, 0x1}, {0x2}, {0x3, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x4}, {0x3}, {0x5}, {}, {0x4}, {0x4}, {0x3}, {0x2, 0x1}, {}, {0x322e23f3b2cfc8f}, {0x2}, {0x3, 0x1}, {0x4}, {0x0, 0x1}, {0x5}, {0x0, 0x1}, {0x4, 0x1}, {0x2}, {0x4}, {0x0, 0x1}, {0x2, 0x1}, {0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x6}, {0x3}, {}, {0x5, 0x1}, {0x2}, {0x0, 0x1}, {0x2, 0x1}, {0x4}, {0x3, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x2}, {0x1}, {0xc36eda7ce4e9223b}, {0x2}, {0x0, 0x1}, {0x1}, {0x3}, {0x4}, {0x1, 0x1}, {0x2, 0x1}, {0x2, 0x3}, {0x3}, {0x1, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x2}, {0x4, 0x1}, {0x4, 0x1}, {0x2}, {0x2, 0x1}, {0x1, 0x1}, {0x6}, {0x5}, {0x4, 0x1}, {0x3}, {0x3, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x3}], 0x1}}]}, {0x67, 0x6, "c59490e1efd1ed4ae41bdd4952315e4ea2ab705553cf42dd50252cd3333a4c334b18f3bebae877381a4b4f289fa1c0d3b769dc8e4be2c47c6463f1f83f58af3f8f45a6f7a0b7d9206d3377076b8c8d4e9df3811b83b0b552b3a2108ee2ce55ede7143c"}}}, @m_nat={0x64, 0xe, 0x0, 0x0, {{0x8, 0x1, 'nat\x00'}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x6, 0x2, 0x8, 0x7fff, 0x1}, @dev={0xac, 0x14, 0x14, 0x36}, @remote, 0xff000000}}]}, {0x2a, 0x6, "d1365e39c59deb36ab263867487457d17e9b7b2401318fff954bdb7aa48f27b84deb537a7701"}}}, @m_xt={0x98, 0x1d, 0x0, 0x0, {{0x7, 0x1, 'xt\x00'}, {0x2c, 0x2, 0x0, 0x1, [@TCA_IPT_HOOK={0x8}, @TCA_IPT_HOOK={0x8, 0x2, 0x4}, @TCA_IPT_HOOK={0x8}, @TCA_IPT_INDEX={0x8, 0x3, 0xfff}, @TCA_IPT_HOOK={0x8, 0x2, 0x2}]}, {0x5d, 0x6, "a60db7f4deb896487d29019a156104e670385906de733f5a48ac79ab22403cc3990df1a0f42f8723ed5d637a68ab3a5da28fb9c959905fe17e41fd7805cc2745ea4f506a1c63678f84ea4870d1b1aee806569672f44cb9f148"}}}, @m_ife={0x170, 0xb, 0x0, 0x0, {{0x8, 0x1, 'ife\x00'}, {0x94, 0x2, 0x0, 0x1, [@TCA_IFE_SMAC={0xa}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x400, 0xcecd, 0x0, 0x9, 0x2}}}, @TCA_IFE_SMAC={0xa, 0x4, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, @TCA_IFE_TYPE={0x6, 0x5, 0x6}, @TCA_IFE_DMAC={0xa, 0x3, @remote}, @TCA_IFE_TYPE={0x6, 0x5, 0x2}, @TCA_IFE_DMAC={0xa, 0x3, @dev={[], 0xe}}, @TCA_IFE_METALST={0x18, 0x6, [@IFE_META_TCINDEX={0x6, 0x5, @val=0x1}, @IFE_META_SKBMARK={0x8, 0x1, @val=0x2}, @IFE_META_SKBMARK={0x4, 0x1, @void}]}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x7, 0x10000000, 0x9, 0x7}}}]}, {0xcd, 0x6, "9e3084aeaf74e4a3c254dd05b89da5bfb13b58ab8388f8daf453883c85ad5f1717280e5399b10b723a7af76619ef8eaf2aee940e1a973b328062e2a716b4c2656992bcd6cc3f21586647826dce3c7ace205359595baa66b4d19cdf1e1bbde74ae7e0377addb778d0ad7df9c721db961b908249d34270cf4f55d5e5443e6365558f625b35634732842741407cff4fc06477e4489ee80b6988448fc17044a852608b25d6fa72cddabae9b44aa3451056ef12768f0429c19cad2430cf752fdc11575460b538250a7c9e87"}}}, @m_csum={0x74, 0x16, 0x0, 0x0, {{0x9, 0x1, 'csum\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0xffffff32, 0x2, 0xffffffffffffffff, 0xeb4, 0x200}, 0x6e}}]}, {0x44, 0x6, "0e3e9715df816d47b7bf03840be8fed4f710b9da2ab7a40f195e20e54bd07ec834cde0388b0f8c989493a1c3ed1589913b2a85994649af8bd5bf467f653bd017"}}}, @m_xt={0x1c0, 0x10, 0x0, 0x0, {{0x7, 0x1, 'xt\x00'}, {0x104, 0x2, 0x0, 0x1, [@TCA_IPT_INDEX={0x8, 0x3, 0x80}, @TCA_IPT_TARG={0xd1, 0x6, {0x7, 'filter\x00', 0x8, 0x4, "58d16b562b9b444256ed24d98d0cca5faf37542641b769317dd44dab86cd6396ecb7c62ac56f2071135fea9f355bffb54236d74a1d425be77f1244d38acc423d6861ad8798a1cd21d0092bb3f0b49b0d2f7676f382d62ce56ce3cc5cb3d01150ab8c4f7502759049b3afea851b5fe1764a5ac3a820f0471d9d4c6786048c5e9dda3bf0ce04ebd8b15a08cc8341d2269b789026d8fe964eef14bfec45689f92e2088dc8907b0024"}}, @TCA_IPT_TABLE={0x24, 0x1, 'raw\x00'}]}, {0xae, 0x6, "f2b22b348284404bf8ac60fff41e46fdc4ed8d8b83c763602094a942d794ca95e72733c4b866f83d1f5309575ebb3458152fa3ba9b1c71e83e7264e02fccb47d49132804172bb2471aaa3d7d2c7b696b38f6def75096fe13f678efe6224f388446ba4b6e30ebfc3f70c93e4ac292df6adb041cd3c43aaa19eaa726cadd6e2494673f3d41c56cb8464a9b0fd1522154f207048d43c8b78d218a029cf0bb6129ce622fbd5ea31add6d24c0"}}}, @m_simple={0x194, 0x10, 0x0, 0x0, {{0xb, 0x1, 'simple\x00'}, {0xc4, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0x0, 0x4, 0x10000000, 0x401, 0x7}}, @TCA_DEF_PARMS={0x18, 0x2, {0x7, 0xfffff001, 0x1, 0x2, 0x2}}, @TCA_DEF_DATA={0xf, 0x3, 'tunnel_key\x00'}, @TCA_DEF_DATA={0xf, 0x3, 'tunnel_key\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0xffff0000, 0x7bf, 0x10000006, 0x3, 0x60d600}}, @TCA_DEF_PARMS={0x18, 0x2, {0x0, 0xfff, 0x4, 0x9, 0x73cd}}, @TCA_DEF_DATA={0xf, 0x3, 'tunnel_key\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x2, 0x2, 0x20000000, 0x5, 0x800}}, @TCA_DEF_PARMS={0x18, 0x2, {0x9, 0x1, 0x0, 0x1ff, 0x101}}]}, {0xbe, 0x6, "1a104889ff6ba8d37503fd37acebb9e72d15ee43fdf99f36a9f5c226b8546aa771134cc8f36a7aee1fb328373bfc6dc019a98f95739efd077c41f05816cebee534ed67189b832e8f3a2b5cdd56e84aac5ad1e58747d1a6971bafa9ffac76d6ad7cabf4529dfdabe0ecafc1423c882ce1f45a861c27aae36135e8a6890f5edc89c611662d5495f4dca0d5ec3c8a4ecb9bf02b061ec00658e5b85d3e741e20e9630a402004a17c689bbc58f03b0d18be3fc46e8bc5b86180ddf28f"}}}]}]}, 0x1820}}, 0x0) 08:39:33 executing program 4: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x20000000003, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00'}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newlink={0x60, 0x10, 0x1, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r4, 0x50800}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @ip6gretap={{0xe, 0x1, 'ip6gretap\x00'}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @ipv4={[], [], @private=0xa010100}}, @IFLA_GRE_REMOTE={0x14, 0x7, @remote}]}}}]}, 0x60}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00'}) [ 280.045015][T18473] FAULT_INJECTION: forcing a failure. [ 280.045015][T18473] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 280.060941][T18473] CPU: 1 PID: 18473 Comm: syz-executor.2 Not tainted 5.7.0-rc6-syzkaller #0 [ 280.069634][T18473] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 280.079689][T18473] Call Trace: [ 280.082985][T18473] dump_stack+0x1e9/0x30e [ 280.087318][T18473] should_fail+0x433/0x5b0 [ 280.091736][T18473] prepare_alloc_pages+0x28c/0x4a0 [ 280.096849][T18473] __alloc_pages_nodemask+0xbc/0x5e0 [ 280.102167][T18473] __do_page_cache_readahead+0x1de/0x4f0 [ 280.107809][T18473] generic_file_buffered_read+0x4a5/0x2570 [ 280.113621][T18473] generic_file_splice_read+0x452/0x700 [ 280.119172][T18473] ? splice_shrink_spd+0xb0/0xb0 [ 280.124114][T18473] splice_direct_to_actor+0x3c1/0xb40 [ 280.129496][T18473] ? do_splice_direct+0x340/0x340 [ 280.131880][T18479] IPVS: ftp: loaded support on port[0] = 21 [ 280.134694][T18473] do_splice_direct+0x201/0x340 [ 280.134710][T18473] ? security_file_permission+0x50/0xc0 [ 280.134721][T18473] do_sendfile+0x809/0xfe0 [ 280.134739][T18473] __x64_sys_sendfile64+0x164/0x1a0 [ 280.160755][T18473] ? do_syscall_64+0x19/0x1b0 [ 280.165435][T18473] do_syscall_64+0xf3/0x1b0 [ 280.169942][T18473] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 280.175859][T18473] RIP: 0033:0x45ca29 [ 280.179750][T18473] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 280.199359][T18473] RSP: 002b:00007efeff606c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 280.207765][T18473] RAX: ffffffffffffffda RBX: 00000000004fc540 RCX: 000000000045ca29 [ 280.215727][T18473] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 280.223758][T18473] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 280.231717][T18473] R10: 000080001d00c0d0 R11: 0000000000000246 R12: 0000000000000005 08:39:34 executing program 1: r0 = socket(0x10, 0x803, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000005540)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000c80)=""/235, 0xeb}], 0x1}}], 0x1, 0x0, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendto(r0, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000b80)=@ethernet={0x0, @local}, 0x80, 0x0}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000ac0)=[{{&(0x7f0000000880)=@caif=@util, 0x80, &(0x7f0000000540)=[{&(0x7f0000000900)=""/128, 0x80}, {&(0x7f0000000980)=""/76, 0x4c}], 0x2}, 0x3f}], 0x1, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_SYS_GET(0xffffffffffffffff, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000a00)={0x0, 0x30}}, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x374, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x14b}, {&(0x7f0000000140)=""/85, 0x20a}, {&(0x7f0000000fc0)=""/4096, 0x773}, {&(0x7f0000000400)=""/106, 0x2ce}, {&(0x7f0000000740)=""/73, 0x3dd}, {&(0x7f0000000200)=""/77, 0x96}, {&(0x7f00000007c0)=""/154, 0x40d}, {&(0x7f0000000000)=""/22, 0xa}], 0x81, &(0x7f0000000600)=""/191, 0x41, 0x1200}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) [ 280.239673][T18473] R13: 00000000000008dc R14: 00000000004cba16 R15: 00007efeff6076d4 08:39:34 executing program 1: r0 = socket(0x10, 0x803, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000005540)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000c80)=""/235, 0xeb}], 0x1}}], 0x1, 0x0, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendto(r0, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000b80)=@ethernet={0x0, @local}, 0x80, 0x0}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000ac0)=[{{&(0x7f0000000880)=@caif=@util, 0x80, &(0x7f0000000540)=[{&(0x7f0000000900)=""/128, 0x80}, {&(0x7f0000000980)=""/76, 0x4c}], 0x2}, 0x3f}], 0x1, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_SYS_GET(0xffffffffffffffff, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000a00)={0x0, 0x30}}, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x374, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x14b}, {&(0x7f0000000140)=""/85, 0x20a}, {&(0x7f0000000fc0)=""/4096, 0x773}, {&(0x7f0000000400)=""/106, 0x2ce}, {&(0x7f0000000740)=""/73, 0x3dd}, {&(0x7f0000000200)=""/77, 0x96}, {&(0x7f00000007c0)=""/154, 0x40d}, {&(0x7f0000000000)=""/22, 0xa}], 0x81, &(0x7f0000000600)=""/191, 0x41, 0x1400}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 08:39:34 executing program 1: r0 = socket(0x10, 0x803, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000005540)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000c80)=""/235, 0xeb}], 0x1}}], 0x1, 0x0, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendto(r0, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000b80)=@ethernet={0x0, @local}, 0x80, 0x0}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000ac0)=[{{&(0x7f0000000880)=@caif=@util, 0x80, &(0x7f0000000540)=[{&(0x7f0000000900)=""/128, 0x80}, {&(0x7f0000000980)=""/76, 0x4c}], 0x2}, 0x3f}], 0x1, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_SYS_GET(0xffffffffffffffff, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000a00)={0x0, 0x30}}, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x374, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x14b}, {&(0x7f0000000140)=""/85, 0x20a}, {&(0x7f0000000fc0)=""/4096, 0x773}, {&(0x7f0000000400)=""/106, 0x2ce}, {&(0x7f0000000740)=""/73, 0x3dd}, {&(0x7f0000000200)=""/77, 0x96}, {&(0x7f00000007c0)=""/154, 0x40d}, {&(0x7f0000000000)=""/22, 0xa}], 0x81, &(0x7f0000000600)=""/191, 0x41, 0x1410}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 08:39:34 executing program 4: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x20000000003, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00'}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newlink={0x60, 0x10, 0x1, 0x70bd25, 0x0, {0x0, 0x2, 0x0, r4, 0x50800}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @ip6gretap={{0xe, 0x1, 'ip6gretap\x00'}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @ipv4={[], [], @private=0xa010100}}, @IFLA_GRE_REMOTE={0x14, 0x7, @remote}]}}}]}, 0x60}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00'}) 08:39:34 executing program 3: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x20000000003, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newlink={0x60, 0x10, 0x1, 0x0, 0x8848, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @ip6gretap={{0xe, 0x1, 'ip6gretap\x00'}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @ipv4={[], [], @loopback}}, @IFLA_GRE_REMOTE={0x14, 0x7, @remote}]}}}]}, 0x60}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00'}) 08:39:34 executing program 2 (fault-call:8 fault-nth:38): shmget(0x0, 0x4000, 0x780012c9, &(0x7f0000ffc000/0x4000)=nil) shmctl$IPC_RMID(0x0, 0x0) shmat(0x0, &(0x7f0000ffe000/0x1000)=nil, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x2, 0x1) r1 = open(&(0x7f0000000080)='./bus\x00', 0x430c2, 0x0) ftruncate(r1, 0x200004) sendfile(r0, r1, 0x0, 0x80001d00c0d0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) [ 280.441371][T18523] FAULT_INJECTION: forcing a failure. [ 280.441371][T18523] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 280.466476][T18523] CPU: 1 PID: 18523 Comm: syz-executor.2 Not tainted 5.7.0-rc6-syzkaller #0 [ 280.475181][T18523] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 280.485238][T18523] Call Trace: [ 280.488537][T18523] dump_stack+0x1e9/0x30e [ 280.492867][T18523] should_fail+0x433/0x5b0 [ 280.497286][T18523] prepare_alloc_pages+0x28c/0x4a0 [ 280.502397][T18523] __alloc_pages_nodemask+0xbc/0x5e0 [ 280.507773][T18523] __do_page_cache_readahead+0x1de/0x4f0 [ 280.513415][T18523] generic_file_buffered_read+0x4a5/0x2570 [ 280.519259][T18523] generic_file_splice_read+0x452/0x700 [ 280.524810][T18523] ? splice_shrink_spd+0xb0/0xb0 [ 280.529752][T18523] splice_direct_to_actor+0x3c1/0xb40 [ 280.535135][T18523] ? do_splice_direct+0x340/0x340 [ 280.540190][T18523] do_splice_direct+0x201/0x340 [ 280.545055][T18523] ? security_file_permission+0x50/0xc0 [ 280.550613][T18523] do_sendfile+0x809/0xfe0 [ 280.555130][T18523] __x64_sys_sendfile64+0x164/0x1a0 [ 280.560337][T18523] ? do_syscall_64+0x19/0x1b0 [ 280.565105][T18523] do_syscall_64+0xf3/0x1b0 [ 280.569607][T18523] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 280.575522][T18523] RIP: 0033:0x45ca29 [ 280.579422][T18523] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 280.599223][T18523] RSP: 002b:00007efeff606c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 280.607713][T18523] RAX: ffffffffffffffda RBX: 00000000004fc540 RCX: 000000000045ca29 [ 280.615686][T18523] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 280.623668][T18523] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 280.631644][T18523] R10: 000080001d00c0d0 R11: 0000000000000246 R12: 0000000000000005 [ 280.639880][T18523] R13: 00000000000008dc R14: 00000000004cba16 R15: 00007efeff6076d4 08:39:34 executing program 5: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x10, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = socket$inet6(0xa, 0x1, 0x8010800000000084) r1 = socket$kcm(0x2, 0x3, 0x2) recvmsg(r1, &(0x7f0000007500)={&(0x7f0000006f80)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x80, 0x0, 0x0, 0xffffffffffffffff}, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmmsg$inet6(r0, &(0x7f00000000c0)=[{{&(0x7f0000002c80)={0xa, 0x0, 0x0, @loopback}, 0x1c, &(0x7f0000005000)}}], 0x1, 0x20000040) 08:39:34 executing program 1: r0 = socket(0x10, 0x803, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000005540)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000c80)=""/235, 0xeb}], 0x1}}], 0x1, 0x0, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendto(r0, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000b80)=@ethernet={0x0, @local}, 0x80, 0x0}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000ac0)=[{{&(0x7f0000000880)=@caif=@util, 0x80, &(0x7f0000000540)=[{&(0x7f0000000900)=""/128, 0x80}, {&(0x7f0000000980)=""/76, 0x4c}], 0x2}, 0x3f}], 0x1, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_SYS_GET(0xffffffffffffffff, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000a00)={0x0, 0x30}}, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x374, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x14b}, {&(0x7f0000000140)=""/85, 0x20a}, {&(0x7f0000000fc0)=""/4096, 0x773}, {&(0x7f0000000400)=""/106, 0x2ce}, {&(0x7f0000000740)=""/73, 0x3dd}, {&(0x7f0000000200)=""/77, 0x96}, {&(0x7f00000007c0)=""/154, 0x40d}, {&(0x7f0000000000)=""/22, 0xa}], 0x81, &(0x7f0000000600)=""/191, 0x41, 0x14cc}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 08:39:34 executing program 3: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x20000000003, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newlink={0x60, 0x10, 0x1, 0x0, 0xfc00, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @ip6gretap={{0xe, 0x1, 'ip6gretap\x00'}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @ipv4={[], [], @loopback}}, @IFLA_GRE_REMOTE={0x14, 0x7, @remote}]}}}]}, 0x60}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00'}) 08:39:34 executing program 4: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x20000000003, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00'}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newlink={0x60, 0x10, 0x1, 0x70bd25, 0x0, {0x0, 0x3, 0x0, r4, 0x50800}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @ip6gretap={{0xe, 0x1, 'ip6gretap\x00'}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @ipv4={[], [], @private=0xa010100}}, @IFLA_GRE_REMOTE={0x14, 0x7, @remote}]}}}]}, 0x60}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00'}) 08:39:34 executing program 2 (fault-call:8 fault-nth:39): shmget(0x0, 0x4000, 0x780012c9, &(0x7f0000ffc000/0x4000)=nil) shmctl$IPC_RMID(0x0, 0x0) shmat(0x0, &(0x7f0000ffe000/0x1000)=nil, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x2, 0x1) r1 = open(&(0x7f0000000080)='./bus\x00', 0x430c2, 0x0) ftruncate(r1, 0x200004) sendfile(r0, r1, 0x0, 0x80001d00c0d0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) [ 280.913574][T18546] FAULT_INJECTION: forcing a failure. [ 280.913574][T18546] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 280.927447][T18546] CPU: 1 PID: 18546 Comm: syz-executor.2 Not tainted 5.7.0-rc6-syzkaller #0 [ 280.931495][T18547] IPVS: ftp: loaded support on port[0] = 21 [ 280.936126][T18546] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 280.936130][T18546] Call Trace: [ 280.936147][T18546] dump_stack+0x1e9/0x30e [ 280.936158][T18546] should_fail+0x433/0x5b0 [ 280.936170][T18546] prepare_alloc_pages+0x28c/0x4a0 [ 280.936182][T18546] __alloc_pages_nodemask+0xbc/0x5e0 [ 280.936198][T18546] __do_page_cache_readahead+0x1de/0x4f0 [ 280.936214][T18546] generic_file_buffered_read+0x4a5/0x2570 [ 280.936233][T18546] generic_file_splice_read+0x452/0x700 [ 280.991609][T18546] ? splice_shrink_spd+0xb0/0xb0 [ 280.996554][T18546] splice_direct_to_actor+0x3c1/0xb40 [ 281.002189][T18546] ? do_splice_direct+0x340/0x340 [ 281.007236][T18546] do_splice_direct+0x201/0x340 08:39:34 executing program 0: pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setresgid(0x0, r3, 0x0) getgroups(0x4, &(0x7f0000007a80)=[0xee00, 0xffffffffffffffff, 0x0, r3]) sendmmsg$unix(r0, &(0x7f0000007b40)=[{&(0x7f0000000340)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f0000000840)=[{&(0x7f00000003c0)="865321029d0290eac0f68ae9661c4887a76d89ba6a14e13b992869e4363f1d292e5ad38dda1e13c5d0c46243d357fab45cae7d518c05a09ed8bd9a7ad870f2d262c5cdfc8092a19703c7af45aae9036e63d58c2fd7ff08932bbfb7c78b12b1", 0x5f}, {&(0x7f0000000440)="8cc63837c79b5e0f7de70e6f3f2adbe7718867c9374bfdcba6ea38280c6f82598c07b994415ec4f99c89451aedde67856c48077d384afcc92837b617a757e8b93b3ab1dd63f908007865548a012bd1973d48d30c798a20eb7e97b855a3f80ca9382f7455085e8337a08e871bed54bae61f9eac004fd6092e9380aaf6704385c82aa5c74899a6cbdd80bda31d0768305f2dba697ba69eb63894a47fb93bb08ba83993363333816ac56f", 0xa9}, {&(0x7f0000000500)="d9447e465a7ae8555fcf5ede16734d715c688b49e9f255276cd276a6412723fbada9eee6bb546accadec26ce392ed6eedb23bfbb185153415e9549aa8dbafe80bd4427de474d8ae6027c2461d5e676fa733561a81fc0b0fe6416d51e209c18ddcd1202eb74238d659b913134ee24d0c07a1132c02a1cc6507a18781e2f4c0ff759486a5373a2ec0a36c0c566df7e22239899", 0x92}, {&(0x7f00000005c0)="ded7244a7d44a6c836edccbaa6a1ef1c6ff3ebbfa901aa1779efe868e56580f5846ba566299f0e6a8c93df4ffd196a8f586dd5e2550e53958d66773f76c764b834d760aad63d3915b6163614458ae75599185e23c470f0153f5a3a067c2bbdf304437c4e8f0bb55a10ad49658cff547038da1439ada030", 0x77}, {&(0x7f0000000640)="7892775b3f1a155fe1ec08dc91389ca38695863045db3bb00dc9076969d3050fe62cc6ee021262f9d621eec42b58204d2ec75e15abafe76e99b6d0cf2e693ddf439849e1e44f1ad0c372ae4b3c02be811ba2eb638ad49239fd3e3e0357db3607fb6dd6794e41a12b6c569377c27bcb74d7bfb011b62167ef53d6129907bd02cabc0d3750f4348ea1398775ac89682591fb6f57ed50dde0b8753dfb6e54499fdc62502db555a7ba871eb97f9225e92e1343cdd7085c4da3f063f445f8a2b4a04fd256a57248", 0xc5}, {&(0x7f0000000200)="a64fabdddba75455a6fc34acbf701a7fd429d20ef351bc0efef050803bc5b893205e9b2ac57b176a2bc144c5fec96d8f6367cd26", 0x34}, {&(0x7f0000000740)="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", 0xfd}], 0x7, &(0x7f0000000a40)=[@cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r0, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [r0, 0xffffffffffffffff, 0xffffffffffffffff, r2]}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, r2, 0xffffffffffffffff, r0, r1]}}], 0xb0, 0x40}, {&(0x7f0000000b00)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f00000040c0)=[{&(0x7f0000000b80)="17a27b6edff7e35e00cffe26f813c93a96dc18d38583f252864f975c6d64020072feac56efb7f5e6daaef5cf7d7780158c2a47b5f7a081b3db1f846bcbd89fd5221311928d3662798baed912cf0cc1034271bb3b77f13607601f9fd78ee2df91fd903c46fd6e44d635f5f1288693ea498fff66d7e80b06bab05e2d817a1d076603bf9c7cbc905d552ea1dcd86d885fb23fda9b9b6308f7a19413182eefcb1c4e1e82bf1deb15208c2a50f7569fd0a2c2986947b9d280bc11d36b65453357cb7c21ee71e0d27ab6376f35fa647f4a68f0745faa937bc02cfe65", 0xd9}, {&(0x7f0000000c80)="4fd1d8044ae8e5eb9f4d9c38778b6b7081adf2334256e6b9d41e10d70b27993e77039395d6ce185778736b356b2656be50d0798c87a981b8a6e26971153a3877dab431391565107ab7543ac151909a0437b94a04d849102fb186922a14a2", 0x5e}, {&(0x7f0000000d00)="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", 0x1000}, {&(0x7f0000001d00)="3fa5d773c4594135ba35418eb85b1ef0193c0838e57a07199db677b804727236d51ac1a15a4c785dd1b45b161719d96240a2aa47cf05c05a0b7de6463415ef6627fbc9132cb8cfe850a3173f7dcf1f6429261198ff0ff4f9eceee2dd1fd696b5fe0ffe7ea9661b93d6a8cb2e0217d2e5f5530c396be31fcfabd833f38831e06febaaebb9c68636457a9555efa8bb53b09e8c930ea7d0836baad48e8e2ff906201d521dc6d4e4b8f2a14ab71910c7e5071bb7616746d29c525614eafccd187b8b5d18f3a2d2fd25a52b5f3f", 0xcb}, {&(0x7f0000001e00)="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", 0x1000}, {&(0x7f0000002e00)="fad4ecefeb2259e0ff925825a54255413430bd767c0e0028969c8571", 0x1c}, {&(0x7f0000002e40)="efc0a9c425e4178a18c5b6155c7e60f01184eee016b7ccdf49be48dee7b75d46152320068c732e32c69535eb9fdf169010aa908f43d79363051be7000727dfb5bf12530b4866a1654506af6274cd0750bc5330f94b22baa78b6af701131628a55ab8e164fa8ce4ba8ede971f80b62d20a73261a2b282ec154fbb68be3e8fcd5c4055b8143f36e0a76ffdcf184edcf69fa80cfa914524b327da6b0f5f7287055ce8521e16b147df08499e6675418a5467ffae968b8208e0e593ff497c63e4b623de1a4c719bf9a6dbb4abdce17ab472e7ea4a83240f02bc0ea0b4c5dc3edc7a8e8d68468eb46852d2d0c0c1ccb3b580439373ac6b0b80f504ab40123130f6ce6bd2b07b2443e7eb59ece7980e07a22d75596654d514e93625ccba7a72b6e9f4293126f5e66ba9debcd8d1be79f218325c8c316a0f2b0b2e34f2c67cccb80a96e9f5be57753215dcd4d4be54d4c133a15b386ee0e25d0c4d2560b36d3773cde29da0ac71effa0b5f66e22f968d7a0e562e28b3f004f915b740fad30720503de9a4d6f9f9c5072e6a3a240286c07bca12c75a929d53c5a049817baf6e2327b4cbb369893444c32c353141ddc446a8b4386d842cf7d3c33a3c190a333708eafa714879ead6aae6a659aafa9a20e78554bca62286f37b920c58ad4a2a970ce7cc0b12d20af48a82db8f25c563e4dd14e65a0bc96eb7f6168b01dd3cf0fe05c9b4765270fa1e9910345c72a973347fb0fb216812c69136ee2664da7e6aeccae5fe25c07590881d3e6a61b14b201051bda9832cc3d7b80f56b4de18fc751c96c881de4e56611e59fb4e650e34851fa271fb60d71e267bcdf24115046a7043c6d97eee901ce23205c6749665eb16c8cab5d4bef4228f8d88a6c7eba9242a0d7e45d7556b5249b97d7727477dd530bfa70067cdfa4e67883d9c9b926f560b028ee85b7fd2daae9ee6ba67058e872b11e3f12e0588069a8380667dd4c19b38ded85cd15a93256590f15fa8f4caf7a152b7bf181a197bdb8d892dd2bba86662595e7653b1fdfbdb9a32b172b4c7ab1a42e6e9de6bb41ecd9b39af36036a90d4c257651943435ee885693df5944b7ca2663f8f1d1b76010685a0a2f11aef71f3f09864661f00825e382c30950219865a4c667f57e5100af8b5971ffa79026511fc4f2e383710950a656c77a986afd8be42d04c49c571c203cd29daf052104f46b74f993f673288994abfb4de9a02eb037e4b6907f347f670b747effd9a622065887fb3aafdf01a1775f9328583c37ae3a300967733e29dbc58e489a65c3a4452fc78b19650c3b8a6dcbb53796f662eaae0c3c189b7b740ba90fcf2078d6641f46285b1d3cca53578897e8bc6e4b6f032c658e6b3ff834616698a0617e9ef9effc2a2f5a9bcf01274a094b8980ddfaaec23d529891b0b90982e60d3faf32f76193e6a9ab591d53d53125e65e5674447551a6b0b9d87c76f55bb49a3790f9f7eb3ab503a01659560d7b06b47fb9b148a91da75ec200c428676d9ca3988424d431d6733328a69b81afe833773af1f3e654aee10358944017f4c007bf87986c3a0d7c30b84c29b356be09dde5e3763fb8484c5684bbaa87af919cf39e519b8186cd8ce64498fc769d87e8ef6b251aee68231b7462936d6c1c7d326ccad119d7f3997796c8174c68a43bc165332eeb490c063f56e74116e6fe93474cefc687edad77270ba42af19d39973c05770896d787c0abe175a6fc7ee34c3003045776f09e1feb00b2f3c1e51ccff93e1b24e94bf1f5da6c209c3a30a579bb23d2f4a0764ebad7b0b30a85bf5b92e7fe8c7d9887b5a88fc2f98a03e986fc1d378dc39a6037d252d773c6630ac2cff471bf298440640d16a6b68551ae171ee60dd3e03a30277e4f051c99d1e081d21a98a3ded4fed67860450129e3e8885b538326e7719b01227a1542a78cca2ea04b53e718cc4036606175329a0389d3bf0813fcf7927d4ee741c29ce6aba2bd8324600cee7323e73b83f4dbc2f9fd2628d16adf12b5314f77e80e57e61476ccc2c3f9e7534c0763d7c67c5b646e6888d10e5f04484ff04d777b38eaedb44f60834f329ac966b6add56bddac136f7104451bbb0540aeb8ddd058a72c25860e206aabc32b5c83beaec84fe4683631ebc0e25e31d870e89d8121cd558595a865cb1345605b79fb1360ecb713c94e7609cb04a2b71f0553fca6fbd0ead0265467310f93f5f3fc1f09636447d142a3ce976c396894e32db87e2060374601424462d56118218754ce34eee9ab919dbe4a8aea14b817c85311cc607a5f09e06a3737cdb97149e17d5bb61062d93adf1b13f3bf8a64e59b8802b43b6115651558e369975ec5cc93a6b8eb166c9ea094adbad41a1b2fd7f881134765cdbec71d826e7b9d1e5c4895c1169b95fe68fb66ec262c7b8cda83817fcf8604d0187ec87527c52692aee4427a78084889cdffe4956553d0fd86dd94265afd742abbb0769899fcf8fd2486d0103f06ebe954cb3a9991927b52c776a435248748165f180bb49ee61782479160c3c9f493c078b496ac7c970902503536e357989a87f86b3ecaebbfa0f70a19bfa5dcdbcd52ed5681dca537a37112984d6aecad195e650ad50498eb67556783c9dc79ba73fadc67d23b82f9ec8084fb2637db0cffb6aa5eac237da62dd203449550eac774f04d5893e443ce33daf10f1d8bdd9398633a5cf14225e6c3b3fc140f1fc876c15217cbfa66f70a788d6ca9bccdd6d0595561bb3a769e4ca624a3d3a6cd8ff9cfc602cfe1016ae6d6f0917320076c27ce1013ab92f3a644dcc6e0b1ac5dcff5e666555b08dc0efb843ea69bebd4f7c6ff8a5c6ae6904812e6f55d83cc075a4239081f97737085b025ca58039995517e8ed3f7bca14f005e654f5cbed9f04c986f1e92ba7c7a1d17b725e14be9a0b4076c1ef963925afbdd2a4844eb0e9d99f57e0665947eae4beff4bcb20f6a6e6eaabc160a097c07dad5a25f344de4d1198b756942dd3116e059cdc5973ff4a26a0adc415051fd8aa14e0d21f0e065115b4be9b6da73ad122d38aac0891259e94d91c345db1d8ee85b74ddc7c0e4fb2c854107e0448cf0cfe982103c48df41c79df8d70898191e3ec9dc6b90bee3fe7b02c5ca04f70f79850178516e4c6c26b899e0642ecff32a284938a0483a82e08bcd7c8aa74af2c6b6f765df31ac7c49af120b66fbdb6aa3fc35a64a49fb4a4294b01e339e2ae118a164522e06cd5614ef5eb00fe7cf3d19d1ec12de7212edd4b030e77ce7cf6e98c77b8beb3fd2de3e99765178878d5b3f943f43aa661a23c661b8fc913a0eedf8f7aeccdaa125d901599b1e2029b6ec3d18ab34dd2943822f99755a9400d134a30daa562879c5e883196861a1d4715e91dffd07ec0556f803cea70dcb54f5e70e6a11aa405d5727c3ccb9f5c3e212094e88c1ce3fa4da48c826c51af4a09c5cfa242ffef5e0601e5fe7d99e9f6ceb298199ab40e787b002abbb7211e3a3606a449138a65cf09bd52bd977f28c64539322e72b2f5a54a2e1cd11701ed0b17763e76de67d039147580ebe2f55efc4f44c34ec9dbb19cb55ab9c0225d35d7ec7c5d1aaf6be23a6e3b8082975196395596567a6ee1a86d1da742394d91e8612a7b03e84c8b3037ff542e530d7fef7909362524f1c4842cbf17f2bfe9f5cc7cde296373e9fb3725101f608be38b886fda4f58e311a95c23834f1d05b9bc4164fb12a5cb2d8c10f252ced277117f43e9bbd8283a35c0fa585289fd8dfa1d770348efdc8bee7b43dcd5140a8b7d6131cc4b89841fa474bf2953855c56db227fc398690b78a68c67ae1b434a736d17130feba0864d4f9c25e3a3e54ff69634f07e24a2c3071e379168ec7a4b515b65e6344056df4e5df45d85dd0f0f6871561a956e800b5402fc5efe3770cdb1aa34354bbcef64c32e2c444d4864284840f27362441f50c1e7eadf762aa977339fb0cebf587d604ab87624ed29ae2231aef4f1e6aa4c2fa691f4f78d34e013cbd854d3d5615c1d877bd690b4df2d5dea2bd62a632835a1949a4eb89ef483b2e3e09f658933896926ce4ea0d7d9b449ac8cc6c46b1eebd96f283489c9f8e49d13f1bababe57cdb0c48c5a7332213019d586884dc0dfa564a0f2f374f786357394f212a5f0d9fbe9207f2922a47f127a261b4674d2ba2a19ff0c721ed286e49bf507be241b315b3a952cf45ffce73e3de1c91758212335d160f2b223c2412b16e57db15138930dbfc3d89df8e6d86cb736c1381a3692b03d816802fa33f7594bda07ce943bb602689870e5f7aca2c4f23902597e3f118c92a7c31d8a4b4f2d62a5e229e94214dd38eb76f5635a7755652e55beea04c6fcc773d51e452dab7c6bb9b0d6bb371fdc7aa158879941bb50b12bccc65feb4b9fd2fcef4b10a52a5f193fe08ad279a8ec836b704ceb6df9ae44d5411676510690a41992b0880e125a36e0fd23ff190274654850d1a1a7713b1deaa4d91ce5395bb5fc4fbd9173864f842655760157f604ca56657720330f79f55d8abe8e841a3c6ed31cb64f32c3df9e5db1a4b54f22120d2aa86995a221a3ea55b24922202ed72668213de6b2cab9b54e610c0013f94b700621ec0b754c3fb81102f5b499277098ad3e1b79cdfae2f83497f30465bf17d0e1f5282b4eb853b027fc87922da5c17a0e24d89413f0ec375f5115686ae097d9e243e8002e309e24f9dad3a70ee4d8e55722075e4fd4c2a6c1943bf22b5aa54a246832a3223dbae4dd0fcb6c29b72a317c9eb785d1b289025c5f02111cdbb06200283499580952a8593254ec1798f8ad6a564fc2151771e2e3850fd5cecf66da5c8fb79db2bd348be4d5ef0aaa65311af73c475ed5888406f53f78ae7d4156e330d3df7270a0e33aaffd7fda2a8c989965a51d1514b6c25cd5fcef48c10d83633c21bc8e29e60d8b2b23750fd33afb82365e32338e86bfb7dc106c077aeede9bb3c3956f07e2e38e3cd7afcce0b95eec63fa95e491abbfd4ab23a8e58e95119017d760c0f8e07508137b0cc6bf90d816dc5414fab1325449b8e621a2c488e056a60384d47b512dce0177a9368ba0b1f8cc9567ab42594783a2aa2c0b3b1ba39bbef41aee36bb8cf968f9ae7285dc9726b32762659a7c8994ecaca407222b1fc3a26296642795a4c204b5dd4122a86d57261db37fe8866bf88a831b9701f5d1e32460b9a9396b7d9f37a270149bcb96daaf7ad4e5482f28ee3cbb90262a87e0d3737fd6891a253aafd3bb9e64fa1d1453d37ce4849cd0ba231b39d0f882160f030ab1908b0fc3fa979eeb73414e51b19cf5edaacba0841dee894f238f1248a044d207ffdaa4c9a3aa5cb52c5240d6a3dbeb715508f657660ae3b2d906c2e484b451da1ac9f30aa01c5e69b22c00ca04e4adce269384d87ed2bab8305be8d29d03be45eab61c551da9fb010842d09baf4877e3e9369e35077c2f0d77bd2fd710b81ab8a0ddf781125886975fc633abb451dada6de8e919b3c0915cfe14319cac791bdb52b01eee2cb091733ed1ace3a52ee77af6aa5414cd04131a1e4821ba82509b0f1ee1b086ab64d35d2b297bdada28062cbf087efc123e3473949b6f4015bb42e21df622031406fd0727b9de55b85c722a04a73ba328960ed5cdba3faa7f147b07153c8eee7814557026e7917ac47a595973a6a380a5de1caec04210b42c0d2cad8b5d88d50f02c37859cdf5436297801966d46228d099e9d564aa9497b9d3aecae3c6a9d9921607628c03925a7ee9596ff02f80b56776194db27339842e41066a5c50", 0x1000}, {&(0x7f0000003e40)="aaf62fc80496e454d461f078793cdb0cf9b968098330af36630b0d53f11982c44453ded957778ec474b3b09c3288b655bd7c2e7ded5b443ccc293b9a66c95e22c73b9e22bda40ab289cd2fd604e27337e496b315025a8c394c316c4f72fc82e3ce7bbd", 0x63}, {&(0x7f0000003ec0)="d3b34ee502ba603bf70a4d0fff6966451f76991c211af5c30af57a38e2e519770666c9e2a447b872ab9800b2a20e4ae4fe185abf088f2c3ddf662d4bec16f063ac01a6322f87fec3f9e70397710728dd625ee8db1203ad112020dd808cc25b0da78fdc880092d38cb1c34cbd539e8354d516d61656a280fa9cd8a35587395ec7a8ea8d50934f7f9663fdae50d75b0e19a25e889aeafbfff27a4d05618c8f00c5eb21242eb036fdd4977fecf919bfda4c362826dc61cb1d43e08569afe6ba4959d48a21d460154949808ca8f62de49c3cfb42154ece798f3c29d3b4272e5a7db85f29ea9b50ce1e3e", 0xe8}, {&(0x7f0000003fc0)="7f6cfa0a8f420d71cfb7e6f259ff1c32e59ff6e69e0ad4b1301ba2eea703ff13dcf37a8182f98cce0686dfb1e24e4f90e56ec69c11fa7151738a0a040f77cb87d636f717b6238082a5345466a79f5c2973f174ba2d8a2c00d5b6b3e3400ae47a476a3438aae5fd9cb5511037856e5eba61c29b8303b88a65159a1a82a9235f54501428319c2362d1bea6f7b4d7a0b8c153e50c7dd80d3288011bfede232332e6782242780947bd669465cfdd6d0e77531e77bfec89dd1cb7e20e909e80985969b422cea0b5f2f94dd1b90dbfd2e499436452e7b41dafcea94042362d", 0xdc}], 0xa, &(0x7f00000045c0)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r0]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [r0, 0xffffffffffffffff, r0, 0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x88, 0x4000844}, {&(0x7f0000004680)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000004f40)=[{&(0x7f0000004700)="696387ee04335ac0968e72d7885be6a15ae0bed7c145ed9b6e5ab1619f331d341f9a929dbb520c633c9bd6e1c0451c3ec6ecd86de730e0c88b153f64b1ac94f516cdeda48ba70fe1cb0b2731cca1c0a56d2d34f554a4c47a02fcdf017ccd045250f00a6b1114d449c0ca61c64294dfb2d62cf29deef230fecadded3818a8f2d7de335eb8d6c95ad6a465afaee6c29c0dd42db949b5ff53958822de493818e627bc86e47d0ed7ca266cc2958f953ed71d3f8c892f284e29ff5d4c54154c4545e034d43f012615e89738319793797c9df8f3aff1f4260faf521d9efc6c3626afcf7b3de4ec7709ed93ddd298", 0xeb}, {&(0x7f0000004800)="66b23a9dc62f15c17c35cf55aca5e3e0a27c5bbacbf9e0a9ce2d7478b5749de850c77d2169b68c901bc2bb38306c4de88faaff1d1372f73cf22a1a8c44733f10d42bed4510197f1cb5457b111e5f3b5e3faf72d5674ba451b07c6c59b7c7c3b7b466a046f1dc37c8d03c5031619650f752c5cb0cd28b0e60c22ca8aeee811fbc4f9ce2e534cb82990a1f1d67be26c7d820a8a104720081d957d65fd06ef0f9cbdb5fdc55d6719a36df337c0852996330fed501f2f82dc6ab1a9d60f19abf09c3a8399a86abc074", 0x67}, {&(0x7f0000004900)="6a1e219612e75b98cb3a8e2b287d7ca310da2682c3ef4bad16fef07f3015bf4c29ba43094c33026fe2345c53d4cd53b99c52af96529fd6c775f354d19ef929835f04873431fc059a55967ef735b458a1d5fbc6f8175286968fb2359a95c29a230c7915340a316cdbe99157eed3494d90001f97aa8bceb08c2ef7bcc40aff80ab12641a4825538826627a9b8cebd7e3164fe25b8ab4908ccce2b3413d108a70fbf731bbb9f271a21ec92734f50f918967cac309e9f23799ad", 0xb8}, {&(0x7f00000049c0)="94d0fcfb308759108eb53cf06e367483ef1e8efd47baf4497f6be316e6957a725a3161a2e3eb9f341f9c8dc0f12dc9f96218a917aa3ea3391f3a24d56c0336e84dd28a251c9a40f3168d0e16f929a5f2bcd4492a9b83cbe5632bf19a32c5bed77d1d587c4781fe123e2ab5c629e174b7c7498aec63b1d86829cbe940d69d9c7d12532863dcdb7a9be8ae38c6924d597162a968209545f5931d73091a4526dfc6a7465fb4b5ed2910133d5c32bb6acfb45baf7e59d254a30d8eb0a7295f8ada867dfe839c6a2ffc8cced03b9e2cca13e333cdf7925e7daa97e90f8b05c3c328a9b04e680d", 0xe4}, {&(0x7f0000004ac0)="873f6a560de887aead22e6deb7e574ada658a14239203f33ddc1862b54449ffa3056d182e198cbb8fcdbd1c32716bdcbcd4f9e8968deb4468d030cd4d37858d95385deaa9388bbfcc516abe1de0f3ca267f8d751f461381fa6312be9e568dca03a89168de9a078d6c2f6ad94b6cecb88c212d3dcaaf8de5e707455df68480342f1ac3b4b9a3c3738be5856752edb18efee0c090615a37eb7e651fd29bd696b0472cc5acabf42c995c943bd6dc6c3cd763aa5ac56716119f819e54384208ab4668ba505cfa2e67fb50aee24c302c49014abd402880a49b95b4fe4706fca838d98ac59c1b3170c94e62d5a4b523c38bcdf93de6ea702131f1fe4812d", 0xfb}, {&(0x7f0000004bc0)="6305dec9e615255b59421fdf65a609e2af32f39f91f0ed9d9abc4942e48001c35e89e1b0890e1d22b19721b10ad3bb556437a4bc25810e108f877d06da516f397bd713f3a227afca584fd379dbf0ea225ab46307166a77753cfd39d5a01cddd640f85b596a796fbd886c15b6c2b551b02be5892dc1b03b8f2a5c6a93f3a9c53d28db17774fc34ae16d614e8f035226233c4cc15c8f52322fb6a992f0baf958197b4d0f8b9acaf8436d771afffb15d3fc0da423acf12f37c278b1e29ccee28a6004c18cc7b4c24f9b060bb5ee2f6e20a45599cab697a00167a457322747a00a83c2a252d689c9b1ebbe7022996e5dd27b5cf5", 0xf2}, {&(0x7f0000004cc0)="0289b4a812f88083af2e18b258c741173439506d91818dea4d8cc0e7f62352d2005a4c3a20e9653f1a5bf70cc04631fbc4ac586c4e17f9c03e5356676c179258b36ea8", 0x43}, {&(0x7f0000004d40)="2034a63eeb51f00675f7c3add92373ba4bfe6cb0ec", 0x15}, {&(0x7f0000004d80)="237ea8ea73f3020022e1e8a4561ee2f3ce5e2352ff24ea1f20b358015183e650fd9ba39aaff0662d9be117f9f0ab5b3b5bafa348064826373c561ac08209f62ab501b8a1ff28fb645b63d7cb7ffc90d1a00722dbee2c7bc03ed2980895bce245e6dc8e2b306213a846e8e07db09c472e3a3adbd0af993aa8903185b155e8c6d35fa35fba2efa77800bce97b623e64745060231dc389f63af899d767c2272b1af5cdc9f6c2fa3a4c120c22bc63d80cec21c430245534a7256b6ee4973fb8eedfe73", 0xc1}, {&(0x7f0000004e80)="53498777c5120bd74027739c282174e7da01450f0d2841deec0bb79448b9060d65b3bc3288688bc1e0ef13c6d9456fbf028f2a92607270dffacae5cf741cfad7cdf808f5e842795f13f2c2dba738a40444b513e266c8ebcb5489118184bf4cc0edbb6e2c04a1b51c60db6497da0cb9c64b461217386e9d6c5e284f1761ddbeb3d88dc52d128dc6533b5a1ce9cdddb182fa4efc743f4c", 0x96}], 0xa, &(0x7f0000005040)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000018000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000000000000000016", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x98, 0x40}, {&(0x7f0000005100)=@abs={0x9d8551aba22af6a3, 0x0, 0x4e20}, 0x6e, &(0x7f0000004280)=[{&(0x7f0000005180)="06ebab391ad36cf0512cc3fbd6431fcd7e7897f87dfa051a1e385e6517f8fc53ddb4467fdbc8b774b58563efb0526207836dacf1a2de7a169493bca12f291fcda893b985a471d98cf7ef50733dcbce7454510e42b22cb3bda861f5b33028cf90d3d782a3ef42602bc7a5b62a45f353fed0f6c012e66df7c35503d39ec2409b183ea126c0e7c345b4a50eb5307f30860c70d73bea8aaedbb32de6419676dc0ed1c9a350d0a1dc13e70762e91657482f55554968f582ec0d52af982fc3a2d62184f1f0c92eb597a69159c578244fee01b2a70e1f882b88b019bca06ab52cd4868fc11a7252b459bed27576208379a3d2d120b356e8b06c07748ae10759f660c0d3aa6ac4aab631842dca0e75ce48bdba133bc90bcb5133ce258aea1c90d049c5a4a09dfc5cf235a343e4c478b3ec8de0031b46cf358a224053f5647f677f9d0c8cda8bcffb50dfc909bd6d9c3725af7cab36e23d66575016a6d49f31d44715aac7a4fd42c584ab23e54c910d6fe545b4422ec2163ced079fc8fee772089759320c827dad1f7435c3060ad24ff0c14152aa5765219b60d641e44074ea84ecbd5265ffd18bd303546aebef126defb301f65daa1c42244301ed73bbc29157c15b799ad4d76781796bca4e9231125cfce9bbd7e76a456b31da6ecb3bbecdb2806a3eb5aec88edcbead72b76cbf0ff0ea110e8f0de31d2561ba5de48ae55f161fd5346b608ad93a7187064fc597785918451d6a214066e781a43cb6e7e4a1f50fa424c72484927fdc2aaef776140b963c0215ac0a1eff7dbffb571023a5423b5891988f3730a0a13423e0d632a4e3a1399fbe9537220180d40524419f52288b5c74428397e11c573ac44168d2979b071866e329403bf5c0c089c5421eaaf72468e19992f77441f104a57b554d61d7225bfa61b5792f6e50feee4c579ac6737e19e10efb3d10ebc50d3a6338d490e7274fba32a6b70e133e00b711134de4c59e178291ca352dc03267a42db41871ecd64b14594a9194ea4def702f205266d0d59d9802fa780e2a2d2f768f13d9f0ee4ce30676ae8deab2198a9a61a09eae5585cdf9e3d7325db3bf0275a1654773fcb65e4f2b8ab4c87f5c277edab6e7f55b1a2f39ca0e5aeb6e1c7e2736967c6008f1e31157ccd5440cbd078c446a98e1c9376bc292d6c77c71b4d77ecdcc874429bcdf2a63b9428d19500d3b986bb739fdd901f97268fffccdb7b15933ef4f1420714916877d4ca2ad6d8a08eacc52ee286c51dd0b83c63d98e8f663cdaa06975de3b248e4b4d8c6aacc1444f971b9ccc856c067863b40492abf30c7f80ac436fe992e968c45dd7a77431623e037d805652f3dfa82d6a3fad397e9239c5ea55a54aae3ccc5bf8d4b69ae3a066c2b9c8b7a84307d20dbc73fb45e82b27739f2a1569116f0425a609aa98b04705bcf87c374db0a356c767f19bdb66ef58551b20c9d0886c3578df47581f7c0efe85d27d9cbbd11d8e9ff611b4af9c7f1cd6ce8fa515704eb11b178a057a0f7ecf372544912885c21c606946420cb6b7a44b029a7d2b4497a529fb9e4a2d36f346257b2e65a48911396c4431cc88ad8138a5e022f93151f1e6394a966e44e5cee101bd3f10930156eddac02df218998390061e05e85646e668916a2c6ba57e44d73f04f49d2b6744ad81be57967deeff41b2b169c6e02f57efdbe5e42c9ffc45408975cedc15a0d70192427f9d1b207588cb2cf740d7d962023c31299ba9321af65bb099c7ebd8b7d5ebc34ce3d6e54b55cba8d74aed57e91339a0a368fb24ccf0911006620707325eb7f6b4c5fb6c567a9305f6febc4953cdc23859357bd6d7f08d33577aab58b178d8cbbb4a8e99beea401cf14af16d16b227b934b69396af71120d3b8cfeeef07e689bfa3ce86168600cc634396f68fd2d053f0477eaa66cc1ae35f7f2c9fad2c5185fc6da3a5481099aacbae9cb997bd9d4a8cc278ef09b2c971535d4ac24fe92dbe801782627692848c7bdce3ed416c3ab2f10f9c2916dca39842aa95f027013d5092147b91d5b11afa357805b1e1d8031aa9fec9751a8860d36513766ffc68e7fdbb2cfa7b58f84358ac7d5e0b7095ed66c6d5675cbbf224dfa1f7e05e5aa2a3ea00aa82b0f7ee596c52667f300570313783de9a52b34d27158756ca6e3d05cd74e335f5c07945d9ce47feff4e06006bc9f9e38f76daa59f8235c49e28be1813801d592b41e10adead2d8a218e8150d71ad82462e2ef0819418c4998e094f247eaba47aaebece13104c1294ae6de31614623682ed2f772568790d71ea02cfb49506caefdec9fec1dcceffd88b36305ba46fa7e646495316dc083976cae9181bcff66d6bc3fe1d71fb16ca5b54fae619aa55fd7b8794f6904d8d68e653f0e0872cf1611db08a35b8dcd40145fdf6a79a0f63535e7eac53809cde18fc197c4779c47377289a288a5e66303f829958e5ffd90639f7b576a6813174ab6ad74794e42f045e75fff95bc53053d265c4fc5e3b846b1bb0266fe6adfa9b6251df47bdd8b16b0ebbd8a47ce783db2f558c0ec3ac42cb7ad34ba1482dc35bc09590dbf1f2492c3cb9697ce67586ff743423448e2dc2519d8ed4cf047c5e749ac47ad0be00d0be91693b7974bc2a7b53a1e1771c88c52204afaf7baf5f2326ae299bd0bcab1cc92831ff339a1a2b6f67b9cb4dd081fcee3c46c6a6ca8bf53449ab214caf09176fba267ff523a323cd433ae3d19b4fc504bcf102637f3f7f26a3b94a55694eb5a482d5dcfff4f36671c6d84f412de5c631694bc41d5bd3fec4c6cb40d0cbcfe9d64d9da30fa5fe3d57c7d48595562c12809af61935552173ac14dba797fbb1e7ea8e502f2e9eef58ff32da3eee1b40133ffe21176db385496b0d317835002344b5a2c4dd81818651422bcd6fecc7ef835147a60d813a7a1dd5129645429d3378058b1298cb258da89b21b14caa2ac85ea672a275189f346f966d8a19cd7ecccddd09b88e43a4ab3184ec9dd4d1d3c1790e984684604bf6149fd80a85b1c3e3c6f87150a733c94c4393169319fbd7693abb022f9fa99d923d87a95a45accf0883d280f054d744a55ecde65283464a10b6a9a5e8457076c7bbe866d13422f609eb798f5bbfc0769f7b91cb42273d7b7da0fc37700554156d7c73f3a0db0f05b2fc81113815c2df28a2ee9d51f1712c603f91cc83e70616820666de82cdadb126128ffc5ef436a740483e0769c69db1a607e55605e525ceec7cc1d586cb1f654831844daeab4d1680594aa0fb382fcf1f96a804216131022e646a3e4549b7568c52fa79e1de97dfa0aa4d57bbff2b427649a1fd30993f5c66f243f608f8e18e59dcbd2c62abc0dddf88420c32866808f327e98d202874e19f4693d6bbe582ba953c87ca70faf157dfd143e55419596e16bf41cbccf1ef519c980428a77f0bfe109577646b9c861f1481b1bbccaed3da915a215155bf6943a319f982613331472adf5802e151ca3ca1331f9a484850bbbb2bf0193ed76f2f99b619cb5712d3d88846d92e26a3af6e30cce43dceeebb9102a138d7d7ded04ec46cec89be9ea08a43cfe9b84c890aa93a5f59a1b26458ed862adf710ec263762676ebf741bf2fdc674a9acb32f5ea29256e339a14d7e9052b799ac011bbf72105452015e1cbf3efb8e5d435b721072f3f862c4ec3da9fd3791cfdf0931723b9435cbf290f53eaed3a50c7f22c6f382eb556251e24e714219189cade33c05f56273a85837467869b5da8daae6aa1ba0b42d162514698bd723df6843dc7f2356b65a4f3da3a96a68cd61c3a645498277d0a27c9b56541a9d45cc71819d9743bba7eaaff3bd59a1da0a86e53e9ef9954048527f69767331702b03977ae87419dc051411b1a200a1c4482b3ad40b06290ab632cccbcd552fa4d133358f8cdc03131abc8763e737bbdb414d522292caf23759d82534f0d04e8c130ed75d20dbd0fd26522b62ad5e55a62d8ffba3b30cf38f2e1c8323e1e7f3aad8d53720ac0871b4795a961d47513edabf1bc8ac2e5d48b2fd3f3e2821762f8641f4aa2682cbd379925a654bf0c619bb5f5f9195ce4d9ce63f1715428ff9d0590f51fb6cde7422e249b772bbbe9445c5c5315d7697980e6efaf71eb70bb94369621f5bcfc0f9bb3d86fbd1fa7aafdef49d53870660c5fc1d615b30cafd965e92cc688197afd93e48e6f5e2dd2be46dff3a109f38ac59a520b32c0b721b24d9310d881fb8402548af34b290eb28ce9fdbc3f47f3e89988996d9195266f33796822f3c47f6a42afc43d436755642be1511ad28a97b48543ef45b35d7442ed47464f1e362687d885f2c69f9714b4824e4c039098e05723d7f9a11574ccfe632691159ec918e9029ffed2b90b939940e257b2f45681a8be6fe55c0489d720c320b4e05d3a8462a1b6134f9cb07da110b7ed3c240902eee1376671e87f480713654f11e0c57a281f584fe4daed6895e82f697cdb8fdae9c3c17b5382df014093d25987d5ede5e92570b1fc34df97dd4caf83ef8c063b741d16caf35e9bfbd3823ac15856d329037d20190522c4dc1c03c443137d9e8a35da25b299d4946c52c9c278717d7bd8375b14f08935c8442b9948d8e0c9a3205625cc5fcdd4bd8a454b3a6c3ba2b375bbeacee40f12857f5105d9f64e3f2e28d3f27a1cde651d2cbab5c5b5add1faa47138b0fe5df0b29949dd0af7eead622006113c9a87fe962e8bf79940fc3d183777a8c1984ae2209eed087f7b13c94c19d95ba34b51ff75c868fc4b3f6af64d4f5f78efa191147ac84a9c70e4c9b58f53b111c53bb0d1e00f8aa5f9892e19a9db00abe109cba49eaa2dec7dd82811aaf0baf7584b31bd1d1b771512ccf6d05d9a9b60df0900fcf4b38664717e5b4450b0cbcda0a085e01751af303503a32a2e6e583154aff0a9b34b08451df0b75170300ddd3b941a8676edcbb919553823245c6188084a5e1100405597161ecb8754d551b83204a00b1148ffcfdfef0ae6769f2ff1e994bf7ae46525432a7431641329721bbca509b22f3558c6eef6ccc658a92667e6f88c2c82efdb0185c966b7c5756a1b8abc312ea7d44b97701bc060a8f6325a9c2fe5a10d48bb65f555804420f0d0f0323f39e0188fc25660a26ee848a66c892fe09ec944e9f45a4d5601f59df1d4a3583564ee88bda591e2cff30fdc073c47048bdb47f6a481d8e20d29b70a010ee8a5921f40619d0d547d8366e12a94034ae62b043d40a66c696cc5c14d5206490b562b1d9ac42586b71951db85d8c35281d0f03d466dc872671d6137bc2d1d4f8f97c6987fe1ba5e7d943fd18ccb985f661d207ef7ef1cd5eb229630c7fe1e2032f35bdd3d2240d427e0ade4b97d3e0ad26a3e497f92ee859f43bf6b0111fabc46bcdcf34b76c7e7500482db149d26a6a224c1d7ce9e3b491d0a02745b408e834c2a80dd1088d5a99d89f736d28ffcc08f0c13f20962d37d946060d56380ff2bfeaa6a04932b4293e5d2210833b9eceb9fe44141cf6f7995ac5caee19d012ca8d6a5fe45abe60fafba0feb37fc9a0f3a95a1b6361777d29aa089c17d652fe22868d18c8a617672ac2b19ee3a31fe71a9c080e0844fdf5ea58ccf915ca2fb03efb696482a89f5b992a798c7bc0e9cb17f38ace73f88531ec1f79bd3075ad989d527bd81d22d55f86e7bf04b8ad1873dc93099636b371a1fa6dc45bc417c7d768fa7b15edd8c136621e8b819669e52998f0f4c0458c1e0a8a555a63be2457a490bbb72f02e50d1321eca92f6e9996f7a2c00e6ad76a6868f1d0540cbd45b44a", 0x1000}, {&(0x7f0000006180)="63f484ebc69e462624225a8b7b2168b967891ed60ee7ccfbc458e9bb7e1b50283ac1f0", 0x23}, {&(0x7f00000061c0)="34d736b475c02b0e1058369e4f8f84085be6a13952b6d3c089844edf370f4b83084a329753a3637848fdf221ad89bb11125837692fd72041ab551d2d4edfbc36a0acc4a22165b524cb498c73d87ba21e891709a226b32cf71ebffbad0acdfa1a5062f2e799559578d0f9725017f63fa03d00daacd5a006154d77e11d5c845f8a0a4b78ee2e36205c0e9a388d9d8c1d7c1507919f284e296266ec2b8a3dcd42764145fbc9d7c1080c165d2b58c2e328fcf8eae8956c894ab94e52a599f1cf7675fbea771c1bb08cccadcbbb0468c2953a93c3bdaa316b6bf09c3c78f1d6860e4fca1352248afe394012102b537276b824506f8930a23c6e7e519e763a5b42e45066d6d910f0bd9b2c42f30cd2ba1f1d7f1e70cee7c6956bef7add286a56bb0efa09a413528224203de2d5a1cbc91ac4dc54a871784c5c8c973bf10ac32a3be355e9b2cca4922fa328316d943dc37c16957da6ba1bdb3057740e72e9d5a58da4e17bab278ddec581e6f562d418a4026654e01b500cb8ac2023e22fddcd0f77f03a413cb35a757593af6f68da4295daad0a93a6624e412d58a7ea2662dfa504b6e02eb3eb35be1069c56a75f56f8832b79a433b5bc6f987ff03767adfd3f81d7d53758566a97e37a13e441cc69e1e23bb96efb91bedc9b34dde4886e8ddd9c8487cf9977b6ac3a547fef933732b6377807b1325d86aec626734bb27fe0414a8d8d6b0d105f216ccd45e7211e3035966cd39aac994fe67944d56e472f5f2dfce4109284edf677dbe382bfde4b593d3beaddf4f15625906cdd45f6146c926b68fb90a0378cbcc03c77df551a37a299a3823b050ae0ab55f114bf3516c2e8572e9a64b6db35b2fdb063f67cd451138652a9500c71ce47944b1850b6a44420b28f0856e9e13b2a4af1b256920d4508b56ca89039378a6e33195b63f058d96292251114eb6584984b4f75124f0769a3b5a482240f7385612e8ea0887856622ff3c824d07fd3522f51c8fffd0fce8cbf6ca37bdbb534f323b49844ceeb5263a23227eaec5e267a74a24ea105b798114856af6455e848b37a4b9ec07adeb25bdb0f8a5eec2c10fefaf2bf46f7e91e67fc1e73da5d1c19867717c608622b118abd5d2d0dcc82422e6afaff461fa219f765eb57508d4cde6f810d2e9aed46876d68c19e20d77f2a13aed583f0de6708c9a3c9c6fb40a798ca86d087146ce93c7ddd66c7e89898629bffa72fb3d8ee75d3ee8a48f68c5bb3b9b22c446f5b945f6b067f474259fa4db6e669e64ef67e00b0f0b26eccdda17108bfe003cb3605a2b987bc73a1f72b55f1d3913d5bee8ac99ca59a539e78ef5707424b50b6c6096d94c40c8ff299eeb1fc534d76ad1feea5a7ec701a2d62d234e41dba13cb2e1ffdab6da6ebb72fff706a9a7b1dd34bb579069cffdd089416c45b6e8777c91fb82dc60b98a21d6741170c0f6b522b17222e19445e3af3f31fd1dd5e9362af7e6f970ba78de64901a572841e5a91d9fca3f77b6c9f88e66cb823f10af63fdd3a9810a7d4f27fef1026c4950bbb61ae8a808dba139039a5e219dca0c2650bf73c90d6e90aee5754664dc7f7fbf3adccfb8e077cb373c39b733531a28278fbf522200dd501db7e69991139ba318e0fd72f39efb898325a15374b50734753472c450aeaa32c69ae0f7d052e2dd8ec67d310403d45432b3eaea7021c0147d4a5ec90f54db1f3c434b85544250a04f2bf47339a5a711b26b5dfff0bacf990ae65c753b422d66a6b787117540d5f2f1f6c6a5d3b650660ca5f8be05789eeadb3d681d3948edb98b200e1e3f9ab6c96adfc9a082711d17bb01ac61ceac6882a9e1bdaa37d845e1d1c730b73c672012f27835faf4cec46784b09c1fe36a89648b6af50b54f1799bd948a7544933298a349a73584d2a958fe7466c5c768ea3ee0aa7bdc7d4cdc58c9adef25c20308d7a371ac03d05b08d2f78ec8a4708fd43f1fb20c0ff80d18b4d9e071802db5639cad71bf0ba73c1763c0593bfbb66770cac76028fd2da697487a36632194616eff48cb5415934dd48e7ce364fea715dfb50e5000c4cc5cce1aac0b13c73719ae0bb867888edb06d93c3c4ccab104190dd72659620aeb830550f052690fda4cb2936376ed5c4564751398d9385612986ccd4f22ea926fffe4fcb2d47c56b746595d7fdb0fc50cad313475fc5089d13b00edb7e764c29375bbe5ddfba2a4b4ded729d5a13b2bc9591560ce3749e5eda8aa9fbb42e2b17facf859fd63f239b17ea143115699fb163e55a4899a9d1e8c18ee91201b12c6edb298b4f1a091de06ee64e9aa32c5930e9b5620a6f491d24593d0676b06212a637766a060edd7ca59e313f299a18bf8b3ef88755462c6ee3841b67e92dd4ef9a3b7e3fc5630384c227b0c8c76290ea37dab50bae8b3dc454b7112315454c290b67a26ef7cc447cb3c6f0ddba8ac2d0c52c3c9719e7fa6870c68cc2074b46caaaed8ebeb07aaa653c24dc34f6536208144cb4b9d934a77a05b2ab009f6baa332673017918d46d8a55b30c635b9b705fae2ad453827f1732358c357912225c790ba5a5f2508aab4a5cdf64515d0673e985cfdf6d70c83dba1b061d877c83b788edfec2f8fdc46a85149fb07c9bf27ad3ffce4b359144cffe2914b5d4ef6f7e87d9fa509ee569a7c81182775854f2cb51aee0f8414651c76aeb8dd669f77b61d690082f9633d29f015a8b7a50f8efe65d0774fbdeefb7abfc600f2795cb949024137cb893609ded80b817aea59b84a12d3cc4d10e260cd060fb50cb9ed26f2058be059f42a58c7d99e484448b5a2f058a2ebbf5d2e7e3568b85b10ae2d8da4ac15196b78a3620fffc44c7ff569a233b013e6c63cac4443a65ccb33088abf8e234e27ec13b5d4066c0c01ca1a08d54ad046703bbe8484e2357fbb3ae5c495ba8bd247a0b7f1433bc8aa3cf6df1008baa492a793869b61d35bb8bedbcd7b6f42721a2b625ee7397593a5ee73053beeb587cdf3550fb85904accaf9b6b856fc99ca1d3fe1e1762d9093a738ea98dd1a06bcf51ac0e97feab7145dbc29153d6ca3ef4890a9f5620017c12b7d9ff73c40b2d1d6b225f3c79a771fedce5357604271bfe58d6fa9ab42fda47144a2459ab34334287f8d6012c0a6fd6424600c1a74cb01009664f21282f29b1cee29f6542ffc950427467aab1efaaa1f3228bbb3bbd42abc1a426fce1c45ffb29b6f0347cf199d6004a1e0dd0628fe3815f2ee9846e12d53cbcab292dc8c8fd8c7d7cf8ea3ce21a0e98896fc69a05ba78d13fb6e5d97db86b0a72b3b48ccbd71eeb9069e70b2c6ee9611224660e9c2c502f92743c47565536b837e9e3608372e06721b22a19fc3c6e5670ff221a125fed0ae8cfbf681e7eefe0af68d0f21a9f80bbfec620e0294bcba751a0967a0b3fc7a808bcaf2e197774f79f5f22a9f5ce244013ef5a4ab3c4c46978101f5ebb9718d4607bf67b931b1c2e1a5c01e42d869d8c62d0697efb1acca30c8cdf842d045bca1f13c829bc0d3dd897bc6ad4d28059b99f54b4729e5ff102a89672ef9a143ea44b97e0a3d65959710a9b7c51f1052d6d7284ab221b4920bc8216b38cc1bf0b514bbbc80d16ad52b8dd7faabee347fb3005c96d259c4f9a0ecbd235fe28c44d581b4e670b94a11faeda2efb4434ea3fbd5d9ae6eb63ab7461dd59960b18508829cd694332cd7d05a1ec4845660be0f450852c98784895c29a82fb2d1ec64f2610efcdaa0d4edfba2f92cd3f89dbd37b8eab75236c6c8582aac8f7b7f34a15532f174722c99d4dc5d72666d35204ae0f349909485a7743f0ad60557c576580bbe017cae3826b557be957eba778991a7f48281f664ff773506c2a9fed4bb0dc210812d29a0520ce18eabb6e65e9bea0920457f0b433f80eb94b709567dc19ae42ea0d761ff366286a9058c997ee0152ee3e180fa20ec1427cb8ad8442ee4fcdea62e476abc62074201a5737458dd4d50a2faaf7f0fc4f9ea528b90a891994258efbf1ac161d36a5b6ea30f3025eaff6a6edbe5d4e305cd61587588c1ea6e6270ccb799958299624509a5dbe1df6074106795d4a5bdc08cec723aebcabd54a8d402239099aab4e85526ec4b0c3f61b53cda208da098d275c78439f5867444453a4bb45914ea024d88ff55d7d8483ca6901e498ff534e3787afd8fc8d75707f55dea1a9d6509eb0aefc289744b6ffca45e8dd9342e4e0bed9acebe87a06bad786246717e88785cee653ffd5fa9207eb30971fcf32b2c351eb766a8b51e9712885499bc1061fceaa6d0558ab923f5caa3eee56d967c0d3b82b91e2a0772752861a274eb90e8b3629dd709715ae686f74ed594d334df5a6e1ed172ca637bb72922f9f29437320ad098d763de524df5c9aeddf2d50a61eb47d27a75e80a2e29d73ee9af2849f01248ab5471f22d5de0fab13957e4f24bb7472b6e1d3b0104bdeb612935234255771895a87a5a2597b8f1d45bd45eca62f36fbe8941d40faaeecba69abe8f170e69e2e470a53729b9d9c2e841102552c7cb24c98396c4ef4899cd35392cf4ddb3121cc3c299b2041f3805173a664cd414e983372487e23c5627c4ff056d7aa3d4f32bf78093eb82804e18d5315d0dc3b54f40a51911cf78deedc1d3e5faf67f2fc4f1116c39dd05fa4ed1f37bae3a4096096119b1b66ae27eaa4dd661e0621bce92b293314e9cd48f0c16c0562506d205e82a97a4a9a3602f9194c95f66c1fce531575f9d8d29b0c207a132434f71af7a619bbc3d9e7d34c00f90addd8eca4709985dce7b700281891e4ef622cb20126adc266076df5a464c32edc967679f5faebdbe893d1390af69e1fb4c1423e4a2521a7102f8341b02c730fb5ac41aff202c465dcb1d3c41043595ee261576a463fa1427444ce63e0914184c33b4f8a9bae5613d79d33962b6ceb90dedaccef19a8b73aef9460d758cc173e0e9195e06e68ec9c1e86e00d2fe7bc7ecf1c925eb2b4cb768f38bca897206d4935320e5b612bdc78cc9946ef9a7b10b8451e22f7aebb4133d6c0eebf2a45cf2343fed864b9f4a811450ec3b2aa6527b4e9c543b148059da805d51efd63d302c847916d7a38f5a62c69fc791f95c809e449e3b5c59ed191a401eb636324847d49005dc0f5fd39c55186c11b847912a9aa37f934b154644352b06dc958784f6b17fe17b0e6c18d5cd7a0d69e82a40cd4381b36e3aac7eba1ccc8ffbf7870c669304e54ea85b16ad32b35876d696590880dfd95da915511b7418c83105466f3e0cc4c7d53db0947632cf7bc64f038bea0ed9759ba9faf5622c9cab970e4a6764ba1a3712d0115711a4194763a0231d35b3483cbd781869d9fe785b2a32107ddd377e87b0584cf9952fabe998b2f4435bc9cce47346488dede2911060694e42318e30bd7ed6fd3e0dc0d70ff5c0f011ec62097e962a6a5088ddc838d8de7780de177a43f9deeef97385d200f13d62668b58f1b5d6249b58ceab07efa1971ad83a52623a9921cb79a21a3bbc48834c2c8729d80ba4064fe5ed0d7eda127caac63b786115500556e3d906c85c55796a06810d81d61681e07200f0651ea71d5849e2520cd11a202781a0016c6a0d25a8490407c54834b047c57848eee0e6e41b5668993ebd6817e02ef9694294484386cf7d7d02e79305502b70ac93364b20855fcec7d830ed3af999a320a5c9bf27ada4496ff62e6af772737192b7118b7ea2fa4e311e1c47bca844b037b995976b364603cb6d83fe54bc371dbc73e8cfd6cc085b980d71dd1cf12def1b5c6449c3101cfb4f6bed7c707", 