quencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x24000, 0x0) write$P9_RWSTAT(r1, &(0x7f0000000080)={0x7, 0x7f, 0x2}, 0x7) io_submit(r0, 0x0, &(0x7f0000001540)) 16:57:07 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffffffffff9e, 0x0, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) 16:57:07 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00'}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x3, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) 16:57:07 executing program 5: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x3, 0x2) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) splice(r0, 0x0, r2, 0x0, 0x1ffe0, 0x900b0000) 16:57:07 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8fffffffffff0, 0x0, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) 16:57:07 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00'}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x3, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) 16:57:07 executing program 0: r0 = dup(0xffffffffffffff9c) ioctl$BLKTRACESTART(r0, 0x1274, 0x0) ioctl$DRM_IOCTL_MAP_BUFS(r0, 0xc0186419, &(0x7f00000001c0)={0x1, &(0x7f0000000100)=""/191, &(0x7f0000000080)=[{0x4, 0x34, 0x3, &(0x7f0000000000)=""/52}]}) openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x80000000000000, 0x0) io_setup(0x101, &(0x7f0000000040)) 16:57:07 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x1c, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1}}, 0x1c}}, 0x0) 16:57:08 executing program 3: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x3, 0x2) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlockall(0x4) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') msgget(0x3, 0x108) sendmsg$IPVS_CMD_DEL_DAEMON(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8008000}, 0xc, &(0x7f0000000100)={&(0x7f0000000200)={0xb8, r3, 0x200, 0x70bd2a, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DEST={0x14, 0x2, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x5}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1ff}, @IPVS_CMD_ATTR_DAEMON={0x64, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast1}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x100000001}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x3ff}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @remote}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @local}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'nlmon0\x00'}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x200}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @empty}]}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2f}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x81}]}, 0xb8}, 0x1, 0x0, 0x0, 0x4000000}, 0x1) 16:57:08 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffff00000000, 0x2, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) 16:57:08 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x1c, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1}}, 0x1c}}, 0x0) 16:57:08 executing program 0: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x0, 0x0) io_setup(0x101, &(0x7f0000000040)=0x0) io_submit(r1, 0x2000000000000246, &(0x7f0000001540)=[&(0x7f0000000140)={0x0, 0x0, 0xd, 0x0, 0x0, r0, &(0x7f0000000000), 0xfffffce4}]) r2 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x9, 0x40000) ioctl$sock_inet_tcp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000100)) 16:57:08 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x1c, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1}}, 0x1c}}, 0x0) 16:57:08 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffff00000000, 0x3, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) 16:57:08 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x3, 0x2) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) splice(r0, 0x0, r2, 0x0, 0x1ffe0, 0xa) [ 587.615855] net_ratelimit: 29 callbacks suppressed [ 587.615862] neighbour: ndisc_cache: neighbor table overflow! [ 587.638667] neighbour: ndisc_cache: neighbor table overflow! 16:57:08 executing program 5: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x3, 0x2) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) splice(r0, 0x0, r2, 0x0, 0x1ffe0, 0x97ffffff) 16:57:08 executing program 2: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r3 = socket$inet(0x10, 0x3, 0xc) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24000000100007031dfffd946fa2830020200a0009000100001d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0) socket$inet(0x2, 0x3, 0x2) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 16:57:08 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffff00000000, 0x4, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) 16:57:08 executing program 0: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x0, 0x0) io_setup(0x101, &(0x7f0000000040)=0x0) io_submit(r1, 0x72, &(0x7f0000001540)=[&(0x7f0000000140)={0x0, 0x0, 0xd, 0x0, 0x0, r0, &(0x7f0000000000)="506bf52c08", 0x5}]) 16:57:08 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffff00000000, 0x6, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) [ 587.841660] neighbour: ndisc_cache: neighbor table overflow! [ 587.848552] neighbour: ndisc_cache: neighbor table overflow! [ 587.876743] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 587.911891] neighbour: ndisc_cache: neighbor table overflow! [ 587.935236] neighbour: ndisc_cache: neighbor table overflow! 16:57:09 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1, 0x0, 0x0, 0xa00000000000000}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) 16:57:09 executing program 0: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x0, 0x0) r1 = socket(0x800000c, 0x6, 0xfffffffffffffffe) setsockopt$bt_hci_HCI_DATA_DIR(r1, 0x0, 0x1, &(0x7f0000000040)=0x6, 0x4) io_setup(0x4000000000001000, &(0x7f0000000000)=0x0) io_submit(r2, 0x1, &(0x7f0000001540)=[&(0x7f0000000080)={0x0, 0x0, 0xd, 0x0, 0x0, r0}]) 16:57:09 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffff00000000, 0x8, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) 16:57:09 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1, 0x0, 0x0, 0xa00000000000000}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) 16:57:09 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffff00000000, 0xa, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) [ 588.346166] neighbour: ndisc_cache: neighbor table overflow! [ 588.353798] neighbour: ndisc_cache: neighbor table overflow! [ 588.367062] neighbour: ndisc_cache: neighbor table overflow! [ 588.418025] neighbour: ndisc_cache: neighbor table overflow! 16:57:09 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1, 0x0, 0x0, 0xa00000000000000}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) 16:57:09 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, 0x0, 0x0) socket$inet(0x2, 0x3, 0x2) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) splice(r0, 0x0, r2, 0x0, 0x100e0, 0x0) 16:57:09 executing program 5: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x3, 0x2) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) splice(r0, 0x0, r2, 0x0, 0x1ffe0, 0xa0008000) 16:57:09 executing program 2: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x3, 0x2) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) splice(r0, 0x0, r2, 0x0, 0x1ff04, 0x0) 16:57:09 executing program 0: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x80b00, 0x0) r3 = socket$inet(0x2, 0x3, 0x2) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_PIT2(r0, 0x4070aea0, &(0x7f00000000c0)={[{0x1, 0x838, 0x200, 0x100000001, 0xffff, 0x91, 0x22, 0x5, 0x5, 0x6, 0x10000, 0x7f, 0x7}, {0x1, 0x72, 0x0, 0x5, 0x9, 0x6, 0xa993, 0x7, 0x5, 0x7f8, 0x8, 0x0, 0x1}, {0x1000, 0x0, 0x5, 0x3, 0x8, 0x10001, 0x2, 0x200, 0x401, 0x7, 0x800, 0x4, 0x2}], 0x2}) socket$caif_stream(0x25, 0x1, 0x4) splice(r3, 0x0, r1, 0x0, 0x10005, 0x0) 16:57:09 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffff00000000, 0xc, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) 16:57:09 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa00000000000000}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) 16:57:09 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa00000000000000}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) 16:57:09 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffff00000000, 0xe, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) 16:57:09 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffff00000000, 0xf, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) 16:57:09 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa00000000000000}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) 16:57:09 executing program 3: ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r0, 0x0, 0x0, 0xa00000000000000}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) 16:57:09 executing program 3: ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r0, 0x0, 0x0, 0xa00000000000000}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) 16:57:10 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x3, 0x2) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) splice(r0, 0x0, r2, 0x0, 0x10003, 0x0) 16:57:10 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffff00000000, 0x10, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) 16:57:10 executing program 2: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r0, &(0x7f00000000c0)=ANY=[], 0x0) r3 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, &(0x7f00000001c0)={0x0, 0x0, {0x0, 0x2d, 0x0, 0x4, 0x0, 0x7e8e, 0x1, 0x93, 0xffffffffffffffff}}) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB=',lowerdir=.:file0,workdir=.']) accept$inet(r3, 0x0, &(0x7f0000000200)) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0xb9a3b675e6b77593) r5 = gettid() ioctl$BLKTRACESTART(r1, 0x1274, 0x0) syz_open_procfs(r5, &(0x7f0000000140)='net/ip6_mr_cache\x00') getdents64(r4, &(0x7f0000000380)=""/4096, 0x1000) syz_mount_image$ntfs(&(0x7f0000000000)='ntfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000001500)=ANY=[@ANYBLOB="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"]) socket$inet(0x2, 0x3, 0x2) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x43a080, 0x0) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 16:57:10 executing program 5: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x3, 0x2) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) splice(r0, 0x0, r2, 0x0, 0x1ffe0, 0xa0010000) 16:57:10 executing program 3: ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r0, 0x0, 0x0, 0xa00000000000000}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) 16:57:10 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffff00000000, 0x60, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) 16:57:10 executing program 0: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r0, &(0x7f00000000c0)=ANY=[], 0x0) r3 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, &(0x7f00000001c0)={0x0, 0x0, {0x0, 0x2d, 0x0, 0x4, 0x0, 0x7e8e, 0x1, 0x93, 0xffffffffffffffff}}) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB=',lowerdir=.:file0,workdir=.']) accept$inet(r3, 0x0, &(0x7f0000000200)) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0xb9a3b675e6b77593) r5 = gettid() ioctl$BLKTRACESTART(r1, 0x1274, 0x0) syz_open_procfs(r5, &(0x7f0000000140)='net/ip6_mr_cache\x00') getdents64(r4, &(0x7f0000000380)=""/4096, 0x1000) syz_mount_image$ntfs(&(0x7f0000000000)='ntfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000001500)=ANY=[@ANYBLOB="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"]) socket$inet(0x2, 0x3, 0x2) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x43a080, 0x0) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 16:57:10 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffff00000000, 0xf0, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) [ 589.973290] overlayfs: option "workdir=." is useless in a non-upper mount, ignore 16:57:10 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1, 0x0, 0x0, 0xa00000000000000}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) 16:57:10 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffff00000000, 0x1a0, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) [ 590.055866] overlayfs: option "workdir=." is useless in a non-upper mount, ignore 16:57:10 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1, 0x0, 0x0, 0xa00000000000000}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) [ 590.122961] __ntfs_error: 2 callbacks suppressed [ 590.122984] ntfs: (device loop0): parse_options(): NLS character set cpH255 not found. [ 590.208116] ntfs: (device loop2): parse_options(): NLS character set cpH255 not found. 16:57:11 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffff00000000, 0x282, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) 16:57:11 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1, 0x0, 0x0, 0xa00000000000000}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) 16:57:11 executing program 1 (fault-call:2 fault-nth:0): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x3, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) [ 590.400456] FAULT_INJECTION: forcing a failure. [ 590.400456] name failslab, interval 1, probability 0, space 0, times 0 [ 590.415035] CPU: 0 PID: 25425 Comm: syz-executor.1 Not tainted 5.0.0+ #6 [ 590.421883] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 590.431239] Call Trace: [ 590.433823] dump_stack+0x172/0x1f0 [ 590.437461] should_fail.cold+0xa/0x1b [ 590.441349] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 590.446464] ? lock_downgrade+0x810/0x810 [ 590.450612] ? ___might_sleep+0x163/0x280 [ 590.454755] __should_failslab+0x121/0x190 [ 590.458983] should_failslab+0x9/0x14 [ 590.462796] kmem_cache_alloc_node+0x264/0x710 [ 590.467371] __alloc_skb+0xd5/0x5e0 [ 590.470982] ? skb_scrub_packet+0x440/0x440 [ 590.475316] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 590.480860] ? netlink_autobind.isra.0+0x228/0x310 [ 590.485800] netlink_sendmsg+0x97b/0xd70 [ 590.489864] ? netlink_unicast+0x720/0x720 [ 590.494100] ? smack_socket_sendmsg+0xb1/0x1a0 [ 590.498666] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 590.504192] ? security_socket_sendmsg+0x93/0xc0 [ 590.508935] ? netlink_unicast+0x720/0x720 [ 590.513156] sock_sendmsg+0xdd/0x130 [ 590.516852] ___sys_sendmsg+0x806/0x930 [ 590.520823] ? copy_msghdr_from_user+0x430/0x430 [ 590.525574] ? lock_downgrade+0x810/0x810 [ 590.529711] ? kasan_check_read+0x11/0x20 [ 590.533865] ? __fget+0x367/0x540 [ 590.537311] ? iterate_fd+0x360/0x360 [ 590.541097] ? lock_downgrade+0x810/0x810 [ 590.545247] ? __fget_light+0x1a9/0x230 [ 590.549213] ? __fdget+0x1b/0x20 [ 590.552568] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 590.558100] __sys_sendmsg+0x105/0x1d0 [ 590.562003] ? __ia32_sys_shutdown+0x80/0x80 [ 590.566393] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 590.571921] ? fput+0x128/0x1a0 [ 590.575202] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 590.579943] ? do_syscall_64+0x26/0x610 [ 590.583922] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 590.589297] ? do_syscall_64+0x26/0x610 [ 590.593285] __x64_sys_sendmsg+0x78/0xb0 [ 590.597349] do_syscall_64+0x103/0x610 [ 590.601245] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 590.606426] RIP: 0033:0x457e29 [ 590.609643] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 590.628548] RSP: 002b:00007f784c0bfc78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 590.636301] RAX: ffffffffffffffda RBX: 00007f784c0bfc90 RCX: 0000000000457e29 [ 590.643572] RDX: 0000000000000000 RSI: 0000000020000300 RDI: 0000000000000003 [ 590.650866] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 590.658140] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f784c0c06d4 [ 590.665404] R13: 00000000004c54d4 R14: 00000000004d93b0 R15: 0000000000000004 16:57:11 executing program 2 (fault-call:8 fault-nth:0): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x3, 0x2) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) splice(r0, 0x0, r2, 0x0, 0x10005, 0xa00000000000000) 16:57:11 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffff00000000, 0x29d, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) 16:57:11 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa00000000000000}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) 16:57:11 executing program 1 (fault-call:2 fault-nth:1): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x3, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) 16:57:11 executing program 0 (fault-call:8 fault-nth:0): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x3, 0x2) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) splice(r0, 0x0, r2, 0x0, 0x100e0, 0x0) 16:57:11 executing program 5: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x3, 0x2) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) splice(r0, 0x0, r2, 0x0, 0x1ffe0, 0xc8050000) [ 590.813614] FAULT_INJECTION: forcing a failure. [ 590.813614] name failslab, interval 1, probability 0, space 0, times 0 [ 590.838857] CPU: 1 PID: 25434 Comm: syz-executor.1 Not tainted 5.0.0+ #6 [ 590.845738] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 590.855094] Call Trace: [ 590.857691] dump_stack+0x172/0x1f0 16:57:11 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffff00000000, 0x300, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) 16:57:11 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa00000000000000}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) [ 590.861351] should_fail.cold+0xa/0x1b [ 590.865257] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 590.870386] ? lock_downgrade+0x810/0x810 [ 590.874547] ? ___might_sleep+0x163/0x280 [ 590.878717] __should_failslab+0x121/0x190 [ 590.882970] should_failslab+0x9/0x14 [ 590.886367] FAULT_INJECTION: forcing a failure. [ 590.886367] name failslab, interval 1, probability 0, space 0, times 0 [ 590.886778] kmem_cache_alloc_node_trace+0x270/0x720 [ 590.886805] ? __alloc_skb+0xd5/0x5e0 [ 590.886825] ? rcu_lockdep_current_cpu_online+0xe3/0x130 [ 590.886845] __kmalloc_node_track_caller+0x3d/0x70 [ 590.917306] __kmalloc_reserve.isra.0+0x40/0xf0 [ 590.922006] __alloc_skb+0x10b/0x5e0 [ 590.925734] ? skb_scrub_packet+0x440/0x440 [ 590.930068] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 590.935642] ? netlink_autobind.isra.0+0x228/0x310 [ 590.940587] netlink_sendmsg+0x97b/0xd70 [ 590.944669] ? netlink_unicast+0x720/0x720 [ 590.948924] ? smack_socket_sendmsg+0xb1/0x1a0 [ 590.953515] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 590.953535] ? security_socket_sendmsg+0x93/0xc0 [ 590.953550] ? netlink_unicast+0x720/0x720 [ 590.953568] sock_sendmsg+0xdd/0x130 [ 590.971830] ___sys_sendmsg+0x806/0x930 [ 590.975820] ? copy_msghdr_from_user+0x430/0x430 [ 590.975842] ? lock_downgrade+0x810/0x810 [ 590.975860] ? kasan_check_read+0x11/0x20 [ 590.975878] ? __fget+0x367/0x540 [ 590.992364] ? iterate_fd+0x360/0x360 [ 590.996165] ? lock_downgrade+0x810/0x810 [ 591.000335] ? __fget_light+0x1a9/0x230 [ 591.004313] ? __fdget+0x1b/0x20 [ 591.007684] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 16:57:11 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa00000000000000}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) [ 591.013233] __sys_sendmsg+0x105/0x1d0 [ 591.017156] ? __ia32_sys_shutdown+0x80/0x80 [ 591.021568] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 591.027105] ? fput+0x128/0x1a0 [ 591.030397] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 591.035168] ? do_syscall_64+0x26/0x610 [ 591.039157] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 591.044521] ? do_syscall_64+0x26/0x610 [ 591.048532] __x64_sys_sendmsg+0x78/0xb0 [ 591.052608] do_syscall_64+0x103/0x610 [ 591.056506] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 591.061696] RIP: 0033:0x457e29 [ 591.064901] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 591.083806] RSP: 002b:00007f784c0bfc78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 591.091513] RAX: ffffffffffffffda RBX: 00007f784c0bfc90 RCX: 0000000000457e29 [ 591.098798] RDX: 0000000000000000 RSI: 0000000020000300 RDI: 0000000000000003 [ 591.106136] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 591.113407] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f784c0c06d4 [ 591.120676] R13: 00000000004c54d4 R14: 00000000004d93b0 R15: 0000000000000004 [ 591.135040] CPU: 0 PID: 25445 Comm: syz-executor.0 Not tainted 5.0.0+ #6 [ 591.135501] FAULT_INJECTION: forcing a failure. [ 591.135501] name failslab, interval 1, probability 0, space 0, times 0 [ 591.141942] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 591.141947] Call Trace: [ 591.141966] dump_stack+0x172/0x1f0 [ 591.141998] should_fail.cold+0xa/0x1b [ 591.142016] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 591.142029] ? lock_downgrade+0x810/0x810 [ 591.142078] __should_failslab+0x121/0x190 [ 591.142096] should_failslab+0x9/0x14 [ 591.142111] kmem_cache_alloc+0x47/0x6f0 [ 591.193976] ? __lock_is_held+0xb6/0x140 [ 591.198049] ? check_preemption_disabled+0x48/0x290 [ 591.203086] dst_alloc+0x10e/0x1d0 [ 591.206635] rt_dst_alloc+0x83/0x3f0 [ 591.210362] ip_route_output_key_hash_rcu+0x97d/0x30e0 [ 591.215654] ? ip_route_input_noref+0x280/0x280 [ 591.220334] ? kasan_check_read+0x11/0x20 [ 591.224491] ip_route_output_key_hash+0x212/0x380 [ 591.229345] ? ip_route_output_key_hash_rcu+0x30e0/0x30e0 [ 591.234891] ? raw_sendmsg+0x6b0/0x2f10 [ 591.238895] ? lock_downgrade+0x810/0x810 [ 591.243055] ip_route_output_flow+0x28/0xc0 [ 591.247396] raw_sendmsg+0xa10/0x2f10 [ 591.251232] ? raw_getsockopt+0x100/0x100 [ 591.255393] ? __lock_acquire+0x53b/0x4700 [ 591.259634] ? clockevents_program_event+0x15f/0x380 [ 591.264758] ? mark_held_locks+0x100/0x100 [ 591.269041] ? hrtimer_start_range_ns+0x66b/0xc80 [ 591.273912] ? find_held_lock+0x35/0x130 [ 591.277993] ? hrtimer_start_range_ns+0x66b/0xc80 [ 591.282850] ? find_held_lock+0x35/0x130 [ 591.287420] ? perf_event_update_userpage+0x55b/0x810 [ 591.292635] inet_sendmsg+0x147/0x5d0 [ 591.296445] ? raw_getsockopt+0x100/0x100 [ 591.300613] ? inet_sendmsg+0x147/0x5d0 [ 591.304589] ? ipip_gro_receive+0x100/0x100 [ 591.308914] sock_sendmsg+0xdd/0x130 [ 591.312632] kernel_sendmsg+0x44/0x50 [ 591.316455] sock_no_sendpage+0x116/0x150 [ 591.320611] ? sock_kzfree_s+0x70/0x70 [ 591.324527] ? pipe_lock+0x6e/0x80 [ 591.328074] inet_sendpage+0x44a/0x630 [ 591.331985] kernel_sendpage+0x95/0xf0 [ 591.335876] ? inet_sendmsg+0x5d0/0x5d0 [ 591.339858] sock_sendpage+0x8b/0xc0 [ 591.343570] ? pipe_lock+0x6e/0x80 [ 591.347135] pipe_to_sendpage+0x299/0x370 [ 591.351315] ? kernel_sendpage+0xf0/0xf0 [ 591.355400] ? direct_splice_actor+0x1a0/0x1a0 [ 591.359987] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 591.365550] ? splice_from_pipe_next.part.0+0x255/0x2f0 [ 591.370933] __splice_from_pipe+0x39a/0x7e0 [ 591.375298] ? direct_splice_actor+0x1a0/0x1a0 [ 591.379894] ? direct_splice_actor+0x1a0/0x1a0 [ 591.384493] splice_from_pipe+0x108/0x170 [ 591.388646] ? splice_shrink_spd+0xd0/0xd0 [ 591.393159] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 591.398714] ? security_file_permission+0x94/0x320 [ 591.403655] generic_splice_sendpage+0x3c/0x50 [ 591.408242] ? splice_from_pipe+0x170/0x170 [ 591.412586] do_splice+0x70a/0x1490 [ 591.416228] ? iterate_fd+0x360/0x360 [ 591.420046] ? opipe_prep.part.0+0x2d0/0x2d0 [ 591.424490] ? __fget_light+0x1a9/0x230 [ 591.428492] __x64_sys_splice+0x2c6/0x330 [ 591.432654] do_syscall_64+0x103/0x610 [ 591.436554] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 591.441753] RIP: 0033:0x457e29 [ 591.444945] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 591.463857] RSP: 002b:00007f2baa4adc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 591.471562] RAX: ffffffffffffffda RBX: 00007f2baa4adc90 RCX: 0000000000457e29 [ 591.478830] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000003 [ 591.486097] RBP: 000000000073bfa0 R08: 00000000000100e0 R09: 0000000000000000 [ 591.493369] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f2baa4ae6d4 [ 591.500635] R13: 00000000004c6c75 R14: 00000000004db870 R15: 0000000000000007 [ 591.508100] CPU: 1 PID: 25455 Comm: syz-executor.2 Not tainted 5.0.0+ #6 [ 591.514959] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 591.524305] Call Trace: [ 591.526898] dump_stack+0x172/0x1f0 [ 591.530534] should_fail.cold+0xa/0x1b [ 591.534433] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 591.539544] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 591.544323] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 591.549110] __should_failslab+0x121/0x190 [ 591.553355] should_failslab+0x9/0x14 [ 591.557176] kmem_cache_alloc+0x47/0x6f0 [ 591.561247] ? __lock_is_held+0xb6/0x140 16:57:12 executing program 1 (fault-call:2 fault-nth:2): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x3, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) [ 591.565323] ? check_preemption_disabled+0x48/0x290 [ 591.570352] dst_alloc+0x10e/0x1d0 [ 591.573904] rt_dst_alloc+0x83/0x3f0 [ 591.577633] ip_route_output_key_hash_rcu+0x97d/0x30e0 [ 591.582927] ? ip_route_input_noref+0x280/0x280 [ 591.587603] ? kasan_check_read+0x11/0x20 [ 591.591763] ip_route_output_key_hash+0x212/0x380 [ 591.596640] ? ip_route_output_key_hash_rcu+0x30e0/0x30e0 [ 591.602195] ? retint_kernel+0x2d/0x2d [ 591.606106] ip_route_output_flow+0x28/0xc0 [ 591.610452] raw_sendmsg+0xa10/0x2f10 [ 591.614277] ? raw_getsockopt+0x100/0x100 [ 591.618445] ? lockdep_hardirqs_on+0x415/0x5d0 [ 591.623048] ? process_measurement+0xd5d/0x1570 [ 591.627730] ? process_measurement+0xd5d/0x1570 [ 591.632413] ? mark_held_locks+0xb1/0x100 [ 591.636574] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 591.641346] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 591.641361] ? lockdep_hardirqs_on+0x415/0x5d0 [ 591.641373] ? retint_kernel+0x2d/0x2d [ 591.641387] ? trace_hardirqs_on_caller+0x6a/0x220 [ 591.641404] ? trace_hardirqs_on_thunk+0x1a/0x1c 16:57:12 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffff00000000, 0x600, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) [ 591.641423] ? retint_kernel+0x2d/0x2d [ 591.641443] inet_sendmsg+0x147/0x5d0 [ 591.650755] ? raw_getsockopt+0x100/0x100 [ 591.650769] ? inet_sendmsg+0x147/0x5d0 [ 591.650786] ? ipip_gro_receive+0x100/0x100 [ 591.650811] sock_sendmsg+0xdd/0x130 [ 591.650828] kernel_sendmsg+0x44/0x50 [ 591.650848] sock_no_sendpage+0x116/0x150 [ 591.650865] ? sock_kzfree_s+0x70/0x70 [ 591.688162] ? __lock_acquire+0x53b/0x4700 [ 591.688195] ? mark_held_locks+0xb1/0x100 [ 591.688211] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 591.688226] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 591.717846] inet_sendpage+0x44a/0x630 [ 591.721742] kernel_sendpage+0x95/0xf0 [ 591.725665] ? inet_sendmsg+0x5d0/0x5d0 [ 591.729667] sock_sendpage+0x8b/0xc0 [ 591.733408] pipe_to_sendpage+0x299/0x370 [ 591.737565] ? kernel_sendpage+0xf0/0xf0 [ 591.741642] ? direct_splice_actor+0x1a0/0x1a0 [ 591.746236] ? splice_from_pipe_next.part.0+0x26c/0x2f0 [ 591.751630] ? splice_from_pipe_next.part.0+0x255/0x2f0 [ 591.757011] __splice_from_pipe+0x39a/0x7e0 [ 591.761360] ? direct_splice_actor+0x1a0/0x1a0 16:57:12 executing program 5: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x3, 0x2) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) splice(r0, 0x0, r2, 0x0, 0x1ffe0, 0xdc050000) [ 591.765966] ? direct_splice_actor+0x1a0/0x1a0 [ 591.770554] splice_from_pipe+0x108/0x170 [ 591.774711] ? splice_shrink_spd+0xd0/0xd0 [ 591.778969] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 591.784519] ? security_file_permission+0x94/0x320 [ 591.789467] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 591.794231] generic_splice_sendpage+0x3c/0x50 [ 591.794246] ? splice_from_pipe+0x170/0x170 [ 591.794275] do_splice+0x70a/0x1490 [ 591.794297] ? retint_kernel+0x2d/0x2d [ 591.794319] ? opipe_prep.part.0+0x2d0/0x2d0 [ 591.806960] __x64_sys_splice+0x2c6/0x330 [ 591.806986] do_syscall_64+0x103/0x610 [ 591.807006] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 591.807021] RIP: 0033:0x457e29 [ 591.831711] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 591.850620] RSP: 002b:00007f7b371ddc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 591.858335] RAX: ffffffffffffffda RBX: 00007f7b371ddc90 RCX: 0000000000457e29 [ 591.865619] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000003 [ 591.872891] RBP: 000000000073bfa0 R08: 0000000000010005 R09: 0a00000000000000 [ 591.880165] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f7b371de6d4 [ 591.887437] R13: 00000000004c6c75 R14: 00000000004db870 R15: 0000000000000007 [ 591.943378] FAULT_INJECTION: forcing a failure. [ 591.943378] name failslab, interval 1, probability 0, space 0, times 0 [ 591.988386] CPU: 0 PID: 25469 Comm: syz-executor.1 Not tainted 5.0.0+ #6 [ 591.995240] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 592.004600] Call Trace: [ 592.007210] dump_stack+0x172/0x1f0 [ 592.010860] should_fail.cold+0xa/0x1b [ 592.014751] ? __netlink_lookup+0x3c8/0x7a0 [ 592.019079] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 592.024191] ? netlink_deliver_tap+0x146/0xbf0 [ 592.028777] __should_failslab+0x121/0x190 [ 592.033034] should_failslab+0x9/0x14 [ 592.036845] kmem_cache_alloc+0x47/0x6f0 [ 592.040889] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 592.046410] ? check_preemption_disabled+0x48/0x290 [ 592.051408] ? lock_acquire+0x16f/0x3f0 [ 592.055368] skb_clone+0x150/0x3b0 [ 592.058888] netlink_deliver_tap+0x952/0xbf0 [ 592.063283] netlink_unicast+0x5a7/0x720 [ 592.067345] ? netlink_attachskb+0x770/0x770 [ 592.071736] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 592.076734] ? __check_object_size+0x3d/0x42f [ 592.081212] netlink_sendmsg+0x8ae/0xd70 [ 592.085272] ? netlink_unicast+0x720/0x720 [ 592.089495] ? smack_socket_sendmsg+0xb1/0x1a0 [ 592.094057] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 592.099611] ? security_socket_sendmsg+0x93/0xc0 [ 592.104349] ? netlink_unicast+0x720/0x720 [ 592.108565] sock_sendmsg+0xdd/0x130 [ 592.112260] ___sys_sendmsg+0x806/0x930 [ 592.116242] ? copy_msghdr_from_user+0x430/0x430 [ 592.121011] ? lock_downgrade+0x810/0x810 [ 592.125140] ? kasan_check_read+0x11/0x20 [ 592.129294] ? __fget+0x367/0x540 [ 592.132741] ? iterate_fd+0x360/0x360 [ 592.136530] ? lock_downgrade+0x810/0x810 [ 592.140666] ? __fget_light+0x1a9/0x230 [ 592.144621] ? __fdget+0x1b/0x20 [ 592.147984] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 592.153518] __sys_sendmsg+0x105/0x1d0 [ 592.157437] ? __ia32_sys_shutdown+0x80/0x80 [ 592.161833] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 592.167366] ? fput+0x128/0x1a0 [ 592.170646] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 592.175385] ? do_syscall_64+0x26/0x610 [ 592.179360] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 592.184711] ? do_syscall_64+0x26/0x610 [ 592.188669] __x64_sys_sendmsg+0x78/0xb0 [ 592.192758] do_syscall_64+0x103/0x610 [ 592.196646] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 592.201831] RIP: 0033:0x457e29 [ 592.205017] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 592.223908] RSP: 002b:00007f784c0bfc78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 592.231597] RAX: ffffffffffffffda RBX: 00007f784c0bfc90 RCX: 0000000000457e29 16:57:13 executing program 2: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x3, 0x2) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) splice(r0, 0x0, r2, 0x0, 0x10005, 0xa00000000000000) 16:57:13 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1, 0x0, 0x0, 0xa00000000000000}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) 16:57:13 executing program 0 (fault-call:8 fault-nth:1): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x3, 0x2) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) splice(r0, 0x0, r2, 0x0, 0x100e0, 0x0) 16:57:13 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffff00000000, 0xa00, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) [ 592.238847] RDX: 0000000000000000 RSI: 0000000020000300 RDI: 0000000000000003 [ 592.246097] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 592.253367] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f784c0c06d4 [ 592.260617] R13: 00000000004c54d4 R14: 00000000004d93b0 R15: 0000000000000004 16:57:13 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1, 0x0, 0x0, 0xa00000000000000}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) 16:57:13 executing program 1 (fault-call:2 fault-nth:3): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x3, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) 16:57:13 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffff00000000, 0xc00, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) [ 592.361944] FAULT_INJECTION: forcing a failure. [ 592.361944] name failslab, interval 1, probability 0, space 0, times 0 [ 592.416220] FAULT_INJECTION: forcing a failure. [ 592.416220] name failslab, interval 1, probability 0, space 0, times 0 [ 592.428496] CPU: 0 PID: 25482 Comm: syz-executor.0 Not tainted 5.0.0+ #6 [ 592.435368] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 592.444736] Call Trace: [ 592.447345] dump_stack+0x172/0x1f0 [ 592.450994] should_fail.cold+0xa/0x1b [ 592.454896] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 592.460027] ? lock_downgrade+0x810/0x810 [ 592.464188] ? ___might_sleep+0x163/0x280 [ 592.468353] __should_failslab+0x121/0x190 [ 592.472616] should_failslab+0x9/0x14 [ 592.476424] kmem_cache_alloc_node+0x264/0x710 [ 592.481020] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 592.485799] __alloc_skb+0xd5/0x5e0 [ 592.489443] ? skb_scrub_packet+0x440/0x440 [ 592.493777] ? raw_destroy+0x30/0x30 [ 592.497501] ? __ip_append_data.isra.0+0xa7/0x2dd0 [ 592.502470] __ip_append_data.isra.0+0x24d6/0x2dd0 [ 592.507412] ? raw_destroy+0x30/0x30 [ 592.511131] ? lockdep_hardirqs_on+0x19b/0x5d0 [ 592.515719] ? trace_hardirqs_on_caller+0x6a/0x220 [ 592.520663] ? __ip_flush_pending_frames.isra.0+0x2d0/0x2d0 [ 592.526373] ? ipv4_mtu+0x2a9/0x400 [ 592.530011] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 592.535551] ? ip_setup_cork+0x53b/0x870 [ 592.539617] ? raw_destroy+0x30/0x30 [ 592.543334] ip_append_data.part.0+0xf2/0x170 [ 592.547840] ? raw_destroy+0x30/0x30 [ 592.551557] ip_append_data+0x6e/0x90 [ 592.555371] raw_sendmsg+0xbd8/0x2f10 [ 592.559193] ? raw_getsockopt+0x100/0x100 [ 592.563345] ? ima_match_policy+0xa19/0x13d0 [ 592.567765] ? process_measurement+0xd5d/0x1570 [ 592.572439] ? process_measurement+0xd5d/0x1570 [ 592.577120] ? mark_held_locks+0xb1/0x100 [ 592.581283] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 592.586064] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 592.590820] ? lockdep_hardirqs_on+0x415/0x5d0 [ 592.595405] ? retint_kernel+0x2d/0x2d [ 592.599328] ? trace_hardirqs_on_caller+0x6a/0x220 [ 592.604275] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 592.609083] ? retint_kernel+0x2d/0x2d [ 592.612985] inet_sendmsg+0x147/0x5d0 [ 592.616791] ? raw_getsockopt+0x100/0x100 [ 592.620957] ? inet_sendmsg+0x147/0x5d0 [ 592.624949] ? ipip_gro_receive+0x100/0x100 [ 592.629307] sock_sendmsg+0xdd/0x130 [ 592.633029] kernel_sendmsg+0x44/0x50 [ 592.636843] sock_no_sendpage+0x116/0x150 [ 592.641003] ? sock_kzfree_s+0x70/0x70 [ 592.644897] ? __lock_acquire+0x53b/0x4700 [ 592.649158] inet_sendpage+0x44a/0x630 [ 592.653058] kernel_sendpage+0x95/0xf0 [ 592.656946] ? inet_sendmsg+0x5d0/0x5d0 [ 592.660939] sock_sendpage+0x8b/0xc0 [ 592.664664] pipe_to_sendpage+0x299/0x370 [ 592.668827] ? kernel_sendpage+0xf0/0xf0 [ 592.672891] ? direct_splice_actor+0x1a0/0x1a0 [ 592.677477] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 592.683037] ? splice_from_pipe_next.part.0+0x255/0x2f0 [ 592.688417] __splice_from_pipe+0x39a/0x7e0 [ 592.692757] ? direct_splice_actor+0x1a0/0x1a0 [ 592.697368] ? direct_splice_actor+0x1a0/0x1a0 [ 592.701955] splice_from_pipe+0x108/0x170 [ 592.706109] ? splice_shrink_spd+0xd0/0xd0 [ 592.710356] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 592.715902] ? security_file_permission+0x94/0x320 [ 592.720837] generic_splice_sendpage+0x3c/0x50 [ 592.725418] ? splice_from_pipe+0x170/0x170 [ 592.729745] do_splice+0x70a/0x1490 [ 592.733390] ? iterate_fd+0x360/0x360 [ 592.737208] ? opipe_prep.part.0+0x2d0/0x2d0 [ 592.741628] ? __fget_light+0x1a9/0x230 [ 592.745610] __x64_sys_splice+0x2c6/0x330 [ 592.749770] do_syscall_64+0x103/0x610 [ 592.753661] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 592.758856] RIP: 0033:0x457e29 [ 592.762071] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 592.780978] RSP: 002b:00007f2baa4adc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 592.788696] RAX: ffffffffffffffda RBX: 00007f2baa4adc90 RCX: 0000000000457e29 [ 592.795964] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000003 [ 592.803236] RBP: 000000000073bfa0 R08: 00000000000100e0 R09: 0000000000000000 [ 592.810527] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f2baa4ae6d4 16:57:13 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1, 0x0, 0x0, 0xa00000000000000}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) [ 592.817812] R13: 00000000004c6c75 R14: 00000000004db870 R15: 0000000000000007 [ 592.825156] CPU: 1 PID: 25487 Comm: syz-executor.1 Not tainted 5.0.0+ #6 [ 592.832014] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 592.841364] Call Trace: [ 592.843953] dump_stack+0x172/0x1f0 [ 592.847595] should_fail.cold+0xa/0x1b [ 592.851490] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 592.856609] ? lock_downgrade+0x810/0x810 [ 592.860771] ? ___might_sleep+0x163/0x280 16:57:13 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffff00000000, 0xe00, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) [ 592.864944] __should_failslab+0x121/0x190 [ 592.869194] should_failslab+0x9/0x14 [ 592.873001] kmem_cache_alloc_node+0x264/0x710 [ 592.877595] ? netdev_run_todo+0x5ea/0x7d0 [ 592.881854] __alloc_skb+0xd5/0x5e0 [ 592.881873] ? skb_scrub_packet+0x440/0x440 [ 592.881888] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 592.881902] ? neigh_xmit+0x840/0x840 [ 592.881934] netlink_ack+0x25c/0xb50 [ 592.889882] ? netlink_sendmsg+0xd70/0xd70 [ 592.889910] ? netlink_deliver_tap+0x22d/0xbf0 [ 592.889936] ? find_held_lock+0x35/0x130 [ 592.889958] netlink_rcv_skb+0x379/0x460 [ 592.889975] ? rtnetlink_put_metrics+0x560/0x560 [ 592.890004] ? netlink_ack+0xb50/0xb50 [ 592.928566] ? kasan_check_read+0x11/0x20 [ 592.932797] ? netlink_deliver_tap+0x254/0xbf0 [ 592.937406] rtnetlink_rcv+0x1d/0x30 [ 592.941130] netlink_unicast+0x536/0x720 [ 592.945203] ? netlink_attachskb+0x770/0x770 [ 592.946562] net_ratelimit: 28 callbacks suppressed [ 592.946570] neighbour: ndisc_cache: neighbor table overflow! [ 592.949621] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 592.949641] ? __check_object_size+0x3d/0x42f [ 592.949664] netlink_sendmsg+0x8ae/0xd70 [ 592.949689] ? netlink_unicast+0x720/0x720 [ 592.949712] ? smack_socket_sendmsg+0xb1/0x1a0 [ 592.949728] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 592.949773] ? security_socket_sendmsg+0x93/0xc0 [ 592.949786] ? netlink_unicast+0x720/0x720 [ 592.949821] sock_sendmsg+0xdd/0x130 [ 592.949838] ___sys_sendmsg+0x806/0x930 [ 592.949856] ? copy_msghdr_from_user+0x430/0x430 [ 592.949889] ? lock_downgrade+0x810/0x810 16:57:13 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffff00000000, 0xf00, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) [ 592.994481] neighbour: ndisc_cache: neighbor table overflow! [ 592.997460] ? kasan_check_read+0x11/0x20 [ 592.997482] ? __fget+0x367/0x540 [ 592.997503] ? iterate_fd+0x360/0x360 [ 592.997516] ? lock_downgrade+0x810/0x810 [ 592.997540] ? __fget_light+0x1a9/0x230 [ 593.039398] ? __fdget+0x1b/0x20 [ 593.042783] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 593.048354] __sys_sendmsg+0x105/0x1d0 [ 593.052247] ? __ia32_sys_shutdown+0x80/0x80 [ 593.052273] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 593.052290] ? fput+0x128/0x1a0 [ 593.052317] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 593.052333] ? do_syscall_64+0x26/0x610 [ 593.052352] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 593.079676] ? do_syscall_64+0x26/0x610 [ 593.083668] __x64_sys_sendmsg+0x78/0xb0 [ 593.087759] do_syscall_64+0x103/0x610 [ 593.091669] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 593.095508] neighbour: ndisc_cache: neighbor table overflow! [ 593.096875] RIP: 0033:0x457e29 16:57:14 executing program 1 (fault-call:2 fault-nth:4): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x3, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) 16:57:14 executing program 5: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x3, 0x2) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) splice(r0, 0x0, r2, 0x0, 0x1ffe0, 0xe8030000) [ 593.096891] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 593.096899] RSP: 002b:00007f784c0bfc78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 593.096914] RAX: ffffffffffffffda RBX: 00007f784c0bfc90 RCX: 0000000000457e29 [ 593.096936] RDX: 0000000000000000 RSI: 0000000020000300 RDI: 0000000000000003 [ 593.096944] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 593.096953] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f784c0c06d4 [ 593.096962] R13: 00000000004c54d4 R14: 00000000004d93b0 R15: 0000000000000004 16:57:14 executing program 2: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x3, 0x2) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) splice(r0, 0x0, r2, 0x0, 0x1000a, 0xa00000000000000) [ 593.189689] neighbour: ndisc_cache: neighbor table overflow! 16:57:14 executing program 0 (fault-call:8 fault-nth:2): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x3, 0x2) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) splice(r0, 0x0, r2, 0x0, 0x100e0, 0x0) 16:57:14 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffff00000000, 0x3f00, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) 16:57:14 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00'}) sendmsg$nl_route(r0, 0x0, 0x0) [ 593.271574] neighbour: ndisc_cache: neighbor table overflow! [ 593.277430] FAULT_INJECTION: forcing a failure. [ 593.277430] name failslab, interval 1, probability 0, space 0, times 0 [ 593.335693] CPU: 1 PID: 25512 Comm: syz-executor.1 Not tainted 5.0.0+ #6 [ 593.342551] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 593.351914] Call Trace: [ 593.354519] dump_stack+0x172/0x1f0 [ 593.356234] neighbour: ndisc_cache: neighbor table overflow! [ 593.358160] should_fail.cold+0xa/0x1b [ 593.367834] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 593.372947] ? lock_downgrade+0x810/0x810 [ 593.372960] neighbour: ndisc_cache: neighbor table overflow! [ 593.377103] ? ___might_sleep+0x163/0x280 [ 593.377128] __should_failslab+0x121/0x190 [ 593.377147] should_failslab+0x9/0x14 [ 593.377163] kmem_cache_alloc_node_trace+0x270/0x720 [ 593.377181] ? __alloc_skb+0xd5/0x5e0 [ 593.404508] ? rcu_lockdep_current_cpu_online+0xe3/0x130 [ 593.409971] __kmalloc_node_track_caller+0x3d/0x70 [ 593.414906] __kmalloc_reserve.isra.0+0x40/0xf0 [ 593.419604] __alloc_skb+0x10b/0x5e0 [ 593.423338] ? skb_scrub_packet+0x440/0x440 [ 593.427694] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 593.433254] ? neigh_xmit+0x840/0x840 [ 593.437063] netlink_ack+0x25c/0xb50 [ 593.440798] ? netlink_sendmsg+0xd70/0xd70 [ 593.445026] ? netlink_deliver_tap+0x22d/0xbf0 [ 593.449592] ? find_held_lock+0x35/0x130 [ 593.453641] netlink_rcv_skb+0x379/0x460 [ 593.457708] ? rtnetlink_put_metrics+0x560/0x560 [ 593.462467] ? netlink_ack+0xb50/0xb50 [ 593.466364] ? kasan_check_read+0x11/0x20 [ 593.470504] ? netlink_deliver_tap+0x254/0xbf0 [ 593.475074] rtnetlink_rcv+0x1d/0x30 [ 593.478784] netlink_unicast+0x536/0x720 [ 593.482866] ? netlink_attachskb+0x770/0x770 [ 593.487275] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 593.492331] ? __check_object_size+0x3d/0x42f [ 593.496827] netlink_sendmsg+0x8ae/0xd70 [ 593.500896] ? netlink_unicast+0x720/0x720 [ 593.505171] ? smack_socket_sendmsg+0xb1/0x1a0 [ 593.509758] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 593.515314] ? security_socket_sendmsg+0x93/0xc0 [ 593.520078] ? netlink_unicast+0x720/0x720 [ 593.524323] sock_sendmsg+0xdd/0x130 [ 593.528080] ___sys_sendmsg+0x806/0x930 [ 593.532092] ? copy_msghdr_from_user+0x430/0x430 [ 593.536850] ? lock_downgrade+0x810/0x810 [ 593.540993] ? kasan_check_read+0x11/0x20 [ 593.545165] ? __fget+0x367/0x540 [ 593.548620] ? iterate_fd+0x360/0x360 [ 593.552404] ? lock_downgrade+0x810/0x810 [ 593.556538] ? __fget_light+0x1a9/0x230 [ 593.560518] ? __fdget+0x1b/0x20 [ 593.563903] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 593.569434] __sys_sendmsg+0x105/0x1d0 [ 593.573311] ? __ia32_sys_shutdown+0x80/0x80 [ 593.577743] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 593.583294] ? fput+0x128/0x1a0 [ 593.586596] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 593.591336] ? do_syscall_64+0x26/0x610 [ 593.595297] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 593.600655] ? do_syscall_64+0x26/0x610 [ 593.604641] __x64_sys_sendmsg+0x78/0xb0 [ 593.608697] do_syscall_64+0x103/0x610 [ 593.612580] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 593.617763] RIP: 0033:0x457e29 16:57:14 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00'}) sendmsg$nl_route(r0, 0x0, 0x0) 16:57:14 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffff00000000, 0x5865, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) [ 593.620969] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 593.639877] RSP: 002b:00007f784c0bfc78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 593.647610] RAX: ffffffffffffffda RBX: 00007f784c0bfc90 RCX: 0000000000457e29 [ 593.654884] RDX: 0000000000000000 RSI: 0000000020000300 RDI: 0000000000000003 [ 593.662151] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 593.669412] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f784c0c06d4 [ 593.676659] R13: 00000000004c54d4 R14: 00000000004d93b0 R15: 0000000000000004 [ 593.699647] FAULT_INJECTION: forcing a failure. [ 593.699647] name failslab, interval 1, probability 0, space 0, times 0 [ 593.738852] CPU: 1 PID: 25529 Comm: syz-executor.0 Not tainted 5.0.0+ #6 [ 593.745718] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 593.755075] Call Trace: [ 593.757688] dump_stack+0x172/0x1f0 [ 593.761384] should_fail.cold+0xa/0x1b [ 593.765298] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 593.770415] ? lock_downgrade+0x810/0x810 [ 593.774621] ? ___might_sleep+0x163/0x280 [ 593.778799] __should_failslab+0x121/0x190 [ 593.783053] should_failslab+0x9/0x14 [ 593.786896] kmem_cache_alloc_node_trace+0x270/0x720 [ 593.792009] ? __alloc_skb+0xd5/0x5e0 [ 593.795832] ? rcu_lockdep_current_cpu_online+0xe3/0x130 [ 593.801309] __kmalloc_node_track_caller+0x3d/0x70 [ 593.806253] __kmalloc_reserve.isra.0+0x40/0xf0 [ 593.810956] __alloc_skb+0x10b/0x5e0 [ 593.814681] ? skb_scrub_packet+0x440/0x440 [ 593.819031] ? rt_set_nexthop.constprop.0+0x529/0x11d0 [ 593.824333] __ip_append_data.isra.0+0x24d6/0x2dd0 [ 593.829309] ? raw_destroy+0x30/0x30 [ 593.833055] ? __ip_flush_pending_frames.isra.0+0x2d0/0x2d0 [ 593.838781] ? ipv4_mtu+0x2a9/0x400 [ 593.842427] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 16:57:14 executing program 1 (fault-call:2 fault-nth:5): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x3, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) [ 593.847983] ? ip_setup_cork+0x53b/0x870 [ 593.852042] ? raw_destroy+0x30/0x30 [ 593.855775] ip_append_data.part.0+0xf2/0x170 [ 593.860303] ? raw_destroy+0x30/0x30 [ 593.864073] ip_append_data+0x6e/0x90 [ 593.867909] raw_sendmsg+0xbd8/0x2f10 [ 593.871743] ? raw_getsockopt+0x100/0x100 [ 593.875901] ? ima_match_policy+0xa19/0x13d0 [ 593.880317] ? process_measurement+0xd5d/0x1570 [ 593.884996] ? process_measurement+0xd5d/0x1570 [ 593.889681] ? lock_downgrade+0x810/0x810 [ 593.893850] ? __lock_acquire+0x53b/0x4700 [ 593.898104] ? __lock_acquire+0x53b/0x4700 [ 593.902362] inet_sendmsg+0x147/0x5d0 [ 593.906174] ? raw_getsockopt+0x100/0x100 [ 593.906864] neighbour: ndisc_cache: neighbor table overflow! [ 593.910327] ? inet_sendmsg+0x147/0x5d0 [ 593.910344] ? ipip_gro_receive+0x100/0x100 [ 593.910362] sock_sendmsg+0xdd/0x130 [ 593.910380] kernel_sendmsg+0x44/0x50 [ 593.910401] sock_no_sendpage+0x116/0x150 [ 593.910417] ? sock_kzfree_s+0x70/0x70 [ 593.910434] ? __lock_acquire+0x53b/0x4700 [ 593.910463] ? pipe_lock+0x6e/0x80 [ 593.910481] inet_sendpage+0x44a/0x630 [ 593.933482] neighbour: ndisc_cache: neighbor table overflow! [ 593.936243] kernel_sendpage+0x95/0xf0 [ 593.936257] ? inet_sendmsg+0x5d0/0x5d0 [ 593.936284] sock_sendpage+0x8b/0xc0 [ 593.936296] ? pipe_lock+0x6e/0x80 [ 593.936316] pipe_to_sendpage+0x299/0x370 [ 593.936333] ? kernel_sendpage+0xf0/0xf0 [ 593.941078] FAULT_INJECTION: forcing a failure. [ 593.941078] name failslab, interval 1, probability 0, space 0, times 0 [ 593.944444] ? direct_splice_actor+0x1a0/0x1a0 [ 593.944462] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 593.944481] ? splice_from_pipe_next.part.0+0x255/0x2f0 [ 593.944505] __splice_from_pipe+0x39a/0x7e0 [ 593.944538] ? direct_splice_actor+0x1a0/0x1a0 [ 594.016456] ? direct_splice_actor+0x1a0/0x1a0 [ 594.021057] splice_from_pipe+0x108/0x170 [ 594.025210] ? splice_shrink_spd+0xd0/0xd0 [ 594.029469] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 594.035014] ? security_file_permission+0x94/0x320 [ 594.039964] generic_splice_sendpage+0x3c/0x50 [ 594.044552] ? splice_from_pipe+0x170/0x170 [ 594.048891] do_splice+0x70a/0x1490 [ 594.052522] ? iterate_fd+0x360/0x360 [ 594.056343] ? opipe_prep.part.0+0x2d0/0x2d0 [ 594.060776] ? __fget_light+0x1a9/0x230 [ 594.064767] __x64_sys_splice+0x2c6/0x330 [ 594.068934] do_syscall_64+0x103/0x610 [ 594.072838] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 594.078033] RIP: 0033:0x457e29 [ 594.081245] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 16:57:14 executing program 5: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x3, 0x2) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) splice(r0, 0x0, r2, 0x0, 0x1ffe0, 0xf4010000) 16:57:14 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00'}) sendmsg$nl_route(r0, 0x0, 0x0) [ 594.100173] RSP: 002b:00007f2baa4adc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 594.107878] RAX: ffffffffffffffda RBX: 00007f2baa4adc90 RCX: 0000000000457e29 [ 594.115151] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000003 [ 594.115160] RBP: 000000000073bfa0 R08: 00000000000100e0 R09: 0000000000000000 [ 594.115180] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f2baa4ae6d4 [ 594.115188] R13: 00000000004c6c75 R14: 00000000004db870 R15: 0000000000000007 [ 594.157871] CPU: 0 PID: 25535 Comm: syz-executor.1 Not tainted 5.0.0+ #6 [ 594.164723] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 594.174086] Call Trace: [ 594.176685] dump_stack+0x172/0x1f0 [ 594.180341] should_fail.cold+0xa/0x1b [ 594.182432] neighbour: ndisc_cache: neighbor table overflow! [ 594.184231] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 594.184246] ? find_held_lock+0x35/0x130 [ 594.184272] ? netlink_deliver_tap+0x146/0xbf0 [ 594.203782] __should_failslab+0x121/0x190 [ 594.208031] should_failslab+0x9/0x14 [ 594.211839] kmem_cache_alloc+0x47/0x6f0 [ 594.215905] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 594.221445] ? check_preemption_disabled+0x48/0x290 [ 594.226487] ? lock_acquire+0x16f/0x3f0 [ 594.230480] skb_clone+0x150/0x3b0 [ 594.234037] netlink_deliver_tap+0x952/0xbf0 [ 594.238468] __netlink_sendskb+0x63/0xd0 [ 594.242544] netlink_unicast+0x60f/0x720 [ 594.246629] ? netlink_attachskb+0x770/0x770 [ 594.251068] netlink_ack+0x607/0xb50 [ 594.254795] ? netlink_sendmsg+0xd70/0xd70 [ 594.259034] ? netlink_deliver_tap+0x22d/0xbf0 [ 594.263625] ? find_held_lock+0x35/0x130 [ 594.267702] netlink_rcv_skb+0x379/0x460 [ 594.271776] ? rtnetlink_put_metrics+0x560/0x560 [ 594.276541] ? netlink_ack+0xb50/0xb50 [ 594.280434] ? kasan_check_read+0x11/0x20 [ 594.284596] ? netlink_deliver_tap+0x254/0xbf0 [ 594.289190] rtnetlink_rcv+0x1d/0x30 [ 594.292912] netlink_unicast+0x536/0x720 [ 594.292935] ? netlink_attachskb+0x770/0x770 [ 594.292951] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 594.292971] ? __check_object_size+0x3d/0x42f [ 594.301427] netlink_sendmsg+0x8ae/0xd70 [ 594.301450] ? netlink_unicast+0x720/0x720 [ 594.301472] ? smack_socket_sendmsg+0xb1/0x1a0 [ 594.301488] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 594.329370] ? security_socket_sendmsg+0x93/0xc0 [ 594.334137] ? netlink_unicast+0x720/0x720 [ 594.338389] sock_sendmsg+0xdd/0x130 [ 594.342127] ___sys_sendmsg+0x806/0x930 [ 594.346109] ? copy_msghdr_from_user+0x430/0x430 [ 594.350887] ? lock_downgrade+0x810/0x810 [ 594.355082] ? kasan_check_read+0x11/0x20 [ 594.359243] ? __fget+0x367/0x540 [ 594.359275] ? iterate_fd+0x360/0x360 [ 594.359302] ? finish_task_switch+0x146/0x790 [ 594.359316] ? finish_task_switch+0x118/0x790 [ 594.359330] ? __switch_to_asm+0x34/0x70 [ 594.359346] ? __switch_to_asm+0x40/0x70 [ 594.366589] ? __fget_light+0x1a9/0x230 [ 594.387627] ? __fdget+0x1b/0x20 [ 594.390997] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 594.396547] __sys_sendmsg+0x105/0x1d0 [ 594.400446] ? __ia32_sys_shutdown+0x80/0x80 16:57:14 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffff00000000, 0x6000, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) 16:57:15 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00'}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) 16:57:15 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffff00000000, 0x6558, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) 16:57:15 executing program 2: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x3, 0x2) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) splice(r0, 0x0, r2, 0x0, 0x10005, 0x100000000000000) [ 594.404867] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 594.409644] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 594.414407] ? do_syscall_64+0x26/0x610 [ 594.418383] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 594.423760] ? do_syscall_64+0x26/0x610 [ 594.427755] __x64_sys_sendmsg+0x78/0xb0 [ 594.431817] do_syscall_64+0x103/0x610 [ 594.435702] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 594.440884] RIP: 0033:0x457e29 16:57:15 executing program 0 (fault-call:8 fault-nth:3): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x3, 0x2) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) splice(r0, 0x0, r2, 0x0, 0x100e0, 0x0) 16:57:15 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00'}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) 16:57:15 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffff00000000, 0x8100, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) [ 594.444057] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 594.462952] RSP: 002b:00007f784c0bfc78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 594.470682] RAX: ffffffffffffffda RBX: 00007f784c0bfc90 RCX: 0000000000457e29 [ 594.477959] RDX: 0000000000000000 RSI: 0000000020000300 RDI: 0000000000000003 [ 594.485237] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 594.492534] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f784c0c06d4 [ 594.499806] R13: 00000000004c54d4 R14: 00000000004d93b0 R15: 0000000000000004 16:57:15 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffff00000000, 0x8202, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) 16:57:15 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00'}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) 16:57:15 executing program 1 (fault-call:2 fault-nth:6): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x3, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) [ 594.630561] FAULT_INJECTION: forcing a failure. [ 594.630561] name failslab, interval 1, probability 0, space 0, times 0 [ 594.647152] CPU: 1 PID: 25572 Comm: syz-executor.0 Not tainted 5.0.0+ #6 [ 594.654009] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 594.663365] Call Trace: [ 594.665967] dump_stack+0x172/0x1f0 [ 594.669625] should_fail.cold+0xa/0x1b [ 594.673536] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 594.678677] ? lock_downgrade+0x810/0x810 [ 594.682848] ? ___might_sleep+0x163/0x280 [ 594.687007] __should_failslab+0x121/0x190 [ 594.691251] should_failslab+0x9/0x14 [ 594.695077] kmem_cache_alloc_node+0x264/0x710 [ 594.695095] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 594.695113] ? ip_generic_getfrag+0x120/0x230 [ 594.695148] __alloc_skb+0xd5/0x5e0 [ 594.695164] ? skb_scrub_packet+0x440/0x440 [ 594.709768] ? raw_getfrag+0x164/0x230 [ 594.709782] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 594.709813] __ip_append_data.isra.0+0x24d6/0x2dd0 [ 594.709838] ? raw_destroy+0x30/0x30 [ 594.709867] ? __ip_flush_pending_frames.isra.0+0x2d0/0x2d0 [ 594.709883] ? ipv4_mtu+0x2a9/0x400 [ 594.744671] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 594.750216] ? ip_setup_cork+0x53b/0x870 [ 594.754295] ? raw_destroy+0x30/0x30 [ 594.758029] ip_append_data.part.0+0xf2/0x170 [ 594.758050] ? raw_destroy+0x30/0x30 [ 594.758067] ip_append_data+0x6e/0x90 [ 594.758089] raw_sendmsg+0xbd8/0x2f10 [ 594.773933] ? raw_getsockopt+0x100/0x100 [ 594.778095] ? ima_match_policy+0xa19/0x13d0 [ 594.782512] ? process_measurement+0xd5d/0x1570 [ 594.787194] ? process_measurement+0xd5d/0x1570 [ 594.791866] ? lock_downgrade+0x810/0x810 [ 594.796026] ? __lock_acquire+0x53b/0x4700 [ 594.800278] ? __lock_acquire+0x53b/0x4700 [ 594.804546] inet_sendmsg+0x147/0x5d0 [ 594.808350] ? raw_getsockopt+0x100/0x100 [ 594.812500] ? inet_sendmsg+0x147/0x5d0 [ 594.816484] ? ipip_gro_receive+0x100/0x100 [ 594.820798] sock_sendmsg+0xdd/0x130 [ 594.824516] kernel_sendmsg+0x44/0x50 [ 594.828344] sock_no_sendpage+0x116/0x150 [ 594.832502] ? sock_kzfree_s+0x70/0x70 [ 594.836374] ? __lock_acquire+0x53b/0x4700 [ 594.840612] ? nf_osf_match_one+0x700/0xbc0 [ 594.844929] ? pipe_lock+0x6e/0x80 [ 594.848479] inet_sendpage+0x44a/0x630 [ 594.852355] kernel_sendpage+0x95/0xf0 [ 594.856238] ? inet_sendmsg+0x5d0/0x5d0 [ 594.860213] sock_sendpage+0x8b/0xc0 [ 594.863906] ? pipe_lock+0x6e/0x80 [ 594.867434] pipe_to_sendpage+0x299/0x370 [ 594.871562] ? kernel_sendpage+0xf0/0xf0 [ 594.875619] ? direct_splice_actor+0x1a0/0x1a0 [ 594.880204] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 594.885722] ? splice_from_pipe_next.part.0+0x255/0x2f0 [ 594.891069] __splice_from_pipe+0x39a/0x7e0 [ 594.895381] ? direct_splice_actor+0x1a0/0x1a0 [ 594.899966] ? direct_splice_actor+0x1a0/0x1a0 [ 594.904546] splice_from_pipe+0x108/0x170 [ 594.908715] ? splice_shrink_spd+0xd0/0xd0 [ 594.912948] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 594.918469] ? security_file_permission+0x94/0x320 [ 594.923384] generic_splice_sendpage+0x3c/0x50 [ 594.927948] ? splice_from_pipe+0x170/0x170 [ 594.932257] do_splice+0x70a/0x1490 [ 594.935892] ? iterate_fd+0x360/0x360 [ 594.939686] ? opipe_prep.part.0+0x2d0/0x2d0 [ 594.944076] ? __fget_light+0x1a9/0x230 [ 594.948033] __x64_sys_splice+0x2c6/0x330 [ 594.952169] do_syscall_64+0x103/0x610 [ 594.956054] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 594.961249] RIP: 0033:0x457e29 [ 594.964437] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 594.983326] RSP: 002b:00007f2baa4adc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 594.991028] RAX: ffffffffffffffda RBX: 00007f2baa4adc90 RCX: 0000000000457e29 [ 594.998320] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000003 [ 595.005583] RBP: 000000000073bfa0 R08: 00000000000100e0 R09: 0000000000000000 [ 595.012835] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f2baa4ae6d4 [ 595.020088] R13: 00000000004c6c75 R14: 00000000004db870 R15: 0000000000000007 16:57:16 executing program 5: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x3, 0x2) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) splice(r0, 0x0, r2, 0x0, 0x1ffe0, 0xffffff97) 16:57:16 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffff00000000, 0x9d02, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) 16:57:16 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x3, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) 16:57:16 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00'}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) 16:57:16 executing program 2: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x3, 0x2) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) splice(r0, 0x0, r2, 0x0, 0x10005, 0x200000000000000) 16:57:16 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffff00000000, 0xf000, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) 16:57:16 executing program 0 (fault-call:8 fault-nth:4): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x3, 0x2) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) splice(r0, 0x0, r2, 0x0, 0x100e0, 0x0) 16:57:16 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x2, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x3, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) 16:57:16 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00'}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) 16:57:16 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffff00000000, 0x34000, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) 16:57:16 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00'}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) 16:57:16 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffff00000000, 0x400300, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) [ 595.523223] FAULT_INJECTION: forcing a failure. [ 595.523223] name failslab, interval 1, probability 0, space 0, times 0 [ 595.623928] CPU: 0 PID: 25619 Comm: syz-executor.0 Not tainted 5.0.0+ #6 [ 595.630789] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 595.640140] Call Trace: [ 595.640171] dump_stack+0x172/0x1f0 [ 595.640196] should_fail.cold+0xa/0x1b [ 595.640231] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 595.640271] ? lock_downgrade+0x810/0x810 [ 595.640301] ? ___might_sleep+0x163/0x280 [ 595.640330] __should_failslab+0x121/0x190 [ 595.646538] should_failslab+0x9/0x14 [ 595.646555] kmem_cache_alloc_node_trace+0x270/0x720 [ 595.646574] ? __alloc_skb+0xd5/0x5e0 [ 595.646594] ? rcu_lockdep_current_cpu_online+0xe3/0x130 [ 595.646616] __kmalloc_node_track_caller+0x3d/0x70 [ 595.646635] __kmalloc_reserve.isra.0+0x40/0xf0 [ 595.695842] __alloc_skb+0x10b/0x5e0 [ 595.699560] ? skb_scrub_packet+0x440/0x440 [ 595.703895] ? raw_getfrag+0x164/0x230 [ 595.707780] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 595.712790] __ip_append_data.isra.0+0x24d6/0x2dd0 [ 595.717735] ? raw_destroy+0x30/0x30 [ 595.721455] ? __ip_flush_pending_frames.isra.0+0x2d0/0x2d0 [ 595.727152] ? ipv4_mtu+0x2a9/0x400 [ 595.730801] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 595.736336] ? ip_setup_cork+0x53b/0x870 [ 595.740384] ? raw_destroy+0x30/0x30 [ 595.744112] ip_append_data.part.0+0xf2/0x170 [ 595.748622] ? raw_destroy+0x30/0x30 [ 595.752341] ip_append_data+0x6e/0x90 [ 595.756143] raw_sendmsg+0xbd8/0x2f10 [ 595.759945] ? raw_getsockopt+0x100/0x100 [ 595.764101] ? ima_match_policy+0xa19/0x13d0 [ 595.768511] ? process_measurement+0xd5d/0x1570 [ 595.773218] ? process_measurement+0xd5d/0x1570 [ 595.777891] ? lock_downgrade+0x810/0x810 [ 595.782061] ? __lock_acquire+0x53b/0x4700 [ 595.786301] ? mark_held_locks+0xb1/0x100 [ 595.790479] inet_sendmsg+0x147/0x5d0 [ 595.794317] ? raw_getsockopt+0x100/0x100 [ 595.798464] ? inet_sendmsg+0x147/0x5d0 [ 595.802431] ? ipip_gro_receive+0x100/0x100 [ 595.806747] sock_sendmsg+0xdd/0x130 [ 595.810448] kernel_sendmsg+0x44/0x50 [ 595.814236] sock_no_sendpage+0x116/0x150 [ 595.818385] ? sock_kzfree_s+0x70/0x70 [ 595.822282] ? mark_held_locks+0xb1/0x100 [ 595.826443] ? trace_hardirqs_on_caller+0x6a/0x220 [ 595.831374] inet_sendpage+0x44a/0x630 [ 595.835246] kernel_sendpage+0x95/0xf0 [ 595.839123] ? inet_sendmsg+0x5d0/0x5d0 [ 595.843085] sock_sendpage+0x8b/0xc0 [ 595.846788] pipe_to_sendpage+0x299/0x370 [ 595.850947] ? kernel_sendpage+0xf0/0xf0 [ 595.854995] ? direct_splice_actor+0x1a0/0x1a0 [ 595.859562] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 595.865093] ? splice_from_pipe_next.part.0+0x255/0x2f0 [ 595.870459] __splice_from_pipe+0x39a/0x7e0 [ 595.874798] ? direct_splice_actor+0x1a0/0x1a0 [ 595.879372] ? direct_splice_actor+0x1a0/0x1a0 [ 595.883939] splice_from_pipe+0x108/0x170 [ 595.888100] ? splice_shrink_spd+0xd0/0xd0 [ 595.892334] ? splice_from_pipe+0x2c/0x170 [ 595.896580] generic_splice_sendpage+0x3c/0x50 [ 595.901172] ? splice_from_pipe+0x170/0x170 [ 595.905517] do_splice+0x70a/0x1490 [ 595.909135] ? retint_kernel+0x2d/0x2d [ 595.913035] ? opipe_prep.part.0+0x2d0/0x2d0 [ 595.917443] ? __x64_sys_splice+0x20e/0x330 [ 595.921762] __x64_sys_splice+0x2c6/0x330 [ 595.925912] do_syscall_64+0x103/0x610 [ 595.929789] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 595.934966] RIP: 0033:0x457e29 [ 595.938163] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 595.957077] RSP: 002b:00007f2baa4adc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 595.964771] RAX: ffffffffffffffda RBX: 00007f2baa4adc90 RCX: 0000000000457e29 [ 595.972028] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000003 [ 595.979294] RBP: 000000000073bfa0 R08: 00000000000100e0 R09: 0000000000000000 [ 595.986552] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f2baa4ae6d4 [ 595.993820] R13: 00000000004c6c75 R14: 00000000004db870 R15: 0000000000000007 16:57:16 executing program 5: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x3, 0x2) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) splice(r0, 0x0, r2, 0x0, 0x1ffe0, 0x1a0ffffffff) 16:57:16 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x3, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x3, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) 16:57:16 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffff00000000, 0x8000a0, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) 16:57:16 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, r1, 0x0, 0x0, 0xa00000000000000}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) 16:57:17 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x4, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x3, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) 16:57:17 executing program 2: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x3, 0x2) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) splice(r0, 0x0, r2, 0x0, 0x10005, 0x300000000000000) 16:57:17 executing program 0 (fault-call:8 fault-nth:5): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x3, 0x2) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) splice(r0, 0x0, r2, 0x0, 0x100e0, 0x0) 16:57:17 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, r1, 0x0, 0x0, 0xa00000000000000}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) 16:57:17 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffff00000000, 0xf0ffff, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) 16:57:17 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, r1, 0x0, 0x0, 0xa00000000000000}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) 16:57:17 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x6, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x3, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) 16:57:17 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffff00000000, 0x1000000, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) [ 596.405126] FAULT_INJECTION: forcing a failure. [ 596.405126] name failslab, interval 1, probability 0, space 0, times 0 [ 596.439369] CPU: 1 PID: 25662 Comm: syz-executor.0 Not tainted 5.0.0+ #6 [ 596.446222] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 596.455573] Call Trace: [ 596.458178] dump_stack+0x172/0x1f0 [ 596.461832] should_fail.cold+0xa/0x1b [ 596.465740] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 596.470872] ? lock_downgrade+0x810/0x810 [ 596.475025] ? ___might_sleep+0x163/0x280 [ 596.479196] __should_failslab+0x121/0x190 [ 596.483443] should_failslab+0x9/0x14 [ 596.487289] kmem_cache_alloc_node+0x264/0x710 [ 596.491883] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 596.497445] ? ip_generic_getfrag+0x120/0x230 [ 596.501982] __alloc_skb+0xd5/0x5e0 [ 596.505615] ? skb_scrub_packet+0x440/0x440 [ 596.509949] ? raw_getfrag+0x164/0x230 [ 596.513839] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 596.518867] __ip_append_data.isra.0+0x24d6/0x2dd0 [ 596.523825] ? raw_destroy+0x30/0x30 [ 596.527589] ? __ip_flush_pending_frames.isra.0+0x2d0/0x2d0 [ 596.533304] ? ipv4_mtu+0x2a9/0x400 [ 596.536940] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 596.542477] ? ip_setup_cork+0x53b/0x870 [ 596.546551] ? raw_destroy+0x30/0x30 [ 596.550301] ip_append_data.part.0+0xf2/0x170 [ 596.554817] ? raw_destroy+0x30/0x30 [ 596.558551] ip_append_data+0x6e/0x90 [ 596.562387] raw_sendmsg+0xbd8/0x2f10 [ 596.566209] ? raw_getsockopt+0x100/0x100 [ 596.570367] ? ima_match_policy+0xa19/0x13d0 [ 596.574797] ? process_measurement+0xd5d/0x1570 [ 596.579498] ? process_measurement+0xd5d/0x1570 [ 596.584192] ? lock_downgrade+0x810/0x810 [ 596.588355] ? __lock_acquire+0x53b/0x4700 [ 596.592623] ? __lock_acquire+0x53b/0x4700 [ 596.596880] inet_sendmsg+0x147/0x5d0 [ 596.600688] ? raw_getsockopt+0x100/0x100 [ 596.604853] ? inet_sendmsg+0x147/0x5d0 [ 596.608832] ? ipip_gro_receive+0x100/0x100 [ 596.613161] sock_sendmsg+0xdd/0x130 [ 596.616890] kernel_sendmsg+0x44/0x50 [ 596.620688] sock_no_sendpage+0x116/0x150 [ 596.624832] ? sock_kzfree_s+0x70/0x70 [ 596.628728] ? __lock_acquire+0x53b/0x4700 [ 596.632981] ? pipe_lock+0x6e/0x80 [ 596.636525] inet_sendpage+0x44a/0x630 [ 596.640401] kernel_sendpage+0x95/0xf0 [ 596.644280] ? inet_sendmsg+0x5d0/0x5d0 [ 596.648244] sock_sendpage+0x8b/0xc0 [ 596.651955] ? pipe_lock+0x6e/0x80 [ 596.655499] pipe_to_sendpage+0x299/0x370 [ 596.659641] ? kernel_sendpage+0xf0/0xf0 [ 596.663705] ? direct_splice_actor+0x1a0/0x1a0 [ 596.668290] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 596.673831] ? splice_from_pipe_next.part.0+0x255/0x2f0 [ 596.679195] __splice_from_pipe+0x39a/0x7e0 [ 596.683513] ? direct_splice_actor+0x1a0/0x1a0 [ 596.688097] ? direct_splice_actor+0x1a0/0x1a0 [ 596.692689] splice_from_pipe+0x108/0x170 [ 596.696834] ? splice_shrink_spd+0xd0/0xd0 [ 596.701057] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 596.706614] ? security_file_permission+0x94/0x320 [ 596.711543] generic_splice_sendpage+0x3c/0x50 [ 596.716135] ? splice_from_pipe+0x170/0x170 [ 596.720462] do_splice+0x70a/0x1490 [ 596.724088] ? iterate_fd+0x360/0x360 [ 596.727923] ? opipe_prep.part.0+0x2d0/0x2d0 [ 596.732330] ? __fget_light+0x1a9/0x230 [ 596.736306] __x64_sys_splice+0x2c6/0x330 [ 596.740462] do_syscall_64+0x103/0x610 [ 596.744340] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 596.749521] RIP: 0033:0x457e29 [ 596.752719] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 596.771657] RSP: 002b:00007f2baa4adc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 596.779370] RAX: ffffffffffffffda RBX: 00007f2baa4adc90 RCX: 0000000000457e29 [ 596.786645] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000003 [ 596.793904] RBP: 000000000073bfa0 R08: 00000000000100e0 R09: 0000000000000000 [ 596.801166] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f2baa4ae6d4 [ 596.808417] R13: 00000000004c6c75 R14: 00000000004db870 R15: 0000000000000007 16:57:17 executing program 5: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x3, 0x2) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) splice(r0, 0x0, r2, 0x0, 0x1ffe0, 0x8000a0ffffffff) 16:57:17 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0x0, 0x0, 0x0, r1, 0x0, 0x0, 0xa00000000000000}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) 16:57:17 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x8, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x3, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) 16:57:17 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffff00000000, 0x2000000, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) 16:57:18 executing program 2: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x3, 0x2) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) splice(r0, 0x0, r2, 0x0, 0x10005, 0x400000000000000) 16:57:18 executing program 0 (fault-call:8 fault-nth:6): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x3, 0x2) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) splice(r0, 0x0, r2, 0x0, 0x100e0, 0x0) 16:57:18 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0x0, 0x0, 0x0, r1, 0x0, 0x0, 0xa00000000000000}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) 16:57:18 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0xa, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x3, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) 16:57:18 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffff00000000, 0x3000000, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) [ 597.317746] FAULT_INJECTION: forcing a failure. [ 597.317746] name failslab, interval 1, probability 0, space 0, times 0 [ 597.339893] CPU: 0 PID: 25701 Comm: syz-executor.0 Not tainted 5.0.0+ #6 [ 597.346763] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 597.356158] Call Trace: [ 597.358762] dump_stack+0x172/0x1f0 [ 597.362429] should_fail.cold+0xa/0x1b [ 597.366339] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 597.371459] ? lock_downgrade+0x810/0x810 [ 597.375632] ? ___might_sleep+0x163/0x280 [ 597.379845] __should_failslab+0x121/0x190 [ 597.384110] should_failslab+0x9/0x14 [ 597.387919] kmem_cache_alloc_node_trace+0x270/0x720 [ 597.393209] ? __alloc_skb+0xd5/0x5e0 [ 597.397024] ? rcu_lockdep_current_cpu_online+0xe3/0x130 [ 597.402490] __kmalloc_node_track_caller+0x3d/0x70 [ 597.407430] __kmalloc_reserve.isra.0+0x40/0xf0 [ 597.412162] __alloc_skb+0x10b/0x5e0 [ 597.415891] ? skb_scrub_packet+0x440/0x440 [ 597.420230] ? __ip_append_data.isra.0+0x1c27/0x2dd0 [ 597.425369] __ip_append_data.isra.0+0x24d6/0x2dd0 [ 597.430320] ? retint_kernel+0x2d/0x2d [ 597.434228] ? raw_destroy+0x30/0x30 [ 597.437973] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 597.442754] ? __ip_flush_pending_frames.isra.0+0x2d0/0x2d0 [ 597.448503] ? ipv4_mtu+0x2a9/0x400 [ 597.452133] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 597.457677] ? ip_setup_cork+0x53b/0x870 [ 597.461745] ? raw_destroy+0x30/0x30 [ 597.465465] ip_append_data.part.0+0xf2/0x170 [ 597.469971] ? raw_destroy+0x30/0x30 [ 597.473675] ip_append_data+0x6e/0x90 [ 597.477475] raw_sendmsg+0xbd8/0x2f10 [ 597.481279] ? raw_getsockopt+0x100/0x100 [ 597.485421] ? ima_match_policy+0xa19/0x13d0 [ 597.489817] ? process_measurement+0xd5d/0x1570 [ 597.494475] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 597.499260] ? lockdep_hardirqs_on+0x415/0x5d0 [ 597.503926] ? retint_kernel+0x2d/0x2d [ 597.507816] ? trace_hardirqs_on_caller+0x6a/0x220 [ 597.512768] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 597.517537] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 597.522320] ? retint_kernel+0x2d/0x2d [ 597.526202] inet_sendmsg+0x147/0x5d0 [ 597.529987] ? raw_getsockopt+0x100/0x100 [ 597.534135] ? inet_sendmsg+0x147/0x5d0 [ 597.538095] ? ipip_gro_receive+0x100/0x100 [ 597.542421] sock_sendmsg+0xdd/0x130 [ 597.546162] kernel_sendmsg+0x44/0x50 [ 597.549963] sock_no_sendpage+0x116/0x150 [ 597.554141] ? sock_kzfree_s+0x70/0x70 [ 597.558048] ? mark_held_locks+0xb1/0x100 [ 597.562216] ? pipe_lock+0x6e/0x80 [ 597.565784] ? trace_hardirqs_on_caller+0x6a/0x220 [ 597.570715] inet_sendpage+0x44a/0x630 [ 597.574601] kernel_sendpage+0x95/0xf0 [ 597.578486] ? inet_sendmsg+0x5d0/0x5d0 [ 597.582472] sock_sendpage+0x8b/0xc0 [ 597.586200] pipe_to_sendpage+0x299/0x370 [ 597.590349] ? kernel_sendpage+0xf0/0xf0 [ 597.594460] ? direct_splice_actor+0x1a0/0x1a0 [ 597.599054] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 597.604606] ? splice_from_pipe_next.part.0+0x255/0x2f0 [ 597.609959] __splice_from_pipe+0x39a/0x7e0 [ 597.614287] ? direct_splice_actor+0x1a0/0x1a0 [ 597.618866] ? direct_splice_actor+0x1a0/0x1a0 [ 597.623457] splice_from_pipe+0x108/0x170 [ 597.627595] ? splice_shrink_spd+0xd0/0xd0 [ 597.631828] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 597.637354] ? security_file_permission+0x94/0x320 [ 597.642286] generic_splice_sendpage+0x3c/0x50 [ 597.646882] ? splice_from_pipe+0x170/0x170 [ 597.651211] do_splice+0x70a/0x1490 [ 597.654842] ? iterate_fd+0x360/0x360 [ 597.658631] ? opipe_prep.part.0+0x2d0/0x2d0 [ 597.663023] ? __fget_light+0x1a9/0x230 [ 597.666992] __x64_sys_splice+0x2c6/0x330 [ 597.671144] do_syscall_64+0x103/0x610 [ 597.675024] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 597.680195] RIP: 0033:0x457e29 [ 597.683369] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 597.702251] RSP: 002b:00007f2baa4adc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 597.709964] RAX: ffffffffffffffda RBX: 00007f2baa4adc90 RCX: 0000000000457e29 16:57:18 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0x0, 0x0, 0x0, r1, 0x0, 0x0, 0xa00000000000000}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) 16:57:18 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x3, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) 16:57:18 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffff00000000, 0x4000000, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) [ 597.717218] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000003 [ 597.724495] RBP: 000000000073bfa0 R08: 00000000000100e0 R09: 0000000000000000 [ 597.731749] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f2baa4ae6d4 [ 597.738999] R13: 00000000004c6c75 R14: 00000000004db870 R15: 0000000000000007 16:57:18 executing program 5: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x3, 0x2) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) splice(r0, 0x0, r2, 0x0, 0x1ffe0, 0x100000000000000) 16:57:18 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00'}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa00000000000000}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) 16:57:18 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffff00000000, 0x6000000, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) 16:57:18 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0xe, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x3, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) 16:57:18 executing program 2: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x3, 0x2) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) splice(r0, 0x0, r2, 0x0, 0x10005, 0x500000000000000) 16:57:18 executing program 0 (fault-call:8 fault-nth:7): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x3, 0x2) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) splice(r0, 0x0, r2, 0x0, 0x100e0, 0x0) [ 598.077796] net_ratelimit: 36 callbacks suppressed [ 598.077804] neighbour: ndisc_cache: neighbor table overflow! [ 598.103710] neighbour: ndisc_cache: neighbor table overflow! 16:57:19 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00'}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa00000000000000}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) [ 598.151747] neighbour: ndisc_cache: neighbor table overflow! [ 598.191010] neighbour: ndisc_cache: neighbor table overflow! 16:57:19 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0xf, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x3, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) 16:57:19 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffff00000000, 0x8000000, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) 16:57:19 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00'}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa00000000000000}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) [ 598.280989] FAULT_INJECTION: forcing a failure. [ 598.280989] name failslab, interval 1, probability 0, space 0, times 0 [ 598.350252] CPU: 0 PID: 25746 Comm: syz-executor.0 Not tainted 5.0.0+ #6 [ 598.357121] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 598.366477] Call Trace: [ 598.369080] dump_stack+0x172/0x1f0 [ 598.372728] should_fail.cold+0xa/0x1b [ 598.376626] ? __nf_conntrack_find_get+0xe45/0x1960 [ 598.381654] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 598.386762] ? lockdep_hardirqs_on+0x415/0x5d0 [ 598.391349] ? retint_kernel+0x2d/0x2d [ 598.395240] ? trace_hardirqs_on_caller+0x6a/0x220 [ 598.400207] __should_failslab+0x121/0x190 [ 598.404448] should_failslab+0x9/0x14 [ 598.408253] kmem_cache_alloc+0x47/0x6f0 [ 598.412336] ? retint_kernel+0x2d/0x2d [ 598.416233] __nf_conntrack_alloc+0xdb/0x680 [ 598.420680] init_conntrack.isra.0+0xe3a/0x1180 [ 598.425361] ? nf_conntrack_alloc+0x50/0x50 [ 598.429698] ? rcu_lockdep_current_cpu_online+0xe3/0x130 [ 598.435149] nf_conntrack_in+0xa68/0x1070 [ 598.439326] ? nf_conntrack_update+0x990/0x990 [ 598.443914] ? __do_replace+0x910/0x910 [ 598.447486] neighbour: ndisc_cache: neighbor table overflow! [ 598.447913] ? nf_hook_slow+0xd4/0x1f0 [ 598.457623] ipv4_conntrack_local+0x169/0x210 [ 598.461730] neighbour: ndisc_cache: neighbor table overflow! [ 598.462134] nf_hook_slow+0xbf/0x1f0 [ 598.462158] __ip_local_out+0x403/0x880 [ 598.462177] ? ip_finish_output+0xd50/0xd50 [ 598.462192] ? rcu_lockdep_current_cpu_online+0xe3/0x130 [ 598.462210] ? ip_append_data.part.0+0x170/0x170 [ 598.490195] ? dst_release+0x62/0xb0 [ 598.493915] ? __ip_make_skb+0xf93/0x1820 [ 598.498071] ip_local_out+0x2d/0x1b0 [ 598.498092] ip_send_skb+0x42/0xf0 [ 598.498110] ip_push_pending_frames+0x64/0x80 [ 598.498128] raw_sendmsg+0x1e5d/0x2f10 [ 598.498152] ? raw_getsockopt+0x100/0x100 [ 598.505376] ? find_held_lock+0x35/0x130 [ 598.505394] ? mark_held_locks+0xb1/0x100 [ 598.505412] ? lockdep_hardirqs_on+0x415/0x5d0 [ 598.505425] ? retint_kernel+0x2d/0x2d [ 598.505442] ? mark_held_locks+0xb1/0x100 [ 598.505459] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 598.543540] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 598.548314] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 598.553075] ? lockdep_hardirqs_on+0x415/0x5d0 [ 598.557670] ? retint_kernel+0x2d/0x2d [ 598.561572] ? trace_hardirqs_on_caller+0x6a/0x220 [ 598.566509] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 598.571295] inet_sendmsg+0x147/0x5d0 [ 598.575100] ? raw_getsockopt+0x100/0x100 [ 598.579244] ? inet_sendmsg+0x147/0x5d0 [ 598.583228] ? ipip_gro_receive+0x100/0x100 [ 598.587587] sock_sendmsg+0xdd/0x130 [ 598.591347] kernel_sendmsg+0x44/0x50 [ 598.595178] sock_no_sendpage+0x116/0x150 [ 598.599331] ? sock_kzfree_s+0x70/0x70 [ 598.599347] ? __lock_acquire+0x53b/0x4700 [ 598.599374] ? pipe_lock+0x6e/0x80 [ 598.599390] inet_sendpage+0x44a/0x630 [ 598.614934] kernel_sendpage+0x95/0xf0 [ 598.618827] ? inet_sendmsg+0x5d0/0x5d0 [ 598.622808] sock_sendpage+0x8b/0xc0 [ 598.626541] ? pipe_lock+0x6e/0x80 [ 598.626562] pipe_to_sendpage+0x299/0x370 [ 598.626575] ? kernel_sendpage+0xf0/0xf0 [ 598.626595] ? direct_splice_actor+0x1a0/0x1a0 [ 598.642898] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 16:57:19 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x10, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x3, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) 16:57:19 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffff00000000, 0xa000000, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) [ 598.648437] ? splice_from_pipe_next.part.0+0x255/0x2f0 [ 598.653831] __splice_from_pipe+0x39a/0x7e0 [ 598.658164] ? direct_splice_actor+0x1a0/0x1a0 [ 598.662755] ? direct_splice_actor+0x1a0/0x1a0 [ 598.667328] splice_from_pipe+0x108/0x170 [ 598.671495] ? splice_shrink_spd+0xd0/0xd0 [ 598.675746] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 598.681315] ? security_file_permission+0x94/0x320 [ 598.686249] generic_splice_sendpage+0x3c/0x50 [ 598.690843] ? splice_from_pipe+0x170/0x170 [ 598.695177] do_splice+0x70a/0x1490 [ 598.698815] ? iterate_fd+0x360/0x360 [ 598.702631] ? opipe_prep.part.0+0x2d0/0x2d0 [ 598.707048] ? __fget_light+0x1a9/0x230 [ 598.711030] __x64_sys_splice+0x2c6/0x330 [ 598.715188] do_syscall_64+0x103/0x610 [ 598.719085] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 598.724284] RIP: 0033:0x457e29 [ 598.727487] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 598.745458] neighbour: ndisc_cache: neighbor table overflow! [ 598.746404] RSP: 002b:00007f2baa4adc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 598.746420] RAX: ffffffffffffffda RBX: 00007f2baa4adc90 RCX: 0000000000457e29 [ 598.746429] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000003 [ 598.746438] RBP: 000000000073bfa0 R08: 00000000000100e0 R09: 0000000000000000 [ 598.746448] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f2baa4ae6d4 [ 598.746457] R13: 00000000004c6c75 R14: 00000000004db870 R15: 0000000000000007 [ 598.797284] neighbour: ndisc_cache: neighbor table overflow! [ 598.806016] neighbour: ndisc_cache: neighbor table overflow! [ 598.814829] neighbour: ndisc_cache: neighbor table overflow! 16:57:19 executing program 5: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x3, 0x2) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) splice(r0, 0x0, r2, 0x0, 0x1ffe0, 0x400000000000000) 16:57:19 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) 16:57:19 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x60, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x3, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) 16:57:19 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffff00000000, 0xc000000, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) 16:57:19 executing program 2: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x3, 0x2) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) splice(r0, 0x0, r2, 0x0, 0x10005, 0x600000000000000) 16:57:19 executing program 0 (fault-call:8 fault-nth:8): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x3, 0x2) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) splice(r0, 0x0, r2, 0x0, 0x100e0, 0x0) 16:57:19 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffff00000000, 0xe000000, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) 16:57:19 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0xf0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x3, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) 16:57:19 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) 16:57:19 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffff00000000, 0xf000000, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) 16:57:20 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x1a0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x3, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) [ 599.202061] FAULT_INJECTION: forcing a failure. [ 599.202061] name failslab, interval 1, probability 0, space 0, times 0 16:57:20 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffff00000000, 0x10000000, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) [ 599.304656] CPU: 0 PID: 25802 Comm: syz-executor.0 Not tainted 5.0.0+ #6 [ 599.311519] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 599.320905] Call Trace: [ 599.323510] dump_stack+0x172/0x1f0 [ 599.327151] should_fail.cold+0xa/0x1b [ 599.331056] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 599.336170] ? __should_failslab+0x99/0x190 [ 599.340524] ? write_comp_data+0x9/0x70 [ 599.344513] __should_failslab+0x121/0x190 [ 599.348766] should_failslab+0x9/0x14 [ 599.352601] __kmalloc_track_caller+0x6d/0x740 [ 599.357195] ? lock_downgrade+0x810/0x810 [ 599.357212] ? rcu_dynticks_curr_cpu_in_eqs+0x54/0xb0 [ 599.357229] ? nf_ct_ext_add+0x2a9/0x640 [ 599.370618] __krealloc+0x71/0xc0 [ 599.370636] nf_ct_ext_add+0x2a9/0x640 [ 599.370671] init_conntrack.isra.0+0x447/0x1180 [ 599.382653] ? nf_conntrack_alloc+0x50/0x50 [ 599.387000] ? rcu_lockdep_current_cpu_online+0xe3/0x130 [ 599.392476] nf_conntrack_in+0xa68/0x1070 [ 599.396638] ? nf_conntrack_update+0x990/0x990 [ 599.401229] ? __do_replace+0x910/0x910 [ 599.405226] ? refcount_add_checked+0x33/0x70 [ 599.409734] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 599.415296] ipv4_conntrack_local+0x169/0x210 [ 599.419803] nf_hook_slow+0xbf/0x1f0 [ 599.423533] __ip_local_out+0x403/0x880 [ 599.427531] ? ip_finish_output+0xd50/0xd50 [ 599.431865] ? rcu_lockdep_current_cpu_online+0xe3/0x130 [ 599.437320] ? ip_append_data.part.0+0x170/0x170 [ 599.442085] ? dst_release+0x62/0xb0 [ 599.445803] ? __ip_make_skb+0xf93/0x1820 [ 599.449967] ip_local_out+0x2d/0x1b0 [ 599.453692] ip_send_skb+0x42/0xf0 [ 599.457240] ip_push_pending_frames+0x64/0x80 [ 599.461750] raw_sendmsg+0x1e5d/0x2f10 [ 599.465652] ? raw_getsockopt+0x100/0x100 [ 599.469811] ? ima_match_policy+0xa19/0x13d0 [ 599.474225] ? process_measurement+0xd5d/0x1570 [ 599.474245] ? process_measurement+0xd5d/0x1570 [ 599.474280] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 599.474304] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 599.488391] ? lockdep_hardirqs_on+0x415/0x5d0 [ 599.488406] ? retint_kernel+0x2d/0x2d [ 599.488433] ? trace_hardirqs_on_caller+0x6a/0x220 [ 599.488452] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 599.511359] ? retint_kernel+0x2d/0x2d [ 599.515332] inet_sendmsg+0x147/0x5d0 [ 599.519146] ? raw_getsockopt+0x100/0x100 [ 599.523301] ? inet_sendmsg+0x147/0x5d0 [ 599.527259] ? ipip_gro_receive+0x100/0x100 [ 599.531582] sock_sendmsg+0xdd/0x130 [ 599.535301] kernel_sendmsg+0x44/0x50 [ 599.539102] sock_no_sendpage+0x116/0x150 [ 599.543237] ? sock_kzfree_s+0x70/0x70 [ 599.547124] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 599.551874] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 599.556626] inet_sendpage+0x44a/0x630 [ 599.560508] kernel_sendpage+0x95/0xf0 [ 599.564387] ? inet_sendmsg+0x5d0/0x5d0 [ 599.568362] sock_sendpage+0x8b/0xc0 [ 599.572063] pipe_to_sendpage+0x299/0x370 [ 599.576201] ? kernel_sendpage+0xf0/0xf0 [ 599.580248] ? direct_splice_actor+0x1a0/0x1a0 [ 599.584843] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 599.590365] ? splice_from_pipe_next.part.0+0x255/0x2f0 [ 599.595717] __splice_from_pipe+0x39a/0x7e0 [ 599.600043] ? direct_splice_actor+0x1a0/0x1a0 [ 599.604627] ? direct_splice_actor+0x1a0/0x1a0 [ 599.609191] splice_from_pipe+0x108/0x170 [ 599.613324] ? splice_shrink_spd+0xd0/0xd0 [ 599.617546] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 599.623070] ? security_file_permission+0x94/0x320 [ 599.627996] generic_splice_sendpage+0x3c/0x50 [ 599.632583] ? splice_from_pipe+0x170/0x170 [ 599.636890] do_splice+0x70a/0x1490 [ 599.640504] ? iterate_fd+0x360/0x360 [ 599.644302] ? opipe_prep.part.0+0x2d0/0x2d0 [ 599.648703] ? __fget_light+0x1a9/0x230 [ 599.652676] __x64_sys_splice+0x2c6/0x330 [ 599.656810] do_syscall_64+0x103/0x610 [ 599.660684] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 599.665856] RIP: 0033:0x457e29 [ 599.669034] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 599.688029] RSP: 002b:00007f2baa4adc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 599.695747] RAX: ffffffffffffffda RBX: 00007f2baa4adc90 RCX: 0000000000457e29 [ 599.703011] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000003 [ 599.710271] RBP: 000000000073bfa0 R08: 00000000000100e0 R09: 0000000000000000 [ 599.717534] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f2baa4ae6d4 [ 599.724792] R13: 00000000004c6c75 R14: 00000000004db870 R15: 0000000000000007 16:57:20 executing program 5: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x3, 0x2) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) splice(r0, 0x0, r2, 0x0, 0x1ffe0, 0x700000000000000) 16:57:20 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffff00000000, 0x3f000000, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) 16:57:20 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x282, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x3, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) 16:57:20 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) 16:57:20 executing program 2: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x3, 0x2) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) splice(r0, 0x0, r2, 0x0, 0x10005, 0x700000000000000) 16:57:20 executing program 0 (fault-call:8 fault-nth:9): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x3, 0x2) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) splice(r0, 0x0, r2, 0x0, 0x100e0, 0x0) 16:57:20 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x1c, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1, 0x0, 0x0, 0xa00000000000000}}, 0x1c}}, 0x0) 16:57:20 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffff00000000, 0x60000000, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) 16:57:20 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x300, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x3, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) [ 600.122231] FAULT_INJECTION: forcing a failure. [ 600.122231] name failslab, interval 1, probability 0, space 0, times 0 [ 600.168914] CPU: 0 PID: 25836 Comm: syz-executor.0 Not tainted 5.0.0+ #6 [ 600.175763] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 600.185113] Call Trace: [ 600.187720] dump_stack+0x172/0x1f0 [ 600.191367] should_fail.cold+0xa/0x1b [ 600.195284] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 600.200406] ? lock_downgrade+0x810/0x810 [ 600.204560] ? ___might_sleep+0x163/0x280 [ 600.208721] __should_failslab+0x121/0x190 [ 600.212965] should_failslab+0x9/0x14 [ 600.216774] kmem_cache_alloc_node+0x264/0x710 [ 600.221370] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 600.226158] __alloc_skb+0xd5/0x5e0 [ 600.229798] ? skb_scrub_packet+0x440/0x440 [ 600.234128] ? raw_destroy+0x30/0x30 [ 600.237880] __ip_append_data.isra.0+0x24d6/0x2dd0 [ 600.242839] ? raw_destroy+0x30/0x30 [ 600.246593] ? __ip_flush_pending_frames.isra.0+0x2d0/0x2d0 [ 600.252338] ? ipv4_mtu+0x2a9/0x400 [ 600.255973] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 600.261518] ? ip_setup_cork+0x53b/0x870 [ 600.265601] ? raw_destroy+0x30/0x30 [ 600.269331] ip_append_data.part.0+0xf2/0x170 [ 600.273838] ? raw_destroy+0x30/0x30 [ 600.277561] ip_append_data+0x6e/0x90 [ 600.281378] raw_sendmsg+0xbd8/0x2f10 [ 600.285237] ? raw_getsockopt+0x100/0x100 [ 600.289423] ? ima_match_policy+0xa19/0x13d0 [ 600.293836] ? process_measurement+0xd5d/0x1570 [ 600.298556] ? process_measurement+0xd5d/0x1570 [ 600.303235] ? lock_downgrade+0x810/0x810 [ 600.307411] ? mark_held_locks+0xb1/0x100 [ 600.311575] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 600.316366] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 600.321130] ? lockdep_hardirqs_on+0x415/0x5d0 [ 600.325731] inet_sendmsg+0x147/0x5d0 [ 600.329540] ? raw_getsockopt+0x100/0x100 [ 600.333693] ? inet_sendmsg+0x147/0x5d0 [ 600.337710] ? ipip_gro_receive+0x100/0x100 [ 600.342039] sock_sendmsg+0xdd/0x130 [ 600.345764] kernel_sendmsg+0x44/0x50 [ 600.349587] sock_no_sendpage+0x116/0x150 [ 600.353741] ? sock_kzfree_s+0x70/0x70 [ 600.357668] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 600.362444] inet_sendpage+0x44a/0x630 [ 600.366349] kernel_sendpage+0x95/0xf0 [ 600.370256] ? inet_sendmsg+0x5d0/0x5d0 [ 600.374259] sock_sendpage+0x8b/0xc0 [ 600.378013] ? __x86_indirect_thunk_rax+0xc/0x20 [ 600.382782] pipe_to_sendpage+0x299/0x370 [ 600.386949] ? kernel_sendpage+0xf0/0xf0 [ 600.391022] ? direct_splice_actor+0x1a0/0x1a0 [ 600.395619] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 600.401168] ? anon_pipe_buf_release+0x1c6/0x270 [ 600.405936] __splice_from_pipe+0x39a/0x7e0 [ 600.410280] ? direct_splice_actor+0x1a0/0x1a0 [ 600.414888] ? direct_splice_actor+0x1a0/0x1a0 16:57:21 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x1c, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1, 0x0, 0x0, 0xa00000000000000}}, 0x1c}}, 0x0) [ 600.419484] splice_from_pipe+0x108/0x170 [ 600.423647] ? splice_shrink_spd+0xd0/0xd0 [ 600.427885] ? retint_kernel+0x2d/0x2d [ 600.431787] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 600.437342] ? security_file_permission+0x94/0x320 [ 600.442307] generic_splice_sendpage+0x3c/0x50 [ 600.446905] ? splice_from_pipe+0x170/0x170 [ 600.451235] do_splice+0x70a/0x1490 [ 600.454880] ? iterate_fd+0x360/0x360 [ 600.458707] ? opipe_prep.part.0+0x2d0/0x2d0 [ 600.463127] ? __fget_light+0x1a9/0x230 [ 600.467142] __x64_sys_splice+0x2c6/0x330 [ 600.471319] do_syscall_64+0x103/0x610 [ 600.475218] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 600.480421] RIP: 0033:0x457e29 [ 600.483629] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 600.502530] RSP: 002b:00007f2baa4adc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 600.510251] RAX: ffffffffffffffda RBX: 00007f2baa4adc90 RCX: 0000000000457e29 16:57:21 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x1c, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1, 0x0, 0x0, 0xa00000000000000}}, 0x1c}}, 0x0) 16:57:21 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffff00000000, 0x65580000, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) [ 600.517565] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000003 [ 600.524836] RBP: 000000000073bfa0 R08: 00000000000100e0 R09: 0000000000000000 [ 600.532104] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f2baa4ae6d4 [ 600.539379] R13: 00000000004c6c75 R14: 00000000004db870 R15: 0000000000000007 16:57:21 executing program 5: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x3, 0x2) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) splice(r0, 0x0, r2, 0x0, 0x1ffe0, 0xa00000000000000) 16:57:21 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x600, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x3, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) 16:57:21 executing program 3: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x3, 0x2) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) splice(r0, 0x0, r2, 0x0, 0x1ffe0, 0x400000000000000) 16:57:21 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffff00000000, 0x81000000, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) 16:57:21 executing program 2: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x3, 0x2) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) splice(r0, 0x0, r2, 0x0, 0x10005, 0x800000000000000) 16:57:21 executing program 0 (fault-call:8 fault-nth:10): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x3, 0x2) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) splice(r0, 0x0, r2, 0x0, 0x100e0, 0x0) 16:57:21 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffff00000000, 0x82020000, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) 16:57:21 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x662, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x3, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) [ 601.002584] FAULT_INJECTION: forcing a failure. [ 601.002584] name failslab, interval 1, probability 0, space 0, times 0 [ 601.097801] CPU: 0 PID: 25881 Comm: syz-executor.0 Not tainted 5.0.0+ #6 [ 601.104652] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 601.114002] Call Trace: [ 601.116604] dump_stack+0x172/0x1f0 [ 601.120272] should_fail.cold+0xa/0x1b [ 601.124174] ? retint_kernel+0x2d/0x2d [ 601.128067] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 601.133196] ? __should_failslab+0xe7/0x190 [ 601.137528] __should_failslab+0x121/0x190 [ 601.141778] should_failslab+0x9/0x14 [ 601.145583] kmem_cache_alloc_node_trace+0x270/0x720 [ 601.150699] ? __alloc_skb+0xd5/0x5e0 [ 601.154511] ? rcu_lockdep_current_cpu_online+0xe3/0x130 [ 601.159978] __kmalloc_node_track_caller+0x3d/0x70 [ 601.164912] __kmalloc_reserve.isra.0+0x40/0xf0 [ 601.169599] __alloc_skb+0x10b/0x5e0 [ 601.173326] ? skb_scrub_packet+0x440/0x440 [ 601.177712] __ip_append_data.isra.0+0x24d6/0x2dd0 [ 601.182644] ? trace_hardirqs_on_caller+0x6a/0x220 [ 601.187590] ? raw_destroy+0x30/0x30 [ 601.191333] ? __ip_flush_pending_frames.isra.0+0x2d0/0x2d0 [ 601.197060] ? ipv4_mtu+0x2a9/0x400 [ 601.200697] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 601.206244] ? ip_setup_cork+0x53b/0x870 [ 601.210333] ? raw_destroy+0x30/0x30 [ 601.214055] ip_append_data.part.0+0xf2/0x170 [ 601.218565] ? raw_destroy+0x30/0x30 [ 601.222304] ip_append_data+0x6e/0x90 [ 601.226121] raw_sendmsg+0xbd8/0x2f10 [ 601.229971] ? lockdep_hardirqs_on+0x342/0x5d0 [ 601.234605] ? raw_getsockopt+0x100/0x100 [ 601.238758] ? lockdep_hardirqs_on+0x415/0x5d0 [ 601.243351] ? retint_kernel+0x2d/0x2d [ 601.247252] ? trace_hardirqs_on_caller+0x6a/0x220 [ 601.252230] ? mark_held_locks+0xb1/0x100 [ 601.256402] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 601.261166] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 601.265942] ? lockdep_hardirqs_on+0x415/0x5d0 [ 601.270531] ? retint_kernel+0x2d/0x2d [ 601.274420] ? trace_hardirqs_on_caller+0x6a/0x220 [ 601.279375] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 601.284170] ? retint_kernel+0x2d/0x2d [ 601.288566] inet_sendmsg+0x147/0x5d0 [ 601.292369] ? raw_getsockopt+0x100/0x100 [ 601.296519] ? inet_sendmsg+0x147/0x5d0 [ 601.300511] ? ipip_gro_receive+0x100/0x100 [ 601.304839] sock_sendmsg+0xdd/0x130 [ 601.308575] kernel_sendmsg+0x44/0x50 [ 601.312394] sock_no_sendpage+0x116/0x150 [ 601.316563] ? sock_kzfree_s+0x70/0x70 [ 601.320462] ? __lock_acquire+0x53b/0x4700 [ 601.324721] ? pipe_lock+0x6e/0x80 [ 601.328281] inet_sendpage+0x44a/0x630 [ 601.332231] kernel_sendpage+0x95/0xf0 [ 601.336160] ? inet_sendmsg+0x5d0/0x5d0 [ 601.340146] sock_sendpage+0x8b/0xc0 [ 601.343877] ? pipe_lock+0x6e/0x80 [ 601.347433] pipe_to_sendpage+0x299/0x370 [ 601.351597] ? kernel_sendpage+0xf0/0xf0 [ 601.355673] ? direct_splice_actor+0x1a0/0x1a0 [ 601.360274] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 601.365868] ? anon_pipe_buf_release+0x1c6/0x270 [ 601.370637] __splice_from_pipe+0x39a/0x7e0 [ 601.374971] ? direct_splice_actor+0x1a0/0x1a0 [ 601.379560] ? direct_splice_actor+0x1a0/0x1a0 [ 601.384151] splice_from_pipe+0x108/0x170 [ 601.388315] ? splice_shrink_spd+0xd0/0xd0 [ 601.392723] ? retint_kernel+0x2d/0x2d 16:57:22 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffff00000000, 0x88a8ffff, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) [ 601.396614] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 601.402162] ? security_file_permission+0x94/0x320 [ 601.407100] generic_splice_sendpage+0x3c/0x50 [ 601.411691] ? splice_from_pipe+0x170/0x170 [ 601.416028] do_splice+0x70a/0x1490 [ 601.419658] ? iterate_fd+0x360/0x360 [ 601.423467] ? opipe_prep.part.0+0x2d0/0x2d0 [ 601.427880] ? __fget_light+0x1a9/0x230 [ 601.431863] __x64_sys_splice+0x2c6/0x330 [ 601.436025] do_syscall_64+0x103/0x610 [ 601.439920] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 601.445123] RIP: 0033:0x457e29 16:57:22 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0xa00, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x3, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) [ 601.448356] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 601.467257] RSP: 002b:00007f2baa4adc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 601.474983] RAX: ffffffffffffffda RBX: 00007f2baa4adc90 RCX: 0000000000457e29 [ 601.482257] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000003 [ 601.489561] RBP: 000000000073bfa0 R08: 00000000000100e0 R09: 0000000000000000 [ 601.496827] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f2baa4ae6d4 [ 601.504115] R13: 00000000004c6c75 R14: 00000000004db870 R15: 0000000000000007 16:57:22 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0xc00, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x3, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) 16:57:22 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffff00000000, 0x9d020000, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) 16:57:22 executing program 5: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x3, 0x2) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) splice(r0, 0x0, r2, 0x0, 0x1ffe0, 0xe00000000000000) 16:57:22 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffff00000000, 0x9effffff, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) 16:57:22 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0xe00, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x3, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) 16:57:22 executing program 2: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x3, 0x2) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) splice(r0, 0x0, r2, 0x0, 0x10005, 0x900000000000000) 16:57:22 executing program 3: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x3, 0x2) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) splice(r0, 0x0, r2, 0x0, 0x10005, 0x800000000000000) 16:57:22 executing program 0 (fault-call:8 fault-nth:11): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x3, 0x2) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) splice(r0, 0x0, r2, 0x0, 0x100e0, 0x0) 16:57:22 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffff00000000, 0xa0008000, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) 16:57:22 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0xf00, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x3, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) [ 601.989610] FAULT_INJECTION: forcing a failure. [ 601.989610] name failslab, interval 1, probability 0, space 0, times 0 16:57:22 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x5865, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x3, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) [ 602.082685] CPU: 0 PID: 25935 Comm: syz-executor.0 Not tainted 5.0.0+ #6 [ 602.089579] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 602.098938] Call Trace: [ 602.101538] dump_stack+0x172/0x1f0 [ 602.105234] should_fail.cold+0xa/0x1b [ 602.109160] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 602.114279] ? lock_downgrade+0x810/0x810 [ 602.118440] ? ___might_sleep+0x163/0x280 [ 602.122601] __should_failslab+0x121/0x190 [ 602.126845] should_failslab+0x9/0x14 [ 602.130656] kmem_cache_alloc_node+0x264/0x710 [ 602.135245] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 602.140802] ? ip_generic_getfrag+0x120/0x230 [ 602.145337] __alloc_skb+0xd5/0x5e0 [ 602.148986] ? skb_scrub_packet+0x440/0x440 [ 602.153331] ? raw_getfrag+0x164/0x230 [ 602.157222] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 602.162254] __ip_append_data.isra.0+0x24d6/0x2dd0 [ 602.167226] ? raw_destroy+0x30/0x30 [ 602.170962] ? trace_hardirqs_on_caller+0x6a/0x220 [ 602.175906] ? __ip_flush_pending_frames.isra.0+0x2d0/0x2d0 [ 602.181621] ? ipv4_mtu+0x2a9/0x400 [ 602.185255] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 602.190856] ? ip_setup_cork+0x53b/0x870 [ 602.194938] ? raw_destroy+0x30/0x30 [ 602.198667] ip_append_data.part.0+0xf2/0x170 [ 602.203175] ? raw_destroy+0x30/0x30 [ 602.206899] ip_append_data+0x6e/0x90 [ 602.210715] raw_sendmsg+0xbd8/0x2f10 [ 602.214526] ? lockdep_hardirqs_on+0x342/0x5d0 [ 602.219134] ? raw_getsockopt+0x100/0x100 [ 602.223305] ? lockdep_hardirqs_on+0x415/0x5d0 [ 602.227902] ? retint_kernel+0x2d/0x2d 16:57:23 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffff00000000, 0xa0010000, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) [ 602.231795] ? trace_hardirqs_on_caller+0x6a/0x220 [ 602.236750] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 602.241521] ? lockdep_hardirqs_on+0x415/0x5d0 [ 602.246126] ? retint_kernel+0x2d/0x2d [ 602.250022] ? trace_hardirqs_on_caller+0x6a/0x220 [ 602.254957] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 602.259732] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 602.264526] ? retint_kernel+0x2d/0x2d [ 602.268457] ? raw_getsockopt+0x100/0x100 [ 602.272628] inet_sendmsg+0x147/0x5d0 [ 602.276431] ? raw_getsockopt+0x100/0x100 16:57:23 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffff00000000, 0xf0ffffff, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) 16:57:23 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffff00000000, 0xffffa888, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) [ 602.280585] ? inet_sendmsg+0x147/0x5d0 [ 602.284579] ? ipip_gro_receive+0x100/0x100 [ 602.288915] sock_sendmsg+0xdd/0x130 [ 602.292646] kernel_sendmsg+0x44/0x50 [ 602.296472] sock_no_sendpage+0x116/0x150 [ 602.300631] ? sock_kzfree_s+0x70/0x70 [ 602.304559] ? __lock_acquire+0x53b/0x4700 [ 602.308828] inet_sendpage+0x44a/0x630 [ 602.312731] kernel_sendpage+0x95/0xf0 [ 602.316632] ? inet_sendmsg+0x5d0/0x5d0 [ 602.320609] sock_sendpage+0x8b/0xc0 [ 602.324335] pipe_to_sendpage+0x299/0x370 [ 602.328503] ? kernel_sendpage+0xf0/0xf0 [ 602.332585] ? direct_splice_actor+0x1a0/0x1a0 [ 602.337198] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 602.342749] ? anon_pipe_buf_release+0x1c6/0x270 [ 602.347553] __splice_from_pipe+0x39a/0x7e0 [ 602.351911] ? direct_splice_actor+0x1a0/0x1a0 [ 602.356511] ? direct_splice_actor+0x1a0/0x1a0 [ 602.361100] splice_from_pipe+0x108/0x170 [ 602.365286] ? splice_shrink_spd+0xd0/0xd0 [ 602.369553] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 602.369572] ? security_file_permission+0x94/0x320 [ 602.369590] generic_splice_sendpage+0x3c/0x50 [ 602.384655] ? splice_from_pipe+0x170/0x170 [ 602.384673] do_splice+0x70a/0x1490 [ 602.384691] ? iterate_fd+0x360/0x360 [ 602.384712] ? opipe_prep.part.0+0x2d0/0x2d0 [ 602.384729] ? __fget_light+0x1a9/0x230 [ 602.384746] __x64_sys_splice+0x2c6/0x330 [ 602.384767] do_syscall_64+0x103/0x610 [ 602.392708] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 602.400894] RIP: 0033:0x457e29 [ 602.400910] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 602.400919] RSP: 002b:00007f2baa4adc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 602.400935] RAX: ffffffffffffffda RBX: 00007f2baa4adc90 RCX: 0000000000457e29 [ 602.400944] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000003 [ 602.400954] RBP: 000000000073bfa0 R08: 00000000000100e0 R09: 0000000000000000 [ 602.400963] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f2baa4ae6d4 [ 602.400973] R13: 00000000004c6c75 R14: 00000000004db870 R15: 0000000000000007 16:57:23 executing program 5: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x3, 0x2) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) splice(r0, 0x0, r2, 0x0, 0x1ffe0, 0x2000000000000000) 16:57:23 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffff00000000, 0xfffff000, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) 16:57:23 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x6000, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x3, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) 16:57:23 executing program 2: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x3, 0x2) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) splice(r0, 0x0, r2, 0x0, 0x10005, 0xa00000000000004) 16:57:23 executing program 3 (fault-call:2 fault-nth:0): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1, 0x0, 0x0, 0xa00000000000000}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) 16:57:23 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffff00000000, 0xffffff7f, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) 16:57:23 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x6206, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x3, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) 16:57:23 executing program 0 (fault-call:8 fault-nth:12): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x3, 0x2) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) splice(r0, 0x0, r2, 0x0, 0x100e0, 0x0) [ 603.128659] net_ratelimit: 55 callbacks suppressed [ 603.128667] neighbour: ndisc_cache: neighbor table overflow! 16:57:24 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1, 0x0, 0x0, 0xa00000000000000}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) [ 603.181320] neighbour: ndisc_cache: neighbor table overflow! [ 603.193566] neighbour: ndisc_cache: neighbor table overflow! [ 603.212254] FAULT_INJECTION: forcing a failure. [ 603.212254] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 603.224082] CPU: 0 PID: 25992 Comm: syz-executor.0 Not tainted 5.0.0+ #6 [ 603.230918] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 603.240275] Call Trace: [ 603.242880] dump_stack+0x172/0x1f0 [ 603.246528] should_fail.cold+0xa/0x1b [ 603.250441] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 603.255210] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 603.260336] ? retint_kernel+0x2d/0x2d [ 603.264243] ? trace_hardirqs_on_caller+0x6a/0x220 [ 603.269217] should_fail_alloc_page+0x50/0x60 [ 603.273726] __alloc_pages_nodemask+0x1a1/0x710 [ 603.278404] ? lockdep_hardirqs_on+0x415/0x5d0 [ 603.282990] ? retint_kernel+0x2d/0x2d [ 603.287346] ? __alloc_pages_slowpath+0x2900/0x2900 [ 603.292407] cache_grow_begin+0x9c/0x8c0 [ 603.296494] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 603.302046] ? check_preemption_disabled+0x48/0x290 [ 603.307073] kmem_cache_alloc_node_trace+0x658/0x720 [ 603.312209] __kmalloc_node_track_caller+0x3d/0x70 [ 603.317152] __kmalloc_reserve.isra.0+0x40/0xf0 [ 603.321838] __alloc_skb+0x10b/0x5e0 [ 603.325565] ? skb_scrub_packet+0x440/0x440 [ 603.329902] ? raw_destroy+0x30/0x30 [ 603.333629] ? __ip_append_data.isra.0+0xa7/0x2dd0 [ 603.338573] __ip_append_data.isra.0+0x24d6/0x2dd0 [ 603.343524] ? raw_destroy+0x30/0x30 [ 603.347252] ? lockdep_hardirqs_on+0x19b/0x5d0 [ 603.349188] neighbour: ndisc_cache: neighbor table overflow! [ 603.351857] ? trace_hardirqs_on_caller+0x6a/0x220 [ 603.351886] ? __ip_flush_pending_frames.isra.0+0x2d0/0x2d0 [ 603.351901] ? ipv4_mtu+0x2a9/0x400 [ 603.351918] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 603.377500] ? ip_setup_cork+0x53b/0x870 [ 603.381603] ? raw_destroy+0x30/0x30 [ 603.385330] ip_append_data.part.0+0xf2/0x170 [ 603.387582] neighbour: ndisc_cache: neighbor table overflow! [ 603.389850] ? raw_destroy+0x30/0x30 [ 603.389870] ip_append_data+0x6e/0x90 [ 603.389894] raw_sendmsg+0xbd8/0x2f10 [ 603.389920] ? raw_getsockopt+0x100/0x100 [ 603.389936] ? mark_held_locks+0x100/0x100 [ 603.389953] ? check_preemption_disabled+0x48/0x290 [ 603.389974] ? mark_held_locks+0xb1/0x100 [ 603.389990] ? trace_hardirqs_on_thunk+0x1a/0x1c 16:57:24 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffff00000000, 0xffffff9e, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) [ 603.390006] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 603.390019] ? lockdep_hardirqs_on+0x415/0x5d0 [ 603.390033] ? retint_kernel+0x2d/0x2d [ 603.390046] ? trace_hardirqs_on_caller+0x6a/0x220 [ 603.390066] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 603.390086] ? retint_kernel+0x2d/0x2d [ 603.390109] inet_sendmsg+0x147/0x5d0 [ 603.390136] ? raw_getsockopt+0x100/0x100 [ 603.390148] ? inet_sendmsg+0x147/0x5d0 [ 603.390163] ? ipip_gro_receive+0x100/0x100 [ 603.390179] sock_sendmsg+0xdd/0x130 [ 603.390196] kernel_sendmsg+0x44/0x50 16:57:24 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x2, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1, 0x0, 0x0, 0xa00000000000000}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) [ 603.390215] sock_no_sendpage+0x116/0x150 [ 603.407307] ? sock_kzfree_s+0x70/0x70 [ 603.415739] inet_sendpage+0x44a/0x630 [ 603.492006] kernel_sendpage+0x95/0xf0 [ 603.492414] neighbour: ndisc_cache: neighbor table overflow! [ 603.495895] ? inet_sendmsg+0x5d0/0x5d0 [ 603.495914] sock_sendpage+0x8b/0xc0 [ 603.495928] ? pipe_lock+0x6e/0x80 [ 603.495947] pipe_to_sendpage+0x299/0x370 [ 603.517100] ? kernel_sendpage+0xf0/0xf0 [ 603.521189] ? direct_splice_actor+0x1a0/0x1a0 [ 603.521845] neighbour: ndisc_cache: neighbor table overflow! [ 603.525780] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 603.525796] ? anon_pipe_buf_release+0x1c6/0x270 [ 603.525816] __splice_from_pipe+0x39a/0x7e0 [ 603.525834] ? direct_splice_actor+0x1a0/0x1a0 [ 603.536004] neighbour: ndisc_cache: neighbor table overflow! [ 603.537162] ? direct_splice_actor+0x1a0/0x1a0 [ 603.537177] splice_from_pipe+0x108/0x170 [ 603.537194] ? splice_shrink_spd+0xd0/0xd0 [ 603.537214] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 603.554313] neighbour: ndisc_cache: neighbor table overflow! 16:57:24 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffff00000000, 0xfffffff0, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) [ 603.556644] ? security_file_permission+0x94/0x320 [ 603.556664] generic_splice_sendpage+0x3c/0x50 [ 603.556688] ? splice_from_pipe+0x170/0x170 [ 603.594780] do_splice+0x70a/0x1490 [ 603.598422] ? iterate_fd+0x360/0x360 [ 603.602274] ? opipe_prep.part.0+0x2d0/0x2d0 [ 603.606705] ? __fget_light+0x1a9/0x230 [ 603.610693] __x64_sys_splice+0x2c6/0x330 [ 603.614859] do_syscall_64+0x103/0x610 [ 603.618765] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 603.623970] RIP: 0033:0x457e29 [ 603.627180] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 603.633466] neighbour: ndisc_cache: neighbor table overflow! [ 603.646084] RSP: 002b:00007f2baa4adc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 603.646100] RAX: ffffffffffffffda RBX: 00007f2baa4adc90 RCX: 0000000000457e29 [ 603.646109] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000003 [ 603.646118] RBP: 000000000073bfa0 R08: 00000000000100e0 R09: 0000000000000000 [ 603.646127] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f2baa4ae6d4 [ 603.646137] R13: 00000000004c6c75 R14: 00000000004db870 R15: 0000000000000007 16:57:24 executing program 5: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x3, 0x2) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) splice(r0, 0x0, r2, 0x0, 0x1ffe0, 0x380a000000000000) 16:57:24 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x3, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1, 0x0, 0x0, 0xa00000000000000}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) 16:57:24 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x6558, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x3, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) 16:57:24 executing program 2: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x3, 0x2) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) splice(r0, 0x0, r2, 0x0, 0x10005, 0xa00000000000007) 16:57:24 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffff00000000, 0x1a0ffffffff, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) 16:57:24 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x4, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1, 0x0, 0x0, 0xa00000000000000}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) 16:57:24 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x8100, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x3, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) 16:57:24 executing program 0 (fault-call:8 fault-nth:13): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x3, 0x2) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) splice(r0, 0x0, r2, 0x0, 0x100e0, 0x0) 16:57:24 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x5, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1, 0x0, 0x0, 0xa00000000000000}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) 16:57:24 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x8202, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x3, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) 16:57:24 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffff00000000, 0x40030000000000, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) 16:57:25 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x6, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1, 0x0, 0x0, 0xa00000000000000}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) [ 604.318681] FAULT_INJECTION: forcing a failure. [ 604.318681] name failslab, interval 1, probability 0, space 0, times 0 [ 604.331871] CPU: 0 PID: 26054 Comm: syz-executor.0 Not tainted 5.0.0+ #6 [ 604.338719] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 604.348066] Call Trace: [ 604.350660] dump_stack+0x172/0x1f0 [ 604.355042] should_fail.cold+0xa/0x1b [ 604.358927] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 604.364016] ? lock_downgrade+0x810/0x810 [ 604.368165] ? ___might_sleep+0x163/0x280 [ 604.372340] __should_failslab+0x121/0x190 [ 604.376597] should_failslab+0x9/0x14 [ 604.380388] kmem_cache_alloc_node+0x264/0x710 [ 604.384980] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 604.389745] __alloc_skb+0xd5/0x5e0 [ 604.393392] ? skb_scrub_packet+0x440/0x440 [ 604.397724] ? __ip_append_data.isra.0+0x195f/0x2dd0 [ 604.402824] ? __ip_append_data.isra.0+0x2489/0x2dd0 [ 604.407913] __ip_append_data.isra.0+0x24d6/0x2dd0 [ 604.412844] ? raw_destroy+0x30/0x30 [ 604.416589] ? __ip_flush_pending_frames.isra.0+0x2d0/0x2d0 [ 604.422333] ? __sanitizer_cov_trace_const_cmp1+0x20/0x20 [ 604.427854] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 604.433409] ? ip_setup_cork+0x53b/0x870 [ 604.437478] ? raw_destroy+0x30/0x30 [ 604.441211] ip_append_data.part.0+0xf2/0x170 [ 604.445692] ? raw_destroy+0x30/0x30 [ 604.449401] ip_append_data+0x6e/0x90 [ 604.453212] raw_sendmsg+0xbd8/0x2f10 [ 604.457012] ? raw_getsockopt+0x100/0x100 [ 604.461145] ? ima_match_policy+0xa19/0x13d0 [ 604.465566] ? process_measurement+0xd5d/0x1570 [ 604.470230] ? process_measurement+0xd5d/0x1570 [ 604.475028] ? lock_downgrade+0x810/0x810 [ 604.479184] ? __lock_acquire+0x53b/0x4700 [ 604.483409] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 604.488169] inet_sendmsg+0x147/0x5d0 [ 604.491963] ? raw_getsockopt+0x100/0x100 [ 604.496102] ? inet_sendmsg+0x147/0x5d0 [ 604.500067] ? ipip_gro_receive+0x100/0x100 [ 604.504378] sock_sendmsg+0xdd/0x130 [ 604.508111] kernel_sendmsg+0x44/0x50 [ 604.511953] sock_no_sendpage+0x116/0x150 [ 604.516119] ? sock_kzfree_s+0x70/0x70 [ 604.520003] inet_sendpage+0x44a/0x630 [ 604.523878] kernel_sendpage+0x95/0xf0 [ 604.527750] ? inet_sendmsg+0x5d0/0x5d0 [ 604.531722] sock_sendpage+0x8b/0xc0 [ 604.535430] ? pipe_lock+0x6e/0x80 [ 604.538969] pipe_to_sendpage+0x299/0x370 [ 604.543118] ? kernel_sendpage+0xf0/0xf0 [ 604.547198] ? direct_splice_actor+0x1a0/0x1a0 [ 604.551781] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 604.557315] ? anon_pipe_buf_release+0x1c6/0x270 [ 604.562057] __splice_from_pipe+0x39a/0x7e0 [ 604.566364] ? direct_splice_actor+0x1a0/0x1a0 [ 604.570973] ? direct_splice_actor+0x1a0/0x1a0 [ 604.575577] splice_from_pipe+0x108/0x170 [ 604.579728] ? splice_shrink_spd+0xd0/0xd0 [ 604.583950] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 604.589492] ? security_file_permission+0x94/0x320 [ 604.594442] generic_splice_sendpage+0x3c/0x50 [ 604.599031] ? splice_from_pipe+0x170/0x170 [ 604.603343] do_splice+0x70a/0x1490 [ 604.606959] ? iterate_fd+0x360/0x360 [ 604.610767] ? opipe_prep.part.0+0x2d0/0x2d0 [ 604.615172] ? __fget_light+0x1a9/0x230 [ 604.619145] __x64_sys_splice+0x2c6/0x330 [ 604.623309] do_syscall_64+0x103/0x610 [ 604.627193] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 604.632389] RIP: 0033:0x457e29 [ 604.635593] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 604.654492] RSP: 002b:00007f2baa4adc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 604.662194] RAX: ffffffffffffffda RBX: 00007f2baa4adc90 RCX: 0000000000457e29 [ 604.669475] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000003 [ 604.676765] RBP: 000000000073bfa0 R08: 00000000000100e0 R09: 0000000000000000 [ 604.684017] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f2baa4ae6d4 [ 604.691311] R13: 00000000004c6c75 R14: 00000000004db870 R15: 0000000000000007 16:57:25 executing program 5: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x3, 0x2) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) splice(r0, 0x0, r2, 0x0, 0x1ffe0, 0x4000000000000000) 16:57:25 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0xf000, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x3, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) 16:57:25 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x7, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1, 0x0, 0x0, 0xa00000000000000}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) 16:57:25 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffff00000000, 0x8000a0ffffffff, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) 16:57:25 executing program 2: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x3, 0x2) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) splice(r0, 0x0, r2, 0x0, 0x10005, 0xa0000000000000a) 16:57:25 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffff00000000, 0xf0ffffffffffff, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) 16:57:25 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x8, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1, 0x0, 0x0, 0xa00000000000000}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) 16:57:25 executing program 0 (fault-call:8 fault-nth:14): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x3, 0x2) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) splice(r0, 0x0, r2, 0x0, 0x100e0, 0x0) 16:57:25 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffff00000000, 0x100000000000000, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) 16:57:25 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x34000, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x3, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) 16:57:25 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0xa, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1, 0x0, 0x0, 0xa00000000000000}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) 16:57:25 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffff00000000, 0x200000000000000, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) [ 605.195902] FAULT_INJECTION: forcing a failure. [ 605.195902] name failslab, interval 1, probability 0, space 0, times 0 [ 605.276281] CPU: 0 PID: 26100 Comm: syz-executor.0 Not tainted 5.0.0+ #6 [ 605.283143] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 605.292962] Call Trace: [ 605.295542] dump_stack+0x172/0x1f0 [ 605.299177] should_fail.cold+0xa/0x1b [ 605.303083] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 605.308206] ? lock_downgrade+0x810/0x810 [ 605.312341] ? ___might_sleep+0x163/0x280 [ 605.316476] __should_failslab+0x121/0x190 [ 605.320714] should_failslab+0x9/0x14 [ 605.324504] kmem_cache_alloc_node+0x264/0x710 [ 605.329079] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 605.334611] ? ip_generic_getfrag+0x120/0x230 [ 605.339104] __alloc_skb+0xd5/0x5e0 [ 605.342722] ? skb_scrub_packet+0x440/0x440 [ 605.347029] ? raw_getfrag+0x164/0x230 [ 605.350907] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 605.355938] __ip_append_data.isra.0+0x24d6/0x2dd0 [ 605.360868] ? raw_destroy+0x30/0x30 [ 605.364597] ? __ip_flush_pending_frames.isra.0+0x2d0/0x2d0 [ 605.370304] ? ipv4_mtu+0x2a9/0x400 [ 605.373933] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 605.379468] ? ip_setup_cork+0x53b/0x870 [ 605.383520] ? raw_destroy+0x30/0x30 [ 605.387226] ip_append_data.part.0+0xf2/0x170 [ 605.391720] ? raw_destroy+0x30/0x30 [ 605.395420] ip_append_data+0x6e/0x90 [ 605.399226] raw_sendmsg+0xbd8/0x2f10 [ 605.403023] ? raw_getsockopt+0x100/0x100 [ 605.407165] ? ima_match_policy+0xa19/0x13d0 [ 605.411554] ? process_measurement+0xd5d/0x1570 [ 605.416230] ? process_measurement+0xd5d/0x1570 [ 605.420932] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 605.425704] ? trace_hardirqs_on_caller+0x6a/0x220 [ 605.430635] ? lock_downgrade+0x810/0x810 [ 605.434790] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 605.439553] ? retint_kernel+0x2d/0x2d [ 605.443458] ? smack_socket_sendmsg+0xb1/0x1a0 [ 605.448024] ? __sanitizer_cov_trace_pc+0x2b/0x50 [ 605.452851] inet_sendmsg+0x147/0x5d0 [ 605.456638] ? raw_getsockopt+0x100/0x100 [ 605.460782] ? inet_sendmsg+0x147/0x5d0 [ 605.464753] ? ipip_gro_receive+0x100/0x100 [ 605.469079] sock_sendmsg+0xdd/0x130 [ 605.472791] kernel_sendmsg+0x44/0x50 [ 605.476598] sock_no_sendpage+0x116/0x150 [ 605.480754] ? sock_kzfree_s+0x70/0x70 [ 605.484657] ? sock_sendmsg+0x5b/0x130 [ 605.488540] inet_sendpage+0x44a/0x630 [ 605.492414] kernel_sendpage+0x95/0xf0 [ 605.496330] ? inet_sendmsg+0x5d0/0x5d0 [ 605.500330] sock_sendpage+0x8b/0xc0 [ 605.504042] pipe_to_sendpage+0x299/0x370 [ 605.508171] ? kernel_sendpage+0xf0/0xf0 [ 605.512214] ? direct_splice_actor+0x1a0/0x1a0 [ 605.516793] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 605.522346] ? anon_pipe_buf_release+0x1c6/0x270 [ 605.527100] __splice_from_pipe+0x39a/0x7e0 [ 605.531415] ? direct_splice_actor+0x1a0/0x1a0 [ 605.536002] ? direct_splice_actor+0x1a0/0x1a0 [ 605.540575] splice_from_pipe+0x108/0x170 [ 605.544713] ? splice_shrink_spd+0xd0/0xd0 [ 605.548952] ? retint_kernel+0x2d/0x2d [ 605.552837] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 605.558364] ? security_file_permission+0x94/0x320 [ 605.563300] ? rw_verify_area+0xb2/0x360 [ 605.567349] generic_splice_sendpage+0x3c/0x50 [ 605.571912] ? splice_from_pipe+0x170/0x170 [ 605.576224] do_splice+0x70a/0x1490 [ 605.579854] ? iterate_fd+0x360/0x360 [ 605.583651] ? opipe_prep.part.0+0x2d0/0x2d0 [ 605.588040] ? __fget_light+0x1a9/0x230 [ 605.591997] __x64_sys_splice+0x2c6/0x330 [ 605.596165] do_syscall_64+0x103/0x610 [ 605.600078] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 605.605274] RIP: 0033:0x457e29 [ 605.608468] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 605.627361] RSP: 002b:00007f2baa4adc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 605.635049] RAX: ffffffffffffffda RBX: 00007f2baa4adc90 RCX: 0000000000457e29 [ 605.642315] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000003 [ 605.649582] RBP: 000000000073bfa0 R08: 00000000000100e0 R09: 0000000000000000 [ 605.656853] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f2baa4ae6d4 [ 605.664101] R13: 00000000004c6c75 R14: 00000000004db870 R15: 0000000000000007 16:57:26 executing program 5: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x3, 0x2) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) splice(r0, 0x0, r2, 0x0, 0x1ffe0, 0x6000000000000000) 16:57:26 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x400300, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x3, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) 16:57:26 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1, 0x0, 0x0, 0xa00000000000000}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) 16:57:26 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffff00000000, 0x300000000000000, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) 16:57:26 executing program 2: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x3, 0x2) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) splice(r0, 0x0, r2, 0x0, 0x10005, 0xa0000000000000e) 16:57:26 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x8000a0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x3, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) 16:57:26 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0xe, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1, 0x0, 0x0, 0xa00000000000000}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) 16:57:26 executing program 0 (fault-call:8 fault-nth:15): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x3, 0x2) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) splice(r0, 0x0, r2, 0x0, 0x100e0, 0x0) 16:57:26 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffff00000000, 0x400000000000000, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) 16:57:26 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0xf0ffff, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x3, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) 16:57:26 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x10, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1, 0x0, 0x0, 0xa00000000000000}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) 16:57:26 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x1000000, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x3, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) [ 606.133683] FAULT_INJECTION: forcing a failure. [ 606.133683] name failslab, interval 1, probability 0, space 0, times 0 [ 606.161490] CPU: 1 PID: 26150 Comm: syz-executor.0 Not tainted 5.0.0+ #6 [ 606.168346] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 606.177701] Call Trace: [ 606.180307] dump_stack+0x172/0x1f0 [ 606.180330] should_fail.cold+0xa/0x1b [ 606.180362] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 606.180409] __should_failslab+0x121/0x190 [ 606.187913] should_failslab+0x9/0x14 [ 606.201032] kmem_cache_alloc+0x47/0x6f0 [ 606.205121] skb_clone+0x150/0x3b0 [ 606.208676] ip_mc_output+0x3aa/0xf70 [ 606.212494] ? __ip_queue_xmit+0x1bf0/0x1bf0 [ 606.216906] ? rcu_lockdep_current_cpu_online+0xe3/0x130 [ 606.222373] ? ip_append_data.part.0+0x170/0x170 [ 606.227129] ? dst_release+0x62/0xb0 [ 606.230828] ? __ip_make_skb+0xf93/0x1820 [ 606.234973] ip_local_out+0xc4/0x1b0 [ 606.238691] ip_send_skb+0x42/0xf0 [ 606.244677] ip_push_pending_frames+0x64/0x80 [ 606.249172] raw_sendmsg+0x1e5d/0x2f10 [ 606.253066] ? lockdep_hardirqs_on+0x342/0x5d0 [ 606.257684] ? raw_getsockopt+0x100/0x100 [ 606.261822] ? process_measurement+0xd5d/0x1570 [ 606.266486] ? process_measurement+0xd5d/0x1570 [ 606.271171] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 606.275937] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 606.280689] ? lockdep_hardirqs_on+0x415/0x5d0 [ 606.285256] ? retint_kernel+0x2d/0x2d [ 606.289141] ? trace_hardirqs_on_caller+0x6a/0x220 [ 606.294059] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 606.298820] ? retint_kernel+0x2d/0x2d [ 606.302711] inet_sendmsg+0x147/0x5d0 [ 606.306498] ? raw_getsockopt+0x100/0x100 [ 606.310653] ? inet_sendmsg+0x147/0x5d0 [ 606.314619] ? ipip_gro_receive+0x100/0x100 [ 606.318936] sock_sendmsg+0xdd/0x130 [ 606.322641] kernel_sendmsg+0x44/0x50 [ 606.326473] sock_no_sendpage+0x116/0x150 [ 606.330617] ? sock_kzfree_s+0x70/0x70 [ 606.334484] ? __lock_acquire+0x53b/0x4700 [ 606.338716] ? pipe_lock+0x6e/0x80 [ 606.342254] inet_sendpage+0x44a/0x630 [ 606.346131] kernel_sendpage+0x95/0xf0 [ 606.350021] ? inet_sendmsg+0x5d0/0x5d0 [ 606.353976] sock_sendpage+0x8b/0xc0 [ 606.357687] ? pipe_lock+0x6e/0x80 [ 606.361237] pipe_to_sendpage+0x299/0x370 [ 606.365374] ? kernel_sendpage+0xf0/0xf0 [ 606.369424] ? direct_splice_actor+0x1a0/0x1a0 [ 606.373990] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 606.379509] ? anon_pipe_buf_release+0x1c6/0x270 [ 606.384254] __splice_from_pipe+0x39a/0x7e0 [ 606.388565] ? direct_splice_actor+0x1a0/0x1a0 [ 606.393139] ? direct_splice_actor+0x1a0/0x1a0 [ 606.397722] splice_from_pipe+0x108/0x170 [ 606.401864] ? splice_shrink_spd+0xd0/0xd0 [ 606.406095] ? retint_kernel+0x2d/0x2d [ 606.409963] ? splice_from_pipe+0x170/0x170 [ 606.414291] generic_splice_sendpage+0x3c/0x50 [ 606.418897] ? splice_from_pipe+0x170/0x170 [ 606.423226] do_splice+0x70a/0x1490 [ 606.426868] ? iterate_fd+0x360/0x360 [ 606.430685] ? opipe_prep.part.0+0x2d0/0x2d0 [ 606.435091] ? __fget_light+0x1a9/0x230 [ 606.439066] __x64_sys_splice+0x2c6/0x330 [ 606.443229] do_syscall_64+0x103/0x610 [ 606.447134] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 606.452316] RIP: 0033:0x457e29 [ 606.455492] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 606.474396] RSP: 002b:00007f2baa4adc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 606.482108] RAX: ffffffffffffffda RBX: 00007f2baa4adc90 RCX: 0000000000457e29 [ 606.489370] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000003 [ 606.496631] RBP: 000000000073bfa0 R08: 00000000000100e0 R09: 0000000000000000 [ 606.503901] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f2baa4ae6d4 [ 606.511164] R13: 00000000004c6c75 R14: 00000000004db870 R15: 0000000000000007 16:57:27 executing program 5: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x3, 0x2) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) splice(r0, 0x0, r2, 0x0, 0x1ffe0, 0x7004000000000000) 16:57:27 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffff00000000, 0x600000000000000, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) 16:57:27 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x60, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1, 0x0, 0x0, 0xa00000000000000}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) 16:57:27 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x2000000, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x3, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) 16:57:27 executing program 2: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x3, 0x2) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) splice(r0, 0x0, r2, 0x0, 0x10005, 0xa00000000000060) 16:57:27 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x3000000, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x3, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) 16:57:27 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0xf0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1, 0x0, 0x0, 0xa00000000000000}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) 16:57:27 executing program 0 (fault-call:8 fault-nth:16): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x3, 0x2) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) splice(r0, 0x0, r2, 0x0, 0x100e0, 0x0) 16:57:27 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffff00000000, 0x800000000000000, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) 16:57:27 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x4000000, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x3, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) 16:57:27 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x1a0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1, 0x0, 0x0, 0xa00000000000000}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) 16:57:27 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x6000000, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x3, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) [ 607.020598] FAULT_INJECTION: forcing a failure. [ 607.020598] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 607.032483] CPU: 0 PID: 26201 Comm: syz-executor.0 Not tainted 5.0.0+ #6 [ 607.039323] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 607.039331] Call Trace: [ 607.039357] dump_stack+0x172/0x1f0 [ 607.039381] should_fail.cold+0xa/0x1b [ 607.039399] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 607.039420] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 607.039438] ? retint_kernel+0x2d/0x2d [ 607.055019] ? trace_hardirqs_on_caller+0x6a/0x220 [ 607.055045] should_fail_alloc_page+0x50/0x60 [ 607.055075] __alloc_pages_nodemask+0x1a1/0x710 [ 607.055089] ? retint_kernel+0x2d/0x2d [ 607.055105] ? __alloc_pages_slowpath+0x2900/0x2900 [ 607.095644] cache_grow_begin+0x9c/0x8c0 [ 607.099712] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 607.105247] ? check_preemption_disabled+0x48/0x290 [ 607.110284] kmem_cache_alloc_node_trace+0x658/0x720 [ 607.115395] __kmalloc_node_track_caller+0x3d/0x70 [ 607.120322] __kmalloc_reserve.isra.0+0x40/0xf0 [ 607.124978] __alloc_skb+0x10b/0x5e0 [ 607.128675] ? skb_scrub_packet+0x440/0x440 [ 607.133004] ? raw_getfrag+0x164/0x230 [ 607.136889] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 607.141909] __ip_append_data.isra.0+0x24d6/0x2dd0 [ 607.146843] ? raw_destroy+0x30/0x30 [ 607.150550] ? retint_kernel+0x2d/0x2d [ 607.154431] ? __ip_flush_pending_frames.isra.0+0x2d0/0x2d0 [ 607.160142] ? ipv4_mtu+0x2a9/0x400 [ 607.163766] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 607.169295] ? ip_setup_cork+0x53b/0x870 [ 607.173359] ? raw_destroy+0x30/0x30 [ 607.177074] ip_append_data.part.0+0xf2/0x170 [ 607.181554] ? raw_destroy+0x30/0x30 [ 607.185250] ip_append_data+0x6e/0x90 [ 607.189080] raw_sendmsg+0xbd8/0x2f10 [ 607.192883] ? raw_getsockopt+0x100/0x100 [ 607.197021] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 607.202559] ? flexible_sched_in+0xcb/0x9c0 [ 607.206882] ? pinned_sched_in+0xa40/0xa40 [ 607.211104] ? mark_held_locks+0xb1/0x100 [ 607.215235] ? __lock_acquire+0x53b/0x4700 [ 607.219471] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 607.224228] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 607.228970] ? lockdep_hardirqs_on+0x415/0x5d0 [ 607.233537] ? retint_kernel+0x2d/0x2d [ 607.237412] ? trace_hardirqs_on_caller+0x6a/0x220 [ 607.242331] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 607.247084] ? retint_kernel+0x2d/0x2d [ 607.250964] inet_sendmsg+0x147/0x5d0 [ 607.254765] ? raw_getsockopt+0x100/0x100 [ 607.258916] ? inet_sendmsg+0x147/0x5d0 [ 607.262875] ? ipip_gro_receive+0x100/0x100 [ 607.267183] sock_sendmsg+0xdd/0x130 [ 607.270881] kernel_sendmsg+0x44/0x50 [ 607.274735] sock_no_sendpage+0x116/0x150 [ 607.278875] ? sock_kzfree_s+0x70/0x70 [ 607.282768] ? sock_sendmsg+0x5b/0x130 [ 607.286654] inet_sendpage+0x44a/0x630 [ 607.290549] kernel_sendpage+0x95/0xf0 [ 607.294428] ? inet_sendmsg+0x5d0/0x5d0 [ 607.298400] sock_sendpage+0x8b/0xc0 [ 607.302124] pipe_to_sendpage+0x299/0x370 [ 607.306256] ? kernel_sendpage+0xf0/0xf0 [ 607.310324] ? direct_splice_actor+0x1a0/0x1a0 [ 607.314895] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 607.320422] ? anon_pipe_buf_release+0x1c6/0x270 [ 607.325186] __splice_from_pipe+0x39a/0x7e0 [ 607.329521] ? direct_splice_actor+0x1a0/0x1a0 [ 607.334097] ? direct_splice_actor+0x1a0/0x1a0 [ 607.338661] splice_from_pipe+0x108/0x170 [ 607.342819] ? splice_shrink_spd+0xd0/0xd0 [ 607.347041] ? retint_kernel+0x2d/0x2d [ 607.350919] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 607.356449] ? security_file_permission+0x94/0x320 [ 607.361378] generic_splice_sendpage+0x3c/0x50 [ 607.365958] ? splice_from_pipe+0x170/0x170 [ 607.370284] do_splice+0x70a/0x1490 [ 607.373932] ? iterate_fd+0x360/0x360 [ 607.377752] ? opipe_prep.part.0+0x2d0/0x2d0 [ 607.382145] ? __fget_light+0x1a9/0x230 [ 607.386107] __x64_sys_splice+0x2c6/0x330 [ 607.390260] do_syscall_64+0x103/0x610 [ 607.394336] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 607.399529] RIP: 0033:0x457e29 [ 607.402714] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 607.421613] RSP: 002b:00007f2baa4adc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 607.429316] RAX: ffffffffffffffda RBX: 00007f2baa4adc90 RCX: 0000000000457e29 [ 607.436589] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000003 [ 607.443862] RBP: 000000000073bfa0 R08: 00000000000100e0 R09: 0000000000000000 [ 607.451141] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f2baa4ae6d4 [ 607.458418] R13: 00000000004c6c75 R14: 00000000004db870 R15: 0000000000000007 16:57:28 executing program 5: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x3, 0x2) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) splice(r0, 0x0, r2, 0x0, 0x1ffe0, 0x8404000000000000) 16:57:28 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x300, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1, 0x0, 0x0, 0xa00000000000000}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) 16:57:28 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffff00000000, 0xa00000000000000, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) 16:57:28 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x8000000, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x3, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) 16:57:28 executing program 2: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x3, 0x2) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) splice(r0, 0x0, r2, 0x0, 0x10005, 0xa000000000001a0) 16:57:28 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffff00000000, 0xc00000000000000, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) 16:57:28 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x500, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1, 0x0, 0x0, 0xa00000000000000}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) 16:57:28 executing program 0 (fault-call:8 fault-nth:17): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x3, 0x2) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) splice(r0, 0x0, r2, 0x0, 0x100e0, 0x0) 16:57:28 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0xa000000, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x3, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) 16:57:28 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x600, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1, 0x0, 0x0, 0xa00000000000000}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) 16:57:28 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffff00000000, 0xe00000000000000, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) 16:57:28 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0xc000000, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x3, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) [ 607.943108] FAULT_INJECTION: forcing a failure. [ 607.943108] name failslab, interval 1, probability 0, space 0, times 0 [ 607.973521] CPU: 1 PID: 26247 Comm: syz-executor.0 Not tainted 5.0.0+ #6 [ 607.980383] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 607.989757] Call Trace: [ 607.992379] dump_stack+0x172/0x1f0 [ 607.996023] should_fail.cold+0xa/0x1b [ 607.999930] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 608.005043] ? lock_downgrade+0x810/0x810 [ 608.009214] ? ___might_sleep+0x163/0x280 [ 608.013364] __should_failslab+0x121/0x190 [ 608.017597] should_failslab+0x9/0x14 [ 608.021402] kmem_cache_alloc_node+0x264/0x710 [ 608.025996] ? mark_held_locks+0xb1/0x100 [ 608.030163] __alloc_skb+0xd5/0x5e0 [ 608.030183] ? skb_scrub_packet+0x440/0x440 [ 608.030213] __ip_append_data.isra.0+0x24d6/0x2dd0 [ 608.030232] ? retint_kernel+0x2d/0x2d [ 608.038186] ? raw_destroy+0x30/0x30 [ 608.050696] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 608.055491] ? __ip_flush_pending_frames.isra.0+0x2d0/0x2d0 [ 608.061214] ? ipv4_mtu+0x2a9/0x400 [ 608.064853] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 608.070411] ? ip_setup_cork+0x53b/0x870 [ 608.074476] ? raw_destroy+0x30/0x30 [ 608.078184] ip_append_data.part.0+0xf2/0x170 [ 608.082674] ? raw_destroy+0x30/0x30 [ 608.086382] ip_append_data+0x6e/0x90 [ 608.090188] raw_sendmsg+0xbd8/0x2f10 [ 608.093978] ? raw_getsockopt+0x100/0x100 [ 608.098111] ? finish_task_switch+0x146/0x790 [ 608.102606] ? _raw_spin_unlock_irq+0x28/0x90 [ 608.107087] ? finish_task_switch+0x146/0x790 [ 608.111566] ? _raw_spin_unlock_irq+0x28/0x90 [ 608.116050] ? mark_held_locks+0xb1/0x100 [ 608.120184] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 608.124947] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 608.129684] ? lockdep_hardirqs_on+0x415/0x5d0 [ 608.134249] ? retint_kernel+0x2d/0x2d [ 608.138134] ? trace_hardirqs_on_caller+0x6a/0x220 [ 608.143052] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 608.147830] ? retint_kernel+0x2d/0x2d [ 608.151722] inet_sendmsg+0x147/0x5d0 [ 608.155510] ? raw_getsockopt+0x100/0x100 [ 608.159672] ? inet_sendmsg+0x147/0x5d0 [ 608.163633] ? ipip_gro_receive+0x100/0x100 [ 608.167948] sock_sendmsg+0xdd/0x130 [ 608.171653] kernel_sendmsg+0x44/0x50 [ 608.175463] sock_no_sendpage+0x116/0x150 [ 608.179620] ? sock_kzfree_s+0x70/0x70 [ 608.183495] ? trace_hardirqs_on_caller+0x6a/0x220 [ 608.188418] ? mark_held_locks+0xb1/0x100 [ 608.192554] ? trace_hardirqs_on_caller+0x6a/0x220 [ 608.197475] inet_sendpage+0x44a/0x630 [ 608.201351] kernel_sendpage+0x95/0xf0 [ 608.205267] ? inet_sendmsg+0x5d0/0x5d0 [ 608.209233] sock_sendpage+0x8b/0xc0 [ 608.212939] pipe_to_sendpage+0x299/0x370 [ 608.217073] ? kernel_sendpage+0xf0/0xf0 [ 608.221148] ? direct_splice_actor+0x1a0/0x1a0 [ 608.225751] ? pipe_to_sendpage+0x29/0x370 [ 608.229994] __splice_from_pipe+0x39a/0x7e0 [ 608.234321] ? direct_splice_actor+0x1a0/0x1a0 [ 608.238909] ? direct_splice_actor+0x1a0/0x1a0 [ 608.243479] splice_from_pipe+0x108/0x170 [ 608.247625] ? splice_shrink_spd+0xd0/0xd0 [ 608.251866] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 608.257390] ? security_file_permission+0x94/0x320 [ 608.262310] generic_splice_sendpage+0x3c/0x50 [ 608.266891] ? splice_from_pipe+0x170/0x170 [ 608.271195] do_splice+0x70a/0x1490 [ 608.274811] ? iterate_fd+0x360/0x360 [ 608.278600] ? opipe_prep.part.0+0x2d0/0x2d0 [ 608.282992] ? __fget_light+0x1a9/0x230 [ 608.286956] __x64_sys_splice+0x2c6/0x330 [ 608.291098] do_syscall_64+0x103/0x610 [ 608.294979] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 608.300153] RIP: 0033:0x457e29 [ 608.303331] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 608.322214] RSP: 002b:00007f2baa4adc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 608.329906] RAX: ffffffffffffffda RBX: 00007f2baa4adc90 RCX: 0000000000457e29 [ 608.337157] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000003 [ 608.344409] RBP: 000000000073bfa0 R08: 00000000000100e0 R09: 0000000000000000 [ 608.351693] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f2baa4ae6d4 [ 608.358946] R13: 00000000004c6c75 R14: 00000000004db870 R15: 0000000000000007 16:57:29 executing program 5: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x3, 0x2) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) splice(r0, 0x0, r2, 0x0, 0x1ffe0, 0x900b000000000000) 16:57:29 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffff00000000, 0xf00000000000000, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) 16:57:29 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x700, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1, 0x0, 0x0, 0xa00000000000000}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) 16:57:29 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0xe000000, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x3, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) [ 608.446432] net_ratelimit: 91 callbacks suppressed [ 608.446439] neighbour: ndisc_cache: neighbor table overflow! [ 608.483800] neighbour: ndisc_cache: neighbor table overflow! 16:57:29 executing program 2: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x3, 0x2) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) splice(r0, 0x0, r2, 0x0, 0x10005, 0xa000000000001f4) [ 608.492251] neighbour: ndisc_cache: neighbor table overflow! [ 608.509593] neighbour: ndisc_cache: neighbor table overflow! [ 608.515649] neighbour: ndisc_cache: neighbor table overflow! 16:57:29 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x89c, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1, 0x0, 0x0, 0xa00000000000000}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) 16:57:29 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0xf000000, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x3, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) [ 608.544715] neighbour: ndisc_cache: neighbor table overflow! [ 608.616586] neighbour: ndisc_cache: neighbor table overflow! 16:57:29 executing program 0 (fault-call:8 fault-nth:18): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x3, 0x2) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) splice(r0, 0x0, r2, 0x0, 0x100e0, 0x0) 16:57:29 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffff00000000, 0x1000000000000000, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) [ 608.666283] neighbour: ndisc_cache: neighbor table overflow! [ 608.700371] neighbour: ndisc_cache: neighbor table overflow! 