0x1000}, {&(0x7f0000004480)="f153ea2512ff8f9b1aff492b9150d8d898740704fea3b4215aa179133248e3237a4a2f5b328b985c4a06be13ac609894c9bdabc2c60af4251a9a744a01c7224d5d0d5f1112a1820a1cd3f9", 0x46}, {&(0x7f0000000940)="c21f46b39178c234f95c6d6a68715780f042f9b456b0be79aa230b77a4101dfb2d047655264f17df8d2414a0e1eb522b47f4ebdbe84e02943e3cc7fd3b4f0d05d2504e1c4c3bfba1fdc221f3fe2095b470805b20815bda766705a4749aefd4aa2b1519d9c12b49fb92b203e814f0a3a80c5dbbf67883e40019df79289e969a3e1ce755964b746267f3304cb296fb593091196ed83f0deffbe714698ac5c6aebc21f0108b792a53c34c84507d4ce8129351de34968a55cb978e6b4683cfcc071f39cf13e1480c206c0e26feabbf6b83d59c80848c2b0bc54a22890953812f07e98af95e1ba2", 0xe5}, {&(0x7f0000004180)="ca4c69a7ba7563955cb76a1585bd0adb3965c801325150d213d5b0cf13629dc81f73d31e838f44632462629dc7dbcb6e01113d9ae67d5e31fa35deaca1fb23893c3243abab9403fec6939c520020399313646ce25bfcac5442d831e96af4ea563fb5465d9e23c879cbce5d0d8ba39bd64c06ff45169d357b266942bd3a2079d8aa31cbdf6e0ad77c6f32d5da8d4f397bd0a5c0cf67d8062526655de30d79e73bc054c8b63da7ed3e57921fc931", 0xad}, {&(0x7f0000004240)="34e0ea0ab4c8b7aaf3b60751ecd5bb2cb3039911ecce7ddfc7b80e5f415cbec43d14fd33d91fd26cc139bf", 0x2b}], 0x7, &(0x7f0000004300)=ANY=[@ANYBLOB="80", @ANYRES32=r0, @ANYRES32=r2, @ANYRES32, @ANYRES32, @ANYRES32=r1, @ANYRES32=r2, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRESOCT=r1, @ANYRES32=0x0, @ANYBLOB="00000000100000000000000001000000010000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRESOCT, @ANYBLOB="0000000028000000000000000100000901af0000", @ANYRES32, @ANYRES32=r2, @ANYRES32, @ANYRES32=r0, @ANYRES32=r1, @ANYRES32, @ANYBLOB="14000000000000000100000001000000", @ANYBLOB="c003c45d6ec36f8f641cc7198d03e6b9026871e76347b3eae6a194cb7501f797fe59b6a217", @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES16, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r1, @ANYRES32=r2, @ANYRES32, @ANYRES32=r2, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0x130, 0x40080}, {&(0x7f0000007780)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f00000079c0)=[{&(0x7f0000007800)="691bf6e59afed37232395504d79d3076050bef89f790f8e9cd0f96", 0x1b}, {&(0x7f0000007840)="051b075c8e10dcf9039f09b428ad28dfd1a105c00fc3c9310fb863c7ed745931b68df2ec169ed9a24ccd73e05fb1182b4a6bcc43bf310c241fc1a4b0ca5f2b7bcd626710656d454b3fd5e3c63f5365b23f51b0a9bfcf", 0x56}, {&(0x7f00000078c0)="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", 0xff}], 0x3, &(0x7f0000007ac0)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, r1]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [r0, r1, r0, 0xffffffffffffffff, r2, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, r4}}}], 0x80, 0xc051}], 0x5, 0x2000c004) splice(r0, 0x0, r2, 0x0, 0xed08, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/sync_refresh_period\x00', 0x2, 0x0) futimesat(r6, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={{0x77359400}}) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x14008844) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="400000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000200012800b0001006272696467650000100002800c001e000000000000000000e8b20ad208e542aa3ee9b1e02d2164a625be313bfad01a16e551a17e66a2e5e298de7dabec57f3718f1ccc45faaaff0eb616a2fe49076333b839e24607a216008994dee339ae"], 0x40}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) r9 = openat$random(0xffffffffffffff9c, &(0x7f0000000000)='/dev/urandom\x00', 0x210881, 0x0) r10 = dup2(r8, r9) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xfffffd88) r11 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cachefiles\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_STOP_UNIT(r11, 0x6) [ 281.012100][T18546] ? security_file_permission+0x50/0xc0 [ 281.017643][T18546] do_sendfile+0x809/0xfe0 [ 281.022065][T18546] __x64_sys_sendfile64+0x164/0x1a0 [ 281.027264][T18546] ? do_syscall_64+0x19/0x1b0 [ 281.032034][T18546] do_syscall_64+0xf3/0x1b0 [ 281.036643][T18546] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 281.042615][T18546] RIP: 0033:0x45ca29 [ 281.046490][T18546] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 281.067108][T18546] RSP: 002b:00007efeff606c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 281.075518][T18546] RAX: ffffffffffffffda RBX: 00000000004fc540 RCX: 000000000045ca29 [ 281.083651][T18546] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 281.091613][T18546] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 281.099570][T18546] R10: 000080001d00c0d0 R11: 0000000000000246 R12: 0000000000000005 08:39:35 executing program 1: r0 = socket(0x10, 0x803, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000005540)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000c80)=""/235, 0xeb}], 0x1}}], 0x1, 0x0, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendto(r0, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000b80)=@ethernet={0x0, @local}, 0x80, 0x0}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000ac0)=[{{&(0x7f0000000880)=@caif=@util, 0x80, &(0x7f0000000540)=[{&(0x7f0000000900)=""/128, 0x80}, {&(0x7f0000000980)=""/76, 0x4c}], 0x2}, 0x3f}], 0x1, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_SYS_GET(0xffffffffffffffff, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000a00)={0x0, 0x30}}, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x374, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x14b}, {&(0x7f0000000140)=""/85, 0x20a}, {&(0x7f0000000fc0)=""/4096, 0x773}, {&(0x7f0000000400)=""/106, 0x2ce}, {&(0x7f0000000740)=""/73, 0x3dd}, {&(0x7f0000000200)=""/77, 0x96}, {&(0x7f00000007c0)=""/154, 0x40d}, {&(0x7f0000000000)=""/22, 0xa}], 0x81, &(0x7f0000000600)=""/191, 0x41, 0x14e0}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) [ 281.107717][T18546] R13: 00000000000008dc R14: 00000000004cba16 R15: 00007efeff6076d4 08:39:35 executing program 1: r0 = socket(0x10, 0x803, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000005540)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000c80)=""/235, 0xeb}], 0x1}}], 0x1, 0x0, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendto(r0, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000b80)=@ethernet={0x0, @local}, 0x80, 0x0}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000ac0)=[{{&(0x7f0000000880)=@caif=@util, 0x80, &(0x7f0000000540)=[{&(0x7f0000000900)=""/128, 0x80}, {&(0x7f0000000980)=""/76, 0x4c}], 0x2}, 0x3f}], 0x1, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_SYS_GET(0xffffffffffffffff, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000a00)={0x0, 0x30}}, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x374, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x14b}, {&(0x7f0000000140)=""/85, 0x20a}, {&(0x7f0000000fc0)=""/4096, 0x773}, {&(0x7f0000000400)=""/106, 0x2ce}, {&(0x7f0000000740)=""/73, 0x3dd}, {&(0x7f0000000200)=""/77, 0x96}, {&(0x7f00000007c0)=""/154, 0x40d}, {&(0x7f0000000000)=""/22, 0xa}], 0x81, &(0x7f0000000600)=""/191, 0x41, 0x1538}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 08:39:35 executing program 4: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x20000000003, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00'}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newlink={0x60, 0x10, 0x1, 0x70bd25, 0x0, {0x0, 0x4, 0x0, r4, 0x50800}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @ip6gretap={{0xe, 0x1, 'ip6gretap\x00'}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @ipv4={[], [], @private=0xa010100}}, @IFLA_GRE_REMOTE={0x14, 0x7, @remote}]}}}]}, 0x60}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00'}) 08:39:35 executing program 3: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x20000000003, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newlink={0x60, 0x10, 0x1, 0x0, 0xff00, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @ip6gretap={{0xe, 0x1, 'ip6gretap\x00'}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @ipv4={[], [], @loopback}}, @IFLA_GRE_REMOTE={0x14, 0x7, @remote}]}}}]}, 0x60}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00'}) 08:39:35 executing program 2 (fault-call:8 fault-nth:40): shmget(0x0, 0x4000, 0x780012c9, &(0x7f0000ffc000/0x4000)=nil) shmctl$IPC_RMID(0x0, 0x0) shmat(0x0, &(0x7f0000ffe000/0x1000)=nil, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x2, 0x1) r1 = open(&(0x7f0000000080)='./bus\x00', 0x430c2, 0x0) ftruncate(r1, 0x200004) sendfile(r0, r1, 0x0, 0x80001d00c0d0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) [ 281.273740][T18596] FAULT_INJECTION: forcing a failure. [ 281.273740][T18596] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 281.290144][T18596] CPU: 0 PID: 18596 Comm: syz-executor.2 Not tainted 5.7.0-rc6-syzkaller #0 [ 281.298838][T18596] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 281.308891][T18596] Call Trace: [ 281.312194][T18596] dump_stack+0x1e9/0x30e [ 281.316534][T18596] should_fail+0x433/0x5b0 [ 281.320958][T18596] prepare_alloc_pages+0x28c/0x4a0 [ 281.326071][T18596] __alloc_pages_nodemask+0xbc/0x5e0 [ 281.331361][T18596] __do_page_cache_readahead+0x1de/0x4f0 [ 281.337000][T18596] generic_file_buffered_read+0x4a5/0x2570 [ 281.342819][T18596] generic_file_splice_read+0x452/0x700 [ 281.348369][T18596] ? splice_shrink_spd+0xb0/0xb0 [ 281.353303][T18596] splice_direct_to_actor+0x3c1/0xb40 [ 281.359090][T18596] ? do_splice_direct+0x340/0x340 [ 281.364095][T18596] do_splice_direct+0x201/0x340 [ 281.368946][T18596] ? security_file_permission+0x50/0xc0 [ 281.374475][T18596] do_sendfile+0x809/0xfe0 [ 281.378946][T18596] __x64_sys_sendfile64+0x164/0x1a0 [ 281.384225][T18596] ? do_syscall_64+0x19/0x1b0 [ 281.389061][T18596] do_syscall_64+0xf3/0x1b0 [ 281.393668][T18596] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 281.399643][T18596] RIP: 0033:0x45ca29 [ 281.403520][T18596] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 08:39:35 executing program 1: r0 = socket(0x10, 0x803, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000005540)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000c80)=""/235, 0xeb}], 0x1}}], 0x1, 0x0, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendto(r0, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000b80)=@ethernet={0x0, @local}, 0x80, 0x0}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000ac0)=[{{&(0x7f0000000880)=@caif=@util, 0x80, &(0x7f0000000540)=[{&(0x7f0000000900)=""/128, 0x80}, {&(0x7f0000000980)=""/76, 0x4c}], 0x2}, 0x3f}], 0x1, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_SYS_GET(0xffffffffffffffff, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000a00)={0x0, 0x30}}, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x374, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x14b}, {&(0x7f0000000140)=""/85, 0x20a}, {&(0x7f0000000fc0)=""/4096, 0x773}, {&(0x7f0000000400)=""/106, 0x2ce}, {&(0x7f0000000740)=""/73, 0x3dd}, {&(0x7f0000000200)=""/77, 0x96}, {&(0x7f00000007c0)=""/154, 0x40d}, {&(0x7f0000000000)=""/22, 0xa}], 0x81, &(0x7f0000000600)=""/191, 0x41, 0x1540}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) [ 281.423282][T18596] RSP: 002b:00007efeff606c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 281.431662][T18596] RAX: ffffffffffffffda RBX: 00000000004fc540 RCX: 000000000045ca29 [ 281.439605][T18596] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 281.447550][T18596] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 281.455521][T18596] R10: 000080001d00c0d0 R11: 0000000000000246 R12: 0000000000000005 [ 281.463482][T18596] R13: 00000000000008dc R14: 00000000004cba16 R15: 00007efeff6076d4 08:39:35 executing program 5: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x10, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = socket$inet6(0xa, 0x1, 0x8010800000000084) r1 = socket$kcm(0x2, 0x3, 0x2) recvmsg(r1, &(0x7f0000007500)={&(0x7f0000006f80)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x80, 0x0, 0x0, 0xffffffffffffffff}, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmmsg$inet6(r0, &(0x7f00000000c0)=[{{&(0x7f0000002c80)={0xa, 0x0, 0x0, @loopback}, 0x1c, &(0x7f0000005000)}}], 0x1, 0x20000040) 08:39:35 executing program 4: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x20000000003, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00'}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newlink={0x60, 0x10, 0x1, 0x70bd25, 0x0, {0x0, 0x5, 0x0, r4, 0x50800}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @ip6gretap={{0xe, 0x1, 'ip6gretap\x00'}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @ipv4={[], [], @private=0xa010100}}, @IFLA_GRE_REMOTE={0x14, 0x7, @remote}]}}}]}, 0x60}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00'}) 08:39:35 executing program 1: r0 = socket(0x10, 0x803, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000005540)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000c80)=""/235, 0xeb}], 0x1}}], 0x1, 0x0, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendto(r0, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000b80)=@ethernet={0x0, @local}, 0x80, 0x0}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000ac0)=[{{&(0x7f0000000880)=@caif=@util, 0x80, &(0x7f0000000540)=[{&(0x7f0000000900)=""/128, 0x80}, {&(0x7f0000000980)=""/76, 0x4c}], 0x2}, 0x3f}], 0x1, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_SYS_GET(0xffffffffffffffff, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000a00)={0x0, 0x30}}, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x374, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x14b}, {&(0x7f0000000140)=""/85, 0x20a}, {&(0x7f0000000fc0)=""/4096, 0x773}, {&(0x7f0000000400)=""/106, 0x2ce}, {&(0x7f0000000740)=""/73, 0x3dd}, {&(0x7f0000000200)=""/77, 0x96}, {&(0x7f00000007c0)=""/154, 0x40d}, {&(0x7f0000000000)=""/22, 0xa}], 0x81, &(0x7f0000000600)=""/191, 0x41, 0x1558}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 08:39:35 executing program 3: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x20000000003, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newlink={0x60, 0x10, 0x1, 0x0, 0x30000, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @ip6gretap={{0xe, 0x1, 'ip6gretap\x00'}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @ipv4={[], [], @loopback}}, @IFLA_GRE_REMOTE={0x14, 0x7, @remote}]}}}]}, 0x60}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00'}) 08:39:35 executing program 2 (fault-call:8 fault-nth:41): shmget(0x0, 0x4000, 0x780012c9, &(0x7f0000ffc000/0x4000)=nil) shmctl$IPC_RMID(0x0, 0x0) shmat(0x0, &(0x7f0000ffe000/0x1000)=nil, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x2, 0x1) r1 = open(&(0x7f0000000080)='./bus\x00', 0x430c2, 0x0) ftruncate(r1, 0x200004) sendfile(r0, r1, 0x0, 0x80001d00c0d0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) [ 281.760300][T18624] FAULT_INJECTION: forcing a failure. [ 281.760300][T18624] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 281.787807][T18626] IPVS: ftp: loaded support on port[0] = 21 [ 281.799763][T18624] CPU: 1 PID: 18624 Comm: syz-executor.2 Not tainted 5.7.0-rc6-syzkaller #0 [ 281.808462][T18624] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 281.818763][T18624] Call Trace: [ 281.822039][T18624] dump_stack+0x1e9/0x30e [ 281.826346][T18624] should_fail+0x433/0x5b0 [ 281.830773][T18624] prepare_alloc_pages+0x28c/0x4a0 [ 281.836038][T18624] __alloc_pages_nodemask+0xbc/0x5e0 [ 281.843400][T18624] __do_page_cache_readahead+0x1de/0x4f0 [ 281.849882][T18624] generic_file_buffered_read+0x4a5/0x2570 [ 281.855679][T18624] generic_file_splice_read+0x452/0x700 [ 281.861310][T18624] ? splice_shrink_spd+0xb0/0xb0 [ 281.866331][T18624] splice_direct_to_actor+0x3c1/0xb40 [ 281.871692][T18624] ? do_splice_direct+0x340/0x340 [ 281.876952][T18624] do_splice_direct+0x201/0x340 [ 281.881792][T18624] ? security_file_permission+0x50/0xc0 [ 281.887322][T18624] do_sendfile+0x809/0xfe0 [ 281.891740][T18624] __x64_sys_sendfile64+0x164/0x1a0 [ 281.896922][T18624] ? do_syscall_64+0x19/0x1b0 [ 281.901598][T18624] do_syscall_64+0xf3/0x1b0 [ 281.906077][T18624] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 281.911943][T18624] RIP: 0033:0x45ca29 [ 281.915823][T18624] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 281.935489][T18624] RSP: 002b:00007efeff606c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 281.943873][T18624] RAX: ffffffffffffffda RBX: 00000000004fc540 RCX: 000000000045ca29 [ 281.951827][T18624] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 08:39:35 executing program 0: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x20000) ioctl$DRM_IOCTL_SET_VERSION(r0, 0xc0106407, &(0x7f0000000040)={0x1, 0x2, 0xffffffff}) 08:39:35 executing program 1: r0 = socket(0x10, 0x803, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000005540)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000c80)=""/235, 0xeb}], 0x1}}], 0x1, 0x0, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendto(r0, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000b80)=@ethernet={0x0, @local}, 0x80, 0x0}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000ac0)=[{{&(0x7f0000000880)=@caif=@util, 0x80, &(0x7f0000000540)=[{&(0x7f0000000900)=""/128, 0x80}, {&(0x7f0000000980)=""/76, 0x4c}], 0x2}, 0x3f}], 0x1, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_SYS_GET(0xffffffffffffffff, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000a00)={0x0, 0x30}}, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x374, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x14b}, {&(0x7f0000000140)=""/85, 0x20a}, {&(0x7f0000000fc0)=""/4096, 0x773}, {&(0x7f0000000400)=""/106, 0x2ce}, {&(0x7f0000000740)=""/73, 0x3dd}, {&(0x7f0000000200)=""/77, 0x96}, {&(0x7f00000007c0)=""/154, 0x40d}, {&(0x7f0000000000)=""/22, 0xa}], 0x81, &(0x7f0000000600)=""/191, 0x41, 0x1564}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) [ 281.959774][T18624] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 281.967729][T18624] R10: 000080001d00c0d0 R11: 0000000000000246 R12: 0000000000000005 [ 281.975672][T18624] R13: 00000000000008dc R14: 00000000004cba16 R15: 00007efeff6076d4 08:39:36 executing program 0: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x2d3, &(0x7f0000000240)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="140000001000000000000000000080000000000a20000000000a01000000000000000000000000000900010073797a300000000070000000120a0100000c3401044000800000f400040004800900020073797a30000000000900010073797a3000000000080003400000000022000200b76312c4117379030f5f80800000002a5c571293048000000400061400048009cb00010059797a30000000000000140000001100645a6dc4cf345d2c0d9623000000000000c6fb9e8efafad7e7580e6ae4358d8f9509000000dc6e3af5cf3ed7ea68b191fea46766e9a1b3b4c9b075f74c1047e72361c0e975cd6059b16f981f804453898a0b8f9d081ef6437d4051a31effff784421e478a6e04e0f346def95f289ff35a24334ba0d5ac037028b660600000000000000000000000000000000f8ff0000c3c23d347702098fc523241b3c856a0d61dddf71f2bc8a3c619fb10540773edabb9016586ef76c8055c8ffe9054f019ae0836bc5485011e7fab5d164d031db18064895017bbd8179c617ddb3bfb3159b97cfa9fcaf97d25572daa4ed33b67b6c25f72447c08f1872272a768ee274ac347499872035bc7c938e2ba9cfe4186f95bf9d7b167fcce04240467ebf94a4e672be60537e51366c0f0d2818e940899ca2593697e7ebb16c20c2c5cad78445f6baf628c26f1e2aa0360d1f595d1f564576538c5549b6761ce80e6acc41c3254e2b0fabf3e57539bbf8f7fe311899516845843ea04c543c4bf00403c4218d3bc6547c58ae904d604d12956b8f6591e8122c544da39b34785a92e1871da5e0b53444b7fc951f11f759e8eff2cf886f6e5d068372393ef3bfa4615db83d90a2f00476bf044c93a3948efe8cc22f95accb52d9439c823af72ec5ec2c439ec8a27c6d10ac22eed640b6244304b07b07e34087e71669b09d03d3c54daff64f56828cbf5024b3b2100c024bdb7e67a4695c716375880287e13470cb1e36a8f880485aefe96a22e7b63cca0000000000000000000000172f28c52232c4dbdb032f3b96b5bbf55fb86126a31962a46e71d017da6c6324209059d475aa7cec44281cce1e5376f6e945df0efbd5e27369aa8b83ec8d94120a5578315cad6a3c4541305c6c686e9e314d10dce6329c06917259ec76148c96a3c2a947e3b35ec4ddc4c00a92fd72cdb318f21e2cd4884504f473917ef0730c7a9f9a5b827658c208b18969bbcf3e1ad83a1ecd11178afd17be4d5eeb6ecfb8a62727c101c792f2b4"], 0xb8}}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETCHAIN(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x8}, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x40012}, 0x0, 0xffffffffffffffff, r2, 0x0) perf_event_open$cgroup(&(0x7f0000000380)={0x2, 0x70, 0x3, 0x2, 0x7, 0x9, 0x0, 0x0, 0x20000, 0xb, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x132, 0x0, @perf_config_ext={0x0, 0x180000000000}, 0x0, 0x0, 0x8, 0x1, 0x1124516, 0x385800, 0x800}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) pipe(0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, 0x0, 0x0) r3 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, r3, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) recvfrom$llc(0xffffffffffffffff, &(0x7f00000000c0)=""/73, 0x49, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$VIDIOC_DQBUF(0xffffffffffffffff, 0xc0585611, &(0x7f0000000040)={0x6, 0x1, 0x4, 0x800, 0xffffffff, {0x77359400}, {0x1, 0x1, 0xc0, 0x40, 0xdd, 0x1, "15c7974d"}, 0x2, 0x1, @planes=&(0x7f0000000000)={0x5, 0x9, @mem_offset=0xa2, 0x1}, 0x5, 0x0, 0xffffffffffffffff}) sendmsg$OSF_MSG_REMOVE(r4, &(0x7f00000001c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000180)={&(0x7f0000000e40)={0x710, 0x1, 0x5, 0x3689ddd8106bf156, 0x0, 0x0, {0x5, 0x0, 0x9}, [{{0x254, 0x1, {{0x2, 0xb3}, 0x81, 0x1, 0xff, 0x400, 0x1d, 'syz0\x00', "3eb5d104d1913cf7e4fcb11165ff26bb1e95809654512c68b5aa2039633786da", "f71b87ac8dc6c42674276b614c0cd347a8350cf1c776e5ec0578ac1bdac025ad", [{0xae4e, 0x1f, {0x0, 0x6}}, {0x5, 0x9, {0x0, 0x3}}, {0x4, 0x80, {0x3, 0x8}}, {0x6, 0x38, {0x3}}, {0x180, 0x9, {0x2, 0x20}}, {0xd3b, 0x4, {0x0, 0x4}}, {0x7f, 0x1, {0x1, 0x3}}, {0xffff, 0x1, {0x2, 0x7}}, {0x5, 0x0, {0x1, 0x200}}, {0x1, 0x3, {0xa9f17c8ac456e633, 0xffffffff}}, {0x1, 0xff, {0x0, 0x6}}, {0xfeff, 0x1, {0x1, 0x8}}, {0x1, 0x100, {0x2, 0x7}}, {0x3, 0x9, {0x2, 0x4}}, {0x68b9, 0x9, {0x3, 0x1}}, {0x1f, 0x6, {0x0, 0x9}}, {0xff41, 0x0, {0x3, 0xffffff93}}, {0xf431, 0x3, {0x0, 0x3}}, {0x1, 0x1ff, {0x3, 0x4}}, {0xafd, 0x0, {0x3, 0x3}}, {0x2b40, 0x200, {0x2, 0x2}}, {0x1, 0x7fff, {0x3, 0x6}}, {0x20, 0x81, {0x1, 0x2}}, {0xff00, 0x3}, {0x3, 0x79fd, {0x1, 0x7}}, {0x2, 0x401, {0x2, 0x40}}, {0x5, 0x8, {0x1, 0x8}}, {0x7, 0x3f, {0x3, 0x4}}, {0x7, 0x814, {0x2, 0x4}}, {0x200, 0x74, {0x1, 0x8}}, {0x1, 0x0, {0x0, 0x6}}, {0xffff, 0x8, {0x3, 0x3f}}, {0x81, 0x4, {0x0, 0x81}}, {0x3, 0x6}, {0x2, 0x2c6c, {0x3}}, {0x20, 0x3c0, {0x1}}, {0x6, 0x3a, {0x2}}, {0x28, 0x6122, {0x1, 0x2}}, {0xfffb, 0x0, {0x0, 0x7ff}}, {0x400, 0x140, {0x3, 0x4e}}]}}}, {{0x254, 0x1, {{0x0, 0xb775}, 0x3f, 0xfb, 0x3ff, 0x8, 0x19, 'syz1\x00', "f71461eb2ce93b4eb15cf217f84550b43c11fa1de2000d65bed0762ca3ac9532", "80a06b3b326bb21b64c0c3cf716faedbe08ae2a6f60c952c3d602be6ee9e1394", [{0x5, 0x5}, {0x8000, 0x9, {0x0, 0x5}}, {0x81, 0x4, {0x2, 0x7ff}}, {0x8798, 0xc483, {0x0, 0x3f}}, {0x2, 0xfff9, {0x0, 0xa8}}, {0x278, 0x4, {0x0, 0xa22}}, {0x7d91, 0x800, {0x0, 0xffffffff}}, {0x8, 0x7, {0x0, 0x401}}, {0x3, 0x5}, {0x5, 0x0, {0x0, 0x3}}, {0x5, 0x1ff, {0x2, 0x800}}, {0x7, 0x3, {0x1, 0x8}}, {0x200, 0x73f, {0x3, 0x5}}, {0x800, 0x7797, {0x2, 0x1000}}, {0x40, 0x2, {0x2, 0xfffffffe}}, {0x1000, 0x4, {0x3, 0x6}}, {0x7fff, 0x101, {0x0, 0x1}}, {0x9, 0x3, {0x1, 0x80000001}}, {0x3ff, 0x5, {0x0, 0xfc}}, {0x1ff, 0xff, {0x3, 0x7fffffff}}, {0x8000, 0x4, {0x2}}, {0x3, 0x7, {0x0, 0x400}}, {0x5, 0x2, {0x2}}, {0x4, 0x0, {0x2, 0x8}}, {0x7, 0x3f, {0x1, 0x1}}, {0x4, 0x9b8a, {0x1, 0x9}}, {0xfe00, 0x100, {0x2, 0x2}}, {0x400, 0x232f, {0x0, 0xcc}}, {0x3, 0x5b29, {0x3, 0x4}}, {0x70, 0xfff9, {0x0, 0x7}}, {0x0, 0x2, {0x0, 0x8}}, {0x0, 0x2, {0x3, 0x2}}, {0x1, 0xe5ca, {0x2, 0x8001}}, {0xfffb, 0x80, {0x0, 0x3}}, {0xfff9, 0x886, {0x2, 0xffff0000}}, {0x4, 0xa000, {0x0, 0x5}}, {0x0, 0x9, {0x1, 0x8}}, {0x0, 0x1ff, {0x1, 0x8000}}, {0x5, 0x7, {0x2, 0x7f}}, {0x24, 0x1, {0x0, 0x5}}]}}}, {{0x254, 0x1, {{0x2, 0x5}, 0x3f, 0x1, 0x13, 0x541, 0x10, 'syz1\x00', "500c151dc3c94317eb0323b34e3027ca81cecf8623a40164709d301c8f6a373f", "ac5a1cffd8ed356bbad74e298a67c337eb8c936fd5683a93f1f3ec5eee67c1be", [{0x9, 0x5a, {0x2, 0x5}}, {0xfea6, 0xe56b, {0x3}}, {0x3f, 0x80, {0x0, 0x6}}, {0x5c, 0x5, {0x0, 0x5}}, {0x200, 0x8001, {0x1, 0xfffffff8}}, {0x9, 0x4, {0x0, 0x2}}, {0x9, 0x1ff, {0x3, 0x2fc6}}, {0x9, 0x2, {0x1, 0x24}}, {0x8, 0x1, {0x2, 0x7}}, {0x0, 0x401, {0x3, 0x3}}, {0xff39, 0x4, {0x1, 0x200}}, {0xff8, 0x1000, {0x0, 0x5}}, {0x7, 0x5, {0x0, 0x7f}}, {0x1, 0x218, {0x3, 0x1}}, {0x8d1, 0xff, {0x3, 0x3f}}, {0x8000, 0x7, {0x1, 0x1f}}, {0x2, 0x4, {0x0, 0x200}}, {0x9, 0x2, {0x3, 0x1f}}, {0x6, 0xda7, {0x2, 0x5}}, {0x1000, 0x3, {0x0, 0x101}}, {0x8304, 0x1, {0x1, 0x10000}}, {0x7fff, 0x3f, {0x0, 0x5ade}}, {0x8, 0x8000, {0xbe1011cd160ab574}}, {0x3ff, 0xa8f, {0x0, 0xffffffff}}, {0x9, 0x7ff, {0x0, 0x7}}, {0x7, 0x1000, {0x2, 0x7fff}}, {0x8d6c, 0x7fff, {0x1, 0xbf6}}, {0x3, 0x4, {0x1, 0x2}}, {0x8001, 0x58d, {0x2}}, {0x3, 0x81, {0x1, 0x4}}, {0x1, 0x401, {0x0, 0x7}}, {0x1, 0x8, {0x0, 0x80000001}}, {0x2, 0x9, {0x1}}, {0x4, 0x7, {0x3, 0x1}}, {0x8, 0x1, {0x3, 0xffffffff}}, {0x1f, 0x1, {0x2, 0xffff}}, {0x1000, 0x101, {0x3, 0x101}}, {0x4, 0x1f, {0x2, 0x1}}, {0x0, 0x3155, {0x2}}, {0x9, 0x8000, {0x1, 0x3}}]}}}]}, 0x710}, 0x1, 0x0, 0x0, 0x1}, 0x80) 08:39:36 executing program 3: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x20000000003, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newlink={0x60, 0x10, 0x1, 0x0, 0x1000000, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @ip6gretap={{0xe, 0x1, 'ip6gretap\x00'}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @ipv4={[], [], @loopback}}, @IFLA_GRE_REMOTE={0x14, 0x7, @remote}]}}}]}, 0x60}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00'}) 08:39:36 executing program 4: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x20000000003, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00'}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newlink={0x60, 0x10, 0x1, 0x70bd25, 0x0, {0x0, 0x6, 0x0, r4, 0x50800}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @ip6gretap={{0xe, 0x1, 'ip6gretap\x00'}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @ipv4={[], [], @private=0xa010100}}, @IFLA_GRE_REMOTE={0x14, 0x7, @remote}]}}}]}, 0x60}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00'}) 08:39:36 executing program 1: r0 = socket(0x10, 0x803, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000005540)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000c80)=""/235, 0xeb}], 0x1}}], 0x1, 0x0, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendto(r0, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000b80)=@ethernet={0x0, @local}, 0x80, 0x0}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000ac0)=[{{&(0x7f0000000880)=@caif=@util, 0x80, &(0x7f0000000540)=[{&(0x7f0000000900)=""/128, 0x80}, {&(0x7f0000000980)=""/76, 0x4c}], 0x2}, 0x3f}], 0x1, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_SYS_GET(0xffffffffffffffff, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000a00)={0x0, 0x30}}, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x374, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x14b}, {&(0x7f0000000140)=""/85, 0x20a}, {&(0x7f0000000fc0)=""/4096, 0x773}, {&(0x7f0000000400)=""/106, 0x2ce}, {&(0x7f0000000740)=""/73, 0x3dd}, {&(0x7f0000000200)=""/77, 0x96}, {&(0x7f00000007c0)=""/154, 0x40d}, {&(0x7f0000000000)=""/22, 0xa}], 0x81, &(0x7f0000000600)=""/191, 0x41, 0x1584}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 08:39:36 executing program 2 (fault-call:8 fault-nth:42): shmget(0x0, 0x4000, 0x780012c9, &(0x7f0000ffc000/0x4000)=nil) shmctl$IPC_RMID(0x0, 0x0) shmat(0x0, &(0x7f0000ffe000/0x1000)=nil, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x2, 0x1) r1 = open(&(0x7f0000000080)='./bus\x00', 0x430c2, 0x0) ftruncate(r1, 0x200004) sendfile(r0, r1, 0x0, 0x80001d00c0d0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) [ 282.113459][T18663] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. [ 282.199798][T18677] FAULT_INJECTION: forcing a failure. [ 282.199798][T18677] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 282.215402][T18663] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. [ 282.243480][T18677] CPU: 1 PID: 18677 Comm: syz-executor.2 Not tainted 5.7.0-rc6-syzkaller #0 [ 282.252184][T18677] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 282.262236][T18677] Call Trace: [ 282.265510][T18677] dump_stack+0x1e9/0x30e [ 282.269829][T18677] should_fail+0x433/0x5b0 [ 282.274238][T18677] prepare_alloc_pages+0x28c/0x4a0 [ 282.279325][T18677] __alloc_pages_nodemask+0xbc/0x5e0 [ 282.284597][T18677] __do_page_cache_readahead+0x1de/0x4f0 [ 282.290488][T18677] generic_file_buffered_read+0x4a5/0x2570 [ 282.296289][T18677] generic_file_splice_read+0x452/0x700 [ 282.301825][T18677] ? splice_shrink_spd+0xb0/0xb0 [ 282.306735][T18677] splice_direct_to_actor+0x3c1/0xb40 [ 282.312130][T18677] ? do_splice_direct+0x340/0x340 [ 282.317138][T18677] do_splice_direct+0x201/0x340 [ 282.321969][T18677] ? security_file_permission+0x50/0xc0 [ 282.327494][T18677] do_sendfile+0x809/0xfe0 [ 282.331891][T18677] __x64_sys_sendfile64+0x164/0x1a0 [ 282.337062][T18677] ? do_syscall_64+0x19/0x1b0 [ 282.341718][T18677] do_syscall_64+0xf3/0x1b0 [ 282.346237][T18677] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 282.352101][T18677] RIP: 0033:0x45ca29 [ 282.355975][T18677] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 282.375636][T18677] RSP: 002b:00007efeff606c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 282.384019][T18677] RAX: ffffffffffffffda RBX: 00000000004fc540 RCX: 000000000045ca29 [ 282.392063][T18677] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 282.400014][T18677] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 282.407968][T18677] R10: 000080001d00c0d0 R11: 0000000000000246 R12: 0000000000000005 [ 282.415920][T18677] R13: 00000000000008dc R14: 00000000004cba16 R15: 00007efeff6076d4 08:39:36 executing program 5: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x10, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = socket$inet6(0xa, 0x1, 0x8010800000000084) r1 = socket$kcm(0x2, 0x3, 0x2) recvmsg(r1, &(0x7f0000007500)={&(0x7f0000006f80)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x80, 0x0, 0x0, 0xffffffffffffffff}, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmmsg$inet6(r0, &(0x7f00000000c0)=[{{&(0x7f0000002c80)={0xa, 0x0, 0x0, @loopback}, 0x1c, &(0x7f0000005000)}}], 0x1, 0x20000040) 08:39:36 executing program 1: r0 = socket(0x10, 0x803, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000005540)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000c80)=""/235, 0xeb}], 0x1}}], 0x1, 0x0, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendto(r0, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000b80)=@ethernet={0x0, @local}, 0x80, 0x0}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000ac0)=[{{&(0x7f0000000880)=@caif=@util, 0x80, &(0x7f0000000540)=[{&(0x7f0000000900)=""/128, 0x80}, {&(0x7f0000000980)=""/76, 0x4c}], 0x2}, 0x3f}], 0x1, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_SYS_GET(0xffffffffffffffff, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000a00)={0x0, 0x30}}, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x374, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x14b}, {&(0x7f0000000140)=""/85, 0x20a}, {&(0x7f0000000fc0)=""/4096, 0x773}, {&(0x7f0000000400)=""/106, 0x2ce}, {&(0x7f0000000740)=""/73, 0x3dd}, {&(0x7f0000000200)=""/77, 0x96}, {&(0x7f00000007c0)=""/154, 0x40d}, {&(0x7f0000000000)=""/22, 0xa}], 0x81, &(0x7f0000000600)=""/191, 0x41, 0x1588}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 08:39:36 executing program 3: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x20000000003, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newlink={0x60, 0x10, 0x1, 0x0, 0x2000000, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @ip6gretap={{0xe, 0x1, 'ip6gretap\x00'}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @ipv4={[], [], @loopback}}, @IFLA_GRE_REMOTE={0x14, 0x7, @remote}]}}}]}, 0x60}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00'}) 08:39:36 executing program 4: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x20000000003, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00'}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newlink={0x60, 0x10, 0x1, 0x70bd25, 0x0, {0x0, 0x8, 0x0, r4, 0x50800}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @ip6gretap={{0xe, 0x1, 'ip6gretap\x00'}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @ipv4={[], [], @private=0xa010100}}, @IFLA_GRE_REMOTE={0x14, 0x7, @remote}]}}}]}, 0x60}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00'}) 08:39:36 executing program 0: r0 = socket$kcm(0xa, 0x5, 0x0) r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c47, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext, 0x2150, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x10}, 0x0, 0x0, r1, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0xa, 0x6, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000040)={r2}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.stat\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10d, 0xa, &(0x7f0000000000)=r3, 0x0) r4 = socket$kcm(0x2, 0x200000000000006, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x89e2, &(0x7f0000000100)) close(r4) ioctl$sock_kcm_SIOCKCMUNATTACH(r3, 0x89e1, &(0x7f0000000080)={r4}) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x12, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5c}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x1}, 0xfffffffffffffe6c) sendmsg$IPSET_CMD_SWAP(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x2c, 0x6, 0x6, 0x3, 0x0, 0x0, {0x7, 0x0, 0x6}, [@IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz2\x00'}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz0\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4010}, 0x4000) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x890b, &(0x7f0000000000)) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x890c, &(0x7f0000000000)) r5 = socket$inet(0x2, 0x80001, 0x84) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000480)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000380)="f64256bb9a3386e946c880b4fed7a29f74a632a79c391f900fd21dd7bf5b01e618c4e462f9cd3e8a8347e294e66fc14ed0bc889d292f3758449d6c1450ee3d82f49f847d1aea2b3d4d8e3de87e9bbdff403ba39ff5df32ab7105eac2de0bab6dc4d814df9a2685893ff2a25288953d9a30cbf971648892f64ac7f561643e6973287996aae176a06fd64219d5be28f5dabaa28d1d9aa51fddb960876fa6e731ebe9982994a324cfcb758ae7143350e424bff4fe090297967ead47029222ca50c38aabfddd", 0xc4}, 0x68) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) 08:39:36 executing program 2 (fault-call:8 fault-nth:43): shmget(0x0, 0x4000, 0x780012c9, &(0x7f0000ffc000/0x4000)=nil) shmctl$IPC_RMID(0x0, 0x0) shmat(0x0, &(0x7f0000ffe000/0x1000)=nil, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x2, 0x1) r1 = open(&(0x7f0000000080)='./bus\x00', 0x430c2, 0x0) ftruncate(r1, 0x200004) sendfile(r0, r1, 0x0, 0x80001d00c0d0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) 08:39:36 executing program 1: r0 = socket(0x10, 0x803, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000005540)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000c80)=""/235, 0xeb}], 0x1}}], 0x1, 0x0, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendto(r0, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000b80)=@ethernet={0x0, @local}, 0x80, 0x0}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000ac0)=[{{&(0x7f0000000880)=@caif=@util, 0x80, &(0x7f0000000540)=[{&(0x7f0000000900)=""/128, 0x80}, {&(0x7f0000000980)=""/76, 0x4c}], 0x2}, 0x3f}], 0x1, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_SYS_GET(0xffffffffffffffff, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000a00)={0x0, 0x30}}, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x374, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x14b}, {&(0x7f0000000140)=""/85, 0x20a}, {&(0x7f0000000fc0)=""/4096, 0x773}, {&(0x7f0000000400)=""/106, 0x2ce}, {&(0x7f0000000740)=""/73, 0x3dd}, {&(0x7f0000000200)=""/77, 0x96}, {&(0x7f00000007c0)=""/154, 0x40d}, {&(0x7f0000000000)=""/22, 0xa}], 0x81, &(0x7f0000000600)=""/191, 0x41, 0x1590}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 08:39:36 executing program 0: r0 = socket$kcm(0xa, 0x5, 0x0) r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c47, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext, 0x2150, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x10}, 0x0, 0x0, r1, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0xa, 0x6, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000040)={r2}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.stat\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10d, 0xa, &(0x7f0000000000)=r3, 0x0) r4 = socket$kcm(0x2, 0x200000000000006, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x89e2, &(0x7f0000000100)) close(r4) ioctl$sock_kcm_SIOCKCMUNATTACH(r3, 0x89e1, &(0x7f0000000080)={r4}) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x12, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5c}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x1}, 0xfffffffffffffe6c) sendmsg$IPSET_CMD_SWAP(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x2c, 0x6, 0x6, 0x3, 0x0, 0x0, {0x7, 0x0, 0x6}, [@IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz2\x00'}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz0\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4010}, 0x4000) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x890b, &(0x7f0000000000)) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x890c, &(0x7f0000000000)) r5 = socket$inet(0x2, 0x80001, 0x84) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000480)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000380)="f64256bb9a3386e946c880b4fed7a29f74a632a79c391f900fd21dd7bf5b01e618c4e462f9cd3e8a8347e294e66fc14ed0bc889d292f3758449d6c1450ee3d82f49f847d1aea2b3d4d8e3de87e9bbdff403ba39ff5df32ab7105eac2de0bab6dc4d814df9a2685893ff2a25288953d9a30cbf971648892f64ac7f561643e6973287996aae176a06fd64219d5be28f5dabaa28d1d9aa51fddb960876fa6e731ebe9982994a324cfcb758ae7143350e424bff4fe090297967ead47029222ca50c38aabfddd", 0xc4}, 0x68) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) [ 282.663818][T18700] FAULT_INJECTION: forcing a failure. [ 282.663818][T18700] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 282.672899][T18701] IPVS: ftp: loaded support on port[0] = 21 [ 282.677595][T18700] CPU: 0 PID: 18700 Comm: syz-executor.2 Not tainted 5.7.0-rc6-syzkaller #0 [ 282.691641][T18700] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 282.701681][T18700] Call Trace: [ 282.704959][T18700] dump_stack+0x1e9/0x30e [ 282.709266][T18700] should_fail+0x433/0x5b0 [ 282.713664][T18700] prepare_alloc_pages+0x28c/0x4a0 [ 282.718748][T18700] __alloc_pages_nodemask+0xbc/0x5e0 [ 282.724011][T18700] __do_page_cache_readahead+0x1de/0x4f0 [ 282.729637][T18700] generic_file_buffered_read+0x4a5/0x2570 [ 282.735436][T18700] generic_file_splice_read+0x452/0x700 [ 282.740967][T18700] ? splice_shrink_spd+0xb0/0xb0 [ 282.745965][T18700] splice_direct_to_actor+0x3c1/0xb40 [ 282.751312][T18700] ? do_splice_direct+0x340/0x340 [ 282.756321][T18700] do_splice_direct+0x201/0x340 [ 282.761159][T18700] ? security_file_permission+0x50/0xc0 [ 282.766688][T18700] do_sendfile+0x809/0xfe0 [ 282.771087][T18700] __x64_sys_sendfile64+0x164/0x1a0 [ 282.776257][T18700] ? do_syscall_64+0x19/0x1b0 [ 282.780922][T18700] do_syscall_64+0xf3/0x1b0 [ 282.785405][T18700] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 282.791269][T18700] RIP: 0033:0x45ca29 [ 282.795135][T18700] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 282.814800][T18700] RSP: 002b:00007efeff606c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 282.823184][T18700] RAX: ffffffffffffffda RBX: 00000000004fc540 RCX: 000000000045ca29 [ 282.831128][T18700] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 282.839073][T18700] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 282.847021][T18700] R10: 000080001d00c0d0 R11: 0000000000000246 R12: 0000000000000005 [ 282.854990][T18700] R13: 00000000000008dc R14: 00000000004cba16 R15: 00007efeff6076d4 08:39:36 executing program 3: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x20000000003, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newlink={0x60, 0x10, 0x1, 0x0, 0x3000000, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @ip6gretap={{0xe, 0x1, 'ip6gretap\x00'}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @ipv4={[], [], @loopback}}, @IFLA_GRE_REMOTE={0x14, 0x7, @remote}]}}}]}, 0x60}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00'}) 08:39:36 executing program 4: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x20000000003, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00'}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newlink={0x60, 0x10, 0x1, 0x70bd25, 0x0, {0x0, 0x9, 0x0, r4, 0x50800}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @ip6gretap={{0xe, 0x1, 'ip6gretap\x00'}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @ipv4={[], [], @private=0xa010100}}, @IFLA_GRE_REMOTE={0x14, 0x7, @remote}]}}}]}, 0x60}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00'}) 08:39:36 executing program 2 (fault-call:8 fault-nth:44): shmget(0x0, 0x4000, 0x780012c9, &(0x7f0000ffc000/0x4000)=nil) shmctl$IPC_RMID(0x0, 0x0) shmat(0x0, &(0x7f0000ffe000/0x1000)=nil, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x2, 0x1) r1 = open(&(0x7f0000000080)='./bus\x00', 0x430c2, 0x0) ftruncate(r1, 0x200004) sendfile(r0, r1, 0x0, 0x80001d00c0d0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) 08:39:36 executing program 1: r0 = socket(0x10, 0x803, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000005540)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000c80)=""/235, 0xeb}], 0x1}}], 0x1, 0x0, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendto(r0, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000b80)=@ethernet={0x0, @local}, 0x80, 0x0}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000ac0)=[{{&(0x7f0000000880)=@caif=@util, 0x80, &(0x7f0000000540)=[{&(0x7f0000000900)=""/128, 0x80}, {&(0x7f0000000980)=""/76, 0x4c}], 0x2}, 0x3f}], 0x1, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_SYS_GET(0xffffffffffffffff, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000a00)={0x0, 0x30}}, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x374, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x14b}, {&(0x7f0000000140)=""/85, 0x20a}, {&(0x7f0000000fc0)=""/4096, 0x773}, {&(0x7f0000000400)=""/106, 0x2ce}, {&(0x7f0000000740)=""/73, 0x3dd}, {&(0x7f0000000200)=""/77, 0x96}, {&(0x7f00000007c0)=""/154, 0x40d}, {&(0x7f0000000000)=""/22, 0xa}], 0x81, &(0x7f0000000600)=""/191, 0x41, 0x1624}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) [ 283.025802][T18739] FAULT_INJECTION: forcing a failure. [ 283.025802][T18739] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 283.044356][T18739] CPU: 1 PID: 18739 Comm: syz-executor.2 Not tainted 5.7.0-rc6-syzkaller #0 [ 283.053057][T18739] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 283.063108][T18739] Call Trace: [ 283.066401][T18739] dump_stack+0x1e9/0x30e [ 283.070736][T18739] should_fail+0x433/0x5b0 [ 283.075155][T18739] prepare_alloc_pages+0x28c/0x4a0 [ 283.080273][T18739] __alloc_pages_nodemask+0xbc/0x5e0 [ 283.085566][T18739] __do_page_cache_readahead+0x1de/0x4f0 [ 283.091205][T18739] generic_file_buffered_read+0x4a5/0x2570 [ 283.097025][T18739] generic_file_splice_read+0x452/0x700 [ 283.102579][T18739] ? splice_shrink_spd+0xb0/0xb0 [ 283.107519][T18739] splice_direct_to_actor+0x3c1/0xb40 [ 283.112900][T18739] ? do_splice_direct+0x340/0x340 [ 283.117942][T18739] do_splice_direct+0x201/0x340 [ 283.122805][T18739] ? security_file_permission+0x50/0xc0 [ 283.128439][T18739] do_sendfile+0x809/0xfe0 [ 283.132882][T18739] __x64_sys_sendfile64+0x164/0x1a0 [ 283.138071][T18739] ? do_syscall_64+0x19/0x1b0 [ 283.142749][T18739] do_syscall_64+0xf3/0x1b0 [ 283.147234][T18739] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 283.153173][T18739] RIP: 0033:0x45ca29 [ 283.157041][T18739] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 283.180685][T18739] RSP: 002b:00007efeff606c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 283.189081][T18739] RAX: ffffffffffffffda RBX: 00000000004fc540 RCX: 000000000045ca29 [ 283.197141][T18739] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 283.205100][T18739] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 283.213046][T18739] R10: 000080001d00c0d0 R11: 0000000000000246 R12: 0000000000000005 [ 283.221002][T18739] R13: 00000000000008dc R14: 00000000004cba16 R15: 00007efeff6076d4 08:39:37 executing program 5: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x10, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = socket$inet6(0xa, 0x1, 0x8010800000000084) r1 = socket$kcm(0x2, 0x3, 0x2) recvmsg(r1, &(0x7f0000007500)={&(0x7f0000006f80)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x80, 0x0, 0x0, 0xffffffffffffffff}, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmmsg$inet6(r0, &(0x7f00000000c0)=[{{&(0x7f0000002c80)={0xa, 0x0, 0x0, @loopback}, 0x1c, &(0x7f0000005000)=[{0x0}], 0x1}}], 0x1, 0x20000040) 08:39:37 executing program 0: r0 = socket$inet_dccp(0x2, 0x6, 0x0) r1 = dup(r0) ioctl$SOUND_PCM_READ_CHANNELS(r1, 0x80045006, &(0x7f0000000280)) connect$inet(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f0000000380)) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000080)={@private2, 0x8}, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0xffffffffffffffb5}], 0xaaaac44, 0x0, 0x0, 0xfffffe41) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000140)={[0x150, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc5e]}) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, 