16:57:29 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x10000000, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x3, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) 16:57:29 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffff00000000, 0x3f00000000000000, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) [ 608.732096] neighbour: ndisc_cache: neighbor table overflow! 16:57:29 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0xa00, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1, 0x0, 0x0, 0xa00000000000000}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) [ 608.823493] FAULT_INJECTION: forcing a failure. [ 608.823493] name failslab, interval 1, probability 0, space 0, times 0 [ 608.888889] CPU: 1 PID: 26289 Comm: syz-executor.0 Not tainted 5.0.0+ #6 [ 608.895779] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 608.905140] Call Trace: [ 608.907741] dump_stack+0x172/0x1f0 [ 608.911382] should_fail.cold+0xa/0x1b [ 608.915291] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 608.920422] ? lock_downgrade+0x810/0x810 [ 608.924586] ? ___might_sleep+0x163/0x280 [ 608.928752] __should_failslab+0x121/0x190 [ 608.933004] should_failslab+0x9/0x14 [ 608.933035] kmem_cache_alloc_node_trace+0x270/0x720 [ 608.933063] __kmalloc_node_track_caller+0x3d/0x70 [ 608.933082] __kmalloc_reserve.isra.0+0x40/0xf0 [ 608.933100] __alloc_skb+0x10b/0x5e0 [ 608.941993] ? skb_scrub_packet+0x440/0x440 [ 608.942011] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 608.942042] __ip_append_data.isra.0+0x24d6/0x2dd0 [ 608.942068] ? raw_destroy+0x30/0x30 [ 608.942086] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 608.977806] ? __ip_flush_pending_frames.isra.0+0x2d0/0x2d0 [ 608.983504] ? raw_destroy+0x30/0x30 [ 608.987211] ? raw_destroy+0x30/0x30 [ 608.990916] ip_append_data.part.0+0xf2/0x170 [ 608.995456] ? raw_destroy+0x30/0x30 [ 608.999158] ip_append_data+0x6e/0x90 [ 609.002945] raw_sendmsg+0xbd8/0x2f10 [ 609.006896] ? raw_getsockopt+0x100/0x100 [ 609.011034] ? ima_match_policy+0xa19/0x13d0 [ 609.015441] ? process_measurement+0xd5d/0x1570 [ 609.020099] ? process_measurement+0xd5d/0x1570 [ 609.024773] ? mark_held_locks+0xb1/0x100 [ 609.028927] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 609.033675] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 609.038464] ? __lock_acquire+0x53b/0x4700 [ 609.042704] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 609.047458] inet_sendmsg+0x147/0x5d0 [ 609.051240] ? raw_getsockopt+0x100/0x100 [ 609.055392] ? inet_sendmsg+0x147/0x5d0 [ 609.059357] ? ipip_gro_receive+0x100/0x100 [ 609.063667] sock_sendmsg+0xdd/0x130 [ 609.067369] kernel_sendmsg+0x44/0x50 [ 609.071168] sock_no_sendpage+0x116/0x150 [ 609.075319] ? sock_kzfree_s+0x70/0x70 [ 609.079204] ? inet_sendpage+0x58/0x630 [ 609.083163] inet_sendpage+0x44a/0x630 [ 609.087052] kernel_sendpage+0x95/0xf0 [ 609.090941] ? inet_sendmsg+0x5d0/0x5d0 [ 609.094903] sock_sendpage+0x8b/0xc0 [ 609.098611] ? lockdep_hardirqs_on+0x415/0x5d0 [ 609.103223] pipe_to_sendpage+0x299/0x370 [ 609.107388] ? kernel_sendpage+0xf0/0xf0 [ 609.111438] ? direct_splice_actor+0x1a0/0x1a0 [ 609.116008] ? __put_page+0x92/0xd0 [ 609.119624] ? anon_pipe_buf_release+0x1c6/0x270 [ 609.124373] __splice_from_pipe+0x39a/0x7e0 [ 609.128683] ? direct_splice_actor+0x1a0/0x1a0 [ 609.133279] ? direct_splice_actor+0x1a0/0x1a0 [ 609.137860] splice_from_pipe+0x108/0x170 [ 609.141992] ? splice_shrink_spd+0xd0/0xd0 [ 609.146228] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 609.151767] ? security_file_permission+0x94/0x320 [ 609.156698] generic_splice_sendpage+0x3c/0x50 [ 609.161277] ? splice_from_pipe+0x170/0x170 [ 609.165610] do_splice+0x70a/0x1490 [ 609.169255] ? iterate_fd+0x360/0x360 [ 609.173055] ? opipe_prep.part.0+0x2d0/0x2d0 [ 609.177451] ? __fget_light+0x1a9/0x230 [ 609.181413] __x64_sys_splice+0x2c6/0x330 [ 609.185555] do_syscall_64+0x103/0x610 [ 609.189454] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 609.194656] RIP: 0033:0x457e29 [ 609.197834] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 609.216720] RSP: 002b:00007f2baa4adc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 609.224411] RAX: ffffffffffffffda RBX: 00007f2baa4adc90 RCX: 0000000000457e29 [ 609.231667] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000003 [ 609.238938] RBP: 000000000073bfa0 R08: 00000000000100e0 R09: 0000000000000000 [ 609.246195] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f2baa4ae6d4 [ 609.253451] R13: 00000000004c6c75 R14: 00000000004db870 R15: 0000000000000007 16:57:30 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffff00000000, 0x6000000000000000, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) 16:57:30 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x60000000, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x3, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) 16:57:30 executing program 5: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x3, 0x2) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) splice(r0, 0x0, r2, 0x0, 0x1ffe0, 0x97ffffff00000000) 16:57:30 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0xc00, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1, 0x0, 0x0, 0xa00000000000000}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) 16:57:30 executing program 2: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x3, 0x2) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) splice(r0, 0x0, r2, 0x0, 0x10005, 0xa000000000003e8) 16:57:30 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffff00000000, 0x6558000000000000, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) 16:57:30 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x62060000, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x3, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) 16:57:30 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0xe00, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1, 0x0, 0x0, 0xa00000000000000}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) 16:57:30 executing program 0 (fault-call:8 fault-nth:19): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x3, 0x2) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) splice(r0, 0x0, r2, 0x0, 0x100e0, 0x0) 16:57:30 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x65580000, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x3, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) 16:57:30 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffff00000000, 0x8100000000000000, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) 16:57:30 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x5865, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1, 0x0, 0x0, 0xa00000000000000}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) 16:57:30 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x81000000, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x3, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) [ 609.836181] FAULT_INJECTION: forcing a failure. [ 609.836181] name failslab, interval 1, probability 0, space 0, times 0 [ 609.856109] CPU: 1 PID: 26339 Comm: syz-executor.0 Not tainted 5.0.0+ #6 [ 609.862966] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 609.872312] Call Trace: [ 609.872340] dump_stack+0x172/0x1f0 [ 609.872364] should_fail.cold+0xa/0x1b 16:57:30 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x6000, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1, 0x0, 0x0, 0xa00000000000000}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) [ 609.872386] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 609.887563] ? lock_downgrade+0x810/0x810 [ 609.891718] ? ___might_sleep+0x163/0x280 [ 609.895881] __should_failslab+0x121/0x190 [ 609.900137] should_failslab+0x9/0x14 [ 609.903976] kmem_cache_alloc_node+0x264/0x710 [ 609.908566] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 609.914104] ? ip_generic_getfrag+0x120/0x230 [ 609.918630] __alloc_skb+0xd5/0x5e0 [ 609.922287] ? skb_scrub_packet+0x440/0x440 [ 609.926621] ? raw_getfrag+0x164/0x230 [ 609.930516] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 609.935553] __ip_append_data.isra.0+0x24d6/0x2dd0 [ 609.940508] ? retint_kernel+0x2d/0x2d [ 609.944414] ? raw_destroy+0x30/0x30 [ 609.948160] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 609.952936] ? __ip_flush_pending_frames.isra.0+0x2d0/0x2d0 [ 609.958647] ? ipv4_mtu+0x2a9/0x400 [ 609.962293] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 609.967886] ? ip_setup_cork+0x53b/0x870 [ 609.971983] ? raw_destroy+0x30/0x30 [ 609.975697] ip_append_data.part.0+0xf2/0x170 [ 609.980179] ? raw_destroy+0x30/0x30 [ 609.983886] ip_append_data+0x6e/0x90 [ 609.987676] raw_sendmsg+0xbd8/0x2f10 [ 609.991480] ? raw_getsockopt+0x100/0x100 [ 609.995627] ? lock_downgrade+0x810/0x810 [ 609.999774] ? kasan_check_read+0x11/0x20 [ 610.003918] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 610.008654] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 610.013390] ? lockdep_hardirqs_on+0x415/0x5d0 [ 610.017952] ? retint_kernel+0x2d/0x2d [ 610.021824] ? trace_hardirqs_on_caller+0x6a/0x220 [ 610.026734] ? check_preemption_disabled+0x48/0x290 [ 610.031745] ? __lock_acquire+0x53b/0x4700 [ 610.036005] inet_sendmsg+0x147/0x5d0 [ 610.039839] ? raw_getsockopt+0x100/0x100 [ 610.044002] ? inet_sendmsg+0x147/0x5d0 [ 610.047985] ? ipip_gro_receive+0x100/0x100 [ 610.052315] sock_sendmsg+0xdd/0x130 [ 610.056031] kernel_sendmsg+0x44/0x50 [ 610.059832] sock_no_sendpage+0x116/0x150 [ 610.063981] ? sock_kzfree_s+0x70/0x70 [ 610.068236] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 610.073009] inet_sendpage+0x44a/0x630 [ 610.076917] kernel_sendpage+0x95/0xf0 [ 610.080808] ? inet_sendmsg+0x5d0/0x5d0 [ 610.084809] sock_sendpage+0x8b/0xc0 [ 610.088502] ? lockdep_hardirqs_on+0x415/0x5d0 [ 610.093075] pipe_to_sendpage+0x299/0x370 [ 610.097219] ? kernel_sendpage+0xf0/0xf0 [ 610.101304] ? direct_splice_actor+0x1a0/0x1a0 [ 610.105900] ? __put_page+0x92/0xd0 [ 610.109510] ? anon_pipe_buf_release+0x1c6/0x270 [ 610.114252] __splice_from_pipe+0x39a/0x7e0 [ 610.118569] ? direct_splice_actor+0x1a0/0x1a0 [ 610.123154] ? direct_splice_actor+0x1a0/0x1a0 [ 610.127721] splice_from_pipe+0x108/0x170 [ 610.131853] ? splice_shrink_spd+0xd0/0xd0 [ 610.136092] ? retint_kernel+0x2d/0x2d [ 610.139972] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 610.145509] ? security_file_permission+0x94/0x320 [ 610.150422] ? rw_verify_area+0xb2/0x360 [ 610.154469] generic_splice_sendpage+0x3c/0x50 [ 610.159044] ? splice_from_pipe+0x170/0x170 [ 610.163350] do_splice+0x70a/0x1490 [ 610.166985] ? iterate_fd+0x360/0x360 [ 610.170770] ? opipe_prep.part.0+0x2d0/0x2d0 [ 610.175163] ? __fget_light+0x1a9/0x230 [ 610.179141] __x64_sys_splice+0x2c6/0x330 [ 610.183291] do_syscall_64+0x103/0x610 [ 610.187179] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 610.192378] RIP: 0033:0x457e29 [ 610.195582] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 610.214482] RSP: 002b:00007f2baa4adc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 610.222196] RAX: ffffffffffffffda RBX: 00007f2baa4adc90 RCX: 0000000000457e29 [ 610.229462] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000003 [ 610.236712] RBP: 000000000073bfa0 R08: 00000000000100e0 R09: 0000000000000000 [ 610.243963] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f2baa4ae6d4 [ 610.251218] R13: 00000000004c6c75 R14: 00000000004db870 R15: 0000000000000007 16:57:31 executing program 5: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x3, 0x2) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) splice(r0, 0x0, r2, 0x0, 0x1ffe0, 0xc805000000000000) 16:57:31 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x6558, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1, 0x0, 0x0, 0xa00000000000000}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) 16:57:31 executing program 2: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x3, 0x2) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) splice(r0, 0x0, r2, 0x0, 0x10005, 0xa00000000000470) 16:57:31 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x82020000, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x3, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) 16:57:31 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffff00000000, 0x8202000000000000, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) 16:57:31 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x8100, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1, 0x0, 0x0, 0xa00000000000000}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) 16:57:31 executing program 0 (fault-call:8 fault-nth:20): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x3, 0x2) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) splice(r0, 0x0, r2, 0x0, 0x100e0, 0x0) 16:57:31 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x88a8ffff, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x3, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) 16:57:31 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x9c08, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1, 0x0, 0x0, 0xa00000000000000}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) 16:57:31 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffff00000000, 0x88a8ffff00000000, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) [ 610.615828] FAULT_INJECTION: forcing a failure. [ 610.615828] name failslab, interval 1, probability 0, space 0, times 0 16:57:31 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0xf000, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1, 0x0, 0x0, 0xa00000000000000}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) 16:57:31 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffff00000000, 0x9d02000000000000, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) [ 610.664934] CPU: 1 PID: 26385 Comm: syz-executor.0 Not tainted 5.0.0+ #6 [ 610.671817] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 610.681170] Call Trace: [ 610.683768] dump_stack+0x172/0x1f0 [ 610.687421] should_fail.cold+0xa/0x1b [ 610.691325] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 610.696440] ? lock_downgrade+0x810/0x810 [ 610.700623] ? ___might_sleep+0x163/0x280 [ 610.704807] __should_failslab+0x121/0x190 [ 610.709060] should_failslab+0x9/0x14 [ 610.712866] kmem_cache_alloc_node_trace+0x270/0x720 [ 610.717975] ? __alloc_skb+0xd5/0x5e0 [ 610.721819] ? rcu_lockdep_current_cpu_online+0xe3/0x130 [ 610.727292] __kmalloc_node_track_caller+0x3d/0x70 [ 610.732234] __kmalloc_reserve.isra.0+0x40/0xf0 [ 610.736924] __alloc_skb+0x10b/0x5e0 [ 610.740647] ? skb_scrub_packet+0x440/0x440 [ 610.744992] ? raw_getfrag+0x164/0x230 [ 610.748888] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 610.753918] __ip_append_data.isra.0+0x24d6/0x2dd0 [ 610.758865] ? raw_destroy+0x30/0x30 [ 610.762599] ? __ip_flush_pending_frames.isra.0+0x2d0/0x2d0 [ 610.768326] ? ipv4_mtu+0x2a9/0x400 [ 610.771966] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 610.777553] ? ip_setup_cork+0x53b/0x870 [ 610.781633] ? raw_destroy+0x30/0x30 [ 610.785352] ip_append_data.part.0+0xf2/0x170 [ 610.789853] ? raw_destroy+0x30/0x30 [ 610.793572] ip_append_data+0x6e/0x90 [ 610.797407] raw_sendmsg+0xbd8/0x2f10 [ 610.797440] ? raw_getsockopt+0x100/0x100 [ 610.797464] ? ima_match_policy+0xa19/0x13d0 [ 610.797480] ? process_measurement+0xd5d/0x1570 [ 610.805426] ? process_measurement+0xd5d/0x1570 [ 610.805452] ? lock_downgrade+0x810/0x810 [ 610.805476] ? __lock_acquire+0x53b/0x4700 [ 610.819182] ? __lock_acquire+0x53b/0x4700 [ 610.819197] ? __lock_acquire+0x53b/0x4700 [ 610.819224] inet_sendmsg+0x147/0x5d0 [ 610.819237] ? raw_getsockopt+0x100/0x100 [ 610.819250] ? inet_sendmsg+0x147/0x5d0 [ 610.819274] ? ipip_gro_receive+0x100/0x100 [ 610.827646] sock_sendmsg+0xdd/0x130 [ 610.827663] kernel_sendmsg+0x44/0x50 [ 610.827682] sock_no_sendpage+0x116/0x150 [ 610.827697] ? sock_kzfree_s+0x70/0x70 [ 610.867908] ? debug_check_no_obj_freed+0x200/0x464 [ 610.872913] ? mark_held_locks+0xb1/0x100 [ 610.877046] inet_sendpage+0x44a/0x630 [ 610.880919] kernel_sendpage+0x95/0xf0 [ 610.884794] ? inet_sendmsg+0x5d0/0x5d0 [ 610.888758] sock_sendpage+0x8b/0xc0 [ 610.892455] ? lockdep_hardirqs_on+0x415/0x5d0 [ 610.897024] pipe_to_sendpage+0x299/0x370 [ 610.901155] ? kernel_sendpage+0xf0/0xf0 [ 610.905226] ? direct_splice_actor+0x1a0/0x1a0 [ 610.909801] ? __put_page+0x92/0xd0 [ 610.913440] ? anon_pipe_buf_release+0x1c6/0x270 [ 610.918215] __splice_from_pipe+0x39a/0x7e0 [ 610.922549] ? direct_splice_actor+0x1a0/0x1a0 [ 610.927165] ? direct_splice_actor+0x1a0/0x1a0 [ 610.931737] splice_from_pipe+0x108/0x170 [ 610.935864] ? splice_shrink_spd+0xd0/0xd0 [ 610.940082] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 610.945621] ? security_file_permission+0x94/0x320 [ 610.950533] generic_splice_sendpage+0x3c/0x50 [ 610.955093] ? splice_from_pipe+0x170/0x170 [ 610.959408] do_splice+0x70a/0x1490 [ 610.963022] ? iterate_fd+0x360/0x360 [ 610.966811] ? opipe_prep.part.0+0x2d0/0x2d0 [ 610.971213] ? __fget_light+0x1a9/0x230 [ 610.975172] __x64_sys_splice+0x2c6/0x330 [ 610.979311] do_syscall_64+0x103/0x610 [ 610.983185] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 610.988355] RIP: 0033:0x457e29 [ 610.991536] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 611.010430] RSP: 002b:00007f2baa4adc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 611.018118] RAX: ffffffffffffffda RBX: 00007f2baa4adc90 RCX: 0000000000457e29 [ 611.025377] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000003 [ 611.032637] RBP: 000000000073bfa0 R08: 00000000000100e0 R09: 0000000000000000 [ 611.039885] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f2baa4ae6d4 [ 611.047143] R13: 00000000004c6c75 R14: 00000000004db870 R15: 0000000000000007 16:57:31 executing program 5: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x3, 0x2) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) splice(r0, 0x0, r2, 0x0, 0x1ffe0, 0xdc05000000000000) 16:57:31 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x8000a0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1, 0x0, 0x0, 0xa00000000000000}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) 16:57:32 executing program 2: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x3, 0x2) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) splice(r0, 0x0, r2, 0x0, 0x10005, 0xa00000000000484) 16:57:32 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffff00000000, 0x9effffff00000000, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) 16:57:32 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x9effffff, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x3, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) 16:57:32 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0xf0ffff, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1, 0x0, 0x0, 0xa00000000000000}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) 16:57:32 executing program 0 (fault-call:8 fault-nth:21): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x3, 0x2) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) splice(r0, 0x0, r2, 0x0, 0x100e0, 0x0) 16:57:32 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffff00000000, 0xf0ffffff00000000, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) 16:57:32 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x1000000, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1, 0x0, 0x0, 0xa00000000000000}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) [ 611.620082] FAULT_INJECTION: forcing a failure. [ 611.620082] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 611.631937] CPU: 0 PID: 26431 Comm: syz-executor.0 Not tainted 5.0.0+ #6 [ 611.638801] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 611.648174] Call Trace: [ 611.650780] dump_stack+0x172/0x1f0 [ 611.654429] should_fail.cold+0xa/0x1b [ 611.658346] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 611.663468] ? mark_held_locks+0x100/0x100 [ 611.667720] should_fail_alloc_page+0x50/0x60 [ 611.672226] __alloc_pages_nodemask+0x1a1/0x710 [ 611.676908] ? sock_sendpage+0x8b/0xc0 [ 611.680808] ? __alloc_pages_slowpath+0x2900/0x2900 [ 611.685850] cache_grow_begin+0x9c/0x8c0 [ 611.689939] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 611.695490] ? check_preemption_disabled+0x48/0x290 [ 611.700517] kmem_cache_alloc_node_trace+0x658/0x720 [ 611.705633] ? lock_is_held_type+0x17e/0x210 [ 611.710055] __kmalloc_node_track_caller+0x3d/0x70 [ 611.714985] __kmalloc_reserve.isra.0+0x40/0xf0 [ 611.719653] __alloc_skb+0x10b/0x5e0 [ 611.719669] ? skb_scrub_packet+0x440/0x440 [ 611.719686] ? rt_set_nexthop.constprop.0+0x529/0x11d0 [ 611.719708] __ip_append_data.isra.0+0x24d6/0x2dd0 [ 611.737899] ? raw_destroy+0x30/0x30 [ 611.737929] ? __ip_flush_pending_frames.isra.0+0x2d0/0x2d0 [ 611.747358] ? ipv4_mtu+0x2a9/0x400 [ 611.750991] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 611.751006] ? ip_setup_cork+0x53b/0x870 [ 611.751022] ? raw_destroy+0x30/0x30 [ 611.751037] ip_append_data.part.0+0xf2/0x170 [ 611.751057] ? raw_destroy+0x30/0x30 [ 611.751074] ip_append_data+0x6e/0x90 [ 611.751097] raw_sendmsg+0xbd8/0x2f10 [ 611.780170] ? raw_getsockopt+0x100/0x100 [ 611.784338] ? retint_kernel+0x2d/0x2d [ 611.788229] ? trace_hardirqs_on_caller+0x6a/0x220 [ 611.793181] ? ima_match_policy+0xa19/0x13d0 [ 611.797597] ? process_measurement+0xd5d/0x1570 [ 611.802322] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 611.807125] ? lockdep_hardirqs_on+0x415/0x5d0 [ 611.811725] ? retint_kernel+0x2d/0x2d [ 611.815619] ? trace_hardirqs_on_caller+0x6a/0x220 16:57:32 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x2000000, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1, 0x0, 0x0, 0xa00000000000000}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) 16:57:32 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0xa0008000, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x3, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) 16:57:32 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x3000000, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1, 0x0, 0x0, 0xa00000000000000}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) [ 611.820575] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 611.825340] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 611.830100] ? lockdep_hardirqs_on+0x415/0x5d0 [ 611.834684] ? retint_kernel+0x2d/0x2d [ 611.838588] ? trace_hardirqs_on_caller+0x6a/0x220 [ 611.843537] inet_sendmsg+0x147/0x5d0 [ 611.847352] ? raw_getsockopt+0x100/0x100 [ 611.851513] ? inet_sendmsg+0x147/0x5d0 [ 611.855516] ? ipip_gro_receive+0x100/0x100 [ 611.855549] sock_sendmsg+0xdd/0x130 [ 611.855567] kernel_sendmsg+0x44/0x50 [ 611.855586] sock_no_sendpage+0x116/0x150 [ 611.855603] ? sock_kzfree_s+0x70/0x70 [ 611.863638] ? debug_check_no_obj_freed+0x200/0x464 [ 611.863663] ? mark_held_locks+0xb1/0x100 [ 611.863684] inet_sendpage+0x44a/0x630 [ 611.863703] kernel_sendpage+0x95/0xf0 [ 611.863717] ? inet_sendmsg+0x5d0/0x5d0 [ 611.896471] sock_sendpage+0x8b/0xc0 [ 611.900198] pipe_to_sendpage+0x299/0x370 [ 611.904352] ? kernel_sendpage+0xf0/0xf0 [ 611.908422] ? direct_splice_actor+0x1a0/0x1a0 [ 611.913030] ? __x32_compat_sys_execveat+0x140/0x140 [ 611.918156] __splice_from_pipe+0x39a/0x7e0 [ 611.918174] ? direct_splice_actor+0x1a0/0x1a0 [ 611.918197] ? direct_splice_actor+0x1a0/0x1a0 [ 611.918213] splice_from_pipe+0x108/0x170 [ 611.927121] ? splice_shrink_spd+0xd0/0xd0 [ 611.927141] ? retint_kernel+0x2d/0x2d [ 611.927158] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 611.927175] ? security_file_permission+0x94/0x320 [ 611.927193] generic_splice_sendpage+0x3c/0x50 [ 611.958992] ? splice_from_pipe+0x170/0x170 [ 611.963305] do_splice+0x70a/0x1490 [ 611.966920] ? iterate_fd+0x360/0x360 [ 611.970716] ? opipe_prep.part.0+0x2d0/0x2d0 [ 611.975119] ? __fget_light+0x1a9/0x230 [ 611.979079] __x64_sys_splice+0x2c6/0x330 [ 611.983228] do_syscall_64+0x103/0x610 [ 611.987120] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 611.992309] RIP: 0033:0x457e29 [ 611.995496] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 612.014378] RSP: 002b:00007f2baa4adc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 612.022065] RAX: ffffffffffffffda RBX: 00007f2baa4adc90 RCX: 0000000000457e29 [ 612.029316] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000003 [ 612.036604] RBP: 000000000073bfa0 R08: 00000000000100e0 R09: 0000000000000000 [ 612.043869] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f2baa4ae6d4 [ 612.051117] R13: 00000000004c6c75 R14: 00000000004db870 R15: 0000000000000007 16:57:32 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x4000000, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1, 0x0, 0x0, 0xa00000000000000}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) 16:57:32 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffff00000000, 0xffffff7f00000000, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) 16:57:33 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0xa0010000, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x3, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) 16:57:33 executing program 5: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x3, 0x2) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) splice(r0, 0x0, r2, 0x0, 0x1ffe0, 0xe803000000000000) 16:57:33 executing program 2: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x3, 0x2) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) splice(r0, 0x0, r2, 0x0, 0x10005, 0xa000000000005c8) 16:57:33 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffff00000000, 0xffffffff00000000, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) 16:57:33 executing program 0 (fault-call:8 fault-nth:22): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x3, 0x2) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) splice(r0, 0x0, r2, 0x0, 0x100e0, 0x0) 16:57:33 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x5000000, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1, 0x0, 0x0, 0xa00000000000000}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) 16:57:33 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0xf0ffffff, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x3, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) 16:57:33 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffff00000000, 0xffffffffa0008000, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) 16:57:33 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x6000000, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1, 0x0, 0x0, 0xa00000000000000}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) 16:57:33 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0xffffa888, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x3, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) 16:57:33 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x7000000, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1, 0x0, 0x0, 0xa00000000000000}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) 16:57:33 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffff00000000, 0xffffffffa0010000, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) [ 612.714906] FAULT_INJECTION: forcing a failure. [ 612.714906] name failslab, interval 1, probability 0, space 0, times 0 [ 612.748095] CPU: 0 PID: 26497 Comm: syz-executor.0 Not tainted 5.0.0+ #6 [ 612.754950] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 612.764308] Call Trace: [ 612.766914] dump_stack+0x172/0x1f0 [ 612.770574] should_fail.cold+0xa/0x1b [ 612.774494] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 612.779601] ? lock_downgrade+0x810/0x810 [ 612.783759] ? ___might_sleep+0x163/0x280 [ 612.787926] __should_failslab+0x121/0x190 [ 612.792173] should_failslab+0x9/0x14 [ 612.795980] kmem_cache_alloc_node+0x264/0x710 [ 612.800571] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 612.805339] __alloc_skb+0xd5/0x5e0 [ 612.808977] ? skb_scrub_packet+0x440/0x440 16:57:33 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x8000000, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1, 0x0, 0x0, 0xa00000000000000}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) [ 612.813318] ? __ip_append_data.isra.0+0x1ed6/0x2dd0 [ 612.818437] __ip_append_data.isra.0+0x24d6/0x2dd0 [ 612.823381] ? raw_destroy+0x30/0x30 [ 612.827118] ? __ip_flush_pending_frames.isra.0+0x2d0/0x2d0 [ 612.832836] ? ipv4_mtu+0x2a9/0x400 [ 612.836473] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 612.842009] ? ip_setup_cork+0x53b/0x870 [ 612.846074] ? raw_destroy+0x30/0x30 [ 612.849793] ip_append_data.part.0+0xf2/0x170 [ 612.854315] ? raw_destroy+0x30/0x30 [ 612.858051] ip_append_data+0x6e/0x90 [ 612.861867] raw_sendmsg+0xbd8/0x2f10 [ 612.865675] ? lockdep_hardirqs_on+0x342/0x5d0 [ 612.870280] ? raw_getsockopt+0x100/0x100 [ 612.874444] ? process_measurement+0xd5d/0x1570 [ 612.879142] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 612.883896] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 612.888655] ? lockdep_hardirqs_on+0x415/0x5d0 [ 612.893241] ? retint_kernel+0x2d/0x2d [ 612.897135] ? trace_hardirqs_on_caller+0x6a/0x220 [ 612.902099] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 612.906896] ? retint_kernel+0x2d/0x2d [ 612.910799] inet_sendmsg+0x147/0x5d0 [ 612.914602] ? raw_getsockopt+0x100/0x100 [ 612.918750] ? inet_sendmsg+0x147/0x5d0 [ 612.922736] ? ipip_gro_receive+0x100/0x100 [ 612.927060] sock_sendmsg+0xdd/0x130 [ 612.930781] kernel_sendmsg+0x44/0x50 [ 612.934580] sock_no_sendpage+0x116/0x150 [ 612.938756] ? sock_kzfree_s+0x70/0x70 [ 612.942652] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 612.947436] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 612.952196] inet_sendpage+0x44a/0x630 [ 612.956065] kernel_sendpage+0x95/0xf0 [ 612.959979] ? inet_sendmsg+0x5d0/0x5d0 [ 612.963945] sock_sendpage+0x8b/0xc0 [ 612.967664] ? lockdep_hardirqs_on+0x415/0x5d0 [ 612.972248] pipe_to_sendpage+0x299/0x370 [ 612.976422] ? kernel_sendpage+0xf0/0xf0 [ 612.980502] ? direct_splice_actor+0x1a0/0x1a0 [ 612.985079] ? __put_page+0x92/0xd0 [ 612.988694] ? anon_pipe_buf_release+0x1c6/0x270 [ 612.993445] __splice_from_pipe+0x39a/0x7e0 [ 612.997791] ? direct_splice_actor+0x1a0/0x1a0 [ 613.002380] ? direct_splice_actor+0x1a0/0x1a0 [ 613.006954] splice_from_pipe+0x108/0x170 [ 613.011106] ? splice_shrink_spd+0xd0/0xd0 [ 613.015351] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 613.020901] ? security_file_permission+0x94/0x320 [ 613.025823] generic_splice_sendpage+0x3c/0x50 [ 613.030394] ? splice_from_pipe+0x170/0x170 [ 613.034723] do_splice+0x70a/0x1490 [ 613.038350] ? iterate_fd+0x360/0x360 [ 613.042140] ? opipe_prep.part.0+0x2d0/0x2d0 [ 613.046537] ? __fget_light+0x1a9/0x230 [ 613.050502] __x64_sys_splice+0x2c6/0x330 [ 613.054646] do_syscall_64+0x103/0x610 [ 613.058516] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 613.063686] RIP: 0033:0x457e29 [ 613.066857] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 613.085755] RSP: 002b:00007f2baa4adc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 613.093463] RAX: ffffffffffffffda RBX: 00007f2baa4adc90 RCX: 0000000000457e29 [ 613.100722] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000003 [ 613.107984] RBP: 000000000073bfa0 R08: 00000000000100e0 R09: 0000000000000000 [ 613.115238] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f2baa4ae6d4 [ 613.122494] R13: 00000000004c6c75 R14: 00000000004db870 R15: 0000000000000007 16:57:34 executing program 5: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x3, 0x2) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) splice(r0, 0x0, r2, 0x0, 0x1ffe0, 0xf401000000000000) 16:57:34 executing program 2: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x3, 0x2) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) splice(r0, 0x0, r2, 0x0, 0x10005, 0xa000000000005dc) 16:57:34 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffff00000000, 0xfffffffffffff000, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) 16:57:34 executing program 0 (fault-call:8 fault-nth:23): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x3, 0x2) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) splice(r0, 0x0, r2, 0x0, 0x100e0, 0x0) 16:57:34 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0xfffff000, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x3, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) 16:57:34 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffff00000000, 0x0, 0x40030000000002, 0x34000]}}]}, 0x2b2}}, 0x0) 16:57:34 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0xa000000, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1, 0x0, 0x0, 0xa00000000000000}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) [ 613.473049] net_ratelimit: 87 callbacks suppressed [ 613.473057] neighbour: ndisc_cache: neighbor table overflow! [ 613.499904] neighbour: ndisc_cache: neighbor table overflow! [ 613.505891] neighbour: ndisc_cache: neighbor table overflow! [ 613.514034] neighbour: ndisc_cache: neighbor table overflow! 16:57:34 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffff00000000, 0x0, 0x40030000000003, 0x34000]}}]}, 0x2b2}}, 0x0) 16:57:34 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0xffffff7f, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x3, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) [ 613.522948] neighbour: ndisc_cache: neighbor table overflow! [ 613.537008] neighbour: ndisc_cache: neighbor table overflow! [ 613.580560] FAULT_INJECTION: forcing a failure. [ 613.580560] name failslab, interval 1, probability 0, space 0, times 0 [ 613.607230] CPU: 1 PID: 26539 Comm: syz-executor.0 Not tainted 5.0.0+ #6 [ 613.614084] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 613.623434] Call Trace: [ 613.626034] dump_stack+0x172/0x1f0 [ 613.629667] should_fail.cold+0xa/0x1b [ 613.633580] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 613.635509] neighbour: ndisc_cache: neighbor table overflow! [ 613.638694] ? lock_downgrade+0x810/0x810 [ 613.638715] ? ___might_sleep+0x163/0x280 [ 613.638738] __should_failslab+0x121/0x190 [ 613.638759] should_failslab+0x9/0x14 [ 613.646680] neighbour: ndisc_cache: neighbor table overflow! [ 613.648692] kmem_cache_alloc_node+0x264/0x710 [ 613.648711] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 613.648742] ? ip_generic_getfrag+0x120/0x230 [ 613.648764] __alloc_skb+0xd5/0x5e0 [ 613.648818] ? skb_scrub_packet+0x440/0x440 [ 613.673237] neighbour: ndisc_cache: neighbor table overflow! [ 613.676894] ? raw_getfrag+0x164/0x230 [ 613.676908] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 613.676930] __ip_append_data.isra.0+0x24d6/0x2dd0 [ 613.693590] neighbour: ndisc_cache: neighbor table overflow! [ 613.695155] ? raw_destroy+0x30/0x30 [ 613.695184] ? __ip_flush_pending_frames.isra.0+0x2d0/0x2d0 [ 613.724215] ? ipv4_mtu+0x2a9/0x400 16:57:34 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0xc000000, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1, 0x0, 0x0, 0xa00000000000000}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) 16:57:34 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0xe000000, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1, 0x0, 0x0, 0xa00000000000000}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) 16:57:34 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x10000000, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1, 0x0, 0x0, 0xa00000000000000}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) [ 613.727845] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 613.733384] ? ip_setup_cork+0x53b/0x870 [ 613.737460] ? raw_destroy+0x30/0x30 [ 613.741200] ip_append_data.part.0+0xf2/0x170 [ 613.745710] ? raw_destroy+0x30/0x30 [ 613.749434] ip_append_data+0x6e/0x90 [ 613.753278] raw_sendmsg+0xbd8/0x2f10 [ 613.757112] ? raw_getsockopt+0x100/0x100 [ 613.761281] ? ima_match_policy+0xa19/0x13d0 [ 613.765709] ? process_measurement+0xd5d/0x1570 [ 613.770407] ? process_measurement+0xd5d/0x1570 [ 613.775095] ? lock_downgrade+0x810/0x810 [ 613.779272] ? __lock_acquire+0x53b/0x4700 [ 613.783532] ? __lock_acquire+0x53b/0x4700 [ 613.787763] ? __lock_acquire+0x53b/0x4700 [ 613.791989] inet_sendmsg+0x147/0x5d0 [ 613.795769] ? raw_getsockopt+0x100/0x100 [ 613.799909] ? inet_sendmsg+0x147/0x5d0 [ 613.803867] ? ipip_gro_receive+0x100/0x100 [ 613.808170] sock_sendmsg+0xdd/0x130 [ 613.811867] kernel_sendmsg+0x44/0x50 [ 613.815671] sock_no_sendpage+0x116/0x150 [ 613.819819] ? sock_kzfree_s+0x70/0x70 [ 613.823691] ? debug_check_no_obj_freed+0x200/0x464 [ 613.828710] ? mark_held_locks+0xb1/0x100 [ 613.832855] inet_sendpage+0x44a/0x630 [ 613.836724] kernel_sendpage+0x95/0xf0 [ 613.840605] ? inet_sendmsg+0x5d0/0x5d0 [ 613.844575] sock_sendpage+0x8b/0xc0 [ 613.848273] ? lockdep_hardirqs_on+0x415/0x5d0 [ 613.852852] pipe_to_sendpage+0x299/0x370 [ 613.856979] ? kernel_sendpage+0xf0/0xf0 [ 613.861023] ? direct_splice_actor+0x1a0/0x1a0 [ 613.865587] ? __put_page+0x92/0xd0 [ 613.869198] ? anon_pipe_buf_release+0x1c6/0x270 [ 613.873937] __splice_from_pipe+0x39a/0x7e0 [ 613.878238] ? direct_splice_actor+0x1a0/0x1a0 [ 613.882824] ? direct_splice_actor+0x1a0/0x1a0 [ 613.887387] splice_from_pipe+0x108/0x170 [ 613.891538] ? splice_shrink_spd+0xd0/0xd0 [ 613.895777] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 613.901306] ? security_file_permission+0x94/0x320 [ 613.906224] generic_splice_sendpage+0x3c/0x50 [ 613.910786] ? splice_from_pipe+0x170/0x170 [ 613.915110] do_splice+0x70a/0x1490 [ 613.918743] ? iterate_fd+0x360/0x360 [ 613.922530] ? opipe_prep.part.0+0x2d0/0x2d0 [ 613.926920] ? __fget_light+0x1a9/0x230 [ 613.930876] __x64_sys_splice+0x2c6/0x330 [ 613.935017] do_syscall_64+0x103/0x610 [ 613.938888] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 613.944056] RIP: 0033:0x457e29 [ 613.947237] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 613.966163] RSP: 002b:00007f2baa4adc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 613.973850] RAX: ffffffffffffffda RBX: 00007f2baa4adc90 RCX: 0000000000457e29 [ 613.981098] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000003 [ 613.988370] RBP: 000000000073bfa0 R08: 00000000000100e0 R09: 0000000000000000 [ 613.995631] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f2baa4ae6d4 [ 614.002895] R13: 00000000004c6c75 R14: 00000000004db870 R15: 0000000000000007 16:57:34 executing program 5: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x3, 0x2) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) splice(r0, 0x0, r2, 0x0, 0x1ffe0, 0xffffffff00000000) 16:57:35 executing program 2: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x3, 0x2) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) splice(r0, 0x0, r2, 0x0, 0x10005, 0xa00000000000700) 16:57:35 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x60000000, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1, 0x0, 0x0, 0xa00000000000000}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) 16:57:35 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffff00000000, 0x0, 0x40030000000004, 0x34000]}}]}, 0x2b2}}, 0x0) 16:57:35 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0xffffff9e, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x3, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) 16:57:35 executing program 0 (fault-call:8 fault-nth:24): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x3, 0x2) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) splice(r0, 0x0, r2, 0x0, 0x100e0, 0x0) 16:57:35 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0xfffffff0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x3, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) 16:57:35 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffff00000000, 0x0, 0x40030000000006, 0x34000]}}]}, 0x2b2}}, 0x0) 16:57:35 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x65580000, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1, 0x0, 0x0, 0xa00000000000000}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) [ 614.583163] FAULT_INJECTION: forcing a failure. [ 614.583163] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 614.595002] CPU: 1 PID: 26587 Comm: syz-executor.0 Not tainted 5.0.0+ #6 [ 614.601855] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 614.611206] Call Trace: [ 614.613819] dump_stack+0x172/0x1f0 [ 614.617467] should_fail.cold+0xa/0x1b [ 614.621366] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 614.626487] ? mark_held_locks+0x100/0x100 [ 614.630740] should_fail_alloc_page+0x50/0x60 [ 614.635247] __alloc_pages_nodemask+0x1a1/0x710 [ 614.639938] ? sock_sendpage+0x8b/0xc0 [ 614.643838] ? pipe_to_sendpage+0x299/0x370 [ 614.648161] ? __splice_from_pipe+0x39a/0x7e0 [ 614.652670] ? __alloc_pages_slowpath+0x2900/0x2900 [ 614.657709] cache_grow_begin+0x9c/0x8c0 [ 614.661787] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 614.667340] ? check_preemption_disabled+0x48/0x290 [ 614.672399] kmem_cache_alloc_node_trace+0x658/0x720 [ 614.677522] __kmalloc_node_track_caller+0x3d/0x70 [ 614.682463] __kmalloc_reserve.isra.0+0x40/0xf0 [ 614.687173] __alloc_skb+0x10b/0x5e0 [ 614.690894] ? skb_scrub_packet+0x440/0x440 [ 614.695229] ? raw_getfrag+0x164/0x230 [ 614.699128] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 614.704198] __ip_append_data.isra.0+0x24d6/0x2dd0 [ 614.709146] ? raw_destroy+0x30/0x30 [ 614.712881] ? __ip_flush_pending_frames.isra.0+0x2d0/0x2d0 [ 614.718598] ? ipv4_mtu+0x2a9/0x400 [ 614.722230] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 614.727779] ? ip_setup_cork+0x53b/0x870 [ 614.731850] ? raw_destroy+0x30/0x30 [ 614.735578] ip_append_data.part.0+0xf2/0x170 [ 614.740097] ? raw_destroy+0x30/0x30 [ 614.743824] ip_append_data+0x6e/0x90 [ 614.747654] raw_sendmsg+0xbd8/0x2f10 [ 614.751473] ? raw_getsockopt+0x100/0x100 [ 614.755643] ? ima_match_policy+0xa19/0x13d0 [ 614.760056] ? process_measurement+0xd5d/0x1570 [ 614.764749] ? process_measurement+0xd5d/0x1570 [ 614.769444] ? lock_downgrade+0x810/0x810 [ 614.773613] ? __lock_acquire+0x53b/0x4700 [ 614.777857] ? __lock_acquire+0x53b/0x4700 [ 614.782096] ? __lock_acquire+0x53b/0x4700 [ 614.786358] inet_sendmsg+0x147/0x5d0 [ 614.790162] ? raw_getsockopt+0x100/0x100 [ 614.794310] ? inet_sendmsg+0x147/0x5d0 [ 614.798296] ? ipip_gro_receive+0x100/0x100 [ 614.802631] sock_sendmsg+0xdd/0x130 [ 614.806353] kernel_sendmsg+0x44/0x50 [ 614.810167] sock_no_sendpage+0x116/0x150 [ 614.814342] ? sock_kzfree_s+0x70/0x70 [ 614.818253] ? debug_check_no_obj_freed+0x200/0x464 [ 614.823310] ? mark_held_locks+0xb1/0x100 [ 614.827481] inet_sendpage+0x44a/0x630 [ 614.831396] kernel_sendpage+0x95/0xf0 [ 614.835322] ? inet_sendmsg+0x5d0/0x5d0 [ 614.839316] sock_sendpage+0x8b/0xc0 [ 614.843044] ? lockdep_hardirqs_on+0x415/0x5d0 [ 614.847654] pipe_to_sendpage+0x299/0x370 [ 614.851810] ? kernel_sendpage+0xf0/0xf0 [ 614.855896] ? direct_splice_actor+0x1a0/0x1a0 [ 614.860494] ? __put_page+0x92/0xd0 [ 614.864142] ? anon_pipe_buf_release+0x1c6/0x270 [ 614.868906] __splice_from_pipe+0x39a/0x7e0 [ 614.873237] ? direct_splice_actor+0x1a0/0x1a0 [ 614.877843] ? direct_splice_actor+0x1a0/0x1a0 [ 614.882426] splice_from_pipe+0x108/0x170 [ 614.886593] ? splice_shrink_spd+0xd0/0xd0 [ 614.890884] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 614.896434] ? security_file_permission+0x94/0x320 [ 614.901373] generic_splice_sendpage+0x3c/0x50 [ 614.905983] ? splice_from_pipe+0x170/0x170 [ 614.910312] do_splice+0x70a/0x1490 [ 614.913948] ? iterate_fd+0x360/0x360 [ 614.917758] ? opipe_prep.part.0+0x2d0/0x2d0 [ 614.922199] ? __fget_light+0x1a9/0x230 [ 614.926181] __x64_sys_splice+0x2c6/0x330 [ 614.930340] do_syscall_64+0x103/0x610 [ 614.934233] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 614.939431] RIP: 0033:0x457e29 [ 614.942622] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 614.961522] RSP: 002b:00007f2baa4adc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 614.969229] RAX: ffffffffffffffda RBX: 00007f2baa4adc90 RCX: 0000000000457e29 [ 614.976492] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000003 16:57:35 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x81000000, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1, 0x0, 0x0, 0xa00000000000000}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) 16:57:35 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x1a0ffffffff, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x3, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) [ 614.983763] RBP: 000000000073bfa0 R08: 00000000000100e0 R09: 0000000000000000 [ 614.991033] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f2baa4ae6d4 [ 614.998294] R13: 00000000004c6c75 R14: 00000000004db870 R15: 0000000000000007 16:57:35 executing program 5: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x3, 0x2) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) splice(r0, 0x0, r2, 0x0, 0x1ffe0, 0xffffffffa0008000) 16:57:35 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffff00000000, 0x0, 0x40030000000008, 0x34000]}}]}, 0x2b2}}, 0x0) 16:57:36 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x88a8ffff, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1, 0x0, 0x0, 0xa00000000000000}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) 16:57:36 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x40030000000000, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x3, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) 16:57:36 executing program 2: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x3, 0x2) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) splice(r0, 0x0, r2, 0x0, 0x10005, 0xa00000000000a00) 16:57:36 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffff00000000, 0x0, 0x4003000000000a, 0x34000]}}]}, 0x2b2}}, 0x0) 16:57:36 executing program 0 (fault-call:8 fault-nth:25): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x3, 0x2) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) splice(r0, 0x0, r2, 0x0, 0x100e0, 0x0) 16:57:36 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x9c080000, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1, 0x0, 0x0, 0xa00000000000000}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) 16:57:36 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x8000a0ffffffff, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x3, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) 16:57:36 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffff00000000, 0x0, 0x4003000000000c, 0x34000]}}]}, 0x2b2}}, 0x0) 16:57:36 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0xf0ffffffffffff, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x3, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) 16:57:36 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffff00000000, 0x0, 0x4003000000000e, 0x34000]}}]}, 0x2b2}}, 0x0) [ 615.653487] FAULT_INJECTION: forcing a failure. [ 615.653487] name failslab, interval 1, probability 0, space 0, times 0 [ 615.685809] CPU: 0 PID: 26649 Comm: syz-executor.0 Not tainted 5.0.0+ #6 [ 615.692675] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 615.702017] Call Trace: [ 615.704587] dump_stack+0x172/0x1f0 [ 615.708199] should_fail.cold+0xa/0x1b [ 615.712079] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 615.717187] ? lock_downgrade+0x810/0x810 [ 615.721336] ? ___might_sleep+0x163/0x280 [ 615.725497] __should_failslab+0x121/0x190 [ 615.729731] should_failslab+0x9/0x14 [ 615.733527] kmem_cache_alloc_node+0x264/0x710 [ 615.738094] ? rt_add_uncached_list+0x147/0x1a0 [ 615.742770] __alloc_skb+0xd5/0x5e0 [ 615.746385] ? skb_scrub_packet+0x440/0x440 [ 615.750713] ? rt_set_nexthop.constprop.0+0x529/0x11d0 [ 615.755991] __ip_append_data.isra.0+0x24d6/0x2dd0 [ 615.760923] ? raw_destroy+0x30/0x30 [ 615.764639] ? __ip_flush_pending_frames.isra.0+0x2d0/0x2d0 [ 615.770347] ? ipv4_mtu+0x2a9/0x400 [ 615.773977] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 615.779508] ? ip_setup_cork+0x53b/0x870 [ 615.783576] ? raw_destroy+0x30/0x30 [ 615.787297] ip_append_data.part.0+0xf2/0x170 [ 615.791797] ? raw_destroy+0x30/0x30 [ 615.795510] ip_append_data+0x6e/0x90 [ 615.799327] raw_sendmsg+0xbd8/0x2f10 [ 615.803161] ? raw_getsockopt+0x100/0x100 [ 615.807315] ? ima_match_policy+0xa19/0x13d0 [ 615.811720] ? process_measurement+0xd5d/0x1570 [ 615.816397] ? process_measurement+0xd5d/0x1570 [ 615.821071] ? lock_downgrade+0x810/0x810 [ 615.825211] ? __lock_acquire+0x53b/0x4700 [ 615.829446] ? __lock_acquire+0x53b/0x4700 [ 615.833682] ? __lock_acquire+0x53b/0x4700 [ 615.837906] inet_sendmsg+0x147/0x5d0 [ 615.841704] ? raw_getsockopt+0x100/0x100 [ 615.845843] ? inet_sendmsg+0x147/0x5d0 [ 615.849810] ? ipip_gro_receive+0x100/0x100 [ 615.854131] sock_sendmsg+0xdd/0x130 [ 615.857852] kernel_sendmsg+0x44/0x50 [ 615.861682] sock_no_sendpage+0x116/0x150 [ 615.865842] ? sock_kzfree_s+0x70/0x70 [ 615.869727] ? debug_check_no_obj_freed+0x200/0x464 [ 615.874795] ? mark_held_locks+0xb1/0x100 [ 615.878948] inet_sendpage+0x44a/0x630 [ 615.882841] kernel_sendpage+0x95/0xf0 [ 615.886715] ? inet_sendmsg+0x5d0/0x5d0 [ 615.890688] sock_sendpage+0x8b/0xc0 [ 615.894397] ? lockdep_hardirqs_on+0x415/0x5d0 [ 615.899018] pipe_to_sendpage+0x299/0x370 [ 615.903189] ? kernel_sendpage+0xf0/0xf0 [ 615.907243] ? direct_splice_actor+0x1a0/0x1a0 [ 615.911830] ? __put_page+0x92/0xd0 [ 615.915465] ? anon_pipe_buf_release+0x1c6/0x270 [ 615.920238] __splice_from_pipe+0x39a/0x7e0 [ 615.924575] ? direct_splice_actor+0x1a0/0x1a0 [ 615.929176] ? direct_splice_actor+0x1a0/0x1a0 [ 615.933764] splice_from_pipe+0x108/0x170 [ 615.937908] ? splice_shrink_spd+0xd0/0xd0 [ 615.942143] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 615.947682] ? security_file_permission+0x94/0x320 16:57:36 executing program 5: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x3, 0x2) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) splice(r0, 0x0, r2, 0x0, 0x1ffe0, 0xffffffffa0010000) 16:57:36 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x9effffff, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1, 0x0, 0x0, 0xa00000000000000}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) [ 615.952616] generic_splice_sendpage+0x3c/0x50 [ 615.957197] ? splice_from_pipe+0x170/0x170 [ 615.961554] do_splice+0x70a/0x1490 [ 615.965189] ? iterate_fd+0x360/0x360 [ 615.969007] ? opipe_prep.part.0+0x2d0/0x2d0 [ 615.973430] ? __fget_light+0x1a9/0x230 [ 615.977401] __x64_sys_splice+0x2c6/0x330 [ 615.981593] do_syscall_64+0x103/0x610 [ 615.985506] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 615.990701] RIP: 0033:0x457e29 [ 615.993892] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 616.012790] RSP: 002b:00007f2baa4adc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 616.020502] RAX: ffffffffffffffda RBX: 00007f2baa4adc90 RCX: 0000000000457e29 [ 616.027770] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000003 [ 616.035039] RBP: 000000000073bfa0 R08: 00000000000100e0 R09: 0000000000000000 [ 616.042330] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f2baa4ae6d4 16:57:36 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffff00000000, 0x0, 0x4003000000000f, 0x34000]}}]}, 0x2b2}}, 0x0) 16:57:36 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x100000000000000, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x3, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) [ 616.049597] R13: 00000000004c6c75 R14: 00000000004db870 R15: 0000000000000007 16:57:37 executing program 2: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x3, 0x2) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) splice(r0, 0x0, r2, 0x0, 0x10005, 0xa00000000000a38) 16:57:37 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0xa0008000, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1, 0x0, 0x0, 0xa00000000000000}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) 16:57:37 executing program 0 (fault-call:8 fault-nth:26): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x3, 0x2) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) splice(r0, 0x0, r2, 0x0, 0x100e0, 0x0) 16:57:37 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x200000000000000, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x3, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) 16:57:37 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffff00000000, 0x0, 0x40030000000010, 0x34000]}}]}, 0x2b2}}, 0x0) 16:57:37 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0xa0010000, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1, 0x0, 0x0, 0xa00000000000000}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) 16:57:37 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffff00000000, 0x0, 0x40030000000060, 0x34000]}}]}, 0x2b2}}, 0x0) 16:57:37 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x300000000000000, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x3, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) [ 616.502226] FAULT_INJECTION: forcing a failure. [ 616.502226] name failslab, interval 1, probability 0, space 0, times 0 [ 616.533382] CPU: 1 PID: 26693 Comm: syz-executor.0 Not tainted 5.0.0+ #6 [ 616.540239] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 616.549622] Call Trace: [ 616.552227] dump_stack+0x172/0x1f0 [ 616.555894] should_fail.cold+0xa/0x1b [ 616.559807] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 616.564926] ? lock_downgrade+0x810/0x810 [ 616.569087] ? ___might_sleep+0x163/0x280 [ 616.573256] __should_failslab+0x121/0x190 [ 616.577516] should_failslab+0x9/0x14 [ 616.581326] kmem_cache_alloc_node+0x264/0x710 [ 616.581344] ? rt_add_uncached_list+0x147/0x1a0 [ 616.581369] __alloc_skb+0xd5/0x5e0 [ 616.581403] ? skb_scrub_packet+0x440/0x440 [ 616.590636] ? rt_set_nexthop.constprop.0+0x529/0x11d0 [ 616.590664] __ip_append_data.isra.0+0x24d6/0x2dd0 [ 616.590690] ? raw_destroy+0x30/0x30 [ 616.590721] ? __ip_flush_pending_frames.isra.0+0x2d0/0x2d0 [ 616.590736] ? ipv4_mtu+0x2a9/0x400 [ 616.621893] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 616.627460] ? ip_setup_cork+0x53b/0x870 [ 616.631548] ? raw_destroy+0x30/0x30 [ 616.635275] ip_append_data.part.0+0xf2/0x170 [ 616.639785] ? raw_destroy+0x30/0x30 [ 616.643532] ip_append_data+0x6e/0x90 [ 616.647355] raw_sendmsg+0xbd8/0x2f10 [ 616.651237] ? raw_getsockopt+0x100/0x100 [ 616.655395] ? ima_match_policy+0xa19/0x13d0 [ 616.659813] ? process_measurement+0xd5d/0x1570 [ 616.664491] ? process_measurement+0xd5d/0x1570 [ 616.669172] ? lock_downgrade+0x810/0x810 [ 616.673333] ? __lock_acquire+0x53b/0x4700 [ 616.677554] ? __lock_acquire+0x53b/0x4700 [ 616.681784] ? __lock_acquire+0x53b/0x4700 [ 616.686016] inet_sendmsg+0x147/0x5d0 [ 616.689817] ? raw_getsockopt+0x100/0x100 [ 616.693947] ? inet_sendmsg+0x147/0x5d0 [ 616.697913] ? ipip_gro_receive+0x100/0x100 [ 616.702217] sock_sendmsg+0xdd/0x130 [ 616.705913] kernel_sendmsg+0x44/0x50 [ 616.709698] sock_no_sendpage+0x116/0x150 [ 616.713868] ? sock_kzfree_s+0x70/0x70 [ 616.717745] ? debug_check_no_obj_freed+0x200/0x464 [ 616.722763] ? mark_held_locks+0xb1/0x100 [ 616.726910] inet_sendpage+0x44a/0x630 [ 616.730785] kernel_sendpage+0x95/0xf0 [ 616.734659] ? inet_sendmsg+0x5d0/0x5d0 [ 616.738625] sock_sendpage+0x8b/0xc0 [ 616.742324] ? lockdep_hardirqs_on+0x415/0x5d0 [ 616.746906] pipe_to_sendpage+0x299/0x370 [ 616.751037] ? kernel_sendpage+0xf0/0xf0 [ 616.755093] ? direct_splice_actor+0x1a0/0x1a0 [ 616.759661] ? __put_page+0x92/0xd0 [ 616.763278] ? anon_pipe_buf_release+0x1c6/0x270 [ 616.768023] __splice_from_pipe+0x39a/0x7e0 [ 616.772332] ? direct_splice_actor+0x1a0/0x1a0 [ 616.776915] ? direct_splice_actor+0x1a0/0x1a0 [ 616.781479] splice_from_pipe+0x108/0x170 [ 616.785608] ? splice_shrink_spd+0xd0/0xd0 [ 616.789827] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 616.795350] ? security_file_permission+0x94/0x320 [ 616.800280] generic_splice_sendpage+0x3c/0x50 [ 616.804848] ? splice_from_pipe+0x170/0x170 [ 616.809156] do_splice+0x70a/0x1490 [ 616.812768] ? iterate_fd+0x360/0x360 [ 616.816569] ? opipe_prep.part.0+0x2d0/0x2d0 [ 616.820960] ? __fget_light+0x1a9/0x230 [ 616.824917] __x64_sys_splice+0x2c6/0x330 [ 616.829054] do_syscall_64+0x103/0x610 [ 616.832938] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 616.838106] RIP: 0033:0x457e29 [ 616.841283] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 616.860186] RSP: 002b:00007f2baa4adc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 616.867900] RAX: ffffffffffffffda RBX: 00007f2baa4adc90 RCX: 0000000000457e29 [ 616.875148] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000003 [ 616.882397] RBP: 000000000073bfa0 R08: 00000000000100e0 R09: 0000000000000000 [ 616.889646] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f2baa4ae6d4 [ 616.896909] R13: 00000000004c6c75 R14: 00000000004db870 R15: 0000000000000007 16:57:37 executing program 5: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x3, 0x2) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) splice(r0, 0x0, r2, 0x0, 0x1ffe0, 0x0) 16:57:37 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0xf0ffffff, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1, 0x0, 0x0, 0xa00000000000000}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) 16:57:37 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x400000000000000, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x3, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) 16:57:37 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffff00000000, 0x0, 0x400300000000f0, 0x34000]}}]}, 0x2b2}}, 0x0) 16:57:37 executing program 2: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x3, 0x2) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) splice(r0, 0x0, r2, 0x0, 0x10005, 0xa00000000000b90) 16:57:37 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0xffffa888, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1, 0x0, 0x0, 0xa00000000000000}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) 16:57:38 executing program 0 (fault-call:8 fault-nth:27): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x3, 0x2) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) splice(r0, 0x0, r2, 0x0, 0x100e0, 0x0) 16:57:38 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffff00000000, 0x0, 0x400300000001a0, 0x34000]}}]}, 0x2b2}}, 0x0) 16:57:38 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x600000000000000, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x3, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) 16:57:38 executing program 5: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x3, 0x2) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) ioctl$sock_inet6_tcp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000000)) perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f00000000c0)={{0xec, @rand_addr=0x1, 0x4e24, 0x1, 'wrr\x00', 0x0, 0x3, 0x3e}, {@local, 0x4e20, 0x7, 0x8, 0x100, 0x5}}, 0x44) splice(r0, 0x0, r2, 0x0, 0x1ffe0, 0x0) 16:57:38 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0xfffff000, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1, 0x0, 0x0, 0xa00000000000000}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) 16:57:38 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x800000000000000, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x3, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) 16:57:38 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0xffffff7f, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1, 0x0, 0x0, 0xa00000000000000}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) 16:57:38 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffff00000000, 0x0, 0x40030000000282, 0x34000]}}]}, 0x2b2}}, 0x0) [ 617.333271] IPVS: set_ctl: invalid protocol: 236 0.0.0.1:20004 [ 617.415904] FAULT_INJECTION: forcing a failure. [ 617.415904] name failslab, interval 1, probability 0, space 0, times 0 [ 617.470332] CPU: 0 PID: 26748 Comm: syz-executor.0 Not tainted 5.0.0+ #6 [ 617.477184] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 617.486573] Call Trace: [ 617.489179] dump_stack+0x172/0x1f0 [ 617.492828] should_fail.cold+0xa/0x1b [ 617.496747] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 617.501860] ? lock_downgrade+0x810/0x810 [ 617.506024] ? ___might_sleep+0x163/0x280 [ 617.510188] __should_failslab+0x121/0x190 [ 617.514445] should_failslab+0x9/0x14 [ 617.518279] kmem_cache_alloc_node+0x264/0x710 [ 617.522880] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 617.528431] ? ip_generic_getfrag+0x120/0x230 [ 617.532945] __alloc_skb+0xd5/0x5e0 [ 617.536581] ? skb_scrub_packet+0x440/0x440 [ 617.540917] ? raw_getfrag+0x164/0x230 [ 617.544825] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 617.549863] __ip_append_data.isra.0+0x24d6/0x2dd0 [ 617.554817] ? raw_destroy+0x30/0x30 [ 617.558555] ? __ip_flush_pending_frames.isra.0+0x2d0/0x2d0 [ 617.564279] ? ipv4_mtu+0x2b3/0x400 16:57:38 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffff00000000, 0x0, 0x4003000000029d, 0x34000]}}]}, 0x2b2}}, 0x0) [ 617.567924] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 617.573482] ? ip_setup_cork+0x53b/0x870 [ 617.577557] ? raw_destroy+0x30/0x30 [ 617.581307] ip_append_data.part.0+0xf2/0x170 [ 617.585831] ? raw_destroy+0x30/0x30 [ 617.589559] ip_append_data+0x6e/0x90 [ 617.593389] raw_sendmsg+0xbd8/0x2f10 [ 617.597208] ? raw_getsockopt+0x100/0x100 [ 617.601383] ? finish_task_switch+0x146/0x790 [ 617.605902] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 617.610683] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 617.610701] ? lockdep_hardirqs_on+0x415/0x5d0 [ 617.610716] ? retint_kernel+0x2d/0x2d [ 617.610731] ? trace_hardirqs_on_caller+0x6a/0x220 [ 617.610751] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 617.610770] ? retint_kernel+0x2d/0x2d [ 617.620118] inet_sendmsg+0x147/0x5d0 [ 617.620135] ? raw_getsockopt+0x100/0x100 [ 617.620159] ? inet_sendmsg+0x147/0x5d0 [ 617.620174] ? ipip_gro_receive+0x100/0x100 [ 617.620191] sock_sendmsg+0xdd/0x130 [ 617.620208] kernel_sendmsg+0x44/0x50 [ 617.661383] sock_no_sendpage+0x116/0x150 [ 617.665549] ? sock_kzfree_s+0x70/0x70 16:57:38 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0xa00000000000000, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x3, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) [ 617.669459] ? retint_kernel+0x2d/0x2d [ 617.673372] inet_sendpage+0x44a/0x630 [ 617.677302] kernel_sendpage+0x95/0xf0 [ 617.681199] ? inet_sendmsg+0x5d0/0x5d0 [ 617.685181] sock_sendpage+0x8b/0xc0 [ 617.688912] pipe_to_sendpage+0x299/0x370 [ 617.693074] ? kernel_sendpage+0xf0/0xf0 [ 617.697151] ? direct_splice_actor+0x1a0/0x1a0 [ 617.701759] ? __put_page+0x92/0xd0 [ 617.705399] ? anon_pipe_buf_release+0x1c6/0x270 [ 617.710181] __splice_from_pipe+0x39a/0x7e0 [ 617.714522] ? direct_splice_actor+0x1a0/0x1a0 [ 617.719119] ? direct_splice_actor+0x1a0/0x1a0 [ 617.723706] splice_from_pipe+0x108/0x170 [ 617.727897] ? splice_shrink_spd+0xd0/0xd0 [ 617.732154] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 617.737719] ? security_file_permission+0x94/0x320 [ 617.742676] generic_splice_sendpage+0x3c/0x50 [ 617.747255] ? splice_from_pipe+0x170/0x170 [ 617.751593] do_splice+0x70a/0x1490 [ 617.755224] ? iterate_fd+0x360/0x360 [ 617.759012] ? opipe_prep.part.0+0x2d0/0x2d0 [ 617.763406] ? __fget_light+0x1a9/0x230 [ 617.767384] __x64_sys_splice+0x2c6/0x330 [ 617.771573] do_syscall_64+0x103/0x610 [ 617.775495] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 617.780696] RIP: 0033:0x457e29 [ 617.783880] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 617.802770] RSP: 002b:00007f2baa4adc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 617.810469] RAX: ffffffffffffffda RBX: 00007f2baa4adc90 RCX: 0000000000457e29 [ 617.817720] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000003 [ 617.824972] RBP: 000000000073bfa0 R08: 00000000000100e0 R09: 0000000000000000 [ 617.832225] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f2baa4ae6d4 [ 617.839478] R13: 00000000004c6c75 R14: 00000000004db870 R15: 0000000000000007 16:57:38 executing program 2: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x3, 0x2) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) splice(r0, 0x0, r2, 0x0, 0x10005, 0xa00000000000e00) 16:57:38 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffff00000000, 0x0, 0x40030000000300, 0x34000]}}]}, 0x2b2}}, 0x0) 16:57:38 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0xc00000000000000, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x3, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) 16:57:38 executing program 0 (fault-call:8 fault-nth:28): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x3, 0x2) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) splice(r0, 0x0, r2, 0x0, 0x100e0, 0x0) 16:57:38 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0xffffff9e, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1, 0x0, 0x0, 0xa00000000000000}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) [ 618.091149] IPVS: set_ctl: invalid protocol: 236 0.0.0.1:20004 16:57:39 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffff00000000, 0x0, 0x40030000000600, 0x34000]}}]}, 0x2b2}}, 0x0) 16:57:39 executing program 5: syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x9, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x3, 0x2) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r2, &(0x7f00000000c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0xf}}, 0xfffffffffffffeef) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r0, 0x6612) perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) splice(r0, 0x0, r2, 0x0, 0x1ffe0, 0x0) 16:57:39 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0xe00000000000000, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x3, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) 16:57:39 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffff00000000, 0x0, 0x40030000000a00, 0x34000]}}]}, 0x2b2}}, 0x0) 16:57:39 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0xfffffff0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1, 0x0, 0x0, 0xa00000000000000}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) 16:57:39 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0xf00000000000000, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x3, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) [ 618.332426] FAULT_INJECTION: forcing a failure. [ 618.332426] name failslab, interval 1, probability 0, space 0, times 0 [ 618.362108] CPU: 0 PID: 26794 Comm: syz-executor.0 Not tainted 5.0.0+ #6 [ 618.368963] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 618.378319] Call Trace: 16:57:39 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x1000000000000000, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x3, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) [ 618.380916] dump_stack+0x172/0x1f0 [ 618.380940] should_fail.cold+0xa/0x1b [ 618.380960] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 618.393573] ? lock_downgrade+0x810/0x810 [ 618.397730] ? ___might_sleep+0x163/0x280 [ 618.401897] __should_failslab+0x121/0x190 [ 618.406175] should_failslab+0x9/0x14 [ 618.409985] kmem_cache_alloc_node_trace+0x270/0x720 [ 618.415114] ? __alloc_skb+0xd5/0x5e0 [ 618.418925] ? rcu_lockdep_current_cpu_online+0xe3/0x130 [ 618.424393] __kmalloc_node_track_caller+0x3d/0x70 [ 618.429342] __kmalloc_reserve.isra.0+0x40/0xf0 [ 618.434021] __alloc_skb+0x10b/0x5e0 [ 618.437742] ? skb_scrub_packet+0x440/0x440 [ 618.442078] ? raw_getfrag+0x164/0x230 [ 618.445970] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 618.451003] __ip_append_data.isra.0+0x24d6/0x2dd0 [ 618.455940] ? raw_destroy+0x30/0x30 [ 618.459677] ? __ip_flush_pending_frames.isra.0+0x2d0/0x2d0 [ 618.465385] ? ipv4_mtu+0x2a9/0x400 [ 618.469012] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 618.474588] ? ip_setup_cork+0x53b/0x870 [ 618.478665] ? raw_destroy+0x30/0x30 [ 618.482380] ip_append_data.part.0+0xf2/0x170 [ 618.486894] ? raw_destroy+0x30/0x30 [ 618.490606] ip_append_data+0x6e/0x90 [ 618.494397] raw_sendmsg+0xbd8/0x2f10 [ 618.498190] ? raw_getsockopt+0x100/0x100 [ 618.502344] ? find_held_lock+0x35/0x130 [ 618.506394] ? lock_downgrade+0x810/0x810 [ 618.510554] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 618.516078] ? find_held_lock+0x35/0x130 [ 618.520160] ? finish_task_switch+0x146/0x790 [ 618.524661] ? __lock_acquire+0x53b/0x4700 [ 618.528893] ? _raw_spin_unlock_irq+0x28/0x90 [ 618.533377] ? mark_held_locks+0xb1/0x100 [ 618.537509] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 618.542271] inet_sendmsg+0x147/0x5d0 [ 618.546072] ? raw_getsockopt+0x100/0x100 [ 618.550216] ? inet_sendmsg+0x147/0x5d0 [ 618.554175] ? ipip_gro_receive+0x100/0x100 [ 618.558481] sock_sendmsg+0xdd/0x130 [ 618.562198] kernel_sendmsg+0x44/0x50 [ 618.565984] sock_no_sendpage+0x116/0x150 [ 618.570205] ? sock_kzfree_s+0x70/0x70 [ 618.574081] ? debug_check_no_obj_freed+0x200/0x464 [ 618.579108] ? mark_held_locks+0xb1/0x100 [ 618.583252] inet_sendpage+0x44a/0x630 [ 618.587178] kernel_sendpage+0x95/0xf0 [ 618.591052] ? inet_sendmsg+0x5d0/0x5d0 [ 618.595027] sock_sendpage+0x8b/0xc0 [ 618.598738] ? lockdep_hardirqs_on+0x415/0x5d0 [ 618.603326] pipe_to_sendpage+0x299/0x370 [ 618.607466] ? kernel_sendpage+0xf0/0xf0 [ 618.611513] ? direct_splice_actor+0x1a0/0x1a0 [ 618.616097] ? __put_page+0x92/0xd0 [ 618.619712] ? anon_pipe_buf_release+0x1c6/0x270 [ 618.624456] __splice_from_pipe+0x39a/0x7e0 [ 618.628776] ? direct_splice_actor+0x1a0/0x1a0 [ 618.633358] ? direct_splice_actor+0x1a0/0x1a0 [ 618.637928] splice_from_pipe+0x108/0x170 [ 618.642080] ? splice_shrink_spd+0xd0/0xd0 [ 618.646331] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 618.651859] ? security_file_permission+0x94/0x320 [ 618.656774] generic_splice_sendpage+0x3c/0x50 [ 618.661352] ? splice_from_pipe+0x170/0x170 [ 618.665673] do_splice+0x70a/0x1490 [ 618.669301] ? iterate_fd+0x360/0x360 [ 618.673092] ? opipe_prep.part.0+0x2d0/0x2d0 [ 618.677492] ? __fget_light+0x1a9/0x230 [ 618.681453] __x64_sys_splice+0x2c6/0x330 [ 618.685613] do_syscall_64+0x103/0x610 [ 618.689486] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 618.694659] RIP: 0033:0x457e29 [ 618.697833] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 618.716719] RSP: 002b:00007f2baa4adc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 618.724410] RAX: ffffffffffffffda RBX: 00007f2baa4adc90 RCX: 0000000000457e29 [ 618.731664] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000003 [ 618.738912] RBP: 000000000073bfa0 R08: 00000000000100e0 R09: 0000000000000000 [ 618.746164] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f2baa4ae6d4 [ 618.753425] R13: 00000000004c6c75 R14: 00000000004db870 R15: 0000000000000007 16:57:39 executing program 2: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x3, 0x2) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) splice(r0, 0x0, r2, 0x0, 0x10005, 0xa00000000002000) 16:57:39 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x6000000000000000, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x3, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) 16:57:39 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffff00000000, 0x0, 0x40030000000c00, 0x34000]}}]}, 0x2b2}}, 0x0) 16:57:39 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x1a0ffffffff, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1, 0x0, 0x0, 0xa00000000000000}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) 16:57:39 executing program 0 (fault-call:8 fault-nth:29): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x3, 0x2) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) splice(r0, 0x0, r2, 0x0, 0x100e0, 0x0) [ 619.098951] net_ratelimit: 97 callbacks suppressed [ 619.098958] neighbour: ndisc_cache: neighbor table overflow! [ 619.136960] neighbour: ndisc_cache: neighbor table overflow! 16:57:40 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x8000a0ffffffff, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1, 0x0, 0x0, 0xa00000000000000}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) [ 619.149662] neighbour: ndisc_cache: neighbor table overflow! [ 619.156932] neighbour: ndisc_cache: neighbor table overflow! [ 619.170631] neighbour: ndisc_cache: neighbor table overflow! [ 619.205727] neighbour: ndisc_cache: neighbor table overflow! [ 619.213970] FAULT_INJECTION: forcing a failure. [ 619.213970] name failslab, interval 1, probability 0, space 0, times 0 [ 619.243686] neighbour: ndisc_cache: neighbor table overflow! 16:57:40 executing program 5: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r3 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_opts(r3, 0x0, 0x0, &(0x7f0000000200)="9aa3d6b3c134dd80469cc2d75476ec13e9a62575ddd33dceac6243aa82c6e3fcd1489b744fbb922ec03b5f083ecaf68bb50f810c7dc1ac046fd6143bc04ed4ee9c62b14018d6b308cbf9291ab3065a1ec2eee24291435fbf9b0bef33927101ffafe0cb516ab7e1ab7e7905edcde86d81a6aba7aac440d65bbb3f04da856f4493c0beae5d510d9a33ea97cf7e7eea84db0c4eb88cf273801a2ce761b1d3896fbaa2c01334c3a87512e16212b19287dd5722e12d8f81b65f745f814f462442eb151ceb969a0e7860b6ce8faa531fa236cf6148fc16467d6b92d3224fabf8ead30a0deff73391615c5e20fd376c855362a25a", 0xf1) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) splice(r0, 0x0, r2, 0x0, 0x1ffe0, 0x0) [ 619.269311] CPU: 0 PID: 26833 Comm: syz-executor.0 Not tainted 5.0.0+ #6 [ 619.276169] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 619.286025] Call Trace: [ 619.286066] dump_stack+0x172/0x1f0 [ 619.286089] should_fail.cold+0xa/0x1b [ 619.286110] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 619.292325] ? lock_downgrade+0x810/0x810 [ 619.292345] ? ___might_sleep+0x163/0x280 [ 619.292371] __should_failslab+0x121/0x190 [ 619.313865] should_failslab+0x9/0x14 16:57:40 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffff00000000, 0x0, 0x40030000000e00, 0x34000]}}]}, 0x2b2}}, 0x0) [ 619.317676] kmem_cache_alloc_node+0x264/0x710 [ 619.322276] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 619.327831] ? ip_generic_getfrag+0x120/0x230 [ 619.332325] __alloc_skb+0xd5/0x5e0 [ 619.335960] ? skb_scrub_packet+0x440/0x440 [ 619.340314] ? raw_getfrag+0x164/0x230 [ 619.340327] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 619.340374] __ip_append_data.isra.0+0x24d6/0x2dd0 [ 619.349301] ? raw_destroy+0x30/0x30 [ 619.349331] ? __ip_flush_pending_frames.isra.0+0x2d0/0x2d0 [ 619.349344] ? ipv4_mtu+0x2a9/0x400 [ 619.349360] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 619.372872] ? ip_setup_cork+0x53b/0x870 [ 619.376948] ? raw_destroy+0x30/0x30 [ 619.378930] neighbour: ndisc_cache: neighbor table overflow! [ 619.380671] ip_append_data.part.0+0xf2/0x170 [ 619.380693] ? raw_destroy+0x30/0x30 [ 619.380715] ip_append_data+0x6e/0x90 [ 619.398682] raw_sendmsg+0xbd8/0x2f10 [ 619.402534] ? raw_getsockopt+0x100/0x100 [ 619.406708] ? ima_match_policy+0xa19/0x13d0 [ 619.408222] neighbour: ndisc_cache: neighbor table overflow! 16:57:40 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x6206000000000000, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x3, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) [ 619.411170] ? process_measurement+0xd5d/0x1570 [ 619.411191] ? process_measurement+0xd5d/0x1570 [ 619.411217] ? lock_downgrade+0x810/0x810 [ 619.411243] ? __lock_acquire+0x53b/0x4700 [ 619.411274] ? __lock_acquire+0x53b/0x4700 [ 619.411297] ? __lock_acquire+0x53b/0x4700 [ 619.411338] inet_sendmsg+0x147/0x5d0 [ 619.447099] ? raw_getsockopt+0x100/0x100 [ 619.451294] ? inet_sendmsg+0x147/0x5d0 [ 619.455302] ? ipip_gro_receive+0x100/0x100 [ 619.459640] sock_sendmsg+0xdd/0x130 [ 619.463364] kernel_sendmsg+0x44/0x50 [ 619.467184] sock_no_sendpage+0x116/0x150 [ 619.471356] ? sock_kzfree_s+0x70/0x70 [ 619.475254] ? debug_check_no_obj_freed+0x200/0x464 [ 619.480326] ? mark_held_locks+0xb1/0x100 [ 619.484489] inet_sendpage+0x44a/0x630 [ 619.488406] kernel_sendpage+0x95/0xf0 [ 619.492316] ? inet_sendmsg+0x5d0/0x5d0 [ 619.496341] sock_sendpage+0x8b/0xc0 [ 619.500064] ? lockdep_hardirqs_on+0x415/0x5d0 [ 619.504676] pipe_to_sendpage+0x299/0x370 [ 619.508850] ? kernel_sendpage+0xf0/0xf0 [ 619.512918] ? direct_splice_actor+0x1a0/0x1a0 16:57:40 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0xf0ffffffffffff, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1, 0x0, 0x0, 0xa00000000000000}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) [ 619.517511] ? __put_page+0x92/0xd0 [ 619.521023] neighbour: ndisc_cache: neighbor table overflow! [ 619.521149] ? anon_pipe_buf_release+0x1c6/0x270 [ 619.531703] __splice_from_pipe+0x39a/0x7e0 [ 619.536043] ? direct_splice_actor+0x1a0/0x1a0 [ 619.540652] ? direct_splice_actor+0x1a0/0x1a0 [ 619.545237] splice_from_pipe+0x108/0x170 [ 619.549402] ? splice_shrink_spd+0xd0/0xd0 [ 619.553659] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 619.559218] ? security_file_permission+0x94/0x320 [ 619.564165] generic_splice_sendpage+0x3c/0x50 [ 619.568756] ? splice_from_pipe+0x170/0x170 [ 619.573098] do_splice+0x70a/0x1490 [ 619.576776] ? iterate_fd+0x360/0x360 [ 619.580619] ? opipe_prep.part.0+0x2d0/0x2d0 [ 619.585040] ? __fget_light+0x1a9/0x230 [ 619.589024] __x64_sys_splice+0x2c6/0x330 [ 619.593193] do_syscall_64+0x103/0x610 [ 619.597101] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 619.602311] RIP: 0033:0x457e29 16:57:40 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffff00000000, 0x0, 0x40030000000f00, 0x34000]}}]}, 0x2b2}}, 0x0) [ 619.605516] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 619.624427] RSP: 002b:00007f2baa4adc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 619.632160] RAX: ffffffffffffffda RBX: 00007f2baa4adc90 RCX: 0000000000457e29 [ 619.639434] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000003 [ 619.646734] RBP: 000000000073bfa0 R08: 00000000000100e0 R09: 0000000000000000 [ 619.654006] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f2baa4ae6d4 [ 619.661302] R13: 00000000004c6c75 R14: 00000000004db870 R15: 0000000000000007 16:57:40 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x6558000000000000, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x3, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) 16:57:40 executing program 2: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x3, 0x2) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) splice(r0, 0x0, r2, 0x0, 0x10005, 0xa0000000000380a) 16:57:40 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x100000000000000, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1, 0x0, 0x0, 0xa00000000000000}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) 16:57:40 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffff00000000, 0x0, 0x40030000003f00, 0x34000]}}]}, 0x2b2}}, 0x0) 16:57:40 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x8100000000000000, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x3, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) 16:57:40 executing program 0 (fault-call:8 fault-nth:30): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x3, 0x2) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) splice(r0, 0x0, r2, 0x0, 0x100e0, 0x0) 16:57:40 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffff00000000, 0x0, 0x40030000005865, 0x34000]}}]}, 0x2b2}}, 0x0) [ 620.070257] FAULT_INJECTION: forcing a failure. [ 620.070257] name failslab, interval 1, probability 0, space 0, times 0 [ 620.108567] CPU: 1 PID: 26879 Comm: syz-executor.0 Not tainted 5.0.0+ #6 [ 620.115440] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 620.124820] Call Trace: [ 620.127414] dump_stack+0x172/0x1f0 [ 620.131058] should_fail.cold+0xa/0x1b [ 620.134960] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 620.140086] ? lock_downgrade+0x810/0x810 [ 620.144241] ? ___might_sleep+0x163/0x280 [ 620.148421] __should_failslab+0x121/0x190 [ 620.152686] should_failslab+0x9/0x14 [ 620.156492] kmem_cache_alloc_node_trace+0x270/0x720 [ 620.161605] ? __alloc_skb+0xd5/0x5e0 [ 620.165414] ? rcu_lockdep_current_cpu_online+0xe3/0x130 [ 620.170876] __kmalloc_node_track_caller+0x3d/0x70 [ 620.175838] __kmalloc_reserve.isra.0+0x40/0xf0 [ 620.180540] __alloc_skb+0x10b/0x5e0 [ 620.184257] ? skb_scrub_packet+0x440/0x440 [ 620.188601] ? raw_getfrag+0x164/0x230 [ 620.192495] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 620.197524] __ip_append_data.isra.0+0x24d6/0x2dd0 [ 620.202474] ? raw_destroy+0x30/0x30 [ 620.206228] ? __ip_flush_pending_frames.isra.0+0x2d0/0x2d0 [ 620.211959] ? ipv4_mtu+0x2a9/0x400 [ 620.215593] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 620.221141] ? ip_setup_cork+0x53b/0x870 [ 620.225211] ? raw_destroy+0x30/0x30 [ 620.228932] ip_append_data.part.0+0xf2/0x170 [ 620.233441] ? raw_destroy+0x30/0x30 [ 620.237167] ip_append_data+0x6e/0x90 [ 620.241037] raw_sendmsg+0xbd8/0x2f10 [ 620.244860] ? raw_getsockopt+0x100/0x100 [ 620.249021] ? ima_match_policy+0xa19/0x13d0 [ 620.253435] ? process_measurement+0xd5d/0x1570 [ 620.258116] ? process_measurement+0xd5d/0x1570 [ 620.262827] ? lock_downgrade+0x810/0x810 [ 620.267000] ? __lock_acquire+0x53b/0x4700 [ 620.271256] ? __lock_acquire+0x53b/0x4700 [ 620.275530] ? __lock_acquire+0x53b/0x4700 [ 620.279807] inet_sendmsg+0x147/0x5d0 [ 620.283618] ? raw_getsockopt+0x100/0x100 [ 620.287783] ? inet_sendmsg+0x147/0x5d0 [ 620.291785] ? ipip_gro_receive+0x100/0x100 [ 620.296141] sock_sendmsg+0xdd/0x130 [ 620.299863] kernel_sendmsg+0x44/0x50 [ 620.303679] sock_no_sendpage+0x116/0x150 [ 620.307832] ? sock_kzfree_s+0x70/0x70 [ 620.311742] ? debug_check_no_obj_freed+0x200/0x464 [ 620.316797] ? mark_held_locks+0xb1/0x100 [ 620.320968] inet_sendpage+0x44a/0x630 [ 620.324873] kernel_sendpage+0x95/0xf0 [ 620.328773] ? inet_sendmsg+0x5d0/0x5d0 [ 620.332756] sock_sendpage+0x8b/0xc0 [ 620.336487] ? lockdep_hardirqs_on+0x415/0x5d0 [ 620.341094] pipe_to_sendpage+0x299/0x370 [ 620.345229] ? kernel_sendpage+0xf0/0xf0 [ 620.349291] ? direct_splice_actor+0x1a0/0x1a0 [ 620.353861] ? __put_page+0x92/0xd0 [ 620.357505] ? anon_pipe_buf_release+0x1c6/0x270 [ 620.362312] __splice_from_pipe+0x39a/0x7e0 [ 620.366634] ? direct_splice_actor+0x1a0/0x1a0 [ 620.371226] ? direct_splice_actor+0x1a0/0x1a0 [ 620.375798] splice_from_pipe+0x108/0x170 [ 620.379929] ? splice_shrink_spd+0xd0/0xd0 [ 620.384155] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 620.389690] ? security_file_permission+0x94/0x320 [ 620.394634] generic_splice_sendpage+0x3c/0x50 [ 620.399207] ? splice_from_pipe+0x170/0x170 [ 620.403510] do_splice+0x70a/0x1490 [ 620.407121] ? iterate_fd+0x360/0x360 [ 620.410941] ? opipe_prep.part.0+0x2d0/0x2d0 [ 620.415348] ? __fget_light+0x1a9/0x230 [ 620.419307] __x64_sys_splice+0x2c6/0x330 [ 620.423474] do_syscall_64+0x103/0x610 [ 620.427370] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 620.432566] RIP: 0033:0x457e29 [ 620.435739] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 620.454639] RSP: 002b:00007f2baa4adc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 620.462339] RAX: ffffffffffffffda RBX: 00007f2baa4adc90 RCX: 0000000000457e29 16:57:41 executing program 5: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x3, 0x2) r3 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x7ff, 0x400) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) ioctl$RTC_ALM_READ(r3, 0x80247008, &(0x7f00000000c0)) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) splice(r0, 0x0, r2, 0x0, 0x1ffe0, 0x0) 16:57:41 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x200000000000000, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1, 0x0, 0x0, 0xa00000000000000}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) 16:57:41 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x8202000000000000, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x3, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) 16:57:41 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffff00000000, 0x0, 0x40030000006000, 0x34000]}}]}, 0x2b2}}, 0x0) [ 620.469595] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000003 [ 620.476858] RBP: 000000000073bfa0 R08: 00000000000100e0 R09: 0000000000000000 [ 620.484107] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f2baa4ae6d4 [ 620.491357] R13: 00000000004c6c75 R14: 00000000004db870 R15: 0000000000000007 16:57:41 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffff00000000, 0x0, 0x40030000006558, 0x34000]}}]}, 0x2b2}}, 0x0) 16:57:41 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x88a8ffff00000000, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x3, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) 16:57:41 executing program 2: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x3, 0x2) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) splice(r0, 0x0, r2, 0x0, 0x10005, 0xa00000000004000) 16:57:41 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x300000000000000, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1, 0x0, 0x0, 0xa00000000000000}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) 16:57:41 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffff00000000, 0x0, 0x40030000008100, 0x34000]}}]}, 0x2b2}}, 0x0) 16:57:41 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x9effffff00000000, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x3, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) 16:57:41 executing program 0 (fault-call:8 fault-nth:31): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x3, 0x2) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) splice(r0, 0x0, r2, 0x0, 0x100e0, 0x0) 16:57:41 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffff00000000, 0x0, 0x40030000008202, 0x34000]}}]}, 0x2b2}}, 0x0) [ 621.081930] FAULT_INJECTION: forcing a failure. [ 621.081930] name failslab, interval 1, probability 0, space 0, times 0 [ 621.100294] CPU: 1 PID: 26929 Comm: syz-executor.0 Not tainted 5.0.0+ #6 [ 621.107149] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 621.116504] Call Trace: [ 621.119102] dump_stack+0x172/0x1f0 [ 621.119127] should_fail.cold+0xa/0x1b [ 621.119149] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 621.131763] ? lock_downgrade+0x810/0x810 [ 621.135952] ? ___might_sleep+0x163/0x280 [ 621.140137] __should_failslab+0x121/0x190 [ 621.144383] should_failslab+0x9/0x14 [ 621.148204] kmem_cache_alloc_node_trace+0x270/0x720 [ 621.153317] ? __alloc_skb+0xd5/0x5e0 [ 621.157136] ? rcu_lockdep_current_cpu_online+0xe3/0x130 [ 621.162600] __kmalloc_node_track_caller+0x3d/0x70 [ 621.162620] __kmalloc_reserve.isra.0+0x40/0xf0 [ 621.162638] __alloc_skb+0x10b/0x5e0 [ 621.162655] ? skb_scrub_packet+0x440/0x440 [ 621.162673] ? raw_getfrag+0x164/0x230 [ 621.172248] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 621.172284] __ip_append_data.isra.0+0x24d6/0x2dd0 [ 621.172307] ? raw_destroy+0x30/0x30 [ 621.172339] ? __ip_flush_pending_frames.isra.0+0x2d0/0x2d0 [ 621.203577] ? ipv4_mtu+0x2a9/0x400 [ 621.207223] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 621.212808] ? ip_setup_cork+0x53b/0x870 [ 621.216872] ? raw_destroy+0x30/0x30 [ 621.220586] ip_append_data.part.0+0xf2/0x170 [ 621.225075] ? raw_destroy+0x30/0x30 [ 621.228826] ip_append_data+0x6e/0x90 [ 621.232625] raw_sendmsg+0xbd8/0x2f10 [ 621.236442] ? raw_getsockopt+0x100/0x100 [ 621.240591] ? ima_match_policy+0xa19/0x13d0 [ 621.244985] ? process_measurement+0xd5d/0x1570 [ 621.249641] ? process_measurement+0xd5d/0x1570 [ 621.254302] ? lock_downgrade+0x810/0x810 [ 621.258439] ? __lock_acquire+0x53b/0x4700 [ 621.262683] ? __lock_acquire+0x53b/0x4700 [ 621.266915] ? __lock_acquire+0x53b/0x4700 [ 621.271143] inet_sendmsg+0x147/0x5d0 [ 621.274928] ? raw_getsockopt+0x100/0x100 [ 621.279082] ? inet_sendmsg+0x147/0x5d0 [ 621.283081] ? ipip_gro_receive+0x100/0x100 [ 621.287519] sock_sendmsg+0xdd/0x130 [ 621.291220] kernel_sendmsg+0x44/0x50 [ 621.295005] sock_no_sendpage+0x116/0x150 [ 621.299138] ? sock_kzfree_s+0x70/0x70 [ 621.303020] ? debug_check_no_obj_freed+0x200/0x464 [ 621.308040] ? mark_held_locks+0xb1/0x100 [ 621.312176] inet_sendpage+0x44a/0x630 [ 621.316069] kernel_sendpage+0x95/0xf0 [ 621.319952] ? inet_sendmsg+0x5d0/0x5d0 [ 621.323916] sock_sendpage+0x8b/0xc0 [ 621.327612] ? lockdep_hardirqs_on+0x415/0x5d0 [ 621.332197] pipe_to_sendpage+0x299/0x370 [ 621.336363] ? kernel_sendpage+0xf0/0xf0 [ 621.340412] ? direct_splice_actor+0x1a0/0x1a0 [ 621.344990] ? __put_page+0x92/0xd0 [ 621.348605] ? anon_pipe_buf_release+0x1c6/0x270 [ 621.353349] __splice_from_pipe+0x39a/0x7e0 [ 621.357657] ? direct_splice_actor+0x1a0/0x1a0 [ 621.362258] ? direct_splice_actor+0x1a0/0x1a0 [ 621.366850] splice_from_pipe+0x108/0x170 [ 621.370985] ? splice_shrink_spd+0xd0/0xd0 [ 621.375211] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 621.380737] ? security_file_permission+0x94/0x320 [ 621.385652] generic_splice_sendpage+0x3c/0x50 [ 621.390235] ? splice_from_pipe+0x170/0x170 [ 621.394562] do_splice+0x70a/0x1490 [ 621.398178] ? iterate_fd+0x360/0x360 [ 621.401964] ? opipe_prep.part.0+0x2d0/0x2d0 [ 621.406357] ? __fget_light+0x1a9/0x230 [ 621.410321] __x64_sys_splice+0x2c6/0x330 [ 621.414464] do_syscall_64+0x103/0x610 [ 621.418340] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 621.423524] RIP: 0033:0x457e29 [ 621.426700] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 621.445608] RSP: 002b:00007f2baa4adc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 621.453321] RAX: ffffffffffffffda RBX: 00007f2baa4adc90 RCX: 0000000000457e29 [ 621.460583] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000003 [ 621.467840] RBP: 000000000073bfa0 R08: 00000000000100e0 R09: 0000000000000000 [ 621.475144] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f2baa4ae6d4 16:57:42 executing program 5: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x3, 0x2) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r1, 0x28, 0x0, &(0x7f0000000000)=0xe99, 0x8) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) ioctl$PPPIOCGFLAGS1(r1, 0x8004745a, &(0x7f00000000c0)) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$INOTIFY_IOC_SETNEXTWD(r1, 0x40044900, 0x7ff) splice(r0, 0x0, r2, 0x0, 0x1ffe0, 0x0) 16:57:42 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0xf0ffffff00000000, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x3, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) 16:57:42 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x400000000000000, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1, 0x0, 0x0, 0xa00000000000000}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) 16:57:42 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffff00000000, 0x0, 0x40030000009d02, 0x34000]}}]}, 0x2b2}}, 0x0) [ 621.482424] R13: 00000000004c6c75 R14: 00000000004db870 R15: 0000000000000007 16:57:42 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffff00000000, 0x0, 0x4003000000f000, 0x34000]}}]}, 0x2b2}}, 0x0) 16:57:42 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0xffffff7f00000000, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x3, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) 16:57:42 executing program 2: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x3, 0x2) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) splice(r0, 0x0, r2, 0x0, 0x10005, 0xa00000000006000) 16:57:42 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x500000000000000, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1, 0x0, 0x0, 0xa00000000000000}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) 16:57:42 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffff00000000, 0x0, 0x40030000034000, 0x34000]}}]}, 0x2b2}}, 0x0) 16:57:42 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0xffffffffa0008000, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x3, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) 16:57:42 executing program 0 (fault-call:8 fault-nth:32): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x3, 0x2) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) splice(r0, 0x0, r2, 0x0, 0x100e0, 0x0) 16:57:42 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0xffffffffa0010000, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x3, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) [ 622.149138] FAULT_INJECTION: forcing a failure. [ 622.149138] name failslab, interval 1, probability 0, space 0, times 0 [ 622.172038] CPU: 1 PID: 26979 Comm: syz-executor.0 Not tainted 5.0.0+ #6 [ 622.178889] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 622.188235] Call Trace: [ 622.190829] dump_stack+0x172/0x1f0 [ 622.194471] should_fail.cold+0xa/0x1b [ 622.198363] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 622.203461] ? lock_downgrade+0x810/0x810 [ 622.207617] ? ___might_sleep+0x163/0x280 [ 622.211765] __should_failslab+0x121/0x190 [ 622.215991] should_failslab+0x9/0x14 [ 622.219784] kmem_cache_alloc_node_trace+0x270/0x720 [ 622.224891] ? __alloc_skb+0xd5/0x5e0 [ 622.228678] ? rcu_lockdep_current_cpu_online+0xe3/0x130 [ 622.234127] __kmalloc_node_track_caller+0x3d/0x70 [ 622.239067] __kmalloc_reserve.isra.0+0x40/0xf0 [ 622.243749] __alloc_skb+0x10b/0x5e0 [ 622.247461] ? skb_scrub_packet+0x440/0x440 [ 622.251769] ? raw_getfrag+0x164/0x230 [ 622.255682] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 622.260702] __ip_append_data.isra.0+0x24d6/0x2dd0 [ 622.265648] ? raw_destroy+0x30/0x30 [ 622.269386] ? __ip_flush_pending_frames.isra.0+0x2d0/0x2d0 [ 622.275133] ? ipv4_mtu+0x2a9/0x400 [ 622.278774] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 622.284325] ? ip_setup_cork+0x53b/0x870 [ 622.288382] ? raw_destroy+0x30/0x30 [ 622.292084] ip_append_data.part.0+0xf2/0x170 [ 622.296568] ? raw_destroy+0x30/0x30 [ 622.300288] ip_append_data+0x6e/0x90 [ 622.304160] raw_sendmsg+0xbd8/0x2f10 [ 622.307994] ? raw_getsockopt+0x100/0x100 [ 622.312149] ? __lock_acquire+0x53b/0x4700 [ 622.316378] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 622.321914] ? __perf_event_task_sched_in+0x640/0x820 [ 622.327106] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 622.331847] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 622.336594] ? lockdep_hardirqs_on+0x415/0x5d0 [ 622.341182] ? retint_kernel+0x2d/0x2d [ 622.345062] ? trace_hardirqs_on_caller+0x6a/0x220 [ 622.349977] ? __lock_acquire+0x53b/0x4700 [ 622.354200] ? retint_kernel+0x2d/0x2d [ 622.358095] inet_sendmsg+0x147/0x5d0 [ 622.361907] ? raw_getsockopt+0x100/0x100 [ 622.366066] ? inet_sendmsg+0x147/0x5d0 [ 622.370047] ? ipip_gro_receive+0x100/0x100 [ 622.374380] sock_sendmsg+0xdd/0x130 [ 622.378100] kernel_sendmsg+0x44/0x50 [ 622.381941] sock_no_sendpage+0x116/0x150 [ 622.386093] ? sock_kzfree_s+0x70/0x70 [ 622.389988] ? debug_check_no_obj_freed+0x200/0x464 [ 622.395019] ? mark_held_locks+0xb1/0x100 [ 622.399170] inet_sendpage+0x44a/0x630 [ 622.403057] kernel_sendpage+0x95/0xf0 [ 622.406955] ? inet_sendmsg+0x5d0/0x5d0 [ 622.410935] sock_sendpage+0x8b/0xc0 [ 622.414666] ? lockdep_hardirqs_on+0x415/0x5d0 [ 622.419257] pipe_to_sendpage+0x299/0x370 [ 622.423422] ? kernel_sendpage+0xf0/0xf0 [ 622.427499] ? direct_splice_actor+0x1a0/0x1a0 [ 622.432097] ? __put_page+0x92/0xd0 [ 622.435729] ? anon_pipe_buf_release+0x1c6/0x270 [ 622.440492] __splice_from_pipe+0x39a/0x7e0 [ 622.444852] ? direct_splice_actor+0x1a0/0x1a0 [ 622.449470] ? direct_splice_actor+0x1a0/0x1a0 [ 622.454055] splice_from_pipe+0x108/0x170 [ 622.458206] ? splice_shrink_spd+0xd0/0xd0 [ 622.462442] ? retint_kernel+0x2d/0x2d [ 622.466328] ? splice_from_pipe+0x170/0x170 [ 622.470647] generic_splice_sendpage+0x3c/0x50 [ 622.475236] ? splice_from_pipe+0x170/0x170 [ 622.479546] do_splice+0x70a/0x1490 [ 622.483172] ? iterate_fd+0x360/0x360 [ 622.486953] ? opipe_prep.part.0+0x2d0/0x2d0 [ 622.491356] ? __fget_light+0x1a9/0x230 [ 622.495320] __x64_sys_splice+0x2c6/0x330 [ 622.499452] do_syscall_64+0x103/0x610 [ 622.503319] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 622.508484] RIP: 0033:0x457e29 [ 622.511663] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 622.530580] RSP: 002b:00007f2baa4adc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 622.538278] RAX: ffffffffffffffda RBX: 00007f2baa4adc90 RCX: 0000000000457e29 16:57:43 executing program 5: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000640)) ioctl$TIOCPKT(r3, 0x5420, &(0x7f0000000000)=0x5) r4 = syz_open_pts(r3, 0x0) ioctl$TCSETS(r4, 0x5402, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffc0}) ioctl$TCSETSF(r4, 0x5412, &(0x7f0000000040)={0x3ff}) socket$inet(0x2, 0x3, 0x2) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) splice(r0, 0x0, r2, 0x0, 0x1ffe0, 0x0) 16:57:43 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x600000000000000, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1, 0x0, 0x0, 0xa00000000000000}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) 16:57:43 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffff00000000, 0x0, 0x40030000400300, 0x34000]}}]}, 0x2b2}}, 0x0) 16:57:43 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0xfffffffffffff000, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x3, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) [ 622.545530] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000003 [ 622.552795] RBP: 000000000073bfa0 R08: 00000000000100e0 R09: 0000000000000000 [ 622.560057] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f2baa4ae6d4 [ 622.567306] R13: 00000000004c6c75 R14: 00000000004db870 R15: 0000000000000007 16:57:43 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffff00000000, 0x0, 0x400300008000a0, 0x34000]}}]}, 0x2b2}}, 0x0) 16:57:43 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x700000000000000, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1, 0x0, 0x0, 0xa00000000000000}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) 16:57:43 executing program 2: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x3, 0x2) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) splice(r0, 0x0, r2, 0x0, 0x10005, 0xa00000000007004) 16:57:43 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x3, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) 16:57:43 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffff00000000, 0x0, 0x40030000f0ffff, 0x34000]}}]}, 0x2b2}}, 0x0) 16:57:43 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x800000000000000, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1, 0x0, 0x0, 0xa00000000000000}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) 16:57:43 executing program 0 (fault-call:8 fault-nth:33): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x3, 0x2) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) splice(r0, 0x0, r2, 0x0, 0x100e0, 0x0) 16:57:43 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffff00000000, 0x0, 0x40030001000000, 0x34000]}}]}, 0x2b2}}, 0x0) [ 622.997257] FAULT_INJECTION: forcing a failure. [ 622.997257] name failslab, interval 1, probability 0, space 0, times 0 [ 623.038490] CPU: 1 PID: 27029 Comm: syz-executor.0 Not tainted 5.0.0+ #6 [ 623.045362] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 623.054714] Call Trace: [ 623.057318] dump_stack+0x172/0x1f0 [ 623.060962] should_fail.cold+0xa/0x1b [ 623.064859] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 623.069974] ? lock_downgrade+0x810/0x810 [ 623.074122] ? ___might_sleep+0x163/0x280 [ 623.078280] __should_failslab+0x121/0x190 [ 623.078302] should_failslab+0x9/0x14 [ 623.078317] kmem_cache_alloc_node+0x264/0x710 [ 623.078337] ? rt_add_uncached_list+0x147/0x1a0 [ 623.095607] __alloc_skb+0xd5/0x5e0 [ 623.095627] ? skb_scrub_packet+0x440/0x440 [ 623.095643] ? rt_set_nexthop.constprop.0+0x529/0x11d0 [ 623.095670] __ip_append_data.isra.0+0x24d6/0x2dd0 [ 623.095704] ? raw_destroy+0x30/0x30 [ 623.103657] ? __ip_flush_pending_frames.isra.0+0x2d0/0x2d0 [ 623.113828] ? ipv4_mtu+0x2a9/0x400 [ 623.113847] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 623.113863] ? ip_setup_cork+0x53b/0x870 [ 623.113881] ? raw_destroy+0x30/0x30 [ 623.113898] ip_append_data.part.0+0xf2/0x170 [ 623.113918] ? raw_destroy+0x30/0x30 [ 623.148425] ip_append_data+0x6e/0x90 [ 623.152247] raw_sendmsg+0xbd8/0x2f10 [ 623.156095] ? raw_getsockopt+0x100/0x100 [ 623.160255] ? ima_match_policy+0xa19/0x13d0 [ 623.164680] ? process_measurement+0xd5d/0x1570 [ 623.169360] ? process_measurement+0xd5d/0x1570 [ 623.174064] ? lock_downgrade+0x810/0x810 [ 623.178200] ? __lock_acquire+0x53b/0x4700 [ 623.182434] ? __lock_acquire+0x53b/0x4700 [ 623.186677] ? __lock_acquire+0x53b/0x4700 [ 623.190921] inet_sendmsg+0x147/0x5d0 [ 623.194724] ? raw_getsockopt+0x100/0x100 [ 623.198878] ? inet_sendmsg+0x147/0x5d0 [ 623.202860] ? ipip_gro_receive+0x100/0x100 [ 623.207176] sock_sendmsg+0xdd/0x130 [ 623.210886] kernel_sendmsg+0x44/0x50 [ 623.214685] sock_no_sendpage+0x116/0x150 [ 623.218833] ? sock_kzfree_s+0x70/0x70 [ 623.222718] ? debug_check_no_obj_freed+0x200/0x464 [ 623.227751] ? mark_held_locks+0xb1/0x100 [ 623.231904] inet_sendpage+0x44a/0x630 [ 623.235801] kernel_sendpage+0x95/0xf0 [ 623.239718] ? inet_sendmsg+0x5d0/0x5d0 [ 623.243697] sock_sendpage+0x8b/0xc0 [ 623.247438] ? lockdep_hardirqs_on+0x415/0x5d0 [ 623.252026] pipe_to_sendpage+0x299/0x370 [ 623.256170] ? kernel_sendpage+0xf0/0xf0 [ 623.260232] ? direct_splice_actor+0x1a0/0x1a0 [ 623.264840] ? __put_page+0x92/0xd0 [ 623.268478] ? anon_pipe_buf_release+0x1c6/0x270 [ 623.273250] __splice_from_pipe+0x39a/0x7e0 [ 623.277581] ? direct_splice_actor+0x1a0/0x1a0 [ 623.282155] ? direct_splice_actor+0x1a0/0x1a0 [ 623.286910] splice_from_pipe+0x108/0x170 [ 623.291067] ? splice_shrink_spd+0xd0/0xd0 [ 623.295315] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 623.300856] ? security_file_permission+0x94/0x320 [ 623.305793] generic_splice_sendpage+0x3c/0x50 [ 623.310383] ? splice_from_pipe+0x170/0x170 [ 623.314708] do_splice+0x70a/0x1490 [ 623.318328] ? iterate_fd+0x360/0x360 [ 623.322159] ? opipe_prep.part.0+0x2d0/0x2d0 [ 623.326558] ? __fget_light+0x1a9/0x230 [ 623.330532] __x64_sys_splice+0x2c6/0x330 [ 623.334680] do_syscall_64+0x103/0x610 [ 623.338571] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 623.343759] RIP: 0033:0x457e29 [ 623.346936] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 623.365820] RSP: 002b:00007f2baa4adc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 623.373522] RAX: ffffffffffffffda RBX: 00007f2baa4adc90 RCX: 0000000000457e29 [ 623.380780] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000003 16:57:44 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0xa00000000000000, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1, 0x0, 0x0, 0xa00000000000000}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) 16:57:44 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffff00000000, 0x0, 0x40030002000000, 0x34000]}}]}, 0x2b2}}, 0x0) 16:57:44 executing program 5: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x3, 0x2) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) splice(r0, 0x0, r2, 0x0, 0x1ffe0, 0x0) 16:57:44 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x3, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) [ 623.388049] RBP: 000000000073bfa0 R08: 00000000000100e0 R09: 0000000000000000 [ 623.395622] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f2baa4ae6d4 [ 623.402876] R13: 00000000004c6c75 R14: 00000000004db870 R15: 0000000000000007 16:57:44 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffff00000000, 0x0, 0x40030003000000, 0x34000]}}]}, 0x2b2}}, 0x0) 16:57:44 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0xc00000000000000, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1, 0x0, 0x0, 0xa00000000000000}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) 16:57:44 executing program 2: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x3, 0x2) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) splice(r0, 0x0, r2, 0x0, 0x10005, 0xa00000000008404) 16:57:44 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x3, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) 16:57:44 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffff00000000, 0x0, 0x40030004000000, 0x34000]}}]}, 0x2b2}}, 0x0) 16:57:44 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0xe00000000000000, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1, 0x0, 0x0, 0xa00000000000000}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) 16:57:44 executing program 0 (fault-call:8 fault-nth:34): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x3, 0x2) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) splice(r0, 0x0, r2, 0x0, 0x100e0, 0x0) 16:57:44 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffff00000000, 0x0, 0x40030006000000, 0x34000]}}]}, 0x2b2}}, 0x0) 16:57:44 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x1000000000000000, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1, 0x0, 0x0, 0xa00000000000000}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) 16:57:44 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x3, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) [ 624.102389] FAULT_INJECTION: forcing a failure. [ 624.102389] name failslab, interval 1, probability 0, space 0, times 0 [ 624.114881] CPU: 0 PID: 27092 Comm: syz-executor.0 Not tainted 5.0.0+ #6 [ 624.121723] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 624.131090] Call Trace: [ 624.133716] dump_stack+0x172/0x1f0 [ 624.137338] should_fail.cold+0xa/0x1b [ 624.141211] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 624.146347] ? lock_downgrade+0x810/0x810 [ 624.150514] ? ___might_sleep+0x163/0x280 [ 624.154680] __should_failslab+0x121/0x190 [ 624.158903] should_failslab+0x9/0x14 [ 624.162695] kmem_cache_alloc_node_trace+0x270/0x720 [ 624.167826] ? __alloc_skb+0xd5/0x5e0 [ 624.171616] ? rcu_lockdep_current_cpu_online+0xe3/0x130 [ 624.177098] __kmalloc_node_track_caller+0x3d/0x70 [ 624.182024] __kmalloc_reserve.isra.0+0x40/0xf0 [ 624.186692] __alloc_skb+0x10b/0x5e0 [ 624.190413] ? skb_scrub_packet+0x440/0x440 [ 624.194753] ? raw_destroy+0x30/0x30 [ 624.198464] ? __ip_append_data.isra.0+0x631/0x2dd0 [ 624.203480] __ip_append_data.isra.0+0x24d6/0x2dd0 [ 624.208425] ? raw_destroy+0x30/0x30 [ 624.212130] ? __ip_flush_pending_frames.isra.0+0x2d0/0x2d0 [ 624.217826] ? ipv4_mtu+0x2a9/0x400 [ 624.221453] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 624.227000] ? ip_setup_cork+0x53b/0x870 [ 624.231073] ? raw_destroy+0x30/0x30 [ 624.234782] ip_append_data.part.0+0xf2/0x170 [ 624.239324] ? raw_destroy+0x30/0x30 [ 624.243057] ip_append_data+0x6e/0x90 [ 624.246869] raw_sendmsg+0xbd8/0x2f10 [ 624.250676] ? raw_getsockopt+0x100/0x100 [ 624.254840] ? ima_match_policy+0xa19/0x13d0 [ 624.259254] ? process_measurement+0xd5d/0x1570 [ 624.263941] ? process_measurement+0xd5d/0x1570 [ 624.268596] ? mark_held_locks+0xb1/0x100 [ 624.272737] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 624.277492] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 624.282247] ? lockdep_hardirqs_on+0x415/0x5d0 [ 624.286848] ? retint_kernel+0x2d/0x2d [ 624.290734] ? trace_hardirqs_on_caller+0x6a/0x220 [ 624.295680] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 624.300448] ? retint_kernel+0x2d/0x2d [ 624.304353] inet_sendmsg+0x147/0x5d0 [ 624.308168] ? raw_getsockopt+0x100/0x100 [ 624.312313] ? inet_sendmsg+0x147/0x5d0 [ 624.316281] ? ipip_gro_receive+0x100/0x100 [ 624.320609] sock_sendmsg+0xdd/0x130 [ 624.324324] kernel_sendmsg+0x44/0x50 [ 624.328133] sock_no_sendpage+0x116/0x150 [ 624.332308] ? sock_kzfree_s+0x70/0x70 [ 624.336205] ? debug_check_no_obj_freed+0x200/0x464 [ 624.341237] ? mark_held_locks+0xb1/0x100 [ 624.345403] inet_sendpage+0x44a/0x630 [ 624.349309] kernel_sendpage+0x95/0xf0 [ 624.353187] ? inet_sendmsg+0x5d0/0x5d0 [ 624.357169] sock_sendpage+0x8b/0xc0 [ 624.360964] ? lockdep_hardirqs_on+0x415/0x5d0 [ 624.365560] pipe_to_sendpage+0x299/0x370 [ 624.369705] ? kernel_sendpage+0xf0/0xf0 [ 624.373755] ? direct_splice_actor+0x1a0/0x1a0 [ 624.378325] ? __put_page+0x92/0xd0 [ 624.381941] ? anon_pipe_buf_release+0x1c6/0x270 [ 624.386690] __splice_from_pipe+0x39a/0x7e0 [ 624.391010] ? direct_splice_actor+0x1a0/0x1a0 [ 624.395602] ? direct_splice_actor+0x1a0/0x1a0 [ 624.400164] splice_from_pipe+0x108/0x170 [ 624.404312] ? splice_shrink_spd+0xd0/0xd0 [ 624.408558] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 624.414095] ? security_file_permission+0x94/0x320 [ 624.419032] generic_splice_sendpage+0x3c/0x50 [ 624.423608] ? splice_from_pipe+0x170/0x170 [ 624.427911] do_splice+0x70a/0x1490 [ 624.431533] ? iterate_fd+0x360/0x360 [ 624.435335] ? opipe_prep.part.0+0x2d0/0x2d0 [ 624.439758] ? __fget_light+0x1a9/0x230 [ 624.443733] __x64_sys_splice+0x2c6/0x330 [ 624.447869] do_syscall_64+0x103/0x610 16:57:45 executing program 5: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) write$binfmt_misc(r0, &(0x7f0000000140)=ANY=[], 0xfffffffffffffe0c) socket$inet(0x2, 0x3, 0x2) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r1, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) r2 = perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) splice(r1, 0x0, r2, 0x0, 0xffffffffffffffff, 0xfffffffffffffffe) 16:57:45 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x6000000000000000, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1, 0x0, 0x0, 0xa00000000000000}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) 16:57:45 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x3, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) 16:57:45 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffff00000000, 0x0, 0x40030008000000, 0x34000]}}]}, 0x2b2}}, 0x0) [ 624.451739] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 624.456919] RIP: 0033:0x457e29 [ 624.460109] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 624.479008] RSP: 002b:00007f2baa4adc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 624.486724] RAX: ffffffffffffffda RBX: 00007f2baa4adc90 RCX: 0000000000457e29 [ 624.486748] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000003 [ 624.486757] RBP: 000000000073bfa0 R08: 00000000000100e0 R09: 0000000000000000 [ 624.486766] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f2baa4ae6d4 [ 624.486775] R13: 00000000004c6c75 R14: 00000000004db870 R15: 0000000000000007 [ 624.516982] net_ratelimit: 92 callbacks suppressed [ 624.516989] neighbour: ndisc_cache: neighbor table overflow! [ 624.536899] neighbour: ndisc_cache: neighbor table overflow! [ 624.543826] neighbour: ndisc_cache: neighbor table overflow! [ 624.553985] neighbour: ndisc_cache: neighbor table overflow! [ 624.566999] neighbour: ndisc_cache: neighbor table overflow! [ 624.575776] neighbour: ndisc_cache: neighbor table overflow! 16:57:45 executing program 2: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x3, 0x2) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) splice(r0, 0x0, r2, 0x0, 0x10005, 0xa0000000000900b) 16:57:45 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x3, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) 16:57:45 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffff00000000, 0x0, 0x4003000a000000, 0x34000]}}]}, 0x2b2}}, 0x0) 16:57:45 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x6558000000000000, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1, 0x0, 0x0, 0xa00000000000000}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) 16:57:45 executing program 0 (fault-call:8 fault-nth:35): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x3, 0x2) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) splice(r0, 0x0, r2, 0x0, 0x100e0, 0x0) 16:57:45 executing program 5: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000200)={'filter\x00', 0x7, 0x4, 0x478, 0x0, 0x0, 0x278, 0x390, 0x390, 0x390, 0x4, &(0x7f00000000c0), {[{{@uncond, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@dev={[], 0x12}, @empty, @rand_addr=0xfffffffffffff38d, @broadcast, 0x1}}}, {{@arp={@empty, @multicast1, 0xffffffff, 0xffffff00, @mac=@random="5173f2e837c8", {[0x0, 0xff, 0xff, 0x0, 0x0, 0xff]}, @empty, {[0x0, 0xff, 0xff, 0xff, 0xff, 0xb85cc03066f83528]}, 0x699, 0x1f, 0x3f, 0x1, 0x1, 0x1322, 'ip_vti0\x00', 'veth0_to_bond\x00', {0xff}, {0xff}, 0x0, 0x20}, 0xf0, 0x138}, @unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00', 0x0, 0x8, 0x1}}}, {{@arp={@loopback, @rand_addr=0xcf, 0xff000000, 0xffffff00, @empty, {[0xff, 0xff]}, @empty, {[0xff, 0xff, 0xff, 0x0, 0xff, 0xff]}, 0x63, 0x401, 0x3, 0x931, 0x100, 0x6, 'team_slave_0\x00', 'bcsf0\x00', {0xff}, {0xff}, 0x0, 0x140}, 0xf0, 0x118}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x9, 0x2}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x4c8) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x3, 0x2) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f0000000000)=0xff8, 0x4) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r0, &(0x7f0000000100)={0x2, 0x4e20, @rand_addr=0xbf}, 0x10) perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) splice(r0, 0x0, r2, 0x0, 0x1ffe0, 0x0) [ 624.900209] neighbour: ndisc_cache: neighbor table overflow! [ 624.923975] neighbour: ndisc_cache: neighbor table overflow! [ 624.945665] neighbour: ndisc_cache: neighbor table overflow! [ 624.958866] neighbour: ndisc_cache: neighbor table overflow! 16:57:45 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x8100000000000000, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1, 0x0, 0x0, 0xa00000000000000}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) 16:57:45 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffff00000000, 0x0, 0x4003000c000000, 0x34000]}}]}, 0x2b2}}, 0x0) 16:57:45 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x3, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) [ 625.086565] FAULT_INJECTION: forcing a failure. [ 625.086565] name failslab, interval 1, probability 0, space 0, times 0 [ 625.116919] CPU: 0 PID: 27134 Comm: syz-executor.0 Not tainted 5.0.0+ #6 [ 625.123787] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 625.133153] Call Trace: [ 625.133182] dump_stack+0x172/0x1f0 [ 625.133206] should_fail.cold+0xa/0x1b [ 625.133227] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 625.148395] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 625.153160] __should_failslab+0x121/0x190 [ 625.157414] should_failslab+0x9/0x14 [ 625.161235] kmem_cache_alloc+0x47/0x6f0 [ 625.165344] skb_clone+0x150/0x3b0 [ 625.168910] ip_mc_output+0x3aa/0xf70 [ 625.168933] ? __ip_queue_xmit+0x1bf0/0x1bf0 [ 625.168951] ? rcu_lockdep_current_cpu_online+0xe3/0x130 [ 625.168972] ? ip_append_data.part.0+0x170/0x170 [ 625.168989] ? dst_release+0x62/0xb0 [ 625.177182] ? __ip_make_skb+0xf93/0x1820 [ 625.177202] ip_local_out+0xc4/0x1b0 [ 625.177222] ip_send_skb+0x42/0xf0 [ 625.177239] ip_push_pending_frames+0x64/0x80 [ 625.206976] raw_sendmsg+0x1e5d/0x2f10 [ 625.210882] ? raw_getsockopt+0x100/0x100 [ 625.215059] ? finish_task_switch+0x146/0x790 [ 625.219578] ? mark_held_locks+0xb1/0x100 [ 625.223739] ? __lock_acquire+0x53b/0x4700 [ 625.227979] ? trace_hardirqs_on+0x67/0x230 [ 625.232320] ? kasan_check_read+0x11/0x20 [ 625.236489] ? _raw_spin_unlock_irq+0x5e/0x90 [ 625.241002] inet_sendmsg+0x147/0x5d0 [ 625.244809] ? raw_getsockopt+0x100/0x100 [ 625.248967] ? inet_sendmsg+0x147/0x5d0 [ 625.252954] ? ipip_gro_receive+0x100/0x100 [ 625.257304] sock_sendmsg+0xdd/0x130 [ 625.261052] kernel_sendmsg+0x44/0x50 [ 625.264868] sock_no_sendpage+0x116/0x150 [ 625.269029] ? sock_kzfree_s+0x70/0x70 [ 625.272927] ? debug_check_no_obj_freed+0x200/0x464 [ 625.277960] ? mark_held_locks+0xb1/0x100 [ 625.282128] inet_sendpage+0x44a/0x630 16:57:45 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffff00000000, 0x0, 0x4003000e000000, 0x34000]}}]}, 0x2b2}}, 0x0) 16:57:45 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x3, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) 16:57:46 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffff00000000, 0x0, 0x4003000f000000, 0x34000]}}]}, 0x2b2}}, 0x0) [ 625.286476] kernel_sendpage+0x95/0xf0 [ 625.290373] ? inet_sendmsg+0x5d0/0x5d0 [ 625.294370] sock_sendpage+0x8b/0xc0 [ 625.298087] ? lockdep_hardirqs_on+0x415/0x5d0 [ 625.302735] pipe_to_sendpage+0x299/0x370 [ 625.306917] ? kernel_sendpage+0xf0/0xf0 [ 625.310998] ? direct_splice_actor+0x1a0/0x1a0 [ 625.315584] ? __put_page+0x92/0xd0 [ 625.319211] ? anon_pipe_buf_release+0x1c6/0x270 [ 625.323974] __splice_from_pipe+0x39a/0x7e0 [ 625.328294] ? direct_splice_actor+0x1a0/0x1a0 [ 625.332879] ? direct_splice_actor+0x1a0/0x1a0 [ 625.337458] splice_from_pipe+0x108/0x170 [ 625.341602] ? splice_shrink_spd+0xd0/0xd0 [ 625.345878] generic_splice_sendpage+0x3c/0x50 [ 625.350445] ? splice_from_pipe+0x170/0x170 [ 625.354753] do_splice+0x70a/0x1490 [ 625.358374] ? iterate_fd+0x360/0x360 [ 625.362209] ? opipe_prep.part.0+0x2d0/0x2d0 [ 625.366628] ? __fget_light+0x1a9/0x230 [ 625.370606] __x64_sys_splice+0x2c6/0x330 [ 625.374741] do_syscall_64+0x103/0x610 [ 625.378615] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 625.383802] RIP: 0033:0x457e29 [ 625.386986] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 625.406030] RSP: 002b:00007f2baa4adc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 625.413726] RAX: ffffffffffffffda RBX: 00007f2baa4adc90 RCX: 0000000000457e29 [ 625.420973] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000003 [ 625.428224] RBP: 000000000073bfa0 R08: 00000000000100e0 R09: 0000000000000000 [ 625.435471] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f2baa4ae6d4 [ 625.442719] R13: 00000000004c6c75 R14: 00000000004db870 R15: 0000000000000007 16:57:46 executing program 2: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x3, 0x2) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) splice(r0, 0x0, r2, 0x0, 0x10005, 0xa0000000000c805) 16:57:46 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x3, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) 16:57:46 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffff00000000, 0x0, 0x40030010000000, 0x34000]}}]}, 0x2b2}}, 0x0) 16:57:46 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x88a8ffff00000000, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1, 0x0, 0x0, 0xa00000000000000}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) 16:57:46 executing program 0 (fault-call:8 fault-nth:36): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x3, 0x2) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) splice(r0, 0x0, r2, 0x0, 0x100e0, 0x0) 16:57:46 executing program 5: r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x9, 0x80000) ioctl$SG_SET_DEBUG(r0, 0x227e, &(0x7f00000000c0)) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) write$binfmt_misc(r2, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x3, 0x2) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) splice(r1, 0x0, r3, 0x0, 0x1ffe0, 0x0) 16:57:46 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffff00000000, 0x0, 0x4003003f000000, 0x34000]}}]}, 0x2b2}}, 0x0) 16:57:46 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x3, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) 16:57:46 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x9c08000000000000, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1, 0x0, 0x0, 0xa00000000000000}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) [ 625.995310] FAULT_INJECTION: forcing a failure. [ 625.995310] name failslab, interval 1, probability 0, space 0, times 0 [ 626.018063] CPU: 1 PID: 27185 Comm: syz-executor.0 Not tainted 5.0.0+ #6 [ 626.024937] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 626.034286] Call Trace: [ 626.034313] dump_stack+0x172/0x1f0 [ 626.034337] should_fail.cold+0xa/0x1b [ 626.034358] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 626.049504] ? lock_downgrade+0x810/0x810 [ 626.053662] ? ___might_sleep+0x163/0x280 [ 626.057852] __should_failslab+0x121/0x190 [ 626.062136] should_failslab+0x9/0x14 [ 626.065941] kmem_cache_alloc_node_trace+0x270/0x720 [ 626.071064] ? __alloc_skb+0xd5/0x5e0 [ 626.074875] ? rcu_lockdep_current_cpu_online+0xe3/0x130 [ 626.080345] __kmalloc_node_track_caller+0x3d/0x70 [ 626.085289] __kmalloc_reserve.isra.0+0x40/0xf0 [ 626.089970] __alloc_skb+0x10b/0x5e0 16:57:46 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffff00000000, 0x0, 0x40030060000000, 0x34000]}}]}, 0x2b2}}, 0x0) 16:57:46 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x9effffff00000000, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1, 0x0, 0x0, 0xa00000000000000}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) 16:57:46 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0xf0ffffff00000000, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1, 0x0, 0x0, 0xa00000000000000}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) [ 626.093692] ? skb_scrub_packet+0x440/0x440 [ 626.098057] ? raw_getfrag+0x164/0x230 [ 626.101952] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 626.106979] __ip_append_data.isra.0+0x24d6/0x2dd0 [ 626.111919] ? trace_hardirqs_on_caller+0x6a/0x220 [ 626.116871] ? raw_destroy+0x30/0x30 [ 626.120603] ? __ip_flush_pending_frames.isra.0+0x2d0/0x2d0 [ 626.126316] ? ipv4_mtu+0x2a9/0x400 [ 626.129950] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 626.135489] ? ip_setup_cork+0x53b/0x870 [ 626.139549] ? raw_destroy+0x30/0x30 [ 626.143279] ip_append_data.part.0+0xf2/0x170 [ 626.147796] ? raw_destroy+0x30/0x30 [ 626.151523] ip_append_data+0x6e/0x90 [ 626.155340] raw_sendmsg+0xbd8/0x2f10 [ 626.159158] ? raw_getsockopt+0x100/0x100 [ 626.163326] ? ima_match_policy+0xa19/0x13d0 [ 626.167765] ? process_measurement+0xd5d/0x1570 [ 626.172439] ? process_measurement+0xd5d/0x1570 [ 626.172463] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 626.172478] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 626.172493] ? lockdep_hardirqs_on+0x415/0x5d0 [ 626.191280] ? retint_kernel+0x2d/0x2d [ 626.195174] ? trace_hardirqs_on_caller+0x6a/0x220 [ 626.200119] ? __lock_acquire+0x53b/0x4700 [ 626.204353] ? mark_held_locks+0xb1/0x100 [ 626.208498] inet_sendmsg+0x147/0x5d0 [ 626.212290] ? raw_getsockopt+0x100/0x100 [ 626.216424] ? inet_sendmsg+0x147/0x5d0 [ 626.220392] ? ipip_gro_receive+0x100/0x100 [ 626.224710] sock_sendmsg+0xdd/0x130 [ 626.228419] kernel_sendmsg+0x44/0x50 [ 626.232207] sock_no_sendpage+0x116/0x150 [ 626.236342] ? sock_kzfree_s+0x70/0x70 [ 626.240211] ? trace_hardirqs_on_caller+0x6a/0x220 [ 626.245148] ? retint_kernel+0x2d/0x2d [ 626.249035] inet_sendpage+0x44a/0x630 [ 626.252928] kernel_sendpage+0x95/0xf0 [ 626.256817] ? inet_sendmsg+0x5d0/0x5d0 [ 626.260799] sock_sendpage+0x8b/0xc0 [ 626.264505] pipe_to_sendpage+0x299/0x370 [ 626.268652] ? kernel_sendpage+0xf0/0xf0 [ 626.272732] ? direct_splice_actor+0x1a0/0x1a0 [ 626.277317] ? __splice_from_pipe+0x32c/0x7e0 [ 626.281804] __splice_from_pipe+0x39a/0x7e0 [ 626.286115] ? direct_splice_actor+0x1a0/0x1a0 [ 626.290687] ? direct_splice_actor+0x1a0/0x1a0 [ 626.295251] splice_from_pipe+0x108/0x170 [ 626.299393] ? splice_shrink_spd+0xd0/0xd0 [ 626.303649] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 626.309196] ? security_file_permission+0x94/0x320 [ 626.314139] generic_splice_sendpage+0x3c/0x50 [ 626.318725] ? splice_from_pipe+0x170/0x170 [ 626.323044] do_splice+0x70a/0x1490 [ 626.326657] ? iterate_fd+0x360/0x360 [ 626.330448] ? opipe_prep.part.0+0x2d0/0x2d0 [ 626.334844] ? __fget_light+0x1a9/0x230 [ 626.338807] __x64_sys_splice+0x2c6/0x330 [ 626.342948] do_syscall_64+0x103/0x610 [ 626.346831] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 626.352005] RIP: 0033:0x457e29 [ 626.355184] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 626.374087] RSP: 002b:00007f2baa4adc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 626.381777] RAX: ffffffffffffffda RBX: 00007f2baa4adc90 RCX: 0000000000457e29 [ 626.389040] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000003 [ 626.396315] RBP: 000000000073bfa0 R08: 00000000000100e0 R09: 0000000000000000 [ 626.403586] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f2baa4ae6d4 [ 626.410874] R13: 00000000004c6c75 R14: 00000000004db870 R15: 0000000000000007 16:57:47 executing program 2: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x3, 0x2) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) splice(r0, 0x0, r2, 0x0, 0x10005, 0xa0000000000dc05) 16:57:47 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0xffffff7f00000000, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1, 0x0, 0x0, 0xa00000000000000}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) 16:57:47 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffff00000000, 0x0, 0x40030065580000, 0x34000]}}]}, 0x2b2}}, 0x0) 16:57:47 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x3, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) 16:57:47 executing program 0 (fault-call:8 fault-nth:37): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x3, 0x2) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) splice(r0, 0x0, r2, 0x0, 0x100e0, 0x0) 16:57:47 executing program 5: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) splice(r0, 0x0, r2, 0x0, 0x1ffe0, 0x0) 16:57:47 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffff00000000, 0x0, 0x40030081000000, 0x34000]}}]}, 0x2b2}}, 0x0) 16:57:47 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0xffffffffa0008000, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1, 0x0, 0x0, 0xa00000000000000}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) 16:57:47 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x3, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) [ 626.870897] FAULT_INJECTION: forcing a failure. [ 626.870897] name failslab, interval 1, probability 0, space 0, times 0 [ 626.912001] CPU: 0 PID: 27230 Comm: syz-executor.0 Not tainted 5.0.0+ #6 [ 626.918908] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 626.928273] Call Trace: [ 626.930885] dump_stack+0x172/0x1f0 [ 626.934528] should_fail.cold+0xa/0x1b [ 626.938436] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 626.943548] ? lock_downgrade+0x810/0x810 [ 626.947699] ? ___might_sleep+0x163/0x280 [ 626.951890] __should_failslab+0x121/0x190 [ 626.956136] should_failslab+0x9/0x14 [ 626.959961] kmem_cache_alloc_node+0x264/0x710 [ 626.964554] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 626.970107] ? ip_generic_getfrag+0x120/0x230 [ 626.974619] __alloc_skb+0xd5/0x5e0 [ 626.978255] ? skb_scrub_packet+0x440/0x440 [ 626.982619] ? raw_getfrag+0x164/0x230 [ 626.986528] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 626.991570] __ip_append_data.isra.0+0x24d6/0x2dd0 [ 626.996520] ? raw_destroy+0x30/0x30 [ 627.000275] ? __ip_flush_pending_frames.isra.0+0x2d0/0x2d0 [ 627.006004] ? ipv4_mtu+0x2a9/0x400 [ 627.009647] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 627.015198] ? ip_setup_cork+0x53b/0x870 [ 627.019293] ? raw_destroy+0x30/0x30 [ 627.023020] ip_append_data.part.0+0xf2/0x170 [ 627.027538] ? raw_destroy+0x30/0x30 [ 627.031274] ip_append_data+0x6e/0x90 [ 627.035098] raw_sendmsg+0xbd8/0x2f10 [ 627.038924] ? raw_getsockopt+0x100/0x100 [ 627.043083] ? ima_match_policy+0xa19/0x13d0 [ 627.047506] ? process_measurement+0xd5d/0x1570 [ 627.052186] ? process_measurement+0xd5d/0x1570 [ 627.056890] ? lock_downgrade+0x810/0x810 [ 627.061055] ? __lock_acquire+0x53b/0x4700 [ 627.065316] ? __lock_acquire+0x53b/0x4700 [ 627.069565] ? __lock_acquire+0x53b/0x4700 [ 627.073840] inet_sendmsg+0x147/0x5d0 [ 627.077651] ? raw_getsockopt+0x100/0x100 [ 627.081815] ? inet_sendmsg+0x147/0x5d0 [ 627.085799] ? ipip_gro_receive+0x100/0x100 [ 627.090134] sock_sendmsg+0xdd/0x130 [ 627.093863] kernel_sendmsg+0x44/0x50 [ 627.097681] sock_no_sendpage+0x116/0x150 [ 627.101859] ? sock_kzfree_s+0x70/0x70 [ 627.105761] ? debug_check_no_obj_freed+0x200/0x464 [ 627.110866] ? mark_held_locks+0xb1/0x100 [ 627.115031] inet_sendpage+0x44a/0x630 [ 627.118938] kernel_sendpage+0x95/0xf0 [ 627.122837] ? inet_sendmsg+0x5d0/0x5d0 [ 627.126824] sock_sendpage+0x8b/0xc0 [ 627.130546] ? lockdep_hardirqs_on+0x415/0x5d0 [ 627.135148] pipe_to_sendpage+0x299/0x370 [ 627.139319] ? kernel_sendpage+0xf0/0xf0 [ 627.143394] ? direct_splice_actor+0x1a0/0x1a0 [ 627.147988] ? __put_page+0x92/0xd0 [ 627.151638] ? anon_pipe_buf_release+0x1c6/0x270 [ 627.156413] __splice_from_pipe+0x39a/0x7e0 16:57:47 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x3, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) 16:57:47 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0xffffffffa0010000, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1, 0x0, 0x0, 0xa00000000000000}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) 16:57:47 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffff00000000, 0x0, 0x40030082020000, 0x34000]}}]}, 0x2b2}}, 0x0) [ 627.160760] ? direct_splice_actor+0x1a0/0x1a0 [ 627.165360] ? direct_splice_actor+0x1a0/0x1a0 [ 627.169974] splice_from_pipe+0x108/0x170 [ 627.174158] ? splice_shrink_spd+0xd0/0xd0 [ 627.178409] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 627.183985] ? security_file_permission+0x94/0x320 [ 627.188920] generic_splice_sendpage+0x3c/0x50 [ 627.188935] ? splice_from_pipe+0x170/0x170 [ 627.188954] do_splice+0x70a/0x1490 [ 627.188972] ? iterate_fd+0x360/0x360 [ 627.201502] ? opipe_prep.part.0+0x2d0/0x2d0 [ 627.209740] ? __fget_light+0x1a9/0x230 [ 627.209761] __x64_sys_splice+0x2c6/0x330 [ 627.209787] do_syscall_64+0x103/0x610 [ 627.209807] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 627.209832] RIP: 0033:0x457e29 [ 627.209848] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 627.209856] RSP: 002b:00007f2baa4adc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 627.209873] RAX: ffffffffffffffda RBX: 00007f2baa4adc90 RCX: 0000000000457e29 [ 627.217984] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000003 [ 627.217993] RBP: 000000000073bfa0 R08: 00000000000100e0 R09: 0000000000000000 [ 627.218000] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f2baa4ae6d4 [ 627.218009] R13: 00000000004c6c75 R14: 00000000004db870 R15: 0000000000000007 16:57:48 executing program 2: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x3, 0x2) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) splice(r0, 0x0, r2, 0x0, 0x10005, 0xa0000000000e803) 16:57:48 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0xfffffffffffff000, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1, 0x0, 0x0, 0xa00000000000000}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) 16:57:48 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffff00000000, 0x0, 0x40030088a8ffff, 0x34000]}}]}, 0x2b2}}, 0x0) 16:57:48 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x3, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) 16:57:48 executing program 0 (fault-call:8 fault-nth:38): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x3, 0x2) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) splice(r0, 0x0, r2, 0x0, 0x100e0, 0x0) [ 627.874939] FAULT_INJECTION: forcing a failure. [ 627.874939] name failslab, interval 1, probability 0, space 0, times 0 [ 627.888186] CPU: 1 PID: 27273 Comm: syz-executor.0 Not tainted 5.0.0+ #6 [ 627.895070] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 627.904441] Call Trace: [ 627.907039] dump_stack+0x172/0x1f0 [ 627.910688] should_fail.cold+0xa/0x1b [ 627.914602] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 627.919729] ? lock_downgrade+0x810/0x810 [ 627.923889] ? ___might_sleep+0x163/0x280 [ 627.928069] __should_failslab+0x121/0x190 [ 627.932324] should_failslab+0x9/0x14 [ 627.936146] kmem_cache_alloc_node_trace+0x270/0x720 [ 627.941294] ? __alloc_skb+0xd5/0x5e0 [ 627.945124] ? rcu_lockdep_current_cpu_online+0xe3/0x130 [ 627.951296] __kmalloc_node_track_caller+0x3d/0x70 [ 627.951316] __kmalloc_reserve.isra.0+0x40/0xf0 [ 627.960940] __alloc_skb+0x10b/0x5e0 [ 627.964666] ? skb_scrub_packet+0x440/0x440 [ 627.968988] ? raw_getfrag+0x164/0x230 [ 627.972927] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 627.977964] __ip_append_data.isra.0+0x24d6/0x2dd0 [ 627.982903] ? raw_destroy+0x30/0x30 [ 627.986618] ? __ip_flush_pending_frames.isra.0+0x2d0/0x2d0 [ 627.992332] ? ipv4_mtu+0x2a9/0x400 [ 627.995958] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 628.001496] ? ip_setup_cork+0x53b/0x870 [ 628.005650] ? raw_destroy+0x30/0x30 [ 628.009372] ip_append_data.part.0+0xf2/0x170 [ 628.013888] ? raw_destroy+0x30/0x30 [ 628.017618] ip_append_data+0x6e/0x90 [ 628.021467] raw_sendmsg+0xbd8/0x2f10 [ 628.025318] ? raw_getsockopt+0x100/0x100 [ 628.029477] ? ima_match_policy+0xa19/0x13d0 [ 628.033892] ? process_measurement+0xd5d/0x1570 [ 628.038576] ? process_measurement+0xd5d/0x1570 [ 628.043275] ? lock_downgrade+0x810/0x810 [ 628.047446] ? __lock_acquire+0x53b/0x4700 [ 628.051697] ? __lock_acquire+0x53b/0x4700 [ 628.055938] ? __lock_acquire+0x53b/0x4700 [ 628.060204] inet_sendmsg+0x147/0x5d0 [ 628.064027] ? raw_getsockopt+0x100/0x100 [ 628.068194] ? inet_sendmsg+0x147/0x5d0 [ 628.072179] ? ipip_gro_receive+0x100/0x100 [ 628.076517] sock_sendmsg+0xdd/0x130 [ 628.080247] kernel_sendmsg+0x44/0x50 [ 628.084083] sock_no_sendpage+0x116/0x150 [ 628.088244] ? sock_kzfree_s+0x70/0x70 [ 628.092175] ? debug_check_no_obj_freed+0x200/0x464 [ 628.097211] ? mark_held_locks+0xb1/0x100 [ 628.101379] inet_sendpage+0x44a/0x630 [ 628.105296] kernel_sendpage+0x95/0xf0 [ 628.109192] ? inet_sendmsg+0x5d0/0x5d0 [ 628.113182] sock_sendpage+0x8b/0xc0 [ 628.116906] ? lockdep_hardirqs_on+0x415/0x5d0 [ 628.121507] pipe_to_sendpage+0x299/0x370 [ 628.125678] ? kernel_sendpage+0xf0/0xf0 [ 628.129766] ? direct_splice_actor+0x1a0/0x1a0 [ 628.134369] ? __put_page+0x92/0xd0 [ 628.138012] ? anon_pipe_buf_release+0x1c6/0x270 [ 628.142826] __splice_from_pipe+0x39a/0x7e0 [ 628.147171] ? direct_splice_actor+0x1a0/0x1a0 [ 628.151775] ? direct_splice_actor+0x1a0/0x1a0 [ 628.156369] splice_from_pipe+0x108/0x170 [ 628.160527] ? splice_shrink_spd+0xd0/0xd0 [ 628.164833] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 628.170381] ? security_file_permission+0x94/0x320 [ 628.175320] generic_splice_sendpage+0x3c/0x50 [ 628.179907] ? splice_from_pipe+0x170/0x170 [ 628.184238] do_splice+0x70a/0x1490 [ 628.187890] ? iterate_fd+0x360/0x360 [ 628.191713] ? opipe_prep.part.0+0x2d0/0x2d0 [ 628.196138] ? __fget_light+0x1a9/0x230 [ 628.200134] __x64_sys_splice+0x2c6/0x330 [ 628.204322] do_syscall_64+0x103/0x610 [ 628.208226] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 628.213441] RIP: 0033:0x457e29 [ 628.216646] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 628.235555] RSP: 002b:00007f2baa4adc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 628.243312] RAX: ffffffffffffffda RBX: 00007f2baa4adc90 RCX: 0000000000457e29 [ 628.250584] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000003 [ 628.257850] RBP: 000000000073bfa0 R08: 00000000000100e0 R09: 0000000000000000 [ 628.265114] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f2baa4ae6d4 16:57:48 executing program 5: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vcs\x00', 0x80000, 0x0) close(r2) fcntl$addseals(r0, 0x409, 0x8) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) getsockname$llc(r0, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, &(0x7f00000000c0)=0x10) socket$inet(0x2, 0x3, 0x2) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) ioctl$DRM_IOCTL_AGP_ACQUIRE(r1, 0x6430) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000200)={{{@in6=@dev, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in6=@ipv4={[], [], @local}}}, &(0x7f0000000100)=0xe8) bind$xdp(r0, &(0x7f0000000300)={0x2c, 0x1, r4, 0x1e, r1}, 0x10) fcntl$getownex(r3, 0x10, &(0x7f0000000380)={0x0, 0x0}) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000003c0)=0x0) kcmp(r5, r6, 0x2, r1, r2) splice(r0, 0x0, r2, 0x0, 0x1ffe0, 0x0) 16:57:48 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1, 0x0, 0x0, 0xa00000000000000}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) 16:57:48 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x3, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) 16:57:48 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffff00000000, 0x0, 0x4003009d020000, 0x34000]}}]}, 0x2b2}}, 0x0) [ 628.272373] R13: 00000000004c6c75 R14: 00000000004db870 R15: 0000000000000007 16:57:49 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x3, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) 16:57:49 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffff00000000, 0x0, 0x4003009effffff, 0x34000]}}]}, 0x2b2}}, 0x0) 16:57:49 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1, 0x0, 0x0, 0xa00000000000000}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) 16:57:49 executing program 2: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x3, 0x2) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) splice(r0, 0x0, r2, 0x0, 0x10005, 0xa0000000000f401) 16:57:49 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x3, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) 16:57:49 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1, 0x0, 0x0, 0xa00000000000000}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) 16:57:49 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffff00000000, 0x0, 0x400300a0008000, 0x34000]}}]}, 0x2b2}}, 0x0) 16:57:49 executing program 0 (fault-call:8 fault-nth:39): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x3, 0x2) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) splice(r0, 0x0, r2, 0x0, 0x100e0, 0x0) [ 628.744475] FAULT_INJECTION: forcing a failure. [ 628.744475] name failslab, interval 1, probability 0, space 0, times 0 [ 628.758930] CPU: 1 PID: 27322 Comm: syz-executor.0 Not tainted 5.0.0+ #6 [ 628.765796] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 628.775179] Call Trace: [ 628.777777] dump_stack+0x172/0x1f0 [ 628.781449] should_fail.cold+0xa/0x1b [ 628.785350] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 628.790459] ? retint_kernel+0x2d/0x2d [ 628.794366] ? trace_hardirqs_on_caller+0x6a/0x220 [ 628.799314] __should_failslab+0x121/0x190 [ 628.803566] should_failslab+0x9/0x14 [ 628.803582] kmem_cache_alloc+0x47/0x6f0 [ 628.803610] skb_clone+0x150/0x3b0 [ 628.811466] ip_mc_output+0x3aa/0xf70 [ 628.811490] ? __ip_queue_xmit+0x1bf0/0x1bf0 [ 628.811509] ? rcu_lockdep_current_cpu_online+0xe3/0x130 [ 628.811532] ? ip_append_data.part.0+0x170/0x170 [ 628.811549] ? dst_release+0x62/0xb0 [ 628.811567] ? __ip_make_skb+0xf93/0x1820 [ 628.811588] ip_local_out+0xc4/0x1b0 [ 628.811608] ip_send_skb+0x42/0xf0 [ 628.848648] ip_push_pending_frames+0x64/0x80 [ 628.853162] raw_sendmsg+0x1e5d/0x2f10 [ 628.857072] ? raw_getsockopt+0x100/0x100 [ 628.861254] ? ima_match_policy+0xa19/0x13d0 [ 628.865691] ? process_measurement+0xd5d/0x1570 [ 628.870375] ? process_measurement+0xd5d/0x1570 [ 628.875085] ? mark_held_locks+0xb1/0x100 [ 628.879246] ? __lock_acquire+0x53b/0x4700 [ 628.883496] ? retint_kernel+0x2d/0x2d [ 628.887436] ? trace_hardirqs_on_caller+0x6a/0x220 16:57:49 executing program 5: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r3 = socket$inet(0x2, 0x3, 0x2) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r3, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000000)={r0, &(0x7f0000000200)="0b200a396c727dd7a074dbe69eac1c3acb2482433a990a6667a9d2f030378cc57a81c5adbe219d6f974c552a5f45f83ade8154cea13e6116cea5ed0d4b4c2e426a1cb50dbe31517b667777c6f45e9c458a316ad47991d24cd5af5ea2f83eb603548bd4c449b5b3853bb3b91eb03cd0f16afeff118dfa239f7d0e38085fb63ed45adefa338d4d90f553376d3b1283493b74d6571f8c8782c174964afe6b2d46eb530ef62151455a4ef81d2abe2d3c0f258cc1a9f12072b8ab81cbad0ad522945158d007968680c0f9d79efde290596a21ded48e40939464e7d205c10baa2dbc9ce25bf24e72931e21daeca81e724aaced3e79", &(0x7f0000000300)=""/188}, 0x18) perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) splice(r0, 0x0, r2, 0x0, 0x1ffe0, 0x0) 16:57:49 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x3, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) 16:57:49 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1, 0x0, 0x0, 0xa00000000000000}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) 16:57:49 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffff00000000, 0x0, 0x400300a0010000, 0x34000]}}]}, 0x2b2}}, 0x0) 16:57:49 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffff00000000, 0x0, 0x400300f0ffffff, 0x34000]}}]}, 0x2b2}}, 0x0) [ 628.892419] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 628.897196] inet_sendmsg+0x147/0x5d0 [ 628.901009] ? raw_getsockopt+0x100/0x100 [ 628.905162] ? inet_sendmsg+0x147/0x5d0 [ 628.905180] ? ipip_gro_receive+0x100/0x100 [ 628.905201] sock_sendmsg+0xdd/0x130 [ 628.905219] kernel_sendmsg+0x44/0x50 [ 628.905239] sock_no_sendpage+0x116/0x150 [ 628.925221] ? sock_kzfree_s+0x70/0x70 [ 628.929130] ? debug_check_no_obj_freed+0x200/0x464 [ 628.929158] ? mark_held_locks+0xb1/0x100 [ 628.929179] inet_sendpage+0x44a/0x630 [ 628.929200] kernel_sendpage+0x95/0xf0 [ 628.929213] ? inet_sendmsg+0x5d0/0x5d0 [ 628.929231] sock_sendpage+0x8b/0xc0 [ 628.929242] ? lockdep_hardirqs_on+0x415/0x5d0 [ 628.929275] pipe_to_sendpage+0x299/0x370 [ 628.929290] ? kernel_sendpage+0xf0/0xf0 [ 628.929308] ? direct_splice_actor+0x1a0/0x1a0 [ 628.929328] ? __put_page+0x92/0xd0 [ 628.974841] ? anon_pipe_buf_release+0x1c6/0x270 [ 628.979632] __splice_from_pipe+0x39a/0x7e0 [ 628.983969] ? direct_splice_actor+0x1a0/0x1a0 [ 628.988571] ? direct_splice_actor+0x1a0/0x1a0 16:57:49 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffff00000000, 0x0, 0x400300ffffa888, 0x34000]}}]}, 0x2b2}}, 0x0) [ 628.993161] splice_from_pipe+0x108/0x170 [ 628.997324] ? splice_shrink_spd+0xd0/0xd0 [ 629.001577] ? retint_kernel+0x2d/0x2d [ 629.005505] ? direct_splice_actor+0x1a0/0x1a0 [ 629.010110] generic_splice_sendpage+0x3c/0x50 [ 629.014697] ? splice_from_pipe+0x170/0x170 [ 629.019027] do_splice+0x70a/0x1490 [ 629.022666] ? iterate_fd+0x360/0x360 [ 629.026517] ? opipe_prep.part.0+0x2d0/0x2d0 [ 629.030947] ? __fget_light+0x1a9/0x230 [ 629.034942] __x64_sys_splice+0x2c6/0x330 [ 629.039133] do_syscall_64+0x103/0x610 [ 629.043031] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 629.048223] RIP: 0033:0x457e29 [ 629.051419] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 629.051428] RSP: 002b:00007f2baa4adc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 629.051443] RAX: ffffffffffffffda RBX: 00007f2baa4adc90 RCX: 0000000000457e29 [ 629.051452] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000003 16:57:49 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1, 0x0, 0x0, 0xa00000000000000}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) [ 629.051461] RBP: 000000000073bfa0 R08: 00000000000100e0 R09: 0000000000000000 [ 629.051471] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f2baa4ae6d4 [ 629.051479] R13: 00000000004c6c75 R14: 00000000004db870 R15: 0000000000000007 16:57:50 executing program 2: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x3, 0x2) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) splice(r0, 0x0, r2, 0x0, 0x10005, 0xa000000008000a0) 16:57:50 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x3, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) 16:57:50 executing program 5: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x200000, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x3, 0x2) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) connect$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @loopback}, 0x10) perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) splice(r0, 0x0, r2, 0x0, 0x1ffe0, 0x0) 16:57:50 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1, 0x0, 0x0, 0xa00000000000000}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) [ 629.577553] net_ratelimit: 82 callbacks suppressed [ 629.577561] neighbour: ndisc_cache: neighbor table overflow! [ 629.607075] neighbour: ndisc_cache: neighbor table overflow! [ 629.621771] neighbour: ndisc_cache: neighbor table overflow! 16:57:50 executing program 0 (fault-call:8 fault-nth:40): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x3, 0x2) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) splice(r0, 0x0, r2, 0x0, 0x100e0, 0x0) 16:57:50 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffff00000000, 0x0, 0x400300fffff000, 0x34000]}}]}, 0x2b2}}, 0x0) 16:57:50 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x3, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) 16:57:50 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1, 0x0, 0x0, 0xa00000000000000}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) [ 629.647842] neighbour: ndisc_cache: neighbor table overflow! [ 629.736364] neighbour: ndisc_cache: neighbor table overflow! [ 629.752256] neighbour: ndisc_cache: neighbor table overflow! [ 629.761455] neighbour: ndisc_cache: neighbor table overflow! [ 629.778010] neighbour: ndisc_cache: neighbor table overflow! 