0x0, &(0x7f00000000c0)=0x6b) ioctl$KVM_RUN(r5, 0xae80, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20021, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 08:39:37 executing program 1: r0 = socket(0x10, 0x803, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000005540)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000c80)=""/235, 0xeb}], 0x1}}], 0x1, 0x0, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendto(r0, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000b80)=@ethernet={0x0, @local}, 0x80, 0x0}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000ac0)=[{{&(0x7f0000000880)=@caif=@util, 0x80, &(0x7f0000000540)=[{&(0x7f0000000900)=""/128, 0x80}, {&(0x7f0000000980)=""/76, 0x4c}], 0x2}, 0x3f}], 0x1, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_SYS_GET(0xffffffffffffffff, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000a00)={0x0, 0x30}}, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x374, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x14b}, {&(0x7f0000000140)=""/85, 0x20a}, {&(0x7f0000000fc0)=""/4096, 0x773}, {&(0x7f0000000400)=""/106, 0x2ce}, {&(0x7f0000000740)=""/73, 0x3dd}, {&(0x7f0000000200)=""/77, 0x96}, {&(0x7f00000007c0)=""/154, 0x40d}, {&(0x7f0000000000)=""/22, 0xa}], 0x81, &(0x7f0000000600)=""/191, 0x41, 0x1630}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 08:39:37 executing program 3: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x20000000003, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newlink={0x60, 0x10, 0x1, 0x0, 0x4000000, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @ip6gretap={{0xe, 0x1, 'ip6gretap\x00'}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @ipv4={[], [], @loopback}}, @IFLA_GRE_REMOTE={0x14, 0x7, @remote}]}}}]}, 0x60}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00'}) 08:39:37 executing program 4: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x20000000003, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00'}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newlink={0x60, 0x10, 0x1, 0x70bd25, 0x0, {0x0, 0xa, 0x0, r4, 0x50800}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @ip6gretap={{0xe, 0x1, 'ip6gretap\x00'}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @ipv4={[], [], @private=0xa010100}}, @IFLA_GRE_REMOTE={0x14, 0x7, @remote}]}}}]}, 0x60}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00'}) 08:39:37 executing program 2 (fault-call:8 fault-nth:45): shmget(0x0, 0x4000, 0x780012c9, &(0x7f0000ffc000/0x4000)=nil) shmctl$IPC_RMID(0x0, 0x0) shmat(0x0, &(0x7f0000ffe000/0x1000)=nil, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x2, 0x1) r1 = open(&(0x7f0000000080)='./bus\x00', 0x430c2, 0x0) ftruncate(r1, 0x200004) sendfile(r0, r1, 0x0, 0x80001d00c0d0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) 08:39:37 executing program 1: r0 = socket(0x10, 0x803, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000005540)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000c80)=""/235, 0xeb}], 0x1}}], 0x1, 0x0, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendto(r0, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000b80)=@ethernet={0x0, @local}, 0x80, 0x0}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000ac0)=[{{&(0x7f0000000880)=@caif=@util, 0x80, &(0x7f0000000540)=[{&(0x7f0000000900)=""/128, 0x80}, {&(0x7f0000000980)=""/76, 0x4c}], 0x2}, 0x3f}], 0x1, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_SYS_GET(0xffffffffffffffff, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000a00)={0x0, 0x30}}, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x374, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x14b}, {&(0x7f0000000140)=""/85, 0x20a}, {&(0x7f0000000fc0)=""/4096, 0x773}, {&(0x7f0000000400)=""/106, 0x2ce}, {&(0x7f0000000740)=""/73, 0x3dd}, {&(0x7f0000000200)=""/77, 0x96}, {&(0x7f00000007c0)=""/154, 0x40d}, {&(0x7f0000000000)=""/22, 0xa}], 0x81, &(0x7f0000000600)=""/191, 0x41, 0x1690}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) [ 283.502083][T18764] FAULT_INJECTION: forcing a failure. [ 283.502083][T18764] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 283.528326][T18766] IPVS: ftp: loaded support on port[0] = 21 08:39:37 executing program 1: r0 = socket(0x10, 0x803, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000005540)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000c80)=""/235, 0xeb}], 0x1}}], 0x1, 0x0, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendto(r0, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000b80)=@ethernet={0x0, @local}, 0x80, 0x0}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000ac0)=[{{&(0x7f0000000880)=@caif=@util, 0x80, &(0x7f0000000540)=[{&(0x7f0000000900)=""/128, 0x80}, {&(0x7f0000000980)=""/76, 0x4c}], 0x2}, 0x3f}], 0x1, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_SYS_GET(0xffffffffffffffff, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000a00)={0x0, 0x30}}, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x374, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x14b}, {&(0x7f0000000140)=""/85, 0x20a}, {&(0x7f0000000fc0)=""/4096, 0x773}, {&(0x7f0000000400)=""/106, 0x2ce}, {&(0x7f0000000740)=""/73, 0x3dd}, {&(0x7f0000000200)=""/77, 0x96}, {&(0x7f00000007c0)=""/154, 0x40d}, {&(0x7f0000000000)=""/22, 0xa}], 0x81, &(0x7f0000000600)=""/191, 0x41, 0x16d0}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) [ 283.555540][T18764] CPU: 1 PID: 18764 Comm: syz-executor.2 Not tainted 5.7.0-rc6-syzkaller #0 [ 283.564240][T18764] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 283.574307][T18764] Call Trace: [ 283.577604][T18764] dump_stack+0x1e9/0x30e [ 283.582458][T18764] should_fail+0x433/0x5b0 [ 283.586870][T18764] prepare_alloc_pages+0x28c/0x4a0 [ 283.591977][T18764] __alloc_pages_nodemask+0xbc/0x5e0 [ 283.597358][T18764] __do_page_cache_readahead+0x1de/0x4f0 [ 283.603152][T18764] generic_file_buffered_read+0x4a5/0x2570 [ 283.608969][T18764] generic_file_splice_read+0x452/0x700 [ 283.614628][T18764] ? splice_shrink_spd+0xb0/0xb0 [ 283.619576][T18764] splice_direct_to_actor+0x3c1/0xb40 [ 283.624940][T18764] ? do_splice_direct+0x340/0x340 [ 283.630315][T18764] do_splice_direct+0x201/0x340 [ 283.635173][T18764] ? security_file_permission+0x50/0xc0 [ 283.640709][T18764] do_sendfile+0x809/0xfe0 [ 283.645116][T18764] __x64_sys_sendfile64+0x164/0x1a0 [ 283.650295][T18764] ? do_syscall_64+0x19/0x1b0 [ 283.654953][T18764] do_syscall_64+0xf3/0x1b0 [ 283.659438][T18764] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 283.665309][T18764] RIP: 0033:0x45ca29 [ 283.669182][T18764] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 283.688850][T18764] RSP: 002b:00007efeff606c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 283.697324][T18764] RAX: ffffffffffffffda RBX: 00000000004fc540 RCX: 000000000045ca29 08:39:37 executing program 1: r0 = socket(0x10, 0x803, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000005540)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000c80)=""/235, 0xeb}], 0x1}}], 0x1, 0x0, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendto(r0, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000b80)=@ethernet={0x0, @local}, 0x80, 0x0}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000ac0)=[{{&(0x7f0000000880)=@caif=@util, 0x80, &(0x7f0000000540)=[{&(0x7f0000000900)=""/128, 0x80}, {&(0x7f0000000980)=""/76, 0x4c}], 0x2}, 0x3f}], 0x1, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_SYS_GET(0xffffffffffffffff, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000a00)={0x0, 0x30}}, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x374, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x14b}, {&(0x7f0000000140)=""/85, 0x20a}, {&(0x7f0000000fc0)=""/4096, 0x773}, {&(0x7f0000000400)=""/106, 0x2ce}, {&(0x7f0000000740)=""/73, 0x3dd}, {&(0x7f0000000200)=""/77, 0x96}, {&(0x7f00000007c0)=""/154, 0x40d}, {&(0x7f0000000000)=""/22, 0xa}], 0x81, &(0x7f0000000600)=""/191, 0x41, 0x1778}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 08:39:37 executing program 3: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x20000000003, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newlink={0x60, 0x10, 0x1, 0x0, 0x5000000, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @ip6gretap={{0xe, 0x1, 'ip6gretap\x00'}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @ipv4={[], [], @loopback}}, @IFLA_GRE_REMOTE={0x14, 0x7, @remote}]}}}]}, 0x60}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00'}) 08:39:37 executing program 4: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x20000000003, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00'}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newlink={0x60, 0x10, 0x1, 0x70bd25, 0x0, {0x0, 0xb, 0x0, r4, 0x50800}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @ip6gretap={{0xe, 0x1, 'ip6gretap\x00'}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @ipv4={[], [], @private=0xa010100}}, @IFLA_GRE_REMOTE={0x14, 0x7, @remote}]}}}]}, 0x60}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00'}) [ 283.705618][T18764] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 283.713582][T18764] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 283.721564][T18764] R10: 000080001d00c0d0 R11: 0000000000000246 R12: 0000000000000005 [ 283.729522][T18764] R13: 00000000000008dc R14: 00000000004cba16 R15: 00007efeff6076d4 08:39:37 executing program 1: r0 = socket(0x10, 0x803, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000005540)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000c80)=""/235, 0xeb}], 0x1}}], 0x1, 0x0, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendto(r0, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000b80)=@ethernet={0x0, @local}, 0x80, 0x0}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000ac0)=[{{&(0x7f0000000880)=@caif=@util, 0x80, &(0x7f0000000540)=[{&(0x7f0000000900)=""/128, 0x80}, {&(0x7f0000000980)=""/76, 0x4c}], 0x2}, 0x3f}], 0x1, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_SYS_GET(0xffffffffffffffff, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000a00)={0x0, 0x30}}, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x374, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x14b}, {&(0x7f0000000140)=""/85, 0x20a}, {&(0x7f0000000fc0)=""/4096, 0x773}, {&(0x7f0000000400)=""/106, 0x2ce}, {&(0x7f0000000740)=""/73, 0x3dd}, {&(0x7f0000000200)=""/77, 0x96}, {&(0x7f00000007c0)=""/154, 0x40d}, {&(0x7f0000000000)=""/22, 0xa}], 0x81, &(0x7f0000000600)=""/191, 0x41, 0x1900}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 08:39:38 executing program 5: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x10, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = socket$inet6(0xa, 0x1, 0x8010800000000084) r1 = socket$kcm(0x2, 0x3, 0x2) recvmsg(r1, &(0x7f0000007500)={&(0x7f0000006f80)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x80, 0x0, 0x0, 0xffffffffffffffff}, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmmsg$inet6(r0, &(0x7f00000000c0)=[{{&(0x7f0000002c80)={0xa, 0x0, 0x0, @loopback}, 0x1c, &(0x7f0000005000)=[{0x0}], 0x1}}], 0x1, 0x20000040) 08:39:38 executing program 3: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x20000000003, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newlink={0x60, 0x10, 0x1, 0x0, 0x6000000, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @ip6gretap={{0xe, 0x1, 'ip6gretap\x00'}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @ipv4={[], [], @loopback}}, @IFLA_GRE_REMOTE={0x14, 0x7, @remote}]}}}]}, 0x60}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00'}) 08:39:38 executing program 4: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x20000000003, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00'}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newlink={0x60, 0x10, 0x1, 0x70bd25, 0x0, {0x0, 0xc, 0x0, r4, 0x50800}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @ip6gretap={{0xe, 0x1, 'ip6gretap\x00'}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @ipv4={[], [], @private=0xa010100}}, @IFLA_GRE_REMOTE={0x14, 0x7, @remote}]}}}]}, 0x60}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00'}) 08:39:38 executing program 0: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x20000000003, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00'}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newlink={0x60, 0x10, 0x1, 0x70bd25, 0x0, {0x0, 0xb, 0x0, r4, 0x50800}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @ip6gretap={{0xe, 0x1, 'ip6gretap\x00'}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @ipv4={[], [], @private=0xa010100}}, @IFLA_GRE_REMOTE={0x14, 0x7, @remote}]}}}]}, 0x60}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00'}) 08:39:38 executing program 1: r0 = socket(0x10, 0x803, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000005540)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000c80)=""/235, 0xeb}], 0x1}}], 0x1, 0x0, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendto(r0, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000b80)=@ethernet={0x0, @local}, 0x80, 0x0}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000ac0)=[{{&(0x7f0000000880)=@caif=@util, 0x80, &(0x7f0000000540)=[{&(0x7f0000000900)=""/128, 0x80}, {&(0x7f0000000980)=""/76, 0x4c}], 0x2}, 0x3f}], 0x1, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_SYS_GET(0xffffffffffffffff, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000a00)={0x0, 0x30}}, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x374, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x14b}, {&(0x7f0000000140)=""/85, 0x20a}, {&(0x7f0000000fc0)=""/4096, 0x773}, {&(0x7f0000000400)=""/106, 0x2ce}, {&(0x7f0000000740)=""/73, 0x3dd}, {&(0x7f0000000200)=""/77, 0x96}, {&(0x7f00000007c0)=""/154, 0x40d}, {&(0x7f0000000000)=""/22, 0xa}], 0x81, &(0x7f0000000600)=""/191, 0x41, 0x1948}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 08:39:38 executing program 2 (fault-call:8 fault-nth:46): shmget(0x0, 0x4000, 0x780012c9, &(0x7f0000ffc000/0x4000)=nil) shmctl$IPC_RMID(0x0, 0x0) shmat(0x0, &(0x7f0000ffe000/0x1000)=nil, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x2, 0x1) r1 = open(&(0x7f0000000080)='./bus\x00', 0x430c2, 0x0) ftruncate(r1, 0x200004) sendfile(r0, r1, 0x0, 0x80001d00c0d0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) 08:39:38 executing program 0: clone3(&(0x7f0000001240)={0x165000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x50) [ 284.349616][T18842] FAULT_INJECTION: forcing a failure. [ 284.349616][T18842] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 284.352555][T18843] IPVS: ftp: loaded support on port[0] = 21 [ 284.392902][T18842] CPU: 0 PID: 18842 Comm: syz-executor.2 Not tainted 5.7.0-rc6-syzkaller #0 [ 284.402210][T18842] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 284.412524][T18842] Call Trace: [ 284.415853][T18842] dump_stack+0x1e9/0x30e [ 284.420196][T18842] should_fail+0x433/0x5b0 [ 284.424678][T18842] prepare_alloc_pages+0x28c/0x4a0 [ 284.424904][T18852] IPVS: ftp: loaded support on port[0] = 21 [ 284.429780][T18842] __alloc_pages_nodemask+0xbc/0x5e0 [ 284.429794][T18842] __do_page_cache_readahead+0x1de/0x4f0 [ 284.429808][T18842] generic_file_buffered_read+0x4a5/0x2570 [ 284.429828][T18842] generic_file_splice_read+0x452/0x700 [ 284.429846][T18842] ? splice_shrink_spd+0xb0/0xb0 [ 284.463703][T18842] splice_direct_to_actor+0x3c1/0xb40 [ 284.469120][T18842] ? do_splice_direct+0x340/0x340 [ 284.474269][T18842] do_splice_direct+0x201/0x340 [ 284.479419][T18842] ? security_file_permission+0x50/0xc0 [ 284.484996][T18842] do_sendfile+0x809/0xfe0 [ 284.489421][T18842] __x64_sys_sendfile64+0x164/0x1a0 [ 284.494625][T18842] ? do_syscall_64+0x19/0x1b0 [ 284.499429][T18842] do_syscall_64+0xf3/0x1b0 [ 284.503940][T18842] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 284.509834][T18842] RIP: 0033:0x45ca29 [ 284.511731][T18852] IPVS: ftp: loaded support on port[0] = 21 [ 284.513745][T18842] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 08:39:38 executing program 1: r0 = socket(0x10, 0x803, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000005540)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000c80)=""/235, 0xeb}], 0x1}}], 0x1, 0x0, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendto(r0, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000b80)=@ethernet={0x0, @local}, 0x80, 0x0}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000ac0)=[{{&(0x7f0000000880)=@caif=@util, 0x80, &(0x7f0000000540)=[{&(0x7f0000000900)=""/128, 0x80}, {&(0x7f0000000980)=""/76, 0x4c}], 0x2}, 0x3f}], 0x1, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_SYS_GET(0xffffffffffffffff, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000a00)={0x0, 0x30}}, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x374, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x14b}, {&(0x7f0000000140)=""/85, 0x20a}, {&(0x7f0000000fc0)=""/4096, 0x773}, {&(0x7f0000000400)=""/106, 0x2ce}, {&(0x7f0000000740)=""/73, 0x3dd}, {&(0x7f0000000200)=""/77, 0x96}, {&(0x7f00000007c0)=""/154, 0x40d}, {&(0x7f0000000000)=""/22, 0xa}], 0x81, &(0x7f0000000600)=""/191, 0x41, 0x2416}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) [ 284.513756][T18842] RSP: 002b:00007efeff606c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 284.547728][T18842] RAX: ffffffffffffffda RBX: 00000000004fc540 RCX: 000000000045ca29 [ 284.555701][T18842] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 284.563678][T18842] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 284.571651][T18842] R10: 000080001d00c0d0 R11: 0000000000000246 R12: 0000000000000005 [ 284.579626][T18842] R13: 00000000000008dc R14: 00000000004cba16 R15: 00007efeff6076d4 08:39:38 executing program 1: r0 = socket(0x10, 0x803, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000005540)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000c80)=""/235, 0xeb}], 0x1}}], 0x1, 0x0, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendto(r0, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000b80)=@ethernet={0x0, @local}, 0x80, 0x0}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000ac0)=[{{&(0x7f0000000880)=@caif=@util, 0x80, &(0x7f0000000540)=[{&(0x7f0000000900)=""/128, 0x80}, {&(0x7f0000000980)=""/76, 0x4c}], 0x2}, 0x3f}], 0x1, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_SYS_GET(0xffffffffffffffff, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000a00)={0x0, 0x30}}, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x374, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x14b}, {&(0x7f0000000140)=""/85, 0x20a}, {&(0x7f0000000fc0)=""/4096, 0x773}, {&(0x7f0000000400)=""/106, 0x2ce}, {&(0x7f0000000740)=""/73, 0x3dd}, {&(0x7f0000000200)=""/77, 0x96}, {&(0x7f00000007c0)=""/154, 0x40d}, {&(0x7f0000000000)=""/22, 0xa}], 0x81, &(0x7f0000000600)=""/191, 0x41, 0x2c01}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 08:39:38 executing program 4: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x20000000003, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00'}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newlink={0x60, 0x10, 0x1, 0x70bd25, 0x0, {0x0, 0xf, 0x0, r4, 0x50800}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @ip6gretap={{0xe, 0x1, 'ip6gretap\x00'}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @ipv4={[], [], @private=0xa010100}}, @IFLA_GRE_REMOTE={0x14, 0x7, @remote}]}}}]}, 0x60}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00'}) 08:39:38 executing program 0: syz_read_part_table(0x0, 0x1, &(0x7f0000000000)=[{&(0x7f0000000280)="5244534bab060000002df9e32732d383a5d7bdc58bb7cb85bf426604000000b7ce2985f01dc9e93287b0ad052ad014b023c47f64226621f01e1d3bef5d47244edba1dcda1d4188cd1a34acd1c22b3b89158e6fc3d41134ff32989defcb737ee0a07a5fb2ddb42dd02acbfc965e7d8e3779bc988140fd76831d390a0de47032e1efa8002810071513d32e03d42ded02ac4a5538e0c07e200c712b0ea0d0397c262a59004a9f837edc26343b5ad19fb6f7ad7c793737b59d150d62be877469447bf20c461d5c9d2106e0e574f2806a691ed4882c39ce0376a40ebb1ea05051b77e91c02d174b8c333fc88f65afa025dd8111c77f12bd3b54e08ab69ccdedd000cb69463636d6b382c983f4d2c83ebb7ad59ad92605cb0678079cfcd83417d62c1a6b07ec5362b417be03b23863a30e63a8962b03219080a738dbbbe565dd9222afc48fbed3f43c7a5a341f2558530feee488009d4aaaed678f6e4a0c481a0b584f0ce7373c1843c3047207fa6225df7c805872df4debf918d259a54d51b75f99a23d1520fe11e61e1ad0b4fea30ccdf515e5a423e3de92ce87355f84d00d8f52f625e32f7b0448e3d49b19b83e38e98e81aef8f11288fcc04a43ef3fcb5343b356e21484b4468c6d5575c50a3c31d556e08464e374243ef602cd2ccff44e967d05bef8ea260108a8b3eee2bc6ba451afc708b202871e1d34485c8d", 0x1fa, 0x6}]) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newlink={0x60, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r1, 0x0, 0x18040}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @ip6gretap={{0xe, 0x1, 'ip6gretap\x00'}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @ipv4={[], [], @loopback}}, @IFLA_GRE_REMOTE={0x14, 0x7, @remote}]}}}]}, 0x60}}, 0x0) r2 = openat$userio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/userio\x00', 0xc0800, 0x0) r3 = dup(r2) r4 = socket$inet6(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000300)='batadv\x00') sendmsg$BATADV_CMD_GET_DAT_CACHE(r6, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000580)={0x1c, r7, 0x31905e13403123b7, 0x0, 0x0, {0xc}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}]}, 0x1c}}, 0x0) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_ENABLE(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)={0x6c, r8, 0xc573de0d27bdfe6f, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x0, 0x0, @mcast1}}, {0x20, 0x2, @in6={0xa, 0x0, 0x0, @local}}}}]}]}, 0x6c}}, 0x0) r10 = syz_open_dev$vcsn(&(0x7f0000000640)='/dev/vcs#\x00', 0x3, 0x2040) sendmsg$TIPC_NL_NET_GET(r10, &(0x7f0000000240)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000200)={&(0x7f0000000480)={0x124, r8, 0x1, 0x70bd2c, 0x25dfdbfe, {}, [@TIPC_NLA_NET={0x20, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x6}, @TIPC_NLA_NET_ID={0x8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xef05}]}, @TIPC_NLA_LINK={0x44, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_PUBL={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x6}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xffffffff}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x2}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x4}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x6}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x100}]}, @TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x3}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x2}]}, @TIPC_NLA_SOCK={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x6}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3ff}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7ff}]}, @TIPC_NLA_SOCK={0x10, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}]}, @TIPC_NLA_SOCK={0x10, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1}]}, @TIPC_NLA_NODE={0x4}]}, 0x124}, 0x1, 0x0, 0x0, 0x20048080}, 0x8080) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$SNDRV_PCM_IOCTL_CHANNEL_INFO(r3, 0x80184132, &(0x7f0000000040)) 08:39:38 executing program 3: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x20000000003, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newlink={0x60, 0x10, 0x1, 0x0, 0x8000000, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @ip6gretap={{0xe, 0x1, 'ip6gretap\x00'}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @ipv4={[], [], @loopback}}, @IFLA_GRE_REMOTE={0x14, 0x7, @remote}]}}}]}, 0x60}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00'}) [ 284.704098][T18925] tipc: Enabling of bearer rejected, failed to enable media [ 284.731096][T18925] tipc: Enabling of bearer rejected, failed to enable media 08:39:39 executing program 5: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x10, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = socket$inet6(0xa, 0x1, 0x8010800000000084) r1 = socket$kcm(0x2, 0x3, 0x2) recvmsg(r1, &(0x7f0000007500)={&(0x7f0000006f80)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x80, 0x0, 0x0, 0xffffffffffffffff}, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmmsg$inet6(r0, &(0x7f00000000c0)=[{{&(0x7f0000002c80)={0xa, 0x0, 0x0, @loopback}, 0x1c, &(0x7f0000005000)=[{0x0}], 0x1}}], 0x1, 0x20000040) 08:39:39 executing program 1: r0 = socket(0x10, 0x803, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000005540)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000c80)=""/235, 0xeb}], 0x1}}], 0x1, 0x0, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendto(r0, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000b80)=@ethernet={0x0, @local}, 0x80, 0x0}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000ac0)=[{{&(0x7f0000000880)=@caif=@util, 0x80, &(0x7f0000000540)=[{&(0x7f0000000900)=""/128, 0x80}, {&(0x7f0000000980)=""/76, 0x4c}], 0x2}, 0x3f}], 0x1, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_SYS_GET(0xffffffffffffffff, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000a00)={0x0, 0x30}}, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x374, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x14b}, {&(0x7f0000000140)=""/85, 0x20a}, {&(0x7f0000000fc0)=""/4096, 0x773}, {&(0x7f0000000400)=""/106, 0x2ce}, {&(0x7f0000000740)=""/73, 0x3dd}, {&(0x7f0000000200)=""/77, 0x96}, {&(0x7f00000007c0)=""/154, 0x40d}, {&(0x7f0000000000)=""/22, 0xa}], 0x81, &(0x7f0000000600)=""/191, 0x41, 0x3016}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 08:39:39 executing program 0: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x20000000003, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00'}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newlink={0x60, 0x10, 0x1, 0x70bd25, 0x0, {0x0, 0xc, 0x0, r4, 0x50800}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @ip6gretap={{0xe, 0x1, 'ip6gretap\x00'}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @ipv4={[], [], @private=0xa010100}}, @IFLA_GRE_REMOTE={0x14, 0x7, @remote}]}}}]}, 0x60}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00'}) 08:39:39 executing program 2 (fault-call:8 fault-nth:47): shmget(0x0, 0x4000, 0x780012c9, &(0x7f0000ffc000/0x4000)=nil) shmctl$IPC_RMID(0x0, 0x0) shmat(0x0, &(0x7f0000ffe000/0x1000)=nil, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x2, 0x1) r1 = open(&(0x7f0000000080)='./bus\x00', 0x430c2, 0x0) ftruncate(r1, 0x200004) sendfile(r0, r1, 0x0, 0x80001d00c0d0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) 08:39:39 executing program 3: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x20000000003, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newlink={0x60, 0x10, 0x1, 0x0, 0x9000000, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @ip6gretap={{0xe, 0x1, 'ip6gretap\x00'}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @ipv4={[], [], @loopback}}, @IFLA_GRE_REMOTE={0x14, 0x7, @remote}]}}}]}, 0x60}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00'}) 08:39:39 executing program 4: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x20000000003, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00'}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newlink={0x60, 0x10, 0x1, 0x70bd25, 0x0, {0x0, 0x10, 0x0, r4, 0x50800}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @ip6gretap={{0xe, 0x1, 'ip6gretap\x00'}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @ipv4={[], [], @private=0xa010100}}, @IFLA_GRE_REMOTE={0x14, 0x7, @remote}]}}}]}, 0x60}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00'}) [ 285.186302][T18944] FAULT_INJECTION: forcing a failure. [ 285.186302][T18944] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 285.219279][T18947] IPVS: ftp: loaded support on port[0] = 21 [ 285.221392][T18944] CPU: 0 PID: 18944 Comm: syz-executor.2 Not tainted 5.7.0-rc6-syzkaller #0 [ 285.233958][T18944] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 285.244058][T18944] Call Trace: [ 285.247351][T18944] dump_stack+0x1e9/0x30e [ 285.251684][T18944] should_fail+0x433/0x5b0 [ 285.256102][T18944] prepare_alloc_pages+0x28c/0x4a0 [ 285.261303][T18944] __alloc_pages_nodemask+0xbc/0x5e0 [ 285.266596][T18944] __do_page_cache_readahead+0x1de/0x4f0 [ 285.272234][T18944] generic_file_buffered_read+0x4a5/0x2570 [ 285.278061][T18944] generic_file_splice_read+0x452/0x700 [ 285.283618][T18944] ? splice_shrink_spd+0xb0/0xb0 [ 285.288567][T18944] splice_direct_to_actor+0x3c1/0xb40 [ 285.293985][T18944] ? do_splice_direct+0x340/0x340 [ 285.299016][T18944] do_splice_direct+0x201/0x340 [ 285.303881][T18944] ? security_file_permission+0x50/0xc0 [ 285.309437][T18944] do_sendfile+0x809/0xfe0 [ 285.313868][T18944] __x64_sys_sendfile64+0x164/0x1a0 [ 285.319076][T18944] ? do_syscall_64+0x19/0x1b0 [ 285.323770][T18944] do_syscall_64+0xf3/0x1b0 [ 285.328284][T18944] entry_SYSCALL_64_after_hwframe+0x49/0xb3 08:39:39 executing program 1: r0 = socket(0x10, 0x803, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000005540)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000c80)=""/235, 0xeb}], 0x1}}], 0x1, 0x0, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendto(r0, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000b80)=@ethernet={0x0, @local}, 0x80, 0x0}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000ac0)=[{{&(0x7f0000000880)=@caif=@util, 0x80, &(0x7f0000000540)=[{&(0x7f0000000900)=""/128, 0x80}, {&(0x7f0000000980)=""/76, 0x4c}], 0x2}, 0x3f}], 0x1, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_SYS_GET(0xffffffffffffffff, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000a00)={0x0, 0x30}}, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x374, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x14b}, {&(0x7f0000000140)=""/85, 0x20a}, {&(0x7f0000000fc0)=""/4096, 0x773}, {&(0x7f0000000400)=""/106, 0x2ce}, {&(0x7f0000000740)=""/73, 0x3dd}, {&(0x7f0000000200)=""/77, 0x96}, {&(0x7f00000007c0)=""/154, 0x40d}, {&(0x7f0000000000)=""/22, 0xa}], 0x81, &(0x7f0000000600)=""/191, 0x41, 0x3815}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 08:39:39 executing program 1: r0 = socket(0x10, 0x803, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000005540)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000c80)=""/235, 0xeb}], 0x1}}], 0x1, 0x0, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendto(r0, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000b80)=@ethernet={0x0, @local}, 0x80, 0x0}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000ac0)=[{{&(0x7f0000000880)=@caif=@util, 0x80, &(0x7f0000000540)=[{&(0x7f0000000900)=""/128, 0x80}, {&(0x7f0000000980)=""/76, 0x4c}], 0x2}, 0x3f}], 0x1, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_SYS_GET(0xffffffffffffffff, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000a00)={0x0, 0x30}}, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x374, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x14b}, {&(0x7f0000000140)=""/85, 0x20a}, {&(0x7f0000000fc0)=""/4096, 0x773}, {&(0x7f0000000400)=""/106, 0x2ce}, {&(0x7f0000000740)=""/73, 0x3dd}, {&(0x7f0000000200)=""/77, 0x96}, {&(0x7f00000007c0)=""/154, 0x40d}, {&(0x7f0000000000)=""/22, 0xa}], 0x81, &(0x7f0000000600)=""/191, 0x41, 0x4000}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 08:39:39 executing program 1: r0 = socket(0x10, 0x803, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000005540)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000c80)=""/235, 0xeb}], 0x1}}], 0x1, 0x0, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendto(r0, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000b80)=@ethernet={0x0, @local}, 0x80, 0x0}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000ac0)=[{{&(0x7f0000000880)=@caif=@util, 0x80, &(0x7f0000000540)=[{&(0x7f0000000900)=""/128, 0x80}, {&(0x7f0000000980)=""/76, 0x4c}], 0x2}, 0x3f}], 0x1, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_SYS_GET(0xffffffffffffffff, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000a00)={0x0, 0x30}}, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x374, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x14b}, {&(0x7f0000000140)=""/85, 0x20a}, {&(0x7f0000000fc0)=""/4096, 0x773}, {&(0x7f0000000400)=""/106, 0x2ce}, {&(0x7f0000000740)=""/73, 0x3dd}, {&(0x7f0000000200)=""/77, 0x96}, {&(0x7f00000007c0)=""/154, 0x40d}, {&(0x7f0000000000)=""/22, 0xa}], 0x81, &(0x7f0000000600)=""/191, 0x41, 0x4015}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) [ 285.334187][T18944] RIP: 0033:0x45ca29 [ 285.338085][T18944] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 285.357696][T18944] RSP: 002b:00007efeff606c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 285.366109][T18944] RAX: ffffffffffffffda RBX: 00000000004fc540 RCX: 000000000045ca29 [ 285.374254][T18944] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 08:39:39 executing program 1: r0 = socket(0x10, 0x803, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000005540)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000c80)=""/235, 0xeb}], 0x1}}], 0x1, 0x0, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendto(r0, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000b80)=@ethernet={0x0, @local}, 0x80, 0x0}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000ac0)=[{{&(0x7f0000000880)=@caif=@util, 0x80, &(0x7f0000000540)=[{&(0x7f0000000900)=""/128, 0x80}, {&(0x7f0000000980)=""/76, 0x4c}], 0x2}, 0x3f}], 0x1, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_SYS_GET(0xffffffffffffffff, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000a00)={0x0, 0x30}}, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x374, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x14b}, {&(0x7f0000000140)=""/85, 0x20a}, {&(0x7f0000000fc0)=""/4096, 0x773}, {&(0x7f0000000400)=""/106, 0x2ce}, {&(0x7f0000000740)=""/73, 0x3dd}, {&(0x7f0000000200)=""/77, 0x96}, {&(0x7f00000007c0)=""/154, 0x40d}, {&(0x7f0000000000)=""/22, 0xa}], 0x81, &(0x7f0000000600)=""/191, 0x41, 0x4788}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 08:39:39 executing program 1: r0 = socket(0x10, 0x803, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000005540)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000c80)=""/235, 0xeb}], 0x1}}], 0x1, 0x0, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendto(r0, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000b80)=@ethernet={0x0, @local}, 0x80, 0x0}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000ac0)=[{{&(0x7f0000000880)=@caif=@util, 0x80, &(0x7f0000000540)=[{&(0x7f0000000900)=""/128, 0x80}, {&(0x7f0000000980)=""/76, 0x4c}], 0x2}, 0x3f}], 0x1, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_SYS_GET(0xffffffffffffffff, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000a00)={0x0, 0x30}}, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x374, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x14b}, {&(0x7f0000000140)=""/85, 0x20a}, {&(0x7f0000000fc0)=""/4096, 0x773}, {&(0x7f0000000400)=""/106, 0x2ce}, {&(0x7f0000000740)=""/73, 0x3dd}, {&(0x7f0000000200)=""/77, 0x96}, {&(0x7f00000007c0)=""/154, 0x40d}, {&(0x7f0000000000)=""/22, 0xa}], 0x81, &(0x7f0000000600)=""/191, 0x41, 0x4800}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) [ 285.382228][T18944] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 285.390208][T18944] R10: 000080001d00c0d0 R11: 0000000000000246 R12: 0000000000000005 [ 285.398216][T18944] R13: 00000000000008dc R14: 00000000004cba16 R15: 00007efeff6076d4 08:39:39 executing program 0: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x20000000003, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00'}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newlink={0x60, 0x10, 0x1, 0x70bd25, 0x0, {0x0, 0xf, 0x0, r4, 0x50800}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @ip6gretap={{0xe, 0x1, 'ip6gretap\x00'}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @ipv4={[], [], @private=0xa010100}}, @IFLA_GRE_REMOTE={0x14, 0x7, @remote}]}}}]}, 0x60}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00'}) 08:39:39 executing program 5: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x10, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = socket$inet6(0xa, 0x1, 0x8010800000000084) r1 = socket$kcm(0x2, 0x3, 0x2) recvmsg(r1, &(0x7f0000007500)={&(0x7f0000006f80)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x80, 0x0, 0x0, 0xffffffffffffffff}, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmmsg$inet6(r0, &(0x7f00000000c0)=[{{&(0x7f0000002c80)={0xa, 0x0, 0x0, @loopback}, 0x1c, &(0x7f0000005000)=[{&(0x7f0000002cc0)}], 0x1}}], 0x1, 0x20000040) 08:39:39 executing program 1: r0 = socket(0x10, 0x803, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000005540)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000c80)=""/235, 0xeb}], 0x1}}], 0x1, 0x0, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendto(r0, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000b80)=@ethernet={0x0, @local}, 0x80, 0x0}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000ac0)=[{{&(0x7f0000000880)=@caif=@util, 0x80, &(0x7f0000000540)=[{&(0x7f0000000900)=""/128, 0x80}, {&(0x7f0000000980)=""/76, 0x4c}], 0x2}, 0x3f}], 0x1, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_SYS_GET(0xffffffffffffffff, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000a00)={0x0, 0x30}}, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x374, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x14b}, {&(0x7f0000000140)=""/85, 0x20a}, {&(0x7f0000000fc0)=""/4096, 0x773}, {&(0x7f0000000400)=""/106, 0x2ce}, {&(0x7f0000000740)=""/73, 0x3dd}, {&(0x7f0000000200)=""/77, 0x96}, {&(0x7f00000007c0)=""/154, 0x40d}, {&(0x7f0000000000)=""/22, 0xa}], 0x81, &(0x7f0000000600)=""/191, 0x41, 0x4819}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 08:39:39 executing program 3: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x20000000003, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newlink={0x60, 0x10, 0x1, 0x0, 0xa000000, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @ip6gretap={{0xe, 0x1, 'ip6gretap\x00'}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @ipv4={[], [], @loopback}}, @IFLA_GRE_REMOTE={0x14, 0x7, @remote}]}}}]}, 0x60}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00'}) 08:39:39 executing program 4: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x20000000003, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00'}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newlink={0x60, 0x10, 0x1, 0x70bd25, 0x0, {0x0, 0x11, 0x0, r4, 0x50800}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @ip6gretap={{0xe, 0x1, 'ip6gretap\x00'}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @ipv4={[], [], @private=0xa010100}}, @IFLA_GRE_REMOTE={0x14, 0x7, @remote}]}}}]}, 0x60}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00'}) 08:39:39 executing program 0: r0 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9, 0x1, 'veth\x00'}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, r1}}}}}}]}, 0x48}}, 0x0) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) write$P9_RAUTH(r6, &(0x7f0000000040)={0x14, 0x67, 0x2, {0x26, 0x2, 0x1}}, 0x14) r7 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nvram\x00', 0x8000, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_PRI(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)={0x1c, r9, 0x5, 0x0, 0x0, {{}, {0x0, 0x3}, {0x4c, 0x18, {0x0, @media='ib\x00'}}}}, 0x68}}, 0x0) sendmsg$TIPC_CMD_DISABLE_BEARER(r7, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x2c, r9, 0x10, 0x70bd26, 0x25dfdbfb, {{}, {}, {0x10, 0x13, @udp='udp:syz1\x00'}}, ["", ""]}, 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x4040000) r10 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) setsockopt$bt_BT_DEFER_SETUP(r10, 0x112, 0x7, &(0x7f0000000000)=0x1, 0x4) 08:39:39 executing program 2 (fault-call:8 fault-nth:48): shmget(0x0, 0x4000, 0x780012c9, &(0x7f0000ffc000/0x4000)=nil) shmctl$IPC_RMID(0x0, 0x0) shmat(0x0, &(0x7f0000ffe000/0x1000)=nil, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x2, 0x1) r1 = open(&(0x7f0000000080)='./bus\x00', 0x430c2, 0x0) ftruncate(r1, 0x200004) sendfile(r0, r1, 0x0, 0x80001d00c0d0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) [ 286.032784][T19011] IPVS: ftp: loaded support on port[0] = 21 [ 286.061039][T19012] FAULT_INJECTION: forcing a failure. [ 286.061039][T19012] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 286.085325][T19012] CPU: 0 PID: 19012 Comm: syz-executor.2 Not tainted 5.7.0-rc6-syzkaller #0 [ 286.094124][T19012] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 286.104278][T19012] Call Trace: [ 286.107582][T19012] dump_stack+0x1e9/0x30e [ 286.111890][T19012] should_fail+0x433/0x5b0 [ 286.116287][T19012] prepare_alloc_pages+0x28c/0x4a0 [ 286.121376][T19012] __alloc_pages_nodemask+0xbc/0x5e0 [ 286.126658][T19012] __do_page_cache_readahead+0x1de/0x4f0 [ 286.132270][T19012] generic_file_buffered_read+0x4a5/0x2570 [ 286.138146][T19012] generic_file_splice_read+0x452/0x700 [ 286.143715][T19012] ? splice_shrink_spd+0xb0/0xb0 [ 286.148630][T19012] splice_direct_to_actor+0x3c1/0xb40 [ 286.153984][T19012] ? do_splice_direct+0x340/0x340 [ 286.158985][T19012] do_splice_direct+0x201/0x340 [ 286.163825][T19012] ? security_file_permission+0x50/0xc0 [ 286.169349][T19012] do_sendfile+0x809/0xfe0 [ 286.173760][T19012] __x64_sys_sendfile64+0x164/0x1a0 [ 286.178945][T19012] ? do_syscall_64+0x19/0x1b0 [ 286.183612][T19012] do_syscall_64+0xf3/0x1b0 [ 286.188092][T19012] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 286.193973][T19012] RIP: 0033:0x45ca29 [ 286.197841][T19012] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 286.218332][T19012] RSP: 002b:00007efeff606c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 286.226733][T19012] RAX: ffffffffffffffda RBX: 00000000004fc540 RCX: 000000000045ca29 08:39:40 executing program 3: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x20000000003, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newlink={0x60, 0x10, 0x1, 0x0, 0xb000000, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @ip6gretap={{0xe, 0x1, 'ip6gretap\x00'}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @ipv4={[], [], @loopback}}, @IFLA_GRE_REMOTE={0x14, 0x7, @remote}]}}}]}, 0x60}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00'}) [ 286.234678][T19012] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 286.242624][T19012] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 286.250596][T19012] R10: 000080001d00c0d0 R11: 0000000000000246 R12: 0000000000000005 [ 286.258563][T19012] R13: 00000000000008dc R14: 00000000004cba16 R15: 00007efeff6076d4 08:39:40 executing program 4: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x20000000003, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00'}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newlink={0x60, 0x10, 0x1, 0x70bd25, 0x0, {0x0, 0x12, 0x0, r4, 0x50800}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @ip6gretap={{0xe, 0x1, 'ip6gretap\x00'}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @ipv4={[], [], @private=0xa010100}}, @IFLA_GRE_REMOTE={0x14, 0x7, @remote}]}}}]}, 0x60}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00'}) 08:39:40 executing program 1: r0 = socket(0x10, 0x803, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000005540)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000c80)=""/235, 0xeb}], 0x1}}], 0x1, 0x0, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendto(r0, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000b80)=@ethernet={0x0, @local}, 0x80, 0x0}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000ac0)=[{{&(0x7f0000000880)=@caif=@util, 0x80, &(0x7f0000000540)=[{&(0x7f0000000900)=""/128, 0x80}, {&(0x7f0000000980)=""/76, 0x4c}], 0x2}, 0x3f}], 0x1, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_SYS_GET(0xffffffffffffffff, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000a00)={0x0, 0x30}}, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x374, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x14b}, {&(0x7f0000000140)=""/85, 0x20a}, {&(0x7f0000000fc0)=""/4096, 0x773}, {&(0x7f0000000400)=""/106, 0x2ce}, {&(0x7f0000000740)=""/73, 0x3dd}, {&(0x7f0000000200)=""/77, 0x96}, {&(0x7f00000007c0)=""/154, 0x40d}, {&(0x7f0000000000)=""/22, 0xa}], 0x81, &(0x7f0000000600)=""/191, 0x41, 0x4888}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 08:39:40 executing program 2 (fault-call:8 fault-nth:49): shmget(0x0, 0x4000, 0x780012c9, &(0x7f0000ffc000/0x4000)=nil) shmctl$IPC_RMID(0x0, 0x0) shmat(0x0, &(0x7f0000ffe000/0x1000)=nil, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x2, 0x1) r1 = open(&(0x7f0000000080)='./bus\x00', 0x430c2, 0x0) ftruncate(r1, 0x200004) sendfile(r0, r1, 0x0, 0x80001d00c0d0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) 08:39:40 executing program 3: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x20000000003, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newlink={0x60, 0x10, 0x1, 0x0, 0xc000000, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @ip6gretap={{0xe, 0x1, 'ip6gretap\x00'}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @ipv4={[], [], @loopback}}, @IFLA_GRE_REMOTE={0x14, 0x7, @remote}]}}}]}, 0x60}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00'}) 08:39:40 executing program 1: r0 = socket(0x10, 0x803, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000005540)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000c80)=""/235, 0xeb}], 0x1}}], 0x1, 0x0, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendto(r0, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000b80)=@ethernet={0x0, @local}, 0x80, 0x0}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000ac0)=[{{&(0x7f0000000880)=@caif=@util, 0x80, &(0x7f0000000540)=[{&(0x7f0000000900)=""/128, 0x80}, {&(0x7f0000000980)=""/76, 0x4c}], 0x2}, 0x3f}], 0x1, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_SYS_GET(0xffffffffffffffff, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000a00)={0x0, 0x30}}, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x374, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x14b}, {&(0x7f0000000140)=""/85, 0x20a}, {&(0x7f0000000fc0)=""/4096, 0x773}, {&(0x7f0000000400)=""/106, 0x2ce}, {&(0x7f0000000740)=""/73, 0x3dd}, {&(0x7f0000000200)=""/77, 0x96}, {&(0x7f00000007c0)=""/154, 0x40d}, {&(0x7f0000000000)=""/22, 0xa}], 0x81, &(0x7f0000000600)=""/191, 0x41, 0x4c00}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) [ 286.588207][T19073] FAULT_INJECTION: forcing a failure. [ 286.588207][T19073] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 286.609371][T19073] CPU: 0 PID: 19073 Comm: syz-executor.2 Not tainted 5.7.0-rc6-syzkaller #0 [ 286.618070][T19073] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 286.628477][T19073] Call Trace: [ 286.631769][T19073] dump_stack+0x1e9/0x30e [ 286.636108][T19073] should_fail+0x433/0x5b0 [ 286.640537][T19073] prepare_alloc_pages+0x28c/0x4a0 [ 286.645659][T19073] __alloc_pages_nodemask+0xbc/0x5e0 [ 286.650953][T19073] __do_page_cache_readahead+0x1de/0x4f0 [ 286.656595][T19073] generic_file_buffered_read+0x4a5/0x2570 [ 286.662415][T19073] generic_file_splice_read+0x452/0x700 [ 286.667970][T19073] ? splice_shrink_spd+0xb0/0xb0 [ 286.672916][T19073] splice_direct_to_actor+0x3c1/0xb40 [ 286.678302][T19073] ? do_splice_direct+0x340/0x340 [ 286.683333][T19073] do_splice_direct+0x201/0x340 [ 286.688200][T19073] ? security_file_permission+0x50/0xc0 [ 286.693751][T19073] do_sendfile+0x809/0xfe0 [ 286.698185][T19073] __x64_sys_sendfile64+0x164/0x1a0 [ 286.703391][T19073] ? do_syscall_64+0x19/0x1b0 [ 286.708079][T19073] do_syscall_64+0xf3/0x1b0 [ 286.712768][T19073] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 286.718739][T19073] RIP: 0033:0x45ca29 [ 286.722626][T19073] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 286.742233][T19073] RSP: 002b:00007efeff606c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 286.750724][T19073] RAX: ffffffffffffffda RBX: 00000000004fc540 RCX: 000000000045ca29 [ 286.758681][T19073] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 286.766644][T19073] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 286.774813][T19073] R10: 000080001d00c0d0 R11: 0000000000000246 R12: 0000000000000005 [ 286.782910][T19073] R13: 00000000000008dc R14: 00000000004cba16 R15: 00007efeff6076d4 08:39:40 executing program 5: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x10, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = socket$inet6(0xa, 0x1, 0x8010800000000084) r1 = socket$kcm(0x2, 0x3, 0x2) recvmsg(r1, &(0x7f0000007500)={&(0x7f0000006f80)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x80, 0x0, 0x0, 0xffffffffffffffff}, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmmsg$inet6(r0, &(0x7f00000000c0)=[{{&(0x7f0000002c80)={0xa, 0x0, 0x0, @loopback}, 0x1c, &(0x7f0000005000)=[{&(0x7f0000002cc0)}], 0x1}}], 0x1, 0x20000040) 08:39:40 executing program 4: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x20000000003, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00'}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newlink={0x60, 0x10, 0x1, 0x70bd25, 0x0, {0x0, 0x13, 0x0, r4, 0x50800}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @ip6gretap={{0xe, 0x1, 'ip6gretap\x00'}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @ipv4={[], [], @private=0xa010100}}, @IFLA_GRE_REMOTE={0x14, 