16:57:50 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffff00000000, 0x0, 0x400300ffffff7f, 0x34000]}}]}, 0x2b2}}, 0x0) [ 629.787049] neighbour: ndisc_cache: neighbor table overflow! [ 629.799198] neighbour: ndisc_cache: neighbor table overflow! [ 629.845896] FAULT_INJECTION: forcing a failure. [ 629.845896] name failslab, interval 1, probability 0, space 0, times 0 [ 629.865850] CPU: 1 PID: 27381 Comm: syz-executor.0 Not tainted 5.0.0+ #6 [ 629.872721] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 629.882070] Call Trace: [ 629.884671] dump_stack+0x172/0x1f0 [ 629.888306] should_fail.cold+0xa/0x1b [ 629.892193] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 629.897291] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 629.902032] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 629.906796] ? lockdep_hardirqs_on+0x415/0x5d0 [ 629.911385] __should_failslab+0x121/0x190 [ 629.915624] should_failslab+0x9/0x14 [ 629.919415] kmem_cache_alloc+0x47/0x6f0 [ 629.923465] ? retint_kernel+0x2d/0x2d [ 629.927345] dst_alloc+0x10e/0x1d0 [ 629.930875] rt_dst_alloc+0x83/0x3f0 [ 629.934576] ip_route_output_key_hash_rcu+0x97d/0x30e0 [ 629.939839] ? ip_route_input_noref+0x280/0x280 [ 629.944490] ? kasan_check_read+0x11/0x20 [ 629.948624] ip_route_output_key_hash+0x212/0x380 [ 629.953453] ? ip_route_output_key_hash_rcu+0x30e0/0x30e0 [ 629.958986] ? raw_sendmsg+0x6b0/0x2f10 [ 629.962961] ? lock_downgrade+0x810/0x810 [ 629.967105] ip_route_output_flow+0x28/0xc0 [ 629.971428] raw_sendmsg+0xa10/0x2f10 [ 629.975216] ? raw_getsockopt+0x100/0x100 [ 629.979361] ? lockdep_hardirqs_on+0x415/0x5d0 [ 629.983941] ? process_measurement+0xd5d/0x1570 [ 629.988604] ? mark_held_locks+0xb1/0x100 [ 629.992740] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 629.997480] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 630.002218] ? lockdep_hardirqs_on+0x415/0x5d0 [ 630.006781] ? retint_kernel+0x2d/0x2d [ 630.010664] ? trace_hardirqs_on_caller+0x6a/0x220 [ 630.015594] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 630.020343] ? retint_kernel+0x2d/0x2d [ 630.024236] ? ipip_gro_receive+0x100/0x100 [ 630.028554] inet_sendmsg+0x147/0x5d0 [ 630.032339] ? raw_getsockopt+0x100/0x100 [ 630.036467] ? inet_sendmsg+0x147/0x5d0 [ 630.040431] ? ipip_gro_receive+0x100/0x100 [ 630.044739] sock_sendmsg+0xdd/0x130 [ 630.048443] kernel_sendmsg+0x44/0x50 [ 630.052294] sock_no_sendpage+0x116/0x150 [ 630.056429] ? sock_kzfree_s+0x70/0x70 [ 630.060323] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 630.065072] inet_sendpage+0x44a/0x630 [ 630.068944] kernel_sendpage+0x95/0xf0 [ 630.072815] ? inet_sendmsg+0x5d0/0x5d0 [ 630.076778] sock_sendpage+0x8b/0xc0 [ 630.080483] ? write_comp_data+0x1e/0x70 [ 630.084532] pipe_to_sendpage+0x299/0x370 [ 630.088666] ? kernel_sendpage+0xf0/0xf0 [ 630.092718] ? direct_splice_actor+0x1a0/0x1a0 [ 630.097303] ? __put_page+0x92/0xd0 [ 630.100926] ? anon_pipe_buf_release+0x1c6/0x270 [ 630.105673] __splice_from_pipe+0x39a/0x7e0 [ 630.109982] ? direct_splice_actor+0x1a0/0x1a0 [ 630.114556] ? direct_splice_actor+0x1a0/0x1a0 [ 630.119133] splice_from_pipe+0x108/0x170 [ 630.123272] ? splice_shrink_spd+0xd0/0xd0 [ 630.127499] ? retint_kernel+0x2d/0x2d [ 630.131425] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 630.136975] ? security_file_permission+0x94/0x320 [ 630.141907] generic_splice_sendpage+0x3c/0x50 [ 630.146472] ? splice_from_pipe+0x170/0x170 [ 630.150779] do_splice+0x70a/0x1490 [ 630.154398] ? iterate_fd+0x360/0x360 [ 630.158182] ? opipe_prep.part.0+0x2d0/0x2d0 [ 630.162594] ? __fget_light+0x1a9/0x230 [ 630.166554] __x64_sys_splice+0x2c6/0x330 [ 630.170687] do_syscall_64+0x103/0x610 [ 630.174569] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 630.179755] RIP: 0033:0x457e29 16:57:51 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1, 0x0, 0x0, 0xa00000000000000}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) 16:57:51 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffff00000000, 0x0, 0x400300ffffff9e, 0x34000]}}]}, 0x2b2}}, 0x0) 16:57:51 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x3, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) [ 630.182935] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 630.201833] RSP: 002b:00007f2baa4adc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 630.209533] RAX: ffffffffffffffda RBX: 00007f2baa4adc90 RCX: 0000000000457e29 [ 630.216782] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000003 [ 630.224035] RBP: 000000000073bfa0 R08: 00000000000100e0 R09: 0000000000000000 [ 630.231291] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f2baa4ae6d4 [ 630.238558] R13: 00000000004c6c75 R14: 00000000004db870 R15: 0000000000000007 16:57:51 executing program 2: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x3, 0x2) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) splice(r0, 0x0, r2, 0x0, 0x10005, 0xa00000001000000) 16:57:51 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x3, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) 16:57:51 executing program 5: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x3, 0x2) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) splice(r0, 0x0, r2, 0x0, 0x1ffe0, 0x0) ioctl$KVM_SET_FPU(r0, 0x41a0ae8d, &(0x7f0000000200)={[], 0x3, 0x3, 0x1ff, 0x0, 0xffffffff, 0x11000, 0x1000, [], 0x1}) 16:57:51 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffff00000000, 0x0, 0x400300fffffff0, 0x34000]}}]}, 0x2b2}}, 0x0) 16:57:51 executing program 0 (fault-call:8 fault-nth:41): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x3, 0x2) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) splice(r0, 0x0, r2, 0x0, 0x100e0, 0x0) 16:57:51 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1, 0x0, 0x0, 0xa00000000000000}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) 16:57:51 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x3, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) 16:57:51 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34002]}}]}, 0x2b2}}, 0x0) 16:57:51 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x3, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) 16:57:51 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1, 0x0, 0x0, 0xa00000000000000}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) 16:57:51 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34003]}}]}, 0x2b2}}, 0x0) 16:57:51 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x3, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) [ 630.719134] FAULT_INJECTION: forcing a failure. [ 630.719134] name failslab, interval 1, probability 0, space 0, times 0 [ 630.813781] CPU: 0 PID: 27436 Comm: syz-executor.0 Not tainted 5.0.0+ #6 [ 630.820681] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 630.830036] Call Trace: [ 630.832645] dump_stack+0x172/0x1f0 [ 630.836284] should_fail.cold+0xa/0x1b [ 630.840180] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 630.845310] ? lock_downgrade+0x810/0x810 [ 630.849467] ? ___might_sleep+0x163/0x280 [ 630.853639] __should_failslab+0x121/0x190 [ 630.857889] should_failslab+0x9/0x14 [ 630.861697] kmem_cache_alloc_node+0x264/0x710 [ 630.866323] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 630.871141] __alloc_skb+0xd5/0x5e0 [ 630.874790] ? skb_scrub_packet+0x440/0x440 [ 630.879121] ? raw_destroy+0x30/0x30 [ 630.882854] ? __ip_append_data.isra.0+0x1ae/0x2dd0 [ 630.887882] __ip_append_data.isra.0+0x24d6/0x2dd0 [ 630.892840] ? raw_destroy+0x30/0x30 [ 630.896591] ? __ip_flush_pending_frames.isra.0+0x2d0/0x2d0 [ 630.902325] ? ipv4_mtu+0x2a9/0x400 [ 630.905966] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 630.911562] ? ip_setup_cork+0x53b/0x870 [ 630.915635] ? raw_destroy+0x30/0x30 [ 630.919362] ip_append_data.part.0+0xf2/0x170 [ 630.923880] ? raw_destroy+0x30/0x30 [ 630.927606] ip_append_data+0x6e/0x90 [ 630.931424] raw_sendmsg+0xbd8/0x2f10 [ 630.935243] ? raw_getsockopt+0x100/0x100 [ 630.939408] ? ima_match_policy+0xa19/0x13d0 [ 630.943824] ? process_measurement+0xd5d/0x1570 [ 630.948498] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 630.953272] ? lockdep_hardirqs_on+0x415/0x5d0 [ 630.957864] ? retint_kernel+0x2d/0x2d [ 630.961750] ? trace_hardirqs_on_caller+0x6a/0x220 [ 630.966688] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 630.971473] ? __lock_acquire+0x53b/0x4700 [ 630.975736] ? mark_held_locks+0xb1/0x100 [ 630.979905] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 630.984677] inet_sendmsg+0x147/0x5d0 [ 630.988479] ? raw_getsockopt+0x100/0x100 [ 630.988493] ? inet_sendmsg+0x147/0x5d0 [ 630.988508] ? ipip_gro_receive+0x100/0x100 [ 630.988526] sock_sendmsg+0xdd/0x130 [ 631.000977] kernel_sendmsg+0x44/0x50 [ 631.001001] sock_no_sendpage+0x116/0x150 [ 631.001020] ? sock_kzfree_s+0x70/0x70 [ 631.001050] ? lockdep_hardirqs_on+0x415/0x5d0 [ 631.001066] ? retint_kernel+0x2d/0x2d [ 631.001081] ? trace_hardirqs_on_caller+0x6a/0x220 [ 631.001103] inet_sendpage+0x44a/0x630 [ 631.001125] kernel_sendpage+0x95/0xf0 [ 631.001140] ? inet_sendmsg+0x5d0/0x5d0 [ 631.001158] sock_sendpage+0x8b/0xc0 [ 631.001182] pipe_to_sendpage+0x299/0x370 [ 631.049642] ? kernel_sendpage+0xf0/0xf0 [ 631.053717] ? direct_splice_actor+0x1a0/0x1a0 [ 631.058302] ? __put_page+0x92/0xd0 [ 631.061919] ? anon_pipe_buf_release+0x1c6/0x270 [ 631.066662] __splice_from_pipe+0x39a/0x7e0 [ 631.070989] ? direct_splice_actor+0x1a0/0x1a0 [ 631.075569] ? direct_splice_actor+0x1a0/0x1a0 [ 631.080143] splice_from_pipe+0x108/0x170 [ 631.084293] ? splice_shrink_spd+0xd0/0xd0 [ 631.088539] ? rw_verify_area+0x118/0x360 [ 631.092697] ? __sanitizer_cov_trace_pc+0x20/0x50 [ 631.097543] generic_splice_sendpage+0x3c/0x50 [ 631.102107] ? splice_from_pipe+0x170/0x170 [ 631.106424] do_splice+0x70a/0x1490 [ 631.110051] ? iterate_fd+0x360/0x360 [ 631.113848] ? opipe_prep.part.0+0x2d0/0x2d0 [ 631.118237] ? __fget_light+0x1a9/0x230 [ 631.122210] __x64_sys_splice+0x2c6/0x330 [ 631.126354] do_syscall_64+0x103/0x610 [ 631.130246] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 631.135446] RIP: 0033:0x457e29 [ 631.138633] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 631.157536] RSP: 002b:00007f2baa4adc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 631.165239] RAX: ffffffffffffffda RBX: 00007f2baa4adc90 RCX: 0000000000457e29 [ 631.172519] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000003 [ 631.179791] RBP: 000000000073bfa0 R08: 00000000000100e0 R09: 0000000000000000 [ 631.187057] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f2baa4ae6d4 [ 631.194325] R13: 00000000004c6c75 R14: 00000000004db870 R15: 0000000000000007 16:57:52 executing program 2: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x3, 0x2) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) splice(r0, 0x0, r2, 0x0, 0x10005, 0xa00000004000000) 16:57:52 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1, 0x0, 0x0, 0xa00000000000000}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) 16:57:52 executing program 5: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000340)=ANY=[@ANYRES64=r2], 0xfffffe97) socket$inet(0x2, 0x3, 0x2) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) r3 = syz_open_dev$vcsn(&(0x7f0000000080)='/dev/vcs#\x00', 0x8, 0x4000) r4 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000200)='SEG6\x00') sendmsg$SEG6_CMD_GET_TUNSRC(r3, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="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"], 0x24}}, 0x0) ioctl$sock_bt_bnep_BNEPCONNDEL(r3, 0x400442c9, &(0x7f00000000c0)={0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet(r3, &(0x7f0000000300)={0x2, 0x4e22, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x1ffe0, 0x0) 16:57:52 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x3, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) 16:57:52 executing program 0 (fault-call:8 fault-nth:42): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x3, 0x2) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) splice(r0, 0x0, r2, 0x0, 0x100e0, 0x0) 16:57:52 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34004]}}]}, 0x2b2}}, 0x0) 16:57:52 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1, 0x0, 0x0, 0xa00000000000000}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) 16:57:52 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x3, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) 16:57:52 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1, 0x0, 0x0, 0xa00000000000000}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) 16:57:52 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x3, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) 16:57:52 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34006]}}]}, 0x2b2}}, 0x0) [ 631.770135] FAULT_INJECTION: forcing a failure. [ 631.770135] name failslab, interval 1, probability 0, space 0, times 0 [ 631.788943] CPU: 0 PID: 27484 Comm: syz-executor.0 Not tainted 5.0.0+ #6 [ 631.795799] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 631.805303] Call Trace: [ 631.807907] dump_stack+0x172/0x1f0 [ 631.811557] should_fail.cold+0xa/0x1b [ 631.815459] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 631.815478] ? lock_downgrade+0x810/0x810 [ 631.815498] ? ___might_sleep+0x163/0x280 [ 631.815522] __should_failslab+0x121/0x190 [ 631.815541] should_failslab+0x9/0x14 [ 631.836937] kmem_cache_alloc_node_trace+0x270/0x720 [ 631.842052] ? __alloc_skb+0xd5/0x5e0 [ 631.845876] ? rcu_lockdep_current_cpu_online+0xe3/0x130 [ 631.851341] __kmalloc_node_track_caller+0x3d/0x70 [ 631.851362] __kmalloc_reserve.isra.0+0x40/0xf0 [ 631.851381] __alloc_skb+0x10b/0x5e0 [ 631.851399] ? skb_scrub_packet+0x440/0x440 16:57:52 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1, 0x0, 0x0, 0xa00000000000000}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) [ 631.851418] ? rt_set_nexthop.constprop.0+0x529/0x11d0 [ 631.851443] __ip_append_data.isra.0+0x24d6/0x2dd0 [ 631.851470] ? raw_destroy+0x30/0x30 [ 631.851499] ? __ip_flush_pending_frames.isra.0+0x2d0/0x2d0 [ 631.874380] ? ipv4_mtu+0x2a9/0x400 [ 631.874401] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 631.874417] ? ip_setup_cork+0x53b/0x870 [ 631.874436] ? raw_destroy+0x30/0x30 [ 631.874453] ip_append_data.part.0+0xf2/0x170 [ 631.874473] ? raw_destroy+0x30/0x30 [ 631.913902] ip_append_data+0x6e/0x90 [ 631.917717] raw_sendmsg+0xbd8/0x2f10 [ 631.921556] ? raw_getsockopt+0x100/0x100 [ 631.925729] ? ima_match_policy+0xa19/0x13d0 [ 631.930146] ? process_measurement+0xd5d/0x1570 [ 631.934823] ? process_measurement+0xd5d/0x1570 [ 631.939510] ? lock_downgrade+0x810/0x810 [ 631.943697] ? __lock_acquire+0x53b/0x4700 [ 631.947956] ? __lock_acquire+0x53b/0x4700 [ 631.952207] ? __lock_acquire+0x53b/0x4700 [ 631.956455] inet_sendmsg+0x147/0x5d0 [ 631.960270] ? raw_getsockopt+0x100/0x100 [ 631.964455] ? inet_sendmsg+0x147/0x5d0 [ 631.968435] ? ipip_gro_receive+0x100/0x100 [ 631.972776] sock_sendmsg+0xdd/0x130 [ 631.976513] kernel_sendmsg+0x44/0x50 [ 631.980337] sock_no_sendpage+0x116/0x150 [ 631.984502] ? sock_kzfree_s+0x70/0x70 [ 631.988409] ? debug_check_no_obj_freed+0x200/0x464 [ 631.993447] ? mark_held_locks+0xb1/0x100 [ 631.997616] inet_sendpage+0x44a/0x630 [ 632.001543] kernel_sendpage+0x95/0xf0 [ 632.005437] ? inet_sendmsg+0x5d0/0x5d0 [ 632.009427] sock_sendpage+0x8b/0xc0 [ 632.013159] ? lockdep_hardirqs_on+0x415/0x5d0 [ 632.017756] pipe_to_sendpage+0x299/0x370 [ 632.021914] ? kernel_sendpage+0xf0/0xf0 [ 632.025983] ? direct_splice_actor+0x1a0/0x1a0 [ 632.030578] ? __put_page+0x92/0xd0 [ 632.034218] ? anon_pipe_buf_release+0x1c6/0x270 [ 632.039014] __splice_from_pipe+0x39a/0x7e0 [ 632.043355] ? direct_splice_actor+0x1a0/0x1a0 [ 632.047933] ? direct_splice_actor+0x1a0/0x1a0 [ 632.052501] splice_from_pipe+0x108/0x170 [ 632.056634] ? splice_shrink_spd+0xd0/0xd0 [ 632.060882] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 632.066428] ? security_file_permission+0x94/0x320 [ 632.071373] generic_splice_sendpage+0x3c/0x50 [ 632.075959] ? splice_from_pipe+0x170/0x170 [ 632.080312] do_splice+0x70a/0x1490 [ 632.083949] ? iterate_fd+0x360/0x360 [ 632.087763] ? opipe_prep.part.0+0x2d0/0x2d0 [ 632.092176] ? __fget_light+0x1a9/0x230 [ 632.096174] __x64_sys_splice+0x2c6/0x330 [ 632.100333] do_syscall_64+0x103/0x610 [ 632.104269] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 632.109476] RIP: 0033:0x457e29 [ 632.112703] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 632.131610] RSP: 002b:00007f2baa4adc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 632.131626] RAX: ffffffffffffffda RBX: 00007f2baa4adc90 RCX: 0000000000457e29 [ 632.131635] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000003 [ 632.131644] RBP: 000000000073bfa0 R08: 00000000000100e0 R09: 0000000000000000 [ 632.131653] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f2baa4ae6d4 16:57:53 executing program 2: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x3, 0x2) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) splice(r0, 0x0, r2, 0x0, 0x10005, 0xa00000007000000) 16:57:53 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1, 0x0, 0x0, 0xa00000000000000}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) [ 632.131661] R13: 00000000004c6c75 R14: 00000000004db870 R15: 0000000000000007 16:57:53 executing program 5: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) fcntl$F_GET_FILE_RW_HINT(r2, 0x40d, &(0x7f0000000000)) socket$inet(0x2, 0x3, 0x2) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) splice(r0, 0x0, r2, 0x0, 0x1ffe0, 0x0) 16:57:53 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34008]}}]}, 0x2b2}}, 0x0) 16:57:53 executing program 0 (fault-call:8 fault-nth:43): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x3, 0x2) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) splice(r0, 0x0, r2, 0x0, 0x100e0, 0x0) 16:57:53 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x3, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) 16:57:53 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1, 0x0, 0x0, 0xa00000000000000}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) 16:57:53 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x3400a]}}]}, 0x2b2}}, 0x0) 16:57:53 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1, 0x0, 0x0, 0xa00000000000000}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) 16:57:53 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x3400c]}}]}, 0x2b2}}, 0x0) 16:57:53 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x3, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) [ 632.702945] FAULT_INJECTION: forcing a failure. [ 632.702945] name failslab, interval 1, probability 0, space 0, times 0 [ 632.772783] CPU: 0 PID: 27533 Comm: syz-executor.0 Not tainted 5.0.0+ #6 [ 632.779719] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 632.789093] Call Trace: [ 632.791700] dump_stack+0x172/0x1f0 [ 632.795362] should_fail.cold+0xa/0x1b [ 632.799281] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 632.804409] ? lock_downgrade+0x810/0x810 [ 632.808564] ? ___might_sleep+0x163/0x280 [ 632.812732] __should_failslab+0x121/0x190 [ 632.817012] should_failslab+0x9/0x14 16:57:53 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1, 0x0, 0x0, 0xa00000000000000}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) [ 632.820835] kmem_cache_alloc_node+0x264/0x710 [ 632.825440] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 632.830986] ? ip_generic_getfrag+0x120/0x230 [ 632.835494] __alloc_skb+0xd5/0x5e0 [ 632.839189] ? skb_scrub_packet+0x440/0x440 [ 632.843534] ? raw_getfrag+0x164/0x230 [ 632.847425] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 632.852459] __ip_append_data.isra.0+0x24d6/0x2dd0 [ 632.857413] ? raw_destroy+0x30/0x30 [ 632.861159] ? __ip_flush_pending_frames.isra.0+0x2d0/0x2d0 [ 632.866874] ? ipv4_mtu+0x2a9/0x400 [ 632.870510] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 632.876051] ? ip_setup_cork+0x53b/0x870 [ 632.880118] ? raw_destroy+0x30/0x30 [ 632.883846] ip_append_data.part.0+0xf2/0x170 [ 632.888358] ? raw_destroy+0x30/0x30 [ 632.892106] ip_append_data+0x6e/0x90 [ 632.895926] raw_sendmsg+0xbd8/0x2f10 [ 632.899746] ? raw_getsockopt+0x100/0x100 [ 632.899766] ? ima_match_policy+0xa19/0x13d0 [ 632.899781] ? process_measurement+0xd5d/0x1570 [ 632.899799] ? process_measurement+0xd5d/0x1570 [ 632.899824] ? lock_downgrade+0x810/0x810 [ 632.899848] ? __lock_acquire+0x53b/0x4700 [ 632.899867] ? __lock_acquire+0x53b/0x4700 [ 632.899882] ? __lock_acquire+0x53b/0x4700 [ 632.908448] inet_sendmsg+0x147/0x5d0 [ 632.908463] ? raw_getsockopt+0x100/0x100 [ 632.908477] ? inet_sendmsg+0x147/0x5d0 [ 632.908493] ? ipip_gro_receive+0x100/0x100 [ 632.908511] sock_sendmsg+0xdd/0x130 [ 632.908527] kernel_sendmsg+0x44/0x50 [ 632.946562] sock_no_sendpage+0x116/0x150 [ 632.946580] ? sock_kzfree_s+0x70/0x70 [ 632.946600] ? debug_check_no_obj_freed+0x200/0x464 [ 632.946624] ? mark_held_locks+0xb1/0x100 [ 632.946656] inet_sendpage+0x44a/0x630 [ 632.954698] kernel_sendpage+0x95/0xf0 [ 632.954712] ? inet_sendmsg+0x5d0/0x5d0 [ 632.954730] sock_sendpage+0x8b/0xc0 [ 632.954744] ? lockdep_hardirqs_on+0x415/0x5d0 [ 632.954766] pipe_to_sendpage+0x299/0x370 [ 632.954781] ? kernel_sendpage+0xf0/0xf0 [ 633.003927] ? direct_splice_actor+0x1a0/0x1a0 [ 633.008551] ? __put_page+0x92/0xd0 [ 633.012189] ? anon_pipe_buf_release+0x1c6/0x270 [ 633.016977] __splice_from_pipe+0x39a/0x7e0 [ 633.021317] ? direct_splice_actor+0x1a0/0x1a0 [ 633.025913] ? direct_splice_actor+0x1a0/0x1a0 [ 633.030491] splice_from_pipe+0x108/0x170 [ 633.034658] ? splice_shrink_spd+0xd0/0xd0 [ 633.038890] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 633.044434] ? security_file_permission+0x94/0x320 [ 633.049373] generic_splice_sendpage+0x3c/0x50 [ 633.053962] ? splice_from_pipe+0x170/0x170 [ 633.058316] do_splice+0x70a/0x1490 [ 633.061963] ? iterate_fd+0x360/0x360 [ 633.065790] ? opipe_prep.part.0+0x2d0/0x2d0 [ 633.070211] ? __fget_light+0x1a9/0x230 16:57:53 executing program 2: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x3, 0x2) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) splice(r0, 0x0, r2, 0x0, 0x10005, 0xa0000000a000000) 16:57:53 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1, 0x0, 0x0, 0xa00000000000000}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) [ 633.074198] __x64_sys_splice+0x2c6/0x330 [ 633.078383] do_syscall_64+0x103/0x610 [ 633.082296] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 633.087490] RIP: 0033:0x457e29 [ 633.087507] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 633.087517] RSP: 002b:00007f2baa4adc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 633.087533] RAX: ffffffffffffffda RBX: 00007f2baa4adc90 RCX: 0000000000457e29 [ 633.087542] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000003 [ 633.087551] RBP: 000000000073bfa0 R08: 00000000000100e0 R09: 0000000000000000 [ 633.087561] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f2baa4ae6d4 [ 633.087573] R13: 00000000004c6c75 R14: 00000000004db870 R15: 0000000000000007 16:57:54 executing program 5: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$FS_IOC_FSGETXATTR(r0, 0x801c581f, &(0x7f0000000000)={0xed95, 0x80000001, 0x80000000, 0x6, 0x3}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) socket$inet(0x2, 0x3, 0x2) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) splice(r0, 0x0, r2, 0x0, 0x1ffe0, 0x0) 16:57:54 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x3400e]}}]}, 0x2b2}}, 0x0) 16:57:54 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x3, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) 16:57:54 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1, 0x0, 0x0, 0xa00000000000000}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) 16:57:54 executing program 0 (fault-call:8 fault-nth:44): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x3, 0x2) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) splice(r0, 0x0, r2, 0x0, 0x100e0, 0x0) 16:57:54 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x3, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) 16:57:54 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1, 0x0, 0x0, 0xa00000000000000}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) 16:57:54 executing program 5: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x3, 0x2) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x2400, 0x9) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) splice(r0, 0x0, r2, 0x0, 0x1ffe0, 0x0) 16:57:54 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x3400f]}}]}, 0x2b2}}, 0x0) [ 633.586320] FAULT_INJECTION: forcing a failure. [ 633.586320] name failslab, interval 1, probability 0, space 0, times 0 [ 633.647499] CPU: 1 PID: 27576 Comm: syz-executor.0 Not tainted 5.0.0+ #6 [ 633.654381] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 633.663738] Call Trace: [ 633.666360] dump_stack+0x172/0x1f0 [ 633.670021] should_fail.cold+0xa/0x1b [ 633.673943] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 633.679054] ? lock_downgrade+0x810/0x810 [ 633.683220] ? ___might_sleep+0x163/0x280 [ 633.687408] __should_failslab+0x121/0x190 [ 633.691662] should_failslab+0x9/0x14 [ 633.695476] kmem_cache_alloc_node_trace+0x270/0x720 [ 633.700588] ? __alloc_skb+0xd5/0x5e0 [ 633.704431] ? rcu_lockdep_current_cpu_online+0xe3/0x130 [ 633.709893] __kmalloc_node_track_caller+0x3d/0x70 [ 633.714833] __kmalloc_reserve.isra.0+0x40/0xf0 [ 633.719517] __alloc_skb+0x10b/0x5e0 [ 633.723241] ? skb_scrub_packet+0x440/0x440 [ 633.723286] ? raw_getfrag+0x164/0x230 [ 633.723302] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 633.723329] __ip_append_data.isra.0+0x24d6/0x2dd0 [ 633.723358] ? raw_destroy+0x30/0x30 [ 633.731584] ? __ip_flush_pending_frames.isra.0+0x2d0/0x2d0 [ 633.731599] ? ipv4_mtu+0x2a9/0x400 [ 633.731617] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 633.731633] ? ip_setup_cork+0x53b/0x870 [ 633.731652] ? raw_destroy+0x30/0x30 [ 633.731670] ip_append_data.part.0+0xf2/0x170 [ 633.731691] ? raw_destroy+0x30/0x30 [ 633.731711] ip_append_data+0x6e/0x90 [ 633.731736] raw_sendmsg+0xbd8/0x2f10 [ 633.783829] ? raw_getsockopt+0x100/0x100 [ 633.787990] ? ima_match_policy+0xa19/0x13d0 [ 633.792419] ? process_measurement+0xd5d/0x1570 16:57:54 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34010]}}]}, 0x2b2}}, 0x0) [ 633.797095] ? process_measurement+0xd5d/0x1570 [ 633.801825] ? lock_downgrade+0x810/0x810 [ 633.805997] ? __lock_acquire+0x53b/0x4700 [ 633.810238] ? __lock_acquire+0x53b/0x4700 [ 633.814492] ? __lock_acquire+0x53b/0x4700 [ 633.818772] inet_sendmsg+0x147/0x5d0 [ 633.822587] ? raw_getsockopt+0x100/0x100 [ 633.826739] ? inet_sendmsg+0x147/0x5d0 [ 633.830744] ? ipip_gro_receive+0x100/0x100 [ 633.835095] sock_sendmsg+0xdd/0x130 [ 633.838843] kernel_sendmsg+0x44/0x50 [ 633.842659] sock_no_sendpage+0x116/0x150 [ 633.846827] ? sock_kzfree_s+0x70/0x70 [ 633.850728] ? debug_check_no_obj_freed+0x200/0x464 [ 633.855761] ? mark_held_locks+0xb1/0x100 [ 633.859925] inet_sendpage+0x44a/0x630 [ 633.863825] kernel_sendpage+0x95/0xf0 [ 633.867719] ? inet_sendmsg+0x5d0/0x5d0 [ 633.871697] sock_sendpage+0x8b/0xc0 [ 633.875423] ? lockdep_hardirqs_on+0x415/0x5d0 [ 633.880023] pipe_to_sendpage+0x299/0x370 [ 633.880040] ? kernel_sendpage+0xf0/0xf0 [ 633.880060] ? direct_splice_actor+0x1a0/0x1a0 [ 633.880081] ? __put_page+0x92/0xd0 [ 633.880099] ? anon_pipe_buf_release+0x1c6/0x270 [ 633.880120] __splice_from_pipe+0x39a/0x7e0 [ 633.888378] ? direct_splice_actor+0x1a0/0x1a0 [ 633.888406] ? direct_splice_actor+0x1a0/0x1a0 [ 633.888422] splice_from_pipe+0x108/0x170 [ 633.888441] ? splice_shrink_spd+0xd0/0xd0 [ 633.888466] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 633.928737] ? security_file_permission+0x94/0x320 [ 633.933685] generic_splice_sendpage+0x3c/0x50 [ 633.938289] ? splice_from_pipe+0x170/0x170 [ 633.942643] do_splice+0x70a/0x1490 [ 633.946295] ? iterate_fd+0x360/0x360 [ 633.950114] ? opipe_prep.part.0+0x2d0/0x2d0 [ 633.954534] ? __fget_light+0x1a9/0x230 [ 633.958525] __x64_sys_splice+0x2c6/0x330 [ 633.962693] do_syscall_64+0x103/0x610 [ 633.966600] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 633.971803] RIP: 0033:0x457e29 [ 633.975006] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 16:57:54 executing program 2: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x3, 0x2) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) splice(r0, 0x0, r2, 0x0, 0x10005, 0xa0000000e000000) 16:57:54 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34060]}}]}, 0x2b2}}, 0x0) 16:57:54 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1, 0x0, 0x0, 0xa00000000000000}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) [ 633.993922] RSP: 002b:00007f2baa4adc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 634.001664] RAX: ffffffffffffffda RBX: 00007f2baa4adc90 RCX: 0000000000457e29 [ 634.008950] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000003 [ 634.016233] RBP: 000000000073bfa0 R08: 00000000000100e0 R09: 0000000000000000 [ 634.023516] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f2baa4ae6d4 [ 634.030803] R13: 00000000004c6c75 R14: 00000000004db870 R15: 0000000000000007 16:57:54 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x3, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) 16:57:54 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000, 0x2]}}]}, 0x2b2}}, 0x0) 16:57:54 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1, 0x0, 0x0, 0xa00000000000000}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) 16:57:55 executing program 0 (fault-call:8 fault-nth:45): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x3, 0x2) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) splice(r0, 0x0, r2, 0x0, 0x100e0, 0x0) 16:57:55 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x3, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) 16:57:55 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000, 0x3]}}]}, 0x2b2}}, 0x0) [ 634.453580] FAULT_INJECTION: forcing a failure. [ 634.453580] name failslab, interval 1, probability 0, space 0, times 0 [ 634.471628] CPU: 1 PID: 27635 Comm: syz-executor.0 Not tainted 5.0.0+ #6 [ 634.478483] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 634.487839] Call Trace: [ 634.490442] dump_stack+0x172/0x1f0 [ 634.494086] should_fail.cold+0xa/0x1b [ 634.497990] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 634.503103] ? lock_downgrade+0x810/0x810 [ 634.507307] ? ___might_sleep+0x163/0x280 [ 634.511476] __should_failslab+0x121/0x190 [ 634.515750] should_failslab+0x9/0x14 [ 634.519572] kmem_cache_alloc_node+0x264/0x710 [ 634.524190] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 634.529754] ? ip_generic_getfrag+0x120/0x230 [ 634.534286] __alloc_skb+0xd5/0x5e0 [ 634.537926] ? skb_scrub_packet+0x440/0x440 [ 634.542258] ? raw_getfrag+0x164/0x230 [ 634.546161] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 634.551193] __ip_append_data.isra.0+0x24d6/0x2dd0 [ 634.556145] ? raw_destroy+0x30/0x30 [ 634.559885] ? __ip_flush_pending_frames.isra.0+0x2d0/0x2d0 [ 634.565607] ? ipv4_mtu+0x2a9/0x400 [ 634.569243] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 634.574841] ? ip_setup_cork+0x53b/0x870 [ 634.578909] ? raw_destroy+0x30/0x30 [ 634.582637] ip_append_data.part.0+0xf2/0x170 [ 634.587146] ? raw_destroy+0x30/0x30 [ 634.590875] ip_append_data+0x6e/0x90 [ 634.594704] raw_sendmsg+0xbd8/0x2f10 [ 634.598529] ? raw_getsockopt+0x100/0x100 [ 634.602690] ? ima_match_policy+0xa19/0x13d0 [ 634.607118] ? process_measurement+0xd5d/0x1570 [ 634.611843] ? process_measurement+0xd5d/0x1570 [ 634.616525] ? mark_held_locks+0xb1/0x100 [ 634.620696] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 634.625464] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 634.630233] ? lockdep_hardirqs_on+0x415/0x5d0 [ 634.634837] ? __lock_acquire+0x53b/0x4700 [ 634.639077] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 634.643840] inet_sendmsg+0x147/0x5d0 [ 634.647623] ? raw_getsockopt+0x100/0x100 [ 634.651766] ? inet_sendmsg+0x147/0x5d0 [ 634.655730] ? ipip_gro_receive+0x100/0x100 [ 634.660035] sock_sendmsg+0xdd/0x130 [ 634.663743] kernel_sendmsg+0x44/0x50 [ 634.667527] sock_no_sendpage+0x116/0x150 [ 634.671661] ? sock_kzfree_s+0x70/0x70 [ 634.675538] ? debug_check_no_obj_freed+0x200/0x464 [ 634.680542] ? mark_held_locks+0xb1/0x100 [ 634.684688] inet_sendpage+0x44a/0x630 [ 634.688559] kernel_sendpage+0x95/0xf0 [ 634.692428] ? inet_sendmsg+0x5d0/0x5d0 [ 634.696385] sock_sendpage+0x8b/0xc0 [ 634.700089] ? lockdep_hardirqs_on+0x415/0x5d0 [ 634.704658] pipe_to_sendpage+0x299/0x370 [ 634.708806] ? kernel_sendpage+0xf0/0xf0 [ 634.712859] ? direct_splice_actor+0x1a0/0x1a0 [ 634.717431] ? __put_page+0x92/0xd0 [ 634.721044] ? anon_pipe_buf_release+0x1c6/0x270 [ 634.725806] __splice_from_pipe+0x39a/0x7e0 [ 634.730114] ? direct_splice_actor+0x1a0/0x1a0 [ 634.734697] ? direct_splice_actor+0x1a0/0x1a0 [ 634.739271] splice_from_pipe+0x108/0x170 [ 634.743410] ? splice_shrink_spd+0xd0/0xd0 [ 634.747630] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 634.753151] ? security_file_permission+0x94/0x320 [ 634.758064] generic_splice_sendpage+0x3c/0x50 [ 634.762653] ? splice_from_pipe+0x170/0x170 [ 634.766957] do_splice+0x70a/0x1490 [ 634.770579] ? iterate_fd+0x360/0x360 [ 634.774369] ? opipe_prep.part.0+0x2d0/0x2d0 [ 634.778767] ? __fget_light+0x1a9/0x230 [ 634.782745] __x64_sys_splice+0x2c6/0x330 [ 634.786912] do_syscall_64+0x103/0x610 [ 634.790816] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 634.795990] RIP: 0033:0x457e29 [ 634.799181] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 634.818063] RSP: 002b:00007f2baa4adc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 634.825755] RAX: ffffffffffffffda RBX: 00007f2baa4adc90 RCX: 0000000000457e29 [ 634.833004] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000003 [ 634.840270] RBP: 000000000073bfa0 R08: 00000000000100e0 R09: 0000000000000000 [ 634.847522] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f2baa4ae6d4 16:57:55 executing program 5: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x3, 0x2) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) ioctl$EVIOCGSW(r0, 0x8040451b, &(0x7f0000000000)=""/6) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) splice(r0, 0x0, r2, 0x0, 0x1ffe0, 0x0) 16:57:55 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1, 0x0, 0x0, 0xa00000000000000}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) 16:57:55 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x3, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) [ 634.854771] R13: 00000000004c6c75 R14: 00000000004db870 R15: 0000000000000007 [ 634.886066] net_ratelimit: 85 callbacks suppressed [ 634.886073] neighbour: ndisc_cache: neighbor table overflow! [ 634.904179] neighbour: ndisc_cache: neighbor table overflow! [ 634.910468] neighbour: ndisc_cache: neighbor table overflow! [ 634.916494] neighbour: ndisc_cache: neighbor table overflow! 16:57:55 executing program 2: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x3, 0x2) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) splice(r0, 0x0, r2, 0x0, 0x10005, 0xa00000020000000) 16:57:55 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000, 0x4]}}]}, 0x2b2}}, 0x0) 16:57:55 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1, 0x0, 0x0, 0xa00000000000000}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) 16:57:55 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x3, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) [ 635.006548] neighbour: ndisc_cache: neighbor table overflow! [ 635.026611] neighbour: ndisc_cache: neighbor table overflow! 16:57:55 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x3, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) 16:57:55 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1, 0x0, 0x0, 0xa00000000000000}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) [ 635.059986] neighbour: ndisc_cache: neighbor table overflow! [ 635.066102] neighbour: ndisc_cache: neighbor table overflow! [ 635.073667] neighbour: ndisc_cache: neighbor table overflow! [ 635.083864] neighbour: ndisc_cache: neighbor table overflow! 16:57:56 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000, 0x6]}}]}, 0x2b2}}, 0x0) 16:57:56 executing program 0 (fault-call:8 fault-nth:46): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x3, 0x2) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) splice(r0, 0x0, r2, 0x0, 0x100e0, 0x0) 16:57:56 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x3, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) [ 635.366904] FAULT_INJECTION: forcing a failure. [ 635.366904] name failslab, interval 1, probability 0, space 0, times 0 [ 635.378322] CPU: 1 PID: 27683 Comm: syz-executor.0 Not tainted 5.0.0+ #6 [ 635.385148] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 635.394887] Call Trace: [ 635.397494] dump_stack+0x172/0x1f0 [ 635.401113] should_fail.cold+0xa/0x1b [ 635.405000] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 635.410088] ? lock_downgrade+0x810/0x810 [ 635.414238] ? ___might_sleep+0x163/0x280 [ 635.418388] __should_failslab+0x121/0x190 [ 635.422627] should_failslab+0x9/0x14 [ 635.426423] kmem_cache_alloc_node_trace+0x270/0x720 [ 635.431514] ? __alloc_skb+0xd5/0x5e0 [ 635.435346] ? rcu_lockdep_current_cpu_online+0xe3/0x130 [ 635.440827] __kmalloc_node_track_caller+0x3d/0x70 [ 635.445749] __kmalloc_reserve.isra.0+0x40/0xf0 [ 635.450426] __alloc_skb+0x10b/0x5e0 [ 635.454137] ? skb_scrub_packet+0x440/0x440 [ 635.458474] ? raw_getfrag+0x164/0x230 [ 635.462390] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 635.467400] __ip_append_data.isra.0+0x24d6/0x2dd0 [ 635.472325] ? raw_destroy+0x30/0x30 [ 635.476042] ? __ip_flush_pending_frames.isra.0+0x2d0/0x2d0 [ 635.481738] ? ipv4_mtu+0x2a9/0x400 [ 635.485364] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 635.490898] ? ip_setup_cork+0x53b/0x870 [ 635.494943] ? raw_destroy+0x30/0x30 [ 635.498652] ip_append_data.part.0+0xf2/0x170 [ 635.503147] ? raw_destroy+0x30/0x30 [ 635.506860] ip_append_data+0x6e/0x90 [ 635.510669] raw_sendmsg+0xbd8/0x2f10 [ 635.514466] ? calibrate_delay.cold+0x450/0x4a7 [ 635.519183] ? raw_getsockopt+0x100/0x100 [ 635.523328] ? process_measurement+0xd5d/0x1570 [ 635.527981] ? lock_release+0x4c1/0xa00 [ 635.531939] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 635.536703] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 635.541481] ? lockdep_hardirqs_on+0x415/0x5d0 [ 635.546061] ? retint_kernel+0x2d/0x2d [ 635.549936] ? trace_hardirqs_on_caller+0x6a/0x220 [ 635.554872] ? __lock_acquire+0x53b/0x4700 [ 635.559123] ? retint_kernel+0x2d/0x2d [ 635.563011] inet_sendmsg+0x147/0x5d0 [ 635.566817] ? raw_getsockopt+0x100/0x100 [ 635.570966] ? inet_sendmsg+0x147/0x5d0 [ 635.574945] ? ipip_gro_receive+0x100/0x100 [ 635.579271] sock_sendmsg+0xdd/0x130 [ 635.582983] kernel_sendmsg+0x44/0x50 [ 635.586770] sock_no_sendpage+0x116/0x150 [ 635.590960] ? sock_kzfree_s+0x70/0x70 [ 635.594834] ? debug_check_no_obj_freed+0x200/0x464 [ 635.599871] ? mark_held_locks+0xb1/0x100 [ 635.604015] inet_sendpage+0x44a/0x630 [ 635.607888] kernel_sendpage+0x95/0xf0 [ 635.611758] ? inet_sendmsg+0x5d0/0x5d0 [ 635.615730] sock_sendpage+0x8b/0xc0 [ 635.619446] ? lockdep_hardirqs_on+0x415/0x5d0 [ 635.624023] pipe_to_sendpage+0x299/0x370 [ 635.628167] ? kernel_sendpage+0xf0/0xf0 [ 635.632231] ? direct_splice_actor+0x1a0/0x1a0 [ 635.636803] ? __put_page+0x92/0xd0 [ 635.640427] ? anon_pipe_buf_release+0x1c6/0x270 [ 635.645186] __splice_from_pipe+0x39a/0x7e0 [ 635.649505] ? direct_splice_actor+0x1a0/0x1a0 [ 635.654081] ? direct_splice_actor+0x1a0/0x1a0 [ 635.658649] splice_from_pipe+0x108/0x170 [ 635.662782] ? splice_shrink_spd+0xd0/0xd0 [ 635.667013] ? retint_kernel+0x2d/0x2d [ 635.670895] ? direct_splice_actor+0x1a0/0x1a0 [ 635.675466] generic_splice_sendpage+0x3c/0x50 [ 635.680038] ? splice_from_pipe+0x170/0x170 [ 635.684362] do_splice+0x70a/0x1490 [ 635.687996] ? retint_kernel+0x2d/0x2d [ 635.691903] ? opipe_prep.part.0+0x2d0/0x2d0 [ 635.696345] ? do_splice+0xf/0x1490 [ 635.699986] __x64_sys_splice+0x2c6/0x330 [ 635.704144] do_syscall_64+0x103/0x610 [ 635.708043] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 635.713234] RIP: 0033:0x457e29 16:57:56 executing program 5: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000300)='/proc/self/net/pfkey\x00', 0x20000, 0x0) setsockopt$MISDN_TIME_STAMP(r0, 0x0, 0x1, &(0x7f0000000340), 0x4) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) write$binfmt_misc(r2, &(0x7f00000002c0)=ANY=[@ANYRES64=r3, @ANYPTR=&(0x7f0000000280)=ANY=[@ANYRESDEC=r3, @ANYRESOCT], @ANYRESOCT, @ANYRES32=r1], 0x4240a56e) socket$inet(0x2, 0x3, 0x2) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0)='TIPC\x00') sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f0000000240)={&(0x7f0000000000), 0xc, &(0x7f0000000200)={&(0x7f0000000100)={0x34, r4, 0x402, 0x70bd29, 0x25dfdbfc, {{}, 0x0, 0x4101, 0x0, {0x18, 0x17, {0x19, 0x4, @udp='udp:syz0\x00'}}}, [""]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x8001) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) splice(r1, 0x0, r3, 0x0, 0x1ffe0, 0x0) 16:57:56 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1, 0x0, 0x0, 0xa00000000000000}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) 16:57:56 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x3, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) [ 635.716438] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 635.716447] RSP: 002b:00007f2baa4adc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 635.716462] RAX: ffffffffffffffda RBX: 00007f2baa4adc90 RCX: 0000000000457e29 [ 635.716470] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000003 [ 635.716479] RBP: 000000000073bfa0 R08: 00000000000100e0 R09: 0000000000000000 [ 635.716500] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f2baa4ae6d4 [ 635.716521] R13: 00000000004c6c75 R14: 00000000004db870 R15: 0000000000000007 16:57:56 executing program 2: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x3, 0x2) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) splice(r0, 0x0, r2, 0x0, 0x10005, 0xa000000380a0000) 16:57:56 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000, 0x8]}}]}, 0x2b2}}, 0x0) 16:57:56 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1, 0x0, 0x0, 0xa00000000000000}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) 16:57:56 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x3, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) 16:57:56 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000, 0xa]}}]}, 0x2b2}}, 0x0) 16:57:56 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000, 0xc]}}]}, 0x2b2}}, 0x0) 16:57:56 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1, 0x0, 0x0, 0xa00000000000000}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) 16:57:56 executing program 0 (fault-call:8 fault-nth:47): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x3, 0x2) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) splice(r0, 0x0, r2, 0x0, 0x100e0, 0x0) 16:57:56 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000, 0xe]}}]}, 0x2b2}}, 0x0) [ 636.195207] FAULT_INJECTION: forcing a failure. [ 636.195207] name failslab, interval 1, probability 0, space 0, times 0 [ 636.206830] CPU: 1 PID: 27732 Comm: syz-executor.0 Not tainted 5.0.0+ #6 [ 636.213702] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 636.223057] Call Trace: [ 636.225647] dump_stack+0x172/0x1f0 [ 636.229286] should_fail.cold+0xa/0x1b [ 636.233165] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 636.238280] __should_failslab+0x121/0x190 [ 636.242527] should_failslab+0x9/0x14 [ 636.246325] kmem_cache_alloc+0x47/0x6f0 [ 636.250381] skb_clone+0x150/0x3b0 [ 636.253925] ip_mc_output+0x3aa/0xf70 [ 636.257746] ? __ip_queue_xmit+0x1bf0/0x1bf0 [ 636.262161] ? rcu_lockdep_current_cpu_online+0xe3/0x130 [ 636.267617] ? ip_append_data.part.0+0x170/0x170 [ 636.272366] ? dst_release+0x62/0xb0 [ 636.276112] ? __ip_make_skb+0xf93/0x1820 [ 636.280291] ip_local_out+0xc4/0x1b0 [ 636.284045] ip_send_skb+0x42/0xf0 [ 636.287611] ip_push_pending_frames+0x64/0x80 [ 636.292094] raw_sendmsg+0x1e5d/0x2f10 [ 636.295989] ? raw_getsockopt+0x100/0x100 [ 636.300153] ? ima_match_policy+0xa19/0x13d0 [ 636.304566] ? process_measurement+0xd5d/0x1570 [ 636.309250] ? process_measurement+0xd5d/0x1570 [ 636.313916] ? lock_downgrade+0x810/0x810 [ 636.318071] ? __lock_acquire+0x53b/0x4700 [ 636.322321] ? __lock_acquire+0x53b/0x4700 [ 636.326552] ? __lock_acquire+0x53b/0x4700 [ 636.330817] inet_sendmsg+0x147/0x5d0 [ 636.334609] ? raw_getsockopt+0x100/0x100 [ 636.338750] ? inet_sendmsg+0x147/0x5d0 [ 636.342741] ? ipip_gro_receive+0x100/0x100 [ 636.347078] sock_sendmsg+0xdd/0x130 [ 636.350799] kernel_sendmsg+0x44/0x50 [ 636.354607] sock_no_sendpage+0x116/0x150 [ 636.358781] ? sock_kzfree_s+0x70/0x70 [ 636.362705] ? debug_check_no_obj_freed+0x200/0x464 [ 636.367728] ? mark_held_locks+0xb1/0x100 [ 636.371866] inet_sendpage+0x44a/0x630 [ 636.375750] kernel_sendpage+0x95/0xf0 [ 636.379643] ? inet_sendmsg+0x5d0/0x5d0 [ 636.383614] sock_sendpage+0x8b/0xc0 [ 636.387323] ? lockdep_hardirqs_on+0x415/0x5d0 [ 636.391917] pipe_to_sendpage+0x299/0x370 [ 636.396050] ? kernel_sendpage+0xf0/0xf0 [ 636.400110] ? direct_splice_actor+0x1a0/0x1a0 [ 636.404692] ? __put_page+0x92/0xd0 [ 636.408309] ? anon_pipe_buf_release+0x1c6/0x270 [ 636.413067] __splice_from_pipe+0x39a/0x7e0 [ 636.417388] ? direct_splice_actor+0x1a0/0x1a0 [ 636.421971] ? direct_splice_actor+0x1a0/0x1a0 [ 636.426550] splice_from_pipe+0x108/0x170 [ 636.430711] ? splice_shrink_spd+0xd0/0xd0 [ 636.434959] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 636.440504] ? security_file_permission+0x94/0x320 [ 636.445443] generic_splice_sendpage+0x3c/0x50 [ 636.450007] ? splice_from_pipe+0x170/0x170 [ 636.454312] do_splice+0x70a/0x1490 [ 636.457927] ? iterate_fd+0x360/0x360 [ 636.461741] ? opipe_prep.part.0+0x2d0/0x2d0 [ 636.466144] ? __fget_light+0x1a9/0x230 [ 636.470112] __x64_sys_splice+0x2c6/0x330 [ 636.474266] do_syscall_64+0x103/0x610 [ 636.478156] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 636.483350] RIP: 0033:0x457e29 [ 636.486529] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 636.505417] RSP: 002b:00007f2baa4adc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 636.513134] RAX: ffffffffffffffda RBX: 00007f2baa4adc90 RCX: 0000000000457e29 [ 636.520392] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000003 [ 636.527659] RBP: 000000000073bfa0 R08: 00000000000100e0 R09: 0000000000000000 [ 636.534915] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f2baa4ae6d4 16:57:57 executing program 5: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f0000000000)={0x80000000, 0x0, 0x10001, 0x1f}) ioctl$DRM_IOCTL_AGP_BIND(r1, 0x40106436, &(0x7f00000000c0)={r3, 0xffff}) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x3, 0x2) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) splice(r0, 0x0, r2, 0x0, 0x1ffe0, 0x0) 16:57:57 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x3, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) 16:57:57 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1, 0x0, 0x0, 0xa00000000000000}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) [ 636.542174] R13: 00000000004c6c75 R14: 00000000004db870 R15: 0000000000000007 16:57:57 executing program 2: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x3, 0x2) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) splice(r0, 0x0, r2, 0x0, 0x10005, 0xa00000040000000) 16:57:57 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000, 0xf]}}]}, 0x2b2}}, 0x0) 16:57:57 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x3, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) 16:57:57 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1, 0x0, 0x0, 0xa00000000000000}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) 16:57:57 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000, 0x10]}}]}, 0x2b2}}, 0x0) 16:57:57 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1, 0x0, 0x0, 0xa00000000000000}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) 16:57:57 executing program 0 (fault-call:8 fault-nth:48): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x3, 0x2) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) splice(r0, 0x0, r2, 0x0, 0x100e0, 0x0) 16:57:57 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x3, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) 16:57:57 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1, 0x0, 0x0, 0xa00000000000000}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) [ 637.092924] FAULT_INJECTION: forcing a failure. [ 637.092924] name failslab, interval 1, probability 0, space 0, times 0 [ 637.108187] CPU: 1 PID: 27780 Comm: syz-executor.0 Not tainted 5.0.0+ #6 [ 637.115033] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 637.124385] Call Trace: [ 637.126987] dump_stack+0x172/0x1f0 [ 637.130606] should_fail.cold+0xa/0x1b [ 637.134490] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 637.139598] ? lock_downgrade+0x810/0x810 [ 637.143765] __should_failslab+0x121/0x190 [ 637.148003] should_failslab+0x9/0x14 [ 637.151811] kmem_cache_alloc+0x47/0x6f0 [ 637.155876] ? __lock_is_held+0xb6/0x140 [ 637.159937] ? check_preemption_disabled+0x48/0x290 [ 637.164973] dst_alloc+0x10e/0x1d0 [ 637.168504] rt_dst_alloc+0x83/0x3f0 [ 637.172205] ip_route_output_key_hash_rcu+0x97d/0x30e0 [ 637.177500] ? ip_route_input_noref+0x280/0x280 [ 637.182153] ? kasan_check_read+0x11/0x20 [ 637.186300] ip_route_output_key_hash+0x212/0x380 [ 637.191152] ? ip_route_output_key_hash_rcu+0x30e0/0x30e0 [ 637.196689] ? raw_sendmsg+0x6b0/0x2f10 [ 637.200676] ? lock_downgrade+0x810/0x810 [ 637.204834] ip_route_output_flow+0x28/0xc0 [ 637.209155] raw_sendmsg+0xa10/0x2f10 [ 637.212954] ? raw_getsockopt+0x100/0x100 [ 637.217103] ? ima_match_policy+0xa19/0x13d0 [ 637.221499] ? process_measurement+0xd5d/0x1570 [ 637.226158] ? process_measurement+0xd5d/0x1570 [ 637.230823] ? lock_downgrade+0x810/0x810 [ 637.234961] ? __lock_acquire+0x53b/0x4700 [ 637.239200] ? __lock_acquire+0x53b/0x4700 [ 637.243431] ? __lock_acquire+0x53b/0x4700 [ 637.247659] inet_sendmsg+0x147/0x5d0 [ 637.251471] ? raw_getsockopt+0x100/0x100 [ 637.255615] ? inet_sendmsg+0x147/0x5d0 [ 637.259591] ? ipip_gro_receive+0x100/0x100 [ 637.263920] sock_sendmsg+0xdd/0x130 [ 637.267624] kernel_sendmsg+0x44/0x50 [ 637.271419] sock_no_sendpage+0x116/0x150 [ 637.275555] ? sock_kzfree_s+0x70/0x70 [ 637.279457] ? debug_check_no_obj_freed+0x200/0x464 [ 637.284494] ? mark_held_locks+0xb1/0x100 [ 637.288939] inet_sendpage+0x44a/0x630 [ 637.292823] kernel_sendpage+0x95/0xf0 [ 637.296717] ? inet_sendmsg+0x5d0/0x5d0 [ 637.300685] sock_sendpage+0x8b/0xc0 [ 637.304393] ? lockdep_hardirqs_on+0x415/0x5d0 [ 637.308996] pipe_to_sendpage+0x299/0x370 [ 637.313150] ? kernel_sendpage+0xf0/0xf0 [ 637.317207] ? direct_splice_actor+0x1a0/0x1a0 [ 637.321779] ? __put_page+0x92/0xd0 [ 637.325404] ? anon_pipe_buf_release+0x1c6/0x270 [ 637.330149] __splice_from_pipe+0x39a/0x7e0 [ 637.334457] ? direct_splice_actor+0x1a0/0x1a0 [ 637.339057] ? direct_splice_actor+0x1a0/0x1a0 [ 637.343635] splice_from_pipe+0x108/0x170 [ 637.347796] ? splice_shrink_spd+0xd0/0xd0 [ 637.352054] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 637.357583] ? security_file_permission+0x94/0x320 [ 637.362504] generic_splice_sendpage+0x3c/0x50 [ 637.367069] ? splice_from_pipe+0x170/0x170 [ 637.371393] do_splice+0x70a/0x1490 [ 637.375012] ? iterate_fd+0x360/0x360 [ 637.378822] ? opipe_prep.part.0+0x2d0/0x2d0 [ 637.383238] ? __fget_light+0x1a9/0x230 [ 637.387206] __x64_sys_splice+0x2c6/0x330 [ 637.391366] do_syscall_64+0x103/0x610 [ 637.395257] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 637.400469] RIP: 0033:0x457e29 [ 637.403660] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 637.422551] RSP: 002b:00007f2baa4adc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 637.430777] RAX: ffffffffffffffda RBX: 00007f2baa4adc90 RCX: 0000000000457e29 16:57:58 executing program 5: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x3, 0x2) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) getcwd(&(0x7f0000000200)=""/167, 0xa7) r3 = syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0x6, 0x8200) accept$nfc_llcp(r3, &(0x7f00000000c0), &(0x7f00000002c0)=0x60) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) splice(r0, 0x0, r2, 0x0, 0x1ffe0, 0x0) 16:57:58 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000, 0x60]}}]}, 0x2b2}}, 0x0) 16:57:58 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1, 0x0, 0x0, 0xa00000000000000}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) [ 637.438047] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000003 [ 637.445311] RBP: 000000000073bfa0 R08: 00000000000100e0 R09: 0000000000000000 [ 637.452588] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f2baa4ae6d4 [ 637.459862] R13: 00000000004c6c75 R14: 00000000004db870 R15: 0000000000000007 16:57:58 executing program 2: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x3, 0x2) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) splice(r0, 0x0, r2, 0x0, 0x10005, 0xa00000060000000) 16:57:58 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x3, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) 16:57:58 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1, 0x0, 0x0, 0xa00000000000000}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) 16:57:58 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000, 0xf0]}}]}, 0x2b2}}, 0x0) 16:57:58 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000, 0x1a0]}}]}, 0x2b2}}, 0x0) 16:57:58 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1, 0x0, 0x0, 0xa00000000000000}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) 16:57:58 executing program 0 (fault-call:8 fault-nth:49): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x3, 0x2) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) splice(r0, 0x0, r2, 0x0, 0x100e0, 0x0) 16:57:58 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x3, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) 16:57:58 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1, 0x0, 0x0, 0xa00000000000000}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) [ 638.038465] FAULT_INJECTION: forcing a failure. [ 638.038465] name failslab, interval 1, probability 0, space 0, times 0 [ 638.050299] CPU: 0 PID: 27829 Comm: syz-executor.0 Not tainted 5.0.0+ #6 [ 638.057139] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 638.066483] Call Trace: [ 638.069071] dump_stack+0x172/0x1f0 [ 638.072690] should_fail.cold+0xa/0x1b [ 638.076569] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 638.081678] __should_failslab+0x121/0x190 [ 638.085931] should_failslab+0x9/0x14 [ 638.089761] kmem_cache_alloc_node+0x264/0x710 [ 638.094358] ? mark_held_locks+0xb1/0x100 [ 638.098537] __alloc_skb+0xd5/0x5e0 [ 638.102172] ? skb_scrub_packet+0x440/0x440 [ 638.106520] __ip_append_data.isra.0+0x24d6/0x2dd0 [ 638.111449] ? raw_destroy+0x30/0x30 [ 638.115155] ? __ip_flush_pending_frames.isra.0+0x2d0/0x2d0 [ 638.120858] ? ipv4_mtu+0x2a9/0x400 [ 638.124493] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 638.130024] ? ip_setup_cork+0x53b/0x870 [ 638.134074] ? raw_destroy+0x30/0x30 [ 638.137789] ip_append_data.part.0+0xf2/0x170 [ 638.142304] ? raw_destroy+0x30/0x30 [ 638.146030] ip_append_data+0x6e/0x90 [ 638.149859] raw_sendmsg+0xbd8/0x2f10 [ 638.153670] ? raw_getsockopt+0x100/0x100 [ 638.157817] ? ima_match_policy+0xa19/0x13d0 [ 638.162229] ? process_measurement+0xd5d/0x1570 [ 638.166927] ? mark_held_locks+0xb1/0x100 [ 638.171071] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 638.175811] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 638.180565] ? __lock_acquire+0x53b/0x4700 [ 638.184836] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 638.189618] inet_sendmsg+0x147/0x5d0 [ 638.193417] ? raw_getsockopt+0x100/0x100 [ 638.197557] ? inet_sendmsg+0x147/0x5d0 [ 638.201535] ? ipip_gro_receive+0x100/0x100 [ 638.205865] sock_sendmsg+0xdd/0x130 [ 638.209576] kernel_sendmsg+0x44/0x50 [ 638.213390] sock_no_sendpage+0x116/0x150 [ 638.217540] ? sock_kzfree_s+0x70/0x70 [ 638.221426] ? debug_check_no_obj_freed+0x200/0x464 [ 638.226454] ? mark_held_locks+0xb1/0x100 [ 638.230605] inet_sendpage+0x44a/0x630 [ 638.234488] kernel_sendpage+0x95/0xf0 [ 638.238360] ? inet_sendmsg+0x5d0/0x5d0 [ 638.242347] sock_sendpage+0x8b/0xc0 [ 638.246105] ? lockdep_hardirqs_on+0x415/0x5d0 [ 638.250688] pipe_to_sendpage+0x299/0x370 [ 638.254830] ? kernel_sendpage+0xf0/0xf0 [ 638.258900] ? direct_splice_actor+0x1a0/0x1a0 [ 638.263493] ? __put_page+0x92/0xd0 [ 638.267121] ? anon_pipe_buf_release+0x1c6/0x270 [ 638.271876] __splice_from_pipe+0x39a/0x7e0 [ 638.276202] ? direct_splice_actor+0x1a0/0x1a0 [ 638.280800] ? direct_splice_actor+0x1a0/0x1a0 [ 638.285386] splice_from_pipe+0x108/0x170 [ 638.289555] ? splice_shrink_spd+0xd0/0xd0 [ 638.293801] ? retint_kernel+0x2d/0x2d [ 638.297677] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 638.303216] ? security_file_permission+0x94/0x320 [ 638.308145] generic_splice_sendpage+0x3c/0x50 [ 638.312724] ? splice_from_pipe+0x170/0x170 [ 638.317053] do_splice+0x70a/0x1490 [ 638.320694] ? iterate_fd+0x360/0x360 [ 638.324525] ? opipe_prep.part.0+0x2d0/0x2d0 [ 638.328942] ? __fget_light+0x1a9/0x230 [ 638.332935] __x64_sys_splice+0x2c6/0x330 [ 638.337099] do_syscall_64+0x103/0x610 [ 638.341014] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 638.346208] RIP: 0033:0x457e29 [ 638.349407] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 638.368321] RSP: 002b:00007f2baa4adc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 638.368338] RAX: ffffffffffffffda RBX: 00007f2baa4adc90 RCX: 0000000000457e29 16:57:59 executing program 5: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000980)={0x0, @in6={{0xa, 0x4e24, 0x9, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x8}}, 0x1ff, 0x9, 0x2, 0x7, 0x1}, &(0x7f0000000a40)=0x98) getsockopt$inet_sctp6_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000a80)={0x0, 0xffff}, &(0x7f0000000ac0)=0x8) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000001780)={0x0}, &(0x7f00000017c0)=0x8) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f0000002280)={0x0, 0x3f, "6b455d5069226c0968a19f1009c4b179f2c46d0256f298fcebaf1b625c7a44a2d7a08e32eb9eff8a4064ea3225fa0fd15160d0a0b26203aacfefcbb3cad795"}, &(0x7f0000002300)=0x47) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000002340)={0x0, 0x9, 0x3}, &(0x7f0000002380)=0x8) sendmmsg$inet_sctp(r1, &(0x7f0000002500)=[{&(0x7f00000000c0)=@in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000100), 0x0, &(0x7f0000000200)=[@dstaddrv6={0x20, 0x84, 0x8, @initdev={0xfe, 0x88, [], 0x1, 0x0}}, @dstaddrv6={0x20, 0x84, 0x8, @dev={0xfe, 0x80, [], 0xa}}], 0x40, 0x8000}, {&(0x7f0000000240)=@in6={0xa, 0x4e21, 0x1, @local, 0xff}, 0x1c, &(0x7f0000000600)=[{&(0x7f0000000280)="012ab887e9164467ba097f2e9e615ee7fffaad41ef7103d51c8854afa25a7b10086bd9c4571180110eee662392405c22d86277f8b68268fb36c8c05b3bbe31842336cd78de5b119be29b293c", 0x4c}, {&(0x7f0000000300)="99928cbd1611c1984eef0792b140c79a37218500afb7d6bf09fc35c7143d1b6a28fdbea23a39af42a9d21b2a22b6a698a222448306fadcec1b99befe12da0fdeeb59a1254e73a22996d10a162c493dcc0573bd172020a21ae0d1f6b179230fa986818dd39cdf3e5e", 0x68}, {&(0x7f0000000380)="49d6cd6eb1a115b1b3937622bd229bbd84e039f1c49663fb492f5ae62d4818d8e9446083f0909208fbef89dc9d1a4e179b253a77614a21b11d40391481831fbfebe7c1aed479828b7e570f2451c51a61e9d73fe9eb6aac88d1bf060c0b8c015c260b231fa084b3", 0x67}, {&(0x7f0000000400)="9c8ad1e924ad9847974573f120cb1c5bbb8820d22e1fd7e2b1a9abac12a40cff8e28c6fa7f385c1c40014034c27f0c1c3618f76f9e14d2101c42b70869b253d426a8", 0x42}, {&(0x7f0000000480)="329d4fd3b9801c1f915c82a8e2778064a7fb23607339e823cba6beb24c6a429259ea2adc963d1898f0824144349d10bb018551474129a144969232d926d026d665f243d8eb2cd3946abeeb58b45d3c7f5d3e38add939758e65b23d174b", 0x5d}, {&(0x7f0000000500)="4a39fc2c4d8e878b2c3d6a3b2f0daedf43beb94d5fc8d9b3b364340b0eb52a7140bcb68aa6b62147171f41dc7ac2d629825f6323de804ef7528f1362e9c19b17bd933b887192d99ae1d612a375a889e63e6c4632801a9d2c3a22ef712a8486e4ffa1e0653ef8b2774c146a80510bed6d05427bf5cd9f9dd801d29a05dbea70ea5b7279afe665055ce25408d025d04c1571c67f09e24e425e7a06f6337b80b1791e4270727b29b60317f343452a7da3c2b1e23faa4fca8887f855b39428f4866ecbca8e63bd96124b9bc45d40", 0xcc}], 0x6, 0x0, 0x0, 0x4000}, {&(0x7f0000000680)=@in={0x2, 0x4e21, @multicast1}, 0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x800}, {&(0x7f00000006c0)=@in6={0xa, 0x4e21, 0xfdaa, @empty, 0x8}, 0x1c, &(0x7f0000000940)=[{&(0x7f0000000700)="76c218be5a7247727b5317013734309febed5af51482f76cf0", 0x19}, {&(0x7f0000000740)="b0cc0f333846284aa66cde5698c82c4b227bd802d8d734a58735886c06f357ab2ade5e3840e3f65b93ccdafb8272cd6501dccbef6e52c1a28802609361a93a12a88b4e754d35619743466a1fa638f7167d9875697dd59f739c5ece43016356ce8abb723b9e471e6b5a05092b7cf25617c14ff6420cae875e0a2fd6423428845fe890db3a632c22ebebaeff480669f54cfaca30390d023e07810e9f2a658f12ffddd95e5990cd1614a2505af979851e40ea54a454103cb4fb23a546ad7b370f69a8b6579a53850615c7d8676ef5272942dddf5a829f7a94c66e957ef55bacd8b8446e82d6d34c79abd1f2cbb8eaed8b", 0xef}, {&(0x7f0000000840)="b517c1593a9823016e6bd2ef8d002503daef5138579c876d6c214986e0dd88a14f51786ce43806a8f22f9ed9f1ce8fb90d0adbfea75a7bed28cb44f21f2b3f949c4a91f44033dbf10b12a95cac43f3678e0806ba93286fd23c5dc0ae38c29ed5c8b8b07c430f778705236c0601d0ca31fdaa758c8bc9e4dd1b84cea71a7716a2dab418180af594dc646c4f5b73a50f13df09a4f56f2275c8c311cba5ba5dfac967edded8d4acd1291b457a8683927835ed1fab3886c4ec80af7f8fa388c5762aeec9dae2d80482a793d6ef4624bc19ec273e5aec2625e57e18bf5d619d14", 0xde}], 0x3, &(0x7f0000000b00)=[@sndrcv={0x30, 0x84, 0x1, {0x800, 0x9, 0x8002, 0x5, 0x7, 0xffffffff, 0x2, 0x7, r3}}, @prinfo={0x18, 0x84, 0x5, {0x0, 0x7dd}}, @dstaddrv6={0x20, 0x84, 0x8, @ipv4={[], [], @remote}}, @dstaddrv4={0x18, 0x84, 0x7, @local}, @dstaddrv6={0x20, 0x84, 0x8, @ipv4={[], [], @local}}, @prinfo={0x18, 0x84, 0x5, {0x0, 0x1}}, @sndrcv={0x30, 0x84, 0x1, {0x1000, 0x5, 0x8, 0x1, 0x80, 0x7ff, 0x2, 0x9, r4}}], 0xe8, 0x880}, {&(0x7f0000000c00)=@in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10, &(0x7f0000000dc0)=[{&(0x7f0000000c40)}, {&(0x7f0000000c80)="6af54bab2323bac4b1e3e5721380e9658c10f94d330a8bd310c8465ee50c0f2e34ece14a3155bbc04ce7e1c185a4a1c66e8c8d6340012981a54f6d247036d191f353f3227c55dfb63c7e7ad6b3681bb4f29233126c6dc87d4d90817aa268ba8f45a460e470664d9c4734ddf92e55a45a1abc378148d10d4817ba349b7f208671a92a8295abfa62e041082907f81c7e6939fd78f94459539dee486147574c", 0x9e}, {&(0x7f0000000d40)="6c4842d69d158d3676f3c183e6511358b34efc3715178889b2e1622789ddff806de411cc926e857d77dd67e1dd58ad0fd42804ad0027378f14975192d8f2bf6b0fd8434f8fcd8181438a60b5dc10e30908ef8f07ca61331cd3f2c85738b101ef31664fe79ff85fb6c77f42673329", 0x6e}], 0x3, &(0x7f0000000e00)=[@init={0x18, 0x84, 0x0, {0x10001, 0x1000, 0x200, 0x5}}, @prinfo={0x18, 0x84, 0x5, {0x30, 0x7fff}}], 0x30, 0x40084}, {&(0x7f0000000e40)=@in6={0xa, 0x4e22, 0x1, @ipv4={[], [], @local}, 0x4}, 0x1c, &(0x7f0000000ec0)=[{&(0x7f0000000e80)="404ddd56e48f", 0x6}], 0x1, &(0x7f0000000f00)=[@init={0x18, 0x84, 0x0, {0x6, 0x9, 0xfc4, 0x2}}], 0x18, 0x40000}, {&(0x7f0000000f40)=@in6={0xa, 0x4e21, 0x0, @empty, 0x19f}, 0x1c, &(0x7f00000016c0)=[{&(0x7f0000000f80)="504818deb8c3547e438537c79567c82d5f002800765d9280a19858b90849c469115cc6fc920d43ae8944c53446a31137aa93e154228e15938eed4faa49f5b878cad6cb2c8c63734309ac5c468f8c9204820e472905d5668605cc15c273e972f354e842a16ed7d9e38bd96ab9973a6e0a8d34a171db570540b100c8f750cb3c7e954b4f19a48e0a66ff1abd289314fc4b62b7b9ac42b2fd8f76358e19b8b051e856d63f2db06e48fc397439c2542996563d8792a90428048ec1b2e4b7792c71b4deee6dc9d42b8b448ee689d8fddcc9c1b6", 0xd1}, {&(0x7f0000001080)="19c03743e3f488229e4120e71167b3f29a4aa4bdc4e5cb7cfddb86afcaf3dc6b57966080cf9152f6538bd60216422f13a1d60e69fb2a1ae6a11eb4ed0ecfc2ee9120de0971d5b84a340230467aef82a3a3de", 0x52}, {&(0x7f0000001100)="46f83d2a6f9661b1463ac02ae8b29dc8457b477d17b05a4f65c77cd34314863cb86fe455445899bad3ffd325a8e2dc7c0724558be9e02ff3cb708e81510e53f57214579910ff0029cbdb04245429ed3c3f2866f0ad51f79440160498653504c11fe4d9c4e239c2fb0d29b7fa81e6b875d343c1d5943c34da774f0a3f1ba5bcfb860dd169477dd3699961a0e28d7f2b054264c9ca1f8aca72107a5a003cd9057ef218339e1924d06aa66eaf310755245985679e68fe1c0854104188dbcf1cd5c1880f7605aeb0", 0xc6}, {&(0x7f0000001200)="a39f609335bd90ee42cf3cf7f4533bbc951b27a7a3ef2516f28c2bbea845fe43152fb047fa00a62704d2f59e231333efd5023b6e76c3984641f0df4803cfb30fa4c038326f110bf7127f0719eea35b5b182c80e449b6635b5805f3fe88a41b3e9667b8aa4aecad01de38b98c16a8e1d2b1b79779272562b4ceb9bd5316", 0x7d}, {&(0x7f0000001280)="cce6ec13d2b0eb4d2b1da05e7a105cf0c76e116802b23101736e0902", 0x1c}, {&(0x7f00000012c0)="75953892aef9c3f110c92ecf7d5b0498c639b51b6dc4f064d21ad34e6898be4322a154dfa6a1aa89104881bbdb3ad2bbac3acf77bc700a0570fbfc03382a18ff148255b1057d8b0547e969ffdb97ba1cbabf123d3c6e543f16aefbb365497ec00dbd843bd85f930a50a2c726569606ef49aa540da98f6f32cab096f8d34d32dacd659a432b3664a109cd", 0x8a}, {&(0x7f0000001380)="7287346b0dea5b3c8c89e630ff02afbf60d9565f42efc373b15ab82068e0320030143666013e0adcef33f7d6730f5a8ec8b89737c670c3e0641847b552ab91ca019fe74b51373dc7134517c7e77f566e7a2478a4c042d8768298fb1bfe02bced99912fb2c06fc5043598f6e48b568d37bf2b5797b1f257c305cbf8ac48f186ba5c346251f1697ca735367c61f51e72271615d7979a5e5efd4a41f789", 0x9c}, {&(0x7f0000001440)="2f978b8ab3b022a6edf9961c9e68e192badb649d97b05f24a1aaac4a2ed6eca9552fbe5815181bbbe70a3faaea21ae4c399d92c74671b99324f4e32782d8848fef9a23f50f18fc9fe0955a1917210b0fa32900a050e98de18cd495b296937ab5839ebf43552766d71d31b556ba3d6c85dd6ddd2da21b3ef1b061e50e4ece6800cbc8b5ea98e81dbfe04873e2c7976d8ee3183a91da0562d14099802239a6b0064fe103752c53ee1866d0892f3a427d693a0fffe3fd7b027e37c7ba6d", 0xbc}, {&(0x7f0000001500)="1e7981ae134ea6fcb04f391ade3c0bde4bbfbc4ca0d373f8a2341640900963936f7bda1b8670c331d7a07a692751b23cef0f5e7872f8b8aa14c793e3375a99afab88d0f7e7894f31d88522acf5c642e5f9d26ec7a857999c35799ee4e448bc093f0ccb38546506c2c72753dbaebd9ce0ef8f52b933ee4eaacab4abfb507419f02ba73e355901fc8c27581559b6425527ec27aedd459664f7a2418b1e6b6198dde64a75e5acdb2061495297da05ae9397b3df9b9dd4c5abd96c55a936fc40233d471c978a97edb4587a5f05a0fcbd4981cd494988c3a71c23f61e7352c3", 0xdd}, {&(0x7f0000001600)="c424ea08843b2e120b61b0cb4bd3cf9e835481bcd0dbc7971a4ecb7293fda6fb1adcc1446bf0e7d63e0bc0aeea6d1e4a9c7e53d80d563d6a6f62a9f13b471c3ede7bd3f2b3a2117ed492680d170319be21373471524de187113bb8c21e7afc4306f1af46c3c42ff572280daaab1fdaf01d26ad489ba8cb27a75a1e1dc7f4c8fed293649d7a68c75fa16b1195c86f9f4940ff3723cf06575d86cdf34c88f7ae239b4bc3b40b2557ca51ffeb275c45928b1741bd15cdf35f5a89729a0ce2", 0xbd}], 0xa, &(0x7f0000001800)=[@sndrcv={0x30, 0x84, 0x1, {0x0, 0x20, 0xbe61e943b65a18f8, 0x3, 0x8, 0x10001, 0x40, 0x800, r5}}, @dstaddrv6={0x20, 0x84, 0x8, @ipv4={[], [], @empty}}], 0x50, 0x4}, {&(0x7f0000001880)=@in={0x2, 0x4e22, @empty}, 0x10, &(0x7f0000001bc0)=[{&(0x7f00000018c0)="8a586ec9109ee0f76262df4e85212114c411f8419eb44b03212cd1692bd887b9efe6862ed9", 0x25}, {&(0x7f0000001900)="cffcb9d51e1565333e70f573fd4ab7d58cb8d2b4ab21f7b565cdb804e2be6d138a46bdb4200d033aa99ea63bf9eee2c5e8fc61f7667e16f192433ec6ae2c39e27ac645fcf86a9fd4c19642a47c76e075fd5ad3d214be8edf0470ed606993b7aba29e2c020ec41b1abe9393372efd00361b9d3b339e32f9c436acc3d06b92e5e32282f6f43e14e739a49f1c2537e0ac1e90d325c3e1e4c54b5b902b92ef848480bcf179dd833764fa0378821f026c56cfac9ea5bd8acc3e9dd1e20097ab1b6b71e4c73a0e1a17b41a0860cd96cfa192c8fa6f78fc2d001f45b3d6fdd346fc8faae4ee02c277e9d7d3d16579d0126236bb", 0xf0}, {&(0x7f0000001a00)="760265bdbfe88abcd1adf35e820061500eb148701151dd9adfa9398c40ec8c463ba2675fedf6e58c19691bbe099811478f79d00cff3aa1fcca10446e395e5e165b37748fbf0b84653d5647b95458e5a25c11433f5a5c822a1505b9ede7cde7e4909977be77e117d4ac14de1fd1b0457711b18f928193a7826b34fcfbc5c2a5b7ea2345f98d6d0b741a496ab6c255959a7f3a8fe13f87fbdcb842939f8f8e415de61264c130d44d6a43cc92ffcae6849c2496744863c6c4578a345a9619492b90c31d836e87c909d0e0a6cf5fa358a44dc958d68ff2a8f639cbe9ab0693ce2a5ac6255cd4cae7fcbf2720413b9fabd8568a52b1b458", 0xf5}, {&(0x7f0000001b00)="08b8e3d43867b8322d5b3997ea502fa0bed2066117c3d9ac3263e503b171d56b23922488b1a31e50c08496f7cfe25a84e35d187cb963c1cd1fac0ad59f86d189481df5944a737da2e6f167f59658a86a0d69f03bd19b3eac9c7d598853d103c504f2a14bda812a4ece3499fc2f41e3b1039da5aabce487bc03a5feaafce8d78bd1f7cbb4ab8a83fa2333a845f74f4b", 0x8f}], 0x4}, {&(0x7f0000001c00)=@in={0x2, 0x4e22, @local}, 0x10, &(0x7f0000002200)=[{&(0x7f0000001c40)="092b309ebfb68d01fd51817482c6c18be57b761a56d33e5550b13983c617f1e7b9ac08fd25b957b0e225544dd4b324c11deb0538b7752e9e88389d2d1b5d41ffdda6057a4093d8ecfc529ac69f6bc6a55dcf8e2916c41f99da0d9579690321f708cc60cb72d09c386e18fd10e801", 0x6e}, {&(0x7f0000001cc0)="3c649029e195b564bf339b63d24fa22a29d50eb6699636fea182d493726d173efe956c79de2c6bd839b1002faff05384f0e17628dbbdfb1fcc50887584a4d044ad9f783876401acfc83ac7fcd1787c709fab38e291b4ae013a1871de8ed573f750234c3cd1380016a4aa4d0cdbc25a3c2ae597492ac25f6a05eca1e275f1f4ecb5d54dbdd21373f33fa880984b", 0x8d}, {&(0x7f0000001d80)="99db6ee422db914c86e78c2691509db5c27f898362129e443dacddf6addcc744d26344013b63d8cd0f291a9a9bc406c6d97eb9429ccb094074a6e7f4561f59bd19b1c8de6f5f52e481c60a3990788a6a94695b10db12127cde9122c17b240938fd5f1c6b73aa31fe9c3d6ac6d447ee8a089646500ef532acb77bc3d43f8b70d82356adbcbaa5b338d346fda534b3f5718acd2eb20333ee0c8e942acbcd3e57c245926396d4a552c7ac", 0xa9}, {&(0x7f0000001e40)="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", 0xfd}, {&(0x7f0000001f40)="92729c26516ea827b56d7f5f5d266c9d1ee7dfddf48b025debb8d429aae40c286e831a9a18a90fe9c720095b8803175d453fba7559e06dd9a8c5c2b916d97ffdb461f0662dec7ba697f96af6480ea33b98e4430f54300d2316126a3bbac819f7173d01bc89f938c00b7a88cd14afd3d1a17fc81f591c4c086040bf930345b84764608d92634edad2ecd246ebe28e79c98302eda452", 0x95}, {&(0x7f0000002000)="8e1ea90ec318ee87e31a5971a7c843db4fafb33e5a050441495d64e3d73a84df23c993dd60f24a826e1eb4433523b78b243c204c10db48c2c54a4bdce9f319f15482960a0d52ba9f46be82db194b4758cbb1ff4cfee8f9a69652bdc20da63a7d833d3dafb2e03af2d2709d2505d215e9d49d6c", 0x73}, {&(0x7f0000002080)="16afba9bab99856dd91cd2e76c1c9dc8ed41e40c71e7743bdc11521e648ba46db84cb4df5c3ef0c566c98e7a59dca185a84b103ab144428793710c97d1514e41a54d3b0b2436f891834f4be9c117fae20b9212a979039fe17f8d8927bf3e5fe1f91e8475f11aa1902ba364a7ceef819fa67061ed039ad6c92edbcb78d4c47f8d8c03f9ccf80d942bb96765a969545f6e360a88a376a6889adfefbdfd89e9b3378b5a44f204da71f193a39454899b155a2e0799c80a494e4ee6169e7cb467b719813717b05eb5e036d6", 0xc9}, {&(0x7f0000002180)="7361b9fe9bf0723eb73b6c31bed82f5d590e161f44e00c0190fd6023888318ca6384b8f41a9a62e14e8a62caee72c4dab7a3d3a4febbf0542637582ee4b2c5e3026a5fe7b299b6c3215ab13b5d83e5cecaa33ca14aa5fde6a704ec303b84d02a766590f4e4b14d5d3b3a9a", 0x6b}], 0x8, &(0x7f00000023c0)=[@authinfo={0x18, 0x84, 0x6, {0x1}}, @sndinfo={0x20, 0x84, 0x2, {0x9, 0x204, 0xd3, 0x100000001, r6}}, @sndrcv={0x30, 0x84, 0x1, {0x6, 0x200, 0x4, 0x9, 0x10000, 0x7fff, 0xa70e, 0x3b, r7}}, @dstaddrv6={0x20, 0x84, 0x8, @mcast2}, @dstaddrv6={0x20, 0x84, 0x8, @mcast1}, @dstaddrv4={0x18, 0x84, 0x7, @loopback}, @authinfo={0x18, 0x84, 0x6, {0x80000000}}, @init={0x18, 0x84, 0x0, {0x74, 0x40, 0x50a, 0x1}}, @dstaddrv4={0x18, 0x84, 0x7, @empty}, @dstaddrv4={0x18, 0x84, 0x7, @remote}], 0x120, 0x4}], 0x9, 0x8000) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f0000000000)=0x10001, 0x4) ioctl$SG_EMULATED_HOST(r0, 0x2203, &(0x7f0000000100)) socket$inet(0x2, 0xffffffffffffffff, 0x90e) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000c40)={0x0, 0x80000001, 0x1f, 0x1, 0x6, 0x8001, 0x6}, 0xc) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) splice(r0, 0x0, r2, 0x0, 0x1ffe0, 0x0) 16:57:59 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000, 0x282]}}]}, 0x2b2}}, 0x0) 16:57:59 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1, 0x0, 0x0, 0xa00000000000000}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) [ 638.368348] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000003 [ 638.368357] RBP: 000000000073bfa0 R08: 00000000000100e0 R09: 0000000000000000 [ 638.368366] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f2baa4ae6d4 [ 638.368379] R13: 00000000004c6c75 R14: 00000000004db870 R15: 0000000000000007 16:57:59 executing program 2: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x3, 0x2) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) splice(r0, 0x0, r2, 0x0, 0x10005, 0xa00000070040000) 16:57:59 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x3, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) 16:57:59 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000, 0x29d]}}]}, 0x2b2}}, 0x0) 16:57:59 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1, 0x0, 0x0, 0xa00000000000000}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) 16:57:59 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1, 0x0, 0x0, 0xa00000000000000}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) 16:57:59 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000, 0x300]}}]}, 0x2b2}}, 0x0) 16:57:59 executing program 0 (fault-call:8 fault-nth:50): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x3, 0x2) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) splice(r0, 0x0, r2, 0x0, 0x100e0, 0x0) 16:57:59 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x3, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) 16:57:59 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1, 0x0, 0x0, 0xa00000000000000}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) [ 638.955314] FAULT_INJECTION: forcing a failure. [ 638.955314] name failslab, interval 1, probability 0, space 0, times 0 [ 638.966792] CPU: 0 PID: 27877 Comm: syz-executor.0 Not tainted 5.0.0+ #6 [ 638.973642] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 638.982993] Call Trace: [ 638.985597] dump_stack+0x172/0x1f0 [ 638.989283] should_fail.cold+0xa/0x1b [ 638.993204] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 638.998300] ? lock_downgrade+0x810/0x810 [ 639.002450] ? ___might_sleep+0x163/0x280 [ 639.006606] __should_failslab+0x121/0x190 [ 639.010844] should_failslab+0x9/0x14 [ 639.014646] kmem_cache_alloc_node_trace+0x270/0x720 [ 639.019762] ? __alloc_skb+0x10b/0x5e0 [ 639.023665] __kmalloc_node_track_caller+0x3d/0x70 [ 639.028592] __kmalloc_reserve.isra.0+0x40/0xf0 [ 639.033266] __alloc_skb+0x10b/0x5e0 [ 639.036994] ? skb_scrub_packet+0x440/0x440 [ 639.041349] ? raw_destroy+0x30/0x30 [ 639.045102] ? __ip_append_data.isra.0+0x185e/0x2dd0 [ 639.050209] __ip_append_data.isra.0+0x24d6/0x2dd0 [ 639.055126] ? raw_destroy+0x30/0x30 [ 639.058873] ? __ip_flush_pending_frames.isra.0+0x2d0/0x2d0 [ 639.064620] ? ip_setup_cork+0x4d6/0x870 [ 639.068678] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 639.074206] ? ip_setup_cork+0x53b/0x870 [ 639.078251] ? raw_destroy+0x30/0x30 [ 639.081970] ip_append_data.part.0+0xf2/0x170 [ 639.086506] ? raw_destroy+0x30/0x30 [ 639.090235] ip_append_data+0x6e/0x90 [ 639.094032] raw_sendmsg+0xbd8/0x2f10 [ 639.097836] ? raw_getsockopt+0x100/0x100 [ 639.101987] ? ima_match_policy+0xa19/0x13d0 [ 639.106397] ? process_measurement+0xd5d/0x1570 [ 639.111076] ? process_measurement+0xd5d/0x1570 [ 639.115761] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 639.120522] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 639.125300] ? lockdep_hardirqs_on+0x415/0x5d0 [ 639.129886] ? retint_kernel+0x2d/0x2d [ 639.133772] ? trace_hardirqs_on_caller+0x6a/0x220 [ 639.138715] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 639.143489] ? retint_kernel+0x2d/0x2d [ 639.147395] inet_sendmsg+0x147/0x5d0 [ 639.151200] ? raw_getsockopt+0x100/0x100 [ 639.155344] ? inet_sendmsg+0x147/0x5d0 [ 639.159333] ? ipip_gro_receive+0x100/0x100 [ 639.163669] sock_sendmsg+0xdd/0x130 [ 639.167383] kernel_sendmsg+0x44/0x50 [ 639.171224] sock_no_sendpage+0x116/0x150 [ 639.175372] ? sock_kzfree_s+0x70/0x70 [ 639.179299] ? lockdep_hardirqs_on+0x415/0x5d0 [ 639.183895] ? retint_kernel+0x2d/0x2d [ 639.187787] ? trace_hardirqs_on_caller+0x6a/0x220 [ 639.192706] inet_sendpage+0x44a/0x630 [ 639.196617] kernel_sendpage+0x95/0xf0 [ 639.200511] ? inet_sendmsg+0x5d0/0x5d0 [ 639.204515] sock_sendpage+0x8b/0xc0 [ 639.208225] ? lockdep_hardirqs_on+0x415/0x5d0 [ 639.212822] pipe_to_sendpage+0x299/0x370 [ 639.216969] ? kernel_sendpage+0xf0/0xf0 [ 639.221047] ? direct_splice_actor+0x1a0/0x1a0 [ 639.225646] ? __put_page+0x92/0xd0 [ 639.229304] ? anon_pipe_buf_release+0x1c6/0x270 [ 639.234073] __splice_from_pipe+0x39a/0x7e0 [ 639.238399] ? direct_splice_actor+0x1a0/0x1a0 [ 639.243005] ? direct_splice_actor+0x1a0/0x1a0 [ 639.247603] splice_from_pipe+0x108/0x170 [ 639.251763] ? splice_shrink_spd+0xd0/0xd0 [ 639.256018] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 639.261574] ? security_file_permission+0x94/0x320 [ 639.266517] generic_splice_sendpage+0x3c/0x50 [ 639.271118] ? splice_from_pipe+0x170/0x170 [ 639.275448] do_splice+0x70a/0x1490 [ 639.279092] ? iterate_fd+0x360/0x360 [ 639.282900] ? opipe_prep.part.0+0x2d0/0x2d0 [ 639.287300] ? __fget_light+0x1a9/0x230 [ 639.291281] __x64_sys_splice+0x2c6/0x330 [ 639.295468] do_syscall_64+0x103/0x610 [ 639.299365] entry_SYSCALL_64_after_hwframe+0x49/0xbe 16:58:00 executing program 5: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r3 = socket$inet(0x2, 0x3, 0x2) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) flock(r3, 0x6) splice(r0, 0x0, r2, 0x0, 0x1ffe0, 0x0) r4 = add_key(&(0x7f0000000000)='blacklist\x00', &(0x7f00000000c0)={'syz', 0x2}, &(0x7f0000000100)="434cc64b89212ab77d5f1d3a22e89b946d95bd7969cf52ac5722471ec2669924abebb3198861501eff4d1646", 0x2c, 0xfffffffffffffffe) keyctl$describe(0x6, r4, &(0x7f0000000200)=""/89, 0x59) 16:58:00 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000, 0x600]}}]}, 0x2b2}}, 0x0) 16:58:00 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1, 0x0, 0x0, 0xa00000000000000}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) [ 639.305023] RIP: 0033:0x457e29 [ 639.308252] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 639.327187] RSP: 002b:00007f2baa4adc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 639.334916] RAX: ffffffffffffffda RBX: 00007f2baa4adc90 RCX: 0000000000457e29 [ 639.334925] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000003 [ 639.334933] RBP: 000000000073bfa0 R08: 00000000000100e0 R09: 0000000000000000 [ 639.334941] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f2baa4ae6d4 [ 639.334949] R13: 00000000004c6c75 R14: 00000000004db870 R15: 0000000000000007 16:58:00 executing program 2: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x3, 0x2) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) splice(r0, 0x0, r2, 0x0, 0x10005, 0xa00000084040000) 16:58:00 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x3, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) 16:58:00 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000, 0xa00]}}]}, 0x2b2}}, 0x0) 16:58:00 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1, 0x0, 0x0, 0xa00000000000000}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) 16:58:00 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x3, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) 16:58:00 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000, 0xc00]}}]}, 0x2b2}}, 0x0) 16:58:00 executing program 0 (fault-call:8 fault-nth:51): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x3, 0x2) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) splice(r0, 0x0, r2, 0x0, 0x100e0, 0x0) 16:58:00 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1, 0x0, 0x0, 0xa00000000000000}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) 16:58:00 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000, 0xe00]}}]}, 0x2b2}}, 0x0) [ 639.858969] FAULT_INJECTION: forcing a failure. [ 639.858969] name failslab, interval 1, probability 0, space 0, times 0 [ 639.882613] CPU: 1 PID: 27924 Comm: syz-executor.0 Not tainted 5.0.0+ #6 [ 639.889478] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 639.898878] Call Trace: [ 639.901457] dump_stack+0x172/0x1f0 [ 639.905096] should_fail.cold+0xa/0x1b [ 639.908970] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 639.914058] ? lock_downgrade+0x810/0x810 [ 639.918197] ? ___might_sleep+0x163/0x280 [ 639.922333] __should_failslab+0x121/0x190 [ 639.926577] should_failslab+0x9/0x14 [ 639.930391] kmem_cache_alloc_node+0x264/0x710 [ 639.934971] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 639.940493] ? ip_generic_getfrag+0x120/0x230 [ 639.944975] __alloc_skb+0xd5/0x5e0 [ 639.948586] ? skb_scrub_packet+0x440/0x440 [ 639.952896] ? raw_getfrag+0x164/0x230 [ 639.956763] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 639.961792] __ip_append_data.isra.0+0x24d6/0x2dd0 [ 639.966717] ? raw_destroy+0x30/0x30 [ 639.970428] ? __ip_flush_pending_frames.isra.0+0x2d0/0x2d0 [ 639.976138] ? ipv4_mtu+0x2a9/0x400 [ 639.979767] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 639.985328] ? ip_setup_cork+0x53b/0x870 [ 639.989385] ? raw_destroy+0x30/0x30 [ 639.993110] ip_append_data.part.0+0xf2/0x170 [ 639.997603] ? raw_destroy+0x30/0x30 [ 640.001315] ip_append_data+0x6e/0x90 [ 640.005122] raw_sendmsg+0xbd8/0x2f10 [ 640.008917] ? raw_getsockopt+0x100/0x100 [ 640.013052] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 640.018580] ? flexible_sched_in+0xcb/0x9c0 [ 640.022894] ? pinned_sched_in+0xa40/0xa40 [ 640.027127] ? __lock_acquire+0x53b/0x4700 [ 640.031342] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 640.036889] ? check_preemption_disabled+0x48/0x290 [ 640.041920] ? __perf_event_task_sched_in+0x640/0x820 [ 640.047096] ? __lock_acquire+0x53b/0x4700 [ 640.051330] ? mark_held_locks+0xb1/0x100 [ 640.055497] inet_sendmsg+0x147/0x5d0 [ 640.059288] ? raw_getsockopt+0x100/0x100 [ 640.063421] ? inet_sendmsg+0x147/0x5d0 [ 640.067378] ? ipip_gro_receive+0x100/0x100 [ 640.071695] sock_sendmsg+0xdd/0x130 [ 640.075392] kernel_sendmsg+0x44/0x50 [ 640.079190] sock_no_sendpage+0x116/0x150 [ 640.083366] ? sock_kzfree_s+0x70/0x70 [ 640.087238] ? trace_hardirqs_on_caller+0x6a/0x220 [ 640.092164] ? retint_kernel+0x2d/0x2d [ 640.096053] inet_sendpage+0x44a/0x630 [ 640.099938] kernel_sendpage+0x95/0xf0 [ 640.103839] ? inet_sendmsg+0x5d0/0x5d0 [ 640.107817] sock_sendpage+0x8b/0xc0 [ 640.111567] pipe_to_sendpage+0x299/0x370 [ 640.115700] ? kernel_sendpage+0xf0/0xf0 [ 640.119749] ? direct_splice_actor+0x1a0/0x1a0 [ 640.124324] __splice_from_pipe+0x39a/0x7e0 [ 640.128644] ? direct_splice_actor+0x1a0/0x1a0 [ 640.133218] ? direct_splice_actor+0x1a0/0x1a0 [ 640.137779] splice_from_pipe+0x108/0x170 [ 640.141912] ? splice_shrink_spd+0xd0/0xd0 [ 640.146139] ? splice_from_pipe+0x170/0x170 [ 640.150448] generic_splice_sendpage+0x3c/0x50 [ 640.155023] ? splice_from_pipe+0x170/0x170 [ 640.159334] do_splice+0x70a/0x1490 [ 640.162958] ? iterate_fd+0x360/0x360 [ 640.166746] ? opipe_prep.part.0+0x2d0/0x2d0 [ 640.171141] ? __fget_light+0x1a9/0x230 [ 640.175100] __x64_sys_splice+0x2c6/0x330 [ 640.179289] do_syscall_64+0x103/0x610 [ 640.183206] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 640.188405] RIP: 0033:0x457e29 [ 640.191580] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 16:58:01 executing program 5: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/cachefiles\x00', 0x183000, 0x0) getsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000100), &(0x7f0000000200)=0x8) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) write$binfmt_misc(r2, &(0x7f0000000140)=ANY=[], 0x4240a2a0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) ioctl$VHOST_SET_VRING_NUM(r1, 0x4008af10, &(0x7f0000000080)={0x0, 0x1000}) ioctl$VIDIOC_TRY_FMT(r2, 0xc0d05640, &(0x7f0000000280)={0xf, @vbi={0x7fffffff, 0x3, 0x3f, 0x3136564e, [0x40, 0x2000], [0x5, 0x9], 0x2}}) perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_int(r3, 0x0, 0xc, &(0x7f0000000000), &(0x7f00000000c0)=0x4) splice(r1, 0x0, r3, 0x0, 0x1ffe0, 0x0) 16:58:01 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x3, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) 16:58:01 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1, 0x0, 0x0, 0xa00000000000000}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) [ 640.210480] RSP: 002b:00007f2baa4adc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 640.218189] RAX: ffffffffffffffda RBX: 00007f2baa4adc90 RCX: 0000000000457e29 [ 640.225442] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000003 [ 640.232701] RBP: 000000000073bfa0 R08: 00000000000100e0 R09: 0000000000000000 [ 640.241280] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f2baa4ae6d4 [ 640.248550] R13: 00000000004c6c75 R14: 00000000004db870 R15: 0000000000000007 [ 640.305737] net_ratelimit: 96 callbacks suppressed [ 640.305744] neighbour: ndisc_cache: neighbor table overflow! [ 640.322964] neighbour: ndisc_cache: neighbor table overflow! [ 640.341718] neighbour: ndisc_cache: neighbor table overflow! 