0x7, @remote}]}}}]}, 0x60}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00'}) 08:39:40 executing program 1: r0 = socket(0x10, 0x803, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000005540)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000c80)=""/235, 0xeb}], 0x1}}], 0x1, 0x0, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendto(r0, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000b80)=@ethernet={0x0, @local}, 0x80, 0x0}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000ac0)=[{{&(0x7f0000000880)=@caif=@util, 0x80, &(0x7f0000000540)=[{&(0x7f0000000900)=""/128, 0x80}, {&(0x7f0000000980)=""/76, 0x4c}], 0x2}, 0x3f}], 0x1, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_SYS_GET(0xffffffffffffffff, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000a00)={0x0, 0x30}}, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x374, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x14b}, {&(0x7f0000000140)=""/85, 0x20a}, {&(0x7f0000000fc0)=""/4096, 0x773}, {&(0x7f0000000400)=""/106, 0x2ce}, {&(0x7f0000000740)=""/73, 0x3dd}, {&(0x7f0000000200)=""/77, 0x96}, {&(0x7f00000007c0)=""/154, 0x40d}, {&(0x7f0000000000)=""/22, 0xa}], 0x81, &(0x7f0000000600)=""/191, 0x41, 0x5815}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 08:39:40 executing program 3: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x20000000003, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newlink={0x60, 0x10, 0x1, 0x0, 0xf000000, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @ip6gretap={{0xe, 0x1, 'ip6gretap\x00'}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @ipv4={[], [], @loopback}}, @IFLA_GRE_REMOTE={0x14, 0x7, @remote}]}}}]}, 0x60}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00'}) 08:39:40 executing program 0: r0 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r0, &(0x7f0000000140)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @loopback}}, 0x24) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r1) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vcsu\x00', 0x40000, 0x0) ioctl$TIOCL_UNBLANKSCREEN(r3, 0x541c, &(0x7f0000000280)) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) lchown(&(0x7f00000001c0)='./file0\x00', r4, 0x0) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000040)={{{@in=@private=0xa010102, @in6=@private0, 0x4e20, 0x92, 0x4e23, 0x0, 0xa, 0x80, 0x20, 0x21, 0x0, r4}, {0x1f, 0xd, 0x80000000, 0x1, 0x200, 0x6, 0x1a, 0x4000000000}, {0x7, 0x2, 0x6, 0xfffffffffffffffd}, 0x7, 0x6e6bbe, 0x1, 0x1, 0x3, 0x1}, {{@in=@rand_addr=0x64010102, 0x4d6, 0x32}, 0x8, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x4, 0x3, 0x1, 0xfffffffe, 0x101, 0x3}}, 0xe8) sendmmsg(r0, &(0x7f0000003e80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000e00)=[{0x18, 0x110, 0x1, "ec"}], 0x18}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[{0x10}, {0x18, 0x110, 0xc, 't'}], 0x28}}], 0x2, 0x0) r5 = socket$inet6(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f00000001c0)={'batadv0\x00'}) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$BLKIOMIN(0xffffffffffffffff, 0x1278, &(0x7f0000000400)) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00'}) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@can_delroute={0x0, 0x19, 0x2, 0x70bd27, 0x25dfdbfd, {}, [@CGW_MOD_OR={0x0, 0x2, {{{0x4, 0x1, 0x0, 0x1}, 0x1, 0x2, 0x0, 0x0, "f67ee1c20cd317b4"}, 0x4}}, @CGW_MOD_AND={0x0, 0x1, {{{0x1, 0x0, 0x1, 0x1}, 0x5, 0x0, 0x0, 0x0, "d24f82eab59c81e6"}, 0x3}}, @CGW_CS_CRC8={0x0, 0x6, {0x22, 0x5, 0x40, 0x12, 0x80, "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", 0x0, "4d23b3e28f3268d4bc5f0afecb05ae9af543b571"}}, @CGW_LIM_HOPS={0xfffffffffffffd7e, 0xd, 0x10}, @CGW_MOD_OR={0x0, 0x2, {{{0x3, 0x1, 0x1}, 0x3, 0x0, 0x0, 0x0, "e4c239c916898ff1"}, 0x6}}]}, 0xfffffffffffffe65}}, 0x0) ioctl$PPPIOCSACTIVE(r3, 0x40107446, &(0x7f00000003c0)={0x9, &(0x7f0000000340)=[{0x8, 0xe5, 0x1, 0x2}, {0x3, 0x5, 0x5, 0x9}, {0x7, 0xff, 0x8, 0x4}, {0x0, 0x2, 0x9a, 0x3}, {0x3, 0x8, 0x81, 0x5}, {0xf0ba, 0x7c, 0x1f, 0x80000000}, {0x9, 0x7, 0x4, 0x1}, {0x7fff, 0x7f, 0x7, 0xaf}, {0x3, 0x3f, 0xff, 0x5}]}) ioctl$sock_SIOCSIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r6, 0x8983, &(0x7f0000000300)) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r5, 0x84, 0x4, &(0x7f00000002c0)=0x81, 0x4) 08:39:40 executing program 2 (fault-call:8 fault-nth:50): shmget(0x0, 0x4000, 0x780012c9, &(0x7f0000ffc000/0x4000)=nil) shmctl$IPC_RMID(0x0, 0x0) shmat(0x0, &(0x7f0000ffe000/0x1000)=nil, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x2, 0x1) r1 = open(&(0x7f0000000080)='./bus\x00', 0x430c2, 0x0) ftruncate(r1, 0x200004) sendfile(r0, r1, 0x0, 0x80001d00c0d0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) [ 286.892072][T19094] IPVS: ftp: loaded support on port[0] = 21 08:39:40 executing program 3: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x20000000003, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newlink={0x60, 0x10, 0x1, 0x0, 0x10000000, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @ip6gretap={{0xe, 0x1, 'ip6gretap\x00'}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @ipv4={[], [], @loopback}}, @IFLA_GRE_REMOTE={0x14, 0x7, @remote}]}}}]}, 0x60}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00'}) 08:39:40 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r1, 0xee00) r2 = socket$netlink(0x10, 0x3, 0x4000000000000004) writev(r2, &(0x7f0000000140)=[{&(0x7f0000000180)="580000001400192340834b80040d8c5602067fffffff81000000000000dca87086a5c000004f6400940005891550f4a8000000006700008000f0fffeffff09000080fff5dd00000010000100016c1000fcff0000040e05a5", 0x58}], 0x1) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r4, 0x80585414, &(0x7f0000000000)) syz_usb_connect$cdc_ncm(0x4, 0x77, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x65, 0x2, 0x1, 0x8, 0x50, 0x7f, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x7, 0x24, 0x6, 0x0, 0x1, "bdf9"}, {0x5, 0x24, 0x0, 0x2}, {0xd, 0x24, 0xf, 0x1, 0xfffffff7, 0x2, 0x1, 0x1a}, {0x6, 0x24, 0x1a, 0x800, 0x20}, [@network_terminal={0x7, 0x24, 0xa, 0x6, 0x2, 0xa2, 0x7}]}, {{0x9, 0x5, 0x81, 0x3, 0x10, 0xcf, 0x9, 0x7f}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x400, 0x5, 0x6, 0x80}}, {{0x9, 0x5, 0x3, 0x2, 0x400, 0x1, 0x0, 0x1}}}}}}}]}}, &(0x7f0000000600)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x250, 0x3, 0x63, 0x3, 0xff, 0x40}, 0x63, &(0x7f0000000200)={0x5, 0xf, 0x63, 0x5, [@ss_container_id={0x14, 0x10, 0x4, 0x9, "7466eb6fde803b5e6bdfc996bd961291"}, @ss_container_id={0x14, 0x10, 0x4, 0x20, "420224f7cb009717ade1c47a91653eab"}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0xa, 0x7, 0x2, 0x8}, @ssp_cap={0x18, 0x10, 0xa, 0x3, 0x3, 0xff, 0x1e, 0x6, [0x3f30, 0x30, 0xff0000]}, @ssp_cap={0x14, 0x10, 0xa, 0x2, 0x2, 0x4, 0x1e00, 0x5, [0x3f00, 0x0]}]}, 0x6, [{0x1f, &(0x7f0000000280)=@string={0x1f, 0x3, "5cdcc1d8121cdef124b8e05af7331c604a040af92f3d56a5b664122e45"}}, {0xf2, &(0x7f00000002c0)=@string={0xf2, 0x3, "bda582932c3fbdfa60aba008bc1c87fd6a9012194e92e5f42d44bee0c72bf37ebebab4e73910ce1fe2a9a374a3fd2e1e98c598808bababf2637cef47b570e81e7afb9312e0f949171acb75fa708100b8a3ee1954b275e6893b82f430781b4054a1daafa9c7af09623aa7df2e501aaa338586b11b40a563bedb31b136616ac1702a2703c5c8bad089d7eb695b099da20e885b5a4cf00a709883f1e9fab4080555b3ea7c6c688d4b2dfe31714c049cb503d248b2ffa5e169eb3eaa5eb22037a03ccecec785473e6921830bd65e353f17a49c25670d3c54f78742b4070f04676ea7d4b72d9737803abd71f8373c5baa68a8"}}, {0x4a, &(0x7f00000003c0)=@string={0x4a, 0x3, "63e34f88f1ed6b006278237ff932f09582829c8a2bb7069c824690cf3a0ba9cd74edca73555349907f44906b6ad12209e42d79641f83ec45b9a8a4f75584ed9b2fb5917b4b297adc"}}, {0x78, &(0x7f0000000440)=@string={0x78, 0x3, "3e9a7e5f801d51935f0a61e198d13157cde9684ab30f04a521915657dd047d1ffefece2249bdd63f3ee45cb333d6e6abba9a5290fcf195beb417f61ce986e7cef4ae0f5efce63f15a824b09db1222971e21ba9546888658fc4f4478396177474ca38cd2b69db774d88a791c7996bb74e96d237e4c329"}}, {0x83, &(0x7f00000004c0)=@string={0x83, 0x3, "cf9c4c1a802a77793646a79760d04968898a2bf9ba0d4ef0a79bd341ff581104c7c10bbb1063edfbfdf06a9aafa881dfc2c4a84cb499caaca8edaf2def0f910f6287fffabcfa06736893b8d7a8f8af5119efb134635e179f6bad5cc799ab005106a65d671168556498f4bd90337d0f708a2eea19edf41ce73b5ddb660d646d62a1"}}, {0x74, &(0x7f0000000580)=@string={0x74, 0x3, "63dfc0e796eb727f45db27be268cbd00944034c3924c9770fb6032b85576b3ebfa28254514bba4aeddaede55479590394d90b3167702941f060f4f32f1909a92f3ab20afdf9b39335715253a824c804f805aba515f622e5c5d9599bb2c1ebd84c215f36b8353db893476473b39058dc87dae"}}]}) 08:39:40 executing program 1: r0 = socket(0x10, 0x803, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000005540)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000c80)=""/235, 0xeb}], 0x1}}], 0x1, 0x0, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendto(r0, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000b80)=@ethernet={0x0, @local}, 0x80, 0x0}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000ac0)=[{{&(0x7f0000000880)=@caif=@util, 0x80, &(0x7f0000000540)=[{&(0x7f0000000900)=""/128, 0x80}, {&(0x7f0000000980)=""/76, 0x4c}], 0x2}, 0x3f}], 0x1, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_SYS_GET(0xffffffffffffffff, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000a00)={0x0, 0x30}}, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x374, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x14b}, {&(0x7f0000000140)=""/85, 0x20a}, {&(0x7f0000000fc0)=""/4096, 0x773}, {&(0x7f0000000400)=""/106, 0x2ce}, {&(0x7f0000000740)=""/73, 0x3dd}, {&(0x7f0000000200)=""/77, 0x96}, {&(0x7f00000007c0)=""/154, 0x40d}, {&(0x7f0000000000)=""/22, 0xa}], 0x81, &(0x7f0000000600)=""/191, 0x41, 0x5865}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 08:39:41 executing program 4: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x20000000003, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00'}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newlink={0x60, 0x10, 0x1, 0x70bd25, 0x0, {0x0, 0x14, 0x0, r4, 0x50800}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @ip6gretap={{0xe, 0x1, 'ip6gretap\x00'}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @ipv4={[], [], @private=0xa010100}}, @IFLA_GRE_REMOTE={0x14, 0x7, @remote}]}}}]}, 0x60}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00'}) [ 287.036300][T19130] FAULT_INJECTION: forcing a failure. [ 287.036300][T19130] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 287.088805][T19130] CPU: 1 PID: 19130 Comm: syz-executor.2 Not tainted 5.7.0-rc6-syzkaller #0 [ 287.097599][T19130] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 287.107658][T19130] Call Trace: [ 287.111145][T19130] dump_stack+0x1e9/0x30e [ 287.115482][T19130] should_fail+0x433/0x5b0 [ 287.119912][T19130] prepare_alloc_pages+0x28c/0x4a0 [ 287.125128][T19130] __alloc_pages_nodemask+0xbc/0x5e0 [ 287.130517][T19130] __do_page_cache_readahead+0x1de/0x4f0 [ 287.136169][T19130] generic_file_buffered_read+0x4a5/0x2570 [ 287.142006][T19130] generic_file_splice_read+0x452/0x700 [ 287.147572][T19130] ? splice_shrink_spd+0xb0/0xb0 [ 287.152531][T19130] splice_direct_to_actor+0x3c1/0xb40 [ 287.157916][T19130] ? do_splice_direct+0x340/0x340 [ 287.162954][T19130] do_splice_direct+0x201/0x340 [ 287.167823][T19130] ? security_file_permission+0x50/0xc0 [ 287.173375][T19130] do_sendfile+0x809/0xfe0 [ 287.177812][T19130] __x64_sys_sendfile64+0x164/0x1a0 [ 287.183022][T19130] ? do_syscall_64+0x19/0x1b0 [ 287.187707][T19130] do_syscall_64+0xf3/0x1b0 [ 287.192220][T19130] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 287.198114][T19130] RIP: 0033:0x45ca29 [ 287.202064][T19130] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 287.221669][T19130] RSP: 002b:00007efeff606c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 287.230079][T19130] RAX: ffffffffffffffda RBX: 00000000004fc540 RCX: 000000000045ca29 08:39:41 executing program 1: r0 = socket(0x10, 0x803, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000005540)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000c80)=""/235, 0xeb}], 0x1}}], 0x1, 0x0, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendto(r0, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000b80)=@ethernet={0x0, @local}, 0x80, 0x0}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000ac0)=[{{&(0x7f0000000880)=@caif=@util, 0x80, &(0x7f0000000540)=[{&(0x7f0000000900)=""/128, 0x80}, {&(0x7f0000000980)=""/76, 0x4c}], 0x2}, 0x3f}], 0x1, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_SYS_GET(0xffffffffffffffff, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000a00)={0x0, 0x30}}, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x374, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x14b}, {&(0x7f0000000140)=""/85, 0x20a}, {&(0x7f0000000fc0)=""/4096, 0x773}, {&(0x7f0000000400)=""/106, 0x2ce}, {&(0x7f0000000740)=""/73, 0x3dd}, {&(0x7f0000000200)=""/77, 0x96}, {&(0x7f00000007c0)=""/154, 0x40d}, {&(0x7f0000000000)=""/22, 0xa}], 0x81, &(0x7f0000000600)=""/191, 0x41, 0x6000}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 08:39:41 executing program 3: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x20000000003, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newlink={0x60, 0x10, 0x1, 0x0, 0x11000000, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @ip6gretap={{0xe, 0x1, 'ip6gretap\x00'}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @ipv4={[], [], @loopback}}, @IFLA_GRE_REMOTE={0x14, 0x7, @remote}]}}}]}, 0x60}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00'}) [ 287.238087][T19130] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 287.246060][T19130] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 287.254031][T19130] R10: 000080001d00c0d0 R11: 0000000000000246 R12: 0000000000000005 [ 287.262009][T19130] R13: 00000000000008dc R14: 00000000004cba16 R15: 00007efeff6076d4 08:39:41 executing program 5: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x10, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = socket$inet6(0xa, 0x1, 0x8010800000000084) r1 = socket$kcm(0x2, 0x3, 0x2) recvmsg(r1, &(0x7f0000007500)={&(0x7f0000006f80)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x80, 0x0, 0x0, 0xffffffffffffffff}, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmmsg$inet6(r0, &(0x7f00000000c0)=[{{&(0x7f0000002c80)={0xa, 0x0, 0x0, @loopback}, 0x1c, &(0x7f0000005000)=[{&(0x7f0000002cc0)}], 0x1}}], 0x1, 0x20000040) 08:39:41 executing program 1: r0 = socket(0x10, 0x803, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000005540)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000c80)=""/235, 0xeb}], 0x1}}], 0x1, 0x0, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendto(r0, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000b80)=@ethernet={0x0, @local}, 0x80, 0x0}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000ac0)=[{{&(0x7f0000000880)=@caif=@util, 0x80, &(0x7f0000000540)=[{&(0x7f0000000900)=""/128, 0x80}, {&(0x7f0000000980)=""/76, 0x4c}], 0x2}, 0x3f}], 0x1, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_SYS_GET(0xffffffffffffffff, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000a00)={0x0, 0x30}}, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x374, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x14b}, {&(0x7f0000000140)=""/85, 0x20a}, {&(0x7f0000000fc0)=""/4096, 0x773}, {&(0x7f0000000400)=""/106, 0x2ce}, {&(0x7f0000000740)=""/73, 0x3dd}, {&(0x7f0000000200)=""/77, 0x96}, {&(0x7f00000007c0)=""/154, 0x40d}, {&(0x7f0000000000)=""/22, 0xa}], 0x81, &(0x7f0000000600)=""/191, 0x41, 0x6415}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 08:39:41 executing program 3: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x20000000003, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newlink={0x60, 0x10, 0x1, 0x0, 0x12000000, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @ip6gretap={{0xe, 0x1, 'ip6gretap\x00'}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @ipv4={[], [], @loopback}}, @IFLA_GRE_REMOTE={0x14, 0x7, @remote}]}}}]}, 0x60}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00'}) 08:39:41 executing program 4: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x20000000003, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00'}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newlink={0x60, 0x10, 0x1, 0x70bd25, 0x0, {0x0, 0x60, 0x0, r4, 0x50800}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @ip6gretap={{0xe, 0x1, 'ip6gretap\x00'}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @ipv4={[], [], @private=0xa010100}}, @IFLA_GRE_REMOTE={0x14, 0x7, @remote}]}}}]}, 0x60}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00'}) 08:39:41 executing program 2 (fault-call:8 fault-nth:51): shmget(0x0, 0x4000, 0x780012c9, &(0x7f0000ffc000/0x4000)=nil) shmctl$IPC_RMID(0x0, 0x0) shmat(0x0, &(0x7f0000ffe000/0x1000)=nil, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x2, 0x1) r1 = open(&(0x7f0000000080)='./bus\x00', 0x430c2, 0x0) ftruncate(r1, 0x200004) sendfile(r0, r1, 0x0, 0x80001d00c0d0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) [ 287.738100][T19164] FAULT_INJECTION: forcing a failure. [ 287.738100][T19164] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 287.763050][T19167] IPVS: ftp: loaded support on port[0] = 21 08:39:41 executing program 1: r0 = socket(0x10, 0x803, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000005540)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000c80)=""/235, 0xeb}], 0x1}}], 0x1, 0x0, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendto(r0, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000b80)=@ethernet={0x0, @local}, 0x80, 0x0}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000ac0)=[{{&(0x7f0000000880)=@caif=@util, 0x80, &(0x7f0000000540)=[{&(0x7f0000000900)=""/128, 0x80}, {&(0x7f0000000980)=""/76, 0x4c}], 0x2}, 0x3f}], 0x1, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_SYS_GET(0xffffffffffffffff, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000a00)={0x0, 0x30}}, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x374, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x14b}, {&(0x7f0000000140)=""/85, 0x20a}, {&(0x7f0000000fc0)=""/4096, 0x773}, {&(0x7f0000000400)=""/106, 0x2ce}, {&(0x7f0000000740)=""/73, 0x3dd}, {&(0x7f0000000200)=""/77, 0x96}, {&(0x7f00000007c0)=""/154, 0x40d}, {&(0x7f0000000000)=""/22, 0xa}], 0x81, &(0x7f0000000600)=""/191, 0x41, 0x6558}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) [ 287.789670][T19164] CPU: 1 PID: 19164 Comm: syz-executor.2 Not tainted 5.7.0-rc6-syzkaller #0 [ 287.798375][T19164] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 287.808431][T19164] Call Trace: [ 287.811727][T19164] dump_stack+0x1e9/0x30e [ 287.816067][T19164] should_fail+0x433/0x5b0 [ 287.820496][T19164] prepare_alloc_pages+0x28c/0x4a0 [ 287.826090][T19164] __alloc_pages_nodemask+0xbc/0x5e0 [ 287.831394][T19164] __do_page_cache_readahead+0x1de/0x4f0 [ 287.837375][T19164] generic_file_buffered_read+0x4a5/0x2570 [ 287.843292][T19164] generic_file_splice_read+0x452/0x700 [ 287.848850][T19164] ? splice_shrink_spd+0xb0/0xb0 [ 287.853798][T19164] splice_direct_to_actor+0x3c1/0xb40 [ 287.859182][T19164] ? do_splice_direct+0x340/0x340 [ 287.864209][T19164] do_splice_direct+0x201/0x340 [ 287.869102][T19164] ? security_file_permission+0x50/0xc0 [ 287.874651][T19164] do_sendfile+0x809/0xfe0 [ 287.879176][T19164] __x64_sys_sendfile64+0x164/0x1a0 [ 287.884403][T19164] ? do_syscall_64+0x19/0x1b0 [ 287.889070][T19164] do_syscall_64+0xf3/0x1b0 [ 287.893558][T19164] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 287.899434][T19164] RIP: 0033:0x45ca29 [ 287.903333][T19164] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 287.922911][T19164] RSP: 002b:00007efeff606c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 287.931296][T19164] RAX: ffffffffffffffda RBX: 00000000004fc540 RCX: 000000000045ca29 08:39:41 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$AUDIT_USER_TTY(r3, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x34, 0x464, 0x4, 0x70bd27, 0x25dfdbfe, "bd60fe5099b5e118a5d6d9abd0de32c4c2a6c66298799b0d0731c090591dc409df60", ["", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x40084}, 0x48044) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) stat(&(0x7f0000000280)='./file2\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setfsuid(r4) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newlink={0x60, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @ip6gretap={{0xe, 0x1, 'ip6gretap\x00'}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @ipv4={[], [], @loopback}}, @IFLA_GRE_REMOTE={0x14, 0x7, @remote}]}}}]}, 0x60}}, 0x0) ioctl$SIOCGSTAMPNS(r5, 0x8907, &(0x7f0000000380)) mount$overlay(0x400064, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}]}) rseq(&(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x7, 0x8001, 0x6, 0x1bf3}, 0x4}, 0x20, 0x1, 0x0) [ 287.939259][T19164] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 287.947207][T19164] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 287.955154][T19164] R10: 000080001d00c0d0 R11: 0000000000000246 R12: 0000000000000005 [ 287.964750][T19164] R13: 00000000000008dc R14: 00000000004cba16 R15: 00007efeff6076d4 08:39:41 executing program 3: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x20000000003, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newlink={0x60, 0x10, 0x1, 0x0, 0x13000000, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @ip6gretap={{0xe, 0x1, 'ip6gretap\x00'}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @ipv4={[], [], @loopback}}, @IFLA_GRE_REMOTE={0x14, 0x7, @remote}]}}}]}, 0x60}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00'}) 08:39:41 executing program 4: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x20000000003, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00'}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newlink={0x60, 0x10, 0x1, 0x70bd25, 0x0, {0x0, 0xfc, 0x0, r4, 0x50800}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @ip6gretap={{0xe, 0x1, 'ip6gretap\x00'}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @ipv4={[], [], @private=0xa010100}}, @IFLA_GRE_REMOTE={0x14, 0x7, @remote}]}}}]}, 0x60}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00'}) 08:39:42 executing program 1: r0 = socket(0x10, 0x803, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000005540)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000c80)=""/235, 0xeb}], 0x1}}], 0x1, 0x0, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendto(r0, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000b80)=@ethernet={0x0, @local}, 0x80, 0x0}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000ac0)=[{{&(0x7f0000000880)=@caif=@util, 0x80, &(0x7f0000000540)=[{&(0x7f0000000900)=""/128, 0x80}, {&(0x7f0000000980)=""/76, 0x4c}], 0x2}, 0x3f}], 0x1, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_SYS_GET(0xffffffffffffffff, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000a00)={0x0, 0x30}}, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x374, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x14b}, {&(0x7f0000000140)=""/85, 0x20a}, {&(0x7f0000000fc0)=""/4096, 0x773}, {&(0x7f0000000400)=""/106, 0x2ce}, {&(0x7f0000000740)=""/73, 0x3dd}, {&(0x7f0000000200)=""/77, 0x96}, {&(0x7f00000007c0)=""/154, 0x40d}, {&(0x7f0000000000)=""/22, 0xa}], 0x81, &(0x7f0000000600)=""/191, 0x41, 0x6800}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 08:39:42 executing program 2 (fault-call:8 fault-nth:52): shmget(0x0, 0x4000, 0x780012c9, &(0x7f0000ffc000/0x4000)=nil) shmctl$IPC_RMID(0x0, 0x0) shmat(0x0, &(0x7f0000ffe000/0x1000)=nil, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x2, 0x1) r1 = open(&(0x7f0000000080)='./bus\x00', 0x430c2, 0x0) ftruncate(r1, 0x200004) sendfile(r0, r1, 0x0, 0x80001d00c0d0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) [ 288.054844][T19208] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. 08:39:42 executing program 3: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x20000000003, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newlink={0x60, 0x10, 0x1, 0x0, 0x14000000, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @ip6gretap={{0xe, 0x1, 'ip6gretap\x00'}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @ipv4={[], [], @loopback}}, @IFLA_GRE_REMOTE={0x14, 0x7, @remote}]}}}]}, 0x60}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00'}) [ 288.163713][T19218] FAULT_INJECTION: forcing a failure. [ 288.163713][T19218] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 288.214296][T19218] CPU: 1 PID: 19218 Comm: syz-executor.2 Not tainted 5.7.0-rc6-syzkaller #0 [ 288.223125][T19218] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 288.233187][T19218] Call Trace: [ 288.236485][T19218] dump_stack+0x1e9/0x30e [ 288.240817][T19218] should_fail+0x433/0x5b0 [ 288.245248][T19218] prepare_alloc_pages+0x28c/0x4a0 [ 288.250906][T19218] __alloc_pages_nodemask+0xbc/0x5e0 [ 288.256206][T19218] __do_page_cache_readahead+0x1de/0x4f0 [ 288.261975][T19218] generic_file_buffered_read+0x4a5/0x2570 [ 288.267809][T19218] generic_file_splice_read+0x452/0x700 [ 288.273369][T19218] ? splice_shrink_spd+0xb0/0xb0 [ 288.278319][T19218] splice_direct_to_actor+0x3c1/0xb40 [ 288.283704][T19218] ? do_splice_direct+0x340/0x340 [ 288.288745][T19218] do_splice_direct+0x201/0x340 [ 288.293754][T19218] ? security_file_permission+0x50/0xc0 [ 288.299308][T19218] do_sendfile+0x809/0xfe0 [ 288.303750][T19218] __x64_sys_sendfile64+0x164/0x1a0 [ 288.308957][T19218] ? do_syscall_64+0x19/0x1b0 [ 288.313680][T19218] do_syscall_64+0xf3/0x1b0 [ 288.318483][T19218] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 288.324378][T19218] RIP: 0033:0x45ca29 [ 288.328265][T19218] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 288.348065][T19218] RSP: 002b:00007efeff606c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 288.356484][T19218] RAX: ffffffffffffffda RBX: 00000000004fc540 RCX: 000000000045ca29 [ 288.364453][T19218] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 288.372439][T19218] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 288.380415][T19218] R10: 000080001d00c0d0 R11: 0000000000000246 R12: 0000000000000005 [ 288.388404][T19218] R13: 00000000000008dc R14: 00000000004cba16 R15: 00007efeff6076d4 08:39:42 executing program 5: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x10, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = socket$inet6(0xa, 0x1, 0x8010800000000084) r1 = socket$kcm(0x2, 0x3, 0x2) recvmsg(r1, &(0x7f0000007500)={&(0x7f0000006f80)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x80, 0x0, 0x0, 0xffffffffffffffff}, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmmsg$inet6(r0, &(0x7f00000000c0)=[{{&(0x7f0000002c80)={0xa, 0x0, 0x0, @loopback}, 0x1c, &(0x7f0000005000)=[{&(0x7f0000002cc0)="ea", 0x1}], 0x1}}], 0x1, 0x0) 08:39:42 executing program 1: r0 = socket(0x10, 0x803, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000005540)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000c80)=""/235, 0xeb}], 0x1}}], 0x1, 0x0, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendto(r0, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000b80)=@ethernet={0x0, @local}, 0x80, 0x0}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000ac0)=[{{&(0x7f0000000880)=@caif=@util, 0x80, &(0x7f0000000540)=[{&(0x7f0000000900)=""/128, 0x80}, {&(0x7f0000000980)=""/76, 0x4c}], 0x2}, 0x3f}], 0x1, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_SYS_GET(0xffffffffffffffff, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000a00)={0x0, 0x30}}, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x374, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x14b}, {&(0x7f0000000140)=""/85, 0x20a}, {&(0x7f0000000fc0)=""/4096, 0x773}, {&(0x7f0000000400)=""/106, 0x2ce}, {&(0x7f0000000740)=""/73, 0x3dd}, {&(0x7f0000000200)=""/77, 0x96}, {&(0x7f00000007c0)=""/154, 0x40d}, {&(0x7f0000000000)=""/22, 0xa}], 0x81, &(0x7f0000000600)=""/191, 0x41, 0x6c00}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 08:39:42 executing program 0: getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setresgid(0x0, r0, 0x0) r1 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setresgid(0x0, r2, 0x0) getresgid(&(0x7f0000000080), &(0x7f0000000100), &(0x7f0000000300)=0x0) stat(&(0x7f0000000340)='./file0\x00', &(0x7f0000000380)) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ip6gretap={{0xe, 0x1, 'ip6gretap\x00'}, {0x4}}}]}, 0x38}}, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000400)={0x0, 0x0, 0x0}, &(0x7f0000000440)=0xc) r7 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setresgid(0x0, r8, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000580)=ANY=[@ANYBLOB="02000000010004000000000002000100", @ANYRES32=0x0, @ANYBLOB="02000100", @ANYRES32=0x0, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="02000100", @ANYRES32, @ANYBLOB="02000700", @ANYRES32=0x0, @ANYBLOB="02000100", @ANYRES32=0x0, @ANYBLOB="02000300", @ANYRES32=0x0, @ANYBLOB="02000600", @ANYRES32=0x0, @ANYBLOB="02000700", @ANYRES32=0x0, @ANYBLOB="040005000000000008000300", @ANYRES32=0x0, @ANYBLOB="08000200", @ANYRES32=r0, @ANYBLOB="08000400", @ANYRES32=r2, @ANYBLOB="08000200", @ANYRES32=r3, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="08000500", @ANYRES32=r6, @ANYBLOB, @ANYRES32=r8, @ANYBLOB="08000500", @ANYRES32=r9, @ANYBLOB="1000049d000000002000020000000000"], 0xac, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001240)={0xffffffffffffffff}) r11 = dup(r10) ioctl$PERF_EVENT_IOC_ENABLE(r11, 0x8912, 0x400200) syz_mount_image$iso9660(&(0x7f00000000c0)='iso9660\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={[{@gid={'gid'}}]}) 08:39:42 executing program 3: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x20000000003, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newlink={0x60, 0x10, 0x1, 0x0, 0x3f000000, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @ip6gretap={{0xe, 0x1, 'ip6gretap\x00'}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @ipv4={[], [], @loopback}}, @IFLA_GRE_REMOTE={0x14, 0x7, @remote}]}}}]}, 0x60}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00'}) 08:39:42 executing program 4: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x20000000003, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00'}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newlink={0x60, 0x10, 0x1, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r4, 0x50800}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @ip6gretap={{0xe, 0x1, 'ip6gretap\x00'}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @ipv4={[], [], @private=0xa010100}}, @IFLA_GRE_REMOTE={0x14, 0x7, @remote}]}}}]}, 0x60}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00'}) 08:39:42 executing program 2 (fault-call:8 fault-nth:53): shmget(0x0, 0x4000, 0x780012c9, &(0x7f0000ffc000/0x4000)=nil) shmctl$IPC_RMID(0x0, 0x0) shmat(0x0, &(0x7f0000ffe000/0x1000)=nil, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x2, 0x1) r1 = open(&(0x7f0000000080)='./bus\x00', 0x430c2, 0x0) ftruncate(r1, 0x200004) sendfile(r0, r1, 0x0, 0x80001d00c0d0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) 08:39:42 executing program 0: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000000c0)='./file0\x00', 0xffc00003, 0x1, &(0x7f0000000280)=[{&(0x7f0000000140)="0400000900000000666174000404090a0200027400f801", 0x17, 0x2}], 0x0, &(0x7f0000000100)={[{@fat=@nocase='nocase'}]}) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') r5 = syz_open_dev$mouse(&(0x7f0000000240)='/dev/input/mouse#\x00', 0x3, 0x1) sendmsg$NFNL_MSG_CTHELPER_NEW(r5, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x68, 0x0, 0x9, 0x201, 0x0, 0x0, {0xc, 0x0, 0x1}, [@NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0xffffffff}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x9}}, @NFCTH_TUPLE={0x28, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x800}}]}, 0x68}, 0x1, 0x0, 0x0, 0x4}, 0xc090) sendfile(r0, r4, 0x0, 0x800000080004103) [ 288.588026][T19245] FAULT_INJECTION: forcing a failure. [ 288.588026][T19245] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 288.599588][T19241] IPVS: ftp: loaded support on port[0] = 21 [ 288.607377][T19245] CPU: 1 PID: 19245 Comm: syz-executor.2 Not tainted 5.7.0-rc6-syzkaller #0 [ 288.616056][T19245] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 288.626108][T19245] Call Trace: [ 288.629406][T19245] dump_stack+0x1e9/0x30e [ 288.633912][T19245] should_fail+0x433/0x5b0 [ 288.638332][T19245] prepare_alloc_pages+0x28c/0x4a0 [ 288.643479][T19245] __alloc_pages_nodemask+0xbc/0x5e0 [ 288.648774][T19245] __do_page_cache_readahead+0x1de/0x4f0 [ 288.654416][T19245] generic_file_buffered_read+0x4a5/0x2570 [ 288.660236][T19245] generic_file_splice_read+0x452/0x700 [ 288.665788][T19245] ? splice_shrink_spd+0xb0/0xb0 [ 288.670731][T19245] splice_direct_to_actor+0x3c1/0xb40 [ 288.676115][T19245] ? do_splice_direct+0x340/0x340 [ 288.681276][T19245] do_splice_direct+0x201/0x340 08:39:42 executing program 1: r0 = socket(0x10, 0x803, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000005540)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000c80)=""/235, 0xeb}], 0x1}}], 0x1, 0x0, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendto(r0, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000b80)=@ethernet={0x0, @local}, 0x80, 0x0}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000ac0)=[{{&(0x7f0000000880)=@caif=@util, 0x80, &(0x7f0000000540)=[{&(0x7f0000000900)=""/128, 0x80}, {&(0x7f0000000980)=""/76, 0x4c}], 0x2}, 0x3f}], 0x1, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_SYS_GET(0xffffffffffffffff, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000a00)={0x0, 0x30}}, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x374, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x14b}, {&(0x7f0000000140)=""/85, 0x20a}, {&(0x7f0000000fc0)=""/4096, 0x773}, {&(0x7f0000000400)=""/106, 0x2ce}, {&(0x7f0000000740)=""/73, 0x3dd}, {&(0x7f0000000200)=""/77, 0x96}, {&(0x7f00000007c0)=""/154, 0x40d}, {&(0x7f0000000000)=""/22, 0xa}], 0x81, &(0x7f0000000600)=""/191, 0x41, 0x7400}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) [ 288.686135][T19245] ? security_file_permission+0x50/0xc0 [ 288.691770][T19245] do_sendfile+0x809/0xfe0 [ 288.696196][T19245] __x64_sys_sendfile64+0x164/0x1a0 [ 288.701399][T19245] ? do_syscall_64+0x19/0x1b0 [ 288.706086][T19245] do_syscall_64+0xf3/0x1b0 [ 288.710604][T19245] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 288.716495][T19245] RIP: 0033:0x45ca29 08:39:42 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000000)={0x84, @empty, 0x0, 0x2, 'lblc\x00'}, 0x2c) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm_plock\x00', 0x200000, 0x0) ioctl$SNDRV_PCM_IOCTL_USER_PVERSION(r2, 0x40044104, &(0x7f0000000080)=0x3) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newlink={0x60, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @ip6gretap={{0xe, 0x1, 'ip6gretap\x00'}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @ipv4={[], [], @loopback}}, @IFLA_GRE_REMOTE={0x14, 0x7, @remote}]}}}]}, 0x60}}, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205647, &(0x7f0000000240)={0xa20000, 0xfffff001, 0x8, r3, 0x0, &(0x7f0000000200)={0x4c850a, 0x200, [], @p_u8=&(0x7f00000001c0)=0x48}}) sendmsg$key(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)={0x2, 0x5, 0x47, 0x5, 0x12, 0x0, 0x70bd25, 0x25dfdbfb, [@sadb_x_policy={0x8, 0x12, 0x2, 0x1, 0x0, 0x6e6bba, 0x1, {0x6, 0xff, 0x1, 0x20, 0x0, 0x5, 0x0, @in6=@private0, @in6=@private1}}, @sadb_x_sec_ctx={0x1, 0x18, 0x0, 0x5}, @sadb_x_filter={0x5, 0x1a, @in=@loopback, @in=@multicast1, 0x11, 0xc, 0x16}, @sadb_x_nat_t_port={0x1, 0x15, 0x4e24}, @sadb_x_nat_t_port={0x1, 0x16, 0x4e22}]}, 0x90}}, 0x10) getsockopt$X25_QBITINCL(r5, 0x106, 0x1, &(0x7f0000000280), &(0x7f00000002c0)=0x4) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r7 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r8 = dup(r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$BLKPG(r8, 0x1269, &(0x7f0000000180)={0x7, 0x0, 0x7a, &(0x7f00000000c0)="b97c9bdbbbc7363955c775db8f8ba10d6209d1ef1777e778bcd3749b04ea2d082cdc38dfd2609198f47fe35e2e9205677112f908de30c6e63759bc9c4ea0acf4cac6461fc7ce92a79e40d4b6cc207a89fbe22d628d7eeb32a0840f5e857cc38005d271f7fcd35217f1009897b70f43e61d96d7f9d24e5775ed77"}) r9 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) setsockopt$IP_VS_SO_SET_ADD(r9, 0x0, 0x482, &(0x7f0000000140)={0x84, @rand_addr, 0x0, 0x1102, 'fo\x00'}, 0x2c) setsockopt$IP_VS_SO_SET_FLUSH(r1, 0x0, 0x485, 0x0, 0x0) 08:39:42 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000002c0)) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x100000000, 0x0) ioctl$SNDCTL_DSP_STEREO(0xffffffffffffffff, 0xc0045003, &(0x7f0000000000)) clone(0xe1004d7c, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) close(0xffffffffffffffff) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$KVM_SET_XCRS(r1, 0x4188aea7, &(0x7f0000000100)=ANY=[@ANYBLOB="03000000fdce0000000000d6d7400000000500000000000000e78e0000000000000000000000000000000000000002000000000000000000"]) ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, &(0x7f0000000040)=0x82b9) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dlm-control\x00', 0x800, 0x0) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r2, 0xc0105303, &(0x7f0000000180)={0x83, 0x7, 0xba}) [ 288.720391][T19245] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 288.740163][T19245] RSP: 002b:00007efeff606c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 288.748578][T19245] RAX: ffffffffffffffda RBX: 00000000004fc540 RCX: 000000000045ca29 [ 288.756553][T19245] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 288.764522][T19245] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 288.772854][T19245] R10: 000080001d00c0d0 R11: 0000000000000246 R12: 0000000000000005 [ 288.781019][T19245] R13: 00000000000008dc R14: 00000000004cba16 R15: 00007efeff6076d4 08:39:42 executing program 1: r0 = socket(0x10, 0x803, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000005540)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000c80)=""/235, 0xeb}], 0x1}}], 0x1, 0x0, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendto(r0, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000b80)=@ethernet={0x0, @local}, 0x80, 0x0}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000ac0)=[{{&(0x7f0000000880)=@caif=@util, 0x80, &(0x7f0000000540)=[{&(0x7f0000000900)=""/128, 0x80}, {&(0x7f0000000980)=""/76, 0x4c}], 0x2}, 0x3f}], 0x1, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_SYS_GET(0xffffffffffffffff, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000a00)={0x0, 0x30}}, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x374, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x14b}, {&(0x7f0000000140)=""/85, 0x20a}, {&(0x7f0000000fc0)=""/4096, 0x773}, {&(0x7f0000000400)=""/106, 0x2ce}, {&(0x7f0000000740)=""/73, 0x3dd}, {&(0x7f0000000200)=""/77, 0x96}, {&(0x7f00000007c0)=""/154, 0x40d}, {&(0x7f0000000000)=""/22, 0xa}], 0x81, &(0x7f0000000600)=""/191, 0x41, 0x7817}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 08:39:42 executing program 3: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x20000000003, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newlink={0x60, 0x10, 0x1, 0x0, 0x40000000, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @ip6gretap={{0xe, 0x1, 'ip6gretap\x00'}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @ipv4={[], [], @loopback}}, @IFLA_GRE_REMOTE={0x14, 0x7, @remote}]}}}]}, 0x60}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00'}) [ 288.849954][T19284] IPVS: ftp: loaded support on port[0] = 21 [ 289.078746][T19317] IPVS: ftp: loaded support on port[0] = 21 08:39:43 executing program 2 (fault-call:8 fault-nth:54): shmget(0x0, 0x4000, 0x780012c9, &(0x7f0000ffc000/0x4000)=nil) shmctl$IPC_RMID(0x0, 0x0) shmat(0x0, &(0x7f0000ffe000/0x1000)=nil, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x2, 0x1) r1 = open(&(0x7f0000000080)='./bus\x00', 0x430c2, 0x0) ftruncate(r1, 0x200004) sendfile(r0, r1, 0x0, 0x80001d00c0d0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) 08:39:43 executing program 4: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x20000000003, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00'}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newlink={0x60, 0x10, 0x1, 0x70bd25, 0x0, {0x0, 0x0, 0x2, r4, 0x50800}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @ip6gretap={{0xe, 0x1, 'ip6gretap\x00'}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @ipv4={[], [], @private=0xa010100}}, @IFLA_GRE_REMOTE={0x14, 0x7, @remote}]}}}]}, 0x60}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00'}) 08:39:43 executing program 1: r0 = socket(0x10, 0x803, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000005540)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000c80)=""/235, 0xeb}], 0x1}}], 0x1, 0x0, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendto(r0, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000b80)=@ethernet={0x0, @local}, 0x80, 0x0}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000ac0)=[{{&(0x7f0000000880)=@caif=@util, 0x80, &(0x7f0000000540)=[{&(0x7f0000000900)=""/128, 0x80}, {&(0x7f0000000980)=""/76, 0x4c}], 0x2}, 0x3f}], 0x1, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_SYS_GET(0xffffffffffffffff, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000a00)={0x0, 0x30}}, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x374, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x14b}, {&(0x7f0000000140)=""/85, 0x20a}, {&(0x7f0000000fc0)=""/4096, 0x773}, {&(0x7f0000000400)=""/106, 0x2ce}, {&(0x7f0000000740)=""/73, 0x3dd}, {&(0x7f0000000200)=""/77, 0x96}, {&(0x7f00000007c0)=""/154, 0x40d}, {&(0x7f0000000000)=""/22, 0xa}], 0x81, &(0x7f0000000600)=""/191, 0x41, 0x7a00}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 08:39:43 executing program 3: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x20000000003, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newlink={0x60, 0x10, 0x1, 0x0, 0x55010000, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @ip6gretap={{0xe, 0x1, 'ip6gretap\x00'}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @ipv4={[], [], @loopback}}, @IFLA_GRE_REMOTE={0x14, 0x7, @remote}]}}}]}, 0x60}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00'}) 08:39:43 executing program 5: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x10, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = socket$inet6(0xa, 0x1, 0x8010800000000084) r1 = socket$kcm(0x2, 0x3, 0x2) recvmsg(r1, &(0x7f0000007500)={&(0x7f0000006f80)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x80, 0x0, 0x0, 0xffffffffffffffff}, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmmsg$inet6(r0, &(0x7f00000000c0)=[{{&(0x7f0000002c80)={0xa, 0x0, 0x0, @loopback}, 0x1c, &(0x7f0000005000)=[{&(0x7f0000002cc0)="ea", 0x1}], 0x1}}], 0x1, 0x0) 08:39:43 executing program 0: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18020000f5feff0000000000000009008500000041000000950000000000000067e83aa2f14c96a47f0918283ac84da42af1d0880268ff3b5387ec35b5086d515847ab1246cb0310ffa805bcaa7f7148cfd65a286f5f5d08dcdfcc0a61e9abb825276d851e903c9c336e7dd405009442de25a9abde0bbc118e8fba52892e8ad2618c5b38e34fdba3fd0ee92faa304587d7"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x30) unshare(0x42000400) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r0, 0x1a0, 0xf00, 0x0, &(0x7f0000000280)="20cf4d411d520bdfae1c3821271c", 0x0, 0x34f}, 0x28) arch_prctl$ARCH_GET_CPUID(0x1011) [ 289.411305][T19347] FAULT_INJECTION: forcing a failure. [ 289.411305][T19347] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 289.441053][T19358] IPVS: ftp: loaded support on port[0] = 21 [ 289.449988][T19347] CPU: 1 PID: 19347 Comm: syz-executor.2 Not tainted 5.7.0-rc6-syzkaller #0 [ 289.453677][T19357] IPVS: ftp: loaded support on port[0] = 21 [ 289.458744][T19347] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 289.458748][T19347] Call Trace: [ 289.458767][T19347] dump_stack+0x1e9/0x30e [ 289.458778][T19347] should_fail+0x433/0x5b0 [ 289.458792][T19347] prepare_alloc_pages+0x28c/0x4a0 [ 289.458804][T19347] __alloc_pages_nodemask+0xbc/0x5e0 [ 289.458817][T19347] __do_page_cache_readahead+0x1de/0x4f0 [ 289.458833][T19347] generic_file_buffered_read+0x4a5/0x2570 [ 289.458851][T19347] generic_file_splice_read+0x452/0x700 [ 289.514664][T19347] ? splice_shrink_spd+0xb0/0xb0 [ 289.519577][T19347] splice_direct_to_actor+0x3c1/0xb40 [ 289.525271][T19347] ? do_splice_direct+0x340/0x340 [ 289.530271][T19347] do_splice_direct+0x201/0x340 [ 289.535447][T19347] ? security_file_permission+0x50/0xc0 [ 289.540962][T19347] do_sendfile+0x809/0xfe0 [ 289.545358][T19347] __x64_sys_sendfile64+0x164/0x1a0 [ 289.551320][T19347] ? do_syscall_64+0x19/0x1b0 [ 289.555970][T19347] do_syscall_64+0xf3/0x1b0 [ 289.560446][T19347] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 289.566310][T19347] RIP: 0033:0x45ca29 [ 289.570180][T19347] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 289.589755][T19347] RSP: 002b:00007efeff606c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 289.598150][T19347] RAX: ffffffffffffffda RBX: 00000000004fc540 RCX: 000000000045ca29 08:39:43 executing program 1: r0 = socket(0x10, 0x803, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000005540)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000c80)=""/235, 0xeb}], 0x1}}], 0x1, 0x0, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendto(r0, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000b80)=@ethernet={0x0, @local}, 0x80, 0x0}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000ac0)=[{{&(0x7f0000000880)=@caif=@util, 0x80, &(0x7f0000000540)=[{&(0x7f0000000900)=""/128, 0x80}, {&(0x7f0000000980)=""/76, 0x4c}], 0x2}, 0x3f}], 0x1, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_SYS_GET(0xffffffffffffffff, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000a00)={0x0, 0x30}}, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x374, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x14b}, {&(0x7f0000000140)=""/85, 0x20a}, {&(0x7f0000000fc0)=""/4096, 0x773}, {&(0x7f0000000400)=""/106, 0x2ce}, {&(0x7f0000000740)=""/73, 0x3dd}, {&(0x7f0000000200)=""/77, 0x96}, {&(0x7f00000007c0)=""/154, 0x40d}, {&(0x7f0000000000)=""/22, 0xa}], 0x81, &(0x7f0000000600)=""/191, 0x41, 0x8100}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 08:39:43 executing program 4: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x20000000003, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00'}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newlink={0x60, 0x10, 0x1, 0x70bd25, 0x0, {0x0, 0x0, 0x3, r4, 0x50800}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @ip6gretap={{0xe, 0x1, 'ip6gretap\x00'}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @ipv4={[], [], @private=0xa010100}}, @IFLA_GRE_REMOTE={0x14, 0x7, @remote}]}}}]}, 0x60}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00'}) [ 289.606094][T19347] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 289.614168][T19347] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 289.622112][T19347] R10: 000080001d00c0d0 R11: 0000000000000246 R12: 0000000000000005 [ 289.630055][T19347] R13: 00000000000008dc R14: 00000000004cba16 R15: 00007efeff6076d4 08:39:43 executing program 3: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x20000000003, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newlink={0x60, 0x10, 0x1, 0x0, 0x60000000, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @ip6gretap={{0xe, 0x1, 'ip6gretap\x00'}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @ipv4={[], [], @loopback}}, @IFLA_GRE_REMOTE={0x14, 0x7, @remote}]}}}]}, 0x60}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00'}) 08:39:43 executing program 1: r0 = socket(0x10, 0x803, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000005540)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000c80)=""/235, 0xeb}], 0x1}}], 0x1, 0x0, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendto(r0, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000b80)=@ethernet={0x0, @local}, 0x80, 0x0}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000ac0)=[{{&(0x7f0000000880)=@caif=@util, 0x80, &(0x7f0000000540)=[{&(0x7f0000000900)=""/128, 0x80}, {&(0x7f0000000980)=""/76, 0x4c}], 0x2}, 0x3f}], 0x1, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_SYS_GET(0xffffffffffffffff, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000a00)={0x0, 0x30}}, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x374, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x14b}, {&(0x7f0000000140)=""/85, 0x20a}, {&(0x7f0000000fc0)=""/4096, 0x773}, {&(0x7f0000000400)=""/106, 0x2ce}, {&(0x7f0000000740)=""/73, 0x3dd}, {&(0x7f0000000200)=""/77, 0x96}, {&(0x7f00000007c0)=""/154, 0x40d}, {&(0x7f0000000000)=""/22, 0xa}], 0x81, &(0x7f0000000600)=""/191, 0x41, 0x8415}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 08:39:43 executing program 1: r0 = socket(0x10, 0x803, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000005540)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000c80)=""/235, 0xeb}], 0x1}}], 0x1, 0x0, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendto(r0, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000b80)=@ethernet={0x0, @local}, 0x80, 0x0}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000ac0)=[{{&(0x7f0000000880)=@caif=@util, 0x80, &(0x7f0000000540)=[{&(0x7f0000000900)=""/128, 0x80}, {&(0x7f0000000980)=""/76, 0x4c}], 0x2}, 0x3f}], 0x1, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_SYS_GET(0xffffffffffffffff, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000a00)={0x0, 0x30}}, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x374, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x14b}, {&(0x7f0000000140)=""/85, 0x20a}, {&(0x7f0000000fc0)=""/4096, 0x773}, {&(0x7f0000000400)=""/106, 0x2ce}, {&(0x7f0000000740)=""/73, 0x3dd}, {&(0x7f0000000200)=""/77, 0x96}, {&(0x7f00000007c0)=""/154, 0x40d}, {&(0x7f0000000000)=""/22, 0xa}], 0x81, &(0x7f0000000600)=""/191, 0x41, 0x8815}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 08:39:43 executing program 3: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x20000000003, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newlink={0x60, 0x10, 0x1, 0x0, 0x65580000, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @ip6gretap={{0xe, 0x1, 'ip6gretap\x00'}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @ipv4={[], [], @loopback}}, @IFLA_GRE_REMOTE={0x14, 0x7, @remote}]}}}]}, 0x60}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00'}) 08:39:43 executing program 2 (fault-call:8 fault-nth:55): shmget(0x0, 0x4000, 0x780012c9, &(0x7f0000ffc000/0x4000)=nil) shmctl$IPC_RMID(0x0, 0x0) shmat(0x0, &(0x7f0000ffe000/0x1000)=nil, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x2, 0x1) r1 = open(&(0x7f0000000080)='./bus\x00', 0x430c2, 0x0) ftruncate(r1, 0x200004) sendfile(r0, r1, 0x0, 0x80001d00c0d0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) 08:39:43 executing program 4: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x20000000003, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00'}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newlink={0x60, 0x10, 0x1, 0x70bd25, 0x0, {0x0, 0x0, 0x4, r4, 0x50800}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @ip6gretap={{0xe, 0x1, 'ip6gretap\x00'}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @ipv4={[], [], @private=0xa010100}}, @IFLA_GRE_REMOTE={0x14, 0x7, @remote}]}}}]}, 0x60}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00'}) 08:39:43 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000400)="6653070000053c27bc3376003639405cb4aed12f0000001500ae47a825d86800278dcff47d010000805acf4f8f36460234432479aed75d492b415bcee00a06dc9d8e99adaf81dcfc6afd983f79e65199615607676f8f9fc0ebf8b0b16d6f2c59957ab364884b3c5d05692e664ebf68e6faa53367f05f4ad61421349f2f11e931e7d62ead037cd2157df6b2bcb47fb53455560c8ef00fca4fafa924edfe92175aaa1c4ecc7aeeb72e0d050feace34b52d9e5f755563698c7e24ab61f0866f15da7f480800", 0xc4}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) write$FUSE_ATTR(0xffffffffffffffff, &(0x7f0000000080)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0xfffffffe}}}, 0x78) tkill(r0, 0x3c) r1 = creat(&(0x7f0000000000)='./file0\x00', 0x90) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r1, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000200)={0xc8, 0x3, 0x1, 0x201, 0x0, 0x0, {0x7, 0x0, 0x4}, [@CTA_ID={0x8, 0xc, 0x1, 0x0, 0x2}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x1002}, @CTA_TUPLE_ORIG={0x7c, 0x1, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @private1={0xfc, 0x1, [], 0x1}}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @empty}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}]}, @CTA_NAT_SRC={0x20, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @empty}, @CTA_NAT_V4_MINIP={0x8, 0x1, @empty}]}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x400}]}, 0xc8}}, 0x840) ptrace$cont(0x18, r0, 0x0, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$LOOP_SET_STATUS64(r3, 0x4c04, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x100000001, 0x11, 0x0, 0x4, 0x14, 0x15, "e66222aebf940de51e2ebbce485d4228efa9d5eea9a4112fb161f58305ff06754925e30fac59acb6b69ef64728b3b4da7770cdeffec117af6475ce5275c99ac7", "cfaa4cb359a0c1f05f03bf566da689d901b8df18a7e8e8c1d37e37c3b82ce1cf8746f33762d34bfb1507e20d3500e6129d56a6283e8c402aa4c746e42b33294b", "94ac4c70880f65d5bfd5b632bc3b786546c1daaccbf9a0267597c8e4a9884fb2", [0x1, 0x5]}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) 08:39:43 executing program 0: unshare(0x40040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) r0 = socket$inet(0x2, 0x5, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000280)={'lo\x00', {0x2, 0x0, @remote}}) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bind$bt_sco(r2, &(0x7f0000000000), 0x8) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000100)={'lo\x00', {0x2, 0x0, @local}}) [ 289.980625][T19432] FAULT_INJECTION: forcing a failure. [ 289.980625][T19432] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 290.011726][T19432] CPU: 0 PID: 19432 Comm: syz-executor.2 Not tainted 5.7.0-rc6-syzkaller #0 [ 290.021043][T19432] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 290.026670][T19440] IPVS: ftp: loaded support on port[0] = 21 [ 290.031088][T19432] Call Trace: [ 290.031107][T19432] dump_stack+0x1e9/0x30e [ 290.031131][T19432] should_fail+0x433/0x5b0 [ 290.048991][T19432] prepare_alloc_pages+0x28c/0x4a0 [ 290.054191][T19432] __alloc_pages_nodemask+0xbc/0x5e0 [ 290.059487][T19432] __do_page_cache_readahead+0x1de/0x4f0 [ 290.065210][T19432] generic_file_buffered_read+0x4a5/0x2570 [ 290.071024][T19432] generic_file_splice_read+0x452/0x700 [ 290.076578][T19432] ? splice_shrink_spd+0xb0/0xb0 [ 290.081611][T19432] splice_direct_to_actor+0x3c1/0xb40 [ 290.087346][T19432] ? do_splice_direct+0x340/0x340 [ 290.092374][T19432] do_splice_direct+0x201/0x340 [ 290.097225][T19432] ? security_file_permission+0x50/0xc0 [ 290.102802][T19432] do_sendfile+0x809/0xfe0 [ 290.107230][T19432] __x64_sys_sendfile64+0x164/0x1a0 [ 290.112429][T19432] ? do_syscall_64+0x19/0x1b0 [ 290.117115][T19432] do_syscall_64+0xf3/0x1b0 [ 290.121626][T19432] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 290.127512][T19432] RIP: 0033:0x45ca29 [ 290.131403][T19432] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 290.151188][T19432] RSP: 002b:00007efeff606c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 290.159596][T19432] RAX: ffffffffffffffda RBX: 00000000004fc540 RCX: 000000000045ca29 [ 290.167580][T19432] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 290.175544][T19432] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 290.183531][T19432] R10: 000080001d00c0d0 R11: 0000000000000246 R12: 0000000000000005 [ 290.191497][T19432] R13: 00000000000008dc R14: 00000000004cba16 R15: 00007efeff6076d4 08:39:44 executing program 5: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x10, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = socket$inet6(0xa, 0x1, 0x8010800000000084) r1 = socket$kcm(0x2, 0x3, 0x2) recvmsg(r1, &(0x7f0000007500)={&(0x7f0000006f80)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x80, 0x0, 0x0, 0xffffffffffffffff}, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmmsg$inet6(r0, &(0x7f00000000c0)=[{{&(0x7f0000002c80)={0xa, 0x0, 0x0, @loopback}, 0x1c, &(0x7f0000005000)=[{&(0x7f0000002cc0)="ea", 0x1}], 0x1}}], 0x1, 0x0) 08:39:44 executing program 3: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x20000000003, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newlink={0x60, 0x10, 0x1, 0x0, 0x81000000, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @ip6gretap={{0xe, 0x1, 'ip6gretap\x00'}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @ipv4={[], [], @loopback}}, @IFLA_GRE_REMOTE={0x14, 0x7, @remote}]}}}]}, 0x60}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00'}) 08:39:44 executing program 1: r0 = socket(0x10, 0x803, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000005540)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000c80)=""/235, 0xeb}], 0x1}}], 0x1, 0x0, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendto(r0, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000b80)=@ethernet={0x0, @local}, 0x80, 0x0}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000ac0)=[{{&(0x7f0000000880)=@caif=@util, 0x80, &(0x7f0000000540)=[{&(0x7f0000000900)=""/128, 0x80}, {&(0x7f0000000980)=""/76, 0x4c}], 0x2}, 0x3f}], 0x1, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_SYS_GET(0xffffffffffffffff, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000a00)={0x0, 0x30}}, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x374, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x14b}, {&(0x7f0000000140)=""/85, 0x20a}, {&(0x7f0000000fc0)=""/4096, 0x773}, {&(0x7f0000000400)=""/106, 0x2ce}, {&(0x7f0000000740)=""/73, 0x3dd}, {&(0x7f0000000200)=""/77, 0x96}, {&(0x7f00000007c0)=""/154, 0x40d}, {&(0x7f0000000000)=""/22, 0xa}], 0x81, &(0x7f0000000600)=""/191, 0x41, 0x8847}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 08:39:44 executing program 4: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x20000000003, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00'}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newlink={0x60, 0x10, 0x1, 0x70bd25, 0x0, {0x0, 0x0, 0x5, r4, 0x50800}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @ip6gretap={{0xe, 0x1, 'ip6gretap\x00'}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @ipv4={[], [], @private=0xa010100}}, @IFLA_GRE_REMOTE={0x14, 0x7, @remote}]}}}]}, 0x60}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00'}) [ 290.227725][T19440] IPVS: ftp: loaded support on port[0] = 21 [ 290.305424][T19482] IPVS: ftp: loaded support on port[0] = 21 08:39:44 executing program 3: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x20000000003, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newlink={0x60, 0x10, 0x1, 0x0, 0x88470000, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @ip6gretap={{0xe, 0x1, 'ip6gretap\x00'}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @ipv4={[], [], @loopback}}, @IFLA_GRE_REMOTE={0x14, 0x7, @remote}]}}}]}, 0x60}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00'}) 08:39:44 executing program 4: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x20000000003, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00'}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newlink={0x60, 0x10, 0x1, 0x70bd25, 0x0, {0x0, 0x0, 0x6, r4, 0x50800}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @ip6gretap={{0xe, 0x1, 'ip6gretap\x00'}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @ipv4={[], [], @private=0xa010100}}, @IFLA_GRE_REMOTE={0x14, 0x7, @remote}]}}}]}, 0x60}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00'}) 08:39:44 executing program 1: r0 = socket(0x10, 0x803, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000005540)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000c80)=""/235, 0xeb}], 0x1}}], 0x1, 0x0, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendto(r0, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000b80)=@ethernet={0x0, @local}, 0x80, 0x0}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000ac0)=[{{&(0x7f0000000880)=@caif=@util, 0x80, &(0x7f0000000540)=[{&(0x7f0000000900)=""/128, 0x80}, {&(0x7f0000000980)=""/76, 0x4c}], 0x2}, 0x3f}], 0x1, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_SYS_GET(0xffffffffffffffff, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000a00)={0x0, 0x30}}, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x374, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x14b}, {&(0x7f0000000140)=""/85, 0x20a}, {&(0x7f0000000fc0)=""/4096, 0x773}, {&(0x7f0000000400)=""/106, 0x2ce}, {&(0x7f0000000740)=""/73, 0x3dd}, {&(0x7f0000000200)=""/77, 0x96}, {&(0x7f00000007c0)=""/154, 0x40d}, {&(0x7f0000000000)=""/22, 0xa}], 0x81, &(0x7f0000000600)=""/191, 0x41, 0x8848}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 08:39:44 executing program 2 (fault-call:8 fault-nth:56): shmget(0x0, 0x4000, 0x780012c9, &(0x7f0000ffc000/0x4000)=nil) shmctl$IPC_RMID(0x0, 0x0) shmat(0x0, &(0x7f0000ffe000/0x1000)=nil, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x2, 0x1) r1 = open(&(0x7f0000000080)='./bus\x00', 0x430c2, 0x0) ftruncate(r1, 0x200004) sendfile(r0, r1, 0x0, 0x80001d00c0d0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) 08:39:44 executing program 1: r0 = socket(0x10, 0x803, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000005540)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000c80)=""/235, 0xeb}], 0x1}}], 0x1, 0x0, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendto(r0, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000b80)=@ethernet={0x0, @local}, 0x80, 0x0}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000ac0)=[{{&(0x7f0000000880)=@caif=@util, 0x80, &(0x7f0000000540)=[{&(0x7f0000000900)=""/128, 0x80}, {&(0x7f0000000980)=""/76, 0x4c}], 0x2}, 0x3f}], 0x1, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_SYS_GET(0xffffffffffffffff, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000a00)={0x0, 0x30}}, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x374, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x14b}, {&(0x7f0000000140)=""/85, 0x20a}, {&(0x7f0000000fc0)=""/4096, 0x773}, {&(0x7f0000000400)=""/106, 0x2ce}, {&(0x7f0000000740)=""/73, 0x3dd}, {&(0x7f0000000200)=""/77, 0x96}, {&(0x7f00000007c0)=""/154, 0x40d}, {&(0x7f0000000000)=""/22, 0xa}], 0x81, &(0x7f0000000600)=""/191, 0x41, 0x9015}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) [ 290.550626][T19533] FAULT_INJECTION: forcing a failure. [ 290.550626][T19533] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 290.587471][T19533] CPU: 1 PID: 19533 Comm: syz-executor.2 Not tainted 5.7.0-rc6-syzkaller #0 [ 290.596186][T19533] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 290.606411][T19533] Call Trace: [ 290.609701][T19533] dump_stack+0x1e9/0x30e [ 290.614158][T19533] should_fail+0x433/0x5b0 [ 290.618581][T19533] prepare_alloc_pages+0x28c/0x4a0 [ 290.623693][T19533] __alloc_pages_nodemask+0xbc/0x5e0 [ 290.628981][T19533] __do_page_cache_readahead+0x1de/0x4f0 [ 290.634620][T19533] generic_file_buffered_read+0x4a5/0x2570 [ 290.640433][T19533] generic_file_splice_read+0x452/0x700 [ 290.645981][T19533] ? splice_shrink_spd+0xb0/0xb0 [ 290.650913][T19533] splice_direct_to_actor+0x3c1/0xb40 [ 290.656271][T19533] ? do_splice_direct+0x340/0x340 [ 290.661289][T19533] do_splice_direct+0x201/0x340 [ 290.666123][T19533] ? security_file_permission+0x50/0xc0 [ 290.671647][T19533] do_sendfile+0x809/0xfe0 [ 290.676059][T19533] __x64_sys_sendfile64+0x164/0x1a0 [ 290.681420][T19533] ? do_syscall_64+0x19/0x1b0 [ 290.686077][T19533] do_syscall_64+0xf3/0x1b0 [ 290.690574][T19533] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 290.696446][T19533] RIP: 0033:0x45ca29 [ 290.700321][T19533] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 290.719906][T19533] RSP: 002b:00007efeff606c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 290.728290][T19533] RAX: ffffffffffffffda RBX: 00000000004fc540 RCX: 000000000045ca29 [ 290.736234][T19533] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 08:39:44 executing program 1: r0 = socket(0x10, 0x803, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000005540)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000c80)=""/235, 0xeb}], 0x1}}], 0x1, 0x0, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendto(r0, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000b80)=@ethernet={0x0, @local}, 0x80, 0x0}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000ac0)=[{{&(0x7f0000000880)=@caif=@util, 0x80, &(0x7f0000000540)=[{&(0x7f0000000900)=""/128, 0x80}, {&(0x7f0000000980)=""/76, 0x4c}], 0x2}, 0x3f}], 0x1, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_SYS_GET(0xffffffffffffffff, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000a00)={0x0, 0x30}}, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x374, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x14b}, {&(0x7f0000000140)=""/85, 0x20a}, {&(0x7f0000000fc0)=""/4096, 0x773}, {&(0x7f0000000400)=""/106, 0x2ce}, {&(0x7f0000000740)=""/73, 0x3dd}, {&(0x7f0000000200)=""/77, 0x96}, {&(0x7f00000007c0)=""/154, 0x40d}, {&(0x7f0000000000)=""/22, 0xa}], 0x81, &(0x7f0000000600)=""/191, 0x41, 0x9016}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 08:39:44 executing program 4: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x20000000003, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00'}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newlink={0x60, 0x10, 0x1, 0x70bd25, 0x0, {0x0, 0x0, 0x8, r4, 0x50800}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @ip6gretap={{0xe, 0x1, 'ip6gretap\x00'}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @ipv4={[], [], @private=0xa010100}}, @IFLA_GRE_REMOTE={0x14, 0x7, @remote}]}}}]}, 0x60}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00'}) [ 290.744172][T19533] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 290.752116][T19533] R10: 000080001d00c0d0 R11: 0000000000000246 R12: 0000000000000005 [ 290.760101][T19533] R13: 00000000000008dc R14: 00000000004cba16 R15: 00007efeff6076d4 08:39:47 executing program 0: unshare(0x8000400) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = inotify_init() r4 = dup(r3) syz_kvm_setup_cpu$x86(r4, r2, &(0x7f0000007000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$FBIOGET_FSCREENINFO(r4, 0x4602, &(0x7f0000000000)) 08:39:47 executing program 3: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x20000000003, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newlink={0x60, 0x10, 0x1, 0x0, 0x88480000, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @ip6gretap={{0xe, 0x1, 'ip6gretap\x00'}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @ipv4={[], [], @loopback}}, @IFLA_GRE_REMOTE={0x14, 0x7, @remote}]}}}]}, 0x60}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00'}) 08:39:47 executing program 1: r0 = socket(0x10, 0x803, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000005540)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000c80)=""/235, 0xeb}], 0x1}}], 0x1, 0x0, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendto(r0, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000b80)=@ethernet={0x0, @local}, 0x80, 0x0}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000ac0)=[{{&(0x7f0000000880)=@caif=@util, 0x80, &(0x7f0000000540)=[{&(0x7f0000000900)=""/128, 0x80}, {&(0x7f0000000980)=""/76, 0x4c}], 0x2}, 0x3f}], 0x1, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_SYS_GET(0xffffffffffffffff, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000a00)={0x0, 0x30}}, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x374, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x14b}, {&(0x7f0000000140)=""/85, 0x20a}, {&(0x7f0000000fc0)=""/4096, 0x773}, {&(0x7f0000000400)=""/106, 0x2ce}, {&(0x7f0000000740)=""/73, 0x3dd}, {&(0x7f0000000200)=""/77, 0x96}, {&(0x7f00000007c0)=""/154, 0x40d}, {&(0x7f0000000000)=""/22, 0xa}], 0x81, &(0x7f0000000600)=""/191, 0x41, 0xcc14}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 08:39:47 executing program 2 (fault-call:8 fault-nth:57): shmget(0x0, 0x4000, 0x780012c9, &(0x7f0000ffc000/0x4000)=nil) shmctl$IPC_RMID(0x0, 0x0) shmat(0x0, &(0x7f0000ffe000/0x1000)=nil, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x2, 0x1) r1 = open(&(0x7f0000000080)='./bus\x00', 0x430c2, 0x0) ftruncate(r1, 0x200004) sendfile(r0, r1, 0x0, 0x80001d00c0d0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) 08:39:47 executing program 4: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x20000000003, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00'}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newlink={0x60, 0x10, 0x1, 0x70bd25, 0x0, {0x0, 0x0, 0x9, r4, 0x50800}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @ip6gretap={{0xe, 0x1, 'ip6gretap\x00'}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @ipv4={[], [], @private=0xa010100}}, @IFLA_GRE_REMOTE={0x14, 0x7, @remote}]}}}]}, 0x60}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00'}) 08:39:47 executing program 5 (fault-call:9 fault-nth:0): unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x10, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = socket$inet6(0xa, 0x1, 0x8010800000000084) r1 = socket$kcm(0x2, 0x3, 0x2) recvmsg(r1, &(0x7f0000007500)={&(0x7f0000006f80)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x80, 0x0, 0x0, 0xffffffffffffffff}, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmmsg$inet6(r0, &(0x7f00000000c0)=[{{&(0x7f0000002c80)={0xa, 0x0, 0x0, @loopback}, 0x1c, &(0x7f0000005000)=[{&(0x7f0000002cc0)="ea", 0x1}], 0x1}}], 0x1, 0x20000040) [ 293.133125][T19582] FAULT_INJECTION: forcing a failure. [ 293.133125][T19582] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 293.147532][T19582] CPU: 0 PID: 19582 Comm: syz-executor.2 Not tainted 5.7.0-rc6-syzkaller #0 [ 293.150215][T19585] IPVS: ftp: loaded support on port[0] = 21 [ 293.156213][T19582] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 293.156217][T19582] Call Trace: [ 293.156235][T19582] dump_stack+0x1e9/0x30e [ 293.156248][T19582] should_fail+0x433/0x5b0 [ 293.156261][T19582] prepare_alloc_pages+0x28c/0x4a0 [ 293.156274][T19582] __alloc_pages_nodemask+0xbc/0x5e0 [ 293.156289][T19582] __do_page_cache_readahead+0x1de/0x4f0 [ 293.156305][T19582] generic_file_buffered_read+0x4a5/0x2570 [ 293.156324][T19582] generic_file_splice_read+0x452/0x700 [ 293.156340][T19582] ? splice_shrink_spd+0xb0/0xb0 [ 293.156350][T19582] splice_direct_to_actor+0x3c1/0xb40 [ 293.156362][T19582] ? do_splice_direct+0x340/0x340 08:39:47 executing program 1: r0 = socket(0x10, 0x803, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000005540)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000c80)=""/235, 0xeb}], 0x1}}], 0x1, 0x0, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendto(r0, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000b80)=@ethernet={0x0, @local}, 0x80, 0x0}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000ac0)=[{{&(0x7f0000000880)=@caif=@util, 0x80, &(0x7f0000000540)=[{&(0x7f0000000900)=""/128, 0x80}, {&(0x7f0000000980)=""/76, 0x4c}], 0x2}, 0x3f}], 0x1, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_SYS_GET(0xffffffffffffffff, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000a00)={0x0, 0x30}}, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x374, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x14b}, {&(0x7f0000000140)=""/85, 0x20a}, {&(0x7f0000000fc0)=""/4096, 0x773}, {&(0x7f0000000400)=""/106, 0x2ce}, {&(0x7f0000000740)=""/73, 0x3dd}, {&(0x7f0000000200)=""/77, 0x96}, {&(0x7f00000007c0)=""/154, 0x40d}, {&(0x7f0000000000)=""/22, 0xa}], 0x81, &(0x7f0000000600)=""/191, 0x41, 0xd016}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) [ 293.156376][T19582] do_splice_direct+0x201/0x340 [ 293.156389][T19582] ? security_file_permission+0x50/0xc0 [ 293.156399][T19582] do_sendfile+0x809/0xfe0 [ 293.156414][T19582] __x64_sys_sendfile64+0x164/0x1a0 [ 293.156423][T19582] ? do_syscall_64+0x19/0x1b0 [ 293.156435][T19582] do_syscall_64+0xf3/0x1b0 [ 293.156446][T19582] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 293.156454][T19582] RIP: 0033:0x45ca29 [ 293.156464][T19582] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 293.156475][T19582] RSP: 002b:00007efeff606c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 293.260843][T19585] FAULT_INJECTION: forcing a failure. [ 293.260843][T19585] name failslab, interval 1, probability 0, space 0, times 0 [ 293.266432][T19582] RAX: ffffffffffffffda RBX: 00000000004fc540 RCX: 000000000045ca29 [ 293.266438][T19582] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 293.266442][T19582] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 08:39:47 executing program 1: r0 = socket(0x10, 0x803, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000005540)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000c80)=""/235, 0xeb}], 0x1}}], 0x1, 0x0, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendto(r0, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000b80)=@ethernet={0x0, @local}, 0x80, 0x0}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000ac0)=[{{&(0x7f0000000880)=@caif=@util, 0x80, &(0x7f0000000540)=[{&(0x7f0000000900)=""/128, 0x80}, {&(0x7f0000000980)=""/76, 0x4c}], 0x2}, 0x3f}], 0x1, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_SYS_GET(0xffffffffffffffff, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000a00)={0x0, 0x30}}, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x374, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x14b}, {&(0x7f0000000140)=""/85, 0x20a}, {&(0x7f0000000fc0)=""/4096, 0x773}, {&(0x7f0000000400)=""/106, 0x2ce}, {&(0x7f0000000740)=""/73, 0x3dd}, {&(0x7f0000000200)=""/77, 0x96}, {&(0x7f00000007c0)=""/154, 0x40d}, {&(0x7f0000000000)=""/22, 0xa}], 0x81, &(0x7f0000000600)=""/191, 0x41, 0xe014}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) [ 293.266446][T19582] R10: 000080001d00c0d0 R11: 0000000000000246 R12: 0000000000000005 [ 293.266451][T19582] R13: 00000000000008dc R14: 00000000004cba16 R15: 00007efeff6076d4 [ 293.351795][T19585] CPU: 1 PID: 19585 Comm: syz-executor.5 Not tainted 5.7.0-rc6-syzkaller #0 [ 293.360496][T19585] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 293.370554][T19585] Call Trace: [ 293.373853][T19585] dump_stack+0x1e9/0x30e [ 293.378187][T19585] should_fail+0x433/0x5b0 [ 293.382717][T19585] ? sctp_get_port_local+0x6d3/0x1490 [ 293.388094][T19585] should_failslab+0x5/0x20 [ 293.392604][T19585] kmem_cache_alloc+0x53/0x2d0 [ 293.397377][T19585] sctp_get_port_local+0x6d3/0x1490 [ 293.402590][T19585] sctp_do_bind+0x50b/0x870 [ 293.407103][T19585] sctp_connect_new_asoc+0x1fb/0x600 [ 293.412395][T19585] sctp_sendmsg+0x1aa0/0x3620 [ 293.417108][T19585] ? inet_sendmsg+0xfa/0x310 [ 293.421790][T19585] ? inet_send_prepare+0x250/0x250 [ 293.426902][T19585] ____sys_sendmsg+0x4f9/0x7c0 08:39:47 executing program 3: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x20000000003, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newlink={0x60, 0x10, 0x1, 0x0, 0x88a8ffff, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @ip6gretap={{0xe, 0x1, 'ip6gretap\x00'}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @ipv4={[], [], @loopback}}, @IFLA_GRE_REMOTE={0x14, 0x7, @remote}]}}}]}, 0x60}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00'}) [ 293.431668][T19585] ? import_iovec+0x12a/0x2c0 [ 293.436350][T19585] __sys_sendmmsg+0x45b/0x690 [ 293.441051][T19585] ? vfs_write+0x48e/0x580 [ 293.445468][T19585] ? check_preemption_disabled+0x40/0x240 [ 293.451272][T19585] ? __this_cpu_preempt_check+0x9/0x20 [ 293.456741][T19585] ? ksys_write+0x1b1/0x220 [ 293.461253][T19585] ? check_preemption_disabled+0xb0/0x240 [ 293.466976][T19585] ? debug_smp_processor_id+0x5/0x20 [ 293.472264][T19585] ? trace_irq_disable_rcuidle+0x1f/0x1d0 [ 293.477987][T19585] __x64_sys_sendmmsg+0x9c/0xb0 08:39:47 executing program 1: r0 = socket(0x10, 0x803, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000005540)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000c80)=""/235, 0xeb}], 0x1}}], 0x1, 0x0, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendto(r0, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000b80)=@ethernet={0x0, @local}, 0x80, 0x0}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000ac0)=[{{&(0x7f0000000880)=@caif=@util, 0x80, &(0x7f0000000540)=[{&(0x7f0000000900)=""/128, 0x80}, {&(0x7f0000000980)=""/76, 0x4c}], 0x2}, 0x3f}], 0x1, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_SYS_GET(0xffffffffffffffff, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000a00)={0x0, 0x30}}, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x374, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x14b}, {&(0x7f0000000140)=""/85, 0x20a}, {&(0x7f0000000fc0)=""/4096, 0x773}, {&(0x7f0000000400)=""/106, 0x2ce}, {&(0x7f0000000740)=""/73, 0x3dd}, {&(0x7f0000000200)=""/77, 0x96}, {&(0x7f00000007c0)=""/154, 0x40d}, {&(0x7f0000000000)=""/22, 0xa}], 0x81, &(0x7f0000000600)=""/191, 0x41, 0x1a000}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) [ 293.482853][T19585] do_syscall_64+0xf3/0x1b0 [ 293.487361][T19585] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 293.493258][T19585] RIP: 0033:0x45ca29 [ 293.497152][T19585] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 293.516843][T19585] RSP: 002b:00007f082d17cc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 293.525255][T19585] RAX: ffffffffffffffda RBX: 00000000004fc640 RCX: 000000000045ca29 08:39:47 executing program 2 (fault-call:8 fault-nth:58): shmget(0x0, 0x4000, 0x780012c9, &(0x7f0000ffc000/0x4000)=nil) shmctl$IPC_RMID(0x0, 0x0) shmat(0x0, &(0x7f0000ffe000/0x1000)=nil, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x2, 0x1) r1 = open(&(0x7f0000000080)='./bus\x00', 0x430c2, 0x0) ftruncate(r1, 0x200004) sendfile(r0, r1, 0x0, 0x80001d00c0d0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) [ 293.533583][T19585] RDX: 0000000000000001 RSI: 00000000200000c0 RDI: 0000000000000004 [ 293.541829][T19585] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 293.549804][T19585] R10: 0000000020000040 R11: 0000000000000246 R12: 0000000000000008 [ 293.557777][T19585] R13: 00000000000008e0 R14: 00000000004cba43 R15: 00007f082d17d6d4 08:39:47 executing program 4: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x20000000003, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00'}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newlink={0x60, 0x10, 0x1, 0x70bd25, 0x0, {0x0, 0x0, 0xa, r4, 0x50800}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @ip6gretap={{0xe, 0x1, 'ip6gretap\x00'}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @ipv4={[], [], @private=0xa010100}}, @IFLA_GRE_REMOTE={0x14, 0x7, @remote}]}}}]}, 0x60}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00'}) 08:39:47 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000000080), 0x202c12a, 0x0) 08:39:47 executing program 1: r0 = socket(0x10, 0x803, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000005540)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000c80)=""/235, 0xeb}], 0x1}}], 0x1, 0x0, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendto(r0, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000b80)=@ethernet={0x0, @local}, 0x80, 0x0}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000ac0)=[{{&(0x7f0000000880)=@caif=@util, 0x80, &(0x7f0000000540)=[{&(0x7f0000000900)=""/128, 0x80}, {&(0x7f0000000980)=""/76, 0x4c}], 0x2}, 0x3f}], 0x1, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_SYS_GET(0xffffffffffffffff, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000a00)={0x0, 0x30}}, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x374, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x14b}, {&(0x7f0000000140)=""/85, 0x20a}, {&(0x7f0000000fc0)=""/4096, 0x773}, {&(0x7f0000000400)=""/106, 0x2ce}, {&(0x7f0000000740)=""/73, 0x3dd}, {&(0x7f0000000200)=""/77, 0x96}, {&(0x7f00000007c0)=""/154, 0x40d}, {&(0x7f0000000000)=""/22, 0xa}], 0x81, &(0x7f0000000600)=""/191, 0x41, 0x34000}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) [ 293.649679][T19641] FAULT_INJECTION: forcing a failure. [ 293.649679][T19641] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 293.663821][T19641] CPU: 0 PID: 19641 Comm: syz-executor.2 Not tainted 5.7.0-rc6-syzkaller #0 [ 293.677144][T19641] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 293.687197][T19641] Call Trace: [ 293.690491][T19641] dump_stack+0x1e9/0x30e [ 293.694857][T19641] should_fail+0x433/0x5b0 [ 293.699277][T19641] prepare_alloc_pages+0x28c/0x4a0 [ 293.704393][T19641] __alloc_pages_nodemask+0xbc/0x5e0 [ 293.709690][T19641] __do_page_cache_readahead+0x1de/0x4f0 [ 293.715418][T19641] generic_file_buffered_read+0x4a5/0x2570 [ 293.721443][T19641] generic_file_splice_read+0x452/0x700 [ 293.727787][T19641] ? splice_shrink_spd+0xb0/0xb0 [ 293.732731][T19641] splice_direct_to_actor+0x3c1/0xb40 [ 293.738138][T19641] ? do_splice_direct+0x340/0x340 [ 293.743179][T19641] do_splice_direct+0x201/0x340 08:39:47 executing program 1: r0 = socket(0x10, 0x803, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000005540)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000c80)=""/235, 0xeb}], 0x1}}], 0x1, 0x0, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendto(r0, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000b80)=@ethernet={0x0, @local}, 0x80, 0x0}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000ac0)=[{{&(0x7f0000000880)=@caif=@util, 0x80, &(0x7f0000000540)=[{&(0x7f0000000900)=""/128, 0x80}, {&(0x7f0000000980)=""/76, 0x4c}], 0x2}, 0x3f}], 0x1, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_SYS_GET(0xffffffffffffffff, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000a00)={0x0, 0x30}}, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x374, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x14b}, {&(0x7f0000000140)=""/85, 0x20a}, {&(0x7f0000000fc0)=""/4096, 0x773}, {&(0x7f0000000400)=""/106, 0x2ce}, {&(0x7f0000000740)=""/73, 0x3dd}, {&(0x7f0000000200)=""/77, 0x96}, {&(0x7f00000007c0)=""/154, 0x40d}, {&(0x7f0000000000)=""/22, 0xa}], 0x81, &(0x7f0000000600)=""/191, 0x41, 0x40000}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) [ 293.748065][T19641] ? security_file_permission+0x50/0xc0 [ 293.753610][T19641] do_sendfile+0x809/0xfe0 [ 293.758030][T19641] __x64_sys_sendfile64+0x164/0x1a0 [ 293.763312][T19641] ? do_syscall_64+0x19/0x1b0 [ 293.768081][T19641] do_syscall_64+0xf3/0x1b0 [ 293.772586][T19641] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 293.778519][T19641] RIP: 0033:0x45ca29 08:39:47 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa10000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3b}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="9feb01001800e00000000300000000000000000903000000008e"], 0x0, 0x80}, 0x20) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x1f000}) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) timer_settime(r3, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_gettime(r3, &(0x7f0000000100)) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000824000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) [ 293.782409][T19641] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 293.802020][T19641] RSP: 002b:00007efeff606c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 293.810581][T19641] RAX: ffffffffffffffda RBX: 00000000004fc540 RCX: 000000000045ca29 [ 293.818582][T19641] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 293.826690][T19641] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 293.834662][T19641] R10: 000080001d00c0d0 R11: 0000000000000246 R12: 0000000000000005 [ 293.842662][T19641] R13: 00000000000008dc R14: 00000000004cba16 R15: 00007efeff6076d4 08:39:47 executing program 1: r0 = socket(0x10, 0x803, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000005540)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000c80)=""/235, 0xeb}], 0x1}}], 0x1, 0x0, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendto(r0, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000b80)=@ethernet={0x0, @local}, 0x80, 0x0}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000ac0)=[{{&(0x7f0000000880)=@caif=@util, 0x80, &(0x7f0000000540)=[{&(0x7f0000000900)=""/128, 0x80}, {&(0x7f0000000980)=""/76, 0x4c}], 0x2}, 0x3f}], 0x1, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_SYS_GET(0xffffffffffffffff, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000a00)={0x0, 0x30}}, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x374, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x14b}, {&(0x7f0000000140)=""/85, 0x20a}, {&(0x7f0000000fc0)=""/4096, 0x773}, {&(0x7f0000000400)=""/106, 0x2ce}, {&(0x7f0000000740)=""/73, 0x3dd}, {&(0x7f0000000200)=""/77, 0x96}, {&(0x7f00000007c0)=""/154, 0x40d}, {&(0x7f0000000000)=""/22, 0xa}], 0x81, &(0x7f0000000600)=""/191, 0x41, 0x400300}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 08:39:47 executing program 5 (fault-call:9 fault-nth:1): unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x10, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = socket$inet6(0xa, 0x1, 0x8010800000000084) r1 = socket$kcm(0x2, 0x3, 0x2) recvmsg(r1, &(0x7f0000007500)={&(0x7f0000006f80)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x80, 0x0, 0x0, 0xffffffffffffffff}, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmmsg$inet6(r0, &(0x7f00000000c0)=[{{&(0x7f0000002c80)={0xa, 0x0, 0x0, @loopback}, 0x1c, &(0x7f0000005000)=[{&(0x7f0000002cc0)="ea", 0x1}], 0x1}}], 0x1, 0x20000040) 08:39:47 executing program 3: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x20000000003, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newlink={0x60, 0x10, 0x1, 0x0, 0x9effffff, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @ip6gretap={{0xe, 0x1, 'ip6gretap\x00'}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @ipv4={[], [], @loopback}}, @IFLA_GRE_REMOTE={0x14, 0x7, @remote}]}}}]}, 0x60}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00'}) 08:39:47 executing program 1: r0 = socket(0x10, 0x803, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000005540)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000c80)=""/235, 0xeb}], 0x1}}], 0x1, 0x0, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendto(r0, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000b80)=@ethernet={0x0, @local}, 0x80, 0x0}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000ac0)=[{{&(0x7f0000000880)=@caif=@util, 0x80, &(0x7f0000000540)=[{&(0x7f0000000900)=""/128, 0x80}, {&(0x7f0000000980)=""/76, 0x4c}], 0x2}, 0x3f}], 0x1, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_SYS_GET(0xffffffffffffffff, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000a00)={0x0, 0x30}}, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x374, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x14b}, {&(0x7f0000000140)=""/85, 0x20a}, {&(0x7f0000000fc0)=""/4096, 0x773}, {&(0x7f0000000400)=""/106, 0x2ce}, {&(0x7f0000000740)=""/73, 0x3dd}, {&(0x7f0000000200)=""/77, 0x96}, {&(0x7f00000007c0)=""/154, 0x40d}, {&(0x7f0000000000)=""/22, 0xa}], 0x81, &(0x7f0000000600)=""/191, 0x41, 0xa00100}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 08:39:47 executing program 4: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x20000000003, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00'}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newlink={0x60, 0x10, 0x1, 0x70bd25, 0x0, {0x0, 0x0, 0xb, r4, 0x50800}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @ip6gretap={{0xe, 0x1, 'ip6gretap\x00'}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @ipv4={[], [], @private=0xa010100}}, @IFLA_GRE_REMOTE={0x14, 0x7, @remote}]}}}]}, 0x60}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00'}) 08:39:47 executing program 2 (fault-call:8 fault-nth:59): shmget(0x0, 0x4000, 0x780012c9, &(0x7f0000ffc000/0x4000)=nil) shmctl$IPC_RMID(0x0, 0x0) shmat(0x0, &(0x7f0000ffe000/0x1000)=nil, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x2, 0x1) r1 = open(&(0x7f0000000080)='./bus\x00', 0x430c2, 0x0) ftruncate(r1, 0x200004) sendfile(r0, r1, 0x0, 0x80001d00c0d0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) 08:39:47 executing program 1: r0 = socket(0x10, 0x803, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000005540)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000c80)=""/235, 0xeb}], 0x1}}], 0x1, 0x0, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendto(r0, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000b80)=@ethernet={0x0, @local}, 0x80, 0x0}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000ac0)=[{{&(0x7f0000000880)=@caif=@util, 0x80, &(0x7f0000000540)=[{&(0x7f0000000900)=""/128, 0x80}, {&(0x7f0000000980)=""/76, 0x4c}], 0x2}, 0x3f}], 0x1, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_SYS_GET(0xffffffffffffffff, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000a00)={0x0, 0x30}}, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x374, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x14b}, {&(0x7f0000000140)=""/85, 0x20a}, {&(0x7f0000000fc0)=""/4096, 0x773}, {&(0x7f0000000400)=""/106, 0x2ce}, {&(0x7f0000000740)=""/73, 0x3dd}, {&(0x7f0000000200)=""/77, 0x96}, {&(0x7f00000007c0)=""/154, 0x40d}, {&(0x7f0000000000)=""/22, 0xa}], 0x81, &(0x7f0000000600)=""/191, 0x41, 0xca9a3b}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) [ 293.997644][T19679] IPVS: ftp: loaded support on port[0] = 21 [ 294.066806][T19697] FAULT_INJECTION: forcing a failure. [ 294.066806][T19697] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 294.080911][T19697] CPU: 0 PID: 19697 Comm: syz-executor.2 Not tainted 5.7.0-rc6-syzkaller #0 [ 294.089598][T19697] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 294.099652][T19697] Call Trace: [ 294.102961][T19697] dump_stack+0x1e9/0x30e [ 294.107296][T19697] should_fail+0x433/0x5b0 [ 294.111752][T19697] prepare_alloc_pages+0x28c/0x4a0 [ 294.117080][T19697] __alloc_pages_nodemask+0xbc/0x5e0 [ 294.122376][T19697] __do_page_cache_readahead+0x1de/0x4f0 [ 294.128028][T19697] generic_file_buffered_read+0x4a5/0x2570 [ 294.133862][T19697] generic_file_splice_read+0x452/0x700 [ 294.139513][T19697] ? splice_shrink_spd+0xb0/0xb0 [ 294.144454][T19697] splice_direct_to_actor+0x3c1/0xb40 [ 294.149836][T19697] ? do_splice_direct+0x340/0x340 [ 294.154866][T19697] do_splice_direct+0x201/0x340 [ 294.160245][T19697] ? security_file_permission+0x50/0xc0 [ 294.165794][T19697] do_sendfile+0x809/0xfe0 [ 294.170228][T19697] __x64_sys_sendfile64+0x164/0x1a0 [ 294.175510][T19697] ? do_syscall_64+0x19/0x1b0 [ 294.180194][T19697] do_syscall_64+0xf3/0x1b0 [ 294.184698][T19697] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 294.190585][T19697] RIP: 0033:0x45ca29 [ 294.194482][T19697] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 08:39:48 executing program 1: r0 = socket(0x10, 0x803, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000005540)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000c80)=""/235, 0xeb}], 0x1}}], 0x1, 0x0, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendto(r0, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000b80)=@ethernet={0x0, @local}, 0x80, 0x0}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000ac0)=[{{&(0x7f0000000880)=@caif=@util, 0x80, &(0x7f0000000540)=[{&(0x7f0000000900)=""/128, 0x80}, {&(0x7f0000000980)=""/76, 0x4c}], 0x2}, 0x3f}], 0x1, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_SYS_GET(0xffffffffffffffff, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000a00)={0x0, 0x30}}, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x374, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x14b}, {&(0x7f0000000140)=""/85, 0x20a}, {&(0x7f0000000fc0)=""/4096, 0x773}, {&(0x7f0000000400)=""/106, 0x2ce}, {&(0x7f0000000740)=""/73, 0x3dd}, {&(0x7f0000000200)=""/77, 0x96}, {&(0x7f00000007c0)=""/154, 0x40d}, {&(0x7f0000000000)=""/22, 0xa}], 0x81, &(0x7f0000000600)=""/191, 0x41, 0x1000000}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) [ 294.214081][T19697] RSP: 002b:00007efeff606c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 294.222493][T19697] RAX: ffffffffffffffda RBX: 00000000004fc540 RCX: 000000000045ca29 [ 294.230787][T19697] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 294.238766][T19697] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 294.246748][T19697] R10: 000080001d00c0d0 R11: 0000000000000246 R12: 0000000000000005 [ 294.254708][T19697] R13: 00000000000008dc R14: 00000000004cba16 R15: 00007efeff6076d4 08:39:48 executing program 4: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x20000000003, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00'}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newlink={0x60, 0x10, 0x1, 0x70bd25, 0x0, {0x0, 0x0, 0xc, r4, 0x50800}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @ip6gretap={{0xe, 0x1, 'ip6gretap\x00'}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @ipv4={[], [], @private=0xa010100}}, @IFLA_GRE_REMOTE={0x14, 0x7, @remote}]}}}]}, 0x60}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00'}) 08:39:48 executing program 3: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x20000000003, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newlink={0x60, 0x10, 0x1, 0x0, 0xe0ffffff, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @ip6gretap={{0xe, 0x1, 'ip6gretap\x00'}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @ipv4={[], [], @loopback}}, @IFLA_GRE_REMOTE={0x14, 0x7, @remote}]}}}]}, 0x60}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00'}) [ 294.285406][T19679] FAULT_INJECTION: forcing a failure. [ 294.285406][T19679] name failslab, interval 1, probability 0, space 0, times 0 [ 294.313154][T19679] CPU: 0 PID: 19679 Comm: syz-executor.5 Not tainted 5.7.0-rc6-syzkaller #0 [ 294.321891][T19679] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 294.331943][T19679] Call Trace: [ 294.335243][T19679] dump_stack+0x1e9/0x30e [ 294.339580][T19679] should_fail+0x433/0x5b0 [ 294.344048][T19679] ? sctp_add_bind_addr+0x97/0x350 [ 294.349158][T19679] should_failslab+0x5/0x20 [ 294.353667][T19679] kmem_cache_alloc_trace+0x57/0x300 [ 294.358959][T19679] sctp_add_bind_addr+0x97/0x350 [ 294.363902][T19679] sctp_do_bind+0x5da/0x870 [ 294.368414][T19679] sctp_connect_new_asoc+0x1fb/0x600 [ 294.373709][T19679] sctp_sendmsg+0x1aa0/0x3620 [ 294.378401][T19679] ? inet_sendmsg+0xfa/0x310 [ 294.382995][T19679] ? inet_send_prepare+0x250/0x250 [ 294.388111][T19679] ____sys_sendmsg+0x4f9/0x7c0 [ 294.392893][T19679] ? import_iovec+0x12a/0x2c0 [ 294.397719][T19679] __sys_sendmmsg+0x45b/0x690 [ 294.402419][T19679] ? vfs_write+0x48e/0x580 [ 294.406837][T19679] ? check_preemption_disabled+0x40/0x240 [ 294.412557][T19679] ? __this_cpu_preempt_check+0x9/0x20 [ 294.418020][T19679] ? ksys_write+0x1b1/0x220 [ 294.422528][T19679] ? check_preemption_disabled+0xb0/0x240 [ 294.428280][T19679] ? debug_smp_processor_id+0x5/0x20 08:39:48 executing program 3: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x20000000003, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newlink={0x60, 0x10, 0x1, 0x0, 0xefffffff, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @ip6gretap={{0xe, 0x1, 'ip6gretap\x00'}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @ipv4={[], [], @loopback}}, @IFLA_GRE_REMOTE={0x14, 0x7, @remote}]}}}]}, 0x60}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00'}) [ 294.433687][T19679] ? trace_irq_disable_rcuidle+0x1f/0x1d0 [ 294.440281][T19679] __x64_sys_sendmmsg+0x9c/0xb0 [ 294.445139][T19679] do_syscall_64+0xf3/0x1b0 [ 294.449647][T19679] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 294.455544][T19679] RIP: 0033:0x45ca29 [ 294.459447][T19679] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 294.479581][T19679] RSP: 002b:00007f082d17cc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 294.488125][T19679] RAX: ffffffffffffffda RBX: 00000000004fc640 RCX: 000000000045ca29 [ 294.496100][T19679] RDX: 0000000000000001 RSI: 00000000200000c0 RDI: 0000000000000004 [ 294.504464][T19679] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 294.512437][T19679] R10: 0000000020000040 R11: 0000000000000246 R12: 0000000000000008 [ 294.520407][T19679] R13: 00000000000008e0 R14: 00000000004cba43 R15: 00007f082d17d6d4 08:39:50 executing program 1: r0 = socket(0x10, 0x803, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000005540)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000c80)=""/235, 0xeb}], 0x1}}], 0x1, 0x0, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendto(r0, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000b80)=@ethernet={0x0, @local}, 0x80, 0x0}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000ac0)=[{{&(0x7f0000000880)=@caif=@util, 0x80, &(0x7f0000000540)=[{&(0x7f0000000900)=""/128, 0x80}, {&(0x7f0000000980)=""/76, 0x4c}], 0x2}, 0x3f}], 0x1, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_SYS_GET(0xffffffffffffffff, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000a00)={0x0, 0x30}}, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x374, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x14b}, {&(0x7f0000000140)=""/85, 0x20a}, {&(0x7f0000000fc0)=""/4096, 0x773}, {&(0x7f0000000400)=""/106, 0x2ce}, {&(0x7f0000000740)=""/73, 0x3dd}, {&(0x7f0000000200)=""/77, 0x96}, {&(0x7f00000007c0)=""/154, 0x40d}, {&(0x7f0000000000)=""/22, 0xa}], 0x81, &(0x7f0000000600)=""/191, 0x41, 0x2000000}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 08:39:50 executing program 4: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x20000000003, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00'}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newlink={0x60, 0x10, 0x1, 0x70bd25, 0x0, {0x0, 0x0, 0xf, r4, 0x50800}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @ip6gretap={{0xe, 0x1, 'ip6gretap\x00'}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @ipv4={[], [], @private=0xa010100}}, @IFLA_GRE_REMOTE={0x14, 0x7, @remote}]}}}]}, 0x60}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00'}) 08:39:50 executing program 3: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x20000000003, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newlink={0x60, 0x10, 0x1, 0x0, 0xf0ffffff, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @ip6gretap={{0xe, 0x1, 'ip6gretap\x00'}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @ipv4={[], [], @loopback}}, @IFLA_GRE_REMOTE={0x14, 