16:58:01 executing program 2: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x3, 0x2) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) splice(r0, 0x0, r2, 0x0, 0x10005, 0xa000000900b0000) 16:58:01 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000, 0xf00]}}]}, 0x2b2}}, 0x0) 16:58:01 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1, 0x0, 0x0, 0xa00000000000000}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) [ 640.366490] neighbour: ndisc_cache: neighbor table overflow! [ 640.401636] neighbour: ndisc_cache: neighbor table overflow! 16:58:01 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x3, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) 16:58:01 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000, 0x3f00]}}]}, 0x2b2}}, 0x0) [ 640.423556] neighbour: ndisc_cache: neighbor table overflow! [ 640.438427] neighbour: ndisc_cache: neighbor table overflow! [ 640.453011] neighbour: ndisc_cache: neighbor table overflow! 16:58:01 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1, 0x0, 0x0, 0xa00000000000000}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) [ 640.495553] neighbour: ndisc_cache: neighbor table overflow! [ 640.522583] neighbour: ndisc_cache: neighbor table overflow! 16:58:01 executing program 0 (fault-call:8 fault-nth:52): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x3, 0x2) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) splice(r0, 0x0, r2, 0x0, 0x100e0, 0x0) 16:58:01 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000, 0x5865]}}]}, 0x2b2}}, 0x0) 16:58:01 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x3, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) [ 640.760389] FAULT_INJECTION: forcing a failure. [ 640.760389] name failslab, interval 1, probability 0, space 0, times 0 [ 640.772408] CPU: 0 PID: 27976 Comm: syz-executor.0 Not tainted 5.0.0+ #6 [ 640.779255] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 640.788650] Call Trace: [ 640.791236] dump_stack+0x172/0x1f0 [ 640.794885] should_fail.cold+0xa/0x1b [ 640.798783] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 640.803900] ? lock_downgrade+0x810/0x810 [ 640.808064] ? ___might_sleep+0x163/0x280 [ 640.812221] __should_failslab+0x121/0x190 [ 640.816456] should_failslab+0x9/0x14 [ 640.820280] kmem_cache_alloc_node_trace+0x270/0x720 [ 640.825409] ? __alloc_skb+0xd5/0x5e0 [ 640.829210] ? rcu_lockdep_current_cpu_online+0xe3/0x130 [ 640.834668] __kmalloc_node_track_caller+0x3d/0x70 [ 640.839607] __kmalloc_reserve.isra.0+0x40/0xf0 [ 640.844285] __alloc_skb+0x10b/0x5e0 [ 640.848008] ? skb_scrub_packet+0x440/0x440 [ 640.852336] ? raw_getfrag+0x164/0x230 [ 640.856226] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 640.861295] __ip_append_data.isra.0+0x24d6/0x2dd0 [ 640.866232] ? raw_destroy+0x30/0x30 [ 640.869984] ? __ip_flush_pending_frames.isra.0+0x2d0/0x2d0 [ 640.875715] ? ipv4_mtu+0x2a9/0x400 [ 640.879342] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 640.884865] ? ip_setup_cork+0x53b/0x870 [ 640.888924] ? raw_destroy+0x30/0x30 [ 640.892645] ip_append_data.part.0+0xf2/0x170 [ 640.897144] ? raw_destroy+0x30/0x30 [ 640.900862] ip_append_data+0x6e/0x90 [ 640.904689] raw_sendmsg+0xbd8/0x2f10 [ 640.908488] ? raw_getsockopt+0x100/0x100 [ 640.912637] ? lockdep_hardirqs_on+0x415/0x5d0 [ 640.917225] ? process_measurement+0xd5d/0x1570 [ 640.921918] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 640.926675] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 640.931429] ? lockdep_hardirqs_on+0x415/0x5d0 [ 640.936011] ? retint_kernel+0x2d/0x2d [ 640.939898] ? trace_hardirqs_on_caller+0x6a/0x220 [ 640.944833] ? __lock_acquire+0x53b/0x4700 [ 640.949073] ? retint_kernel+0x2d/0x2d [ 640.952969] inet_sendmsg+0x147/0x5d0 [ 640.956767] ? raw_getsockopt+0x100/0x100 [ 640.960913] ? inet_sendmsg+0x147/0x5d0 [ 640.964886] ? ipip_gro_receive+0x100/0x100 [ 640.969206] sock_sendmsg+0xdd/0x130 [ 640.972915] kernel_sendmsg+0x44/0x50 [ 640.976724] sock_no_sendpage+0x116/0x150 [ 640.980883] ? sock_kzfree_s+0x70/0x70 [ 640.984806] ? debug_check_no_obj_freed+0x200/0x464 [ 640.989831] ? mark_held_locks+0xb1/0x100 [ 640.993989] inet_sendpage+0x44a/0x630 [ 640.997869] kernel_sendpage+0x95/0xf0 [ 641.001749] ? inet_sendmsg+0x5d0/0x5d0 [ 641.005725] sock_sendpage+0x8b/0xc0 [ 641.009431] ? lockdep_hardirqs_on+0x415/0x5d0 [ 641.014029] pipe_to_sendpage+0x299/0x370 [ 641.018170] ? kernel_sendpage+0xf0/0xf0 [ 641.022234] ? direct_splice_actor+0x1a0/0x1a0 [ 641.026842] ? __put_page+0x92/0xd0 [ 641.030470] ? anon_pipe_buf_release+0x1c6/0x270 [ 641.035240] __splice_from_pipe+0x39a/0x7e0 [ 641.039589] ? direct_splice_actor+0x1a0/0x1a0 [ 641.044196] ? direct_splice_actor+0x1a0/0x1a0 [ 641.048802] splice_from_pipe+0x108/0x170 [ 641.052978] ? splice_shrink_spd+0xd0/0xd0 [ 641.057210] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 641.062777] ? security_file_permission+0x94/0x320 [ 641.067735] generic_splice_sendpage+0x3c/0x50 [ 641.072342] ? splice_from_pipe+0x170/0x170 [ 641.076663] do_splice+0x70a/0x1490 [ 641.080304] ? iterate_fd+0x360/0x360 [ 641.084120] ? opipe_prep.part.0+0x2d0/0x2d0 [ 641.088513] ? __fget_light+0x1a9/0x230 [ 641.092503] __x64_sys_splice+0x2c6/0x330 [ 641.096674] do_syscall_64+0x103/0x610 [ 641.100564] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 641.105755] RIP: 0033:0x457e29 [ 641.108960] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 641.127854] RSP: 002b:00007f2baa4adc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 641.135543] RAX: ffffffffffffffda RBX: 00007f2baa4adc90 RCX: 0000000000457e29 [ 641.142805] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000003 [ 641.150083] RBP: 000000000073bfa0 R08: 00000000000100e0 R09: 0000000000000000 16:58:02 executing program 5: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) write$binfmt_misc(r0, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x3, 0x2) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r1, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 16:58:02 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1, 0x0, 0x0, 0xa00000000000000}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) 16:58:02 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000, 0x6000]}}]}, 0x2b2}}, 0x0) [ 641.157357] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f2baa4ae6d4 [ 641.164628] R13: 00000000004c6c75 R14: 00000000004db870 R15: 0000000000000007 16:58:02 executing program 2: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x3, 0x2) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) splice(r0, 0x0, r2, 0x0, 0x10005, 0xa00000097ffffff) 16:58:02 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x3, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) 16:58:02 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1, 0x0, 0x0, 0xa00000000000000}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) 16:58:02 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000, 0x6558]}}]}, 0x2b2}}, 0x0) 16:58:02 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000, 0x8100]}}]}, 0x2b2}}, 0x0) 16:58:02 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1, 0x0, 0x0, 0xa00000000000000}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) 16:58:02 executing program 0 (fault-call:8 fault-nth:53): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x3, 0x2) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) splice(r0, 0x0, r2, 0x0, 0x100e0, 0x0) 16:58:02 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x3, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) 16:58:02 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1, 0x0, 0x0, 0xa00000000000000}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) [ 641.599897] FAULT_INJECTION: forcing a failure. [ 641.599897] name failslab, interval 1, probability 0, space 0, times 0 [ 641.611162] CPU: 1 PID: 28025 Comm: syz-executor.0 Not tainted 5.0.0+ #6 [ 641.617993] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 641.627333] Call Trace: [ 641.629914] dump_stack+0x172/0x1f0 [ 641.633538] should_fail.cold+0xa/0x1b [ 641.637441] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 641.642529] ? lock_downgrade+0x810/0x810 [ 641.646676] ? ___might_sleep+0x163/0x280 [ 641.650842] __should_failslab+0x121/0x190 [ 641.655072] should_failslab+0x9/0x14 [ 641.658867] kmem_cache_alloc_node+0x264/0x710 [ 641.663459] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 641.668985] ? ip_generic_getfrag+0x120/0x230 [ 641.673472] __alloc_skb+0xd5/0x5e0 [ 641.677085] ? skb_scrub_packet+0x440/0x440 [ 641.681393] ? raw_getfrag+0x164/0x230 [ 641.685268] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 641.690293] __ip_append_data.isra.0+0x24d6/0x2dd0 [ 641.695221] ? raw_destroy+0x30/0x30 [ 641.698961] ? __ip_flush_pending_frames.isra.0+0x2d0/0x2d0 [ 641.704683] ? ipv4_mtu+0x2a9/0x400 [ 641.708300] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 641.713833] ? ip_setup_cork+0x53b/0x870 [ 641.717895] ? raw_destroy+0x30/0x30 [ 641.721604] ip_append_data.part.0+0xf2/0x170 [ 641.726082] ? raw_destroy+0x30/0x30 [ 641.729779] ip_append_data+0x6e/0x90 [ 641.733571] raw_sendmsg+0xbd8/0x2f10 [ 641.737362] ? raw_getsockopt+0x100/0x100 [ 641.741496] ? ima_match_policy+0xa19/0x13d0 [ 641.745886] ? process_measurement+0xd5d/0x1570 [ 641.750552] ? process_measurement+0xd5d/0x1570 [ 641.755234] ? lock_downgrade+0x810/0x810 [ 641.759385] ? __lock_acquire+0x53b/0x4700 [ 641.763603] ? __lock_acquire+0x53b/0x4700 [ 641.767832] ? __lock_acquire+0x53b/0x4700 [ 641.772078] inet_sendmsg+0x147/0x5d0 [ 641.775861] ? raw_getsockopt+0x100/0x100 [ 641.779992] ? inet_sendmsg+0x147/0x5d0 [ 641.783954] ? ipip_gro_receive+0x100/0x100 [ 641.788272] sock_sendmsg+0xdd/0x130 [ 641.791986] kernel_sendmsg+0x44/0x50 [ 641.795796] sock_no_sendpage+0x116/0x150 [ 641.799946] ? sock_kzfree_s+0x70/0x70 [ 641.803845] ? debug_check_no_obj_freed+0x200/0x464 [ 641.808850] ? mark_held_locks+0xb1/0x100 [ 641.813003] inet_sendpage+0x44a/0x630 [ 641.816901] kernel_sendpage+0x95/0xf0 [ 641.820792] ? inet_sendmsg+0x5d0/0x5d0 [ 641.824764] sock_sendpage+0x8b/0xc0 [ 641.828487] ? lockdep_hardirqs_on+0x415/0x5d0 [ 641.833061] pipe_to_sendpage+0x299/0x370 [ 641.837202] ? kernel_sendpage+0xf0/0xf0 [ 641.841272] ? direct_splice_actor+0x1a0/0x1a0 [ 641.845843] ? __put_page+0x92/0xd0 [ 641.849475] ? anon_pipe_buf_release+0x1c6/0x270 [ 641.854234] __splice_from_pipe+0x39a/0x7e0 [ 641.858564] ? direct_splice_actor+0x1a0/0x1a0 [ 641.863138] ? direct_splice_actor+0x1a0/0x1a0 [ 641.867722] splice_from_pipe+0x108/0x170 [ 641.871882] ? splice_shrink_spd+0xd0/0xd0 [ 641.876107] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 641.881642] ? security_file_permission+0x94/0x320 [ 641.886575] generic_splice_sendpage+0x3c/0x50 [ 641.891152] ? splice_from_pipe+0x170/0x170 [ 641.895460] do_splice+0x70a/0x1490 [ 641.899075] ? iterate_fd+0x360/0x360 [ 641.902881] ? opipe_prep.part.0+0x2d0/0x2d0 [ 641.907296] ? __fget_light+0x1a9/0x230 [ 641.911269] __x64_sys_splice+0x2c6/0x330 [ 641.915430] do_syscall_64+0x103/0x610 [ 641.919316] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 641.924503] RIP: 0033:0x457e29 [ 641.927700] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 641.946587] RSP: 002b:00007f2baa4adc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 641.954306] RAX: ffffffffffffffda RBX: 00007f2baa4adc90 RCX: 0000000000457e29 [ 641.961572] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000003 [ 641.968823] RBP: 000000000073bfa0 R08: 00000000000100e0 R09: 0000000000000000 [ 641.976075] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f2baa4ae6d4 [ 641.983343] R13: 00000000004c6c75 R14: 00000000004db870 R15: 0000000000000007 16:58:03 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000, 0x8202]}}]}, 0x2b2}}, 0x0) 16:58:03 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x3, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) 16:58:03 executing program 5: r0 = syz_open_dev$adsp(&(0x7f00000000c0)='/dev/adsp#\x00', 0xfffffffffffff60d, 0x200000) ioctl$SG_GET_REQUEST_TABLE(r0, 0x2286, &(0x7f0000000240)) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) write$binfmt_misc(r2, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r4 = socket$inet(0x2, 0x3, 0x2) bind$inet(r4, &(0x7f0000000200)={0x2, 0x1, @broadcast}, 0xfffffffffffffd8d) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x5, 0x3ff}) splice(r1, 0x0, r3, 0x0, 0x1ffe0, 0x0) 16:58:03 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1, 0x0, 0x0, 0xa00000000000000}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) 16:58:03 executing program 2: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x3, 0x2) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) splice(r0, 0x0, r2, 0x0, 0x10005, 0xa000000a0008000) 16:58:03 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1, 0x0, 0x0, 0xa00000000000000}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) 16:58:03 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x3, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) 16:58:03 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000, 0x9d02]}}]}, 0x2b2}}, 0x0) 16:58:03 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1, 0x0, 0x0, 0xa00000000000000}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) 16:58:03 executing program 0 (fault-call:8 fault-nth:54): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x3, 0x2) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) splice(r0, 0x0, r2, 0x0, 0x100e0, 0x0) 16:58:03 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000, 0xf000]}}]}, 0x2b2}}, 0x0) 16:58:03 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x3, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) 16:58:03 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1, 0x0, 0x0, 0xa00000000000000}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) 16:58:03 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000, 0x34000]}}]}, 0x2b2}}, 0x0) [ 642.526254] FAULT_INJECTION: forcing a failure. [ 642.526254] name failslab, interval 1, probability 0, space 0, times 0 [ 642.614595] CPU: 1 PID: 28071 Comm: syz-executor.0 Not tainted 5.0.0+ #6 [ 642.621470] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 642.630825] Call Trace: [ 642.633439] dump_stack+0x172/0x1f0 [ 642.637099] should_fail.cold+0xa/0x1b [ 642.641010] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 642.646128] ? lock_downgrade+0x810/0x810 [ 642.650299] ? ___might_sleep+0x163/0x280 [ 642.654468] __should_failslab+0x121/0x190 [ 642.658720] should_failslab+0x9/0x14 [ 642.662519] kmem_cache_alloc_node_trace+0x270/0x720 [ 642.667609] ? __alloc_skb+0xd5/0x5e0 [ 642.671395] ? rcu_lockdep_current_cpu_online+0xe3/0x130 [ 642.676829] __kmalloc_node_track_caller+0x3d/0x70 [ 642.681740] __kmalloc_reserve.isra.0+0x40/0xf0 [ 642.686414] __alloc_skb+0x10b/0x5e0 [ 642.690141] ? skb_scrub_packet+0x440/0x440 [ 642.694459] ? raw_getfrag+0x164/0x230 [ 642.698330] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 642.703355] __ip_append_data.isra.0+0x24d6/0x2dd0 [ 642.708301] ? raw_destroy+0x30/0x30 [ 642.712006] ? __ip_flush_pending_frames.isra.0+0x2d0/0x2d0 [ 642.717719] ? ipv4_mtu+0x2a9/0x400 [ 642.721351] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 642.726885] ? ip_setup_cork+0x53b/0x870 [ 642.730937] ? raw_destroy+0x30/0x30 [ 642.734638] ip_append_data.part.0+0xf2/0x170 [ 642.739119] ? raw_destroy+0x30/0x30 [ 642.742830] ip_append_data+0x6e/0x90 [ 642.746635] raw_sendmsg+0xbd8/0x2f10 [ 642.750429] ? raw_getsockopt+0x100/0x100 [ 642.754562] ? ima_match_policy+0xa19/0x13d0 [ 642.758978] ? process_measurement+0xd5d/0x1570 [ 642.763633] ? process_measurement+0xd5d/0x1570 [ 642.768302] ? lock_downgrade+0x810/0x810 [ 642.772467] ? __lock_acquire+0x53b/0x4700 [ 642.776713] ? __lock_acquire+0x53b/0x4700 [ 642.780933] ? __lock_acquire+0x53b/0x4700 [ 642.785182] inet_sendmsg+0x147/0x5d0 [ 642.788974] ? raw_getsockopt+0x100/0x100 [ 642.793116] ? inet_sendmsg+0x147/0x5d0 [ 642.797072] ? ipip_gro_receive+0x100/0x100 [ 642.801395] sock_sendmsg+0xdd/0x130 [ 642.805111] kernel_sendmsg+0x44/0x50 [ 642.808911] sock_no_sendpage+0x116/0x150 [ 642.813068] ? sock_kzfree_s+0x70/0x70 [ 642.816963] ? debug_check_no_obj_freed+0x200/0x464 [ 642.821983] ? mark_held_locks+0xb1/0x100 [ 642.826116] inet_sendpage+0x44a/0x630 [ 642.829989] kernel_sendpage+0x95/0xf0 [ 642.833862] ? inet_sendmsg+0x5d0/0x5d0 [ 642.837822] sock_sendpage+0x8b/0xc0 [ 642.841517] ? lockdep_hardirqs_on+0x415/0x5d0 [ 642.846089] pipe_to_sendpage+0x299/0x370 [ 642.850232] ? kernel_sendpage+0xf0/0xf0 [ 642.854316] ? direct_splice_actor+0x1a0/0x1a0 [ 642.858898] ? __put_page+0x92/0xd0 [ 642.862524] ? anon_pipe_buf_release+0x1c6/0x270 [ 642.867283] __splice_from_pipe+0x39a/0x7e0 [ 642.871607] ? direct_splice_actor+0x1a0/0x1a0 [ 642.876181] ? direct_splice_actor+0x1a0/0x1a0 [ 642.880749] splice_from_pipe+0x108/0x170 [ 642.884890] ? splice_shrink_spd+0xd0/0xd0 [ 642.889120] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 642.894646] ? security_file_permission+0x94/0x320 [ 642.899567] generic_splice_sendpage+0x3c/0x50 [ 642.904133] ? splice_from_pipe+0x170/0x170 [ 642.908440] do_splice+0x70a/0x1490 [ 642.912055] ? iterate_fd+0x360/0x360 [ 642.915851] ? opipe_prep.part.0+0x2d0/0x2d0 [ 642.920270] ? __fget_light+0x1a9/0x230 [ 642.924248] __x64_sys_splice+0x2c6/0x330 [ 642.928413] do_syscall_64+0x103/0x610 [ 642.932298] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 642.937487] RIP: 0033:0x457e29 [ 642.940674] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 642.959569] RSP: 002b:00007f2baa4adc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 642.967271] RAX: ffffffffffffffda RBX: 00007f2baa4adc90 RCX: 0000000000457e29 [ 642.974542] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000003 [ 642.981796] RBP: 000000000073bfa0 R08: 00000000000100e0 R09: 0000000000000000 [ 642.989046] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f2baa4ae6d4 [ 642.996325] R13: 00000000004c6c75 R14: 00000000004db870 R15: 0000000000000007 16:58:03 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000, 0x400300]}}]}, 0x2b2}}, 0x0) 16:58:03 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x3, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) 16:58:03 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1, 0x0, 0x0, 0xa00000000000000}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) 16:58:03 executing program 5: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x3, 0x2) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb89, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) splice(r0, 0x0, r2, 0x0, 0x1ffe0, 0x0) ioctl$VIDIOC_S_HW_FREQ_SEEK(r1, 0x40305652, &(0x7f0000000000)={0x3f, 0x5, 0x8, 0x4, 0x3f, 0xfffffffffffffff7, 0x3}) ioctl$FS_IOC_MEASURE_VERITY(r2, 0xc0046686, &(0x7f0000000200)={0x3, 0x9f, "3ffbb4ec255332745c04853791113acd1a4c7a240bfc2fee5d419f702a7f76d985082e4ae8e535f22e4134944f771035e14588fcd747d06b2752ab77cefa89fb82caa87d4c118f640364bfec5b8b2f2a60507c9f5f2fcfed209a204804690ac3ca85b87edb8890724304da95c66167106e2a47db49a527a80b27502c7097eac8e03523aab6f9f11de81fd73570809319ab15dcf23e51bbf199a561d146d62f"}) 16:58:03 executing program 2: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x3, 0x2) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) splice(r0, 0x0, r2, 0x0, 0x10005, 0xa000000a0010000) 16:58:04 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000, 0x8000a0]}}]}, 0x2b2}}, 0x0) 16:58:04 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1, 0x0, 0x0, 0xa00000000000000}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) 16:58:04 executing program 0 (fault-call:8 fault-nth:55): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x3, 0x2) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) splice(r0, 0x0, r2, 0x0, 0x100e0, 0x0) 16:58:04 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x3, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) 16:58:04 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000, 0xf0ffff]}}]}, 0x2b2}}, 0x0) 16:58:04 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x3, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) 16:58:04 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1, 0x0, 0x0, 0xa00000000000000}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) [ 643.463767] FAULT_INJECTION: forcing a failure. [ 643.463767] name failslab, interval 1, probability 0, space 0, times 0 [ 643.503818] CPU: 1 PID: 28125 Comm: syz-executor.0 Not tainted 5.0.0+ #6 [ 643.510668] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 643.520018] Call Trace: [ 643.522649] dump_stack+0x172/0x1f0 [ 643.526360] should_fail.cold+0xa/0x1b [ 643.530312] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 643.535437] __should_failslab+0x121/0x190 [ 643.535456] should_failslab+0x9/0x14 [ 643.535472] kmem_cache_alloc+0x47/0x6f0 [ 643.543509] skb_clone+0x150/0x3b0 [ 643.543542] ip_mc_output+0x3aa/0xf70 [ 643.543563] ? __ip_queue_xmit+0x1bf0/0x1bf0 16:58:04 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000, 0x1000000]}}]}, 0x2b2}}, 0x0) [ 643.543579] ? rcu_lockdep_current_cpu_online+0xe3/0x130 [ 643.543597] ? ip_append_data.part.0+0x170/0x170 [ 643.569546] ? dst_release+0x62/0xb0 [ 643.573281] ? __ip_make_skb+0xf93/0x1820 [ 643.577428] ip_local_out+0xc4/0x1b0 [ 643.581129] ip_send_skb+0x42/0xf0 [ 643.584655] ip_push_pending_frames+0x64/0x80 [ 643.589136] raw_sendmsg+0x1e5d/0x2f10 [ 643.593023] ? raw_getsockopt+0x100/0x100 [ 643.597178] ? ima_match_policy+0xa19/0x13d0 [ 643.601599] ? process_measurement+0xd5d/0x1570 [ 643.606276] ? process_measurement+0xd5d/0x1570 16:58:04 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1, 0x0, 0x0, 0xa00000000000000}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) [ 643.610952] ? lock_downgrade+0x810/0x810 [ 643.615111] ? __lock_acquire+0x53b/0x4700 [ 643.619355] ? __lock_acquire+0x53b/0x4700 [ 643.623592] ? __lock_acquire+0x53b/0x4700 [ 643.627837] inet_sendmsg+0x147/0x5d0 [ 643.631649] ? raw_getsockopt+0x100/0x100 [ 643.635800] ? inet_sendmsg+0x147/0x5d0 [ 643.639822] ? ipip_gro_receive+0x100/0x100 [ 643.644163] sock_sendmsg+0xdd/0x130 [ 643.647897] kernel_sendmsg+0x44/0x50 [ 643.651712] sock_no_sendpage+0x116/0x150 [ 643.655867] ? sock_kzfree_s+0x70/0x70 [ 643.659763] ? debug_check_no_obj_freed+0x200/0x464 16:58:04 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1, 0x0, 0x0, 0xa00000000000000}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) [ 643.664813] ? mark_held_locks+0xb1/0x100 [ 643.668979] inet_sendpage+0x44a/0x630 [ 643.672875] kernel_sendpage+0x95/0xf0 [ 643.676761] ? inet_sendmsg+0x5d0/0x5d0 [ 643.680748] sock_sendpage+0x8b/0xc0 [ 643.684507] ? lockdep_hardirqs_on+0x415/0x5d0 [ 643.689110] pipe_to_sendpage+0x299/0x370 [ 643.693273] ? kernel_sendpage+0xf0/0xf0 [ 643.697344] ? direct_splice_actor+0x1a0/0x1a0 [ 643.701935] ? __put_page+0x92/0xd0 [ 643.705575] ? anon_pipe_buf_release+0x1c6/0x270 [ 643.710372] __splice_from_pipe+0x39a/0x7e0 [ 643.714728] ? direct_splice_actor+0x1a0/0x1a0 [ 643.719335] ? direct_splice_actor+0x1a0/0x1a0 [ 643.723925] splice_from_pipe+0x108/0x170 [ 643.728080] ? splice_shrink_spd+0xd0/0xd0 [ 643.732363] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 643.737929] ? security_file_permission+0x94/0x320 [ 643.742855] generic_splice_sendpage+0x3c/0x50 [ 643.747422] ? splice_from_pipe+0x170/0x170 [ 643.751728] do_splice+0x70a/0x1490 [ 643.755343] ? iterate_fd+0x360/0x360 [ 643.759131] ? opipe_prep.part.0+0x2d0/0x2d0 [ 643.763579] ? __fget_light+0x1a9/0x230 [ 643.767553] __x64_sys_splice+0x2c6/0x330 [ 643.771719] do_syscall_64+0x103/0x610 [ 643.775597] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 643.780766] RIP: 0033:0x457e29 [ 643.783943] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 643.802843] RSP: 002b:00007f2baa4adc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 643.810553] RAX: ffffffffffffffda RBX: 00007f2baa4adc90 RCX: 0000000000457e29 [ 643.817829] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000003 [ 643.825093] RBP: 000000000073bfa0 R08: 00000000000100e0 R09: 0000000000000000 [ 643.832346] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f2baa4ae6d4 [ 643.839598] R13: 00000000004c6c75 R14: 00000000004db870 R15: 0000000000000007 16:58:04 executing program 5: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x3, 0x2) bind$inet(r2, &(0x7f0000000200)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xc}}, 0xfffffffffffffeaf) connect$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @multicast1}, 0x10) ioctl$TIOCLINUX5(r0, 0x541c, &(0x7f0000000000)={0x5, 0x1, 0x4406, 0x991, 0x1}) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f00000000c0)={{0x21, @loopback, 0x4e23, 0x0, 'lblc\x00', 0x2, 0x100000, 0x44}, {@local, 0x4e20, 0x2003, 0x9, 0x2, 0x9}}, 0x44) socket$inet6_udplite(0xa, 0x2, 0x88) perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) splice(r0, 0x0, r2, 0x0, 0xce, 0x0) 16:58:04 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x3, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) 16:58:04 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000, 0x2000000]}}]}, 0x2b2}}, 0x0) 16:58:04 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1, 0x0, 0x0, 0xa00000000000000}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) 16:58:05 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1, 0x0, 0x0, 0xa00000000000000}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) 16:58:05 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x3, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) 16:58:05 executing program 2: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x3, 0x2) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) splice(r0, 0x0, r2, 0x0, 0x10005, 0xa000000c8050000) 16:58:05 executing program 0 (fault-call:8 fault-nth:56): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x3, 0x2) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) splice(r0, 0x0, r2, 0x0, 0x100e0, 0x0) 16:58:05 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000, 0x3000000]}}]}, 0x2b2}}, 0x0) 16:58:05 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1, 0x0, 0x0, 0xa00000000000000}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) 16:58:05 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x3, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) 16:58:05 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000, 0x4000000]}}]}, 0x2b2}}, 0x0) [ 644.388607] FAULT_INJECTION: forcing a failure. [ 644.388607] name failslab, interval 1, probability 0, space 0, times 0 [ 644.412662] CPU: 1 PID: 28180 Comm: syz-executor.0 Not tainted 5.0.0+ #6 [ 644.419513] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 644.428876] Call Trace: [ 644.431482] dump_stack+0x172/0x1f0 [ 644.435135] should_fail.cold+0xa/0x1b [ 644.439042] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 644.444167] ? lock_downgrade+0x810/0x810 [ 644.448350] __should_failslab+0x121/0x190 [ 644.452623] should_failslab+0x9/0x14 [ 644.456443] kmem_cache_alloc+0x47/0x6f0 [ 644.460538] ? __lock_is_held+0xb6/0x140 [ 644.464621] ? check_preemption_disabled+0x48/0x290 [ 644.469653] dst_alloc+0x10e/0x1d0 [ 644.473215] rt_dst_alloc+0x83/0x3f0 [ 644.476950] ip_route_output_key_hash_rcu+0x97d/0x30e0 [ 644.482243] ? ip_route_input_noref+0x280/0x280 [ 644.486930] ? kasan_check_read+0x11/0x20 [ 644.491102] ip_route_output_key_hash+0x212/0x380 [ 644.495952] ? ip_route_output_key_hash_rcu+0x30e0/0x30e0 [ 644.495968] ? raw_sendmsg+0x6b0/0x2f10 [ 644.495990] ? lock_downgrade+0x810/0x810 [ 644.496008] ip_route_output_flow+0x28/0xc0 [ 644.505511] raw_sendmsg+0xa10/0x2f10 [ 644.505539] ? raw_getsockopt+0x100/0x100 [ 644.505557] ? ima_match_policy+0xa19/0x13d0 [ 644.505572] ? process_measurement+0xd5d/0x1570 [ 644.505590] ? process_measurement+0xd5d/0x1570 [ 644.505610] ? lock_downgrade+0x810/0x810 [ 644.539833] ? __lock_acquire+0x53b/0x4700 [ 644.539865] ? __lock_acquire+0x53b/0x4700 [ 644.539881] ? __lock_acquire+0x53b/0x4700 [ 644.539910] inet_sendmsg+0x147/0x5d0 [ 644.539925] ? raw_getsockopt+0x100/0x100 [ 644.539941] ? inet_sendmsg+0x147/0x5d0 [ 644.548403] ? ipip_gro_receive+0x100/0x100 [ 644.548422] sock_sendmsg+0xdd/0x130 [ 644.548440] kernel_sendmsg+0x44/0x50 [ 644.548460] sock_no_sendpage+0x116/0x150 [ 644.548477] ? sock_kzfree_s+0x70/0x70 [ 644.584382] ? debug_check_no_obj_freed+0x200/0x464 [ 644.589404] ? mark_held_locks+0xb1/0x100 [ 644.593542] inet_sendpage+0x44a/0x630 [ 644.597417] kernel_sendpage+0x95/0xf0 [ 644.601303] ? inet_sendmsg+0x5d0/0x5d0 [ 644.605291] sock_sendpage+0x8b/0xc0 [ 644.609012] ? lockdep_hardirqs_on+0x415/0x5d0 [ 644.613616] pipe_to_sendpage+0x299/0x370 [ 644.617768] ? kernel_sendpage+0xf0/0xf0 [ 644.621827] ? direct_splice_actor+0x1a0/0x1a0 [ 644.626439] ? __put_page+0x92/0xd0 [ 644.630050] ? anon_pipe_buf_release+0x1c6/0x270 [ 644.634830] __splice_from_pipe+0x39a/0x7e0 [ 644.639142] ? direct_splice_actor+0x1a0/0x1a0 [ 644.643739] ? direct_splice_actor+0x1a0/0x1a0 [ 644.648327] splice_from_pipe+0x108/0x170 [ 644.652463] ? splice_shrink_spd+0xd0/0xd0 [ 644.656702] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 644.662248] ? security_file_permission+0x94/0x320 [ 644.667197] generic_splice_sendpage+0x3c/0x50 [ 644.671782] ? splice_from_pipe+0x170/0x170 [ 644.676108] do_splice+0x70a/0x1490 [ 644.679732] ? iterate_fd+0x360/0x360 [ 644.683540] ? opipe_prep.part.0+0x2d0/0x2d0 [ 644.687945] ? __fget_light+0x1a9/0x230 [ 644.691916] __x64_sys_splice+0x2c6/0x330 [ 644.696071] do_syscall_64+0x103/0x610 [ 644.699974] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 644.705166] RIP: 0033:0x457e29 [ 644.708356] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 644.727247] RSP: 002b:00007f2baa4adc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 644.734958] RAX: ffffffffffffffda RBX: 00007f2baa4adc90 RCX: 0000000000457e29 [ 644.742220] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000003 [ 644.749479] RBP: 000000000073bfa0 R08: 00000000000100e0 R09: 0000000000000000 [ 644.756775] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f2baa4ae6d4 [ 644.764031] R13: 00000000004c6c75 R14: 00000000004db870 R15: 0000000000000007 16:58:05 executing program 5: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) setsockopt$inet6_MCAST_LEAVE_GROUP(r1, 0x29, 0x2d, &(0x7f0000000200)={0xfffffffffffffffc, {{0xa, 0x4e21, 0x4, @rand_addr="337bf896ddc583f701f3b3b8f8b2cf6a", 0xfffffffffffffffc}}}, 0x88) socket$inet(0x2, 0x80004, 0x1) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) splice(r0, 0x0, r2, 0x0, 0x1ffe0, 0x0) 16:58:05 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1, 0x0, 0x0, 0xa00000000000000}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) 16:58:05 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000, 0x6000000]}}]}, 0x2b2}}, 0x0) 16:58:05 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x3, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) 16:58:06 executing program 0 (fault-call:8 fault-nth:57): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x3, 0x2) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) splice(r0, 0x0, r2, 0x0, 0x100e0, 0x0) 16:58:06 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1, 0x0, 0x0, 0xa00000000000000}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) 16:58:06 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x3, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) 16:58:06 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000, 0x8000000]}}]}, 0x2b2}}, 0x0) 16:58:06 executing program 2: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x3, 0x2) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) splice(r0, 0x0, r2, 0x0, 0x10005, 0xa000000dc050000) 16:58:06 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x3, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) 16:58:06 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000, 0xa000000]}}]}, 0x2b2}}, 0x0) 16:58:06 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1, 0x0, 0x0, 0xa00000000000000}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) [ 645.331746] net_ratelimit: 99 callbacks suppressed [ 645.331753] neighbour: ndisc_cache: neighbor table overflow! [ 645.374639] neighbour: ndisc_cache: neighbor table overflow! [ 645.376385] FAULT_INJECTION: forcing a failure. [ 645.376385] name failslab, interval 1, probability 0, space 0, times 0 [ 645.384295] neighbour: ndisc_cache: neighbor table overflow! [ 645.395508] CPU: 0 PID: 28235 Comm: syz-executor.0 Not tainted 5.0.0+ #6 [ 645.405246] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 645.407382] neighbour: ndisc_cache: neighbor table overflow! [ 645.414604] Call Trace: [ 645.414627] dump_stack+0x172/0x1f0 [ 645.414647] should_fail.cold+0xa/0x1b [ 645.414664] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 645.414679] ? lock_downgrade+0x810/0x810 [ 645.414695] ? ___might_sleep+0x163/0x280 [ 645.414716] __should_failslab+0x121/0x190 [ 645.414733] should_failslab+0x9/0x14 [ 645.428349] neighbour: ndisc_cache: neighbor table overflow! [ 645.430555] kmem_cache_alloc_node+0x264/0x710 [ 645.430574] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 645.430596] __alloc_skb+0xd5/0x5e0 [ 645.430612] ? skb_scrub_packet+0x440/0x440 [ 645.430628] ? raw_destroy+0x30/0x30 [ 645.430652] __ip_append_data.isra.0+0x24d6/0x2dd0 [ 645.430672] ? raw_destroy+0x30/0x30 [ 645.487370] ? __ip_flush_pending_frames.isra.0+0x2d0/0x2d0 [ 645.493121] ? ipv4_mtu+0x2a9/0x400 [ 645.496767] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 645.496781] ? ip_setup_cork+0x53b/0x870 [ 645.496796] ? raw_destroy+0x30/0x30 [ 645.496811] ip_append_data.part.0+0xf2/0x170 [ 645.496830] ? raw_destroy+0x30/0x30 [ 645.496846] ip_append_data+0x6e/0x90 [ 645.514642] raw_sendmsg+0xbd8/0x2f10 [ 645.514670] ? raw_getsockopt+0x100/0x100 [ 645.514687] ? finish_task_switch+0x146/0x790 [ 645.514711] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 645.539329] ? lockdep_hardirqs_on+0x415/0x5d0 [ 645.543923] ? retint_kernel+0x2d/0x2d [ 645.547831] ? trace_hardirqs_on_caller+0x6a/0x220 [ 645.552778] ? __lock_acquire+0x53b/0x4700 [ 645.557084] ? mark_held_locks+0xb1/0x100 [ 645.561242] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 645.565998] inet_sendmsg+0x147/0x5d0 [ 645.569787] ? raw_getsockopt+0x100/0x100 [ 645.573924] ? inet_sendmsg+0x147/0x5d0 [ 645.577883] ? ipip_gro_receive+0x100/0x100 [ 645.582215] sock_sendmsg+0xdd/0x130 [ 645.585921] kernel_sendmsg+0x44/0x50 [ 645.589718] sock_no_sendpage+0x116/0x150 [ 645.593894] ? sock_kzfree_s+0x70/0x70 [ 645.597814] ? trace_hardirqs_on_caller+0x6a/0x220 [ 645.602749] ? retint_kernel+0x2d/0x2d [ 645.606664] inet_sendpage+0x44a/0x630 [ 645.610582] kernel_sendpage+0x95/0xf0 [ 645.614461] ? inet_sendmsg+0x5d0/0x5d0 [ 645.618415] sock_sendpage+0x8b/0xc0 [ 645.622142] ? lockdep_hardirqs_on+0x415/0x5d0 [ 645.626721] pipe_to_sendpage+0x299/0x370 [ 645.630877] ? kernel_sendpage+0xf0/0xf0 [ 645.634971] ? direct_splice_actor+0x1a0/0x1a0 [ 645.639546] ? __put_page+0x92/0xd0 [ 645.643183] ? anon_pipe_buf_release+0x1c6/0x270 [ 645.647927] __splice_from_pipe+0x39a/0x7e0 [ 645.652231] ? direct_splice_actor+0x1a0/0x1a0 [ 645.656817] ? direct_splice_actor+0x1a0/0x1a0 [ 645.661396] splice_from_pipe+0x108/0x170 [ 645.665555] ? splice_shrink_spd+0xd0/0xd0 [ 645.669796] ? retint_kernel+0x2d/0x2d [ 645.673683] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 645.679221] ? security_file_permission+0x94/0x320 [ 645.684147] generic_splice_sendpage+0x3c/0x50 [ 645.688738] ? splice_from_pipe+0x170/0x170 [ 645.693075] do_splice+0x70a/0x1490 [ 645.696712] ? iterate_fd+0x360/0x360 [ 645.700525] ? opipe_prep.part.0+0x2d0/0x2d0 [ 645.704942] ? __fget_light+0x1a9/0x230 [ 645.708924] __x64_sys_splice+0x2c6/0x330 [ 645.713081] do_syscall_64+0x103/0x610 [ 645.716953] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 645.722130] RIP: 0033:0x457e29 [ 645.725329] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 645.744236] RSP: 002b:00007f2baa4adc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 645.751949] RAX: ffffffffffffffda RBX: 00007f2baa4adc90 RCX: 0000000000457e29 [ 645.759213] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000003 [ 645.766480] RBP: 000000000073bfa0 R08: 00000000000100e0 R09: 0000000000000000 [ 645.773734] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f2baa4ae6d4 [ 645.780990] R13: 00000000004c6c75 R14: 00000000004db870 R15: 0000000000000007 16:58:06 executing program 5: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x3, 0x2) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) splice(r0, 0x0, r2, 0x0, 0x1ffe0, 0x0) setsockopt$l2tp_PPPOL2TP_SO_LNSMODE(r1, 0x111, 0x4, 0x1, 0x4) 16:58:06 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x3, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) 16:58:06 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1, 0x0, 0x0, 0xa00000000000000}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) 16:58:06 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000, 0xc000000]}}]}, 0x2b2}}, 0x0) [ 646.033555] neighbour: ndisc_cache: neighbor table overflow! [ 646.059217] neighbour: ndisc_cache: neighbor table overflow! [ 646.074545] neighbour: ndisc_cache: neighbor table overflow! 16:58:06 executing program 2: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x3, 0x2) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) splice(r0, 0x0, r2, 0x0, 0x10005, 0xa000000e8030000) 16:58:06 executing program 0 (fault-call:8 fault-nth:58): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x3, 0x2) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) splice(r0, 0x0, r2, 0x0, 0x100e0, 0x0) 16:58:06 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x3, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) [ 646.088178] neighbour: ndisc_cache: neighbor table overflow! [ 646.104078] neighbour: ndisc_cache: neighbor table overflow! 16:58:07 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000, 0xe000000]}}]}, 0x2b2}}, 0x0) 16:58:07 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1, 0x0, 0x0, 0xa00000000000000}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) 16:58:07 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x3, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) [ 646.277072] FAULT_INJECTION: forcing a failure. [ 646.277072] name failslab, interval 1, probability 0, space 0, times 0 [ 646.319282] CPU: 0 PID: 28280 Comm: syz-executor.0 Not tainted 5.0.0+ #6 [ 646.326154] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 646.335507] Call Trace: [ 646.338112] dump_stack+0x172/0x1f0 [ 646.341757] should_fail.cold+0xa/0x1b [ 646.345690] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 646.350801] ? lock_downgrade+0x810/0x810 [ 646.354960] ? ___might_sleep+0x163/0x280 [ 646.359126] __should_failslab+0x121/0x190 [ 646.363383] should_failslab+0x9/0x14 [ 646.367207] kmem_cache_alloc_node_trace+0x270/0x720 [ 646.372323] ? __alloc_skb+0xd5/0x5e0 [ 646.376134] ? rcu_lockdep_current_cpu_online+0xe3/0x130 [ 646.381603] __kmalloc_node_track_caller+0x3d/0x70 [ 646.386553] __kmalloc_reserve.isra.0+0x40/0xf0 [ 646.391236] __alloc_skb+0x10b/0x5e0 [ 646.394960] ? skb_scrub_packet+0x440/0x440 [ 646.399280] ? rt_set_nexthop.constprop.0+0x529/0x11d0 [ 646.404582] __ip_append_data.isra.0+0x24d6/0x2dd0 [ 646.409506] ? raw_destroy+0x30/0x30 [ 646.413224] ? __ip_flush_pending_frames.isra.0+0x2d0/0x2d0 [ 646.418941] ? ipv4_mtu+0x2a9/0x400 [ 646.422599] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 646.428138] ? ip_setup_cork+0x53b/0x870 [ 646.432211] ? raw_destroy+0x30/0x30 [ 646.435934] ip_append_data.part.0+0xf2/0x170 [ 646.440444] ? raw_destroy+0x30/0x30 [ 646.444184] ip_append_data+0x6e/0x90 [ 646.447992] raw_sendmsg+0xbd8/0x2f10 [ 646.451823] ? raw_getsockopt+0x100/0x100 [ 646.455987] ? ima_match_policy+0xa19/0x13d0 [ 646.460405] ? process_measurement+0xd5d/0x1570 [ 646.465089] ? process_measurement+0xd5d/0x1570 16:58:07 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1, 0x0, 0x0, 0xa00000000000000}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) 16:58:07 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x3, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) [ 646.469769] ? lock_downgrade+0x810/0x810 [ 646.473933] ? __lock_acquire+0x53b/0x4700 [ 646.478174] ? __lock_acquire+0x53b/0x4700 [ 646.482415] ? __lock_acquire+0x53b/0x4700 [ 646.486677] inet_sendmsg+0x147/0x5d0 [ 646.490484] ? raw_getsockopt+0x100/0x100 [ 646.494640] ? inet_sendmsg+0x147/0x5d0 [ 646.498624] ? ipip_gro_receive+0x100/0x100 [ 646.502958] sock_sendmsg+0xdd/0x130 [ 646.506682] kernel_sendmsg+0x44/0x50 [ 646.510497] sock_no_sendpage+0x116/0x150 [ 646.514686] ? sock_kzfree_s+0x70/0x70 [ 646.518597] ? debug_check_no_obj_freed+0x200/0x464 [ 646.523629] ? mark_held_locks+0xb1/0x100 [ 646.527833] inet_sendpage+0x44a/0x630 [ 646.531757] kernel_sendpage+0x95/0xf0 [ 646.535643] ? inet_sendmsg+0x5d0/0x5d0 [ 646.539619] sock_sendpage+0x8b/0xc0 [ 646.543331] ? lockdep_hardirqs_on+0x415/0x5d0 [ 646.547920] pipe_to_sendpage+0x299/0x370 [ 646.552080] ? kernel_sendpage+0xf0/0xf0 [ 646.556158] ? direct_splice_actor+0x1a0/0x1a0 [ 646.560773] ? __put_page+0x92/0xd0 [ 646.564402] ? anon_pipe_buf_release+0x1c6/0x270 [ 646.569154] __splice_from_pipe+0x39a/0x7e0 [ 646.573475] ? direct_splice_actor+0x1a0/0x1a0 [ 646.578074] ? direct_splice_actor+0x1a0/0x1a0 [ 646.582640] splice_from_pipe+0x108/0x170 [ 646.586769] ? splice_shrink_spd+0xd0/0xd0 [ 646.591003] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 646.596558] ? security_file_permission+0x94/0x320 [ 646.601478] generic_splice_sendpage+0x3c/0x50 [ 646.606059] ? splice_from_pipe+0x170/0x170 [ 646.610373] do_splice+0x70a/0x1490 [ 646.613992] ? iterate_fd+0x360/0x360 [ 646.617776] ? opipe_prep.part.0+0x2d0/0x2d0 [ 646.622170] ? __fget_light+0x1a9/0x230 [ 646.626127] __x64_sys_splice+0x2c6/0x330 [ 646.630279] do_syscall_64+0x103/0x610 [ 646.634167] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 646.639343] RIP: 0033:0x457e29 [ 646.642573] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 646.661453] RSP: 002b:00007f2baa4adc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 646.669138] RAX: ffffffffffffffda RBX: 00007f2baa4adc90 RCX: 0000000000457e29 [ 646.676412] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000003 [ 646.683665] RBP: 000000000073bfa0 R08: 00000000000100e0 R09: 0000000000000000 [ 646.690916] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f2baa4ae6d4 [ 646.698166] R13: 00000000004c6c75 R14: 00000000004db870 R15: 0000000000000007 16:58:07 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1, 0x0, 0x0, 0xa00000000000000}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) 16:58:07 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x3, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) 16:58:07 executing program 5: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x3, 0x2) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @multicast1}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) splice(r0, 0x0, r2, 0x0, 0x1ffe0, 0x0) 16:58:07 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000, 0xf000000]}}]}, 0x2b2}}, 0x0) 16:58:07 executing program 0 (fault-call:8 fault-nth:59): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x3, 0x2) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) splice(r0, 0x0, r2, 0x0, 0x100e0, 0x0) 16:58:07 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x3, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) 16:58:07 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000, 0x10000000]}}]}, 0x2b2}}, 0x0) 16:58:07 executing program 2: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x3, 0x2) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) splice(r0, 0x0, r2, 0x0, 0x10005, 0xa000000f4010000) 16:58:07 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1, 0x0, 0x0, 0xa00000000000000}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) 16:58:08 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x3, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) 16:58:08 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1, 0x0, 0x0, 0xa00000000000000}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) 16:58:08 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000, 0x3f000000]}}]}, 0x2b2}}, 0x0) 16:58:08 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x3, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) 16:58:08 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1, 0x0, 0x0, 0xa00000000000000}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) [ 647.371961] FAULT_INJECTION: forcing a failure. [ 647.371961] name failslab, interval 1, probability 0, space 0, times 0 [ 647.429670] CPU: 0 PID: 28332 Comm: syz-executor.0 Not tainted 5.0.0+ #6 [ 647.436548] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 647.445913] Call Trace: [ 647.448523] dump_stack+0x172/0x1f0 [ 647.452168] should_fail.cold+0xa/0x1b [ 647.456060] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 647.461165] ? lock_downgrade+0x810/0x810 [ 647.465363] ? ___might_sleep+0x163/0x280 [ 647.469526] __should_failslab+0x121/0x190 [ 647.473750] should_failslab+0x9/0x14 [ 647.477535] kmem_cache_alloc_node+0x264/0x710 [ 647.482111] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 647.487657] ? ip_generic_getfrag+0x120/0x230 [ 647.492166] __alloc_skb+0xd5/0x5e0 [ 647.495784] ? skb_scrub_packet+0x440/0x440 [ 647.500099] ? raw_getfrag+0x164/0x230 [ 647.504026] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 647.509029] __ip_append_data.isra.0+0x24d6/0x2dd0 [ 647.513982] ? raw_destroy+0x30/0x30 [ 647.517693] ? __ip_flush_pending_frames.isra.0+0x2d0/0x2d0 [ 647.523397] ? ipv4_mtu+0x2a9/0x400 [ 647.527010] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 647.532532] ? ip_setup_cork+0x53b/0x870 [ 647.536595] ? raw_destroy+0x30/0x30 [ 647.540303] ip_append_data.part.0+0xf2/0x170 [ 647.544791] ? raw_destroy+0x30/0x30 [ 647.548512] ip_append_data+0x6e/0x90 [ 647.552331] raw_sendmsg+0xbd8/0x2f10 [ 647.556140] ? raw_getsockopt+0x100/0x100 [ 647.560310] ? __lock_acquire+0x53b/0x4700 [ 647.564553] ? check_preemption_disabled+0x48/0x290 [ 647.569732] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 647.574488] ? lockdep_hardirqs_on+0x415/0x5d0 [ 647.579070] ? retint_kernel+0x2d/0x2d [ 647.582969] ? trace_hardirqs_on_caller+0x6a/0x220 [ 647.587896] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 647.592642] ? retint_kernel+0x2d/0x2d [ 647.596533] inet_sendmsg+0x147/0x5d0 [ 647.600345] ? raw_getsockopt+0x100/0x100 [ 647.604489] ? inet_sendmsg+0x147/0x5d0 [ 647.608454] ? ipip_gro_receive+0x100/0x100 [ 647.612764] sock_sendmsg+0xdd/0x130 [ 647.616478] kernel_sendmsg+0x44/0x50 [ 647.620295] sock_no_sendpage+0x116/0x150 [ 647.624440] ? sock_kzfree_s+0x70/0x70 [ 647.628316] ? trace_hardirqs_on_caller+0x6a/0x220 [ 647.633237] ? retint_kernel+0x2d/0x2d [ 647.637121] inet_sendpage+0x44a/0x630 [ 647.641007] kernel_sendpage+0x95/0xf0 [ 647.644907] ? inet_sendmsg+0x5d0/0x5d0 [ 647.648868] sock_sendpage+0x8b/0xc0 [ 647.652582] ? lockdep_hardirqs_on+0x415/0x5d0 [ 647.657155] pipe_to_sendpage+0x299/0x370 [ 647.661295] ? kernel_sendpage+0xf0/0xf0 [ 647.665367] ? direct_splice_actor+0x1a0/0x1a0 [ 647.669960] ? __put_page+0x92/0xd0 [ 647.673590] ? anon_pipe_buf_release+0x1c6/0x270 [ 647.678337] __splice_from_pipe+0x39a/0x7e0 [ 647.682647] ? direct_splice_actor+0x1a0/0x1a0 [ 647.687221] ? direct_splice_actor+0x1a0/0x1a0 [ 647.691800] splice_from_pipe+0x108/0x170 [ 647.695965] ? splice_shrink_spd+0xd0/0xd0 [ 647.700225] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 647.705787] ? security_file_permission+0x94/0x320 [ 647.710722] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 647.715490] generic_splice_sendpage+0x3c/0x50 [ 647.720071] ? splice_from_pipe+0x170/0x170 [ 647.724383] do_splice+0x70a/0x1490 [ 647.728000] ? retint_kernel+0x2d/0x2d [ 647.731870] ? opipe_prep.part.0+0x2d0/0x2d0 [ 647.736277] __x64_sys_splice+0x2c6/0x330 [ 647.740424] do_syscall_64+0x103/0x610 [ 647.744308] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 647.749495] RIP: 0033:0x457e29 [ 647.752673] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 647.771575] RSP: 002b:00007f2baa4adc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 16:58:08 executing program 5: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f00000003c0)=ANY=[@ANYRESOCT=r2, @ANYRESHEX=r0, @ANYPTR64=&(0x7f0000000280)=ANY=[@ANYRES32=r2, @ANYPTR64=&(0x7f0000000200)=ANY=[@ANYRES16, @ANYRESDEC, @ANYPTR, @ANYRES16=r1, @ANYPTR64, @ANYRESHEX=r0, @ANYPTR64], @ANYRES32=r2, @ANYBLOB="58e8f567c99ec49a14874f7d904448b55b0125a1cd165369af98cd90e8c11217d383c6a94f18147e779a30c192cf08de434f224715514b8986d910bc195978cf4d294bdb54df806cc17c0fd4f682d641abdef3a33dd81593", @ANYRES16=r1], @ANYRESOCT=r1, @ANYRESHEX=r0, @ANYRESOCT=r2, @ANYPTR64=&(0x7f0000000380)=ANY=[@ANYRES16=r1, @ANYPTR=&(0x7f0000000300)=ANY=[@ANYBLOB="e6638fe3ae7a429a59f91c1ab6a430e17f6eb4c317baf5ac41d803d46c841cfdd142ff32129e28ce9f4038588a667dfe", @ANYRES64=r2, @ANYRES16=r0, @ANYRES32=r0, @ANYRES32=r2], @ANYRES64=r2, @ANYRESDEC=r2]], 0x79) socket$inet(0x2, 0x3, 0x2) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/zero\x00', 0x230002, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x40000, 0x0) splice(r0, 0x0, r2, 0x0, 0x1ffe0, 0x0) 16:58:08 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000, 0x60000000]}}]}, 0x2b2}}, 0x0) [ 647.779282] RAX: ffffffffffffffda RBX: 00007f2baa4adc90 RCX: 0000000000457e29 [ 647.786558] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000003 [ 647.793814] RBP: 000000000073bfa0 R08: 00000000000100e0 R09: 0000000000000000 [ 647.801079] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f2baa4ae6d4 [ 647.808349] R13: 00000000004c6c75 R14: 00000000004db870 R15: 0000000000000007 16:58:08 executing program 0 (fault-call:8 fault-nth:60): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x3, 0x2) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) splice(r0, 0x0, r2, 0x0, 0x100e0, 0x0) 16:58:08 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1, 0x0, 0x0, 0xa00000000000000}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) 16:58:08 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x3, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) 16:58:08 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000, 0x65580000]}}]}, 0x2b2}}, 0x0) 16:58:08 executing program 5: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x3, 0x2) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) ioctl$TIOCSCTTY(r1, 0x540e, 0x20) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PIO_UNISCRNMAP(r0, 0x4b6a, &(0x7f0000000000)="43b79358cd918290bcead8e9cfa7096cb35fec8bd7b0479b993f0c9219d11389c839e17fde604a7736448d210c7d872dedc982824dcf453f66bec3") splice(r0, 0x0, r2, 0x0, 0x1ffe0, 0x0) 16:58:08 executing program 2: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x3, 0x2) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) splice(r0, 0x0, r2, 0x0, 0x10005, 0xa000000ffffff97) 16:58:08 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000, 0x81000000]}}]}, 0x2b2}}, 0x0) 16:58:08 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1, 0x0, 0x0, 0xa00000000000000}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) 16:58:08 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x3, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) [ 648.220390] FAULT_INJECTION: forcing a failure. [ 648.220390] name failslab, interval 1, probability 0, space 0, times 0 [ 648.243058] CPU: 0 PID: 28388 Comm: syz-executor.0 Not tainted 5.0.0+ #6 [ 648.249945] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 648.259334] Call Trace: [ 648.261945] dump_stack+0x172/0x1f0 [ 648.265593] should_fail.cold+0xa/0x1b [ 648.269498] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 648.274614] ? lock_downgrade+0x810/0x810 [ 648.278772] ? ___might_sleep+0x163/0x280 [ 648.282940] __should_failslab+0x121/0x190 [ 648.287200] should_failslab+0x9/0x14 [ 648.291016] kmem_cache_alloc_node_trace+0x270/0x720 [ 648.296129] ? __alloc_skb+0xd5/0x5e0 [ 648.299954] ? rcu_lockdep_current_cpu_online+0xe3/0x130 [ 648.305424] __kmalloc_node_track_caller+0x3d/0x70 [ 648.310384] __kmalloc_reserve.isra.0+0x40/0xf0 [ 648.315079] __alloc_skb+0x10b/0x5e0 16:58:09 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1, 0x0, 0x0, 0xa00000000000000}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) [ 648.318812] ? skb_scrub_packet+0x440/0x440 [ 648.323160] ? raw_getfrag+0x164/0x230 [ 648.327058] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 648.332098] __ip_append_data.isra.0+0x24d6/0x2dd0 [ 648.337048] ? raw_destroy+0x30/0x30 [ 648.340790] ? __ip_flush_pending_frames.isra.0+0x2d0/0x2d0 [ 648.346514] ? ipv4_mtu+0x2a9/0x400 [ 648.350153] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 648.355699] ? ip_setup_cork+0x53b/0x870 [ 648.359766] ? raw_destroy+0x30/0x30 [ 648.363491] ip_append_data.part.0+0xf2/0x170 [ 648.368008] ? raw_destroy+0x30/0x30 [ 648.371745] ip_append_data+0x6e/0x90 [ 648.375566] raw_sendmsg+0xbd8/0x2f10 [ 648.379379] ? write_comp_data+0x52/0x70 [ 648.383458] ? raw_getsockopt+0x100/0x100 [ 648.387627] ? visit_groups_merge+0x4c0/0x5d0 [ 648.392135] ? perf_event_pid_type+0xf0/0xf0 [ 648.396556] ? check_preemption_disabled+0x48/0x290 [ 648.401585] ? __perf_event_task_sched_in+0x640/0x820 [ 648.406782] ? find_held_lock+0x35/0x130 [ 648.410855] ? mark_held_locks+0x100/0x100 [ 648.415096] ? lock_downgrade+0x810/0x810 16:58:09 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x3, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) [ 648.419244] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 648.424814] ? check_preemption_disabled+0x48/0x290 [ 648.429837] ? finish_task_switch+0x146/0x790 [ 648.434381] inet_sendmsg+0x147/0x5d0 [ 648.438209] ? raw_getsockopt+0x100/0x100 [ 648.442367] ? inet_sendmsg+0x147/0x5d0 [ 648.446344] ? ipip_gro_receive+0x100/0x100 [ 648.450685] sock_sendmsg+0xdd/0x130 [ 648.454410] kernel_sendmsg+0x44/0x50 [ 648.458330] sock_no_sendpage+0x116/0x150 [ 648.462506] ? sock_kzfree_s+0x70/0x70 [ 648.466425] ? lockdep_hardirqs_on+0x415/0x5d0 [ 648.471012] ? retint_kernel+0x2d/0x2d [ 648.474949] inet_sendpage+0x44a/0x630 [ 648.478847] kernel_sendpage+0x95/0xf0 [ 648.482740] ? inet_sendmsg+0x5d0/0x5d0 [ 648.486725] sock_sendpage+0x8b/0xc0 [ 648.490450] pipe_to_sendpage+0x299/0x370 [ 648.494607] ? kernel_sendpage+0xf0/0xf0 [ 648.498702] ? direct_splice_actor+0x1a0/0x1a0 [ 648.503317] ? __splice_from_pipe+0x590/0x7e0 [ 648.507826] __splice_from_pipe+0x39a/0x7e0 [ 648.512160] ? direct_splice_actor+0x1a0/0x1a0 [ 648.516752] ? direct_splice_actor+0x1a0/0x1a0 [ 648.521339] splice_from_pipe+0x108/0x170 [ 648.525498] ? splice_shrink_spd+0xd0/0xd0 [ 648.529744] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 648.535297] ? security_file_permission+0x94/0x320 [ 648.540237] generic_splice_sendpage+0x3c/0x50 [ 648.544832] ? splice_from_pipe+0x170/0x170 [ 648.549159] do_splice+0x70a/0x1490 [ 648.552793] ? iterate_fd+0x360/0x360 [ 648.556606] ? opipe_prep.part.0+0x2d0/0x2d0 [ 648.561037] ? __fget_light+0x1a9/0x230 [ 648.565023] __x64_sys_splice+0x2c6/0x330 16:58:09 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1, 0x0, 0x0, 0xa00000000000000}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) [ 648.569192] do_syscall_64+0x103/0x610 [ 648.573087] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 648.578306] RIP: 0033:0x457e29 [ 648.581495] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 648.581503] RSP: 002b:00007f2baa4adc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 648.581517] RAX: ffffffffffffffda RBX: 00007f2baa4adc90 RCX: 0000000000457e29 [ 648.581524] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000003 [ 648.581532] RBP: 000000000073bfa0 R08: 00000000000100e0 R09: 0000000000000000 [ 648.581540] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f2baa4ae6d4 [ 648.581551] R13: 00000000004c6c75 R14: 00000000004db870 R15: 0000000000000007 16:58:09 executing program 0 (fault-call:8 fault-nth:61): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x3, 0x2) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) splice(r0, 0x0, r2, 0x0, 0x100e0, 0x0) 16:58:09 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000, 0x82020000]}}]}, 0x2b2}}, 0x0) 16:58:09 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x3, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) 16:58:09 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1, 0x0, 0x0, 0xa00000000000000}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) 16:58:09 executing program 5: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x3, 0x2) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) splice(r0, 0x0, r2, 0x0, 0x1ffe0, 0x0) ioctl$GIO_SCRNMAP(r1, 0x4b40, &(0x7f0000000200)=""/178) 16:58:09 executing program 2: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x3, 0x2) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r2, &(0x7f00000000c0)={0x2, 0x4e24, @multicast1}, 0x10) syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x9, 0x940) perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) splice(r0, 0x0, r2, 0x0, 0x10005, 0xa00000000000000) 16:58:09 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x3, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) 16:58:09 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000, 0x88a8ffff]}}]}, 0x2b2}}, 0x0) 16:58:09 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1, 0x0, 0x0, 0xa00000000000000}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) [ 649.037921] FAULT_INJECTION: forcing a failure. [ 649.037921] name failslab, interval 1, probability 0, space 0, times 0 [ 649.146988] CPU: 1 PID: 28429 Comm: syz-executor.0 Not tainted 5.0.0+ #6 [ 649.153844] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 649.163194] Call Trace: [ 649.165798] dump_stack+0x172/0x1f0 [ 649.169443] should_fail.cold+0xa/0x1b [ 649.173355] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 649.178481] ? lock_downgrade+0x810/0x810 [ 649.182654] ? ___might_sleep+0x163/0x280 [ 649.186847] __should_failslab+0x121/0x190 [ 649.191136] should_failslab+0x9/0x14 [ 649.194942] kmem_cache_alloc_node+0x264/0x710 [ 649.199528] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 649.205088] ? ip_generic_getfrag+0x120/0x230 [ 649.209599] __alloc_skb+0xd5/0x5e0 [ 649.213240] ? skb_scrub_packet+0x440/0x440 [ 649.217602] ? raw_getfrag+0x164/0x230 [ 649.221508] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 649.226545] __ip_append_data.isra.0+0x24d6/0x2dd0 [ 649.231493] ? raw_destroy+0x30/0x30 [ 649.235233] ? __ip_flush_pending_frames.isra.0+0x2d0/0x2d0 [ 649.240977] ? ipv4_mtu+0x2a9/0x400 [ 649.244609] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 649.250157] ? ip_setup_cork+0x53b/0x870 [ 649.254242] ? raw_destroy+0x30/0x30 [ 649.258015] ip_append_data.part.0+0xf2/0x170 [ 649.262542] ? raw_destroy+0x30/0x30 [ 649.266292] ip_append_data+0x6e/0x90 [ 649.270115] raw_sendmsg+0xbd8/0x2f10 [ 649.273945] ? raw_getsockopt+0x100/0x100 [ 649.278109] ? ima_match_policy+0xa19/0x13d0 [ 649.282524] ? process_measurement+0xd5d/0x1570 [ 649.287367] ? process_measurement+0xd5d/0x1570 [ 649.292096] ? lock_downgrade+0x810/0x810 [ 649.296256] ? __lock_acquire+0x53b/0x4700 [ 649.300523] ? __lock_acquire+0x53b/0x4700 [ 649.304782] ? __lock_acquire+0x53b/0x4700 [ 649.309095] inet_sendmsg+0x147/0x5d0 [ 649.312946] ? raw_getsockopt+0x100/0x100 [ 649.317109] ? inet_sendmsg+0x147/0x5d0 [ 649.321104] ? ipip_gro_receive+0x100/0x100 [ 649.325469] sock_sendmsg+0xdd/0x130 [ 649.329199] kernel_sendmsg+0x44/0x50 [ 649.333021] sock_no_sendpage+0x116/0x150 [ 649.337178] ? sock_kzfree_s+0x70/0x70 [ 649.341072] ? debug_check_no_obj_freed+0x200/0x464 [ 649.346101] ? mark_held_locks+0xb1/0x100 [ 649.350256] inet_sendpage+0x44a/0x630 [ 649.354191] kernel_sendpage+0x95/0xf0 [ 649.358078] ? inet_sendmsg+0x5d0/0x5d0 [ 649.362081] sock_sendpage+0x8b/0xc0 [ 649.362095] ? lockdep_hardirqs_on+0x415/0x5d0 [ 649.362117] pipe_to_sendpage+0x299/0x370 [ 649.362133] ? kernel_sendpage+0xf0/0xf0 [ 649.374569] ? direct_splice_actor+0x1a0/0x1a0 [ 649.374588] ? __put_page+0x92/0xd0 [ 649.374607] ? anon_pipe_buf_release+0x1c6/0x270 [ 649.374628] __splice_from_pipe+0x39a/0x7e0 16:58:09 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000, 0x9d020000]}}]}, 0x2b2}}, 0x0) 16:58:10 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000, 0x9effffff]}}]}, 0x2b2}}, 0x0) 16:58:10 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x3, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) [ 649.374646] ? direct_splice_actor+0x1a0/0x1a0 [ 649.383301] ? direct_splice_actor+0x1a0/0x1a0 [ 649.383329] splice_from_pipe+0x108/0x170 [ 649.383348] ? splice_shrink_spd+0xd0/0xd0 [ 649.383382] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 649.383401] ? security_file_permission+0x94/0x320 [ 649.391759] generic_splice_sendpage+0x3c/0x50 [ 649.391773] ? splice_from_pipe+0x170/0x170 [ 649.391797] do_splice+0x70a/0x1490 [ 649.391816] ? iterate_fd+0x360/0x360 [ 649.391836] ? opipe_prep.part.0+0x2d0/0x2d0 [ 649.400932] ? __fget_light+0x1a9/0x230 [ 649.400953] __x64_sys_splice+0x2c6/0x330 [ 649.400980] do_syscall_64+0x103/0x610 [ 649.401001] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 649.401017] RIP: 0033:0x457e29 [ 649.409758] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 649.409766] RSP: 002b:00007f2baa4adc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 649.409781] RAX: ffffffffffffffda RBX: 00007f2baa4adc90 RCX: 0000000000457e29 [ 649.409797] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000003 [ 649.409806] RBP: 000000000073bfa0 R08: 00000000000100e0 R09: 0000000000000000 [ 649.409815] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f2baa4ae6d4 [ 649.409823] R13: 00000000004c6c75 R14: 00000000004db870 R15: 0000000000000007 16:58:10 executing program 0 (fault-call:8 fault-nth:62): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x3, 0x2) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) splice(r0, 0x0, r2, 0x0, 0x100e0, 0x0) 16:58:10 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000, 0xa0008000]}}]}, 0x2b2}}, 0x0) 16:58:10 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x3, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) 16:58:10 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1, 0x0, 0x0, 0xa00000000000000}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) [ 649.917097] FAULT_INJECTION: forcing a failure. [ 649.917097] name failslab, interval 1, probability 0, space 0, times 0 [ 650.056962] CPU: 1 PID: 28472 Comm: syz-executor.0 Not tainted 5.0.0+ #6 [ 650.063837] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 650.073215] Call Trace: [ 650.075820] dump_stack+0x172/0x1f0 [ 650.079462] should_fail.cold+0xa/0x1b [ 650.083393] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 650.088516] ? lock_downgrade+0x810/0x810 [ 650.092683] ? ___might_sleep+0x163/0x280 [ 650.096860] __should_failslab+0x121/0x190 [ 650.101110] should_failslab+0x9/0x14 [ 650.104919] kmem_cache_alloc_node_trace+0x270/0x720 [ 650.110028] ? __alloc_skb+0xd5/0x5e0 [ 650.113839] ? rcu_lockdep_current_cpu_online+0xe3/0x130 [ 650.119338] __kmalloc_node_track_caller+0x3d/0x70 [ 650.119356] __kmalloc_reserve.isra.0+0x40/0xf0 [ 650.119374] __alloc_skb+0x10b/0x5e0 [ 650.119390] ? skb_scrub_packet+0x440/0x440 [ 650.128992] ? raw_getfrag+0x164/0x230 [ 650.129007] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 650.129059] __ip_append_data.isra.0+0x24d6/0x2dd0 [ 650.129095] ? raw_destroy+0x30/0x30 [ 650.154604] ? __ip_flush_pending_frames.isra.0+0x2d0/0x2d0 [ 650.160358] ? ipv4_mtu+0x2a9/0x400 [ 650.163970] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 650.169502] ? ip_setup_cork+0x53b/0x870 [ 650.173566] ? raw_destroy+0x30/0x30 [ 650.177281] ip_append_data.part.0+0xf2/0x170 [ 650.181764] ? raw_destroy+0x30/0x30 [ 650.185467] ip_append_data+0x6e/0x90 [ 650.189281] raw_sendmsg+0xbd8/0x2f10 [ 650.193098] ? raw_getsockopt+0x100/0x100 [ 650.197244] ? ima_match_policy+0xa19/0x13d0 [ 650.201642] ? process_measurement+0xd5d/0x1570 [ 650.206298] ? process_measurement+0xd5d/0x1570 [ 650.210962] ? lock_downgrade+0x810/0x810 [ 650.215095] ? __lock_acquire+0x53b/0x4700 [ 650.219316] ? __lock_acquire+0x53b/0x4700 [ 650.223534] ? __lock_acquire+0x53b/0x4700 [ 650.227755] inet_sendmsg+0x147/0x5d0 [ 650.231536] ? raw_getsockopt+0x100/0x100 [ 650.235665] ? inet_sendmsg+0x147/0x5d0 [ 650.239637] ? ipip_gro_receive+0x100/0x100 [ 650.243958] sock_sendmsg+0xdd/0x130 [ 650.247656] kernel_sendmsg+0x44/0x50 [ 650.251441] sock_no_sendpage+0x116/0x150 [ 650.255583] ? sock_kzfree_s+0x70/0x70 [ 650.259471] ? debug_check_no_obj_freed+0x200/0x464 [ 650.264471] ? mark_held_locks+0xb1/0x100 [ 650.268602] inet_sendpage+0x44a/0x630 [ 650.272471] kernel_sendpage+0x95/0xf0 [ 650.276339] ? inet_sendmsg+0x5d0/0x5d0 [ 650.280297] sock_sendpage+0x8b/0xc0 [ 650.283988] ? lockdep_hardirqs_on+0x415/0x5d0 [ 650.288554] pipe_to_sendpage+0x299/0x370 [ 650.292685] ? kernel_sendpage+0xf0/0xf0 [ 650.296729] ? direct_splice_actor+0x1a0/0x1a0 [ 650.301298] ? __put_page+0x92/0xd0 [ 650.304919] ? anon_pipe_buf_release+0x1c6/0x270 [ 650.309672] __splice_from_pipe+0x39a/0x7e0 [ 650.313974] ? direct_splice_actor+0x1a0/0x1a0 [ 650.318539] ? direct_splice_actor+0x1a0/0x1a0 [ 650.323133] splice_from_pipe+0x108/0x170 [ 650.327280] ? splice_shrink_spd+0xd0/0xd0 [ 650.331499] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 650.337016] ? security_file_permission+0x94/0x320 [ 650.341927] generic_splice_sendpage+0x3c/0x50 [ 650.346488] ? splice_from_pipe+0x170/0x170 [ 650.350794] do_splice+0x70a/0x1490 [ 650.354402] ? iterate_fd+0x360/0x360 [ 650.358182] ? opipe_prep.part.0+0x2d0/0x2d0 [ 650.362573] ? __fget_light+0x1a9/0x230 [ 650.366544] __x64_sys_splice+0x2c6/0x330 [ 650.370682] do_syscall_64+0x103/0x610 [ 650.374554] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 650.379724] RIP: 0033:0x457e29 [ 650.382902] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 16:58:11 executing program 5: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x3, 0x2) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) mq_unlink(&(0x7f0000000000)='\x00') connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) splice(r0, 0x0, r2, 0x0, 0x1ffe0, 0x0) 16:58:11 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x3, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) 16:58:11 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1, 0x0, 0x0, 0xa00000000000000}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) 16:58:11 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000, 0xa0010000]}}]}, 0x2b2}}, 0x0) 16:58:11 executing program 2: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x0, 0xffefffff) setsockopt$IP_VS_SO_SET_TIMEOUT(r2, 0x0, 0x48a, &(0x7f0000000000)={0x8001, 0x3, 0x7ff}, 0xc) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) splice(r0, 0x0, r2, 0x0, 0x10005, 0xa00000000000000) [ 650.401795] RSP: 002b:00007f2baa4adc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 650.409484] RAX: ffffffffffffffda RBX: 00007f2baa4adc90 RCX: 0000000000457e29 [ 650.416745] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000003 [ 650.423994] RBP: 000000000073bfa0 R08: 00000000000100e0 R09: 0000000000000000 [ 650.431245] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f2baa4ae6d4 [ 650.438514] R13: 00000000004c6c75 R14: 00000000004db870 R15: 0000000000000007 [ 650.477692] net_ratelimit: 78 callbacks suppressed [ 650.477699] neighbour: ndisc_cache: neighbor table overflow! [ 650.498938] neighbour: ndisc_cache: neighbor table overflow! [ 650.508093] neighbour: ndisc_cache: neighbor table overflow! [ 650.516322] neighbour: ndisc_cache: neighbor table overflow! 16:58:11 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000, 0xf0ffffff]}}]}, 0x2b2}}, 0x0) 16:58:11 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1, 0x0, 0x0, 0xa00000000000000}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) [ 650.525237] neighbour: ndisc_cache: neighbor table overflow! [ 650.538929] neighbour: ndisc_cache: neighbor table overflow! 16:58:11 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x3, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) [ 650.599355] neighbour: ndisc_cache: neighbor table overflow! [ 650.616347] neighbour: ndisc_cache: neighbor table overflow! 16:58:11 executing program 0 (fault-call:8 fault-nth:63): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x3, 0x2) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) splice(r0, 0x0, r2, 0x0, 0x100e0, 0x0) 16:58:11 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000, 0xffffa888]}}]}, 0x2b2}}, 0x0) [ 650.645638] neighbour: ndisc_cache: neighbor table overflow! [ 650.675478] neighbour: ndisc_cache: neighbor table overflow! 