0x7, @remote}]}}}]}, 0x60}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00'}) 08:39:50 executing program 2 (fault-call:8 fault-nth:60): shmget(0x0, 0x4000, 0x780012c9, &(0x7f0000ffc000/0x4000)=nil) shmctl$IPC_RMID(0x0, 0x0) shmat(0x0, &(0x7f0000ffe000/0x1000)=nil, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x2, 0x1) r1 = open(&(0x7f0000000080)='./bus\x00', 0x430c2, 0x0) ftruncate(r1, 0x200004) sendfile(r0, r1, 0x0, 0x80001d00c0d0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) 08:39:50 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000640)={0x29, 0xffffffffffffffff, 0xec, 0x4, @buffer={0x0, 0x97, &(0x7f0000000180)=""/151}, &(0x7f0000000540)="c9f80331e6533e0d9b1505287ff4349d179e4b1e41dc156fbf96802ce16ad04fd28b4b4f93b374a6258b4f64f83bb7af4b408dc24358979a5d09ba301d74542a943c39e3d8eb560f682be30860cba765307b0794091fbee61e6051c13051b067de8bf25f738232ee98dce8188223b502aab6583014c54c52471fa84374dc7e2c629db2f5b1ed5aa0c3c0ac4b0000dc0d3f5f7e46f8cd06cb04fbbcbe831430140b9e885a203859666355fdb0b2fdc1d3042920a7eb35e2e24e745196f09e03fde9b0f17ffc37d7b1d67bb872bde0eb15b9edb63de6a2cf06b1ce0bf97ea6e6117ad854ced600f8483e108489", &(0x7f00000000c0)=""/66, 0x8000, 0x3, 0x3, &(0x7f0000000240)}) r2 = socket$inet6(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000300)='batadv\x00') sendmsg$BATADV_CMD_GET_DAT_CACHE(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000580)={0x1c, r5, 0x31905e13403123b7, 0x0, 0x0, {0xc}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}}, 0x0) sendmsg$SMC_PNETID_FLUSH(r4, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x24, 0x0, 0x8, 0x70bd27, 0x25dfdbfb, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x804}, 0x4000010) syz_mount_image$minix(&(0x7f0000000080)='minix\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f0000000140)="600b42e006000a0090040300001af5c96824", 0x12, 0x400}, {&(0x7f0000000280)="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", 0x2a5, 0x455d}], 0x0, 0x0) 08:39:50 executing program 5 (fault-call:9 fault-nth:2): unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x10, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = socket$inet6(0xa, 0x1, 0x8010800000000084) r1 = socket$kcm(0x2, 0x3, 0x2) recvmsg(r1, &(0x7f0000007500)={&(0x7f0000006f80)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x80, 0x0, 0x0, 0xffffffffffffffff}, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmmsg$inet6(r0, &(0x7f00000000c0)=[{{&(0x7f0000002c80)={0xa, 0x0, 0x0, @loopback}, 0x1c, &(0x7f0000005000)=[{&(0x7f0000002cc0)="ea", 0x1}], 0x1}}], 0x1, 0x20000040) [ 296.889906][T19759] IPVS: ftp: loaded support on port[0] = 21 [ 296.892731][T19758] FAULT_INJECTION: forcing a failure. [ 296.892731][T19758] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 296.911520][T19758] CPU: 0 PID: 19758 Comm: syz-executor.2 Not tainted 5.7.0-rc6-syzkaller #0 [ 296.920214][T19758] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 296.930435][T19758] Call Trace: [ 296.933732][T19758] dump_stack+0x1e9/0x30e 08:39:50 executing program 0: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x6100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x5481, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x1) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$IPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x41, &(0x7f0000000180)={'nat\x00', 0x2a, "594d4b838b3cc0ba4bc68e36452bd5070e21157020e41deae01ad13dfe28ed18ac7706bc8478f8dc22c9"}, &(0x7f0000000200)=0x4e) keyctl$revoke(0x3, 0x0) r0 = add_key$keyring(&(0x7f0000000380)='keyring\x00', &(0x7f00000003c0)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000480)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000009c0)='X', 0x1, r0) keyctl$dh_compute(0x17, &(0x7f0000000140)={0x0, r1, r0}, 0x0, 0x0, 0x0) r2 = add_key(&(0x7f0000000040)='id_resolver\x00', &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, r0) add_key$keyring(&(0x7f0000000000)='keyring\x00', 0x0, 0x0, 0x0, r2) socket$vsock_stream(0x28, 0x1, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r3, 0x1, 0x6, &(0x7f0000000140)=0x32, 0xfe51) connect$inet(r3, &(0x7f0000000440)={0x2, 0x0, @broadcast}, 0x10) sendmmsg(r3, &(0x7f0000007fc0), 0x40000000000002f, 0x0) [ 296.938073][T19758] should_fail+0x433/0x5b0 [ 296.942492][T19758] prepare_alloc_pages+0x28c/0x4a0 [ 296.947642][T19758] __alloc_pages_nodemask+0xbc/0x5e0 [ 296.952944][T19758] __do_page_cache_readahead+0x1de/0x4f0 [ 296.958715][T19758] generic_file_buffered_read+0x4a5/0x2570 [ 296.964560][T19758] generic_file_splice_read+0x452/0x700 [ 296.970120][T19758] ? splice_shrink_spd+0xb0/0xb0 [ 296.970928][T19759] FAULT_INJECTION: forcing a failure. [ 296.970928][T19759] name failslab, interval 1, probability 0, space 0, times 0 [ 296.975057][T19758] splice_direct_to_actor+0x3c1/0xb40 [ 296.975071][T19758] ? do_splice_direct+0x340/0x340 [ 296.975082][T19758] do_splice_direct+0x201/0x340 [ 296.975096][T19758] ? security_file_permission+0x50/0xc0 [ 296.975106][T19758] do_sendfile+0x809/0xfe0 [ 296.975122][T19758] __x64_sys_sendfile64+0x164/0x1a0 [ 296.975133][T19758] ? do_syscall_64+0x19/0x1b0 [ 296.975144][T19758] do_syscall_64+0xf3/0x1b0 [ 296.975155][T19758] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 296.975163][T19758] RIP: 0033:0x45ca29 [ 296.975173][T19758] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 296.975183][T19758] RSP: 002b:00007efeff606c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 296.975192][T19758] RAX: ffffffffffffffda RBX: 00000000004fc540 RCX: 000000000045ca29 [ 296.975196][T19758] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 08:39:51 executing program 2 (fault-call:8 fault-nth:61): shmget(0x0, 0x4000, 0x780012c9, &(0x7f0000ffc000/0x4000)=nil) shmctl$IPC_RMID(0x0, 0x0) shmat(0x0, &(0x7f0000ffe000/0x1000)=nil, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x2, 0x1) r1 = open(&(0x7f0000000080)='./bus\x00', 0x430c2, 0x0) ftruncate(r1, 0x200004) sendfile(r0, r1, 0x0, 0x80001d00c0d0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) [ 296.975202][T19758] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 296.975207][T19758] R10: 000080001d00c0d0 R11: 0000000000000246 R12: 0000000000000005 [ 296.975212][T19758] R13: 00000000000008dc R14: 00000000004cba16 R15: 00007efeff6076d4 08:39:51 executing program 0: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000070000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f00000000c0)="66b9800000c00f326635000800000f302e0f01c92e660fe3f80f0175d82666f30fc7fdf32e0f011e4000f20f78dc4e00dbdb66b9800000c00f326635010000000f300f01b60600", 0x47}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f000004c000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$VIDIOC_SUBDEV_S_EDID(r4, 0xc0285629, &(0x7f0000000040)={0x0, 0x6a0, 0x3ff, [], &(0x7f0000000000)=0x7}) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 08:39:51 executing program 4: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x20000000003, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00'}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newlink={0x60, 0x10, 0x1, 0x70bd25, 0x0, {0x0, 0x0, 0x10, r4, 0x50800}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @ip6gretap={{0xe, 0x1, 'ip6gretap\x00'}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @ipv4={[], [], @private=0xa010100}}, @IFLA_GRE_REMOTE={0x14, 0x7, @remote}]}}}]}, 0x60}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00'}) [ 297.165197][T19759] CPU: 0 PID: 19759 Comm: syz-executor.5 Not tainted 5.7.0-rc6-syzkaller #0 [ 297.174340][T19759] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 297.184406][T19759] Call Trace: [ 297.187701][T19759] dump_stack+0x1e9/0x30e [ 297.192033][T19759] should_fail+0x433/0x5b0 [ 297.196573][T19759] ? sctp_association_new+0x8e/0x21c0 [ 297.201953][T19759] should_failslab+0x5/0x20 [ 297.206464][T19759] kmem_cache_alloc_trace+0x57/0x300 [ 297.211770][T19759] ? memcpy+0x3c/0x60 [ 297.215763][T19759] sctp_association_new+0x8e/0x21c0 [ 297.220966][T19759] ? sctp_do_bind+0x698/0x870 [ 297.225750][T19759] ? __ipv6_addr_type+0x232/0x2e0 [ 297.230806][T19759] sctp_connect_new_asoc+0x25c/0x600 [ 297.236223][T19759] sctp_sendmsg+0x1aa0/0x3620 [ 297.240916][T19759] ? inet_sendmsg+0xfa/0x310 [ 297.245514][T19759] ? inet_send_prepare+0x250/0x250 [ 297.250633][T19759] ____sys_sendmsg+0x4f9/0x7c0 [ 297.255400][T19759] ? import_iovec+0x12a/0x2c0 [ 297.258609][T19793] FAULT_INJECTION: forcing a failure. [ 297.258609][T19793] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 297.260079][T19759] __sys_sendmmsg+0x45b/0x690 [ 297.260107][T19759] ? vfs_write+0x48e/0x580 [ 297.282380][T19759] ? check_preemption_disabled+0x40/0x240 [ 297.288101][T19759] ? __this_cpu_preempt_check+0x9/0x20 [ 297.293574][T19759] ? ksys_write+0x1b1/0x220 [ 297.298090][T19759] ? check_preemption_disabled+0xb0/0x240 [ 297.303810][T19759] ? debug_smp_processor_id+0x5/0x20 [ 297.309089][T19759] ? trace_irq_disable_rcuidle+0x1f/0x1d0 [ 297.314803][T19759] __x64_sys_sendmmsg+0x9c/0xb0 [ 297.319646][T19759] do_syscall_64+0xf3/0x1b0 [ 297.324138][T19759] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 297.330026][T19759] RIP: 0033:0x45ca29 [ 297.333941][T19759] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 297.353553][T19759] RSP: 002b:00007f082d17cc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 297.361948][T19759] RAX: ffffffffffffffda RBX: 00000000004fc640 RCX: 000000000045ca29 [ 297.370093][T19759] RDX: 0000000000000001 RSI: 00000000200000c0 RDI: 0000000000000004 [ 297.378136][T19759] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 297.386178][T19759] R10: 0000000020000040 R11: 0000000000000246 R12: 0000000000000008 [ 297.394141][T19759] R13: 00000000000008e0 R14: 00000000004cba43 R15: 00007f082d17d6d4 [ 297.402925][T19793] CPU: 1 PID: 19793 Comm: syz-executor.2 Not tainted 5.7.0-rc6-syzkaller #0 [ 297.411611][T19793] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 297.421703][T19793] Call Trace: [ 297.425457][T19793] dump_stack+0x1e9/0x30e [ 297.429876][T19793] should_fail+0x433/0x5b0 [ 297.434278][T19793] prepare_alloc_pages+0x28c/0x4a0 [ 297.439392][T19793] __alloc_pages_nodemask+0xbc/0x5e0 [ 297.444678][T19793] __do_page_cache_readahead+0x1de/0x4f0 [ 297.450314][T19793] generic_file_buffered_read+0x4a5/0x2570 [ 297.456546][T19793] generic_file_splice_read+0x452/0x700 [ 297.462696][T19793] ? splice_shrink_spd+0xb0/0xb0 [ 297.467615][T19793] splice_direct_to_actor+0x3c1/0xb40 [ 297.473071][T19793] ? do_splice_direct+0x340/0x340 [ 297.478074][T19793] do_splice_direct+0x201/0x340 [ 297.482905][T19793] ? security_file_permission+0x50/0xc0 [ 297.488713][T19793] do_sendfile+0x809/0xfe0 [ 297.493109][T19793] __x64_sys_sendfile64+0x164/0x1a0 [ 297.498284][T19793] ? do_syscall_64+0x19/0x1b0 [ 297.502937][T19793] do_syscall_64+0xf3/0x1b0 [ 297.507421][T19793] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 297.513293][T19793] RIP: 0033:0x45ca29 [ 297.517165][T19793] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 297.536850][T19793] RSP: 002b:00007efeff606c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 297.545251][T19793] RAX: ffffffffffffffda RBX: 00000000004fc540 RCX: 000000000045ca29 [ 297.553214][T19793] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 08:39:51 executing program 3: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x20000000003, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newlink={0x60, 0x10, 0x1, 0x0, 0xfc000000, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @ip6gretap={{0xe, 0x1, 'ip6gretap\x00'}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @ipv4={[], [], @loopback}}, @IFLA_GRE_REMOTE={0x14, 0x7, @remote}]}}}]}, 0x60}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00'}) 08:39:51 executing program 1: r0 = socket(0x10, 0x803, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000005540)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000c80)=""/235, 0xeb}], 0x1}}], 0x1, 0x0, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendto(r0, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000b80)=@ethernet={0x0, @local}, 0x80, 0x0}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000ac0)=[{{&(0x7f0000000880)=@caif=@util, 0x80, &(0x7f0000000540)=[{&(0x7f0000000900)=""/128, 0x80}, {&(0x7f0000000980)=""/76, 0x4c}], 0x2}, 0x3f}], 0x1, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_SYS_GET(0xffffffffffffffff, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000a00)={0x0, 0x30}}, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x374, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x14b}, {&(0x7f0000000140)=""/85, 0x20a}, {&(0x7f0000000fc0)=""/4096, 0x773}, {&(0x7f0000000400)=""/106, 0x2ce}, {&(0x7f0000000740)=""/73, 0x3dd}, {&(0x7f0000000200)=""/77, 0x96}, {&(0x7f00000007c0)=""/154, 0x40d}, {&(0x7f0000000000)=""/22, 0xa}], 0x81, &(0x7f0000000600)=""/191, 0x41, 0x3000000}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) [ 297.561436][T19793] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 297.569383][T19793] R10: 000080001d00c0d0 R11: 0000000000000246 R12: 0000000000000005 [ 297.577348][T19793] R13: 00000000000008dc R14: 00000000004cba16 R15: 00007efeff6076d4 08:39:51 executing program 0: r0 = socket(0x10, 0x80002, 0xc) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$IP_VS_SO_SET_EDIT(r3, 0x0, 0x483, &(0x7f0000000000)={0x6c, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e22, 0x3, 'wlc\x00', 0x3c, 0x5cc, 0x65}, 0x2c) sendmsg$NFT_MSG_GETOBJ_RESET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, 0x15, 0xa, 0x301}, 0x14}}, 0x0) r4 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendmmsg$alg(r0, &(0x7f0000000140), 0x1f31236d2fe08ff, 0x0) 08:39:51 executing program 5 (fault-call:9 fault-nth:3): unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x10, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = socket$inet6(0xa, 0x1, 0x8010800000000084) r1 = socket$kcm(0x2, 0x3, 0x2) recvmsg(r1, &(0x7f0000007500)={&(0x7f0000006f80)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x80, 0x0, 0x0, 0xffffffffffffffff}, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmmsg$inet6(r0, &(0x7f00000000c0)=[{{&(0x7f0000002c80)={0xa, 0x0, 0x0, @loopback}, 0x1c, &(0x7f0000005000)=[{&(0x7f0000002cc0)="ea", 0x1}], 0x1}}], 0x1, 0x20000040) 08:39:51 executing program 4: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x20000000003, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00'}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newlink={0x60, 0x10, 0x1, 0x70bd25, 0x0, {0x0, 0x0, 0x11, r4, 0x50800}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @ip6gretap={{0xe, 0x1, 'ip6gretap\x00'}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @ipv4={[], [], @private=0xa010100}}, @IFLA_GRE_REMOTE={0x14, 0x7, @remote}]}}}]}, 0x60}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00'}) 08:39:51 executing program 3: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x20000000003, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newlink={0x60, 0x10, 0x1, 0x0, 0xfcffffff, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @ip6gretap={{0xe, 0x1, 'ip6gretap\x00'}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @ipv4={[], [], @loopback}}, @IFLA_GRE_REMOTE={0x14, 0x7, @remote}]}}}]}, 0x60}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00'}) 08:39:51 executing program 1: r0 = socket(0x10, 0x803, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000005540)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000c80)=""/235, 0xeb}], 0x1}}], 0x1, 0x0, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendto(r0, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000b80)=@ethernet={0x0, @local}, 0x80, 0x0}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000ac0)=[{{&(0x7f0000000880)=@caif=@util, 0x80, &(0x7f0000000540)=[{&(0x7f0000000900)=""/128, 0x80}, {&(0x7f0000000980)=""/76, 0x4c}], 0x2}, 0x3f}], 0x1, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_SYS_GET(0xffffffffffffffff, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000a00)={0x0, 0x30}}, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x374, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x14b}, {&(0x7f0000000140)=""/85, 0x20a}, {&(0x7f0000000fc0)=""/4096, 0x773}, {&(0x7f0000000400)=""/106, 0x2ce}, {&(0x7f0000000740)=""/73, 0x3dd}, {&(0x7f0000000200)=""/77, 0x96}, {&(0x7f00000007c0)=""/154, 0x40d}, {&(0x7f0000000000)=""/22, 0xa}], 0x81, &(0x7f0000000600)=""/191, 0x41, 0x4000000}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) [ 297.700931][T19816] IPVS: set_ctl: invalid protocol: 108 172.30.0.1:20002 08:39:51 executing program 2 (fault-call:8 fault-nth:62): shmget(0x0, 0x4000, 0x780012c9, &(0x7f0000ffc000/0x4000)=nil) shmctl$IPC_RMID(0x0, 0x0) shmat(0x0, &(0x7f0000ffe000/0x1000)=nil, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x2, 0x1) r1 = open(&(0x7f0000000080)='./bus\x00', 0x430c2, 0x0) ftruncate(r1, 0x200004) sendfile(r0, r1, 0x0, 0x80001d00c0d0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) [ 297.790442][T19816] IPVS: set_ctl: invalid protocol: 108 172.30.0.1:20002 [ 297.806141][T19819] IPVS: ftp: loaded support on port[0] = 21 08:39:51 executing program 1: r0 = socket(0x10, 0x803, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000005540)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000c80)=""/235, 0xeb}], 0x1}}], 0x1, 0x0, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendto(r0, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000b80)=@ethernet={0x0, @local}, 0x80, 0x0}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000ac0)=[{{&(0x7f0000000880)=@caif=@util, 0x80, &(0x7f0000000540)=[{&(0x7f0000000900)=""/128, 0x80}, {&(0x7f0000000980)=""/76, 0x4c}], 0x2}, 0x3f}], 0x1, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_SYS_GET(0xffffffffffffffff, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000a00)={0x0, 0x30}}, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x374, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x14b}, {&(0x7f0000000140)=""/85, 0x20a}, {&(0x7f0000000fc0)=""/4096, 0x773}, {&(0x7f0000000400)=""/106, 0x2ce}, {&(0x7f0000000740)=""/73, 0x3dd}, {&(0x7f0000000200)=""/77, 0x96}, {&(0x7f00000007c0)=""/154, 0x40d}, {&(0x7f0000000000)=""/22, 0xa}], 0x81, &(0x7f0000000600)=""/191, 0x41, 0x5000000}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 08:39:51 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000683ff4)={@multicast2, @loopback}, 0xc) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000300)={0x1, {{0x2, 0x0, @multicast2}}, 0x0, 0x1, [{}]}, 0x110) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$HIDIOCGUSAGE(r2, 0xc018480b, &(0x7f0000000000)={0x2, 0xffffffff, 0xc1, 0x7f, 0xffff, 0x3}) setsockopt$inet_group_source_req(r0, 0x0, 0x2b, &(0x7f00000001c0)={0x1, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @empty}}}, 0x108) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$VIDIOC_CROPCAP(r4, 0xc02c563a, &(0x7f0000000040)={0x4, {0x81, 0xffff, 0x7, 0x1b6}, {0x9, 0x6, 0x80, 0x8}, {0xfffff44c, 0x9}}) [ 297.846407][T19831] FAULT_INJECTION: forcing a failure. [ 297.846407][T19831] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 297.893739][T19834] FAULT_INJECTION: forcing a failure. [ 297.893739][T19834] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 297.897656][T19831] CPU: 0 PID: 19831 Comm: syz-executor.2 Not tainted 5.7.0-rc6-syzkaller #0 [ 297.915632][T19831] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 297.925683][T19831] Call Trace: [ 297.928969][T19831] dump_stack+0x1e9/0x30e [ 297.933288][T19831] should_fail+0x433/0x5b0 [ 297.937699][T19831] prepare_alloc_pages+0x28c/0x4a0 [ 297.942838][T19831] __alloc_pages_nodemask+0xbc/0x5e0 [ 297.948112][T19831] __do_page_cache_readahead+0x1de/0x4f0 [ 297.953744][T19831] generic_file_buffered_read+0x4a5/0x2570 [ 297.959567][T19831] generic_file_splice_read+0x452/0x700 [ 297.965112][T19831] ? splice_shrink_spd+0xb0/0xb0 [ 297.970041][T19831] splice_direct_to_actor+0x3c1/0xb40 [ 297.975396][T19831] ? do_splice_direct+0x340/0x340 [ 297.980441][T19831] do_splice_direct+0x201/0x340 [ 297.985301][T19831] ? security_file_permission+0x50/0xc0 [ 297.990844][T19831] do_sendfile+0x809/0xfe0 [ 297.995248][T19831] __x64_sys_sendfile64+0x164/0x1a0 [ 298.000424][T19831] ? do_syscall_64+0x19/0x1b0 [ 298.005080][T19831] do_syscall_64+0xf3/0x1b0 [ 298.009566][T19831] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 298.015436][T19831] RIP: 0033:0x45ca29 [ 298.019309][T19831] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 298.039082][T19831] RSP: 002b:00007efeff606c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 298.047484][T19831] RAX: ffffffffffffffda RBX: 00000000004fc540 RCX: 000000000045ca29 [ 298.055783][T19831] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 298.063741][T19831] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 298.071834][T19831] R10: 000080001d00c0d0 R11: 0000000000000246 R12: 0000000000000005 [ 298.079792][T19831] R13: 00000000000008dc R14: 00000000004cba16 R15: 00007efeff6076d4 [ 298.087860][T19834] CPU: 1 PID: 19834 Comm: syz-executor.5 Not tainted 5.7.0-rc6-syzkaller #0 [ 298.096614][T19834] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 298.106700][T19834] Call Trace: [ 298.109991][T19834] dump_stack+0x1e9/0x30e [ 298.114330][T19834] should_fail+0x433/0x5b0 [ 298.118790][T19834] prepare_alloc_pages+0x28c/0x4a0 [ 298.123908][T19834] __alloc_pages_nodemask+0xbc/0x5e0 [ 298.129228][T19834] kmem_getpages+0x49/0x900 [ 298.133736][T19834] cache_grow_begin+0x7b/0x2e0 [ 298.138564][T19834] cache_alloc_refill+0x359/0x3f0 [ 298.143602][T19834] ? trace_irq_disable_rcuidle+0x1f/0x1d0 [ 298.149327][T19834] ? check_preemption_disabled+0xb0/0x240 [ 298.155046][T19834] ? debug_smp_processor_id+0x5/0x20 [ 298.161000][T19834] ? sctp_association_new+0x8e/0x21c0 [ 298.166380][T19834] kmem_cache_alloc_trace+0x2e6/0x300 [ 298.171761][T19834] sctp_association_new+0x8e/0x21c0 [ 298.176967][T19834] ? sctp_do_bind+0x698/0x870 [ 298.181651][T19834] ? __ipv6_addr_type+0x232/0x2e0 [ 298.186682][T19834] sctp_connect_new_asoc+0x25c/0x600 [ 298.191974][T19834] sctp_sendmsg+0x1aa0/0x3620 [ 298.196665][T19834] ? inet_sendmsg+0xfa/0x310 [ 298.201299][T19834] ? inet_send_prepare+0x250/0x250 [ 298.206443][T19834] ____sys_sendmsg+0x4f9/0x7c0 [ 298.211214][T19834] ? import_iovec+0x12a/0x2c0 [ 298.215901][T19834] __sys_sendmmsg+0x45b/0x690 [ 298.220599][T19834] ? vfs_write+0x48e/0x580 [ 298.225019][T19834] ? check_preemption_disabled+0x40/0x240 [ 298.230752][T19834] ? __this_cpu_preempt_check+0x9/0x20 [ 298.236214][T19834] ? ksys_write+0x1b1/0x220 [ 298.240832][T19834] ? check_preemption_disabled+0xb0/0x240 [ 298.246558][T19834] ? debug_smp_processor_id+0x5/0x20 [ 298.251874][T19834] ? trace_irq_disable_rcuidle+0x1f/0x1d0 [ 298.257624][T19834] __x64_sys_sendmmsg+0x9c/0xb0 [ 298.262564][T19834] do_syscall_64+0xf3/0x1b0 [ 298.267073][T19834] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 298.272969][T19834] RIP: 0033:0x45ca29 [ 298.276866][T19834] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 298.297325][T19834] RSP: 002b:00007f082d13ac78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 298.306045][T19834] RAX: ffffffffffffffda RBX: 00000000004fc640 RCX: 000000000045ca29 [ 298.314279][T19834] RDX: 0000000000000001 RSI: 00000000200000c0 RDI: 0000000000000004 [ 298.322515][T19834] RBP: 000000000078c040 R08: 0000000000000000 R09: 0000000000000000 [ 298.330662][T19834] R10: 0000000020000040 R11: 0000000000000246 R12: 0000000000000008 08:39:52 executing program 1: r0 = socket(0x10, 0x803, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000005540)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000c80)=""/235, 0xeb}], 0x1}}], 0x1, 0x0, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendto(r0, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000b80)=@ethernet={0x0, @local}, 0x80, 0x0}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000ac0)=[{{&(0x7f0000000880)=@caif=@util, 0x80, &(0x7f0000000540)=[{&(0x7f0000000900)=""/128, 0x80}, {&(0x7f0000000980)=""/76, 0x4c}], 0x2}, 0x3f}], 0x1, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_SYS_GET(0xffffffffffffffff, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000a00)={0x0, 0x30}}, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x374, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x14b}, {&(0x7f0000000140)=""/85, 0x20a}, {&(0x7f0000000fc0)=""/4096, 0x773}, {&(0x7f0000000400)=""/106, 0x2ce}, {&(0x7f0000000740)=""/73, 0x3dd}, {&(0x7f0000000200)=""/77, 0x96}, {&(0x7f00000007c0)=""/154, 0x40d}, {&(0x7f0000000000)=""/22, 0xa}], 0x81, &(0x7f0000000600)=""/191, 0x41, 0x6000000}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 08:39:52 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000002e000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f32f00fb30f0f309a0900000065002ed8ddc74424008f6dc4bd8787442402c43a727fc7442406000000000f35f30f090f013ac4c18d72d683b9070200000f32ed", 0x46}], 0x1, 0x2e, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000100)={0x0, @in6={{0xa, 0x0, 0x0, @mcast1}}}, &(0x7f0000000080)=0x90) dup(r5) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x7, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0xfffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000000), 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f000002f000/0x18000)=nil, &(0x7f0000000180)=[@text16={0x10, 0x0}], 0x1, 0x8, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 08:39:52 executing program 4: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x20000000003, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00'}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newlink={0x60, 0x10, 0x1, 0x70bd25, 0x0, {0x0, 0x0, 0x12, r4, 0x50800}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @ip6gretap={{0xe, 0x1, 'ip6gretap\x00'}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @ipv4={[], [], @private=0xa010100}}, @IFLA_GRE_REMOTE={0x14, 0x7, @remote}]}}}]}, 0x60}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00'}) [ 298.338811][T19834] R13: 00000000000008e0 R14: 00000000004cba43 R15: 00007f082d13b6d4 08:39:52 executing program 2 (fault-call:8 fault-nth:63): shmget(0x0, 0x4000, 0x780012c9, &(0x7f0000ffc000/0x4000)=nil) shmctl$IPC_RMID(0x0, 0x0) shmat(0x0, &(0x7f0000ffe000/0x1000)=nil, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x2, 0x1) r1 = open(&(0x7f0000000080)='./bus\x00', 0x430c2, 0x0) ftruncate(r1, 0x200004) sendfile(r0, r1, 0x0, 0x80001d00c0d0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) 08:39:52 executing program 3: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x20000000003, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newlink={0x60, 0x10, 0x1, 0x0, 0xfe80ffff, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @ip6gretap={{0xe, 0x1, 'ip6gretap\x00'}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @ipv4={[], [], @loopback}}, @IFLA_GRE_REMOTE={0x14, 0x7, @remote}]}}}]}, 0x60}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00'}) [ 298.430084][ T29] audit: type=1326 audit(1589963992.359:91): auid=0 uid=0 gid=0 ses=4 subj=_ pid=19870 comm="syz-executor.0" exe="/root/syz-executor.0" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45f86a code=0x0 [ 298.462529][T19881] FAULT_INJECTION: forcing a failure. [ 298.462529][T19881] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 298.508281][T19881] CPU: 0 PID: 19881 Comm: syz-executor.2 Not tainted 5.7.0-rc6-syzkaller #0 [ 298.517020][T19881] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 298.527080][T19881] Call Trace: [ 298.530378][T19881] dump_stack+0x1e9/0x30e [ 298.534720][T19881] should_fail+0x433/0x5b0 [ 298.539148][T19881] prepare_alloc_pages+0x28c/0x4a0 [ 298.544277][T19881] __alloc_pages_nodemask+0xbc/0x5e0 [ 298.549575][T19881] __do_page_cache_readahead+0x1de/0x4f0 [ 298.555235][T19881] generic_file_buffered_read+0x4a5/0x2570 [ 298.561062][T19881] generic_file_splice_read+0x452/0x700 [ 298.566616][T19881] ? splice_shrink_spd+0xb0/0xb0 [ 298.571549][T19881] splice_direct_to_actor+0x3c1/0xb40 [ 298.576932][T19881] ? do_splice_direct+0x340/0x340 [ 298.581976][T19881] do_splice_direct+0x201/0x340 [ 298.587723][T19881] ? security_file_permission+0x50/0xc0 [ 298.593312][T19881] do_sendfile+0x809/0xfe0 [ 298.597763][T19881] __x64_sys_sendfile64+0x164/0x1a0 [ 298.602963][T19881] ? do_syscall_64+0x19/0x1b0 [ 298.607644][T19881] do_syscall_64+0xf3/0x1b0 [ 298.612156][T19881] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 298.618092][T19881] RIP: 0033:0x45ca29 [ 298.622078][T19881] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 298.641682][T19881] RSP: 002b:00007efeff606c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 298.650108][T19881] RAX: ffffffffffffffda RBX: 00000000004fc540 RCX: 000000000045ca29 08:39:52 executing program 5 (fault-call:9 fault-nth:4): unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x10, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = socket$inet6(0xa, 0x1, 0x8010800000000084) r1 = socket$kcm(0x2, 0x3, 0x2) recvmsg(r1, &(0x7f0000007500)={&(0x7f0000006f80)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x80, 0x0, 0x0, 0xffffffffffffffff}, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmmsg$inet6(r0, &(0x7f00000000c0)=[{{&(0x7f0000002c80)={0xa, 0x0, 0x0, @loopback}, 0x1c, &(0x7f0000005000)=[{&(0x7f0000002cc0)="ea", 0x1}], 0x1}}], 0x1, 0x20000040) 08:39:52 executing program 1: r0 = socket(0x10, 0x803, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000005540)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000c80)=""/235, 0xeb}], 0x1}}], 0x1, 0x0, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendto(r0, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000b80)=@ethernet={0x0, @local}, 0x80, 0x0}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000ac0)=[{{&(0x7f0000000880)=@caif=@util, 0x80, &(0x7f0000000540)=[{&(0x7f0000000900)=""/128, 0x80}, {&(0x7f0000000980)=""/76, 0x4c}], 0x2}, 0x3f}], 0x1, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_SYS_GET(0xffffffffffffffff, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000a00)={0x0, 0x30}}, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x374, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x14b}, {&(0x7f0000000140)=""/85, 0x20a}, {&(0x7f0000000fc0)=""/4096, 0x773}, {&(0x7f0000000400)=""/106, 0x2ce}, {&(0x7f0000000740)=""/73, 0x3dd}, {&(0x7f0000000200)=""/77, 0x96}, {&(0x7f00000007c0)=""/154, 0x40d}, {&(0x7f0000000000)=""/22, 0xa}], 0x81, &(0x7f0000000600)=""/191, 0x41, 0x7000000}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) [ 298.658078][T19881] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 298.666057][T19881] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 298.674062][T19881] R10: 000080001d00c0d0 R11: 0000000000000246 R12: 0000000000000005 [ 298.682032][T19881] R13: 00000000000008dc R14: 00000000004cba16 R15: 00007efeff6076d4 08:39:52 executing program 4: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x20000000003, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00'}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newlink={0x60, 0x10, 0x1, 0x70bd25, 0x0, {0x0, 0x0, 0x13, r4, 0x50800}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @ip6gretap={{0xe, 0x1, 'ip6gretap\x00'}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @ipv4={[], [], @private=0xa010100}}, @IFLA_GRE_REMOTE={0x14, 0x7, @remote}]}}}]}, 0x60}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00'}) 08:39:52 executing program 3: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x20000000003, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newlink={0x60, 0x10, 0x1, 0x0, 0xfec0ffff, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @ip6gretap={{0xe, 0x1, 'ip6gretap\x00'}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @ipv4={[], [], @loopback}}, @IFLA_GRE_REMOTE={0x14, 0x7, @remote}]}}}]}, 0x60}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00'}) 08:39:52 executing program 2 (fault-call:8 fault-nth:64): shmget(0x0, 0x4000, 0x780012c9, &(0x7f0000ffc000/0x4000)=nil) shmctl$IPC_RMID(0x0, 0x0) shmat(0x0, &(0x7f0000ffe000/0x1000)=nil, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x2, 0x1) r1 = open(&(0x7f0000000080)='./bus\x00', 0x430c2, 0x0) ftruncate(r1, 0x200004) sendfile(r0, r1, 0x0, 0x80001d00c0d0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) 08:39:52 executing program 1: r0 = socket(0x10, 0x803, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000005540)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000c80)=""/235, 0xeb}], 0x1}}], 0x1, 0x0, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendto(r0, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000b80)=@ethernet={0x0, @local}, 0x80, 0x0}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000ac0)=[{{&(0x7f0000000880)=@caif=@util, 0x80, &(0x7f0000000540)=[{&(0x7f0000000900)=""/128, 0x80}, {&(0x7f0000000980)=""/76, 0x4c}], 0x2}, 0x3f}], 0x1, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_SYS_GET(0xffffffffffffffff, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000a00)={0x0, 0x30}}, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x374, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x14b}, {&(0x7f0000000140)=""/85, 0x20a}, {&(0x7f0000000fc0)=""/4096, 0x773}, {&(0x7f0000000400)=""/106, 0x2ce}, {&(0x7f0000000740)=""/73, 0x3dd}, {&(0x7f0000000200)=""/77, 0x96}, {&(0x7f00000007c0)=""/154, 0x40d}, {&(0x7f0000000000)=""/22, 0xa}], 0x81, &(0x7f0000000600)=""/191, 0x41, 0x8000000}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 08:39:52 executing program 3: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x20000000003, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newlink={0x60, 0x10, 0x1, 0x0, 0xff000000, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @ip6gretap={{0xe, 0x1, 'ip6gretap\x00'}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @ipv4={[], [], @loopback}}, @IFLA_GRE_REMOTE={0x14, 0x7, @remote}]}}}]}, 0x60}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00'}) [ 298.823748][T19901] IPVS: ftp: loaded support on port[0] = 21 08:39:52 executing program 4: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x20000000003, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00'}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newlink={0x60, 0x10, 0x1, 0x70bd25, 0x0, {0x0, 0x0, 0x14, r4, 0x50800}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @ip6gretap={{0xe, 0x1, 'ip6gretap\x00'}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @ipv4={[], [], @private=0xa010100}}, @IFLA_GRE_REMOTE={0x14, 0x7, @remote}]}}}]}, 0x60}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00'}) [ 298.900315][T19912] FAULT_INJECTION: forcing a failure. [ 298.900315][T19912] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 298.924552][T19916] FAULT_INJECTION: forcing a failure. [ 298.924552][T19916] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 298.949041][T19912] CPU: 1 PID: 19912 Comm: syz-executor.2 Not tainted 5.7.0-rc6-syzkaller #0 [ 298.962098][T19912] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 298.972146][T19912] Call Trace: [ 298.975439][T19912] dump_stack+0x1e9/0x30e [ 298.979769][T19912] should_fail+0x433/0x5b0 [ 298.984189][T19912] prepare_alloc_pages+0x28c/0x4a0 [ 298.989302][T19912] __alloc_pages_nodemask+0xbc/0x5e0 [ 298.994604][T19912] __do_page_cache_readahead+0x1de/0x4f0 [ 299.000274][T19912] generic_file_buffered_read+0x4a5/0x2570 [ 299.006111][T19912] generic_file_splice_read+0x452/0x700 [ 299.011690][T19912] ? splice_shrink_spd+0xb0/0xb0 [ 299.016633][T19912] splice_direct_to_actor+0x3c1/0xb40 [ 299.022015][T19912] ? do_splice_direct+0x340/0x340 [ 299.027047][T19912] do_splice_direct+0x201/0x340 [ 299.031908][T19912] ? security_file_permission+0x50/0xc0 [ 299.037448][T19912] do_sendfile+0x809/0xfe0 [ 299.041874][T19912] __x64_sys_sendfile64+0x164/0x1a0 [ 299.047067][T19912] ? do_syscall_64+0x19/0x1b0 [ 299.051728][T19912] do_syscall_64+0xf3/0x1b0 [ 299.056311][T19912] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 299.062287][T19912] RIP: 0033:0x45ca29 [ 299.066280][T19912] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 299.086844][T19912] RSP: 002b:00007efeff606c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 299.095589][T19912] RAX: ffffffffffffffda RBX: 00000000004fc540 RCX: 000000000045ca29 [ 299.103540][T19912] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 299.111491][T19912] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 299.119446][T19912] R10: 000080001d00c0d0 R11: 0000000000000246 R12: 0000000000000005 [ 299.127397][T19912] R13: 00000000000008dc R14: 00000000004cba16 R15: 00007efeff6076d4 [ 299.135558][T19916] CPU: 0 PID: 19916 Comm: syz-executor.5 Not tainted 5.7.0-rc6-syzkaller #0 [ 299.144229][T19916] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 299.154373][T19916] Call Trace: [ 299.157665][T19916] dump_stack+0x1e9/0x30e [ 299.161996][T19916] should_fail+0x433/0x5b0 [ 299.166415][T19916] prepare_alloc_pages+0x28c/0x4a0 [ 299.171527][T19916] __alloc_pages_nodemask+0xbc/0x5e0 [ 299.176818][T19916] __get_free_pages+0x8/0x30 [ 299.181426][T19916] __genradix_ptr_alloc+0x125/0x2c0 [ 299.186655][T19916] ? sctp_stream_outq_migrate+0x4e9/0x520 [ 299.192381][T19916] __genradix_prealloc+0x42/0x90 [ 299.197366][T19916] sctp_stream_init+0x132/0x470 [ 299.202298][T19916] sctp_association_new+0xfa6/0x21c0 [ 299.207584][T19916] sctp_connect_new_asoc+0x25c/0x600 [ 299.212868][T19916] sctp_sendmsg+0x1aa0/0x3620 [ 299.217565][T19916] ? inet_sendmsg+0xfa/0x310 [ 299.222132][T19916] ? inet_send_prepare+0x250/0x250 [ 299.227221][T19916] ____sys_sendmsg+0x4f9/0x7c0 [ 299.231963][T19916] ? import_iovec+0x12a/0x2c0 [ 299.236616][T19916] __sys_sendmmsg+0x45b/0x690 [ 299.241280][T19916] ? vfs_write+0x48e/0x580 [ 299.245695][T19916] ? check_preemption_disabled+0x40/0x240 [ 299.251387][T19916] ? __this_cpu_preempt_check+0x9/0x20 [ 299.256838][T19916] ? ksys_write+0x1b1/0x220 [ 299.261338][T19916] ? check_preemption_disabled+0xb0/0x240 [ 299.267032][T19916] ? debug_smp_processor_id+0x5/0x20 [ 299.272298][T19916] ? trace_irq_disable_rcuidle+0x1f/0x1d0 [ 299.277999][T19916] __x64_sys_sendmmsg+0x9c/0xb0 [ 299.282831][T19916] do_syscall_64+0xf3/0x1b0 [ 299.287314][T19916] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 299.293216][T19916] RIP: 0033:0x45ca29 [ 299.297105][T19916] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 299.316689][T19916] RSP: 002b:00007f082d13ac78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 299.325094][T19916] RAX: ffffffffffffffda RBX: 00000000004fc640 RCX: 000000000045ca29 [ 299.333041][T19916] RDX: 0000000000000001 RSI: 00000000200000c0 RDI: 0000000000000004 [ 299.341005][T19916] RBP: 000000000078c040 R08: 0000000000000000 R09: 0000000000000000 [ 299.349070][T19916] R10: 0000000020000040 R11: 0000000000000246 R12: 0000000000000008 [ 299.357046][T19916] R13: 00000000000008e0 R14: 00000000004cba43 R15: 00007f082d13b6d4 08:39:53 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x1ff}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x4, 0x0, 0x5, 0xfffffffffffffffd}, 0x0) lsetxattr$security_evm(0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000380)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x501080, 0x0) ioctl$TUNSETVNETBE(r0, 0x400454de, &(0x7f00000000c0)) ioctl$KVM_SET_DEBUGREGS(0xffffffffffffffff, 0x4080aea2, &(0x7f0000000300)={[0xd000, 0x0, 0x0, 0x5000], 0x0, 0x11}) fchdir(r0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0xb3, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0) r2 = open$dir(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) ptrace$setregs(0xffffffffffffffff, 0x0, 0x85, &(0x7f00000003c0)="9f65cd0e6540a1f06b941019e20db380c2e3e4a87b02797aabd9ce6a7d726e2a91a90048e4207ebb1a460f7a80d5c2639555a51347dd88abf9d7f909092b413494f9c88891a946dd7c2b0491c1b7b7d1b227f064d86e6af6c883421b3fb51f02cd58bbdc6ff18ae274b520558a") sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={0x0}, 0x1, 0x0, 0x0, 0x20000840}, 0x4004050) creat(&(0x7f0000000100)='./file0\x00', 0x0) ioctl$BLKZEROOUT(r0, 0x127f, &(0x7f0000000000)={0x3, 0x6}) openat$bsg(0xffffffffffffff9c, &(0x7f0000000140)='/dev/bsg\x00', 0x600400, 0x0) write$9p(r1, &(0x7f0000001400)="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", 0x5ff) r3 = socket(0x23, 0x805, 0x0) sendto$inet(r3, 0x0, 0x7ffffffff000, 0x0, &(0x7f0000e68000)={0x2, 0x0, @broadcast}, 0x10) sendfile(r1, r2, 0x0, 0x105fe) 08:39:53 executing program 1: r0 = socket(0x10, 0x803, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000005540)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000c80)=""/235, 0xeb}], 0x1}}], 0x1, 0x0, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendto(r0, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000b80)=@ethernet={0x0, @local}, 0x80, 0x0}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000ac0)=[{{&(0x7f0000000880)=@caif=@util, 0x80, &(0x7f0000000540)=[{&(0x7f0000000900)=""/128, 0x80}, {&(0x7f0000000980)=""/76, 0x4c}], 0x2}, 0x3f}], 0x1, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_SYS_GET(0xffffffffffffffff, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000a00)={0x0, 0x30}}, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x374, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x14b}, {&(0x7f0000000140)=""/85, 0x20a}, {&(0x7f0000000fc0)=""/4096, 0x773}, {&(0x7f0000000400)=""/106, 0x2ce}, {&(0x7f0000000740)=""/73, 0x3dd}, {&(0x7f0000000200)=""/77, 0x96}, {&(0x7f00000007c0)=""/154, 0x40d}, {&(0x7f0000000000)=""/22, 0xa}], 0x81, &(0x7f0000000600)=""/191, 0x41, 0x9000000}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 08:39:53 executing program 2 (fault-call:8 fault-nth:65): shmget(0x0, 0x4000, 0x780012c9, &(0x7f0000ffc000/0x4000)=nil) shmctl$IPC_RMID(0x0, 0x0) shmat(0x0, &(0x7f0000ffe000/0x1000)=nil, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x2, 0x1) r1 = open(&(0x7f0000000080)='./bus\x00', 0x430c2, 0x0) ftruncate(r1, 0x200004) sendfile(r0, r1, 0x0, 0x80001d00c0d0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) 08:39:53 executing program 3: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x20000000003, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newlink={0x60, 0x10, 0x1, 0x0, 0xffff80fe, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @ip6gretap={{0xe, 0x1, 'ip6gretap\x00'}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @ipv4={[], [], @loopback}}, @IFLA_GRE_REMOTE={0x14, 0x7, @remote}]}}}]}, 0x60}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00'}) [ 299.480579][ T29] audit: type=1326 audit(1589963993.409:92): auid=0 uid=0 gid=0 ses=4 subj=_ pid=19870 comm="syz-executor.0" exe="/root/syz-executor.0" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45f86a code=0x0 [ 299.551357][T19968] FAULT_INJECTION: forcing a failure. [ 299.551357][T19968] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 299.573337][T19968] CPU: 1 PID: 19968 Comm: syz-executor.2 Not tainted 5.7.0-rc6-syzkaller #0 [ 299.582146][T19968] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 299.592200][T19968] Call Trace: [ 299.595494][T19968] dump_stack+0x1e9/0x30e [ 299.599829][T19968] should_fail+0x433/0x5b0 [ 299.604276][T19968] prepare_alloc_pages+0x28c/0x4a0 [ 299.609395][T19968] __alloc_pages_nodemask+0xbc/0x5e0 [ 299.614688][T19968] __do_page_cache_readahead+0x1de/0x4f0 [ 299.620321][T19968] generic_file_buffered_read+0x4a5/0x2570 [ 299.626225][T19968] generic_file_splice_read+0x452/0x700 [ 299.629824][ T29] audit: type=1804 audit(1589963993.499:93): pid=19974 uid=0 auid=0 ses=4 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir469630916/syzkaller.U4jrtm/366/file0" dev="sda1" ino=16371 res=1 [ 299.632983][T19968] ? splice_shrink_spd+0xb0/0xb0 [ 299.632998][T19968] splice_direct_to_actor+0x3c1/0xb40 [ 299.655323][ T29] audit: type=1804 audit(1589963993.499:94): pid=19974 uid=0 auid=0 ses=4 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir469630916/syzkaller.U4jrtm/366/file0" dev="sda1" ino=16371 res=1 [ 299.660052][T19968] ? do_splice_direct+0x340/0x340 [ 299.660065][T19968] do_splice_direct+0x201/0x340 [ 299.660081][T19968] ? security_file_permission+0x50/0xc0 [ 299.702970][T19968] do_sendfile+0x809/0xfe0 [ 299.707809][T19968] __x64_sys_sendfile64+0x164/0x1a0 [ 299.713124][T19968] ? do_syscall_64+0x19/0x1b0 [ 299.717786][T19968] do_syscall_64+0xf3/0x1b0 [ 299.722336][T19968] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 299.728222][T19968] RIP: 0033:0x45ca29 [ 299.732116][T19968] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 08:39:53 executing program 5 (fault-call:9 fault-nth:5): unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x10, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = socket$inet6(0xa, 0x1, 0x8010800000000084) r1 = socket$kcm(0x2, 0x3, 0x2) recvmsg(r1, &(0x7f0000007500)={&(0x7f0000006f80)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x80, 0x0, 0x0, 0xffffffffffffffff}, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmmsg$inet6(r0, &(0x7f00000000c0)=[{{&(0x7f0000002c80)={0xa, 0x0, 0x0, @loopback}, 0x1c, &(0x7f0000005000)=[{&(0x7f0000002cc0)="ea", 0x1}], 0x1}}], 0x1, 0x20000040) 08:39:53 executing program 4: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x20000000003, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00'}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newlink={0x60, 0x10, 0x1, 0x70bd25, 0x0, {0x0, 0x0, 0x60, r4, 0x50800}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @ip6gretap={{0xe, 0x1, 'ip6gretap\x00'}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @ipv4={[], [], @private=0xa010100}}, @IFLA_GRE_REMOTE={0x14, 0x7, @remote}]}}}]}, 0x60}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00'}) 08:39:53 executing program 1: r0 = socket(0x10, 0x803, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000005540)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000c80)=""/235, 0xeb}], 0x1}}], 0x1, 0x0, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendto(r0, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000b80)=@ethernet={0x0, @local}, 0x80, 0x0}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000ac0)=[{{&(0x7f0000000880)=@caif=@util, 0x80, &(0x7f0000000540)=[{&(0x7f0000000900)=""/128, 0x80}, {&(0x7f0000000980)=""/76, 0x4c}], 0x2}, 0x3f}], 0x1, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_SYS_GET(0xffffffffffffffff, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000a00)={0x0, 0x30}}, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x374, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x14b}, {&(0x7f0000000140)=""/85, 0x20a}, {&(0x7f0000000fc0)=""/4096, 0x773}, {&(0x7f0000000400)=""/106, 0x2ce}, {&(0x7f0000000740)=""/73, 0x3dd}, {&(0x7f0000000200)=""/77, 0x96}, {&(0x7f00000007c0)=""/154, 0x40d}, {&(0x7f0000000000)=""/22, 0xa}], 0x81, &(0x7f0000000600)=""/191, 0x41, 0xa000000}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) [ 299.751903][T19968] RSP: 002b:00007efeff606c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 299.760328][T19968] RAX: ffffffffffffffda RBX: 00000000004fc540 RCX: 000000000045ca29 [ 299.768302][T19968] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 299.776279][T19968] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 299.784291][T19968] R10: 000080001d00c0d0 R11: 0000000000000246 R12: 0000000000000005 [ 299.792307][T19968] R13: 00000000000008dc R14: 00000000004cba16 R15: 00007efeff6076d4 [ 299.797443][T19981] IPVS: ftp: loaded support on port[0] = 21 08:39:53 executing program 3: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x20000000003, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newlink={0x60, 0x10, 0x1, 0x0, 0xffffa888, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @ip6gretap={{0xe, 0x1, 'ip6gretap\x00'}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @ipv4={[], [], @loopback}}, @IFLA_GRE_REMOTE={0x14, 0x7, @remote}]}}}]}, 0x60}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00'}) 08:39:53 executing program 1: r0 = socket(0x10, 0x803, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000005540)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000c80)=""/235, 0xeb}], 0x1}}], 0x1, 0x0, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendto(r0, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000b80)=@ethernet={0x0, @local}, 0x80, 0x0}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000ac0)=[{{&(0x7f0000000880)=@caif=@util, 0x80, &(0x7f0000000540)=[{&(0x7f0000000900)=""/128, 0x80}, {&(0x7f0000000980)=""/76, 0x4c}], 0x2}, 0x3f}], 0x1, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_SYS_GET(0xffffffffffffffff, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000a00)={0x0, 0x30}}, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x374, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x14b}, {&(0x7f0000000140)=""/85, 0x20a}, {&(0x7f0000000fc0)=""/4096, 0x773}, {&(0x7f0000000400)=""/106, 0x2ce}, {&(0x7f0000000740)=""/73, 0x3dd}, {&(0x7f0000000200)=""/77, 0x96}, {&(0x7f00000007c0)=""/154, 0x40d}, {&(0x7f0000000000)=""/22, 0xa}], 0x81, &(0x7f0000000600)=""/191, 0x41, 0xb000000}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) [ 299.849073][ T29] audit: type=1804 audit(1589963993.779:95): pid=19974 uid=0 auid=0 ses=4 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir469630916/syzkaller.U4jrtm/366/file0" dev="sda1" ino=16371 res=1 08:39:53 executing program 2 (fault-call:8 fault-nth:66): shmget(0x0, 0x4000, 0x780012c9, &(0x7f0000ffc000/0x4000)=nil) shmctl$IPC_RMID(0x0, 0x0) shmat(0x0, &(0x7f0000ffe000/0x1000)=nil, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x2, 0x1) r1 = open(&(0x7f0000000080)='./bus\x00', 0x430c2, 0x0) ftruncate(r1, 0x200004) sendfile(r0, r1, 0x0, 0x80001d00c0d0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) 08:39:53 executing program 4: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x20000000003, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00'}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newlink={0x60, 0x10, 0x1, 0x70bd25, 0x0, {0x0, 0x0, 0xfc, r4, 0x50800}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @ip6gretap={{0xe, 0x1, 'ip6gretap\x00'}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @ipv4={[], [], @private=0xa010100}}, @IFLA_GRE_REMOTE={0x14, 0x7, @remote}]}}}]}, 0x60}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00'}) [ 299.937429][T19981] FAULT_INJECTION: forcing a failure. [ 299.937429][T19981] name failslab, interval 1, probability 0, space 0, times 0 [ 299.972785][T19981] CPU: 1 PID: 19981 Comm: syz-executor.5 Not tainted 5.7.0-rc6-syzkaller #0 08:39:53 executing program 0: perf_event_open(&(0x7f000001d000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000180)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x2, 0x46, 0x0, "0000000000000400"}, 0x22b) sendto$inet6(0xffffffffffffffff, &(0x7f0000000440)="9b966d2defeca74f397236bf0ea7ef22fd7ed23ee0c9b3cddcc4b92baedce8dd5afd3cf3e5a59314a660f7453fcba9cd86b4c1ddcf93be05262f4e55a12d665c1fcb83ef803e631be19775115c8d1eb560633b8757580f5bed96fa4de407db51c45b55857ad998f7132c0527f96580008aaf26bc092607344ddc08090000009bfaefee50ca7c6dcd363fcc21b8fc83a1aa8daaa1e26ab861c9c7", 0x9a, 0x20000014, &(0x7f0000b63fe4)={0xa, 0x2, 0x1802}, 0x1c) r1 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r1, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='ns\x00') getdents(r2, &(0x7f0000000040)=""/46, 0x2e) ioctl$FIONREAD(r2, 0x541b, &(0x7f00000000c0)) get_robust_list(r1, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000240)='ns\x00') syz_emit_ethernet(0x4e, &(0x7f0000000000)={@local, @dev, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, '\x00', 0x8, 0x2b, 0x0, @local, @local, {[@hopopts={0x87}], {0x0, 0x0, 0x10, 0x0, @gue={{0x2}}}}}}}}, 0x0) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000013ff4)=@assoc_value={0x0}, &(0x7f0000002000)=0x8) r5 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x7d, &(0x7f0000000100)={r6, 0x0, 0x200}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000280)={r6, 0xcc, "7049b8f22f72272fad6058ee8023aae10a452edf3a5271656ef972324243a84a76ff83187af4ffca95a4eaf040fae679834361852560c09edb1674366211476b8b8cf92488f28e63d8d2badf55cb5f289d4ed56efe92b61c7e8da20ab24c4f10c1892b8f2fca4f7215593ee108b12282f6229f9393e27926ce366f25ff40641af84ff38b4ff86e8f92d23787010131cbcf817889b310f51617db6e873f95d394ae2afeda8e2b966ef91523f90f1d82a786295f54dbf6e2ebf2f5879a4a2c34cfee0e297594a4091933597b1b"}, &(0x7f0000000140)=0xd4) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f00000003c0)={r4, 0x2c, &(0x7f0000000380)=[@in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in6={0xa, 0x4e23, 0x9, @mcast1, 0xff}]}, &(0x7f0000000400)=0x10) perf_event_open(&(0x7f0000000040)={0x3, 0x70, 0x3f, 0x80, 0x3f, 0x1f, 0x0, 0x8, 0x38451, 0x8, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x8c8f, 0x4, @perf_bp={&(0x7f0000000000), 0xb}, 0x0, 0x5, 0xab, 0x1, 0x2, 0x9}, r1, 0x3, r3, 0xb) [ 299.981490][T19981] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 299.991981][T19981] Call Trace: [ 299.995278][T19981] dump_stack+0x1e9/0x30e [ 299.999614][T19981] should_fail+0x433/0x5b0 [ 300.004133][T19981] ? sctp_auth_asoc_copy_shkeys+0x121/0x5c0 [ 300.010036][T19981] should_failslab+0x5/0x20 [ 300.014542][T19981] kmem_cache_alloc_trace+0x57/0x300 [ 300.019833][T19981] sctp_auth_asoc_copy_shkeys+0x121/0x5c0 [ 300.025560][T19981] sctp_association_new+0x1478/0x21c0 [ 300.030944][T19981] sctp_connect_new_asoc+0x25c/0x600 [ 300.036258][T19981] sctp_sendmsg+0x1aa0/0x3620 [ 300.040938][T19981] ? inet_sendmsg+0xfa/0x310 [ 300.045521][T19981] ? inet_send_prepare+0x250/0x250 [ 300.050790][T19981] ____sys_sendmsg+0x4f9/0x7c0 [ 300.055534][T19981] ? import_iovec+0x12a/0x2c0 [ 300.060196][T19981] __sys_sendmmsg+0x45b/0x690 [ 300.065106][T19981] ? vfs_write+0x48e/0x580 [ 300.069496][T19981] ? check_preemption_disabled+0x40/0x240 [ 300.075187][T19981] ? __this_cpu_preempt_check+0x9/0x20 [ 300.080620][T19981] ? ksys_write+0x1b1/0x220 [ 300.085119][T19981] ? check_preemption_disabled+0xb0/0x240 [ 300.090808][T19981] ? debug_smp_processor_id+0x5/0x20 [ 300.096066][T19981] ? trace_irq_disable_rcuidle+0x1f/0x1d0 [ 300.101774][T19981] __x64_sys_sendmmsg+0x9c/0xb0 [ 300.106629][T19981] do_syscall_64+0xf3/0x1b0 [ 300.111107][T19981] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 300.116975][T19981] RIP: 0033:0x45ca29 [ 300.120845][T19981] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 300.141920][T19981] RSP: 002b:00007f082d17cc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 300.150316][T19981] RAX: ffffffffffffffda RBX: 00000000004fc640 RCX: 000000000045ca29 [ 300.158267][T19981] RDX: 0000000000000001 RSI: 00000000200000c0 RDI: 0000000000000004 [ 300.166214][T19981] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 300.174163][T19981] R10: 0000000020000040 R11: 0000000000000246 R12: 0000000000000008 08:39:54 executing program 3: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x20000000003, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newlink={0x60, 0x10, 0x1, 0x0, 0xffffc0fe, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @ip6gretap={{0xe, 0x1, 'ip6gretap\x00'}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @ipv4={[], [], @loopback}}, @IFLA_GRE_REMOTE={0x14, 0x7, @remote}]}}}]}, 0x60}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00'}) [ 300.182112][T19981] R13: 00000000000008e0 R14: 00000000004cba43 R15: 00007f082d17d6d4 08:39:54 executing program 1: r0 = socket(0x10, 0x803, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000005540)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000c80)=""/235, 0xeb}], 0x1}}], 0x1, 0x0, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendto(r0, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000b80)=@ethernet={0x0, @local}, 0x80, 0x0}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000ac0)=[{{&(0x7f0000000880)=@caif=@util, 0x80, &(0x7f0000000540)=[{&(0x7f0000000900)=""/128, 0x80}, {&(0x7f0000000980)=""/76, 0x4c}], 0x2}, 0x3f}], 0x1, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_SYS_GET(0xffffffffffffffff, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000a00)={0x0, 0x30}}, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x374, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x14b}, {&(0x7f0000000140)=""/85, 0x20a}, {&(0x7f0000000fc0)=""/4096, 0x773}, {&(0x7f0000000400)=""/106, 0x2ce}, {&(0x7f0000000740)=""/73, 0x3dd}, {&(0x7f0000000200)=""/77, 0x96}, {&(0x7f00000007c0)=""/154, 0x40d}, {&(0x7f0000000000)=""/22, 0xa}], 0x81, &(0x7f0000000600)=""/191, 0x41, 0xc000000}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 08:39:54 executing program 0: socket$packet(0x11, 0x2, 0x300) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = accept4$phonet_pipe(r1, &(0x7f0000000000), &(0x7f0000000040)=0x10, 0x80000) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) semctl$IPC_INFO(0x0, 0x0, 0x3, &(0x7f00000006c0)=""/204) [ 300.241355][T20022] FAULT_INJECTION: forcing a failure. [ 300.241355][T20022] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 300.300188][T20022] CPU: 1 PID: 20022 Comm: syz-executor.2 Not tainted 5.7.0-rc6-syzkaller #0 [ 300.309247][T20022] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 300.319424][T20022] Call Trace: [ 300.322749][T20022] dump_stack+0x1e9/0x30e [ 300.327094][T20022] should_fail+0x433/0x5b0 [ 300.331521][T20022] prepare_alloc_pages+0x28c/0x4a0 [ 300.336639][T20022] __alloc_pages_nodemask+0xbc/0x5e0 [ 300.341932][T20022] __do_page_cache_readahead+0x1de/0x4f0 [ 300.347573][T20022] generic_file_buffered_read+0x4a5/0x2570 [ 300.353394][T20022] generic_file_splice_read+0x452/0x700 [ 300.358951][T20022] ? splice_shrink_spd+0xb0/0xb0 [ 300.363897][T20022] splice_direct_to_actor+0x3c1/0xb40 [ 300.369277][T20022] ? do_splice_direct+0x340/0x340 [ 300.374308][T20022] do_splice_direct+0x201/0x340 [ 300.379275][T20022] ? security_file_permission+0x50/0xc0 [ 300.384832][T20022] do_sendfile+0x809/0xfe0 [ 300.389270][T20022] __x64_sys_sendfile64+0x164/0x1a0 [ 300.394495][T20022] ? do_syscall_64+0x19/0x1b0 [ 300.399173][T20022] do_syscall_64+0xf3/0x1b0 [ 300.403857][T20022] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 300.409909][T20022] RIP: 0033:0x45ca29 [ 300.413792][T20022] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 300.433414][T20022] RSP: 002b:00007efeff606c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 300.441812][T20022] RAX: ffffffffffffffda RBX: 00000000004fc540 RCX: 000000000045ca29 08:39:54 executing program 1: r0 = socket(0x10, 0x803, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000005540)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000c80)=""/235, 0xeb}], 0x1}}], 0x1, 0x0, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendto(r0, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000b80)=@ethernet={0x0, @local}, 0x80, 0x0}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000ac0)=[{{&(0x7f0000000880)=@caif=@util, 0x80, &(0x7f0000000540)=[{&(0x7f0000000900)=""/128, 0x80}, {&(0x7f0000000980)=""/76, 0x4c}], 0x2}, 0x3f}], 0x1, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_SYS_GET(0xffffffffffffffff, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000a00)={0x0, 0x30}}, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x374, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x14b}, {&(0x7f0000000140)=""/85, 0x20a}, {&(0x7f0000000fc0)=""/4096, 0x773}, {&(0x7f0000000400)=""/106, 0x2ce}, {&(0x7f0000000740)=""/73, 0x3dd}, {&(0x7f0000000200)=""/77, 0x96}, {&(0x7f00000007c0)=""/154, 0x40d}, {&(0x7f0000000000)=""/22, 0xa}], 0x81, &(0x7f0000000600)=""/191, 0x41, 0xd000000}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) [ 300.449774][T20022] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 300.458091][T20022] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 300.466140][T20022] R10: 000080001d00c0d0 R11: 0000000000000246 R12: 0000000000000005 [ 300.474440][T20022] R13: 00000000000008dc R14: 00000000004cba16 R15: 00007efeff6076d4 08:39:54 executing program 5 (fault-call:9 fault-nth:6): unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x10, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = socket$inet6(0xa, 0x1, 0x8010800000000084) r1 = socket$kcm(0x2, 0x3, 0x2) recvmsg(r1, &(0x7f0000007500)={&(0x7f0000006f80)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x80, 0x0, 0x0, 0xffffffffffffffff}, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmmsg$inet6(r0, &(0x7f00000000c0)=[{{&(0x7f0000002c80)={0xa, 0x0, 0x0, @loopback}, 0x1c, &(0x7f0000005000)=[{&(0x7f0000002cc0)="ea", 0x1}], 0x1}}], 0x1, 0x20000040) 08:39:54 executing program 4: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x20000000003, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00'}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newlink={0x60, 0x10, 0x1, 0x70bd25, 0x0, {0x0, 0x0, 0x163, r4, 0x50800}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @ip6gretap={{0xe, 0x1, 'ip6gretap\x00'}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @ipv4={[], [], @private=0xa010100}}, @IFLA_GRE_REMOTE={0x14, 0x7, @remote}]}}}]}, 0x60}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00'}) 08:39:54 executing program 1: r0 = socket(0x10, 0x803, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000005540)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000c80)=""/235, 0xeb}], 0x1}}], 0x1, 0x0, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendto(r0, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000b80)=@ethernet={0x0, @local}, 0x80, 0x0}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000ac0)=[{{&(0x7f0000000880)=@caif=@util, 0x80, &(0x7f0000000540)=[{&(0x7f0000000900)=""/128, 0x80}, {&(0x7f0000000980)=""/76, 0x4c}], 0x2}, 0x3f}], 0x1, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_SYS_GET(0xffffffffffffffff, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000a00)={0x0, 0x30}}, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x374, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x14b}, {&(0x7f0000000140)=""/85, 0x20a}, {&(0x7f0000000fc0)=""/4096, 0x773}, {&(0x7f0000000400)=""/106, 0x2ce}, {&(0x7f0000000740)=""/73, 0x3dd}, {&(0x7f0000000200)=""/77, 0x96}, {&(0x7f00000007c0)=""/154, 0x40d}, {&(0x7f0000000000)=""/22, 0xa}], 0x81, &(0x7f0000000600)=""/191, 0x41, 0xe000000}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 08:39:54 executing program 3: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x20000000003, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newlink={0x60, 0x10, 0x1, 0x0, 0xffffff7f, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @ip6gretap={{0xe, 0x1, 'ip6gretap\x00'}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @ipv4={[], [], @loopback}}, @IFLA_GRE_REMOTE={0x14, 0x7, @remote}]}}}]}, 0x60}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00'}) 08:39:54 executing program 0: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) r2 = socket$inet6(0xa, 0x2, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) close(r1) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="54000000020601080000000000000000000000000d00030068d256cb7482951a63a14c1657e33c6173683a6e65740000000005000400000000000900020073797a3200000000050001000600000005000500020000000c0007"], 0x54}}, 0x0) splice(r0, 0x0, r1, 0x0, 0xffffffff, 0x0) r4 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/renderD128\x00', 0x50000, 0x0) flistxattr(r4, &(0x7f0000000100)=""/122, 0x7a) 08:39:54 executing program 2 (fault-call:8 fault-nth:67): shmget(0x0, 0x4000, 0x780012c9, &(0x7f0000ffc000/0x4000)=nil) shmctl$IPC_RMID(0x0, 0x0) shmat(0x0, &(0x7f0000ffe000/0x1000)=nil, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x2, 0x1) r1 = open(&(0x7f0000000080)='./bus\x00', 0x430c2, 0x0) ftruncate(r1, 0x200004) sendfile(r0, r1, 0x0, 0x80001d00c0d0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) [ 300.640571][T20055] IPVS: ftp: loaded support on port[0] = 21 [ 300.664282][T20060] FAULT_INJECTION: forcing a failure. [ 300.664282][T20060] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 300.678004][T20060] CPU: 1 PID: 20060 Comm: syz-executor.2 Not tainted 5.7.0-rc6-syzkaller #0 [ 300.686684][T20060] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 300.696756][T20060] Call Trace: [ 300.700046][T20060] dump_stack+0x1e9/0x30e [ 300.704730][T20060] should_fail+0x433/0x5b0 [ 300.709154][T20060] prepare_alloc_pages+0x28c/0x4a0 [ 300.714273][T20060] __alloc_pages_nodemask+0xbc/0x5e0 [ 300.719736][T20060] __do_page_cache_readahead+0x1de/0x4f0 [ 300.725379][T20060] generic_file_buffered_read+0x4a5/0x2570 [ 300.731207][T20060] generic_file_splice_read+0x452/0x700 [ 300.736760][T20060] ? splice_shrink_spd+0xb0/0xb0 [ 300.741699][T20060] splice_direct_to_actor+0x3c1/0xb40 [ 300.747073][T20060] ? do_splice_direct+0x340/0x340 [ 300.752104][T20060] do_splice_direct+0x201/0x340 [ 300.756977][T20060] ? security_file_permission+0x50/0xc0 [ 300.762530][T20060] do_sendfile+0x809/0xfe0 [ 300.766960][T20060] __x64_sys_sendfile64+0x164/0x1a0 [ 300.772164][T20060] ? do_syscall_64+0x19/0x1b0 [ 300.776846][T20060] do_syscall_64+0xf3/0x1b0 [ 300.781439][T20060] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 300.787333][T20060] RIP: 0033:0x45ca29 [ 300.791255][T20060] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 300.810945][T20060] RSP: 002b:00007efeff606c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 300.819382][T20060] RAX: ffffffffffffffda RBX: 00000000004fc540 RCX: 000000000045ca29 [ 300.827355][T20060] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 08:39:54 executing program 1: r0 = socket(0x10, 0x803, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000005540)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000c80)=""/235, 0xeb}], 0x1}}], 0x1, 0x0, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendto(r0, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000b80)=@ethernet={0x0, @local}, 0x80, 0x0}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000ac0)=[{{&(0x7f0000000880)=@caif=@util, 0x80, &(0x7f0000000540)=[{&(0x7f0000000900)=""/128, 0x80}, {&(0x7f0000000980)=""/76, 0x4c}], 0x2}, 0x3f}], 0x1, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_SYS_GET(0xffffffffffffffff, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000a00)={0x0, 0x30}}, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x374, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x14b}, {&(0x7f0000000140)=""/85, 0x20a}, {&(0x7f0000000fc0)=""/4096, 0x773}, {&(0x7f0000000400)=""/106, 0x2ce}, {&(0x7f0000000740)=""/73, 0x3dd}, {&(0x7f0000000200)=""/77, 0x96}, {&(0x7f00000007c0)=""/154, 0x40d}, {&(0x7f0000000000)=""/22, 0xa}], 0x81, &(0x7f0000000600)=""/191, 0x41, 0xf000000}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) [ 300.835325][T20060] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 300.843296][T20060] R10: 000080001d00c0d0 R11: 0000000000000246 R12: 0000000000000005 [ 300.851304][T20060] R13: 00000000000008dc R14: 00000000004cba16 R15: 00007efeff6076d4 08:39:54 executing program 4: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x20000000003, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00'}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newlink={0x60, 0x10, 0x1, 0x70bd25, 0x0, {0x0, 0x0, 0x300, r4, 0x50800}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @ip6gretap={{0xe, 0x1, 'ip6gretap\x00'}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @ipv4={[], [], @private=0xa010100}}, @IFLA_GRE_REMOTE={0x14, 0x7, @remote}]}}}]}, 0x60}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00'}) 08:39:54 executing program 0: r0 = eventfd2(0x0, 0x1) io_setup(0x9, &(0x7f0000000340)=0x0) readv(r0, &(0x7f0000000040)=[{&(0x7f0000002540)=""/4108, 0x100c}], 0x1) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x6, 0x101000) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r7 = socket$tipc(0x1e, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000140)={'virt_wifi0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)={0x30, 0x0, 0x11, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r8}, @NL80211_ATTR_WIPHY_COVERAGE_CLASS={0x5}, @NL80211_ATTR_WIPHY_RTS_THRESHOLD={0x8}, @NL80211_ATTR_WIPHY_DYN_ACK={0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000001}, 0x0) sendmsg$NL80211_CMD_SET_BEACON(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x48604400}, 0xc, &(0x7f0000000380)={&(0x7f00000007c0)=ANY=[@ANYBLOB="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", @ANYRES16=0x0, @ANYBLOB="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"], 0x22c}, 0x1, 0x0, 0x0, 0x4000001}, 0x4000005) r9 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) ioctl$PPPIOCATTCHAN(r9, 0x40047438, &(0x7f0000000000)=0x40) r10 = socket(0x10, 0x80002, 0x0) io_submit(r1, 0x1, &(0x7f0000329fd8)=[&(0x7f00002a8000)={0x0, 0x0, 0x0, 0x0, 0x0, r10, 0x0, 0x0, 0x0, 0x0, 0x1, r0}]) 08:39:54 executing program 1: r0 = socket(0x10, 0x803, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000005540)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000c80)=""/235, 0xeb}], 0x1}}], 0x1, 0x0, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendto(r0, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000b80)=@ethernet={0x0, @local}, 0x80, 0x0}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000ac0)=[{{&(0x7f0000000880)=@caif=@util, 0x80, &(0x7f0000000540)=[{&(0x7f0000000900)=""/128, 0x80}, {&(0x7f0000000980)=""/76, 0x4c}], 0x2}, 0x3f}], 0x1, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_SYS_GET(0xffffffffffffffff, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000a00)={0x0, 0x30}}, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x374, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x14b}, {&(0x7f0000000140)=""/85, 0x20a}, {&(0x7f0000000fc0)=""/4096, 0x773}, {&(0x7f0000000400)=""/106, 0x2ce}, {&(0x7f0000000740)=""/73, 0x3dd}, {&(0x7f0000000200)=""/77, 0x96}, {&(0x7f00000007c0)=""/154, 0x40d}, {&(0x7f0000000000)=""/22, 0xa}], 0x81, &(0x7f0000000600)=""/191, 0x41, 0x10000000}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) [ 300.934869][T20066] FAULT_INJECTION: forcing a failure. [ 300.934869][T20066] name failslab, interval 1, probability 0, space 0, times 0 [ 300.961246][T20066] CPU: 1 PID: 20066 Comm: syz-executor.5 Not tainted 5.7.0-rc6-syzkaller #0 [ 300.969948][T20066] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 300.980034][T20066] Call Trace: 08:39:54 executing program 1: r0 = socket(0x10, 0x803, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000005540)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000c80)=""/235, 0xeb}], 0x1}}], 0x1, 0x0, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendto(r0, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000b80)=@ethernet={0x0, @local}, 0x80, 0x0}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000ac0)=[{{&(0x7f0000000880)=@caif=@util, 0x80, &(0x7f0000000540)=[{&(0x7f0000000900)=""/128, 0x80}, {&(0x7f0000000980)=""/76, 0x4c}], 0x2}, 0x3f}], 0x1, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_SYS_GET(0xffffffffffffffff, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000a00)={0x0, 0x30}}, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x374, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x14b}, {&(0x7f0000000140)=""/85, 0x20a}, {&(0x7f0000000fc0)=""/4096, 0x773}, {&(0x7f0000000400)=""/106, 0x2ce}, {&(0x7f0000000740)=""/73, 0x3dd}, {&(0x7f0000000200)=""/77, 0x96}, {&(0x7f00000007c0)=""/154, 0x40d}, {&(0x7f0000000000)=""/22, 0xa}], 0x81, &(0x7f0000000600)=""/191, 0x41, 0x11000000}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) [ 300.983324][T20066] dump_stack+0x1e9/0x30e [ 300.987659][T20066] should_fail+0x433/0x5b0 [ 300.992607][T20066] should_failslab+0x5/0x20 [ 300.997116][T20066] kmem_cache_alloc_node+0x64/0x290 [ 301.002325][T20066] ? __alloc_skb+0x94/0x4f0 [ 301.006834][T20066] __alloc_skb+0x94/0x4f0 [ 301.011172][T20066] ? rcu_lock_release+0x5/0x20 [ 301.015945][T20066] sctp_ulpevent_nofity_peer_addr_change+0xd3/0x540 [ 301.022549][T20066] sctp_assoc_add_peer+0xc77/0x1560 [ 301.027759][T20066] sctp_connect_new_asoc+0x2a1/0x600 08:39:54 executing program 1: r0 = socket(0x10, 0x803, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000005540)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000c80)=""/235, 0xeb}], 0x1}}], 0x1, 0x0, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendto(r0, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000b80)=@ethernet={0x0, @local}, 0x80, 0x0}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000ac0)=[{{&(0x7f0000000880)=@caif=@util, 0x80, &(0x7f0000000540)=[{&(0x7f0000000900)=""/128, 0x80}, {&(0x7f0000000980)=""/76, 0x4c}], 0x2}, 0x3f}], 0x1, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_SYS_GET(0xffffffffffffffff, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000a00)={0x0, 0x30}}, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x374, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x14b}, {&(0x7f0000000140)=""/85, 0x20a}, {&(0x7f0000000fc0)=""/4096, 0x773}, {&(0x7f0000000400)=""/106, 0x2ce}, {&(0x7f0000000740)=""/73, 0x3dd}, {&(0x7f0000000200)=""/77, 0x96}, {&(0x7f00000007c0)=""/154, 0x40d}, {&(0x7f0000000000)=""/22, 0xa}], 0x81, &(0x7f0000000600)=""/191, 0x41, 0x12000000}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) [ 301.033179][T20066] sctp_sendmsg+0x1aa0/0x3620 [ 301.037877][T20066] ? inet_sendmsg+0xfa/0x310 [ 301.042472][T20066] ? inet_send_prepare+0x250/0x250 [ 301.047595][T20066] ____sys_sendmsg+0x4f9/0x7c0 [ 301.052367][T20066] ? import_iovec+0x12a/0x2c0 [ 301.057059][T20066] __sys_sendmmsg+0x45b/0x690 [ 301.061763][T20066] ? vfs_write+0x48e/0x580 [ 301.066187][T20066] ? check_preemption_disabled+0x40/0x240 [ 301.071933][T20066] ? __this_cpu_preempt_check+0x9/0x20 [ 301.077592][T20066] ? ksys_write+0x1b1/0x220 [ 301.082100][T20066] ? check_preemption_disabled+0xb0/0x240 [ 301.087824][T20066] ? debug_smp_processor_id+0x5/0x20 [ 301.093123][T20066] ? trace_irq_disable_rcuidle+0x1f/0x1d0 [ 301.098847][T20066] __x64_sys_sendmmsg+0x9c/0xb0 [ 301.103795][T20066] do_syscall_64+0xf3/0x1b0 [ 301.108304][T20066] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 301.114312][T20066] RIP: 0033:0x45ca29 [ 301.118196][T20066] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 301.137886][T20066] RSP: 002b:00007f082d15bc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 301.146280][T20066] RAX: ffffffffffffffda RBX: 00000000004fc640 RCX: 000000000045ca29 [ 301.154234][T20066] RDX: 0000000000000001 RSI: 00000000200000c0 RDI: 0000000000000004 [ 301.162200][T20066] RBP: 000000000078bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 301.170147][T20066] R10: 0000000020000040 R11: 0000000000000246 R12: 0000000000000008 [ 301.178097][T20066] R13: 00000000000008e0 R14: 00000000004cba43 R15: 00007f082d15c6d4 08:39:55 executing program 5 (fault-call:9 fault-nth:7): unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x10, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = socket$inet6(0xa, 0x1, 0x8010800000000084) r1 = socket$kcm(0x2, 0x3, 0x2) recvmsg(r1, &(0x7f0000007500)={&(0x7f0000006f80)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x80, 0x0, 0x0, 0xffffffffffffffff}, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmmsg$inet6(r0, &(0x7f00000000c0)=[{{&(0x7f0000002c80)={0xa, 0x0, 0x0, @loopback}, 0x1c, &(0x7f0000005000)=[{&(0x7f0000002cc0)="ea", 0x1}], 0x1}}], 0x1, 0x20000040) 08:39:55 executing program 1: r0 = socket(0x10, 0x803, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000005540)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000c80)=""/235, 0xeb}], 0x1}}], 0x1, 0x0, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendto(r0, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000b80)=@ethernet={0x0, @local}, 0x80, 0x0}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000ac0)=[{{&(0x7f0000000880)=@caif=@util, 0x80, &(0x7f0000000540)=[{&(0x7f0000000900)=""/128, 0x80}, {&(0x7f0000000980)=""/76, 0x4c}], 0x2}, 0x3f}], 0x1, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_SYS_GET(0xffffffffffffffff, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000a00)={0x0, 0x30}}, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x374, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x14b}, {&(0x7f0000000140)=""/85, 0x20a}, {&(0x7f0000000fc0)=""/4096, 0x773}, {&(0x7f0000000400)=""/106, 0x2ce}, {&(0x7f0000000740)=""/73, 0x3dd}, {&(0x7f0000000200)=""/77, 0x96}, {&(0x7f00000007c0)=""/154, 0x40d}, {&(0x7f0000000000)=""/22, 0xa}], 0x81, &(0x7f0000000600)=""/191, 0x41, 0x14000000}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 08:39:55 executing program 2 (fault-call:8 fault-nth:68): shmget(0x0, 0x4000, 0x780012c9, &(0x7f0000ffc000/0x4000)=nil) shmctl$IPC_RMID(0x0, 0x0) shmat(0x0, &(0x7f0000ffe000/0x1000)=nil, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x2, 0x1) r1 = open(&(0x7f0000000080)='./bus\x00', 0x430c2, 0x0) ftruncate(r1, 0x200004) sendfile(r0, r1, 0x0, 0x80001d00c0d0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) 08:39:55 executing program 3: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x20000000003, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newlink={0x60, 0x10, 0x1, 0x0, 0xffffff9e, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @ip6gretap={{0xe, 0x1, 'ip6gretap\x00'}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @ipv4={[], [], @loopback}}, @IFLA_GRE_REMOTE={0x14, 0x7, @remote}]}}}]}, 0x60}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00'}) 08:39:55 executing program 4: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x20000000003, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00'}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newlink={0x60, 0x10, 0x1, 0x70bd25, 0x0, {0x0, 0x0, 0x500, r4, 0x50800}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @ip6gretap={{0xe, 0x1, 'ip6gretap\x00'}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @ipv4={[], [], @private=0xa010100}}, @IFLA_GRE_REMOTE={0x14, 0x7, @remote}]}}}]}, 0x60}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00'}) 08:39:55 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e02020025000535d25a80648c63940d0424fc600c00184001ac0f000dac0f0037153e6709020f8003001700d1bd", 0x33fe0}], 0x1}, 0x0) r1 = socket(0x11, 0x800, 0xfbff8000) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) getsockopt$inet_sctp6_SCTP_PR_STREAM_STATUS(r2, 0x84, 0x74, &(0x7f00000001c0)=""/44, &(0x7f00000004c0)=0x2c) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100)='IPVS\x00') sendmsg$IPVS_CMD_GET_SERVICE(r1, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f0000000500)=ANY=[@ANYBLOB="7e4e9484a7144e3f03e793fa6f37ff0000f4a04ee27c2eb4a44e1cd043a1fc2fae2bbf", @ANYRES16=r3, @ANYBLOB="000426bd7000fcdbdf250400000008000500130b00002400018008000500030000000800080000800000080005000000ff0f08000600777272000c00028006000e7f0000000008000400010000003800038005000800040000000800010000000000080003000400000014000200697036746e6c3000000400000000000006000400020000000800040005000000140003800800050000000000060007004e2000000c000380080003000200000008637fd24ff251ad9a4904cc4a6e0dcc3ffaaa26647429fef52cef99d91d57a63d85893a074c86d827c94402e8470f39da8a23b0f048a671e142fd324a2bd1224a2c21562670"], 0xb4}, 0x1, 0x0, 0x0, 0x4044}, 0x8000) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket(0x11, 0x800000003, 0x0) bind(r4, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r4, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c0000001000010000000000000000000000000a20000000000a0108bbb50000000000000000000000000900010073797a300000000040000000030a01020000000000000000000000000900010073797a30000000001400048008000240000073797a3200000000140000001100010000000000000000000000000a"], 0x88}}, 0x0) r6 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$TUNGETIFF(r6, 0x800454d2, &(0x7f0000000380)) [ 301.460006][T20130] netlink: 126166 bytes leftover after parsing attributes in process `syz-executor.0'. [ 301.488376][T20130] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 301.507528][T20129] FAULT_INJECTION: forcing a failure. [ 301.507528][T20129] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 301.541109][T20144] IPVS: ftp: loaded support on port[0] = 21 [ 301.549662][T20129] CPU: 1 PID: 20129 Comm: syz-executor.2 Not tainted 5.7.0-rc6-syzkaller #0 [ 301.563824][T20129] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 301.574001][T20129] Call Trace: [ 301.578459][T20129] dump_stack+0x1e9/0x30e [ 301.583180][T20129] should_fail+0x433/0x5b0 [ 301.587615][T20129] prepare_alloc_pages+0x28c/0x4a0 [ 301.592749][T20129] __alloc_pages_nodemask+0xbc/0x5e0 [ 301.598042][T20129] __do_page_cache_readahead+0x1de/0x4f0 [ 301.603702][T20129] generic_file_buffered_read+0x4a5/0x2570 [ 301.609650][T20129] generic_file_splice_read+0x452/0x700 [ 301.615900][T20129] ? splice_shrink_spd+0xb0/0xb0 [ 301.621291][T20129] splice_direct_to_actor+0x3c1/0xb40 [ 301.626852][T20129] ? do_splice_direct+0x340/0x340 [ 301.632571][T20129] do_splice_direct+0x201/0x340 [ 301.639113][T20129] ? security_file_permission+0x50/0xc0 [ 301.646153][T20129] do_sendfile+0x809/0xfe0 [ 301.650581][T20129] __x64_sys_sendfile64+0x164/0x1a0 [ 301.655777][T20129] ? do_syscall_64+0x19/0x1b0 [ 301.660560][T20129] do_syscall_64+0xf3/0x1b0 [ 301.667370][T20129] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 301.674446][T20129] RIP: 0033:0x45ca29 [ 301.679124][T20129] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 301.700556][T20129] RSP: 002b:00007efeff606c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 08:39:55 executing program 1: r0 = socket(0x10, 0x803, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000005540)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000c80)=""/235, 0xeb}], 0x1}}], 0x1, 0x0, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendto(r0, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000b80)=@ethernet={0x0, @local}, 0x80, 0x0}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000ac0)=[{{&(0x7f0000000880)=@caif=@util, 0x80, &(0x7f0000000540)=[{&(0x7f0000000900)=""/128, 0x80}, {&(0x7f0000000980)=""/76, 0x4c}], 0x2}, 0x3f}], 0x1, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_SYS_GET(0xffffffffffffffff, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000a00)={0x0, 0x30}}, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x374, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x14b}, {&(0x7f0000000140)=""/85, 0x20a}, {&(0x7f0000000fc0)=""/4096, 0x773}, {&(0x7f0000000400)=""/106, 0x2ce}, {&(0x7f0000000740)=""/73, 0x3dd}, {&(0x7f0000000200)=""/77, 0x96}, {&(0x7f00000007c0)=""/154, 0x40d}, {&(0x7f0000000000)=""/22, 0xa}], 0x81, &(0x7f0000000600)=""/191, 0x41, 0x14100000}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 08:39:55 executing program 4: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x20000000003, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00'}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newlink={0x60, 0x10, 0x1, 0x70bd25, 0x0, {0x0, 0x0, 0x600, r4, 0x50800}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @ip6gretap={{0xe, 0x1, 'ip6gretap\x00'}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @ipv4={[], [], @private=0xa010100}}, @IFLA_GRE_REMOTE={0x14, 0x7, @remote}]}}}]}, 0x60}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00'}) 08:39:55 executing program 1: r0 = socket(0x10, 0x803, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000005540)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000c80)=""/235, 0xeb}], 0x1}}], 0x1, 0x0, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendto(r0, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000b80)=@ethernet={0x0, @local}, 0x80, 0x0}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000ac0)=[{{&(0x7f0000000880)=@caif=@util, 0x80, &(0x7f0000000540)=[{&(0x7f0000000900)=""/128, 0x80}, {&(0x7f0000000980)=""/76, 0x4c}], 0x2}, 0x3f}], 0x1, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_SYS_GET(0xffffffffffffffff, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000a00)={0x0, 0x30}}, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x374, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x14b}, {&(0x7f0000000140)=""/85, 0x20a}, {&(0x7f0000000fc0)=""/4096, 0x773}, {&(0x7f0000000400)=""/106, 0x2ce}, {&(0x7f0000000740)=""/73, 0x3dd}, {&(0x7f0000000200)=""/77, 0x96}, {&(0x7f00000007c0)=""/154, 0x40d}, {&(0x7f0000000000)=""/22, 0xa}], 0x81, &(0x7f0000000600)=""/191, 0x41, 0x14d9ff7f}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) [ 301.709574][T20129] RAX: ffffffffffffffda RBX: 00000000004fc540 RCX: 000000000045ca29 [ 301.718756][T20129] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 301.726991][T20129] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 301.736379][T20129] R10: 000080001d00c0d0 R11: 0000000000000246 R12: 0000000000000005 [ 301.744872][T20129] R13: 00000000000008dc R14: 00000000004cba16 R15: 00007efeff6076d4 08:39:55 executing program 3: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x20000000003, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newlink={0x60, 0x10, 0x1, 0x0, 0xffffffe0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @ip6gretap={{0xe, 0x1, 'ip6gretap\x00'}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @ipv4={[], [], @loopback}}, @IFLA_GRE_REMOTE={0x14, 0x7, @remote}]}}}]}, 0x60}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00'}) [ 301.827658][T20181] FAULT_INJECTION: forcing a failure. [ 301.827658][T20181] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 301.843092][T20181] CPU: 0 PID: 20181 Comm: syz-executor.5 Not tainted 5.7.0-rc6-syzkaller #0 [ 301.854067][T20181] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 301.865396][T20181] Call Trace: [ 301.869338][T20181] dump_stack+0x1e9/0x30e [ 301.874025][T20181] should_fail+0x433/0x5b0 [ 301.878629][T20181] prepare_alloc_pages+0x28c/0x4a0 [ 301.884115][T20181] __alloc_pages_nodemask+0xbc/0x5e0 [ 301.889532][T20181] kmem_getpages+0x49/0x900 [ 301.894338][T20181] cache_grow_begin+0x7b/0x2e0 [ 301.899848][T20181] cache_alloc_refill+0x359/0x3f0 [ 301.905496][T20181] ? trace_irq_disable_rcuidle+0x1f/0x1d0 [ 301.912466][T20181] ? check_preemption_disabled+0xb0/0x240 [ 301.918542][T20181] ? debug_smp_processor_id+0x5/0x20 [ 301.924213][T20181] ? sctp_transport_new+0x86/0x570 [ 301.932173][T20181] kmem_cache_alloc_trace+0x2e6/0x300 [ 301.937898][T20181] sctp_transport_new+0x86/0x570 [ 301.943900][T20181] sctp_assoc_add_peer+0x28e/0x1560 [ 301.950081][T20181] sctp_connect_new_asoc+0x2a1/0x600 [ 301.956420][T20181] sctp_sendmsg+0x1aa0/0x3620 [ 301.961952][T20181] ? inet_sendmsg+0xfa/0x310 [ 301.966827][T20181] ? inet_send_prepare+0x250/0x250 [ 301.972650][T20181] ____sys_sendmsg+0x4f9/0x7c0 [ 301.977785][T20181] ? import_iovec+0x12a/0x2c0 [ 301.983194][T20181] __sys_sendmmsg+0x45b/0x690 [ 301.988305][T20181] ? vfs_write+0x48e/0x580 [ 301.992815][T20181] ? check_preemption_disabled+0x40/0x240 [ 302.000577][T20181] ? __this_cpu_preempt_check+0x9/0x20 [ 302.006200][T20181] ? ksys_write+0x1b1/0x220 [ 302.011738][T20181] ? check_preemption_disabled+0xb0/0x240 [ 302.018205][T20181] ? debug_smp_processor_id+0x5/0x20 [ 302.023977][T20181] ? trace_irq_disable_rcuidle+0x1f/0x1d0 [ 302.030444][T20181] __x64_sys_sendmmsg+0x9c/0xb0 [ 302.035634][T20181] do_syscall_64+0xf3/0x1b0 [ 302.040276][T20181] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 302.046175][T20181] RIP: 0033:0x45ca29 [ 302.050472][T20181] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 08:39:56 executing program 1: r0 = socket(0x10, 0x803, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000005540)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000c80)=""/235, 0xeb}], 0x1}}], 0x1, 0x0, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendto(r0, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000b80)=@ethernet={0x0, @local}, 0x80, 0x0}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000ac0)=[{{&(0x7f0000000880)=@caif=@util, 0x80, &(0x7f0000000540)=[{&(0x7f0000000900)=""/128, 0x80}, {&(0x7f0000000980)=""/76, 0x4c}], 0x2}, 0x3f}], 0x1, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_SYS_GET(0xffffffffffffffff, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000a00)={0x0, 0x30}}, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x374, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x14b}, {&(0x7f0000000140)=""/85, 0x20a}, {&(0x7f0000000fc0)=""/4096, 0x773}, {&(0x7f0000000400)=""/106, 0x2ce}, {&(0x7f0000000740)=""/73, 0x3dd}, {&(0x7f0000000200)=""/77, 0x96}, {&(0x7f00000007c0)=""/154, 0x40d}, {&(0x7f0000000000)=""/22, 0xa}], 0x81, &(0x7f0000000600)=""/191, 0x41, 0x19000000}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) [ 302.071858][T20181] RSP: 002b:00007f082d15bc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 302.082271][T20181] RAX: ffffffffffffffda RBX: 00000000004fc640 RCX: 000000000045ca29 [ 302.090276][T20181] RDX: 0000000000000001 RSI: 00000000200000c0 RDI: 0000000000000004 [ 302.100542][T20181] RBP: 000000000078bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 302.108758][T20181] R10: 0000000020000040 R11: 0000000000000246 R12: 0000000000000008 [ 302.116740][T20181] R13: 00000000000008e0 R14: 00000000004cba43 R15: 00007f082d15c6d4 [ 302.147068][T20130] netlink: 126166 bytes leftover after parsing attributes in process `syz-executor.0'. 08:39:56 executing program 3: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x20000000003, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newlink={0x60, 0x10, 0x1, 0x0, 0xffffffef, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @ip6gretap={{0xe, 0x1, 'ip6gretap\x00'}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @ipv4={[], [], @loopback}}, @IFLA_GRE_REMOTE={0x14, 0x7, @remote}]}}}]}, 0x60}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00'}) 08:39:56 executing program 5 (fault-call:9 fault-nth:8): unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x10, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = socket$inet6(0xa, 0x1, 0x8010800000000084) r1 = socket$kcm(0x2, 0x3, 0x2) recvmsg(r1, &(0x7f0000007500)={&(0x7f0000006f80)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x80, 0x0, 0x0, 0xffffffffffffffff}, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmmsg$inet6(r0, &(0x7f00000000c0)=[{{&(0x7f0000002c80)={0xa, 0x0, 0x0, @loopback}, 0x1c, &(0x7f0000005000)=[{&(0x7f0000002cc0)="ea", 0x1}], 0x1}}], 0x1, 0x20000040) 08:39:56 executing program 4: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x20000000003, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00'}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newlink={0x60, 0x10, 0x1, 0x70bd25, 0x0, {0x0, 0x0, 0x900, r4, 0x50800}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @ip6gretap={{0xe, 0x1, 'ip6gretap\x00'}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @ipv4={[], [], @private=0xa010100}}, @IFLA_GRE_REMOTE={0x14, 0x7, @remote}]}}}]}, 0x60}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00'}) 08:39:56 executing program 2 (fault-call:8 fault-nth:69): shmget(0x0, 0x4000, 0x780012c9, &(0x7f0000ffc000/0x4000)=nil) shmctl$IPC_RMID(0x0, 0x0) shmat(0x0, &(0x7f0000ffe000/0x1000)=nil, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x2, 0x1) r1 = open(&(0x7f0000000080)='./bus\x00', 0x430c2, 0x0) ftruncate(r1, 0x200004) sendfile(r0, r1, 0x0, 0x80001d00c0d0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) 08:39:56 executing program 0: unshare(0x2a000400) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) openat$capi20(0xffffffffffffff9c, &(0x7f0000000000)='/dev/capi20\x00', 0x80800, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x19, 0x0, 0xffffffffffffffff}) r2 = dup(r1) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f00000003c0)=0x3) 08:39:56 executing program 1: r0 = socket(0x10, 0x803, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000005540)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000c80)=""/235, 0xeb}], 0x1}}], 0x1, 0x0, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendto(r0, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000b80)=@ethernet={0x0, @local}, 0x80, 0x0}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000ac0)=[{{&(0x7f0000000880)=@caif=@util, 0x80, &(0x7f0000000540)=[{&(0x7f0000000900)=""/128, 0x80}, {&(0x7f0000000980)=""/76, 0x4c}], 0x2}, 0x3f}], 0x1, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_SYS_GET(0xffffffffffffffff, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000a00)={0x0, 0x30}}, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x374, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x14b}, {&(0x7f0000000140)=""/85, 0x20a}, {&(0x7f0000000fc0)=""/4096, 0x773}, {&(0x7f0000000400)=""/106, 0x2ce}, {&(0x7f0000000740)=""/73, 0x3dd}, {&(0x7f0000000200)=""/77, 0x96}, {&(0x7f00000007c0)=""/154, 0x40d}, {&(0x7f0000000000)=""/22, 0xa}], 0x81, &(0x7f0000000600)=""/191, 0x41, 0x24160000}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 08:39:56 executing program 3: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x20000000003, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newlink={0x60, 0x10, 0x1, 0x0, 0xfffffff0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @ip6gretap={{0xe, 0x1, 'ip6gretap\x00'}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @ipv4={[], [], @loopback}}, @IFLA_GRE_REMOTE={0x14, 0x7, @remote}]}}}]}, 0x60}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00'}) [ 302.376969][T20219] FAULT_INJECTION: forcing a failure. [ 302.376969][T20219] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 302.397844][T20219] CPU: 1 PID: 20219 Comm: syz-executor.2 Not tainted 5.7.0-rc6-syzkaller #0 [ 302.406728][T20219] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 302.416885][T20219] Call Trace: [ 302.420183][T20219] dump_stack+0x1e9/0x30e [ 302.424718][T20219] should_fail+0x433/0x5b0 [ 302.429150][T20219] prepare_alloc_pages+0x28c/0x4a0 [ 302.434280][T20219] __alloc_pages_nodemask+0xbc/0x5e0 [ 302.439767][T20219] __do_page_cache_readahead+0x1de/0x4f0 [ 302.445947][T20219] generic_file_buffered_read+0x4a5/0x2570 [ 302.452117][T20219] generic_file_splice_read+0x452/0x700 [ 302.457760][T20219] ? splice_shrink_spd+0xb0/0xb0 [ 302.462902][T20219] splice_direct_to_actor+0x3c1/0xb40 [ 302.468889][T20219] ? do_splice_direct+0x340/0x340 [ 302.473919][T20219] do_splice_direct+0x201/0x340 [ 302.478978][T20219] ? security_file_permission+0x50/0xc0 [ 302.485483][T20219] do_sendfile+0x809/0xfe0 [ 302.490093][T20219] __x64_sys_sendfile64+0x164/0x1a0 [ 302.495388][T20219] ? do_syscall_64+0x19/0x1b0 [ 302.500071][T20219] do_syscall_64+0xf3/0x1b0 [ 302.504845][T20219] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 302.513889][T20234] FAULT_INJECTION: forcing a failure. [ 302.513889][T20234] name failslab, interval 1, probability 0, space 0, times 0 [ 302.514206][T20219] RIP: 0033:0x45ca29 [ 302.531124][T20219] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 302.551168][T20219] RSP: 002b:00007efeff606c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 302.560973][T20219] RAX: ffffffffffffffda RBX: 00000000004fc540 RCX: 000000000045ca29 [ 302.568928][T20219] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 302.577227][T20219] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 302.585533][T20219] R10: 000080001d00c0d0 R11: 0000000000000246 R12: 0000000000000005 [ 302.596212][T20219] R13: 00000000000008dc R14: 00000000004cba16 R15: 00007efeff6076d4 [ 302.606641][T20234] CPU: 0 PID: 20234 Comm: syz-executor.5 Not tainted 5.7.0-rc6-syzkaller #0 [ 302.616808][T20234] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 302.624899][T20226] IPVS: ftp: loaded support on port[0] = 21 [ 302.627698][T20234] Call Trace: [ 302.627718][T20234] dump_stack+0x1e9/0x30e [ 302.627731][T20234] should_fail+0x433/0x5b0 [ 302.627749][T20234] ? sctp_add_bind_addr+0x97/0x350 [ 302.651646][T20234] should_failslab+0x5/0x20 [ 302.658537][T20234] kmem_cache_alloc_trace+0x57/0x300 [ 302.664277][T20234] sctp_add_bind_addr+0x97/0x350 [ 302.669528][T20234] sctp_copy_local_addr_list+0x298/0x420 [ 302.675167][T20234] sctp_bind_addr_copy+0xad/0x3d0 [ 302.680396][T20234] sctp_connect_new_asoc+0x277/0x600 [ 302.686123][T20234] sctp_sendmsg+0x1aa0/0x3620 [ 302.690810][T20234] ? inet_sendmsg+0xfa/0x310 [ 302.695571][T20234] ? inet_send_prepare+0x250/0x250 [ 302.700684][T20234] ____sys_sendmsg+0x4f9/0x7c0 [ 302.705451][T20234] ? import_iovec+0x12a/0x2c0 [ 302.711100][T20234] __sys_sendmmsg+0x45b/0x690 [ 302.715792][T20234] ? vfs_write+0x48e/0x580 [ 302.721001][T20234] ? check_preemption_disabled+0x40/0x240 08:39:56 executing program 1: r0 = socket(0x10, 0x803, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000005540)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000c80)=""/235, 0xeb}], 0x1}}], 0x1, 0x0, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendto(r0, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000b80)=@ethernet={0x0, @local}, 0x80, 0x0}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000ac0)=[{{&(0x7f0000000880)=@caif=@util, 0x80, &(0x7f0000000540)=[{&(0x7f0000000900)=""/128, 0x80}, {&(0x7f0000000980)=""/76, 0x4c}], 0x2}, 0x3f}], 0x1, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_SYS_GET(0xffffffffffffffff, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000a00)={0x0, 0x30}}, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x374, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x14b}, {&(0x7f0000000140)=""/85, 0x20a}, {&(0x7f0000000fc0)=""/4096, 0x773}, {&(0x7f0000000400)=""/106, 0x2ce}, {&(0x7f0000000740)=""/73, 0x3dd}, {&(0x7f0000000200)=""/77, 0x96}, {&(0x7f00000007c0)=""/154, 0x40d}, {&(0x7f0000000000)=""/22, 0xa}], 0x81, &(0x7f0000000600)=""/191, 0x41, 0x29d8ff7f}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) [ 302.726726][T20234] ? __this_cpu_preempt_check+0x9/0x20 [ 302.732184][T20234] ? ksys_write+0x1b1/0x220 [ 302.736870][T20234] ? check_preemption_disabled+0xb0/0x240 [ 302.742976][T20234] ? debug_smp_processor_id+0x5/0x20 [ 302.748362][T20234] ? trace_irq_disable_rcuidle+0x1f/0x1d0 [ 302.754989][T20234] __x64_sys_sendmmsg+0x9c/0xb0 [ 302.759850][T20234] do_syscall_64+0xf3/0x1b0 [ 302.764361][T20234] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 302.770440][T20234] RIP: 0033:0x45ca29 08:39:56 executing program 1: r0 = socket(0x10, 0x803, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000005540)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000c80)=""/235, 0xeb}], 0x1}}], 0x1, 0x0, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendto(r0, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000b80)=@ethernet={0x0, @local}, 0x80, 