16:58:11 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x3, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) 16:58:11 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000, 0xfffff000]}}]}, 0x2b2}}, 0x0) [ 650.871425] FAULT_INJECTION: forcing a failure. [ 650.871425] name failslab, interval 1, probability 0, space 0, times 0 [ 650.884659] CPU: 0 PID: 28512 Comm: syz-executor.0 Not tainted 5.0.0+ #6 [ 650.891502] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 650.891509] Call Trace: [ 650.891535] dump_stack+0x172/0x1f0 [ 650.891559] should_fail.cold+0xa/0x1b [ 650.891583] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 650.907149] __should_failslab+0x121/0x190 [ 650.907169] should_failslab+0x9/0x14 [ 650.907183] kmem_cache_alloc+0x47/0x6f0 [ 650.907208] skb_clone+0x150/0x3b0 [ 650.931761] ip_mc_output+0x3aa/0xf70 [ 650.935580] ? __ip_queue_xmit+0x1bf0/0x1bf0 [ 650.940015] ? rcu_lockdep_current_cpu_online+0xe3/0x130 [ 650.945483] ? ip_append_data.part.0+0x170/0x170 [ 650.950241] ? dst_release+0x62/0xb0 [ 650.953970] ? __ip_make_skb+0xf93/0x1820 [ 650.958117] ip_local_out+0xc4/0x1b0 [ 650.961870] ip_send_skb+0x42/0xf0 [ 650.965430] ip_push_pending_frames+0x64/0x80 [ 650.969936] raw_sendmsg+0x1e5d/0x2f10 [ 650.973849] ? raw_getsockopt+0x100/0x100 [ 650.978003] ? ima_match_policy+0xa19/0x13d0 [ 650.982420] ? process_measurement+0xd5d/0x1570 [ 650.987116] ? mark_held_locks+0xb1/0x100 [ 650.991268] ? lockdep_hardirqs_on+0x415/0x5d0 [ 650.995862] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 651.000616] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 651.005357] ? __lock_acquire+0x53b/0x4700 [ 651.009593] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 651.014338] inet_sendmsg+0x147/0x5d0 [ 651.018122] ? raw_getsockopt+0x100/0x100 [ 651.022251] ? inet_sendmsg+0x147/0x5d0 [ 651.026221] ? ipip_gro_receive+0x100/0x100 [ 651.030560] sock_sendmsg+0xdd/0x130 [ 651.034279] kernel_sendmsg+0x44/0x50 [ 651.038093] sock_no_sendpage+0x116/0x150 [ 651.042227] ? sock_kzfree_s+0x70/0x70 [ 651.046097] ? debug_check_no_obj_freed+0x200/0x464 [ 651.051116] ? mark_held_locks+0xb1/0x100 [ 651.055267] inet_sendpage+0x44a/0x630 [ 651.059143] kernel_sendpage+0x95/0xf0 [ 651.063010] ? inet_sendmsg+0x5d0/0x5d0 [ 651.066967] sock_sendpage+0x8b/0xc0 [ 651.070668] pipe_to_sendpage+0x299/0x370 [ 651.074807] ? kernel_sendpage+0xf0/0xf0 [ 651.078860] ? direct_splice_actor+0x1a0/0x1a0 [ 651.083455] ? __splice_from_pipe+0x590/0x7e0 [ 651.087979] __splice_from_pipe+0x39a/0x7e0 [ 651.092322] ? direct_splice_actor+0x1a0/0x1a0 [ 651.096891] ? direct_splice_actor+0x1a0/0x1a0 [ 651.101454] splice_from_pipe+0x108/0x170 [ 651.105583] ? splice_shrink_spd+0xd0/0xd0 [ 651.109821] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 651.115375] ? security_file_permission+0x94/0x320 [ 651.120303] generic_splice_sendpage+0x3c/0x50 [ 651.124868] ? splice_from_pipe+0x170/0x170 [ 651.129172] do_splice+0x70a/0x1490 [ 651.132792] ? retint_kernel+0x2d/0x2d [ 651.136673] ? opipe_prep.part.0+0x2d0/0x2d0 [ 651.141086] ? do_splice+0x13/0x1490 [ 651.144803] __x64_sys_splice+0x2c6/0x330 [ 651.148959] do_syscall_64+0x103/0x610 [ 651.152857] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 651.158037] RIP: 0033:0x457e29 [ 651.161209] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 651.180098] RSP: 002b:00007f2baa4adc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 651.187782] RAX: ffffffffffffffda RBX: 00007f2baa4adc90 RCX: 0000000000457e29 [ 651.195057] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000003 [ 651.202352] RBP: 000000000073bfa0 R08: 00000000000100e0 R09: 0000000000000000 [ 651.209616] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f2baa4ae6d4 [ 651.216877] R13: 00000000004c6c75 R14: 00000000004db870 R15: 0000000000000007 16:58:12 executing program 5: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x3, 0x2) getdents(r1, &(0x7f0000000280)=""/89, 0x59) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f00000001c0)=@req={0x3ebc, 0x4, 0xffff, 0x3f}, 0x10) bind$inet(r2, &(0x7f00000000c0)={0x2, 0x4e22, @broadcast}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$x25(r0, &(0x7f0000000080)={0x9, @remote={[], 0x3}}, 0x12) splice(r0, 0x0, r2, 0x0, 0x1ffe0, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000000)={@rand_addr, @multicast1}, &(0x7f0000000100)=0xc) 16:58:12 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0xf, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1, 0x0, 0x0, 0xa00000000000000}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) 16:58:12 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x3, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) 16:58:12 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000, 0xffffff7f]}}]}, 0x2b2}}, 0x0) 16:58:12 executing program 2: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x3, 0x2) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r1, &(0x7f0000000200)="55be27d7a1600f4861e436e0b71eadf1385abf3fda9604f7bcab7ed589a21f12b28f1130c3b3edee03d6be06f60cc0c7d4d65491d67ac957cc2cbac5716e7fba8e8f7ab86b21d9791dc072b4afcd75d8cd9e2d238398a852160ea83f256634a52e71a36474d0fb5e94c537516c9ecc1f98bbbe7aa50edb0cbbf09e7211a2dd8e8901b4a40c0887b8028c29ad7a0a815cc3f29139a74673b2", &(0x7f00000000c0)="0a23d139bcc2cb8b6c59900f852257439d39bac886b95eed6564e1b9dbd96821201d5f113011ca113282db9b0ff2912551c0b72188d3d1b4"}, 0x20) sync_file_range(0xffffffffffffffff, 0xffffffffffff7fff, 0x0, 0x0) ioctl$VIDIOC_DBG_S_REGISTER(r1, 0x4038564f, &(0x7f0000000000)={{0x3, @name="00becc592c8cba135a0a772f8f0ec0041f5b087992595957e98549331b06a2e4"}, 0x8, 0x80000001, 0x8}) splice(r0, 0x0, r2, 0x0, 0x10005, 0xa00000000000000) 16:58:12 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0xf, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x3, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) 16:58:12 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x10, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1, 0x0, 0x0, 0xa00000000000000}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) 16:58:12 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000, 0xffffff9e]}}]}, 0x2b2}}, 0x0) 16:58:12 executing program 0 (fault-call:8 fault-nth:64): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x3, 0x2) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) splice(r0, 0x0, r2, 0x0, 0x100e0, 0x0) 16:58:12 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000, 0xfffffff0]}}]}, 0x2b2}}, 0x0) 16:58:12 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x10, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x3, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) 16:58:12 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x1b, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1, 0x0, 0x0, 0xa00000000000000}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) [ 651.762940] FAULT_INJECTION: forcing a failure. [ 651.762940] name failslab, interval 1, probability 0, space 0, times 0 [ 651.818324] CPU: 1 PID: 28560 Comm: syz-executor.0 Not tainted 5.0.0+ #6 [ 651.825186] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 651.834534] Call Trace: [ 651.837143] dump_stack+0x172/0x1f0 [ 651.840783] should_fail.cold+0xa/0x1b [ 651.844686] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 651.849818] ? lock_downgrade+0x810/0x810 [ 651.853974] __should_failslab+0x121/0x190 [ 651.858210] should_failslab+0x9/0x14 [ 651.861994] kmem_cache_alloc+0x47/0x6f0 [ 651.866040] ? __lock_is_held+0xb6/0x140 [ 651.870093] ? check_preemption_disabled+0x48/0x290 [ 651.875097] dst_alloc+0x10e/0x1d0 [ 651.878626] rt_dst_alloc+0x83/0x3f0 [ 651.882349] ip_route_output_key_hash_rcu+0x97d/0x30e0 [ 651.887632] ? ip_route_input_noref+0x280/0x280 [ 651.892304] ? kasan_check_read+0x11/0x20 [ 651.896451] ip_route_output_key_hash+0x212/0x380 [ 651.901334] ? ip_route_output_key_hash_rcu+0x30e0/0x30e0 [ 651.906869] ? raw_sendmsg+0x6b0/0x2f10 [ 651.910832] ? lock_downgrade+0x810/0x810 [ 651.914996] ip_route_output_flow+0x28/0xc0 [ 651.919320] raw_sendmsg+0xa10/0x2f10 [ 651.923113] ? raw_getsockopt+0x100/0x100 [ 651.927249] ? ima_match_policy+0xa19/0x13d0 [ 651.931663] ? process_measurement+0xd5d/0x1570 [ 651.936317] ? process_measurement+0xd5d/0x1570 [ 651.940984] ? lock_downgrade+0x810/0x810 [ 651.945134] ? __lock_acquire+0x53b/0x4700 [ 651.949368] ? __lock_acquire+0x53b/0x4700 [ 651.953586] ? __lock_acquire+0x53b/0x4700 [ 651.957828] inet_sendmsg+0x147/0x5d0 [ 651.961638] ? raw_getsockopt+0x100/0x100 [ 651.965771] ? inet_sendmsg+0x147/0x5d0 [ 651.969745] ? ipip_gro_receive+0x100/0x100 [ 651.974056] sock_sendmsg+0xdd/0x130 [ 651.977757] kernel_sendmsg+0x44/0x50 [ 651.981544] sock_no_sendpage+0x116/0x150 [ 651.985673] ? sock_kzfree_s+0x70/0x70 [ 651.989550] ? debug_check_no_obj_freed+0x200/0x464 [ 651.994578] ? mark_held_locks+0xb1/0x100 [ 651.998741] inet_sendpage+0x44a/0x630 [ 652.002636] kernel_sendpage+0x95/0xf0 [ 652.006508] ? inet_sendmsg+0x5d0/0x5d0 [ 652.010468] sock_sendpage+0x8b/0xc0 [ 652.014167] ? lockdep_hardirqs_on+0x415/0x5d0 [ 652.018760] pipe_to_sendpage+0x299/0x370 [ 652.022916] ? kernel_sendpage+0xf0/0xf0 [ 652.026978] ? direct_splice_actor+0x1a0/0x1a0 [ 652.031556] ? __put_page+0x92/0xd0 [ 652.035166] ? anon_pipe_buf_release+0x1c6/0x270 [ 652.039902] __splice_from_pipe+0x39a/0x7e0 [ 652.044213] ? direct_splice_actor+0x1a0/0x1a0 [ 652.048810] ? direct_splice_actor+0x1a0/0x1a0 [ 652.053379] splice_from_pipe+0x108/0x170 [ 652.057520] ? splice_shrink_spd+0xd0/0xd0 [ 652.061831] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 652.067407] ? security_file_permission+0x94/0x320 [ 652.072350] generic_splice_sendpage+0x3c/0x50 [ 652.076923] ? splice_from_pipe+0x170/0x170 [ 652.081240] do_splice+0x70a/0x1490 [ 652.084860] ? iterate_fd+0x360/0x360 [ 652.088651] ? opipe_prep.part.0+0x2d0/0x2d0 [ 652.093064] ? __fget_light+0x1a9/0x230 [ 652.097033] __x64_sys_splice+0x2c6/0x330 [ 652.101188] do_syscall_64+0x103/0x610 [ 652.105066] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 652.110235] RIP: 0033:0x457e29 [ 652.113424] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 652.132344] RSP: 002b:00007f2baa4adc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 652.140042] RAX: ffffffffffffffda RBX: 00007f2baa4adc90 RCX: 0000000000457e29 [ 652.147316] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000003 [ 652.154571] RBP: 000000000073bfa0 R08: 00000000000100e0 R09: 0000000000000000 [ 652.161824] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f2baa4ae6d4 [ 652.169090] R13: 00000000004c6c75 R14: 00000000004db870 R15: 0000000000000007 16:58:13 executing program 5: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) accept4$packet(0xffffffffffffff9c, &(0x7f0000000640)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000680)=0x14, 0x800) bind$can_raw(r0, &(0x7f00000006c0)={0x1d, r1}, 0x10) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) setsockopt$RXRPC_SECURITY_KEYRING(r2, 0x110, 0x2, &(0x7f0000000200)='/dev/swradio#\x00', 0xe) write$binfmt_misc(r3, &(0x7f0000000140)=ANY=[], 0x4240a2a0) setns(r2, 0x0) socket$inet(0x2, 0x3, 0x2) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r4, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VIDIOC_S_EDID(r0, 0xc0285629, &(0x7f0000000100)={0x0, 0xffffffffffff0000, 0x9, [], &(0x7f00000000c0)=0x7}) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000280)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000480)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000440)={&(0x7f00000002c0)={0x164, r5, 0x20, 0x70bd28, 0x25dfdbfc, {}, [@TIPC_NLA_LINK={0x28, 0x4, [@TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}]}, @TIPC_NLA_LINK={0x74, 0x4, [@TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x40}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffffffffe76945bd}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}]}, @TIPC_NLA_LINK_PROP={0x4c, 0x7, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffffffffffffc1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x101}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}]}]}, @TIPC_NLA_NODE={0x34, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xf92}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}]}, @TIPC_NLA_MEDIA={0xc, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}]}, @TIPC_NLA_MEDIA={0x5c, 0x5, [@TIPC_NLA_MEDIA_PROP={0x1c, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x21e}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}]}]}, @TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x31}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}]}, @TIPC_NLA_MON={0x4}]}, 0x164}}, 0x1) splice(r2, 0x0, r4, 0x0, 0x1ffe0, 0x0) 16:58:13 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x2b2, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1, 0x0, 0x0, 0xa00000000000000}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) 16:58:13 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x1b, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x3, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) 16:58:13 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000, 0x1a0ffffffff]}}]}, 0x2b2}}, 0x0) 16:58:13 executing program 2: r0 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000200)="4378c9b376959709edac1d8479820a0e8da90d12d71eeabcdbe4f66744aa74ca94517a758cc0784806288c8edeccdcae12247c8ae85f8d8c0bf90a155b4231b10084e690a731c359a427e20b8534c73ea3bdbdd8d2474fba838d325278efd6dd9461c483fb63418e42c89b938e1a883dadeec311c6050c1b6cccf1fa2805232d0316bd5e58538d4fb571b1505cf7673f0b43cfa3023a7f3af22ac25ddc85a938e2de9b97212c649fb2029412171fd2ef1267bc8bcb7c9e027f47f843a5bb492604a43df05f22", 0xc6, 0xfffffffffffffffe) keyctl$setperm(0x5, r0, 0x200000) pipe(&(0x7f0000000340)={0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xffb1) ioctl$SNDRV_TIMER_IOCTL_STOP(r1, 0x54a1) r3 = socket$inet(0x2, 0x3, 0x2) r4 = shmget$private(0x0, 0x1000, 0x44, &(0x7f0000fff000/0x1000)=nil) shmctl$SHM_INFO(r4, 0xe, &(0x7f0000000000)=""/29) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) splice(r1, 0x0, r3, 0x0, 0x2, 0xa00000000000001) 16:58:13 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000, 0x40030000000000]}}]}, 0x2b2}}, 0x0) 16:58:13 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x2b2, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x3, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) 16:58:13 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0xf, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1, 0x0, 0x0, 0xa00000000000000}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) [ 652.433892] netlink: 642 bytes leftover after parsing attributes in process `syz-executor.3'. [ 652.459483] netlink: 642 bytes leftover after parsing attributes in process `syz-executor.3'. 16:58:13 executing program 0 (fault-call:8 fault-nth:65): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x3, 0x2) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) splice(r0, 0x0, r2, 0x0, 0x100e0, 0x0) [ 652.584570] netlink: 642 bytes leftover after parsing attributes in process `syz-executor.1'. 16:58:13 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000, 0x8000a0ffffffff]}}]}, 0x2b2}}, 0x0) 16:58:13 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x67, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1, 0x0, 0x0, 0xa00000000000000}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) [ 652.625592] netlink: 642 bytes leftover after parsing attributes in process `syz-executor.1'. 16:58:13 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0xf, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x3, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) [ 652.822436] FAULT_INJECTION: forcing a failure. [ 652.822436] name failslab, interval 1, probability 0, space 0, times 0 [ 652.869909] CPU: 0 PID: 28608 Comm: syz-executor.0 Not tainted 5.0.0+ #6 [ 652.876782] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 652.886140] Call Trace: [ 652.888745] dump_stack+0x172/0x1f0 [ 652.892402] should_fail.cold+0xa/0x1b [ 652.896316] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 652.901433] ? lock_downgrade+0x810/0x810 [ 652.905592] ? ___might_sleep+0x163/0x280 [ 652.909782] __should_failslab+0x121/0x190 [ 652.914042] should_failslab+0x9/0x14 [ 652.917855] kmem_cache_alloc_node+0x264/0x710 [ 652.922424] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 652.927178] __alloc_skb+0xd5/0x5e0 [ 652.930810] ? skb_scrub_packet+0x440/0x440 [ 652.935134] ? raw_destroy+0x30/0x30 [ 652.938841] __ip_append_data.isra.0+0x24d6/0x2dd0 [ 652.943785] ? raw_destroy+0x30/0x30 [ 652.947520] ? __ip_flush_pending_frames.isra.0+0x2d0/0x2d0 [ 652.953225] ? ipv4_mtu+0x2a9/0x400 [ 652.956866] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 652.962410] ? ip_setup_cork+0x53b/0x870 [ 652.966479] ? raw_destroy+0x30/0x30 [ 652.970187] ip_append_data.part.0+0xf2/0x170 [ 652.974690] ? raw_destroy+0x30/0x30 [ 652.978404] ip_append_data+0x6e/0x90 [ 652.982197] raw_sendmsg+0xbd8/0x2f10 [ 652.985993] ? raw_getsockopt+0x100/0x100 [ 652.990143] ? lockdep_hardirqs_on+0x415/0x5d0 [ 652.994728] ? retint_kernel+0x2d/0x2d [ 652.998608] ? trace_hardirqs_on_caller+0x6a/0x220 [ 653.003534] ? mark_held_locks+0xb1/0x100 [ 653.007664] ? lockdep_hardirqs_on+0x415/0x5d0 [ 653.012238] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 653.016990] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 653.021731] ? __lock_acquire+0x53b/0x4700 [ 653.025966] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 653.030715] inet_sendmsg+0x147/0x5d0 [ 653.034534] ? raw_getsockopt+0x100/0x100 [ 653.038696] ? inet_sendmsg+0x147/0x5d0 [ 653.042682] ? ipip_gro_receive+0x100/0x100 [ 653.047006] sock_sendmsg+0xdd/0x130 [ 653.050720] kernel_sendmsg+0x44/0x50 [ 653.054509] sock_no_sendpage+0x116/0x150 [ 653.058651] ? sock_kzfree_s+0x70/0x70 [ 653.062564] ? inet_sendpage+0x11f/0x630 [ 653.066624] inet_sendpage+0x44a/0x630 [ 653.070524] kernel_sendpage+0x95/0xf0 [ 653.074406] ? inet_sendmsg+0x5d0/0x5d0 [ 653.078382] sock_sendpage+0x8b/0xc0 [ 653.082087] pipe_to_sendpage+0x299/0x370 [ 653.086229] ? kernel_sendpage+0xf0/0xf0 [ 653.090282] ? direct_splice_actor+0x1a0/0x1a0 [ 653.094865] ? __put_page+0x92/0xd0 [ 653.098498] ? anon_pipe_buf_release+0x1c6/0x270 [ 653.103253] __splice_from_pipe+0x39a/0x7e0 [ 653.107592] ? direct_splice_actor+0x1a0/0x1a0 [ 653.112204] ? direct_splice_actor+0x1a0/0x1a0 [ 653.116783] splice_from_pipe+0x108/0x170 [ 653.120947] ? splice_shrink_spd+0xd0/0xd0 [ 653.125190] ? retint_kernel+0x2d/0x2d [ 653.129091] generic_splice_sendpage+0x3c/0x50 [ 653.133658] ? splice_from_pipe+0x170/0x170 [ 653.137970] do_splice+0x70a/0x1490 [ 653.141601] ? iterate_fd+0x360/0x360 [ 653.145392] ? opipe_prep.part.0+0x2d0/0x2d0 [ 653.149802] ? __fget_light+0x1a9/0x230 [ 653.153774] __x64_sys_splice+0x2c6/0x330 [ 653.157921] do_syscall_64+0x103/0x610 [ 653.161801] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 653.166974] RIP: 0033:0x457e29 [ 653.170148] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 653.189029] RSP: 002b:00007f2baa4adc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 653.196718] RAX: ffffffffffffffda RBX: 00007f2baa4adc90 RCX: 0000000000457e29 [ 653.203972] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000003 [ 653.211231] RBP: 000000000073bfa0 R08: 00000000000100e0 R09: 0000000000000000 [ 653.218494] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f2baa4ae6d4 [ 653.225754] R13: 00000000004c6c75 R14: 00000000004db870 R15: 0000000000000007 16:58:14 executing program 5: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000a80)=@filter={'filter\x00', 0xe, 0x4, 0x878, [0x0, 0x20000200, 0x200004c8, 0x20000718], 0x0, &(0x7f00000000c0), &(0x7f0000000200)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x1d, 0x64, 0x17, 'ip6tnl0\x00', 'teql0\x00', 'veth0_to_team\x00', 'nr0\x00', @broadcast, [0x0, 0xff, 0xff, 0xff, 0xff, 0xff], @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, [0xff, 0xff, 0x0, 0xff, 0x0, 0xff], 0xc0, 0x268, 0x298, [@nfacct={'nfacct\x00', 0x28, {{'syz0\x00', 0x1}}}]}, [@common=@SECMARK={'SECMARK\x00', 0x108, {{0x1, 0x5, 'system_u:object_r:vmware_device_t:s0\x00'}}}, @common=@nflog={'nflog\x00', 0x50, {{0x1, 0x8ebc, 0x4, 0x0, 0x0, "a67a6ff4b5151b85a4ac8e1da56fd7e74174396c837785c3c1104d69fd5d0e93e7ed97e2987cd3a42198bad35ac9f25179cd79273c5ef50e12f91bc939ce57f3"}}}]}, @common=@CLASSIFY={'CLASSIFY\x00', 0x8, {{0x2}}}}]}, {0x0, '\x00', 0x1, 0xfffffffffffffffe, 0x1, [{{{0x11, 0x12, 0x88a2, 'veth0_to_team\x00', 'team_slave_0\x00', 'ip6_vti0\x00', 'gre0\x00', @remote, [0xff, 0x0, 0xff, 0x0, 0xff, 0xff], @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, [0xff, 0x0, 0xff, 0xff], 0x158, 0x1d0, 0x220, [@ip6={'ip6\x00', 0x50, {{@dev={0xfe, 0x80, [], 0x27}, @rand_addr="1eb92fe1a0cb27b7c54c9d4a47e61f9b", [0x0, 0xff000000, 0xffffffff, 0xffffffff], [0xff, 0xffffffff, 0xff000000, 0xff], 0x1, 0x11, 0x8, 0x8, 0x4e20, 0x4e22, 0x4e22, 0x4e21}}}, @stp={'stp\x00', 0x48, {{0x7, {0xffffffffffffff80, 0xffffffffffffff80, 0x8001, @local, [0x0, 0xff, 0xff, 0x0, 0x0, 0xff], 0x400, 0x9, 0xe0, 0x4, @remote, [0x0, 0x0, 0x0, 0xff, 0xff], 0x4e24, 0x4e24, 0x7ff, 0x1, 0x80, 0x4, 0xffff, 0x40, 0x4, 0xfffffffffffff48f}, 0x800, 0x200}}}]}, [@common=@NFLOG={'NFLOG\x00', 0x50, {{0x80000000, 0x3f, 0x9, 0x0, 0x0, "2bb70b4bd1e869e9ed4b44d2979f28f0e05e073af1acbeecf7d82234850c29ff0ad3ac2001f3aebd92cb19e2d2bba12470e50cf53ff80c361eaab4c1b1ceda4a"}}}]}, @common=@log={'log\x00', 0x28, {{0x429, "53b80e501dc98d81ab2d8ea8e479f5f5ee8d5b4e90976effa3dbaa2804f1", 0x7}}}}]}, {0x0, '\x00', 0x2, 0xffffffffffffffff}, {0x0, '\x00', 0x2, 0xfffffffffffffffe, 0x2, [{{{0x9, 0x0, 0x8bff, 'eql\x00', 'hsr0\x00', 'batadv0\x00', 'hsr0\x00', @broadcast, [0x0, 0xff, 0x0, 0xff, 0x0, 0xff], @dev={[], 0x2b}, [0xff, 0xff, 0x0, 0xff], 0xa0, 0x1d0, 0x248, [@connlabel={'connlabel\x00', 0x8, {{0x10000, 0x3}}}]}, [@common=@SECMARK={'SECMARK\x00', 0x108, {{0x1, 0x3, 'system_u:object_r:vhost_device_t:s0\x00'}}}]}, @common=@NFLOG={'NFLOG\x00', 0x50, {{0xffffffffffffff1b, 0x7, 0x80000000, 0x0, 0x0, "0ef170df5ca0c68a3f19ada0b15353f713b0baedcbb6cad2ddcc77c1acb9adf97267710d3053dc5e9424df37f5fc16b11d8309636c35530b4aa32d70675515d3"}}}}, {{{0x3, 0x4, 0x9bff, 'ip_vti0\x00', 'bpq0\x00', 'veth0_to_team\x00', 'veth0_to_team\x00', @local, [0x0, 0xff, 0xff, 0xff, 0xff, 0xff], @empty, [0x0, 0xff, 0x0, 0xff, 0xff, 0xff], 0x70, 0x70, 0xb8}}, @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00', 0x4, 0x6, 0x3ff}}}}]}]}, 0x8f0) ioctl$PPPIOCGIDLE(r0, 0x8010743f, &(0x7f0000000000)) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x3, 0x2) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) splice(r0, 0x0, r2, 0x0, 0x1ffe0, 0x0) 16:58:14 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x500, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1, 0x0, 0x0, 0xa00000000000000}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) 16:58:14 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000, 0xf0ffffffffffff]}}]}, 0x2b2}}, 0x0) 16:58:14 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x67, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x3, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) 16:58:14 executing program 2: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x3, 0x2) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f0000000200)={[0x5, 0x1, 0x40, 0x3, 0x80000001, 0xbd2, 0x2, 0x4, 0x910, 0x5, 0xf8, 0x7, 0x7ff, 0x2, 0xfffffffffffffffe], 0x10f000, 0x108810}) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000000)={0xffffffffffffffff}, 0x106, 0xb}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r1, &(0x7f00000002c0)={0x14, 0x88, 0xfa00, {r3, 0x3c, 0x0, @ib={0x1b, 0x7, 0x9, {"71302cf66ad373fafbe242b5a4170dc4"}, 0x5, 0x401, 0x4}}}, 0x90) perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) splice(r0, 0x0, r2, 0x0, 0x10005, 0xa00000000000000) 16:58:14 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x500, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x3, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) 16:58:14 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x2, 0x0, {0xa, 0x0, 0x0, r1, 0x0, 0x0, 0xa00000000000000}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) 16:58:14 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000, 0x100000000000000]}}]}, 0x2b2}}, 0x0) 16:58:14 executing program 0 (fault-call:8 fault-nth:66): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x3, 0x2) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) splice(r0, 0x0, r2, 0x0, 0x100e0, 0x0) 16:58:14 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x2, 0x0, {0xa, 0x0, 0x0, r1}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x3, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) 16:58:14 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000, 0x200000000000000]}}]}, 0x2b2}}, 0x0) 16:58:14 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x3, 0x0, {0xa, 0x0, 0x0, r1, 0x0, 0x0, 0xa00000000000000}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) [ 653.692427] FAULT_INJECTION: forcing a failure. [ 653.692427] name failslab, interval 1, probability 0, space 0, times 0 [ 653.764514] CPU: 0 PID: 28657 Comm: syz-executor.0 Not tainted 5.0.0+ #6 [ 653.771366] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 653.780707] Call Trace: [ 653.783310] dump_stack+0x172/0x1f0 [ 653.786956] should_fail.cold+0xa/0x1b [ 653.790850] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 653.795949] ? lock_downgrade+0x810/0x810 [ 653.800122] ? ___might_sleep+0x163/0x280 [ 653.804300] __should_failslab+0x121/0x190 [ 653.808559] should_failslab+0x9/0x14 [ 653.812372] kmem_cache_alloc_node_trace+0x270/0x720 [ 653.817481] ? __alloc_skb+0xd5/0x5e0 [ 653.821301] ? rcu_lockdep_current_cpu_online+0xe3/0x130 [ 653.826748] __kmalloc_node_track_caller+0x3d/0x70 [ 653.831662] __kmalloc_reserve.isra.0+0x40/0xf0 [ 653.836332] __alloc_skb+0x10b/0x5e0 [ 653.840050] ? skb_scrub_packet+0x440/0x440 [ 653.844391] ? rt_set_nexthop.constprop.0+0x529/0x11d0 [ 653.849665] __ip_append_data.isra.0+0x24d6/0x2dd0 [ 653.854593] ? raw_destroy+0x30/0x30 [ 653.858315] ? __ip_flush_pending_frames.isra.0+0x2d0/0x2d0 [ 653.864018] ? ipv4_mtu+0x2a9/0x400 [ 653.867640] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 653.873157] ? ip_setup_cork+0x53b/0x870 [ 653.877210] ? raw_destroy+0x30/0x30 [ 653.880929] ip_append_data.part.0+0xf2/0x170 [ 653.885416] ? raw_destroy+0x30/0x30 [ 653.889126] ip_append_data+0x6e/0x90 [ 653.892953] raw_sendmsg+0xbd8/0x2f10 [ 653.896749] ? raw_getsockopt+0x100/0x100 [ 653.900889] ? ima_match_policy+0xa19/0x13d0 [ 653.905340] ? process_measurement+0xd5d/0x1570 [ 653.910028] ? process_measurement+0xd5d/0x1570 [ 653.914696] ? mark_held_locks+0xb1/0x100 [ 653.918853] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 653.923608] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 653.928353] ? lockdep_hardirqs_on+0x415/0x5d0 [ 653.932942] ? retint_kernel+0x2d/0x2d [ 653.936848] ? trace_hardirqs_on_caller+0x6a/0x220 [ 653.941774] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 653.946534] ? retint_kernel+0x2d/0x2d [ 653.950411] inet_sendmsg+0x147/0x5d0 [ 653.954204] ? raw_getsockopt+0x100/0x100 [ 653.958375] ? inet_sendmsg+0x147/0x5d0 [ 653.962339] ? ipip_gro_receive+0x100/0x100 [ 653.966659] sock_sendmsg+0xdd/0x130 [ 653.970363] kernel_sendmsg+0x44/0x50 [ 653.974164] sock_no_sendpage+0x116/0x150 [ 653.978304] ? sock_kzfree_s+0x70/0x70 [ 653.982198] ? lockdep_hardirqs_on+0x415/0x5d0 [ 653.986769] ? retint_kernel+0x2d/0x2d [ 653.990650] ? trace_hardirqs_on_caller+0x6a/0x220 [ 653.995577] inet_sendpage+0x44a/0x630 [ 653.999463] kernel_sendpage+0x95/0xf0 [ 654.003356] ? inet_sendmsg+0x5d0/0x5d0 [ 654.007353] sock_sendpage+0x8b/0xc0 [ 654.011086] pipe_to_sendpage+0x299/0x370 [ 654.015227] ? kernel_sendpage+0xf0/0xf0 [ 654.019303] ? direct_splice_actor+0x1a0/0x1a0 [ 654.023903] ? __put_page+0x92/0xd0 [ 654.027529] ? anon_pipe_buf_release+0x1c6/0x270 [ 654.032293] __splice_from_pipe+0x39a/0x7e0 [ 654.036653] ? direct_splice_actor+0x1a0/0x1a0 [ 654.041236] ? direct_splice_actor+0x1a0/0x1a0 [ 654.045834] splice_from_pipe+0x108/0x170 [ 654.049975] ? splice_shrink_spd+0xd0/0xd0 [ 654.054210] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 654.059743] ? security_file_permission+0x94/0x320 [ 654.064706] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 654.069458] generic_splice_sendpage+0x3c/0x50 [ 654.074032] ? splice_from_pipe+0x170/0x170 [ 654.078339] do_splice+0x70a/0x1490 [ 654.081974] ? retint_kernel+0x2d/0x2d [ 654.085869] ? opipe_prep.part.0+0x2d0/0x2d0 [ 654.090297] __x64_sys_splice+0x2c6/0x330 [ 654.094445] do_syscall_64+0x103/0x610 [ 654.098326] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 654.103520] RIP: 0033:0x457e29 [ 654.106715] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 654.125597] RSP: 002b:00007f2baa4adc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 654.133291] RAX: ffffffffffffffda RBX: 00007f2baa4adc90 RCX: 0000000000457e29 [ 654.140551] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000003 [ 654.147824] RBP: 000000000073bfa0 R08: 00000000000100e0 R09: 0000000000000000 [ 654.155114] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f2baa4ae6d4 [ 654.162375] R13: 00000000004c6c75 R14: 00000000004db870 R15: 0000000000000007 16:58:15 executing program 5: pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$FICLONERANGE(r0, 0x4020940d, &(0x7f00000000c0)={r0, 0x0, 0xfffffffffffffffd, 0x1, 0x8}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0x8, &(0x7f0000000000)=0x400, 0x4) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x3, 0x2) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) splice(r0, 0x0, r2, 0x0, 0x1ffe0, 0x0) 16:58:15 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x3, 0x0, {0xa, 0x0, 0x0, r1}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x3, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) 16:58:15 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000, 0x300000000000000]}}]}, 0x2b2}}, 0x0) 16:58:15 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x4, 0x0, {0xa, 0x0, 0x0, r1, 0x0, 0x0, 0xa00000000000000}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) 16:58:15 executing program 0 (fault-call:8 fault-nth:67): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x3, 0x2) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) splice(r0, 0x0, r2, 0x0, 0x100e0, 0x0) 16:58:15 executing program 2: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x38, @rand_addr="f175841b82de40c4a2fac2a4186d39c5"}, 0x1c) socket$inet(0x2, 0x3, 0x2) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) splice(r0, 0x0, r2, 0x0, 0x10005, 0xa00000000000000) 16:58:15 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000, 0x400000000000000]}}]}, 0x2b2}}, 0x0) 16:58:15 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x4, 0x0, {0xa, 0x0, 0x0, r1}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x3, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) 16:58:15 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x5, 0x0, {0xa, 0x0, 0x0, r1, 0x0, 0x0, 0xa00000000000000}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) [ 654.554521] FAULT_INJECTION: forcing a failure. [ 654.554521] name failslab, interval 1, probability 0, space 0, times 0 [ 654.596339] CPU: 1 PID: 28694 Comm: syz-executor.0 Not tainted 5.0.0+ #6 [ 654.603187] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 654.612532] Call Trace: [ 654.612567] dump_stack+0x172/0x1f0 [ 654.612586] should_fail.cold+0xa/0x1b [ 654.612604] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 654.627762] ? lock_downgrade+0x810/0x810 [ 654.631928] ? ___might_sleep+0x163/0x280 [ 654.636092] __should_failslab+0x121/0x190 [ 654.640339] should_failslab+0x9/0x14 [ 654.644140] kmem_cache_alloc_node+0x264/0x710 [ 654.648729] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 654.654293] ? ip_generic_getfrag+0x120/0x230 [ 654.658831] __alloc_skb+0xd5/0x5e0 [ 654.662477] ? skb_scrub_packet+0x440/0x440 [ 654.666810] ? raw_getfrag+0x164/0x230 [ 654.670703] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 654.675730] __ip_append_data.isra.0+0x24d6/0x2dd0 [ 654.680671] ? raw_destroy+0x30/0x30 [ 654.684448] ? __ip_flush_pending_frames.isra.0+0x2d0/0x2d0 [ 654.690176] ? ipv4_mtu+0x2a9/0x400 [ 654.693816] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 654.699353] ? ip_setup_cork+0x53b/0x870 [ 654.703431] ? raw_destroy+0x30/0x30 [ 654.707153] ip_append_data.part.0+0xf2/0x170 [ 654.711659] ? raw_destroy+0x30/0x30 [ 654.715387] ip_append_data+0x6e/0x90 [ 654.719212] raw_sendmsg+0xbd8/0x2f10 [ 654.723024] ? raw_getsockopt+0x100/0x100 [ 654.727176] ? ima_match_policy+0xa19/0x13d0 [ 654.731594] ? process_measurement+0xd5d/0x1570 [ 654.736294] ? process_measurement+0xd5d/0x1570 [ 654.740988] ? lock_downgrade+0x810/0x810 [ 654.745153] ? __lock_acquire+0x53b/0x4700 [ 654.749398] ? __lock_acquire+0x53b/0x4700 [ 654.753644] ? __lock_acquire+0x53b/0x4700 [ 654.757898] inet_sendmsg+0x147/0x5d0 [ 654.761701] ? raw_getsockopt+0x100/0x100 [ 654.765875] ? inet_sendmsg+0x147/0x5d0 [ 654.769853] ? ipip_gro_receive+0x100/0x100 [ 654.774180] sock_sendmsg+0xdd/0x130 [ 654.777911] kernel_sendmsg+0x44/0x50 [ 654.781719] sock_no_sendpage+0x116/0x150 [ 654.785872] ? sock_kzfree_s+0x70/0x70 [ 654.789769] ? debug_check_no_obj_freed+0x200/0x464 [ 654.794859] ? mark_held_locks+0xb1/0x100 [ 654.799032] inet_sendpage+0x44a/0x630 [ 654.802936] kernel_sendpage+0x95/0xf0 [ 654.806824] ? inet_sendmsg+0x5d0/0x5d0 [ 654.810810] sock_sendpage+0x8b/0xc0 [ 654.814539] ? lockdep_hardirqs_on+0x415/0x5d0 [ 654.819138] pipe_to_sendpage+0x299/0x370 [ 654.823320] ? kernel_sendpage+0xf0/0xf0 [ 654.827401] ? direct_splice_actor+0x1a0/0x1a0 [ 654.831986] ? __put_page+0x92/0xd0 [ 654.835622] ? anon_pipe_buf_release+0x1c6/0x270 [ 654.840407] __splice_from_pipe+0x39a/0x7e0 [ 654.844733] ? direct_splice_actor+0x1a0/0x1a0 [ 654.849347] ? direct_splice_actor+0x1a0/0x1a0 [ 654.853928] splice_from_pipe+0x108/0x170 [ 654.858081] ? splice_shrink_spd+0xd0/0xd0 [ 654.862327] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 654.867872] ? security_file_permission+0x94/0x320 [ 654.872848] generic_splice_sendpage+0x3c/0x50 [ 654.877438] ? splice_from_pipe+0x170/0x170 [ 654.881779] do_splice+0x70a/0x1490 [ 654.885431] ? iterate_fd+0x360/0x360 [ 654.889238] ? opipe_prep.part.0+0x2d0/0x2d0 [ 654.893666] ? __fget_light+0x1a9/0x230 16:58:15 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x6, 0x0, {0xa, 0x0, 0x0, r1, 0x0, 0x0, 0xa00000000000000}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) 16:58:15 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x7, 0x0, {0xa, 0x0, 0x0, r1, 0x0, 0x0, 0xa00000000000000}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) 16:58:15 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000, 0x600000000000000]}}]}, 0x2b2}}, 0x0) [ 654.897661] __x64_sys_splice+0x2c6/0x330 [ 654.901859] do_syscall_64+0x103/0x610 [ 654.905784] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 654.911007] RIP: 0033:0x457e29 [ 654.914182] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 654.933078] RSP: 002b:00007f2baa4adc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 654.940774] RAX: ffffffffffffffda RBX: 00007f2baa4adc90 RCX: 0000000000457e29 [ 654.948039] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000003 [ 654.955294] RBP: 000000000073bfa0 R08: 00000000000100e0 R09: 0000000000000000 [ 654.962554] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f2baa4ae6d4 [ 654.969817] R13: 00000000004c6c75 R14: 00000000004db870 R15: 0000000000000007 16:58:16 executing program 5: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x3, 0x2) ioctl$BLKGETSIZE64(r1, 0x80081272, &(0x7f0000000000)) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) ioctl$int_in(r2, 0x5452, &(0x7f0000000900)=0x1ff) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000200)={{{@in=@loopback, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in6=@ipv4={[], [], @local}}}, &(0x7f00000000c0)=0xe8) pipe2$9p(&(0x7f0000000300), 0x84800) ioctl$SIOCAX25ADDUID(r1, 0x89e1, &(0x7f00000009c0)={0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, r3}) perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00000003c0)=@nat={'nat\x00', 0x1b, 0x5, 0x4b0, 0x0, 0x2e8, 0x0, 0xf8, 0x2e8, 0x418, 0x418, 0x418, 0x418, 0x418, 0x5, &(0x7f0000000340), {[{{@uncond, 0x0, 0xc0, 0xf8, 0x0, {}, [@common=@ttl={0x28, 'ttl\x00', 0x0, {0x3, 0x9}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x4, @broadcast, @dev={0xac, 0x14, 0x14, 0x24}, @gre_key=0x4, @port=0x4e21}}}}, {{@uncond, 0x0, 0x98, 0xd0}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x10, @remote, @loopback, @icmp_id=0x2, @icmp_id=0x67}}}}, {{@ip={@broadcast, @remote, 0xffffffff, 0xff000000, 'syzkaller1\x00', 'bond_slave_0\x00', {0xff}, {}, 0x32, 0x3, 0x20}, 0x0, 0xe8, 0x120, 0x0, {}, [@common=@osf={0x50, 'osf\x00', 0x0, {'syz1\x00', 0xff, 0x8, 0x1, 0x2}}]}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0x1, {0x6, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0xc}, @port=0x4e20, @gre_key=0x101}}}}, {{@uncond, 0x0, 0xf0, 0x130, 0x0, {}, [@common=@ttl={0x28, 'ttl\x00', 0x0, {0x0, 0x2}}, @common=@addrtype={0x30, 'addrtype\x00', 0x0, {0x2, 0x482, 0x1}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0xff, 0x4, 0xf400000000000000}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x510) splice(r0, 0x0, r2, 0x0, 0x1ffe0, 0x0) 16:58:16 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000, 0x800000000000000]}}]}, 0x2b2}}, 0x0) 16:58:16 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x8, 0x0, {0xa, 0x0, 0x0, r1, 0x0, 0x0, 0xa00000000000000}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) 16:58:16 executing program 2: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) recvfrom$netrom(r0, &(0x7f00000000c0)=""/28, 0x1c, 0x10120, &(0x7f0000000200)={{0x3, @bcast, 0x4}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}]}, 0x48) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x3, 0x2) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) r3 = perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) splice(r0, 0x0, r2, 0x0, 0x10005, 0xa00000000000000) epoll_ctl$EPOLL_CTL_DEL(r2, 0x2, r0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r3, 0x800c6613, &(0x7f0000000000)={0x0, @aes256, 0x3, "6e910f399ae28578"}) 16:58:16 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x6, 0x0, {0xa, 0x0, 0x0, r1}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x3, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) 16:58:16 executing program 0 (fault-call:8 fault-nth:68): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x3, 0x2) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) splice(r0, 0x0, r2, 0x0, 0x100e0, 0x0) [ 655.523128] net_ratelimit: 56 callbacks suppressed [ 655.523134] neighbour: ndisc_cache: neighbor table overflow! [ 655.559682] neighbour: ndisc_cache: neighbor table overflow! [ 655.567495] neighbour: ndisc_cache: neighbor table overflow! 16:58:16 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000, 0xa00000000000000]}}]}, 0x2b2}}, 0x0) 16:58:16 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x8, 0x0, {0xa, 0x0, 0x0, r1}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x3, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) [ 655.575570] neighbour: ndisc_cache: neighbor table overflow! [ 655.581632] neighbour: ndisc_cache: neighbor table overflow! [ 655.587529] neighbour: ndisc_cache: neighbor table overflow! 16:58:16 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0xa, 0x0, {0xa, 0x0, 0x0, r1, 0x0, 0x0, 0xa00000000000000}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) [ 655.695613] neighbour: ndisc_cache: neighbor table overflow! [ 655.712874] FAULT_INJECTION: forcing a failure. [ 655.712874] name failslab, interval 1, probability 0, space 0, times 0 [ 655.724407] neighbour: ndisc_cache: neighbor table overflow! [ 655.753706] neighbour: ndisc_cache: neighbor table overflow! [ 655.780158] CPU: 0 PID: 28736 Comm: syz-executor.0 Not tainted 5.0.0+ #6 [ 655.787036] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 655.796392] Call Trace: [ 655.799010] dump_stack+0x172/0x1f0 [ 655.802647] should_fail.cold+0xa/0x1b [ 655.806558] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 655.811677] ? ___might_sleep+0x163/0x280 [ 655.815838] __should_failslab+0x121/0x190 [ 655.817865] neighbour: ndisc_cache: neighbor table overflow! [ 655.820111] should_failslab+0x9/0x14 [ 655.820127] kmem_cache_alloc_node+0x264/0x710 [ 655.820144] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 655.820161] ? ip_generic_getfrag+0x120/0x230 [ 655.820185] __alloc_skb+0xd5/0x5e0 [ 655.820202] ? skb_scrub_packet+0x440/0x440 [ 655.820221] ? raw_getfrag+0x164/0x230 [ 655.856190] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 655.861218] __ip_append_data.isra.0+0x24d6/0x2dd0 [ 655.866160] ? raw_destroy+0x30/0x30 [ 655.869896] ? __ip_flush_pending_frames.isra.0+0x2d0/0x2d0 [ 655.869913] ? ipv4_mtu+0x2a9/0x400 [ 655.879230] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 655.884782] ? ip_setup_cork+0x53b/0x870 [ 655.888859] ? raw_destroy+0x30/0x30 [ 655.888877] ip_append_data.part.0+0xf2/0x170 [ 655.888899] ? raw_destroy+0x30/0x30 [ 655.888917] ip_append_data+0x6e/0x90 [ 655.888941] raw_sendmsg+0xbd8/0x2f10 [ 655.888960] ? lockdep_hardirqs_on+0x342/0x5d0 [ 655.888983] ? raw_getsockopt+0x100/0x100 [ 655.917163] ? process_measurement+0xd5d/0x1570 [ 655.921877] ? process_measurement+0xd5d/0x1570 [ 655.926574] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 655.931344] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 655.936105] ? lockdep_hardirqs_on+0x415/0x5d0 [ 655.940721] ? retint_kernel+0x2d/0x2d [ 655.944614] ? trace_hardirqs_on_caller+0x6a/0x220 [ 655.949549] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 655.954318] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 655.959086] ? retint_kernel+0x2d/0x2d [ 655.962993] inet_sendmsg+0x147/0x5d0 [ 655.966804] ? raw_getsockopt+0x100/0x100 [ 655.970957] ? inet_sendmsg+0x147/0x5d0 [ 655.974946] ? ipip_gro_receive+0x100/0x100 [ 655.979301] sock_sendmsg+0xdd/0x130 [ 655.983022] kernel_sendmsg+0x44/0x50 [ 655.986830] sock_no_sendpage+0x116/0x150 [ 655.990992] ? sock_kzfree_s+0x70/0x70 [ 655.994884] ? trace_hardirqs_on_caller+0x6a/0x220 [ 655.999854] ? retint_kernel+0x2d/0x2d [ 656.003753] inet_sendpage+0x44a/0x630 [ 656.007648] kernel_sendpage+0x95/0xf0 [ 656.011538] ? inet_sendmsg+0x5d0/0x5d0 [ 656.015520] sock_sendpage+0x8b/0xc0 [ 656.019235] ? lockdep_hardirqs_on+0x415/0x5d0 [ 656.023841] pipe_to_sendpage+0x299/0x370 [ 656.028007] ? kernel_sendpage+0xf0/0xf0 [ 656.032100] ? direct_splice_actor+0x1a0/0x1a0 [ 656.036698] ? __put_page+0x92/0xd0 [ 656.040333] ? anon_pipe_buf_release+0x1c6/0x270 [ 656.045103] __splice_from_pipe+0x39a/0x7e0 [ 656.049441] ? direct_splice_actor+0x1a0/0x1a0 16:58:16 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0xa, 0x0, {0xa, 0x0, 0x0, r1}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x3, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) 16:58:16 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0xc, 0x0, {0xa, 0x0, 0x0, r1}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x3, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) 16:58:16 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0xe, 0x0, {0xa, 0x0, 0x0, r1}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x3, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) [ 656.054051] ? direct_splice_actor+0x1a0/0x1a0 [ 656.058653] splice_from_pipe+0x108/0x170 [ 656.062804] ? splice_shrink_spd+0xd0/0xd0 [ 656.067064] ? retint_kernel+0x2d/0x2d [ 656.070977] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 656.076546] ? security_file_permission+0x94/0x320 [ 656.081485] generic_splice_sendpage+0x3c/0x50 [ 656.086074] ? splice_from_pipe+0x170/0x170 [ 656.090396] do_splice+0x70a/0x1490 [ 656.094034] ? iterate_fd+0x360/0x360 [ 656.097839] ? opipe_prep.part.0+0x2d0/0x2d0 [ 656.102248] ? __fget_light+0x1a9/0x230 [ 656.106304] __x64_sys_splice+0x2c6/0x330 [ 656.106339] do_syscall_64+0x103/0x610 [ 656.106357] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 656.106371] RIP: 0033:0x457e29 [ 656.114385] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 656.114394] RSP: 002b:00007f2baa4adc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 656.114408] RAX: ffffffffffffffda RBX: 00007f2baa4adc90 RCX: 0000000000457e29 [ 656.114416] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000003 [ 656.114425] RBP: 000000000073bfa0 R08: 00000000000100e0 R09: 0000000000000000 [ 656.114434] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f2baa4ae6d4 [ 656.114442] R13: 00000000004c6c75 R14: 00000000004db870 R15: 0000000000000007 16:58:17 executing program 5: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r3, 0x40087703, 0x10000) mmap(&(0x7f00006ff000/0x3000)=nil, 0x3000, 0x0, 0x12, r3, 0x0) write$binfmt_misc(r1, &(0x7f0000000440)={'syz1', "b9478d5fec0cd14bcc421b1ba7e547081e54f7c5d0a9d35cab79c41776cb174605e38974b1d87b117852755541e66332cc7aa529bd084dd16d7930b51b55cd42d3b9ea3c957807a5aed4d4f36235a2f3da06179100d88624ae81513ad623dd1217b4b98215b83c631b5f5cc1699ffa916210990d4343e43ac768dd6d101b5fdfe38d09a8b7059178ae00ca9a"}, 0x90) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) recvfrom$packet(r0, &(0x7f0000000340)=""/235, 0xeb, 0x2001, &(0x7f00000002c0)={0x11, 0x3, r4, 0x1, 0x7fffffff, 0x6, @local}, 0x14) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x13d}], 0x1, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000300)='fdinfo/3\x00') setsockopt$sock_int(r5, 0x1, 0x21, &(0x7f0000000000)=0x3, 0x4) r6 = socket$inet_udplite(0x2, 0x2, 0x88) openat(r1, &(0x7f0000000240)='./file0\x00', 0x22000, 0x0) ioctl(r6, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f3188b070") preadv(r5, &(0x7f0000000480), 0x10000000000002a1, 0x0) socket$inet(0x2, 0x3, 0x2) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) splice(r0, 0x0, r2, 0x0, 0x1ffe0, 0x0) 16:58:17 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0xf, 0x0, {0xa, 0x0, 0x0, r1}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x3, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) 16:58:17 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0xc, 0x0, {0xa, 0x0, 0x0, r1, 0x0, 0x0, 0xa00000000000000}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) 16:58:17 executing program 2: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x3, 0x2) ioctl$ASHMEM_GET_PIN_STATUS(r0, 0x7709, 0x0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) splice(r0, 0x0, r2, 0x0, 0x10005, 0xa00000000000000) setsockopt(r1, 0x3, 0x8, &(0x7f0000000000)="4a00f4f5eb0e8bc718e24fa134fda2ee407a4c9532645ca074c9603aab11e042e86ed48bf3d6d5fed1457f63c4b845ac54f3ca979faa02", 0x37) 16:58:17 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000, 0xc00000000000000]}}]}, 0x2b2}}, 0x0) 16:58:17 executing program 0 (fault-call:8 fault-nth:69): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x3, 0x2) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) splice(r0, 0x0, r2, 0x0, 0x100e0, 0x0) 16:58:17 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x10, 0x0, {0xa, 0x0, 0x0, r1}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x3, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) 16:58:17 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0xe, 0x0, {0xa, 0x0, 0x0, r1, 0x0, 0x0, 0xa00000000000000}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) 16:58:17 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000, 0xe00000000000000]}}]}, 0x2b2}}, 0x0) 16:58:17 executing program 5: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) write$binfmt_misc(r0, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x3, 0x2) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r1, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) r2 = perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) splice(r2, 0x0, r1, 0x0, 0x11ffe0, 0x0) [ 656.745390] FAULT_INJECTION: forcing a failure. [ 656.745390] name failslab, interval 1, probability 0, space 0, times 0 [ 656.763116] CPU: 1 PID: 28795 Comm: syz-executor.0 Not tainted 5.0.0+ #6 [ 656.769959] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 656.779319] Call Trace: [ 656.781921] dump_stack+0x172/0x1f0 [ 656.785569] should_fail.cold+0xa/0x1b [ 656.789479] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 656.794588] ? lock_downgrade+0x810/0x810 [ 656.798758] ? ___might_sleep+0x163/0x280 [ 656.802923] __should_failslab+0x121/0x190 [ 656.807169] should_failslab+0x9/0x14 [ 656.811003] kmem_cache_alloc_node+0x264/0x710 [ 656.815600] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 656.821165] ? ip_generic_getfrag+0x120/0x230 [ 656.825703] __alloc_skb+0xd5/0x5e0 [ 656.829373] ? skb_scrub_packet+0x440/0x440 [ 656.833705] ? raw_getfrag+0x164/0x230 [ 656.837606] ? __sanitizer_cov_trace_cmp4+0x16/0x20 16:58:17 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x10, 0x0, {0xa, 0x0, 0x0, r1, 0x0, 0x0, 0xa00000000000000}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) 16:58:17 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000, 0xf00000000000000]}}]}, 0x2b2}}, 0x0) 16:58:17 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000, 0x1000000000000000]}}]}, 0x2b2}}, 0x0) 16:58:17 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000, 0x3f00000000000000]}}]}, 0x2b2}}, 0x0) [ 656.837630] __ip_append_data.isra.0+0x24d6/0x2dd0 [ 656.837652] ? raw_destroy+0x30/0x30 [ 656.837679] ? __ip_flush_pending_frames.isra.0+0x2d0/0x2d0 [ 656.851317] ? ipv4_mtu+0x2a9/0x400 [ 656.851333] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 656.851347] ? ip_setup_cork+0x53b/0x870 [ 656.851362] ? raw_destroy+0x30/0x30 [ 656.851377] ip_append_data.part.0+0xf2/0x170 [ 656.851396] ? raw_destroy+0x30/0x30 [ 656.851412] ip_append_data+0x6e/0x90 [ 656.885984] raw_sendmsg+0xbd8/0x2f10 [ 656.889807] ? raw_getsockopt+0x100/0x100 16:58:17 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000, 0x6000000000000000]}}]}, 0x2b2}}, 0x0) [ 656.893966] ? lockdep_hardirqs_on+0x415/0x5d0 [ 656.898570] ? retint_kernel+0x2d/0x2d [ 656.902508] ? process_measurement+0xd5d/0x1570 [ 656.907197] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 656.911959] ? lockdep_hardirqs_on+0x415/0x5d0 [ 656.916551] ? retint_kernel+0x2d/0x2d [ 656.920451] ? trace_hardirqs_on_caller+0x6a/0x220 [ 656.925392] ? mark_held_locks+0xb1/0x100 [ 656.929546] ? __lock_acquire+0x53b/0x4700 [ 656.933799] ? mark_held_locks+0xb1/0x100 [ 656.937960] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 656.942719] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 656.947488] inet_sendmsg+0x147/0x5d0 [ 656.951301] ? raw_getsockopt+0x100/0x100 [ 656.955476] ? inet_sendmsg+0x147/0x5d0 [ 656.959458] ? ipip_gro_receive+0x100/0x100 [ 656.963794] sock_sendmsg+0xdd/0x130 [ 656.967530] kernel_sendmsg+0x44/0x50 [ 656.971373] sock_no_sendpage+0x116/0x150 [ 656.975529] ? sock_kzfree_s+0x70/0x70 [ 656.979426] ? debug_check_no_obj_freed+0x200/0x464 [ 656.984466] ? mark_held_locks+0xb1/0x100 [ 656.988645] inet_sendpage+0x44a/0x630 [ 656.992543] kernel_sendpage+0x95/0xf0 [ 656.996415] ? inet_sendmsg+0x5d0/0x5d0 [ 657.000372] sock_sendpage+0x8b/0xc0 [ 657.004078] ? lockdep_hardirqs_on+0x415/0x5d0 [ 657.008695] pipe_to_sendpage+0x299/0x370 [ 657.012864] ? kernel_sendpage+0xf0/0xf0 [ 657.016911] ? direct_splice_actor+0x1a0/0x1a0 [ 657.021495] ? __put_page+0x92/0xd0 [ 657.025112] ? anon_pipe_buf_release+0x1c6/0x270 [ 657.029853] __splice_from_pipe+0x39a/0x7e0 [ 657.034169] ? direct_splice_actor+0x1a0/0x1a0 [ 657.038745] ? direct_splice_actor+0x1a0/0x1a0 [ 657.043343] splice_from_pipe+0x108/0x170 [ 657.047485] ? splice_shrink_spd+0xd0/0xd0 [ 657.051720] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 657.057273] ? security_file_permission+0x94/0x320 [ 657.062202] generic_splice_sendpage+0x3c/0x50 [ 657.066763] ? splice_from_pipe+0x170/0x170 [ 657.071070] do_splice+0x70a/0x1490 [ 657.074683] ? iterate_fd+0x360/0x360 [ 657.078465] ? opipe_prep.part.0+0x2d0/0x2d0 [ 657.082854] ? __fget_light+0x1a9/0x230 [ 657.086816] __x64_sys_splice+0x2c6/0x330 [ 657.090961] do_syscall_64+0x103/0x610 [ 657.094844] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 657.100010] RIP: 0033:0x457e29 [ 657.103181] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 657.122082] RSP: 002b:00007f2baa4adc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 657.129804] RAX: ffffffffffffffda RBX: 00007f2baa4adc90 RCX: 0000000000457e29 [ 657.137074] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000003 [ 657.144339] RBP: 000000000073bfa0 R08: 00000000000100e0 R09: 0000000000000000 [ 657.151588] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f2baa4ae6d4 [ 657.158838] R13: 00000000004c6c75 R14: 00000000004db870 R15: 0000000000000007 16:58:18 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x60, 0x0, {0xa, 0x0, 0x0, r1, 0x0, 0x0, 0xa00000000000000}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) 16:58:18 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000, 0x6558000000000000]}}]}, 0x2b2}}, 0x0) 16:58:18 executing program 2: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000000)={r0, &(0x7f0000000200)="a0c3fff203ac54baf088fe3822e8429c3f738f8666ccbbb82226b544fc6abf63cee507ba402fb76aa0d5fa821993e30ffcb853bf8418bfff94258401f4f2e2fd7aa411a1c9ce3c1316e87fe69742eb0402425c92e6a2f61af77fea477577c4a12cb3c84adf2421a2246a69877f46d34595e53615a0e0a82f6ea40f1a05a66da11858345607414eb7d2faa8c00ad802015474f60fceb14bb096a1ad5029c979eba7ec420b49d7478cc242bf537ba01d68855362002b09c347423ba78c5080fe7aaa"}, 0x10) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x3, 0x2) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) splice(r0, 0x0, r2, 0x0, 0x10005, 0xa00000000000000) 16:58:18 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000, 0x8100000000000000]}}]}, 0x2b2}}, 0x0) 16:58:18 executing program 0 (fault-call:8 fault-nth:70): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x3, 0x2) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) splice(r0, 0x0, r2, 0x0, 0x100e0, 0x0) 16:58:18 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x60, 0x0, {0xa, 0x0, 0x0, r1}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x3, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) 16:58:18 executing program 5: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x3, 0x2) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @empty}, 0x10) init_module(&(0x7f0000000000)='user-]{keyring}\x00', 0x10, &(0x7f00000000c0)='\x00') connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) splice(r0, 0x0, r2, 0x0, 0x1ffe0, 0x0) 16:58:18 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0xf0, 0x0, {0xa, 0x0, 0x0, r1, 0x0, 0x0, 0xa00000000000000}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) 16:58:18 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0xf0, 0x0, {0xa, 0x0, 0x0, r1}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x3, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) 16:58:18 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000, 0x8202000000000000]}}]}, 0x2b2}}, 0x0) [ 657.655055] FAULT_INJECTION: forcing a failure. [ 657.655055] name failslab, interval 1, probability 0, space 0, times 0 16:58:18 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x1a0, 0x0, {0xa, 0x0, 0x0, r1, 0x0, 0x0, 0xa00000000000000}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) 16:58:18 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x1a0, 0x0, {0xa, 0x0, 0x0, r1}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x3, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) [ 657.705167] CPU: 1 PID: 28853 Comm: syz-executor.0 Not tainted 5.0.0+ #6 [ 657.712020] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 657.721369] Call Trace: [ 657.723970] dump_stack+0x172/0x1f0 [ 657.727613] should_fail.cold+0xa/0x1b [ 657.731524] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 657.736642] ? lock_downgrade+0x810/0x810 [ 657.736660] ? ___might_sleep+0x163/0x280 [ 657.736682] __should_failslab+0x121/0x190 [ 657.736699] should_failslab+0x9/0x14 16:58:18 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x282, 0x0, {0xa, 0x0, 0x0, r1}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x3, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) [ 657.744974] kmem_cache_alloc_node_trace+0x270/0x720 [ 657.758084] ? __alloc_skb+0xd5/0x5e0 [ 657.761891] ? rcu_lockdep_current_cpu_online+0xe3/0x130 [ 657.767377] __kmalloc_node_track_caller+0x3d/0x70 [ 657.772322] __kmalloc_reserve.isra.0+0x40/0xf0 [ 657.777004] __alloc_skb+0x10b/0x5e0 [ 657.780742] ? skb_scrub_packet+0x440/0x440 [ 657.785082] ? raw_getfrag+0x164/0x230 [ 657.788972] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 657.794003] __ip_append_data.isra.0+0x24d6/0x2dd0 [ 657.798956] ? raw_destroy+0x30/0x30 [ 657.802693] ? __ip_flush_pending_frames.isra.0+0x2d0/0x2d0 [ 657.808394] ? ipv4_mtu+0x2a9/0x400 [ 657.808411] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 657.808426] ? ip_setup_cork+0x53b/0x870 [ 657.808442] ? raw_destroy+0x30/0x30 [ 657.808457] ip_append_data.part.0+0xf2/0x170 [ 657.808475] ? raw_destroy+0x30/0x30 [ 657.817625] ip_append_data+0x6e/0x90 [ 657.817649] raw_sendmsg+0xbd8/0x2f10 [ 657.817677] ? raw_getsockopt+0x100/0x100 [ 657.817694] ? ima_match_policy+0xa19/0x13d0 [ 657.849727] ? process_measurement+0xd5d/0x1570 16:58:18 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x300, 0x0, {0xa, 0x0, 0x0, r1}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x3, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) [ 657.854404] ? process_measurement+0xd5d/0x1570 [ 657.859082] ? lock_downgrade+0x810/0x810 [ 657.863252] ? __lock_acquire+0x53b/0x4700 [ 657.867509] ? __lock_acquire+0x53b/0x4700 [ 657.871745] ? __lock_acquire+0x53b/0x4700 [ 657.875995] inet_sendmsg+0x147/0x5d0 [ 657.876009] ? raw_getsockopt+0x100/0x100 [ 657.876025] ? inet_sendmsg+0x147/0x5d0 [ 657.883952] ? ipip_gro_receive+0x100/0x100 [ 657.883970] sock_sendmsg+0xdd/0x130 [ 657.883987] kernel_sendmsg+0x44/0x50 [ 657.884006] sock_no_sendpage+0x116/0x150 [ 657.884021] ? sock_kzfree_s+0x70/0x70 [ 657.907937] ? debug_check_no_obj_freed+0x200/0x464 [ 657.912970] ? mark_held_locks+0xb1/0x100 [ 657.917132] inet_sendpage+0x44a/0x630 [ 657.921027] kernel_sendpage+0x95/0xf0 [ 657.924919] ? inet_sendmsg+0x5d0/0x5d0 [ 657.928901] sock_sendpage+0x8b/0xc0 [ 657.932635] ? lockdep_hardirqs_on+0x415/0x5d0 [ 657.937257] pipe_to_sendpage+0x299/0x370 [ 657.941423] ? kernel_sendpage+0xf0/0xf0 [ 657.945498] ? direct_splice_actor+0x1a0/0x1a0 [ 657.950099] ? __put_page+0x92/0xd0 [ 657.953731] ? anon_pipe_buf_release+0x1c6/0x270 [ 657.958499] __splice_from_pipe+0x39a/0x7e0 [ 657.958518] ? direct_splice_actor+0x1a0/0x1a0 [ 657.958541] ? direct_splice_actor+0x1a0/0x1a0 [ 657.967432] splice_from_pipe+0x108/0x170 [ 657.967463] ? splice_shrink_spd+0xd0/0xd0 [ 657.967487] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 657.967507] ? security_file_permission+0x94/0x320 [ 657.990928] generic_splice_sendpage+0x3c/0x50 [ 657.990942] ? splice_from_pipe+0x170/0x170 [ 657.990960] do_splice+0x70a/0x1490 [ 657.990978] ? iterate_fd+0x360/0x360 [ 657.991000] ? opipe_prep.part.0+0x2d0/0x2d0 [ 657.999884] ? __fget_light+0x1a9/0x230 [ 657.999903] __x64_sys_splice+0x2c6/0x330 [ 657.999929] do_syscall_64+0x103/0x610 [ 657.999949] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 657.999960] RIP: 0033:0x457e29 [ 657.999974] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 657.999984] RSP: 002b:00007f2baa4adc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 658.058690] RAX: ffffffffffffffda RBX: 00007f2baa4adc90 RCX: 0000000000457e29 [ 658.065962] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000003 [ 658.073216] RBP: 000000000073bfa0 R08: 00000000000100e0 R09: 0000000000000000 [ 658.080474] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f2baa4ae6d4 [ 658.087725] R13: 00000000004c6c75 R14: 00000000004db870 R15: 0000000000000007 16:58:19 executing program 0 (fault-call:8 fault-nth:71): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x3, 0x2) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) splice(r0, 0x0, r2, 0x0, 0x100e0, 0x0) 16:58:19 executing program 2: pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) write$binfmt_misc(r1, &(0x7f0000000240)=ANY=[], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x800, 0x0) socket$inet(0x2, 0x3, 0x2) bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) getsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000100), 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0x0, @multicast1}, 0x10) r2 = perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$caif(r2, &(0x7f0000000040)=@dgm={0x25, 0x1000, 0x7}, 0x18) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x10005, 0xa00000000000000) splice(r1, &(0x7f0000000000), r1, &(0x7f00000000c0), 0x1, 0x9) getpeername$inet(r0, &(0x7f0000000240)={0x2, 0x0, @local}, &(0x7f0000000280)=0x10) 16:58:19 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x600, 0x0, {0xa, 0x0, 0x0, r1}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x3, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) 16:58:19 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000, 0x88a8ffff00000000]}}]}, 0x2b2}}, 0x0) 16:58:19 executing program 5: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r3 = socket$inet(0x2, 0x3, 0x2) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) ioctl$PERF_EVENT_IOC_QUERY_BPF(r2, 0xc008240a, &(0x7f00000002c0)={0x4, 0x0, [0x0, 0x0, 0x0, 0x0]}) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f0000000000)={0x0, 0x40}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000200)={r4, @in6={{0xa, 0x4e22, 0x5413e3d5, @rand_addr="7613087755ec6c99b7244068719048f7", 0x8}}, 0x90000000000, 0x5, 0x18ec7298, 0x100000000, 0x80}, &(0x7f0000000100)=0x98) perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) splice(r0, 0x0, r2, 0x0, 0x1ffe0, 0x0) 16:58:19 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x300, 0x0, {0xa, 0x0, 0x0, r1, 0x0, 0x0, 0xa00000000000000}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) 16:58:19 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x662, 0x0, {0xa, 0x0, 0x0, r1}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x3, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) 16:58:19 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000, 0x9d02000000000000]}}]}, 0x2b2}}, 0x0) [ 658.628097] FAULT_INJECTION: forcing a failure. [ 658.628097] name failslab, interval 1, probability 0, space 0, times 0 [ 658.679033] CPU: 0 PID: 28902 Comm: syz-executor.0 Not tainted 5.0.0+ #6 [ 658.685888] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 658.695245] Call Trace: [ 658.697904] dump_stack+0x172/0x1f0 [ 658.701551] should_fail.cold+0xa/0x1b [ 658.705446] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 658.710566] __should_failslab+0x121/0x190 [ 658.714822] should_failslab+0x9/0x14 [ 658.718647] kmem_cache_alloc+0x47/0x6f0 [ 658.722721] skb_clone+0x150/0x3b0 16:58:19 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x500, 0x0, {0xa, 0x0, 0x0, r1, 0x0, 0x0, 0xa00000000000000}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) 16:58:19 executing program 2: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x4d, &(0x7f0000000000)=0x0) io_destroy(r2) socket$can_bcm(0x1d, 0x2, 0x2) r3 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r1, 0x84, 0x1b, &(0x7f00000000c0)={0x0, 0x5c, "8f1c68e62983a39a7168cba5f08975006c444f5c28e3bf30d3ce8c1682a2e1788eb1deaa9e601ba55752446c22d45de999956074792f58c018a57729863932699cbbf5df709959f42781465454fd0a4f6a33fce50caa063d999b7eb2"}, &(0x7f0000000200)=0x64) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r1, 0x84, 0xf, &(0x7f00000002c0)={r4, @in6={{0xa, 0x4e21, 0x3, @local, 0x9}}, 0x5, 0x4, 0x5, 0x4, 0x6}, &(0x7f0000000380)=0x98) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f0000000240)={r4, 0x1, 0x30, 0x0, 0x40}, &(0x7f0000000280)=0x18) close(r3) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x3, 0x2) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) splice(r0, 0x0, r3, 0x0, 0x10005, 0xa00000000000000) 16:58:19 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x600, 0x0, {0xa, 0x0, 0x0, r1, 0x0, 0x0, 0xa00000000000000}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) [ 658.726279] ip_mc_output+0x3aa/0xf70 [ 658.730102] ? __ip_queue_xmit+0x1bf0/0x1bf0 [ 658.734511] ? rcu_lockdep_current_cpu_online+0xe3/0x130 [ 658.739972] ? ip_append_data.part.0+0x170/0x170 [ 658.744730] ? dst_release+0x62/0xb0 [ 658.748460] ? __ip_make_skb+0xf93/0x1820 [ 658.752631] ip_local_out+0xc4/0x1b0 [ 658.756383] ip_send_skb+0x42/0xf0 [ 658.759928] ip_push_pending_frames+0x64/0x80 [ 658.764427] raw_sendmsg+0x1e5d/0x2f10 [ 658.768338] ? raw_getsockopt+0x100/0x100 [ 658.772501] ? ima_match_policy+0xa19/0x13d0 16:58:19 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0xa00, 0x0, {0xa, 0x0, 0x0, r1}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x3, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) [ 658.776922] ? process_measurement+0xd5d/0x1570 [ 658.781619] ? process_measurement+0xd5d/0x1570 [ 658.786312] ? lock_downgrade+0x810/0x810 [ 658.790507] ? __lock_acquire+0x53b/0x4700 [ 658.794746] ? __lock_acquire+0x53b/0x4700 [ 658.798992] ? __lock_acquire+0x53b/0x4700 [ 658.803284] inet_sendmsg+0x147/0x5d0 [ 658.807099] ? raw_getsockopt+0x100/0x100 [ 658.811251] ? inet_sendmsg+0x147/0x5d0 [ 658.815239] ? ipip_gro_receive+0x100/0x100 [ 658.819623] sock_sendmsg+0xdd/0x130 [ 658.823390] kernel_sendmsg+0x44/0x50 [ 658.827213] sock_no_sendpage+0x116/0x150 [ 658.831370] ? sock_kzfree_s+0x70/0x70 [ 658.835325] ? debug_check_no_obj_freed+0x200/0x464 [ 658.840384] ? mark_held_locks+0xb1/0x100 [ 658.844554] inet_sendpage+0x44a/0x630 [ 658.848460] kernel_sendpage+0x95/0xf0 [ 658.852373] ? inet_sendmsg+0x5d0/0x5d0 [ 658.856348] sock_sendpage+0x8b/0xc0 [ 658.860062] ? lockdep_hardirqs_on+0x415/0x5d0 [ 658.864649] pipe_to_sendpage+0x299/0x370 [ 658.868801] ? kernel_sendpage+0xf0/0xf0 [ 658.872872] ? direct_splice_actor+0x1a0/0x1a0 [ 658.877461] ? __put_page+0x92/0xd0 [ 658.881103] ? anon_pipe_buf_release+0x1c6/0x270 [ 658.885866] __splice_from_pipe+0x39a/0x7e0 [ 658.890194] ? direct_splice_actor+0x1a0/0x1a0 [ 658.894798] ? direct_splice_actor+0x1a0/0x1a0 [ 658.899390] splice_from_pipe+0x108/0x170 [ 658.903550] ? splice_shrink_spd+0xd0/0xd0 [ 658.907837] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 658.913386] ? security_file_permission+0x94/0x320 [ 658.918336] generic_splice_sendpage+0x3c/0x50 [ 658.922923] ? splice_from_pipe+0x170/0x170 [ 658.927268] do_splice+0x70a/0x1490 [ 658.930922] ? iterate_fd+0x360/0x360 [ 658.934754] ? opipe_prep.part.0+0x2d0/0x2d0 [ 658.939177] ? __fget_light+0x1a9/0x230 [ 658.943163] __x64_sys_splice+0x2c6/0x330 [ 658.947335] do_syscall_64+0x103/0x610 [ 658.951240] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 658.956437] RIP: 0033:0x457e29 [ 658.959649] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 658.978637] RSP: 002b:00007f2baa4adc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 658.986362] RAX: ffffffffffffffda RBX: 00007f2baa4adc90 RCX: 0000000000457e29 [ 658.993631] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000003 [ 659.000909] RBP: 000000000073bfa0 R08: 00000000000100e0 R09: 0000000000000000 [ 659.008176] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f2baa4ae6d4 [ 659.015453] R13: 00000000004c6c75 R14: 00000000004db870 R15: 0000000000000007 16:58:20 executing program 0 (fault-call:8 fault-nth:72): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x3, 0x2) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) splice(r0, 0x0, r2, 0x0, 0x100e0, 0x0) 16:58:20 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x700, 0x0, {0xa, 0x0, 0x0, r1, 0x0, 0x0, 0xa00000000000000}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) 16:58:20 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0xc00, 0x0, {0xa, 0x0, 0x0, r1}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x3, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) 16:58:20 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000, 0x9effffff00000000]}}]}, 0x2b2}}, 0x0) [ 659.474141] FAULT_INJECTION: forcing a failure. [ 659.474141] name failslab, interval 1, probability 0, space 0, times 0 [ 659.500782] CPU: 1 PID: 28943 Comm: syz-executor.0 Not tainted 5.0.0+ #6 [ 659.507654] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 659.517009] Call Trace: [ 659.519597] dump_stack+0x172/0x1f0 [ 659.523225] should_fail.cold+0xa/0x1b [ 659.527098] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 659.532195] ? lock_downgrade+0x810/0x810 [ 659.536330] __should_failslab+0x121/0x190 [ 659.540560] should_failslab+0x9/0x14 [ 659.544354] kmem_cache_alloc+0x47/0x6f0 [ 659.548399] ? __lock_is_held+0xb6/0x140 [ 659.552442] ? check_preemption_disabled+0x48/0x290 [ 659.557446] dst_alloc+0x10e/0x1d0 [ 659.560973] rt_dst_alloc+0x83/0x3f0 [ 659.564671] ip_route_output_key_hash_rcu+0x97d/0x30e0 [ 659.569939] ? ip_route_input_noref+0x280/0x280 [ 659.574591] ? kasan_check_read+0x11/0x20 [ 659.578774] ip_route_output_key_hash+0x212/0x380 [ 659.583638] ? ip_route_output_key_hash_rcu+0x30e0/0x30e0 [ 659.589160] ? raw_sendmsg+0x6b0/0x2f10 [ 659.593121] ? lock_downgrade+0x810/0x810 [ 659.597279] ip_route_output_flow+0x28/0xc0 [ 659.601593] raw_sendmsg+0xa10/0x2f10 [ 659.605387] ? raw_getsockopt+0x100/0x100 [ 659.609526] ? ima_match_policy+0xa19/0x13d0 [ 659.613926] ? process_measurement+0xd5d/0x1570 [ 659.618600] ? process_measurement+0xd5d/0x1570 [ 659.623253] ? lock_downgrade+0x810/0x810 [ 659.627396] ? __lock_acquire+0x53b/0x4700 [ 659.631633] ? __lock_acquire+0x53b/0x4700 [ 659.635880] ? __lock_acquire+0x53b/0x4700 [ 659.640123] inet_sendmsg+0x147/0x5d0 [ 659.644014] ? raw_getsockopt+0x100/0x100 [ 659.648156] ? inet_sendmsg+0x147/0x5d0 [ 659.652123] ? ipip_gro_receive+0x100/0x100 [ 659.656431] sock_sendmsg+0xdd/0x130 [ 659.660131] kernel_sendmsg+0x44/0x50 [ 659.663933] sock_no_sendpage+0x116/0x150 [ 659.668162] ? sock_kzfree_s+0x70/0x70 [ 659.672045] ? debug_check_no_obj_freed+0x200/0x464 [ 659.677065] ? mark_held_locks+0xb1/0x100 [ 659.681200] inet_sendpage+0x44a/0x630 [ 659.685085] kernel_sendpage+0x95/0xf0 [ 659.688958] ? inet_sendmsg+0x5d0/0x5d0 [ 659.692926] sock_sendpage+0x8b/0xc0 [ 659.696637] ? lockdep_hardirqs_on+0x415/0x5d0 [ 659.701239] pipe_to_sendpage+0x299/0x370 [ 659.705379] ? kernel_sendpage+0xf0/0xf0 [ 659.709440] ? direct_splice_actor+0x1a0/0x1a0 [ 659.714007] ? __put_page+0x92/0xd0 [ 659.717636] ? anon_pipe_buf_release+0x1c6/0x270 [ 659.722378] __splice_from_pipe+0x39a/0x7e0 [ 659.726688] ? direct_splice_actor+0x1a0/0x1a0 [ 659.731270] ? direct_splice_actor+0x1a0/0x1a0 [ 659.735843] splice_from_pipe+0x108/0x170 [ 659.739974] ? splice_shrink_spd+0xd0/0xd0 [ 659.744195] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 659.749717] ? security_file_permission+0x94/0x320 [ 659.754632] generic_splice_sendpage+0x3c/0x50 [ 659.759201] ? splice_from_pipe+0x170/0x170 [ 659.763514] do_splice+0x70a/0x1490 [ 659.767142] ? iterate_fd+0x360/0x360 [ 659.770941] ? opipe_prep.part.0+0x2d0/0x2d0 [ 659.775346] ? __fget_light+0x1a9/0x230 [ 659.779307] __x64_sys_splice+0x2c6/0x330 [ 659.783460] do_syscall_64+0x103/0x610 [ 659.787333] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 659.792503] RIP: 0033:0x457e29 [ 659.795682] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 659.814567] RSP: 002b:00007f2baa4adc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 16:58:20 executing program 5: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x3, 0x2) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @multicast1}, 0xffffffffffffff9e) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) splice(r0, 0x0, r2, 0x0, 0x1ffe0, 0x0) 16:58:20 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x89c, 0x0, {0xa, 0x0, 0x0, r1, 0x0, 0x0, 0xa00000000000000}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) 16:58:20 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0xe00, 0x0, {0xa, 0x0, 0x0, r1}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x3, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) 16:58:20 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000, 0xf0ffffff00000000]}}]}, 0x2b2}}, 0x0) [ 659.822282] RAX: ffffffffffffffda RBX: 00007f2baa4adc90 RCX: 0000000000457e29 [ 659.829551] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000003 [ 659.836811] RBP: 000000000073bfa0 R08: 00000000000100e0 R09: 0000000000000000 [ 659.844075] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f2baa4ae6d4 [ 659.851328] R13: 00000000004c6c75 R14: 00000000004db870 R15: 0000000000000007 16:58:20 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0xa00, 0x0, {0xa, 0x0, 0x0, r1, 0x0, 0x0, 0xa00000000000000}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) 16:58:20 executing program 2: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r0, 0x110, 0x3) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x3, 0x2) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r0, 0x40405514, &(0x7f0000000100)={0x5, 0x5, 0x9, 0x81, 'syz0\x00', 0x10000}) perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000200)={{{@in6=@mcast1, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}, 0x0, @in=@broadcast}}, &(0x7f0000000000)=0xe8) syz_open_dev$audion(&(0x7f0000001780)='/dev/audio#\x00', 0x7fff, 0x0) ioctl$SIOCAX25ADDUID(r0, 0x89e1, &(0x7f00000000c0)={0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, r3}) splice(r0, 0x0, r2, 0x0, 0x10005, 0xa00000000000000) syz_mount_image$f2fs(&(0x7f0000000300)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x10001, 0x6, &(0x7f0000001580)=[{&(0x7f0000000380)="6870fe4d4d29b85315605b1788178e2f9187d90c042bc05df8b20d3b2d913fa1d6ae2c4b290081227d7a2adbad28786b6c4190073a0645514ac03ffce94d5bb40a4372ceecc691153b9b1a34", 0x4c, 0x5}, {&(0x7f0000000400)="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", 0x1000, 0x4}, {&(0x7f0000001400)="675eb1a88e7484e724a1693566556c1b06b6debea3ca46687b456df4168be674f7938b596ffe5c2c817bd24639cd3eef54b511bbfb89bb94f10b82015a1f83ed218064fe4233b83e", 0x48, 0x100}, {&(0x7f0000001480)="3bafac9e37fcb1ace2848d9d51886d8695cf011a14c28564e0dbc3b3380cd41a4ab53771d0ed3de4f4f855b524843eac23903d92b5db77480483dc4c3a061362611d7bc6ae9f7a04a42f3d78c8586e2c4db32abd2b9216f92bf309dd406683422a", 0x61, 0x7}, {&(0x7f0000001500)="18e02a067f397af6e91dd3b0fc12aabf418388fed42ff57bbfc3a9e10ceb650e5ac445d3ebfceae3b22d8a262e4ade2921", 0x31, 0x9}, {&(0x7f0000001540)="25b066cf1c33ebe1f3053c81d7cfa1cb1195faf3f6cada4aeb", 0x19, 0x10001}], 0x414, &(0x7f0000001640)={[{@noheap='noheap'}, {@noinline_data='noinline_data'}, {@extent_cache='extent_cache'}, {@nodiscard='nodiscard'}, {@inline_data='inline_data'}, {@jqfmt_vfsv0='jqfmt=vfsv0'}, {@whint_mode_fs='whint_mode=fs-based'}, {@lazytime='lazytime'}, {@jqfmt_vfsold='jqfmt=vfsold'}, {@disable_roll_forward='disable_roll_forward'}], [{@smackfsdef={'smackfsdef', 0x3d, 'syz0\x00'}}, {@fowner_lt={'fowner<', r3}}, {@appraise='appraise'}, {@smackfshat={'smackfshat', 0x3d, '^!'}}, {@fscontext={'fscontext', 0x3d, 'staff_u'}}, {@smackfsroot={'smackfsroot', 0x3d, 'syz0\x00'}}, {@uid_gt={'uid>', r3}}, {@seclabel='seclabel'}]}) 16:58:20 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000, 0xffffff7f00000000]}}]}, 0x2b2}}, 0x0) 16:58:20 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0xf00, 0x0, {0xa, 0x0, 0x0, r1}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x3, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) [ 660.183969] F2FS-fs (loop2): Magic Mismatch, valid(0xf2f52010) - read(0x28db8e79) [ 660.216354] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 660.226176] F2FS-fs (loop2): Magic Mismatch, valid(0xf2f52010) - read(0x0) 16:58:21 executing program 0 (fault-call:8 fault-nth:73): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x3, 0x2) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) splice(r0, 0x0, r2, 0x0, 0x100e0, 0x0) 16:58:21 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0xc00, 0x0, {0xa, 0x0, 0x0, r1, 0x0, 0x0, 0xa00000000000000}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) 16:58:21 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000, 0xffffffff00000000]}}]}, 0x2b2}}, 0x0) 16:58:21 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x5865, 0x0, {0xa, 0x0, 0x0, r1}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x3, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) [ 660.233534] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 660.241409] F2FS-fs (loop2): Magic Mismatch, valid(0xf2f52010) - read(0x28db8e79) [ 660.250169] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 660.275707] F2FS-fs (loop2): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 660.314539] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 660.432097] FAULT_INJECTION: forcing a failure. [ 660.432097] name failslab, interval 1, probability 0, space 0, times 0 [ 660.455032] CPU: 0 PID: 28991 Comm: syz-executor.0 Not tainted 5.0.0+ #6 [ 660.461890] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 660.471231] Call Trace: [ 660.473808] dump_stack+0x172/0x1f0 [ 660.477423] should_fail.cold+0xa/0x1b [ 660.481301] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 660.486414] ? lock_downgrade+0x810/0x810 [ 660.490556] ? ___might_sleep+0x163/0x280 [ 660.494702] __should_failslab+0x121/0x190 [ 660.498931] should_failslab+0x9/0x14 [ 660.502722] kmem_cache_alloc_node+0x264/0x710 [ 660.507305] ? rt_add_uncached_list+0x147/0x1a0 [ 660.511977] __alloc_skb+0xd5/0x5e0 [ 660.515617] ? skb_scrub_packet+0x440/0x440 [ 660.519953] ? rt_set_nexthop.constprop.0+0x529/0x11d0 [ 660.525241] __ip_append_data.isra.0+0x24d6/0x2dd0 [ 660.530216] ? raw_destroy+0x30/0x30 [ 660.533923] ? __ip_flush_pending_frames.isra.0+0x2d0/0x2d0 [ 660.539622] ? ipv4_mtu+0x2a9/0x400 [ 660.543248] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 660.548798] ? ip_setup_cork+0x53b/0x870 [ 660.552869] ? raw_destroy+0x30/0x30 [ 660.556564] ip_append_data.part.0+0xf2/0x170 [ 660.561057] ? raw_destroy+0x30/0x30 [ 660.564796] ip_append_data+0x6e/0x90 [ 660.568626] raw_sendmsg+0xbd8/0x2f10 [ 660.572438] ? raw_getsockopt+0x100/0x100 [ 660.576594] ? ima_match_policy+0xa19/0x13d0 [ 660.580993] ? process_measurement+0xd5d/0x1570 [ 660.585674] ? mark_held_locks+0xb1/0x100 [ 660.589822] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 660.594575] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 660.599337] ? lockdep_hardirqs_on+0x415/0x5d0 [ 660.603918] ? retint_kernel+0x2d/0x2d [ 660.607787] ? trace_hardirqs_on_caller+0x6a/0x220 [ 660.612708] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 660.617477] ? retint_kernel+0x2d/0x2d [ 660.621391] inet_sendmsg+0x147/0x5d0 [ 660.625202] ? raw_getsockopt+0x100/0x100 [ 660.629390] ? inet_sendmsg+0x147/0x5d0 [ 660.633370] ? ipip_gro_receive+0x100/0x100 [ 660.637676] sock_sendmsg+0xdd/0x130 [ 660.641418] kernel_sendmsg+0x44/0x50 [ 660.645216] sock_no_sendpage+0x116/0x150 [ 660.649350] ? sock_kzfree_s+0x70/0x70 [ 660.653233] ? trace_hardirqs_on_caller+0x6a/0x220 [ 660.658175] ? retint_kernel+0x2d/0x2d [ 660.662085] inet_sendpage+0x44a/0x630 [ 660.665957] kernel_sendpage+0x95/0xf0 [ 660.669831] ? inet_sendmsg+0x5d0/0x5d0 [ 660.673798] sock_sendpage+0x8b/0xc0 [ 660.677490] ? lockdep_hardirqs_on+0x415/0x5d0 [ 660.682057] pipe_to_sendpage+0x299/0x370 [ 660.686184] ? kernel_sendpage+0xf0/0xf0 [ 660.690228] ? direct_splice_actor+0x1a0/0x1a0 [ 660.694795] ? __put_page+0x92/0xd0 [ 660.698407] ? anon_pipe_buf_release+0x1c6/0x270 [ 660.703147] __splice_from_pipe+0x39a/0x7e0 [ 660.707449] ? direct_splice_actor+0x1a0/0x1a0 [ 660.712031] ? direct_splice_actor+0x1a0/0x1a0 [ 660.716618] splice_from_pipe+0x108/0x170 [ 660.720759] ? splice_shrink_spd+0xd0/0xd0 [ 660.725002] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 16:58:21 executing program 5: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) fgetxattr(r2, &(0x7f0000000000)=@random={'osx.', 'eth1]\xcdmd5sumwlan1\x00'}, &(0x7f0000000200)=""/250, 0xfa) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x3, 0x2) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) splice(r0, 0x0, r2, 0x0, 0x1ffe0, 0x0) 16:58:21 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0xe00, 0x0, {0xa, 0x0, 0x0, r1, 0x0, 0x0, 0xa00000000000000}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) 16:58:21 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x6000, 0x0, {0xa, 0x0, 0x0, r1}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x3, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) 16:58:21 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000, 0xffffffffa0008000]}}]}, 0x2b2}}, 0x0) [ 660.730557] ? security_file_permission+0x94/0x320 [ 660.735483] generic_splice_sendpage+0x3c/0x50 [ 660.740055] ? splice_from_pipe+0x170/0x170 [ 660.744388] do_splice+0x70a/0x1490 [ 660.748034] ? iterate_fd+0x360/0x360 [ 660.751841] ? opipe_prep.part.0+0x2d0/0x2d0 [ 660.756256] ? __fget_light+0x1a9/0x230 [ 660.760248] __x64_sys_splice+0x2c6/0x330 [ 660.764414] do_syscall_64+0x103/0x610 [ 660.768321] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 660.773508] RIP: 0033:0x457e29 [ 660.776774] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 660.795667] RSP: 002b:00007f2baa4adc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 660.795682] RAX: ffffffffffffffda RBX: 00007f2baa4adc90 RCX: 0000000000457e29 [ 660.795690] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000003 [ 660.795699] RBP: 000000000073bfa0 R08: 00000000000100e0 R09: 0000000000000000 [ 660.795708] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f2baa4ae6d4 [ 660.795716] R13: 00000000004c6c75 R14: 00000000004db870 R15: 0000000000000007 [ 660.807819] net_ratelimit: 88 callbacks suppressed [ 660.807826] neighbour: ndisc_cache: neighbor table overflow! [ 660.857275] neighbour: ndisc_cache: neighbor table overflow! [ 660.864943] neighbour: ndisc_cache: neighbor table overflow! [ 660.875953] neighbour: ndisc_cache: neighbor table overflow! 