0x0}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000ac0)=[{{&(0x7f0000000880)=@caif=@util, 0x80, &(0x7f0000000540)=[{&(0x7f0000000900)=""/128, 0x80}, {&(0x7f0000000980)=""/76, 0x4c}], 0x2}, 0x3f}], 0x1, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_SYS_GET(0xffffffffffffffff, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000a00)={0x0, 0x30}}, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x374, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x14b}, {&(0x7f0000000140)=""/85, 0x20a}, {&(0x7f0000000fc0)=""/4096, 0x773}, {&(0x7f0000000400)=""/106, 0x2ce}, {&(0x7f0000000740)=""/73, 0x3dd}, {&(0x7f0000000200)=""/77, 0x96}, {&(0x7f00000007c0)=""/154, 0x40d}, {&(0x7f0000000000)=""/22, 0xa}], 0x81, &(0x7f0000000600)=""/191, 0x41, 0x2c010000}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) [ 302.774367][T20234] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 302.794139][T20234] RSP: 002b:00007f082d13ac78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 302.804586][T20234] RAX: ffffffffffffffda RBX: 00000000004fc640 RCX: 000000000045ca29 [ 302.813687][T20234] RDX: 0000000000000001 RSI: 00000000200000c0 RDI: 0000000000000004 08:39:56 executing program 2 (fault-call:8 fault-nth:70): shmget(0x0, 0x4000, 0x780012c9, &(0x7f0000ffc000/0x4000)=nil) shmctl$IPC_RMID(0x0, 0x0) shmat(0x0, &(0x7f0000ffe000/0x1000)=nil, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x2, 0x1) r1 = open(&(0x7f0000000080)='./bus\x00', 0x430c2, 0x0) ftruncate(r1, 0x200004) sendfile(r0, r1, 0x0, 0x80001d00c0d0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) [ 302.822664][T20234] RBP: 000000000078c040 R08: 0000000000000000 R09: 0000000000000000 [ 302.830987][T20234] R10: 0000000020000040 R11: 0000000000000246 R12: 0000000000000008 [ 302.840013][T20234] R13: 00000000000008e0 R14: 00000000004cba43 R15: 00007f082d13b6d4 08:39:56 executing program 1: r0 = socket(0x10, 0x803, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000005540)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000c80)=""/235, 0xeb}], 0x1}}], 0x1, 0x0, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendto(r0, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000b80)=@ethernet={0x0, @local}, 0x80, 0x0}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000ac0)=[{{&(0x7f0000000880)=@caif=@util, 0x80, &(0x7f0000000540)=[{&(0x7f0000000900)=""/128, 0x80}, {&(0x7f0000000980)=""/76, 0x4c}], 0x2}, 0x3f}], 0x1, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_SYS_GET(0xffffffffffffffff, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000a00)={0x0, 0x30}}, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x374, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x14b}, {&(0x7f0000000140)=""/85, 0x20a}, {&(0x7f0000000fc0)=""/4096, 0x773}, {&(0x7f0000000400)=""/106, 0x2ce}, {&(0x7f0000000740)=""/73, 0x3dd}, {&(0x7f0000000200)=""/77, 0x96}, {&(0x7f00000007c0)=""/154, 0x40d}, {&(0x7f0000000000)=""/22, 0xa}], 0x81, &(0x7f0000000600)=""/191, 0x41, 0x30160000}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) [ 302.900910][T20270] FAULT_INJECTION: forcing a failure. [ 302.900910][T20270] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 302.928277][T20270] CPU: 0 PID: 20270 Comm: syz-executor.2 Not tainted 5.7.0-rc6-syzkaller #0 [ 302.937528][T20270] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 302.949334][T20270] Call Trace: [ 302.953091][T20270] dump_stack+0x1e9/0x30e [ 302.957516][T20270] should_fail+0x433/0x5b0 [ 302.963451][T20270] prepare_alloc_pages+0x28c/0x4a0 [ 302.968578][T20270] __alloc_pages_nodemask+0xbc/0x5e0 [ 302.976435][T20270] __do_page_cache_readahead+0x1de/0x4f0 [ 302.983983][T20270] generic_file_buffered_read+0x4a5/0x2570 [ 302.990272][T20270] generic_file_splice_read+0x452/0x700 08:39:56 executing program 1: r0 = socket(0x10, 0x803, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000005540)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000c80)=""/235, 0xeb}], 0x1}}], 0x1, 0x0, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendto(r0, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000b80)=@ethernet={0x0, @local}, 0x80, 0x0}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000ac0)=[{{&(0x7f0000000880)=@caif=@util, 0x80, &(0x7f0000000540)=[{&(0x7f0000000900)=""/128, 0x80}, {&(0x7f0000000980)=""/76, 0x4c}], 0x2}, 0x3f}], 0x1, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_SYS_GET(0xffffffffffffffff, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000a00)={0x0, 0x30}}, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x374, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x14b}, {&(0x7f0000000140)=""/85, 0x20a}, {&(0x7f0000000fc0)=""/4096, 0x773}, {&(0x7f0000000400)=""/106, 0x2ce}, {&(0x7f0000000740)=""/73, 0x3dd}, {&(0x7f0000000200)=""/77, 0x96}, {&(0x7f00000007c0)=""/154, 0x40d}, {&(0x7f0000000000)=""/22, 0xa}], 0x81, &(0x7f0000000600)=""/191, 0x41, 0x38150000}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) [ 302.996958][T20270] ? splice_shrink_spd+0xb0/0xb0 [ 303.002197][T20270] splice_direct_to_actor+0x3c1/0xb40 [ 303.007673][T20270] ? do_splice_direct+0x340/0x340 [ 303.014150][T20270] do_splice_direct+0x201/0x340 [ 303.019186][T20270] ? security_file_permission+0x50/0xc0 [ 303.025867][T20270] do_sendfile+0x809/0xfe0 [ 303.030910][T20270] __x64_sys_sendfile64+0x164/0x1a0 [ 303.041198][T20270] ? do_syscall_64+0x19/0x1b0 08:39:57 executing program 1: r0 = socket(0x10, 0x803, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000005540)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000c80)=""/235, 0xeb}], 0x1}}], 0x1, 0x0, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendto(r0, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000b80)=@ethernet={0x0, @local}, 0x80, 0x0}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000ac0)=[{{&(0x7f0000000880)=@caif=@util, 0x80, &(0x7f0000000540)=[{&(0x7f0000000900)=""/128, 0x80}, {&(0x7f0000000980)=""/76, 0x4c}], 0x2}, 0x3f}], 0x1, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_SYS_GET(0xffffffffffffffff, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000a00)={0x0, 0x30}}, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x374, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x14b}, {&(0x7f0000000140)=""/85, 0x20a}, {&(0x7f0000000fc0)=""/4096, 0x773}, {&(0x7f0000000400)=""/106, 0x2ce}, {&(0x7f0000000740)=""/73, 0x3dd}, {&(0x7f0000000200)=""/77, 0x96}, {&(0x7f00000007c0)=""/154, 0x40d}, {&(0x7f0000000000)=""/22, 0xa}], 0x81, &(0x7f0000000600)=""/191, 0x41, 0x3b9aca00}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) [ 303.048505][T20270] do_syscall_64+0xf3/0x1b0 [ 303.054729][T20270] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 303.060970][T20270] RIP: 0033:0x45ca29 [ 303.064863][T20270] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 303.085656][T20270] RSP: 002b:00007efeff606c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 303.094062][T20270] RAX: ffffffffffffffda RBX: 00000000004fc540 RCX: 000000000045ca29 [ 303.102204][T20270] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 303.110177][T20270] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 303.118286][T20270] R10: 000080001d00c0d0 R11: 0000000000000246 R12: 0000000000000005 [ 303.126428][T20270] R13: 00000000000008dc R14: 00000000004cba16 R15: 00007efeff6076d4 08:39:57 executing program 5 (fault-call:9 fault-nth:9): unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x10, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = socket$inet6(0xa, 0x1, 0x8010800000000084) r1 = socket$kcm(0x2, 0x3, 0x2) recvmsg(r1, &(0x7f0000007500)={&(0x7f0000006f80)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x80, 0x0, 0x0, 0xffffffffffffffff}, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmmsg$inet6(r0, &(0x7f00000000c0)=[{{&(0x7f0000002c80)={0xa, 0x0, 0x0, @loopback}, 0x1c, &(0x7f0000005000)=[{&(0x7f0000002cc0)="ea", 0x1}], 0x1}}], 0x1, 0x20000040) 08:39:57 executing program 1: r0 = socket(0x10, 0x803, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000005540)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000c80)=""/235, 0xeb}], 0x1}}], 0x1, 0x0, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendto(r0, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000b80)=@ethernet={0x0, @local}, 0x80, 0x0}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000ac0)=[{{&(0x7f0000000880)=@caif=@util, 0x80, &(0x7f0000000540)=[{&(0x7f0000000900)=""/128, 0x80}, {&(0x7f0000000980)=""/76, 0x4c}], 0x2}, 0x3f}], 0x1, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_SYS_GET(0xffffffffffffffff, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000a00)={0x0, 0x30}}, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x374, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x14b}, {&(0x7f0000000140)=""/85, 0x20a}, {&(0x7f0000000fc0)=""/4096, 0x773}, {&(0x7f0000000400)=""/106, 0x2ce}, {&(0x7f0000000740)=""/73, 0x3dd}, {&(0x7f0000000200)=""/77, 0x96}, {&(0x7f00000007c0)=""/154, 0x40d}, {&(0x7f0000000000)=""/22, 0xa}], 0x81, &(0x7f0000000600)=""/191, 0x41, 0x40000000}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 08:39:57 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="6013000010000100000000400023d40d6d00128d5f498731e130837dc46cfc75930000", @ANYRES32=r1, @ANYBLOB="0000000000000000400012800e0001006970366772657461700000002c0002801400060000000000000000000000ffff7f00000114000700fe8000000000000000000000000000bb"], 0x60}}, 0x0) pidfd_getfd(0xffffffffffffffff, r0, 0x0) r2 = socket$can_bcm(0x1d, 0x2, 0x2) io_setup(0x1, &(0x7f0000000240)) connect$can_bcm(r2, &(0x7f0000000140), 0x10) 08:39:57 executing program 3: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x20000000003, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newlink={0x60, 0x10, 0x1, 0x0, 0xfffffffc, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @ip6gretap={{0xe, 0x1, 'ip6gretap\x00'}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @ipv4={[], [], @loopback}}, @IFLA_GRE_REMOTE={0x14, 0x7, @remote}]}}}]}, 0x60}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00'}) 08:39:57 executing program 4: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x20000000003, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00'}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newlink={0x60, 0x10, 0x1, 0x70bd25, 0x0, {0x0, 0x0, 0xa00, r4, 0x50800}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @ip6gretap={{0xe, 0x1, 'ip6gretap\x00'}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @ipv4={[], [], @private=0xa010100}}, @IFLA_GRE_REMOTE={0x14, 0x7, @remote}]}}}]}, 0x60}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00'}) [ 303.185133][ T3896] ion_buffer_destroy: buffer still mapped in the kernel 08:39:57 executing program 2 (fault-call:8 fault-nth:71): shmget(0x0, 0x4000, 0x780012c9, &(0x7f0000ffc000/0x4000)=nil) shmctl$IPC_RMID(0x0, 0x0) shmat(0x0, &(0x7f0000ffe000/0x1000)=nil, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x2, 0x1) r1 = open(&(0x7f0000000080)='./bus\x00', 0x430c2, 0x0) ftruncate(r1, 0x200004) sendfile(r0, r1, 0x0, 0x80001d00c0d0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) [ 303.308357][T20304] FAULT_INJECTION: forcing a failure. [ 303.308357][T20304] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 303.324680][T20304] CPU: 1 PID: 20304 Comm: syz-executor.2 Not tainted 5.7.0-rc6-syzkaller #0 [ 303.336685][T20304] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 303.348326][T20304] Call Trace: [ 303.354224][T20304] dump_stack+0x1e9/0x30e [ 303.358990][T20304] should_fail+0x433/0x5b0 [ 303.364174][T20304] prepare_alloc_pages+0x28c/0x4a0 [ 303.370077][T20304] __alloc_pages_nodemask+0xbc/0x5e0 [ 303.375549][T20304] __do_page_cache_readahead+0x1de/0x4f0 [ 303.381300][T20304] generic_file_buffered_read+0x4a5/0x2570 [ 303.385933][T20310] FAULT_INJECTION: forcing a failure. [ 303.385933][T20310] name failslab, interval 1, probability 0, space 0, times 0 [ 303.387158][T20304] generic_file_splice_read+0x452/0x700 [ 303.405491][T20304] ? splice_shrink_spd+0xb0/0xb0 [ 303.410436][T20304] splice_direct_to_actor+0x3c1/0xb40 [ 303.416148][T20304] ? do_splice_direct+0x340/0x340 [ 303.421189][T20304] do_splice_direct+0x201/0x340 [ 303.426118][T20304] ? security_file_permission+0x50/0xc0 [ 303.431694][T20304] do_sendfile+0x809/0xfe0 [ 303.436105][T20304] __x64_sys_sendfile64+0x164/0x1a0 [ 303.441298][T20304] ? do_syscall_64+0x19/0x1b0 [ 303.445957][T20304] do_syscall_64+0xf3/0x1b0 [ 303.450641][T20304] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 303.456535][T20304] RIP: 0033:0x45ca29 [ 303.460422][T20304] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 303.480282][T20304] RSP: 002b:00007efeff606c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 303.488679][T20304] RAX: ffffffffffffffda RBX: 00000000004fc540 RCX: 000000000045ca29 [ 303.496646][T20304] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 08:39:57 executing program 1: r0 = socket(0x10, 0x803, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000005540)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000c80)=""/235, 0xeb}], 0x1}}], 0x1, 0x0, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendto(r0, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000b80)=@ethernet={0x0, @local}, 0x80, 0x0}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000ac0)=[{{&(0x7f0000000880)=@caif=@util, 0x80, &(0x7f0000000540)=[{&(0x7f0000000900)=""/128, 0x80}, {&(0x7f0000000980)=""/76, 0x4c}], 0x2}, 0x3f}], 0x1, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_SYS_GET(0xffffffffffffffff, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000a00)={0x0, 0x30}}, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x374, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x14b}, {&(0x7f0000000140)=""/85, 0x20a}, {&(0x7f0000000fc0)=""/4096, 0x773}, {&(0x7f0000000400)=""/106, 0x2ce}, {&(0x7f0000000740)=""/73, 0x3dd}, {&(0x7f0000000200)=""/77, 0x96}, {&(0x7f00000007c0)=""/154, 0x40d}, {&(0x7f0000000000)=""/22, 0xa}], 0x81, &(0x7f0000000600)=""/191, 0x41, 0x40150000}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) [ 303.504931][T20304] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 303.512898][T20304] R10: 000080001d00c0d0 R11: 0000000000000246 R12: 0000000000000005 [ 303.521618][T20304] R13: 00000000000008dc R14: 00000000004cba16 R15: 00007efeff6076d4 [ 303.529775][T20310] CPU: 0 PID: 20310 Comm: syz-executor.5 Not tainted 5.7.0-rc6-syzkaller #0 [ 303.538687][T20310] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 303.548959][T20310] Call Trace: [ 303.552260][T20310] dump_stack+0x1e9/0x30e [ 303.556599][T20310] should_fail+0x433/0x5b0 [ 303.561019][T20310] ? sctp_add_bind_addr+0x97/0x350 [ 303.566205][T20310] should_failslab+0x5/0x20 [ 303.570815][T20310] kmem_cache_alloc_trace+0x57/0x300 [ 303.576134][T20310] sctp_add_bind_addr+0x97/0x350 [ 303.581087][T20310] sctp_copy_local_addr_list+0x298/0x420 [ 303.586738][T20310] sctp_bind_addr_copy+0xad/0x3d0 [ 303.591775][T20310] sctp_connect_new_asoc+0x277/0x600 [ 303.597079][T20310] sctp_sendmsg+0x1aa0/0x3620 [ 303.601908][T20310] ? inet_sendmsg+0xfa/0x310 [ 303.606510][T20310] ? inet_send_prepare+0x250/0x250 [ 303.611628][T20310] ____sys_sendmsg+0x4f9/0x7c0 [ 303.616400][T20310] ? import_iovec+0x12a/0x2c0 [ 303.621086][T20310] __sys_sendmmsg+0x45b/0x690 [ 303.625792][T20310] ? vfs_write+0x48e/0x580 [ 303.630230][T20310] ? check_preemption_disabled+0x40/0x240 [ 303.635958][T20310] ? __this_cpu_preempt_check+0x9/0x20 [ 303.641424][T20310] ? ksys_write+0x1b1/0x220 [ 303.645942][T20310] ? check_preemption_disabled+0xb0/0x240 [ 303.651658][T20310] ? debug_smp_processor_id+0x5/0x20 08:39:57 executing program 2 (fault-call:8 fault-nth:72): shmget(0x0, 0x4000, 0x780012c9, &(0x7f0000ffc000/0x4000)=nil) shmctl$IPC_RMID(0x0, 0x0) shmat(0x0, &(0x7f0000ffe000/0x1000)=nil, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x2, 0x1) r1 = open(&(0x7f0000000080)='./bus\x00', 0x430c2, 0x0) ftruncate(r1, 0x200004) sendfile(r0, r1, 0x0, 0x80001d00c0d0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) 08:39:57 executing program 1: r0 = socket(0x10, 0x803, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000005540)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000c80)=""/235, 0xeb}], 0x1}}], 0x1, 0x0, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendto(r0, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000b80)=@ethernet={0x0, @local}, 0x80, 0x0}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000ac0)=[{{&(0x7f0000000880)=@caif=@util, 0x80, &(0x7f0000000540)=[{&(0x7f0000000900)=""/128, 0x80}, {&(0x7f0000000980)=""/76, 0x4c}], 0x2}, 0x3f}], 0x1, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_SYS_GET(0xffffffffffffffff, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000a00)={0x0, 0x30}}, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x374, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x14b}, {&(0x7f0000000140)=""/85, 0x20a}, {&(0x7f0000000fc0)=""/4096, 0x773}, {&(0x7f0000000400)=""/106, 0x2ce}, {&(0x7f0000000740)=""/73, 0x3dd}, {&(0x7f0000000200)=""/77, 0x96}, {&(0x7f00000007c0)=""/154, 0x40d}, {&(0x7f0000000000)=""/22, 0xa}], 0x81, &(0x7f0000000600)=""/191, 0x41, 0x48000000}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) [ 303.656951][T20310] ? trace_irq_disable_rcuidle+0x1f/0x1d0 [ 303.662679][T20310] __x64_sys_sendmmsg+0x9c/0xb0 [ 303.667565][T20310] do_syscall_64+0xf3/0x1b0 [ 303.672270][T20310] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 303.678163][T20310] RIP: 0033:0x45ca29 [ 303.682068][T20310] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 303.701975][T20310] RSP: 002b:00007f082d13ac78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 303.711609][T20310] RAX: ffffffffffffffda RBX: 00000000004fc640 RCX: 000000000045ca29 [ 303.719624][T20310] RDX: 0000000000000001 RSI: 00000000200000c0 RDI: 0000000000000004 [ 303.727861][T20310] RBP: 000000000078c040 R08: 0000000000000000 R09: 0000000000000000 [ 303.735839][T20310] R10: 0000000020000040 R11: 0000000000000246 R12: 0000000000000008 [ 303.743869][T20310] R13: 00000000000008e0 R14: 00000000004cba43 R15: 00007f082d13b6d4 [ 303.759929][T20325] FAULT_INJECTION: forcing a failure. [ 303.759929][T20325] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 303.774109][T20325] CPU: 1 PID: 20325 Comm: syz-executor.2 Not tainted 5.7.0-rc6-syzkaller #0 [ 303.782820][T20325] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 303.792881][T20325] Call Trace: [ 303.796192][T20325] dump_stack+0x1e9/0x30e [ 303.800539][T20325] should_fail+0x433/0x5b0 [ 303.804964][T20325] prepare_alloc_pages+0x28c/0x4a0 [ 303.810088][T20325] __alloc_pages_nodemask+0xbc/0x5e0 [ 303.815407][T20325] __do_page_cache_readahead+0x1de/0x4f0 [ 303.821149][T20325] generic_file_buffered_read+0x4a5/0x2570 [ 303.826958][T20325] generic_file_splice_read+0x452/0x700 [ 303.832483][T20325] ? splice_shrink_spd+0xb0/0xb0 [ 303.837440][T20325] splice_direct_to_actor+0x3c1/0xb40 [ 303.843330][T20325] ? do_splice_direct+0x340/0x340 [ 303.848338][T20325] do_splice_direct+0x201/0x340 [ 303.853181][T20325] ? security_file_permission+0x50/0xc0 [ 303.858786][T20325] do_sendfile+0x809/0xfe0 [ 303.863359][T20325] __x64_sys_sendfile64+0x164/0x1a0 [ 303.868556][T20325] ? do_syscall_64+0x19/0x1b0 [ 303.873205][T20325] do_syscall_64+0xf3/0x1b0 [ 303.877684][T20325] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 303.883552][T20325] RIP: 0033:0x45ca29 [ 303.887427][T20325] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 08:39:57 executing program 1: r0 = socket(0x10, 0x803, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000005540)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000c80)=""/235, 0xeb}], 0x1}}], 0x1, 0x0, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendto(r0, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000b80)=@ethernet={0x0, @local}, 0x80, 0x0}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000ac0)=[{{&(0x7f0000000880)=@caif=@util, 0x80, &(0x7f0000000540)=[{&(0x7f0000000900)=""/128, 0x80}, {&(0x7f0000000980)=""/76, 0x4c}], 0x2}, 0x3f}], 0x1, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_SYS_GET(0xffffffffffffffff, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000a00)={0x0, 0x30}}, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x374, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x14b}, {&(0x7f0000000140)=""/85, 0x20a}, {&(0x7f0000000fc0)=""/4096, 0x773}, {&(0x7f0000000400)=""/106, 0x2ce}, {&(0x7f0000000740)=""/73, 0x3dd}, {&(0x7f0000000200)=""/77, 0x96}, {&(0x7f00000007c0)=""/154, 0x40d}, {&(0x7f0000000000)=""/22, 0xa}], 0x81, &(0x7f0000000600)=""/191, 0x41, 0x48190000}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) [ 303.907143][T20325] RSP: 002b:00007efeff606c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 303.915545][T20325] RAX: ffffffffffffffda RBX: 00000000004fc540 RCX: 000000000045ca29 [ 303.923507][T20325] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 303.931474][T20325] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 303.939424][T20325] R10: 000080001d00c0d0 R11: 0000000000000246 R12: 0000000000000005 [ 303.947385][T20325] R13: 00000000000008dc R14: 00000000004cba16 R15: 00007efeff6076d4 08:39:57 executing program 4: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x20000000003, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00'}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newlink={0x60, 0x10, 0x1, 0x70bd25, 0x0, {0x0, 0x0, 0xb00, r4, 0x50800}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @ip6gretap={{0xe, 0x1, 'ip6gretap\x00'}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @ipv4={[], [], @private=0xa010100}}, @IFLA_GRE_REMOTE={0x14, 0x7, @remote}]}}}]}, 0x60}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00'}) 08:39:57 executing program 3: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x20000000003, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newlink={0x60, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @ip6gretap={{0xe, 0x1, 'ip6gretap\x00'}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @ipv4={[], [], @loopback}}, @IFLA_GRE_REMOTE={0x14, 0x7, @remote}]}}}]}, 0x60}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00'}) 08:39:58 executing program 5 (fault-call:9 fault-nth:10): unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x10, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = socket$inet6(0xa, 0x1, 0x8010800000000084) r1 = socket$kcm(0x2, 0x3, 0x2) recvmsg(r1, &(0x7f0000007500)={&(0x7f0000006f80)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x80, 0x0, 0x0, 0xffffffffffffffff}, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmmsg$inet6(r0, &(0x7f00000000c0)=[{{&(0x7f0000002c80)={0xa, 0x0, 0x0, @loopback}, 0x1c, &(0x7f0000005000)=[{&(0x7f0000002cc0)="ea", 0x1}], 0x1}}], 0x1, 0x20000040) 08:39:58 executing program 1: r0 = socket(0x10, 0x803, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000005540)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000c80)=""/235, 0xeb}], 0x1}}], 0x1, 0x0, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendto(r0, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000b80)=@ethernet={0x0, @local}, 0x80, 0x0}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000ac0)=[{{&(0x7f0000000880)=@caif=@util, 0x80, &(0x7f0000000540)=[{&(0x7f0000000900)=""/128, 0x80}, {&(0x7f0000000980)=""/76, 0x4c}], 0x2}, 0x3f}], 0x1, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_SYS_GET(0xffffffffffffffff, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000a00)={0x0, 0x30}}, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x374, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x14b}, {&(0x7f0000000140)=""/85, 0x20a}, {&(0x7f0000000fc0)=""/4096, 0x773}, {&(0x7f0000000400)=""/106, 0x2ce}, {&(0x7f0000000740)=""/73, 0x3dd}, {&(0x7f0000000200)=""/77, 0x96}, {&(0x7f00000007c0)=""/154, 0x40d}, {&(0x7f0000000000)=""/22, 0xa}], 0x81, &(0x7f0000000600)=""/191, 0x41, 0x4c000000}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) [ 304.211736][T20356] FAULT_INJECTION: forcing a failure. [ 304.211736][T20356] name failslab, interval 1, probability 0, space 0, times 0 [ 304.225187][T20356] CPU: 1 PID: 20356 Comm: syz-executor.5 Not tainted 5.7.0-rc6-syzkaller #0 [ 304.234050][T20356] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 304.244114][T20356] Call Trace: [ 304.247457][T20356] dump_stack+0x1e9/0x30e [ 304.251833][T20356] should_fail+0x433/0x5b0 [ 304.256284][T20356] ? sctp_add_bind_addr+0x97/0x350 [ 304.261368][T20356] should_failslab+0x5/0x20 [ 304.266073][T20356] kmem_cache_alloc_trace+0x57/0x300 [ 304.271389][T20356] sctp_add_bind_addr+0x97/0x350 [ 304.276519][T20356] sctp_copy_local_addr_list+0x298/0x420 [ 304.282152][T20356] sctp_bind_addr_copy+0xad/0x3d0 [ 304.287175][T20356] sctp_connect_new_asoc+0x277/0x600 [ 304.292434][T20356] sctp_sendmsg+0x1aa0/0x3620 [ 304.297091][T20356] ? inet_sendmsg+0xfa/0x310 [ 304.301741][T20356] ? inet_send_prepare+0x250/0x250 [ 304.306841][T20356] ____sys_sendmsg+0x4f9/0x7c0 [ 304.311620][T20356] ? import_iovec+0x12a/0x2c0 [ 304.316293][T20356] __sys_sendmmsg+0x45b/0x690 [ 304.320972][T20356] ? vfs_write+0x48e/0x580 [ 304.325383][T20356] ? check_preemption_disabled+0x40/0x240 [ 304.331075][T20356] ? __this_cpu_preempt_check+0x9/0x20 [ 304.337185][T20356] ? ksys_write+0x1b1/0x220 [ 304.341951][T20356] ? check_preemption_disabled+0xb0/0x240 [ 304.347737][T20356] ? debug_smp_processor_id+0x5/0x20 [ 304.353169][T20356] ? trace_irq_disable_rcuidle+0x1f/0x1d0 [ 304.358859][T20356] __x64_sys_sendmmsg+0x9c/0xb0 [ 304.363683][T20356] do_syscall_64+0xf3/0x1b0 [ 304.368159][T20356] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 304.374093][T20356] RIP: 0033:0x45ca29 [ 304.377977][T20356] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 304.398011][T20356] RSP: 002b:00007f082d13ac78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 304.406520][T20356] RAX: ffffffffffffffda RBX: 00000000004fc640 RCX: 000000000045ca29 [ 304.414468][T20356] RDX: 0000000000000001 RSI: 00000000200000c0 RDI: 0000000000000004 [ 304.422441][T20356] RBP: 000000000078c040 R08: 0000000000000000 R09: 0000000000000000 [ 304.431389][T20356] R10: 0000000020000040 R11: 0000000000000246 R12: 0000000000000008 [ 304.439441][T20356] R13: 00000000000008e0 R14: 00000000004cba43 R15: 00007f082d13b6d4 [ 308.153381][ T213] tipc: TX() has been purged, node left! [ 308.323426][ T213] tipc: TX() has been purged, node left! [ 308.483405][ T213] tipc: TX() has been purged, node left! [ 308.673453][ T213] tipc: TX() has been purged, node left! [ 308.873556][ T213] tipc: TX() has been purged, node left! [ 309.143423][ T213] tipc: TX() has been purged, node left! [ 309.303396][ T213] tipc: TX() has been purged, node left! [ 309.543325][ T213] tipc: TX() has been purged, node left! [ 309.743305][ T213] tipc: TX() has been purged, node left! [ 309.953372][ T213] tipc: TX() has been purged, node left! [ 310.133275][ T213] tipc: TX() has been purged, node left! [ 310.334645][ T213] tipc: TX() has been purged, node left! [ 310.533246][ T213] tipc: TX() has been purged, node left! [ 310.733387][ T213] tipc: TX() has been purged, node left! [ 310.923223][ T213] tipc: TX() has been purged, node left! [ 311.123176][ T213] tipc: TX() has been purged, node left! [ 311.293311][ T213] tipc: TX() has been purged, node left! [ 311.463223][ T213] tipc: TX() has been purged, node left! [ 311.623167][ T213] tipc: TX() has been purged, node left! [ 311.793157][ T213] tipc: TX() has been purged, node left! [ 311.993140][ T213] tipc: TX() has been purged, node left! [ 312.193168][ T213] tipc: TX() has been purged, node left! [ 312.373116][ T213] tipc: TX() has been purged, node left! [ 312.533144][ T213] tipc: TX() has been purged, node left! [ 312.693116][ T213] tipc: TX() has been purged, node left! [ 312.873081][ T213] tipc: TX() has been purged, node left! [ 313.053082][ T213] tipc: TX() has been purged, node left! [ 313.233082][ T213] tipc: TX() has been purged, node left! [ 313.393067][ T213] tipc: TX() has been purged, node left! [ 313.573047][ T213] tipc: TX() has been purged, node left! [ 313.733088][ T213] tipc: TX() has been purged, node left! [ 313.913116][ T213] tipc: TX() has been purged, node left! [ 314.073097][ T213] tipc: TX() has been purged, node left! [ 314.263033][ T213] tipc: TX() has been purged, node left! [ 314.463015][ T213] tipc: TX() has been purged, node left! [ 314.643013][ T213] tipc: TX() has been purged, node left! [ 314.812951][ T213] tipc: TX() has been purged, node left! [ 315.022961][ T213] tipc: TX() has been purged, node left! [ 315.203088][ T213] tipc: TX() has been purged, node left! [ 315.393058][ T213] tipc: TX() has been purged, node left! [ 315.552918][ T213] tipc: TX() has been purged, node left! [ 315.732920][ T213] tipc: TX() has been purged, node left! [ 315.892899][ T213] tipc: TX() has been purged, node left! [ 316.132862][ T213] tipc: TX() has been purged, node left! [ 316.292828][ T213] tipc: TX() has been purged, node left! [ 316.512857][ T213] tipc: TX() has been purged, node left! [ 316.672820][ T213] tipc: TX() has been purged, node left! [ 316.862903][ T213] tipc: TX() has been purged, node left! [ 317.062806][ T213] tipc: TX() has been purged, node left! [ 317.232769][ T213] tipc: TX() has been purged, node left! [ 317.412772][ T213] tipc: TX() has been purged, node left! [ 317.594116][ T213] tipc: TX() has been purged, node left! [ 317.752771][ T213] tipc: TX() has been purged, node left! [ 317.912812][ T213] tipc: TX() has been purged, node left! [ 318.092790][ T213] tipc: TX() has been purged, node left! [ 318.272774][ T213] tipc: TX() has been purged, node left! [ 318.432721][ T213] tipc: TX() has been purged, node left! [ 318.622707][ T213] tipc: TX() has been purged, node left! [ 318.832670][ T213] tipc: TX() has been purged, node left! [ 318.895486][ T0] NOHZ: local_softirq_pending 08 [ 319.052700][ T213] tipc: TX() has been purged, node left! [ 319.282666][ T213] tipc: TX() has been purged, node left! [ 319.462758][ T213] tipc: TX() has been purged, node left! [ 319.632644][ T213] tipc: TX() has been purged, node left! [ 319.792899][ T213] tipc: TX() has been purged, node left! [ 320.002598][ T213] tipc: TX() has been purged, node left! [ 320.173226][ T0] NOHZ: local_softirq_pending 08 [ 320.183251][ T213] tipc: TX() has been purged, node left! [ 320.382604][ T213] tipc: TX() has been purged, node left! [ 320.542616][ T213] tipc: TX() has been purged, node left! [ 320.732591][ T213] tipc: TX() has been purged, node left! [ 320.932565][ T213] tipc: TX() has been purged, node left! [ 321.112570][ T213] tipc: TX() has been purged, node left! [ 359.851019][ T0] NOHZ: local_softirq_pending 08 [ 361.131261][ T0] NOHZ: local_softirq_pending 08 08:40:57 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41be, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f00000002c0)) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup/syz1\x00', 0x1ff) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x4ffe0, 0x0) ioctl$SG_GET_KEEP_ORPHAN(0xffffffffffffffff, 0x2288, &(0x7f0000000240)) r2 = socket$inet(0x2, 0xa, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f0000000040)=0x2000000000000074, 0x4) bind$inet(r2, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x3) ioctl$TIOCSLCKTRMIOS(0xffffffffffffffff, 0x5457, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) write$P9_RLOPEN(r0, &(0x7f00000000c0)={0x18, 0xd, 0x1, {{0x0, 0x2, 0x8}, 0x100}}, 0x18) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_MASTER={0x8, 0xd, r4}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) 08:40:57 executing program 4: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x20000000003, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00'}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newlink={0x60, 0x10, 0x1, 0x70bd25, 0x0, {0x0, 0x0, 0xc00, r4, 0x50800}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @ip6gretap={{0xe, 0x1, 'ip6gretap\x00'}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @ipv4={[], [], @private=0xa010100}}, @IFLA_GRE_REMOTE={0x14, 0x7, @remote}]}}}]}, 0x60}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00'}) 08:40:57 executing program 2 (fault-call:8 fault-nth:73): shmget(0x0, 0x4000, 0x780012c9, &(0x7f0000ffc000/0x4000)=nil) shmctl$IPC_RMID(0x0, 0x0) shmat(0x0, &(0x7f0000ffe000/0x1000)=nil, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x2, 0x1) r1 = open(&(0x7f0000000080)='./bus\x00', 0x430c2, 0x0) ftruncate(r1, 0x200004) sendfile(r0, r1, 0x0, 0x80001d00c0d0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) 08:40:57 executing program 1: r0 = socket(0x10, 0x803, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000005540)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000c80)=""/235, 0xeb}], 0x1}}], 0x1, 0x0, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendto(r0, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000b80)=@ethernet={0x0, @local}, 0x80, 0x0}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000ac0)=[{{&(0x7f0000000880)=@caif=@util, 0x80, &(0x7f0000000540)=[{&(0x7f0000000900)=""/128, 0x80}, {&(0x7f0000000980)=""/76, 0x4c}], 0x2}, 0x3f}], 0x1, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_SYS_GET(0xffffffffffffffff, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000a00)={0x0, 0x30}}, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x374, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x14b}, {&(0x7f0000000140)=""/85, 0x20a}, {&(0x7f0000000fc0)=""/4096, 0x773}, {&(0x7f0000000400)=""/106, 0x2ce}, {&(0x7f0000000740)=""/73, 0x3dd}, {&(0x7f0000000200)=""/77, 0x96}, {&(0x7f00000007c0)=""/154, 0x40d}, {&(0x7f0000000000)=""/22, 0xa}], 0x81, &(0x7f0000000600)=""/191, 0x41, 0x58150000}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 08:40:57 executing program 3: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x20000000003, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newlink={0x60, 0x10, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @ip6gretap={{0xe, 0x1, 'ip6gretap\x00'}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @ipv4={[], [], @loopback}}, @IFLA_GRE_REMOTE={0x14, 0x7, @remote}]}}}]}, 0x60}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00'}) 08:40:57 executing program 5 (fault-call:9 fault-nth:11): unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x10, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = socket$inet6(0xa, 0x1, 0x8010800000000084) r1 = socket$kcm(0x2, 0x3, 0x2) recvmsg(r1, &(0x7f0000007500)={&(0x7f0000006f80)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x80, 0x0, 0x0, 0xffffffffffffffff}, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmmsg$inet6(r0, &(0x7f00000000c0)=[{{&(0x7f0000002c80)={0xa, 0x0, 0x0, @loopback}, 0x1c, &(0x7f0000005000)=[{&(0x7f0000002cc0)="ea", 0x1}], 0x1}}], 0x1, 0x20000040) [ 363.705409][T20492] FAULT_INJECTION: forcing a failure. [ 363.705409][T20492] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 363.748546][T20492] CPU: 0 PID: 20492 Comm: syz-executor.2 Not tainted 5.7.0-rc6-syzkaller #0 [ 363.757448][T20492] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 363.767520][T20492] Call Trace: [ 363.770825][T20492] dump_stack+0x1e9/0x30e [ 363.775159][T20492] should_fail+0x433/0x5b0 [ 363.779582][T20492] prepare_alloc_pages+0x28c/0x4a0 [ 363.784702][T20492] __alloc_pages_nodemask+0xbc/0x5e0 [ 363.790124][T20492] __do_page_cache_readahead+0x1de/0x4f0 [ 363.795864][T20492] generic_file_buffered_read+0x4a5/0x2570 [ 363.801683][T20492] generic_file_splice_read+0x452/0x700 [ 363.807238][T20492] ? splice_shrink_spd+0xb0/0xb0 [ 363.812175][T20492] splice_direct_to_actor+0x3c1/0xb40 [ 363.817635][T20492] ? do_splice_direct+0x340/0x340 [ 363.822668][T20492] do_splice_direct+0x201/0x340 [ 363.827523][T20492] ? security_file_permission+0x50/0xc0 [ 363.833070][T20492] do_sendfile+0x809/0xfe0 [ 363.837497][T20492] __x64_sys_sendfile64+0x164/0x1a0 [ 363.842694][T20492] ? do_syscall_64+0x19/0x1b0 [ 363.847402][T20492] do_syscall_64+0xf3/0x1b0 [ 363.851949][T20492] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 363.857835][T20492] RIP: 0033:0x45ca29 [ 363.861748][T20492] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 363.881345][T20492] RSP: 002b:00007efeff606c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 363.889749][T20492] RAX: ffffffffffffffda RBX: 00000000004fc540 RCX: 000000000045ca29 [ 363.897740][T20492] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 363.905710][T20492] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 363.913702][T20492] R10: 000080001d00c0d0 R11: 0000000000000246 R12: 0000000000000005 [ 363.921668][T20492] R13: 00000000000008dc R14: 00000000004cba16 R15: 00007efeff6076d4 [ 363.948190][T20505] FAULT_INJECTION: forcing a failure. [ 363.948190][T20505] name failslab, interval 1, probability 0, space 0, times 0 [ 363.962982][T20505] CPU: 0 PID: 20505 Comm: syz-executor.5 Not tainted 5.7.0-rc6-syzkaller #0 [ 363.971667][T20505] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 363.981719][T20505] Call Trace: [ 363.985016][T20505] dump_stack+0x1e9/0x30e [ 363.989358][T20505] should_fail+0x433/0x5b0 [ 363.993782][T20505] ? sctp_add_bind_addr+0x97/0x350 08:40:57 executing program 1: r0 = socket(0x10, 0x803, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000005540)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000c80)=""/235, 0xeb}], 0x1}}], 0x1, 0x0, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendto(r0, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000b80)=@ethernet={0x0, @local}, 0x80, 0x0}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000ac0)=[{{&(0x7f0000000880)=@caif=@util, 0x80, &(0x7f0000000540)=[{&(0x7f0000000900)=""/128, 0x80}, {&(0x7f0000000980)=""/76, 0x4c}], 0x2}, 0x3f}], 0x1, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_SYS_GET(0xffffffffffffffff, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000a00)={0x0, 0x30}}, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x374, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x14b}, {&(0x7f0000000140)=""/85, 0x20a}, {&(0x7f0000000fc0)=""/4096, 0x773}, {&(0x7f0000000400)=""/106, 0x2ce}, {&(0x7f0000000740)=""/73, 0x3dd}, {&(0x7f0000000200)=""/77, 0x96}, {&(0x7f00000007c0)=""/154, 0x40d}, {&(0x7f0000000000)=""/22, 0xa}], 0x81, &(0x7f0000000600)=""/191, 0x41, 0x60000000}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) [ 363.998894][T20505] should_failslab+0x5/0x20 [ 364.003396][T20505] kmem_cache_alloc_trace+0x57/0x300 [ 364.008684][T20505] sctp_add_bind_addr+0x97/0x350 [ 364.013649][T20505] sctp_copy_local_addr_list+0x298/0x420 [ 364.019290][T20505] sctp_bind_addr_copy+0xad/0x3d0 [ 364.024318][T20505] sctp_connect_new_asoc+0x277/0x600 [ 364.029624][T20505] sctp_sendmsg+0x1aa0/0x3620 [ 364.034433][T20505] ? inet_sendmsg+0xfa/0x310 [ 364.039030][T20505] ? inet_send_prepare+0x250/0x250 [ 364.044143][T20505] ____sys_sendmsg+0x4f9/0x7c0 [ 364.048919][T20505] ? import_iovec+0x12a/0x2c0 [ 364.053778][T20505] __sys_sendmmsg+0x45b/0x690 [ 364.058471][T20505] ? vfs_write+0x48e/0x580 [ 364.062901][T20505] ? check_preemption_disabled+0x40/0x240 [ 364.068620][T20505] ? __this_cpu_preempt_check+0x9/0x20 [ 364.074178][T20505] ? ksys_write+0x1b1/0x220 [ 364.078690][T20505] ? check_preemption_disabled+0xb0/0x240 [ 364.084409][T20505] ? debug_smp_processor_id+0x5/0x20 [ 364.089698][T20505] ? trace_irq_disable_rcuidle+0x1f/0x1d0 [ 364.095418][T20505] __x64_sys_sendmmsg+0x9c/0xb0 [ 364.100272][T20505] do_syscall_64+0xf3/0x1b0 [ 364.104778][T20505] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 364.110665][T20505] RIP: 0033:0x45ca29 [ 364.114552][T20505] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 364.134852][T20505] RSP: 002b:00007f082d13ac78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 364.143547][T20505] RAX: ffffffffffffffda RBX: 00000000004fc640 RCX: 000000000045ca29 [ 364.151519][T20505] RDX: 0000000000000001 RSI: 00000000200000c0 RDI: 0000000000000004 [ 364.159670][T20505] RBP: 000000000078c040 R08: 0000000000000000 R09: 0000000000000000 [ 364.167647][T20505] R10: 0000000020000040 R11: 0000000000000246 R12: 0000000000000008 [ 364.175619][T20505] R13: 00000000000008e0 R14: 00000000004cba43 R15: 00007f082d13b6d4 08:40:58 executing program 4: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x20000000003, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00'}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newlink={0x60, 0x10, 0x1, 0x70bd25, 0x0, {0x0, 0x0, 0xf00, r4, 0x50800}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @ip6gretap={{0xe, 0x1, 'ip6gretap\x00'}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @ipv4={[], [], @private=0xa010100}}, @IFLA_GRE_REMOTE={0x14, 0x7, @remote}]}}}]}, 0x60}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00'}) 08:40:58 executing program 1: r0 = socket(0x10, 0x803, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000005540)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000c80)=""/235, 0xeb}], 0x1}}], 0x1, 0x0, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendto(r0, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000b80)=@ethernet={0x0, @local}, 0x80, 0x0}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000ac0)=[{{&(0x7f0000000880)=@caif=@util, 0x80, &(0x7f0000000540)=[{&(0x7f0000000900)=""/128, 0x80}, {&(0x7f0000000980)=""/76, 0x4c}], 0x2}, 0x3f}], 0x1, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_SYS_GET(0xffffffffffffffff, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000a00)={0x0, 0x30}}, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x374, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x14b}, {&(0x7f0000000140)=""/85, 0x20a}, {&(0x7f0000000fc0)=""/4096, 0x773}, {&(0x7f0000000400)=""/106, 0x2ce}, {&(0x7f0000000740)=""/73, 0x3dd}, {&(0x7f0000000200)=""/77, 0x96}, {&(0x7f00000007c0)=""/154, 0x40d}, {&(0x7f0000000000)=""/22, 0xa}], 0x81, &(0x7f0000000600)=""/191, 0x41, 0x64150000}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 08:40:58 executing program 3: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x20000000003, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newlink={0x60, 0x10, 0x1, 0x0, 0x0, {0x3, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @ip6gretap={{0xe, 0x1, 'ip6gretap\x00'}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @ipv4={[], [], @loopback}}, @IFLA_GRE_REMOTE={0x14, 0x7, @remote}]}}}]}, 0x60}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00'}) 08:40:58 executing program 2 (fault-call:8 fault-nth:74): shmget(0x0, 0x4000, 0x780012c9, &(0x7f0000ffc000/0x4000)=nil) shmctl$IPC_RMID(0x0, 0x0) shmat(0x0, &(0x7f0000ffe000/0x1000)=nil, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x2, 0x1) r1 = open(&(0x7f0000000080)='./bus\x00', 0x430c2, 0x0) ftruncate(r1, 0x200004) sendfile(r0, r1, 0x0, 0x80001d00c0d0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) 08:40:58 executing program 1: r0 = socket(0x10, 0x803, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000005540)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000c80)=""/235, 0xeb}], 0x1}}], 0x1, 0x0, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendto(r0, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000b80)=@ethernet={0x0, @local}, 0x80, 0x0}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000ac0)=[{{&(0x7f0000000880)=@caif=@util, 0x80, &(0x7f0000000540)=[{&(0x7f0000000900)=""/128, 0x80}, {&(0x7f0000000980)=""/76, 0x4c}], 0x2}, 0x3f}], 0x1, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_SYS_GET(0xffffffffffffffff, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000a00)={0x0, 0x30}}, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x374, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x14b}, {&(0x7f0000000140)=""/85, 0x20a}, {&(0x7f0000000fc0)=""/4096, 0x773}, {&(0x7f0000000400)=""/106, 0x2ce}, {&(0x7f0000000740)=""/73, 0x3dd}, {&(0x7f0000000200)=""/77, 0x96}, {&(0x7f00000007c0)=""/154, 0x40d}, {&(0x7f0000000000)=""/22, 0xa}], 0x81, &(0x7f0000000600)=""/191, 0x41, 0x65580000}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) [ 364.402072][T20521] FAULT_INJECTION: forcing a failure. [ 364.402072][T20521] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 364.452233][T20521] CPU: 1 PID: 20521 Comm: syz-executor.2 Not tainted 5.7.0-rc6-syzkaller #0 [ 364.460943][T20521] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 364.471088][T20521] Call Trace: [ 364.474381][T20521] dump_stack+0x1e9/0x30e [ 364.478718][T20521] should_fail+0x433/0x5b0 [ 364.483158][T20521] prepare_alloc_pages+0x28c/0x4a0 [ 364.488299][T20521] __alloc_pages_nodemask+0xbc/0x5e0 [ 364.493598][T20521] __do_page_cache_readahead+0x1de/0x4f0 [ 364.499241][T20521] generic_file_buffered_read+0x4a5/0x2570 [ 364.505069][T20521] generic_file_splice_read+0x452/0x700 [ 364.510624][T20521] ? splice_shrink_spd+0xb0/0xb0 [ 364.515659][T20521] splice_direct_to_actor+0x3c1/0xb40 [ 364.521037][T20521] ? do_splice_direct+0x340/0x340 [ 364.526077][T20521] do_splice_direct+0x201/0x340 [ 364.530956][T20521] ? security_file_permission+0x50/0xc0 [ 364.536533][T20521] do_sendfile+0x809/0xfe0 [ 364.540961][T20521] __x64_sys_sendfile64+0x164/0x1a0 [ 364.546160][T20521] ? do_syscall_64+0x19/0x1b0 [ 364.551277][T20521] do_syscall_64+0xf3/0x1b0 [ 364.555901][T20521] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 364.561792][T20521] RIP: 0033:0x45ca29 [ 364.565711][T20521] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 364.585749][T20521] RSP: 002b:00007efeff606c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 364.594271][T20521] RAX: ffffffffffffffda RBX: 00000000004fc540 RCX: 000000000045ca29 [ 364.602243][T20521] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 364.610215][T20521] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 364.618186][T20521] R10: 000080001d00c0d0 R11: 0000000000000246 R12: 0000000000000005 [ 364.626159][T20521] R13: 00000000000008dc R14: 00000000004cba16 R15: 00007efeff6076d4 [ 379.691128][ T0] NOHZ: local_softirq_pending 08 [ 381.610169][ T0] NOHZ: local_softirq_pending 08 [ 420.008123][ T0] NOHZ: local_softirq_pending 08 [ 452.646227][ T1138] INFO: task syz-executor.0:20299 blocked for more than 143 seconds. [ 452.654654][ T1138] Not tainted 5.7.0-rc6-syzkaller #0 [ 452.660987][ T1138] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 452.670837][ T1138] syz-executor.0 D29024 20299 7204 0x80004006 [ 452.677239][ T1138] Call Trace: [ 452.680603][ T1138] ? __schedule+0x805/0xc90 [ 452.685095][ T1138] ? schedule+0x188/0x220 [ 452.689456][ T1138] ? rwsem_down_write_slowpath+0x7d0/0xd60 [ 452.695286][ T1138] ? down_write+0x125/0x130 [ 452.699839][ T1138] ? unregister_netdevice_notifier+0x30/0x380 [ 452.706620][ T1138] ? sock_close+0x94/0x260 [ 452.711303][ T1138] ? bcm_release+0x77/0x800 [ 452.717160][ T1138] ? down_write+0xcd/0x130 [ 452.721732][ T1138] ? sock_close+0xd8/0x260 [ 452.727479][ T1138] ? sock_mmap+0x90/0x90 [ 452.731911][ T1138] ? __fput+0x2ed/0x750 [ 452.737150][ T1138] ? task_work_run+0x147/0x1d0 [ 452.742187][ T1138] ? do_exit+0x5ef/0x1f80 [ 452.747146][ T1138] ? do_group_exit+0x15e/0x2c0 [ 452.751939][ T1138] ? get_signal+0x13cf/0x1d60 [ 452.757525][ T1138] ? alloc_file_pseudo+0x1d9/0x240 [ 452.757536][ T1138] ? do_signal+0x33/0x610 [ 452.757546][ T1138] ? __fd_install+0x251/0x490 [ 452.757557][ T1138] ? trace_irq_enable_rcuidle+0x1f/0x1d0 [ 452.757566][ T1138] ? prepare_exit_to_usermode+0x280/0x600 [ 452.757576][ T1138] ? prepare_exit_to_usermode+0x32a/0x600 [ 452.757585][ T1138] ? syscall_return_slowpath+0xf9/0x420 [ 452.757598][ T1138] ? entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 452.757728][ T1138] INFO: lockdep is turned off. [ 452.806185][ T1138] NMI backtrace for cpu 0 [ 452.810513][ T1138] CPU: 0 PID: 1138 Comm: khungtaskd Not tainted 5.7.0-rc6-syzkaller #0 [ 452.818753][ T1138] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 452.828792][ T1138] Call Trace: [ 452.832058][ T1138] dump_stack+0x1e9/0x30e [ 452.836373][ T1138] nmi_cpu_backtrace+0x9f/0x180 [ 452.841196][ T1138] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 452.847233][ T1138] nmi_trigger_cpumask_backtrace+0x16a/0x280 [ 452.853197][ T1138] watchdog+0xd2a/0xd40 [ 452.857326][ T1138] kthread+0x353/0x380 [ 452.861365][ T1138] ? hungtask_pm_notify+0x50/0x50 [ 452.866356][ T1138] ? kthread_blkcg+0xd0/0xd0 [ 452.870917][ T1138] ret_from_fork+0x24/0x30 [ 452.876621][ T1138] Sending NMI from CPU 0 to CPUs 1: [ 452.881989][ C1] NMI backtrace for cpu 1 skipped: idling at native_safe_halt+0xe/0x10 [ 452.884241][ T1138] Kernel panic - not syncing: hung_task: blocked tasks [ 452.897091][ T1138] CPU: 0 PID: 1138 Comm: khungtaskd Not tainted 5.7.0-rc6-syzkaller #0 [ 452.905585][ T1138] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 452.915622][ T1138] Call Trace: [ 452.918913][ T1138] dump_stack+0x1e9/0x30e [ 452.923221][ T1138] panic+0x264/0x7a0 [ 452.927122][ T1138] ? nmi_trigger_cpumask_backtrace+0x206/0x280 [ 452.933278][ T1138] watchdog+0xd3d/0xd40 [ 452.937414][ T1138] kthread+0x353/0x380 [ 452.941494][ T1138] ? hungtask_pm_notify+0x50/0x50 [ 452.946526][ T1138] ? kthread_blkcg+0xd0/0xd0 [ 452.951092][ T1138] ret_from_fork+0x24/0x30 [ 452.957041][ T1138] Kernel Offset: disabled [ 452.961368][ T1138] Rebooting in 86400 seconds..