16:58:21 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000, 0xffffffffa0010000]}}]}, 0x2b2}}, 0x0) [ 660.882411] neighbour: ndisc_cache: neighbor table overflow! [ 660.888639] neighbour: ndisc_cache: neighbor table overflow! [ 660.960518] F2FS-fs (loop2): Magic Mismatch, valid(0xf2f52010) - read(0x28db8e79) [ 660.987818] neighbour: ndisc_cache: neighbor table overflow! [ 661.006330] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 661.025612] neighbour: ndisc_cache: neighbor table overflow! [ 661.035407] F2FS-fs (loop2): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 661.061589] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 661.079565] F2FS-fs (loop2): Magic Mismatch, valid(0xf2f52010) - read(0x28db8e79) [ 661.095742] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 661.106627] F2FS-fs (loop2): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 661.114889] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock 16:58:22 executing program 2: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x1, 0x2) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000000)=0x0) tkill(r3, 0x3) splice(r0, 0x0, r2, 0x0, 0x10005, 0xa00000000000000) 16:58:22 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x5865, 0x0, {0xa, 0x0, 0x0, r1, 0x0, 0x0, 0xa00000000000000}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) 16:58:22 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x6206, 0x0, {0xa, 0x0, 0x0, r1}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x3, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) 16:58:22 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000, 0xfffffffffffff000]}}]}, 0x2b2}}, 0x0) 16:58:22 executing program 0 (fault-call:8 fault-nth:74): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x3, 0x2) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) splice(r0, 0x0, r2, 0x0, 0x100e0, 0x0) [ 661.216139] neighbour: ndisc_cache: neighbor table overflow! [ 661.228919] neighbour: ndisc_cache: neighbor table overflow! 16:58:22 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x6558, 0x0, {0xa, 0x0, 0x0, r1}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x3, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) 16:58:22 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000, 0x0, 0x2]}}]}, 0x2b2}}, 0x0) [ 661.403574] FAULT_INJECTION: forcing a failure. [ 661.403574] name failslab, interval 1, probability 0, space 0, times 0 [ 661.427002] CPU: 0 PID: 29034 Comm: syz-executor.0 Not tainted 5.0.0+ #6 [ 661.433857] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 661.443198] Call Trace: [ 661.445774] dump_stack+0x172/0x1f0 [ 661.449408] should_fail.cold+0xa/0x1b [ 661.453307] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 661.458395] ? lock_downgrade+0x810/0x810 [ 661.462528] ? ___might_sleep+0x163/0x280 [ 661.466684] __should_failslab+0x121/0x190 [ 661.470964] should_failslab+0x9/0x14 [ 661.474770] kmem_cache_alloc_node_trace+0x270/0x720 [ 661.479885] ? __alloc_skb+0xd5/0x5e0 [ 661.483683] ? rcu_lockdep_current_cpu_online+0xe3/0x130 [ 661.489149] __kmalloc_node_track_caller+0x3d/0x70 [ 661.494075] __kmalloc_reserve.isra.0+0x40/0xf0 [ 661.498752] __alloc_skb+0x10b/0x5e0 [ 661.502495] ? skb_scrub_packet+0x440/0x440 [ 661.506805] ? rt_set_nexthop.constprop.0+0x529/0x11d0 [ 661.512086] __ip_append_data.isra.0+0x24d6/0x2dd0 [ 661.517015] ? raw_destroy+0x30/0x30 [ 661.520724] ? lockdep_hardirqs_on+0x19b/0x5d0 [ 661.525304] ? trace_hardirqs_on_caller+0x6a/0x220 [ 661.530238] ? __ip_flush_pending_frames.isra.0+0x2d0/0x2d0 [ 661.535951] ? ipv4_mtu+0x2a9/0x400 [ 661.539573] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 661.545101] ? ip_setup_cork+0x53b/0x870 [ 661.549168] ? raw_destroy+0x30/0x30 [ 661.552887] ip_append_data.part.0+0xf2/0x170 [ 661.557397] ? raw_destroy+0x30/0x30 [ 661.561139] ip_append_data+0x6e/0x90 [ 661.564925] raw_sendmsg+0xbd8/0x2f10 [ 661.568731] ? raw_getsockopt+0x100/0x100 [ 661.572883] ? flexible_sched_in+0xcb/0x9c0 [ 661.577196] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 661.581933] ? lockdep_hardirqs_on+0x415/0x5d0 [ 661.586500] ? retint_kernel+0x2d/0x2d [ 661.590391] ? trace_hardirqs_on_caller+0x6a/0x220 [ 661.595319] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 661.600112] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 661.604863] ? retint_kernel+0x2d/0x2d [ 661.608781] inet_sendmsg+0x147/0x5d0 [ 661.612593] ? raw_getsockopt+0x100/0x100 [ 661.616734] ? inet_sendmsg+0x147/0x5d0 [ 661.620705] ? ipip_gro_receive+0x100/0x100 [ 661.625024] sock_sendmsg+0xdd/0x130 [ 661.628731] kernel_sendmsg+0x44/0x50 [ 661.632542] sock_no_sendpage+0x116/0x150 [ 661.636682] ? sock_kzfree_s+0x70/0x70 [ 661.640567] ? debug_check_no_obj_freed+0x200/0x464 [ 661.645580] ? mark_held_locks+0xb1/0x100 [ 661.649731] inet_sendpage+0x44a/0x630 [ 661.653633] kernel_sendpage+0x95/0xf0 [ 661.657512] ? inet_sendmsg+0x5d0/0x5d0 [ 661.661470] sock_sendpage+0x8b/0xc0 [ 661.665165] ? lockdep_hardirqs_on+0x415/0x5d0 [ 661.669745] pipe_to_sendpage+0x299/0x370 [ 661.673891] ? kernel_sendpage+0xf0/0xf0 [ 661.677944] ? direct_splice_actor+0x1a0/0x1a0 [ 661.682516] ? __put_page+0x92/0xd0 [ 661.686128] ? anon_pipe_buf_release+0x1c6/0x270 [ 661.690880] __splice_from_pipe+0x39a/0x7e0 [ 661.695196] ? direct_splice_actor+0x1a0/0x1a0 [ 661.699784] ? direct_splice_actor+0x1a0/0x1a0 [ 661.704369] splice_from_pipe+0x108/0x170 [ 661.708537] ? splice_shrink_spd+0xd0/0xd0 [ 661.712787] ? retint_kernel+0x2d/0x2d [ 661.716694] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 661.722253] ? security_file_permission+0x94/0x320 [ 661.727210] generic_splice_sendpage+0x3c/0x50 [ 661.731786] ? splice_from_pipe+0x170/0x170 [ 661.736103] do_splice+0x70a/0x1490 [ 661.739732] ? iterate_fd+0x360/0x360 [ 661.743531] ? opipe_prep.part.0+0x2d0/0x2d0 [ 661.747957] ? __fget_light+0x1a9/0x230 [ 661.751934] __x64_sys_splice+0x2c6/0x330 [ 661.756080] do_syscall_64+0x103/0x610 [ 661.759968] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 661.765165] RIP: 0033:0x457e29 [ 661.768342] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 661.787237] RSP: 002b:00007f2baa4adc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 661.794931] RAX: ffffffffffffffda RBX: 00007f2baa4adc90 RCX: 0000000000457e29 16:58:22 executing program 5: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r3 = socket$inet(0x2, 0x3, 0x2) r4 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x1, 0x2) sendmsg$nfc_llcp(r4, &(0x7f0000000440)={&(0x7f00000000c0)={0x27, 0x1, 0x1, 0x0, 0x8, 0xffffffff, "03abb5993bbe8b34770fc6bc3281ac67354b6c78f539ce282680df95dd5690c38506f739697fc5c26dc8e9b9be59a33ff97318052177d78f63d520850b8752", 0x32}, 0x60, &(0x7f00000003c0)=[{&(0x7f0000000200)="196e341b82d95d25e914bc3d96f73d1bab2b36828a385c8e4861a768fa4d010eb2de1b91ee9e577e6220d9c2222e88b55f0a877190e440bd0fef840afb4b51b890842b49eca1056e5ff015826fd7ec13e4e0db1847561ceb56236a358fca8e4606e652b7a2a7ce4c0558ebf22f013efd0cd82d201e5d9280f0a11753a6118fb0907da6aeab55ec47dfe07711e8002f98d6c46730b5195307fe54239d187df7c358f550ff177ff1f17aa73acfeb571ba44c", 0xb1}, {&(0x7f00000002c0)="8f5971e5dcbff37245f139ec1b0e675bb75372c97edb57cdad7ea14fabe990a7948ec3b9d0f988248b425538588d2cec21e1539968e3ff109f8051b538bdff766867c55ed088ecf67ea0c1acf99ce9f0014a4ee566acf5d3c725a819d614712efde7631d3722f0103a73fddad6e825b1b547c6e93ae63bc2e36dd357d94a4ff3ae57a5f9cee20258eb2ece8c6788e352703f6e74340c9738060fc436aade96703590dad184652732791080a5efc5d21637926eda17b3a2c685703ca9ca0b1baa81c11de2547caed85ec9b9633d744abe69169cd8319df2eae0472b48c39264652a", 0xe1}], 0x2, &(0x7f0000000400)={0x40, 0x115, 0x3, "10bc3f43a776b26f23627674fca9678848ccc53fe427efd1d5c729673af500be307add805b7e483b76"}, 0x40, 0x4000841}, 0x40081) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0xd015) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) accept$inet(r3, &(0x7f0000000480)={0x2, 0x0, @dev}, &(0x7f00000004c0)=0x10) perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) splice(r0, 0x0, r2, 0x0, 0x1ffe0, 0x0) 16:58:22 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x6000, 0x0, {0xa, 0x0, 0x0, r1, 0x0, 0x0, 0xa00000000000000}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) 16:58:22 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000, 0x0, 0x3]}}]}, 0x2b2}}, 0x0) 16:58:22 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x8100, 0x0, {0xa, 0x0, 0x0, r1}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x3, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) [ 661.802180] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000003 [ 661.809460] RBP: 000000000073bfa0 R08: 00000000000100e0 R09: 0000000000000000 [ 661.816720] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f2baa4ae6d4 [ 661.823979] R13: 00000000004c6c75 R14: 00000000004db870 R15: 0000000000000007 16:58:22 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x6558, 0x0, {0xa, 0x0, 0x0, r1, 0x0, 0x0, 0xa00000000000000}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) 16:58:22 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000, 0x0, 0x4]}}]}, 0x2b2}}, 0x0) 16:58:22 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x8202, 0x0, {0xa, 0x0, 0x0, r1}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x3, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) 16:58:22 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x8100, 0x0, {0xa, 0x0, 0x0, r1, 0x0, 0x0, 0xa00000000000000}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) 16:58:22 executing program 2: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x3, 0x2) getrandom(&(0x7f00000000c0)=""/61, 0x3d, 0x1) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) getsockopt$bt_BT_SECURITY(r1, 0x112, 0x4, &(0x7f0000000000), 0x2) ioctl$TUNGETFEATURES(r1, 0x800454cf, &(0x7f0000000100)) perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) splice(r0, 0x0, r2, 0x0, 0x10005, 0xa00000000000000) 16:58:22 executing program 0 (fault-call:8 fault-nth:75): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x3, 0x2) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) splice(r0, 0x0, r2, 0x0, 0x100e0, 0x0) 16:58:23 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x9c08, 0x0, {0xa, 0x0, 0x0, r1, 0x0, 0x0, 0xa00000000000000}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) 16:58:23 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000, 0x0, 0x6]}}]}, 0x2b2}}, 0x0) [ 662.364961] FAULT_INJECTION: forcing a failure. [ 662.364961] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 662.376796] CPU: 0 PID: 29088 Comm: syz-executor.0 Not tainted 5.0.0+ #6 [ 662.383638] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 662.392991] Call Trace: [ 662.395600] dump_stack+0x172/0x1f0 [ 662.399247] should_fail.cold+0xa/0x1b [ 662.403168] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 662.408314] ? mark_held_locks+0x100/0x100 [ 662.412565] should_fail_alloc_page+0x50/0x60 [ 662.417070] __alloc_pages_nodemask+0x1a1/0x710 [ 662.421755] ? sock_sendpage+0x8b/0xc0 [ 662.425649] ? __alloc_pages_slowpath+0x2900/0x2900 [ 662.430699] cache_grow_begin+0x9c/0x8c0 [ 662.434771] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 662.440322] ? check_preemption_disabled+0x48/0x290 [ 662.445352] kmem_cache_alloc_node_trace+0x658/0x720 [ 662.450507] __kmalloc_node_track_caller+0x3d/0x70 [ 662.455451] __kmalloc_reserve.isra.0+0x40/0xf0 [ 662.460136] __alloc_skb+0x10b/0x5e0 [ 662.463846] ? skb_scrub_packet+0x440/0x440 [ 662.468159] ? raw_destroy+0x30/0x30 [ 662.471865] ? __ip_append_data.isra.0+0x156/0x2dd0 [ 662.476902] __ip_append_data.isra.0+0x24d6/0x2dd0 [ 662.481837] ? raw_destroy+0x30/0x30 [ 662.485561] ? __ip_flush_pending_frames.isra.0+0x2d0/0x2d0 [ 662.491276] ? ipv4_mtu+0x2a9/0x400 [ 662.494893] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 662.500424] ? ip_setup_cork+0x53b/0x870 [ 662.504478] ? raw_destroy+0x30/0x30 [ 662.508175] ip_append_data.part.0+0xf2/0x170 [ 662.512689] ? raw_destroy+0x30/0x30 [ 662.516389] ip_append_data+0x6e/0x90 [ 662.520195] raw_sendmsg+0xbd8/0x2f10 [ 662.523996] ? raw_getsockopt+0x100/0x100 [ 662.528137] ? lock_downgrade+0x810/0x810 [ 662.532297] ? kasan_check_read+0x11/0x20 [ 662.536456] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 662.541214] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 662.545956] ? lockdep_hardirqs_on+0x415/0x5d0 [ 662.550525] ? retint_kernel+0x2d/0x2d [ 662.554413] ? trace_hardirqs_on_caller+0x6a/0x220 [ 662.559342] ? __lock_acquire+0x53b/0x4700 [ 662.563589] ? retint_kernel+0x2d/0x2d [ 662.567523] inet_sendmsg+0x147/0x5d0 [ 662.571323] ? raw_getsockopt+0x100/0x100 [ 662.575471] ? inet_sendmsg+0x147/0x5d0 [ 662.579445] ? ipip_gro_receive+0x100/0x100 [ 662.583761] sock_sendmsg+0xdd/0x130 [ 662.587460] kernel_sendmsg+0x44/0x50 [ 662.591267] sock_no_sendpage+0x116/0x150 [ 662.595408] ? sock_kzfree_s+0x70/0x70 [ 662.599304] ? trace_hardirqs_on_caller+0x6a/0x220 [ 662.604236] ? retint_kernel+0x2d/0x2d [ 662.608118] inet_sendpage+0x44a/0x630 [ 662.611993] kernel_sendpage+0x95/0xf0 [ 662.615895] ? inet_sendmsg+0x5d0/0x5d0 [ 662.619868] sock_sendpage+0x8b/0xc0 [ 662.623587] ? lockdep_hardirqs_on+0x415/0x5d0 [ 662.628176] pipe_to_sendpage+0x299/0x370 [ 662.632315] ? kernel_sendpage+0xf0/0xf0 [ 662.636364] ? direct_splice_actor+0x1a0/0x1a0 [ 662.640929] ? __put_page+0x92/0xd0 [ 662.644542] ? anon_pipe_buf_release+0x1c6/0x270 [ 662.649295] __splice_from_pipe+0x39a/0x7e0 [ 662.653601] ? direct_splice_actor+0x1a0/0x1a0 [ 662.658171] ? direct_splice_actor+0x1a0/0x1a0 [ 662.662737] splice_from_pipe+0x108/0x170 [ 662.666879] ? splice_shrink_spd+0xd0/0xd0 [ 662.671096] ? retint_kernel+0x2d/0x2d [ 662.674970] generic_splice_sendpage+0x3c/0x50 [ 662.679556] ? splice_from_pipe+0x170/0x170 [ 662.683877] do_splice+0x70a/0x1490 [ 662.687509] ? iterate_fd+0x360/0x360 [ 662.691302] ? opipe_prep.part.0+0x2d0/0x2d0 [ 662.695694] ? __fget_light+0x1a9/0x230 [ 662.699665] __x64_sys_splice+0x2c6/0x330 [ 662.703819] do_syscall_64+0x103/0x610 [ 662.707693] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 662.712883] RIP: 0033:0x457e29 [ 662.716089] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 662.734994] RSP: 002b:00007f2baa4adc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 662.742681] RAX: ffffffffffffffda RBX: 00007f2baa4adc90 RCX: 0000000000457e29 [ 662.749935] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000003 [ 662.757185] RBP: 000000000073bfa0 R08: 00000000000100e0 R09: 0000000000000000 [ 662.764438] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f2baa4ae6d4 [ 662.771703] R13: 00000000004c6c75 R14: 00000000004db870 R15: 0000000000000007 16:58:23 executing program 5: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000200)=ANY=[], 0x0) socket$inet(0x2, 0x3, 0x2) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) splice(r0, 0x0, r2, 0x0, 0x1ffe0, 0x0) setsockopt$bt_BT_SNDMTU(r1, 0x112, 0xc, &(0x7f0000000000)=0x7ff, 0x2) getsockopt$IPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x43, &(0x7f00000000c0)={'ah\x00'}, &(0x7f0000000100)=0x1e) 16:58:23 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0xf000, 0x0, {0xa, 0x0, 0x0, r1}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x3, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) 16:58:23 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0xf000, 0x0, {0xa, 0x0, 0x0, r1, 0x0, 0x0, 0xa00000000000000}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) 16:58:23 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000, 0x0, 0x8]}}]}, 0x2b2}}, 0x0) 16:58:23 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x8000a0, 0x0, {0xa, 0x0, 0x0, r1, 0x0, 0x0, 0xa00000000000000}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) 16:58:23 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x34000, 0x0, {0xa, 0x0, 0x0, r1}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x3, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) 16:58:23 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000, 0x0, 0xa]}}]}, 0x2b2}}, 0x0) 16:58:23 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0xf0ffff, 0x0, {0xa, 0x0, 0x0, r1, 0x0, 0x0, 0xa00000000000000}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) 16:58:24 executing program 2: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r2, &(0x7f0000000000)=ANY=[@ANYRESOCT=0x0, @ANYRES32], 0xffffffffffffffbf) socket$inet(0x2, 0x3, 0x2) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000380)=0x0) ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f00000003c0)=r3) socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) splice(r0, 0x0, r2, 0x0, 0x10005, 0xa00000000000000) bind$ax25(r1, &(0x7f0000000400)={{0x3, @null}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null]}, 0x48) stat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0, 0x0}, &(0x7f0000000280)=0xc) write$FUSE_CREATE_OPEN(r1, &(0x7f00000002c0)={0xa0, 0xfffffffffffffff5, 0x3, {{0x1, 0x1, 0xfffffffffffffffb, 0x4, 0x7, 0x12000000000, {0x5, 0x7, 0x8, 0x5, 0x810000, 0x2, 0xffffffffffff8000, 0x4, 0x98b, 0x0, 0x0, r4, r5, 0x8b2d, 0x3b}}, {0x0, 0x1}}}, 0xa0) 16:58:24 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x400300, 0x0, {0xa, 0x0, 0x0, r1}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x3, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) 16:58:24 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000, 0x0, 0xc]}}]}, 0x2b2}}, 0x0) 16:58:24 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x1000000, 0x0, {0xa, 0x0, 0x0, r1, 0x0, 0x0, 0xa00000000000000}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) 16:58:24 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000, 0x0, 0xe]}}]}, 0x2b2}}, 0x0) 16:58:24 executing program 0 (fault-call:8 fault-nth:76): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x3, 0x2) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) splice(r0, 0x0, r2, 0x0, 0x100e0, 0x0) 16:58:24 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x2000000, 0x0, {0xa, 0x0, 0x0, r1, 0x0, 0x0, 0xa00000000000000}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) 16:58:24 executing program 5: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x3, 0x2) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000040)=0x2) read(r3, 0x0, 0x0) read(r3, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) splice(r0, 0x0, r2, 0x0, 0x1ffe0, 0x0) 16:58:24 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x8000a0, 0x0, {0xa, 0x0, 0x0, r1}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x3, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) 16:58:24 executing program 2: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r3 = socket$inet(0x2, 0x3, 0x2) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = fcntl$getown(r0, 0x9) syz_open_procfs(r4, &(0x7f00000000c0)='net/ip_mr_cache\x00') splice(r0, 0x0, r2, 0x0, 0x10005, 0xa00000000000000) setsockopt$inet_int(r3, 0x0, 0x0, &(0x7f0000000000)=0xffff, 0x4) 16:58:24 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0xf0ffff, 0x0, {0xa, 0x0, 0x0, r1}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x3, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) 16:58:24 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000, 0x0, 0xf]}}]}, 0x2b2}}, 0x0) 16:58:24 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x3000000, 0x0, {0xa, 0x0, 0x0, r1, 0x0, 0x0, 0xa00000000000000}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) 16:58:24 executing program 2: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x3, 0x2) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x8ece, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$NBD_CLEAR_QUE(r1, 0xab05) splice(r0, 0x0, r2, 0x0, 0x10005, 0xa00000000000000) [ 663.922605] serio: Serial port ptm1 [ 663.981431] FAULT_INJECTION: forcing a failure. [ 663.981431] name failslab, interval 1, probability 0, space 0, times 0 [ 664.020571] CPU: 0 PID: 29171 Comm: syz-executor.0 Not tainted 5.0.0+ #6 [ 664.027440] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 664.036807] Call Trace: [ 664.039417] dump_stack+0x172/0x1f0 [ 664.043055] should_fail.cold+0xa/0x1b [ 664.046954] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 664.052058] ? lock_downgrade+0x810/0x810 [ 664.056212] ? ___might_sleep+0x163/0x280 [ 664.060374] __should_failslab+0x121/0x190 [ 664.064622] should_failslab+0x9/0x14 [ 664.068430] kmem_cache_alloc_node_trace+0x270/0x720 [ 664.073574] ? __alloc_skb+0xd5/0x5e0 [ 664.077385] ? rcu_lockdep_current_cpu_online+0xe3/0x130 [ 664.082848] __kmalloc_node_track_caller+0x3d/0x70 [ 664.087783] __kmalloc_reserve.isra.0+0x40/0xf0 [ 664.092465] __alloc_skb+0x10b/0x5e0 [ 664.096199] ? skb_scrub_packet+0x440/0x440 [ 664.100527] ? raw_getfrag+0x15c/0x230 [ 664.104424] ? raw_getfrag+0x164/0x230 [ 664.108360] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 664.113453] __ip_append_data.isra.0+0x24d6/0x2dd0 [ 664.118409] ? raw_destroy+0x30/0x30 [ 664.122155] ? __ip_flush_pending_frames.isra.0+0x2d0/0x2d0 [ 664.127869] ? ipv4_mtu+0x2a9/0x400 [ 664.131522] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 664.137068] ? ip_setup_cork+0x53b/0x870 [ 664.141142] ? raw_destroy+0x30/0x30 [ 664.144878] ip_append_data.part.0+0xf2/0x170 [ 664.149401] ? raw_destroy+0x30/0x30 [ 664.153131] ip_append_data+0x6e/0x90 [ 664.156963] raw_sendmsg+0xbd8/0x2f10 [ 664.160804] ? lockdep_hardirqs_on+0x342/0x5d0 [ 664.165414] ? raw_getsockopt+0x100/0x100 [ 664.169588] ? process_measurement+0xd5d/0x1570 [ 664.174280] ? process_measurement+0xd5d/0x1570 [ 664.178983] ? mark_held_locks+0xb1/0x100 [ 664.183144] ? __lock_acquire+0x53b/0x4700 [ 664.187401] ? retint_kernel+0x2d/0x2d [ 664.191315] ? trace_hardirqs_on_caller+0x6a/0x220 [ 664.196268] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 664.201065] inet_sendmsg+0x147/0x5d0 [ 664.204872] ? raw_getsockopt+0x100/0x100 [ 664.209029] ? inet_sendmsg+0x147/0x5d0 [ 664.213012] ? ipip_gro_receive+0x100/0x100 [ 664.217343] sock_sendmsg+0xdd/0x130 [ 664.221086] kernel_sendmsg+0x44/0x50 [ 664.224905] sock_no_sendpage+0x116/0x150 [ 664.229063] ? sock_kzfree_s+0x70/0x70 16:58:25 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000, 0x0, 0x10]}}]}, 0x2b2}}, 0x0) [ 664.232994] inet_sendpage+0x44a/0x630 [ 664.236899] kernel_sendpage+0x95/0xf0 [ 664.240794] ? inet_sendmsg+0x5d0/0x5d0 [ 664.244792] sock_sendpage+0x8b/0xc0 [ 664.248521] pipe_to_sendpage+0x299/0x370 [ 664.252675] ? kernel_sendpage+0xf0/0xf0 [ 664.256771] ? direct_splice_actor+0x1a0/0x1a0 [ 664.261369] ? __splice_from_pipe+0x32c/0x7e0 [ 664.265877] __splice_from_pipe+0x39a/0x7e0 [ 664.270205] ? direct_splice_actor+0x1a0/0x1a0 [ 664.270230] ? direct_splice_actor+0x1a0/0x1a0 16:58:25 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x4000000, 0x0, {0xa, 0x0, 0x0, r1, 0x0, 0x0, 0xa00000000000000}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) 16:58:25 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x1000000, 0x0, {0xa, 0x0, 0x0, r1}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x3, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) [ 664.270243] splice_from_pipe+0x108/0x170 [ 664.270269] ? splice_shrink_spd+0xd0/0xd0 [ 664.270307] generic_splice_sendpage+0x3c/0x50 [ 664.270319] ? splice_from_pipe+0x170/0x170 [ 664.270335] do_splice+0x70a/0x1490 [ 664.270353] ? iterate_fd+0x360/0x360 [ 664.270374] ? opipe_prep.part.0+0x2d0/0x2d0 [ 664.270390] ? __fget_light+0x1a9/0x230 [ 664.270409] __x64_sys_splice+0x2c6/0x330 [ 664.270432] do_syscall_64+0x103/0x610 [ 664.270451] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 664.270476] RIP: 0033:0x457e29 [ 664.270492] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 664.270500] RSP: 002b:00007f2baa4adc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 664.270514] RAX: ffffffffffffffda RBX: 00007f2baa4adc90 RCX: 0000000000457e29 [ 664.270524] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000003 [ 664.270532] RBP: 000000000073bfa0 R08: 00000000000100e0 R09: 0000000000000000 [ 664.270541] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f2baa4ae6d4 [ 664.270550] R13: 00000000004c6c75 R14: 00000000004db870 R15: 0000000000000007 16:58:25 executing program 0 (fault-call:8 fault-nth:77): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x3, 0x2) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) splice(r0, 0x0, r2, 0x0, 0x100e0, 0x0) 16:58:25 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x5000000, 0x0, {0xa, 0x0, 0x0, r1, 0x0, 0x0, 0xa00000000000000}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) 16:58:25 executing program 5: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x2, 0x2) socket$inet(0x2, 0x3, 0x2) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) splice(r0, 0x0, r2, 0x0, 0x1ffe0, 0x0) 16:58:25 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x2000000, 0x0, {0xa, 0x0, 0x0, r1}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x3, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) 16:58:25 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000, 0x0, 0x60]}}]}, 0x2b2}}, 0x0) 16:58:25 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x6000000, 0x0, {0xa, 0x0, 0x0, r1, 0x0, 0x0, 0xa00000000000000}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) [ 664.732776] FAULT_INJECTION: forcing a failure. [ 664.732776] name failslab, interval 1, probability 0, space 0, times 0 [ 664.783955] CPU: 1 PID: 29215 Comm: syz-executor.0 Not tainted 5.0.0+ #6 [ 664.790816] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 664.800158] Call Trace: [ 664.802773] dump_stack+0x172/0x1f0 [ 664.806423] should_fail.cold+0xa/0x1b [ 664.810343] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 664.810361] ? lock_downgrade+0x810/0x810 [ 664.810379] ? ___might_sleep+0x163/0x280 [ 664.819618] __should_failslab+0x121/0x190 [ 664.819638] should_failslab+0x9/0x14 [ 664.819656] kmem_cache_alloc_node+0x264/0x710 [ 664.836389] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 664.841942] ? ip_generic_getfrag+0x120/0x230 [ 664.846469] __alloc_skb+0xd5/0x5e0 [ 664.850105] ? skb_scrub_packet+0x440/0x440 [ 664.854435] ? raw_getfrag+0x164/0x230 [ 664.858322] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 664.863352] __ip_append_data.isra.0+0x24d6/0x2dd0 [ 664.868317] ? raw_destroy+0x30/0x30 [ 664.872049] ? __ip_flush_pending_frames.isra.0+0x2d0/0x2d0 [ 664.877760] ? ipv4_mtu+0x2a9/0x400 [ 664.881406] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 664.886947] ? ip_setup_cork+0x53b/0x870 [ 664.891018] ? raw_destroy+0x30/0x30 [ 664.894741] ip_append_data.part.0+0xf2/0x170 [ 664.899251] ? raw_destroy+0x30/0x30 [ 664.902988] ip_append_data+0x6e/0x90 [ 664.906811] raw_sendmsg+0xbd8/0x2f10 [ 664.910641] ? raw_getsockopt+0x100/0x100 [ 664.914807] ? ima_match_policy+0xa19/0x13d0 [ 664.919269] ? process_measurement+0xd5d/0x1570 [ 664.923976] ? process_measurement+0xd5d/0x1570 [ 664.928656] ? lock_downgrade+0x810/0x810 [ 664.932819] ? __lock_acquire+0x53b/0x4700 [ 664.937068] ? __lock_acquire+0x53b/0x4700 [ 664.941308] ? __lock_acquire+0x53b/0x4700 [ 664.945558] inet_sendmsg+0x147/0x5d0 [ 664.949365] ? raw_getsockopt+0x100/0x100 [ 664.953522] ? inet_sendmsg+0x147/0x5d0 [ 664.957515] ? ipip_gro_receive+0x100/0x100 [ 664.961859] sock_sendmsg+0xdd/0x130 [ 664.965586] kernel_sendmsg+0x44/0x50 [ 664.969424] sock_no_sendpage+0x116/0x150 [ 664.973636] ? sock_kzfree_s+0x70/0x70 [ 664.977547] ? debug_check_no_obj_freed+0x200/0x464 [ 664.982585] ? mark_held_locks+0xb1/0x100 [ 664.986812] inet_sendpage+0x44a/0x630 [ 664.990725] kernel_sendpage+0x95/0xf0 [ 664.994621] ? inet_sendmsg+0x5d0/0x5d0 [ 664.998609] sock_sendpage+0x8b/0xc0 [ 665.002329] ? lockdep_hardirqs_on+0x415/0x5d0 [ 665.006927] pipe_to_sendpage+0x299/0x370 [ 665.011086] ? kernel_sendpage+0xf0/0xf0 [ 665.015164] ? direct_splice_actor+0x1a0/0x1a0 [ 665.019798] ? __put_page+0x92/0xd0 [ 665.023431] ? anon_pipe_buf_release+0x1c6/0x270 [ 665.028214] __splice_from_pipe+0x39a/0x7e0 [ 665.032585] ? direct_splice_actor+0x1a0/0x1a0 [ 665.037190] ? direct_splice_actor+0x1a0/0x1a0 [ 665.041804] splice_from_pipe+0x108/0x170 [ 665.045964] ? splice_shrink_spd+0xd0/0xd0 [ 665.050213] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 665.055755] ? security_file_permission+0x94/0x320 [ 665.060698] generic_splice_sendpage+0x3c/0x50 [ 665.065306] ? splice_from_pipe+0x170/0x170 [ 665.069640] do_splice+0x70a/0x1490 [ 665.073339] ? iterate_fd+0x360/0x360 [ 665.077168] ? opipe_prep.part.0+0x2d0/0x2d0 [ 665.081578] ? __fget_light+0x1a9/0x230 [ 665.085559] __x64_sys_splice+0x2c6/0x330 [ 665.089729] do_syscall_64+0x103/0x610 [ 665.093647] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 665.098840] RIP: 0033:0x457e29 [ 665.102036] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 665.120928] RSP: 002b:00007f2baa4adc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 665.128622] RAX: ffffffffffffffda RBX: 00007f2baa4adc90 RCX: 0000000000457e29 16:58:25 executing program 2: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x3, 0x2) bind$inet(r2, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) splice(r0, 0x0, r2, 0x0, 0x10005, 0xa00000000000000) 16:58:25 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000, 0x0, 0xf0]}}]}, 0x2b2}}, 0x0) 16:58:26 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x3000000, 0x0, {0xa, 0x0, 0x0, r1}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x3, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) 16:58:26 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x7000000, 0x0, {0xa, 0x0, 0x0, r1, 0x0, 0x0, 0xa00000000000000}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) [ 665.135900] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000003 [ 665.143175] RBP: 000000000073bfa0 R08: 00000000000100e0 R09: 0000000000000000 [ 665.150437] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f2baa4ae6d4 [ 665.157702] R13: 00000000004c6c75 R14: 00000000004db870 R15: 0000000000000007 16:58:26 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x4000000, 0x0, {0xa, 0x0, 0x0, r1}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x3, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) 16:58:26 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000, 0x0, 0x1a0]}}]}, 0x2b2}}, 0x0) 16:58:26 executing program 0 (fault-call:8 fault-nth:78): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x3, 0x2) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) splice(r0, 0x0, r2, 0x0, 0x100e0, 0x0) 16:58:26 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x8000000, 0x0, {0xa, 0x0, 0x0, r1, 0x0, 0x0, 0xa00000000000000}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) [ 665.594629] FAULT_INJECTION: forcing a failure. [ 665.594629] name failslab, interval 1, probability 0, space 0, times 0 [ 665.606984] CPU: 0 PID: 29259 Comm: syz-executor.0 Not tainted 5.0.0+ #6 [ 665.613833] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 665.623189] Call Trace: [ 665.625798] dump_stack+0x172/0x1f0 [ 665.629440] should_fail.cold+0xa/0x1b [ 665.633352] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 665.638456] ? lock_downgrade+0x810/0x810 [ 665.642633] ? ___might_sleep+0x163/0x280 [ 665.646801] __should_failslab+0x121/0x190 [ 665.651058] should_failslab+0x9/0x14 [ 665.654870] kmem_cache_alloc_node_trace+0x270/0x720 [ 665.659984] ? __alloc_skb+0xd5/0x5e0 [ 665.663793] ? rcu_lockdep_current_cpu_online+0xe3/0x130 [ 665.669254] __kmalloc_node_track_caller+0x3d/0x70 [ 665.674205] __kmalloc_reserve.isra.0+0x40/0xf0 [ 665.678884] __alloc_skb+0x10b/0x5e0 [ 665.682607] ? skb_scrub_packet+0x440/0x440 [ 665.686941] ? __ip_append_data.isra.0+0x1791/0x2dd0 [ 665.692054] __ip_append_data.isra.0+0x24d6/0x2dd0 [ 665.696994] ? raw_destroy+0x30/0x30 [ 665.700726] ? __ip_flush_pending_frames.isra.0+0x2d0/0x2d0 [ 665.706434] ? write_comp_data+0x9/0x70 [ 665.710412] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 665.715955] ? ip_setup_cork+0x53b/0x870 [ 665.720025] ? raw_destroy+0x30/0x30 [ 665.723747] ip_append_data.part.0+0xf2/0x170 [ 665.728336] ? raw_destroy+0x30/0x30 [ 665.732057] ip_append_data+0x6e/0x90 [ 665.735876] raw_sendmsg+0xbd8/0x2f10 [ 665.739684] ? lockdep_hardirqs_on+0x342/0x5d0 [ 665.744284] ? raw_getsockopt+0x100/0x100 [ 665.748459] ? process_measurement+0xd5d/0x1570 [ 665.753150] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 665.757906] ? lockdep_hardirqs_on+0x415/0x5d0 [ 665.762488] ? retint_kernel+0x2d/0x2d [ 665.766381] ? trace_hardirqs_on_caller+0x6a/0x220 [ 665.771326] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 665.776087] ? retint_kernel+0x2d/0x2d [ 665.780007] inet_sendmsg+0x147/0x5d0 [ 665.783809] ? raw_getsockopt+0x100/0x100 [ 665.787957] ? inet_sendmsg+0x147/0x5d0 16:58:26 executing program 5: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) ioctl$FS_IOC_SETVERSION(r2, 0x40087602, &(0x7f0000000000)=0x4) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x3, 0x2) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) splice(r0, 0x0, r2, 0x0, 0x1ffe0, 0x0) 16:58:26 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x6000000, 0x0, {0xa, 0x0, 0x0, r1}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x3, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) 16:58:26 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000, 0x0, 0x282]}}]}, 0x2b2}}, 0x0) 16:58:26 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0xa000000, 0x0, {0xa, 0x0, 0x0, r1, 0x0, 0x0, 0xa00000000000000}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) [ 665.791929] ? ipip_gro_receive+0x100/0x100 [ 665.791947] sock_sendmsg+0xdd/0x130 [ 665.791963] kernel_sendmsg+0x44/0x50 [ 665.791982] sock_no_sendpage+0x116/0x150 [ 665.791999] ? sock_kzfree_s+0x70/0x70 [ 665.792038] ? lockdep_hardirqs_on+0x415/0x5d0 [ 665.792053] ? retint_kernel+0x2d/0x2d [ 665.820339] ? trace_hardirqs_on_caller+0x6a/0x220 [ 665.825310] inet_sendpage+0x44a/0x630 [ 665.829214] kernel_sendpage+0x95/0xf0 [ 665.833106] ? inet_sendmsg+0x5d0/0x5d0 [ 665.837092] sock_sendpage+0x8b/0xc0 [ 665.840851] pipe_to_sendpage+0x299/0x370 [ 665.845002] ? kernel_sendpage+0xf0/0xf0 [ 665.849074] ? direct_splice_actor+0x1a0/0x1a0 [ 665.853657] ? __put_page+0x92/0xd0 [ 665.857281] ? anon_pipe_buf_release+0x1c6/0x270 [ 665.862043] __splice_from_pipe+0x39a/0x7e0 [ 665.866375] ? direct_splice_actor+0x1a0/0x1a0 [ 665.870970] ? direct_splice_actor+0x1a0/0x1a0 [ 665.875558] splice_from_pipe+0x108/0x170 [ 665.879717] ? splice_shrink_spd+0xd0/0xd0 [ 665.883960] ? retint_kernel+0x2d/0x2d [ 665.887856] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 665.893404] ? security_file_permission+0x94/0x320 [ 665.898348] generic_splice_sendpage+0x3c/0x50 [ 665.902936] ? splice_from_pipe+0x170/0x170 [ 665.907276] do_splice+0x70a/0x1490 [ 665.910910] ? retint_kernel+0x2d/0x2d [ 665.914815] ? opipe_prep.part.0+0x2d0/0x2d0 [ 665.919250] ? __x64_sys_splice+0x259/0x330 [ 665.923607] ? write_comp_data+0x1e/0x70 [ 665.927695] __x64_sys_splice+0x2c6/0x330 [ 665.931879] do_syscall_64+0x103/0x610 [ 665.935786] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 665.940977] RIP: 0033:0x457e29 [ 665.944191] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 665.963096] RSP: 002b:00007f2baa4adc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 665.970838] RAX: ffffffffffffffda RBX: 00007f2baa4adc90 RCX: 0000000000457e29 [ 665.978110] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000003 [ 665.985383] RBP: 000000000073bfa0 R08: 00000000000100e0 R09: 0000000000000000 [ 665.992653] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f2baa4ae6d4 [ 665.999923] R13: 00000000004c6c75 R14: 00000000004db870 R15: 0000000000000007 16:58:26 executing program 2: pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x4000000000000002, 0xffffffffffdffffe) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) splice(r0, 0x0, r2, 0x0, 0x10005, 0xa00000000000000) ioctl$RTC_IRQP_READ(r1, 0x8008700b, &(0x7f0000000000)) 16:58:26 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000, 0x0, 0x29d]}}]}, 0x2b2}}, 0x0) [ 666.040718] net_ratelimit: 85 callbacks suppressed [ 666.040726] neighbour: ndisc_cache: neighbor table overflow! [ 666.062335] neighbour: ndisc_cache: neighbor table overflow! [ 666.102797] neighbour: ndisc_cache: neighbor table overflow! [ 666.118969] neighbour: ndisc_cache: neighbor table overflow! [ 666.135855] neighbour: ndisc_cache: neighbor table overflow! 16:58:27 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0xc000000, 0x0, {0xa, 0x0, 0x0, r1, 0x0, 0x0, 0xa00000000000000}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) 16:58:27 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000, 0x0, 0x300]}}]}, 0x2b2}}, 0x0) [ 666.156820] neighbour: ndisc_cache: neighbor table overflow! 16:58:27 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x8000000, 0x0, {0xa, 0x0, 0x0, r1}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x3, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) [ 666.240450] neighbour: ndisc_cache: neighbor table overflow! [ 666.266831] neighbour: ndisc_cache: neighbor table overflow! [ 666.274151] neighbour: ndisc_cache: neighbor table overflow! 16:58:27 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0xe000000, 0x0, {0xa, 0x0, 0x0, r1, 0x0, 0x0, 0xa00000000000000}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) [ 666.288235] neighbour: ndisc_cache: neighbor table overflow! 16:58:27 executing program 0 (fault-call:8 fault-nth:79): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x3, 0x2) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) splice(r0, 0x0, r2, 0x0, 0x100e0, 0x0) 16:58:27 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0xa000000, 0x0, {0xa, 0x0, 0x0, r1}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x3, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) [ 666.451769] FAULT_INJECTION: forcing a failure. [ 666.451769] name failslab, interval 1, probability 0, space 0, times 0 [ 666.463396] CPU: 1 PID: 29308 Comm: syz-executor.0 Not tainted 5.0.0+ #6 [ 666.470232] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 666.479596] Call Trace: [ 666.482181] dump_stack+0x172/0x1f0 [ 666.485803] should_fail.cold+0xa/0x1b [ 666.489703] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 666.494850] __should_failslab+0x121/0x190 [ 666.499086] should_failslab+0x9/0x14 [ 666.502884] kmem_cache_alloc+0x47/0x6f0 [ 666.506941] skb_clone+0x150/0x3b0 [ 666.510473] ip_mc_output+0x3aa/0xf70 [ 666.514287] ? __ip_queue_xmit+0x1bf0/0x1bf0 [ 666.518708] ? rcu_lockdep_current_cpu_online+0xe3/0x130 [ 666.524166] ? ip_append_data.part.0+0x170/0x170 [ 666.528920] ? dst_release+0x62/0xb0 [ 666.532621] ? __ip_make_skb+0xf93/0x1820 [ 666.536755] ip_local_out+0xc4/0x1b0 [ 666.540469] ip_send_skb+0x42/0xf0 [ 666.544026] ip_push_pending_frames+0x64/0x80 [ 666.548537] raw_sendmsg+0x1e5d/0x2f10 [ 666.552445] ? raw_getsockopt+0x100/0x100 [ 666.556584] ? ima_match_policy+0xa19/0x13d0 [ 666.560978] ? process_measurement+0xd5d/0x1570 [ 666.565652] ? process_measurement+0xd5d/0x1570 [ 666.570315] ? lock_downgrade+0x810/0x810 [ 666.574473] ? __lock_acquire+0x53b/0x4700 [ 666.578728] ? __lock_acquire+0x53b/0x4700 [ 666.582966] ? __lock_acquire+0x53b/0x4700 [ 666.587209] inet_sendmsg+0x147/0x5d0 [ 666.591002] ? raw_getsockopt+0x100/0x100 [ 666.595136] ? inet_sendmsg+0x147/0x5d0 [ 666.599095] ? ipip_gro_receive+0x100/0x100 [ 666.603403] sock_sendmsg+0xdd/0x130 [ 666.607101] kernel_sendmsg+0x44/0x50 [ 666.610892] sock_no_sendpage+0x116/0x150 [ 666.615030] ? sock_kzfree_s+0x70/0x70 [ 666.618932] ? debug_check_no_obj_freed+0x200/0x464 [ 666.623942] ? mark_held_locks+0xb1/0x100 [ 666.628114] inet_sendpage+0x44a/0x630 [ 666.631992] kernel_sendpage+0x95/0xf0 [ 666.635868] ? inet_sendmsg+0x5d0/0x5d0 [ 666.639828] sock_sendpage+0x8b/0xc0 [ 666.643525] ? lockdep_hardirqs_on+0x415/0x5d0 [ 666.648108] pipe_to_sendpage+0x299/0x370 [ 666.652286] ? kernel_sendpage+0xf0/0xf0 [ 666.656360] ? direct_splice_actor+0x1a0/0x1a0 [ 666.660949] ? __put_page+0x92/0xd0 [ 666.664571] ? anon_pipe_buf_release+0x1c6/0x270 [ 666.669329] __splice_from_pipe+0x39a/0x7e0 [ 666.673676] ? direct_splice_actor+0x1a0/0x1a0 [ 666.678256] ? direct_splice_actor+0x1a0/0x1a0 [ 666.682852] splice_from_pipe+0x108/0x170 [ 666.687007] ? splice_shrink_spd+0xd0/0xd0 [ 666.691234] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 666.696757] ? security_file_permission+0x94/0x320 [ 666.701692] generic_splice_sendpage+0x3c/0x50 [ 666.706296] ? splice_from_pipe+0x170/0x170 [ 666.710640] do_splice+0x70a/0x1490 [ 666.714290] ? iterate_fd+0x360/0x360 [ 666.718090] ? opipe_prep.part.0+0x2d0/0x2d0 [ 666.722501] ? __fget_light+0x1a9/0x230 [ 666.726462] __x64_sys_splice+0x2c6/0x330 [ 666.730605] do_syscall_64+0x103/0x610 [ 666.734482] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 666.739658] RIP: 0033:0x457e29 [ 666.742841] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 666.761732] RSP: 002b:00007f2baa4adc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 666.769455] RAX: ffffffffffffffda RBX: 00007f2baa4adc90 RCX: 0000000000457e29 [ 666.776732] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000003 [ 666.784006] RBP: 000000000073bfa0 R08: 00000000000100e0 R09: 0000000000000000 [ 666.791289] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f2baa4ae6d4 16:58:27 executing program 5: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x3, 0x2) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x1, 0x2) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @empty}, 0x10) perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) splice(r0, 0x0, r2, 0x0, 0x1ffe0, 0x0) 16:58:27 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000, 0x0, 0x600]}}]}, 0x2b2}}, 0x0) 16:58:27 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x10000000, 0x0, {0xa, 0x0, 0x0, r1, 0x0, 0x0, 0xa00000000000000}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) 16:58:27 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0xc000000, 0x0, {0xa, 0x0, 0x0, r1}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x3, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) [ 666.798564] R13: 00000000004c6c75 R14: 00000000004db870 R15: 0000000000000007 16:58:27 executing program 2: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x3, 0x2) connect$pppoe(r1, &(0x7f0000000000)={0x18, 0x0, {0x1, @dev={[], 0x1d}, 'veth0_to_bond\x00'}}, 0x1e) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) getsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f00000000c0), &(0x7f0000000100)=0x4) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) splice(r0, 0x0, r2, 0x0, 0x10005, 0xa00000000000000) 16:58:27 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0xe000000, 0x0, {0xa, 0x0, 0x0, r1}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x3, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) 16:58:27 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000, 0x0, 0xa00]}}]}, 0x2b2}}, 0x0) 16:58:27 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x60000000, 0x0, {0xa, 0x0, 0x0, r1, 0x0, 0x0, 0xa00000000000000}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) 16:58:27 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000, 0x0, 0xc00]}}]}, 0x2b2}}, 0x0) 16:58:27 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0xf000000, 0x0, {0xa, 0x0, 0x0, r1}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x3, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) 16:58:28 executing program 0 (fault-call:8 fault-nth:80): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x3, 0x2) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) splice(r0, 0x0, r2, 0x0, 0x100e0, 0x0) 16:58:28 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x65580000, 0x0, {0xa, 0x0, 0x0, r1, 0x0, 0x0, 0xa00000000000000}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) [ 667.297456] FAULT_INJECTION: forcing a failure. [ 667.297456] name failslab, interval 1, probability 0, space 0, times 0 [ 667.309103] CPU: 1 PID: 29357 Comm: syz-executor.0 Not tainted 5.0.0+ #6 [ 667.315978] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 667.325321] Call Trace: [ 667.327896] dump_stack+0x172/0x1f0 [ 667.331520] should_fail.cold+0xa/0x1b [ 667.335396] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 667.340486] ? lock_downgrade+0x810/0x810 [ 667.344640] __should_failslab+0x121/0x190 [ 667.348868] should_failslab+0x9/0x14 [ 667.352699] kmem_cache_alloc+0x47/0x6f0 [ 667.356758] ? __lock_is_held+0xb6/0x140 [ 667.360818] ? check_preemption_disabled+0x48/0x290 [ 667.365839] dst_alloc+0x10e/0x1d0 [ 667.369381] rt_dst_alloc+0x83/0x3f0 [ 667.373092] ip_route_output_key_hash_rcu+0x97d/0x30e0 [ 667.378356] ? ip_route_input_noref+0x280/0x280 [ 667.383019] ? kasan_check_read+0x11/0x20 [ 667.387193] ip_route_output_key_hash+0x212/0x380 [ 667.392046] ? ip_route_output_key_hash_rcu+0x30e0/0x30e0 [ 667.397570] ? raw_sendmsg+0x6b0/0x2f10 [ 667.401550] ? lock_downgrade+0x810/0x810 [ 667.405701] ip_route_output_flow+0x28/0xc0 [ 667.410029] raw_sendmsg+0xa10/0x2f10 [ 667.413837] ? raw_getsockopt+0x100/0x100 [ 667.417992] ? ima_match_policy+0xa19/0x13d0 [ 667.422398] ? process_measurement+0xd5d/0x1570 [ 667.427068] ? process_measurement+0xd5d/0x1570 [ 667.431744] ? lock_downgrade+0x810/0x810 [ 667.435894] ? __lock_acquire+0x53b/0x4700 [ 667.440127] ? __lock_acquire+0x53b/0x4700 [ 667.444387] ? __lock_acquire+0x53b/0x4700 [ 667.448628] inet_sendmsg+0x147/0x5d0 [ 667.452437] ? raw_getsockopt+0x100/0x100 [ 667.456587] ? inet_sendmsg+0x147/0x5d0 [ 667.460549] ? ipip_gro_receive+0x100/0x100 [ 667.464871] sock_sendmsg+0xdd/0x130 [ 667.468583] kernel_sendmsg+0x44/0x50 [ 667.472369] sock_no_sendpage+0x116/0x150 [ 667.476501] ? sock_kzfree_s+0x70/0x70 [ 667.480400] ? debug_check_no_obj_freed+0x200/0x464 [ 667.485434] ? mark_held_locks+0xb1/0x100 [ 667.489600] inet_sendpage+0x44a/0x630 [ 667.493489] kernel_sendpage+0x95/0xf0 [ 667.497361] ? inet_sendmsg+0x5d0/0x5d0 [ 667.501321] sock_sendpage+0x8b/0xc0 [ 667.505019] ? lockdep_hardirqs_on+0x415/0x5d0 [ 667.509588] pipe_to_sendpage+0x299/0x370 [ 667.513741] ? kernel_sendpage+0xf0/0xf0 [ 667.517826] ? direct_splice_actor+0x1a0/0x1a0 [ 667.522402] ? __put_page+0x92/0xd0 [ 667.526021] ? anon_pipe_buf_release+0x1c6/0x270 [ 667.530763] __splice_from_pipe+0x39a/0x7e0 [ 667.535089] ? direct_splice_actor+0x1a0/0x1a0 [ 667.539667] ? direct_splice_actor+0x1a0/0x1a0 [ 667.544234] splice_from_pipe+0x108/0x170 [ 667.548434] ? splice_shrink_spd+0xd0/0xd0 [ 667.552666] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 667.558196] ? security_file_permission+0x94/0x320 [ 667.563118] generic_splice_sendpage+0x3c/0x50 [ 667.567720] ? splice_from_pipe+0x170/0x170 [ 667.572047] do_splice+0x70a/0x1490 [ 667.575681] ? iterate_fd+0x360/0x360 [ 667.579499] ? opipe_prep.part.0+0x2d0/0x2d0 [ 667.583907] ? __fget_light+0x1a9/0x230 [ 667.587912] __x64_sys_splice+0x2c6/0x330 [ 667.592058] do_syscall_64+0x103/0x610 [ 667.595957] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 667.601194] RIP: 0033:0x457e29 [ 667.604400] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 667.623306] RSP: 002b:00007f2baa4adc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 667.630993] RAX: ffffffffffffffda RBX: 00007f2baa4adc90 RCX: 0000000000457e29 [ 667.638247] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000003 16:58:28 executing program 5: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x3, 0x2) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000400)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000240)={0x15c, r3, 0x200, 0x70bd2a, 0x25dfdbfb, {}, [@TIPC_NLA_NODE={0x18, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_LINK={0xe4, 0x4, [@TIPC_NLA_LINK_PROP={0x4c, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x306a}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3f}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xa}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xd0e}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x101}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffffffffff0000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x800}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}]}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_NET={0x20, 0x7, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x3ff}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4}, @TIPC_NLA_NET_NODEID={0xc}]}, @TIPC_NLA_BEARER={0x2c, 0x1, [@TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_NAME={0x18, 0x1, @l2={'eth', 0x3a, 'bond_slave_0\x00'}}]}]}, 0x15c}, 0x1, 0x0, 0x0, 0x4008000}, 0x8000) splice(r0, 0x0, r2, 0x0, 0x1ffe0, 0x0) accept4$bt_l2cap(r1, &(0x7f0000000000), &(0x7f00000000c0)=0xe, 0x80000) 16:58:28 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000, 0x0, 0xe00]}}]}, 0x2b2}}, 0x0) 16:58:28 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x10000000, 0x0, {0xa, 0x0, 0x0, r1}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x3, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) 16:58:28 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x81000000, 0x0, {0xa, 0x0, 0x0, r1, 0x0, 0x0, 0xa00000000000000}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) [ 667.645543] RBP: 000000000073bfa0 R08: 00000000000100e0 R09: 0000000000000000 [ 667.652818] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f2baa4ae6d4 [ 667.660082] R13: 00000000004c6c75 R14: 00000000004db870 R15: 0000000000000007 16:58:28 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x88a8ffff, 0x0, {0xa, 0x0, 0x0, r1, 0x0, 0x0, 0xa00000000000000}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) 16:58:28 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x60000000, 0x0, {0xa, 0x0, 0x0, r1}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x3, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) 16:58:28 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000, 0x0, 0xf00]}}]}, 0x2b2}}, 0x0) 16:58:28 executing program 2: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x3, 0x2) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r1, 0x84, 0x6c, &(0x7f0000000100)={0x0, 0x1a, "bf704764ae5cfd028fd29a1082a632bd98a7c664f72f2ff1f7c3"}, &(0x7f0000000200)=0x22) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000000240)=@sack_info={r3, 0x40, 0x1}, 0xc) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) splice(r0, 0x0, r2, 0x0, 0x10005, 0xa00000000000000) getsockopt$IP6T_SO_GET_REVISION_TARGET(r0, 0x29, 0x45, &(0x7f0000000000)={'HL\x00'}, &(0x7f00000000c0)=0x1e) 16:58:28 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000, 0x0, 0x3f00]}}]}, 0x2b2}}, 0x0) 16:58:28 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x9c080000, 0x0, {0xa, 0x0, 0x0, r1, 0x0, 0x0, 0xa00000000000000}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) 16:58:28 executing program 0 (fault-call:8 fault-nth:81): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x3, 0x2) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) splice(r0, 0x0, r2, 0x0, 0x100e0, 0x0) 16:58:28 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x62060000, 0x0, {0xa, 0x0, 0x0, r1}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x3, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) [ 668.252506] FAULT_INJECTION: forcing a failure. [ 668.252506] name failslab, interval 1, probability 0, space 0, times 0 [ 668.263960] CPU: 0 PID: 29409 Comm: syz-executor.0 Not tainted 5.0.0+ #6 [ 668.270792] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 668.280144] Call Trace: [ 668.282735] dump_stack+0x172/0x1f0 [ 668.286374] should_fail.cold+0xa/0x1b [ 668.290280] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 668.295396] ? lock_downgrade+0x810/0x810 [ 668.299561] ? ___might_sleep+0x163/0x280 [ 668.303708] __should_failslab+0x121/0x190 [ 668.307928] should_failslab+0x9/0x14 [ 668.311723] kmem_cache_alloc_node_trace+0x270/0x720 [ 668.316840] ? __alloc_skb+0xd5/0x5e0 [ 668.320624] ? rcu_lockdep_current_cpu_online+0xe3/0x130 [ 668.326077] __kmalloc_node_track_caller+0x3d/0x70 [ 668.330999] __kmalloc_reserve.isra.0+0x40/0xf0 [ 668.335660] __alloc_skb+0x10b/0x5e0 [ 668.339376] ? skb_scrub_packet+0x440/0x440 [ 668.343694] ? rt_set_nexthop.constprop.0+0x529/0x11d0 [ 668.348986] __ip_append_data.isra.0+0x24d6/0x2dd0 [ 668.353928] ? raw_destroy+0x30/0x30 [ 668.357645] ? __ip_flush_pending_frames.isra.0+0x2d0/0x2d0 [ 668.363335] ? ipv4_mtu+0x2a9/0x400 [ 668.366956] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 668.372498] ? ip_setup_cork+0x53b/0x870 [ 668.376597] ? raw_destroy+0x30/0x30 [ 668.380311] ip_append_data.part.0+0xf2/0x170 [ 668.384793] ? raw_destroy+0x30/0x30 [ 668.388546] ip_append_data+0x6e/0x90 [ 668.392350] raw_sendmsg+0xbd8/0x2f10 [ 668.396161] ? raw_getsockopt+0x100/0x100 [ 668.400327] ? ima_match_policy+0xa19/0x13d0 [ 668.404727] ? process_measurement+0xd5d/0x1570 [ 668.409402] ? mark_held_locks+0xb1/0x100 [ 668.413552] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 668.418308] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 668.423049] ? __lock_acquire+0x53b/0x4700 [ 668.427309] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 668.432088] inet_sendmsg+0x147/0x5d0 [ 668.435920] ? raw_getsockopt+0x100/0x100 [ 668.440073] ? inet_sendmsg+0x147/0x5d0 [ 668.444069] ? ipip_gro_receive+0x100/0x100 [ 668.448392] sock_sendmsg+0xdd/0x130 [ 668.452102] kernel_sendmsg+0x44/0x50 [ 668.455908] sock_no_sendpage+0x116/0x150 [ 668.460052] ? sock_kzfree_s+0x70/0x70 [ 668.463932] ? retint_kernel+0x2d/0x2d [ 668.467827] inet_sendpage+0x44a/0x630 [ 668.471712] kernel_sendpage+0x95/0xf0 [ 668.475607] ? inet_sendmsg+0x5d0/0x5d0 [ 668.479613] sock_sendpage+0x8b/0xc0 [ 668.483337] ? lockdep_hardirqs_on+0x415/0x5d0 [ 668.487910] pipe_to_sendpage+0x299/0x370 [ 668.492053] ? kernel_sendpage+0xf0/0xf0 [ 668.496110] ? direct_splice_actor+0x1a0/0x1a0 [ 668.500678] ? __put_page+0x92/0xd0 [ 668.504298] ? anon_pipe_buf_release+0x1c6/0x270 [ 668.509059] __splice_from_pipe+0x39a/0x7e0 [ 668.513384] ? direct_splice_actor+0x1a0/0x1a0 [ 668.517990] ? direct_splice_actor+0x1a0/0x1a0 [ 668.522560] splice_from_pipe+0x108/0x170 [ 668.526710] ? splice_shrink_spd+0xd0/0xd0 [ 668.530943] ? retint_kernel+0x2d/0x2d [ 668.534840] ? direct_splice_actor+0x1a0/0x1a0 [ 668.539415] generic_splice_sendpage+0x3c/0x50 [ 668.544008] ? splice_from_pipe+0x170/0x170 [ 668.548341] do_splice+0x70a/0x1490 [ 668.551977] ? iterate_fd+0x360/0x360 [ 668.555808] ? opipe_prep.part.0+0x2d0/0x2d0 [ 668.560232] ? __fget_light+0x1a9/0x230 [ 668.564246] __x64_sys_splice+0x2c6/0x330 [ 668.568433] do_syscall_64+0x103/0x610 [ 668.572339] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 668.577553] RIP: 0033:0x457e29 [ 668.580750] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 16:58:29 executing program 5: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x3, 0x2) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x7, 0x0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$bt_BT_FLUSHABLE(r0, 0x112, 0x8, &(0x7f0000000000)=0x20, 0x4) recvfrom$netrom(r3, &(0x7f00000000c0)=""/30, 0x1e, 0x2, &(0x7f0000000200)={{0x3, @default, 0x1}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @default, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) splice(r0, 0x0, r2, 0x0, 0x1ffe0, 0x0) 16:58:29 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000, 0x0, 0x5865]}}]}, 0x2b2}}, 0x0) 16:58:29 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x65580000, 0x0, {0xa, 0x0, 0x0, r1}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x3, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) 16:58:29 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x9effffff, 0x0, {0xa, 0x0, 0x0, r1, 0x0, 0x0, 0xa00000000000000}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) [ 668.599649] RSP: 002b:00007f2baa4adc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 668.607364] RAX: ffffffffffffffda RBX: 00007f2baa4adc90 RCX: 0000000000457e29 [ 668.614656] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000003 [ 668.621947] RBP: 000000000073bfa0 R08: 00000000000100e0 R09: 0000000000000000 [ 668.629211] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f2baa4ae6d4 [ 668.636488] R13: 00000000004c6c75 R14: 00000000004db870 R15: 0000000000000007 16:58:29 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000, 0x0, 0x6000]}}]}, 0x2b2}}, 0x0) 16:58:29 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x81000000, 0x0, {0xa, 0x0, 0x0, r1}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x3, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) 16:58:29 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0xa0008000, 0x0, {0xa, 0x0, 0x0, r1, 0x0, 0x0, 0xa00000000000000}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) 16:58:29 executing program 2: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) recvmmsg(r0, &(0x7f00000000c0), 0x0, 0x0, &(0x7f0000000100)) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x1, 0x2) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) splice(r0, 0x0, r2, 0x0, 0x10005, 0xa00000000000000) syz_open_dev$sndmidi(&(0x7f0000000080)='/dev/snd/midiC#D#\x00', 0x9f6, 0x8000) 16:58:29 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x82020000, 0x0, {0xa, 0x0, 0x0, r1}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x3, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) 16:58:29 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000, 0x0, 0x6558]}}]}, 0x2b2}}, 0x0) 16:58:29 executing program 0 (fault-call:8 fault-nth:82): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x3, 0x2) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) splice(r0, 0x0, r2, 0x0, 0x100e0, 0x0) 16:58:29 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0xa0010000, 0x0, {0xa, 0x0, 0x0, r1, 0x0, 0x0, 0xa00000000000000}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) [ 669.183256] FAULT_INJECTION: forcing a failure. [ 669.183256] name failslab, interval 1, probability 0, space 0, times 0 [ 669.195315] CPU: 0 PID: 29458 Comm: syz-executor.0 Not tainted 5.0.0+ #6 [ 669.202145] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 669.211490] Call Trace: [ 669.214080] dump_stack+0x172/0x1f0 [ 669.217709] should_fail.cold+0xa/0x1b [ 669.221626] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 669.226729] ? lock_downgrade+0x810/0x810 [ 669.230875] ? ___might_sleep+0x163/0x280 [ 669.235023] __should_failslab+0x121/0x190 [ 669.239272] should_failslab+0x9/0x14 [ 669.243098] kmem_cache_alloc_node_trace+0x270/0x720 [ 669.248218] ? __alloc_skb+0xd5/0x5e0 [ 669.252020] ? rcu_lockdep_current_cpu_online+0xe3/0x130 [ 669.257464] __kmalloc_node_track_caller+0x3d/0x70 [ 669.262394] __kmalloc_reserve.isra.0+0x40/0xf0 [ 669.267059] __alloc_skb+0x10b/0x5e0 [ 669.270784] ? skb_scrub_packet+0x440/0x440 [ 669.275105] ? mark_held_locks+0xb1/0x100 [ 669.279252] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 669.284024] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 669.288818] __ip_append_data.isra.0+0x24d6/0x2dd0 [ 669.293753] ? raw_destroy+0x30/0x30 [ 669.297492] ? __ip_flush_pending_frames.isra.0+0x2d0/0x2d0 [ 669.303220] ? ipv4_mtu+0x2a9/0x400 [ 669.307237] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 669.312779] ? ip_setup_cork+0x53b/0x870 [ 669.316841] ? raw_destroy+0x30/0x30 [ 669.320554] ip_append_data.part.0+0xf2/0x170 [ 669.325047] ? raw_destroy+0x30/0x30 [ 669.328758] ip_append_data+0x6e/0x90 [ 669.332577] raw_sendmsg+0xbd8/0x2f10 [ 669.336389] ? lockdep_hardirqs_on+0x342/0x5d0 [ 669.340974] ? raw_getsockopt+0x100/0x100 [ 669.345116] ? lockdep_hardirqs_on+0x415/0x5d0 [ 669.349714] ? process_measurement+0xd5d/0x1570 [ 669.354412] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 669.359173] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 669.363917] ? lockdep_hardirqs_on+0x415/0x5d0 [ 669.368484] ? retint_kernel+0x2d/0x2d [ 669.372358] ? trace_hardirqs_on_caller+0x6a/0x220 [ 669.377311] ? __lock_acquire+0x53b/0x4700 [ 669.381544] ? retint_kernel+0x2d/0x2d [ 669.385447] inet_sendmsg+0x147/0x5d0 [ 669.389238] ? raw_getsockopt+0x100/0x100 [ 669.393501] ? inet_sendmsg+0x147/0x5d0 [ 669.397460] ? ipip_gro_receive+0x100/0x100 [ 669.401783] sock_sendmsg+0xdd/0x130 [ 669.405504] kernel_sendmsg+0x44/0x50 [ 669.409318] sock_no_sendpage+0x116/0x150 [ 669.413466] ? sock_kzfree_s+0x70/0x70 [ 669.417344] ? debug_check_no_obj_freed+0x200/0x464 [ 669.422366] ? mark_held_locks+0xb1/0x100 [ 669.426510] inet_sendpage+0x44a/0x630 [ 669.430425] kernel_sendpage+0x95/0xf0 [ 669.434327] ? inet_sendmsg+0x5d0/0x5d0 [ 669.438302] sock_sendpage+0x8b/0xc0 [ 669.442005] ? lockdep_hardirqs_on+0x415/0x5d0 [ 669.446602] pipe_to_sendpage+0x299/0x370 [ 669.450751] ? kernel_sendpage+0xf0/0xf0 [ 669.454813] ? direct_splice_actor+0x1a0/0x1a0 [ 669.459395] ? __put_page+0x92/0xd0 [ 669.463027] ? anon_pipe_buf_release+0x1c6/0x270 [ 669.467797] __splice_from_pipe+0x39a/0x7e0 [ 669.472107] ? direct_splice_actor+0x1a0/0x1a0 [ 669.476676] ? direct_splice_actor+0x1a0/0x1a0 [ 669.481250] splice_from_pipe+0x108/0x170 [ 669.485411] ? splice_shrink_spd+0xd0/0xd0 [ 669.489643] ? retint_kernel+0x2d/0x2d [ 669.493527] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 669.499059] ? security_file_permission+0x94/0x320 [ 669.503983] generic_splice_sendpage+0x3c/0x50 [ 669.508578] ? splice_from_pipe+0x170/0x170 [ 669.512907] do_splice+0x70a/0x1490 [ 669.516531] ? iterate_fd+0x360/0x360 [ 669.520332] ? opipe_prep.part.0+0x2d0/0x2d0 [ 669.524744] ? __fget_light+0x1a9/0x230 [ 669.528750] __x64_sys_splice+0x2c6/0x330 16:58:30 executing program 5: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r1, 0x40bc5311, &(0x7f0000000200)={0x0, 0x2, 'client1\x00', 0x2, "2c7fca6723686424", "91cd0c81bdecb0e9ba5d018d9832e5c5e4ca02ae3b7f89eff672773cae53f9bc", 0x1, 0x7}) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x3, 0x2) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) splice(r0, 0x0, r2, 0x0, 0x1ffe0, 0x0) ioctl$KVM_SET_FPU(r1, 0x41a0ae8d, &(0x7f00000002c0)={[], 0x10000, 0x7ff, 0x1f, 0x0, 0x38000, 0x1, 0x4, [], 0x2}) 16:58:30 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000, 0x0, 0x8100]}}]}, 0x2b2}}, 0x0) 16:58:30 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x88a8ffff, 0x0, {0xa, 0x0, 0x0, r1}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x3, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) 16:58:30 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0xf0ffffff, 0x0, {0xa, 0x0, 0x0, r1, 0x0, 0x0, 0xa00000000000000}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) [ 669.532909] do_syscall_64+0x103/0x610 [ 669.536828] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 669.542014] RIP: 0033:0x457e29 [ 669.545202] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 669.564099] RSP: 002b:00007f2baa4adc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 669.571804] RAX: ffffffffffffffda RBX: 00007f2baa4adc90 RCX: 0000000000457e29 [ 669.571813] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000003 [ 669.571820] RBP: 000000000073bfa0 R08: 00000000000100e0 R09: 0000000000000000 [ 669.571828] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f2baa4ae6d4 [ 669.571836] R13: 00000000004c6c75 R14: 00000000004db870 R15: 0000000000000007 16:58:30 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000, 0x0, 0x8202]}}]}, 0x2b2}}, 0x0) 16:58:30 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x9effffff, 0x0, {0xa, 0x0, 0x0, r1}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x3, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) 16:58:30 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0xffffa888, 0x0, {0xa, 0x0, 0x0, r1, 0x0, 0x0, 0xa00000000000000}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) 16:58:30 executing program 2: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x3, 0x2) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) write$evdev(r0, &(0x7f00000000c0)=[{{0x77359400}, 0x14, 0x1ff, 0x5}, {{}, 0x15, 0x9, 0x3}, {{r3, r4/1000+30000}, 0x14, 0xba, 0x1}], 0x48) perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) splice(r0, 0x0, r2, 0x0, 0x10005, 0xa00000000000000) 16:58:30 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0xa0008000, 0x0, {0xa, 0x0, 0x0, r1}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x3, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) 16:58:30 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0xfffff000, 0x0, {0xa, 0x0, 0x0, r1, 0x0, 0x0, 0xa00000000000000}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) 16:58:30 executing program 0 (fault-call:8 fault-nth:83): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x3, 0x2) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) splice(r0, 0x0, r2, 0x0, 0x100e0, 0x0) 16:58:30 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000, 0x0, 0x9d02]}}]}, 0x2b2}}, 0x0) [ 670.071678] FAULT_INJECTION: forcing a failure. [ 670.071678] name failslab, interval 1, probability 0, space 0, times 0 [ 670.083475] CPU: 0 PID: 29510 Comm: syz-executor.0 Not tainted 5.0.0+ #6 [ 670.090310] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 670.099645] Call Trace: [ 670.102234] dump_stack+0x172/0x1f0 [ 670.105890] should_fail.cold+0xa/0x1b [ 670.109798] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 670.114895] ? lock_downgrade+0x810/0x810 [ 670.119038] ? ___might_sleep+0x163/0x280 [ 670.123256] __should_failslab+0x121/0x190 [ 670.127533] should_failslab+0x9/0x14 [ 670.131333] kmem_cache_alloc_node+0x264/0x710 [ 670.135909] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 670.140677] __alloc_skb+0xd5/0x5e0 [ 670.144310] ? skb_scrub_packet+0x440/0x440 [ 670.148624] ? __ip_append_data.isra.0+0x83a/0x2dd0 [ 670.153645] __ip_append_data.isra.0+0x24d6/0x2dd0 [ 670.158585] ? retint_kernel+0x2d/0x2d [ 670.162472] ? raw_destroy+0x30/0x30 [ 670.166182] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 670.170934] ? __ip_flush_pending_frames.isra.0+0x2d0/0x2d0 [ 670.176633] ? raw_destroy+0x30/0x30 [ 670.180360] ip_append_data.part.0+0xf2/0x170 [ 670.184862] ? raw_destroy+0x30/0x30 [ 670.188593] ip_append_data+0x6e/0x90 [ 670.192410] raw_sendmsg+0xbd8/0x2f10 [ 670.196230] ? lockdep_hardirqs_on+0x342/0x5d0 [ 670.200829] ? raw_getsockopt+0x100/0x100 [ 670.204981] ? process_measurement+0xd5d/0x1570 [ 670.209658] ? process_measurement+0xd5d/0x1570 [ 670.214329] ? mark_held_locks+0xb1/0x100 [ 670.218461] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 670.223224] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 670.227972] ? __lock_acquire+0x53b/0x4700 [ 670.232197] ? mark_held_locks+0xb1/0x100 [ 670.236340] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 670.241102] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 670.245859] inet_sendmsg+0x147/0x5d0 [ 670.249646] ? raw_getsockopt+0x100/0x100 [ 670.253784] ? inet_sendmsg+0x147/0x5d0 [ 670.257757] ? ipip_gro_receive+0x100/0x100 [ 670.262085] sock_sendmsg+0xdd/0x130 [ 670.265793] kernel_sendmsg+0x44/0x50 [ 670.269580] sock_no_sendpage+0x116/0x150 [ 670.273717] ? sock_kzfree_s+0x70/0x70 [ 670.277586] ? trace_hardirqs_on_caller+0x6a/0x220 [ 670.282523] ? retint_kernel+0x2d/0x2d [ 670.286420] inet_sendpage+0x44a/0x630 [ 670.290313] kernel_sendpage+0x95/0xf0 [ 670.294192] ? inet_sendmsg+0x5d0/0x5d0 [ 670.298178] sock_sendpage+0x8b/0xc0 [ 670.301889] pipe_to_sendpage+0x299/0x370 [ 670.306064] ? kernel_sendpage+0xf0/0xf0 [ 670.310128] ? direct_splice_actor+0x1a0/0x1a0 [ 670.314701] ? __put_page+0x92/0xd0 [ 670.318327] ? anon_pipe_buf_release+0x1c6/0x270 [ 670.323086] __splice_from_pipe+0x39a/0x7e0 [ 670.327399] ? direct_splice_actor+0x1a0/0x1a0 [ 670.331966] ? direct_splice_actor+0x1a0/0x1a0 [ 670.336539] splice_from_pipe+0x108/0x170 [ 670.340680] ? splice_shrink_spd+0xd0/0xd0 [ 670.344919] ? rw_verify_area+0xa4/0x360 [ 670.348975] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 670.354501] ? security_file_permission+0x94/0x320 [ 670.359438] ? __sanitizer_cov_trace_pc+0x1/0x50 [ 670.364215] generic_splice_sendpage+0x3c/0x50 [ 670.368797] ? splice_from_pipe+0x170/0x170 [ 670.373133] do_splice+0x70a/0x1490 [ 670.376747] ? iterate_fd+0x360/0x360 [ 670.380545] ? opipe_prep.part.0+0x2d0/0x2d0 [ 670.384955] ? __fget_light+0x1a9/0x230 [ 670.388952] __x64_sys_splice+0x2c6/0x330 [ 670.393102] do_syscall_64+0x103/0x610 [ 670.396990] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 670.402170] RIP: 0033:0x457e29 [ 670.405381] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 670.424294] RSP: 002b:00007f2baa4adc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 670.431994] RAX: ffffffffffffffda RBX: 00007f2baa4adc90 RCX: 0000000000457e29 [ 670.439296] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000003 [ 670.446587] RBP: 000000000073bfa0 R08: 00000000000100e0 R09: 0000000000000000 [ 670.453856] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f2baa4ae6d4 [ 670.461133] R13: 00000000004c6c75 R14: 00000000004db870 R15: 0000000000000007 16:58:31 executing program 5: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) statfs(&(0x7f0000000000)='\x00', &(0x7f0000000200)=""/231) r2 = socket$inet_udp(0x2, 0x2, 0x0) socket$isdn_base(0x22, 0x3, 0x0) close(r2) ioctl$PERF_EVENT_IOC_DISABLE(r1, 0x2401, 0x4) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) write$P9_RREADDIR(r1, &(0x7f0000000300)={0x141, 0x29, 0x2, {0xc792, [{{0x0, 0x3, 0x7}, 0x20, 0x7, 0x7, './file0'}, {{0x2, 0x4}, 0x40, 0xe6f8, 0x7, './file0'}, {{0x0, 0x1, 0x7}, 0x2, 0x7ff, 0x7, './file0'}, {{0x40, 0x3, 0x5}, 0x0, 0x0, 0x7, './file0'}, {{0x20, 0x2, 0x4}, 0x4, 0x1060, 0x7, './file0'}, {{0x40, 0x1, 0x1}, 0x220e, 0x0, 0x7, './file0'}, {{0x80, 0x3, 0x8}, 0x9, 0x1, 0x7, './file0'}, {{0x40, 0x4, 0x3}, 0x0, 0x3, 0x7, './file0'}, {{0x10, 0x0, 0x1}, 0xf21b, 0x4000000000000, 0x7, './file0'}, {{0x81, 0x1, 0x7}, 0x80000000, 0x8000, 0x7, './file0'}]}}, 0x141) ioctl$SCSI_IOCTL_SYNC(r1, 0x4) socket$inet(0x2, 0x3, 0x2) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) r3 = perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet_SIOCGIFNETMASK(r3, 0x891b, &(0x7f00000000c0)={'syz_tun\x00', {0x2, 0x4e22, @rand_addr=0x2}}) splice(r0, 0x0, r2, 0x0, 0x1ffe0, 0x0) 16:58:31 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0xa0010000, 0x0, {0xa, 0x0, 0x0, r1}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x3, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) 16:58:31 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000, 0x0, 0xf000]}}]}, 0x2b2}}, 0x0) 16:58:31 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0xffffff7f, 0x0, {0xa, 0x0, 0x0, r1, 0x0, 0x0, 0xa00000000000000}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) 16:58:31 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0xf0ffffff, 0x0, {0xa, 0x0, 0x0, r1}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x3, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) 16:58:31 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0xffffff9e, 0x0, {0xa, 0x0, 0x0, r1, 0x0, 0x0, 0xa00000000000000}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) 16:58:31 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000, 0x0, 0x34000]}}]}, 0x2b2}}, 0x0) 16:58:31 executing program 2: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x20441, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x3, 0x2) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r1, 0xc028ae92, &(0x7f00000000c0)={0x20, 0x3ff}) splice(r0, 0x0, r2, 0x0, 0x10005, 0xa00000000000000) 16:58:31 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0xffffa888, 0x0, {0xa, 0x0, 0x0, r1}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x3, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) 16:58:31 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0xfffffff0, 0x0, {0xa, 0x0, 0x0, r1, 0x0, 0x0, 0xa00000000000000}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) 16:58:31 executing program 0 (fault-call:8 fault-nth:84): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x3, 0x2) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) splice(r0, 0x0, r2, 0x0, 0x100e0, 0x0) 16:58:31 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000, 0x0, 0x400300]}}]}, 0x2b2}}, 0x0) [ 671.051423] FAULT_INJECTION: forcing a failure. [ 671.051423] name failslab, interval 1, probability 0, space 0, times 0 [ 671.064234] CPU: 0 PID: 29560 Comm: syz-executor.0 Not tainted 5.0.0+ #6 [ 671.071107] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 671.080445] Call Trace: [ 671.083035] dump_stack+0x172/0x1f0 [ 671.086651] should_fail.cold+0xa/0x1b [ 671.090553] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 671.095653] ? lock_downgrade+0x810/0x810 [ 671.099783] ? ___might_sleep+0x163/0x280 [ 671.103932] __should_failslab+0x121/0x190 [ 671.108187] should_failslab+0x9/0x14 [ 671.111993] kmem_cache_alloc_node_trace+0x270/0x720 [ 671.117090] ? __alloc_skb+0xd5/0x5e0 [ 671.120894] ? rcu_lockdep_current_cpu_online+0xe3/0x130 [ 671.126344] __kmalloc_node_track_caller+0x3d/0x70 [ 671.131282] __kmalloc_reserve.isra.0+0x40/0xf0 [ 671.135964] __alloc_skb+0x10b/0x5e0 [ 671.139669] ? skb_scrub_packet+0x440/0x440 [ 671.143986] ? raw_getfrag+0x164/0x230 [ 671.147884] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 671.152910] __ip_append_data.isra.0+0x24d6/0x2dd0 [ 671.157857] ? raw_destroy+0x30/0x30 [ 671.161586] ? __ip_flush_pending_frames.isra.0+0x2d0/0x2d0 [ 671.167331] ? ipv4_mtu+0x2a9/0x400 [ 671.170971] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 671.176503] ? ip_setup_cork+0x53b/0x870 [ 671.180560] ? raw_destroy+0x30/0x30 [ 671.184293] ip_append_data.part.0+0xf2/0x170 [ 671.188806] ? raw_destroy+0x30/0x30 [ 671.192529] ip_append_data+0x6e/0x90 [ 671.196344] raw_sendmsg+0xbd8/0x2f10 [ 671.200154] ? raw_getsockopt+0x100/0x100 [ 671.204307] ? ima_match_policy+0xa19/0x13d0 [ 671.208740] ? process_measurement+0xd5d/0x1570 [ 671.213443] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 671.218211] ? lockdep_hardirqs_on+0x415/0x5d0 [ 671.222808] ? retint_kernel+0x2d/0x2d [ 671.226685] ? trace_hardirqs_on_caller+0x6a/0x220 [ 671.231616] ? __lock_acquire+0x53b/0x4700 [ 671.235874] ? retint_kernel+0x2d/0x2d [ 671.239795] inet_sendmsg+0x147/0x5d0 [ 671.243603] ? raw_getsockopt+0x100/0x100 [ 671.247736] ? inet_sendmsg+0x147/0x5d0 [ 671.251704] ? ipip_gro_receive+0x100/0x100 [ 671.256040] sock_sendmsg+0xdd/0x130 [ 671.259765] kernel_sendmsg+0x44/0x50 [ 671.263565] sock_no_sendpage+0x116/0x150 [ 671.267709] ? sock_kzfree_s+0x70/0x70 [ 671.271601] ? trace_hardirqs_on_caller+0x6a/0x220 [ 671.276534] ? retint_kernel+0x2d/0x2d [ 671.280428] inet_sendpage+0x44a/0x630 [ 671.284321] kernel_sendpage+0x95/0xf0 [ 671.288202] ? inet_sendmsg+0x5d0/0x5d0 [ 671.292176] sock_sendpage+0x8b/0xc0 [ 671.295883] ? lockdep_hardirqs_on+0x415/0x5d0 [ 671.300482] pipe_to_sendpage+0x299/0x370 [ 671.304725] ? kernel_sendpage+0xf0/0xf0 [ 671.308829] ? direct_splice_actor+0x1a0/0x1a0 [ 671.313418] ? __put_page+0x92/0xd0 [ 671.317043] ? anon_pipe_buf_release+0x1c6/0x270 [ 671.321818] __splice_from_pipe+0x39a/0x7e0 [ 671.326137] ? direct_splice_actor+0x1a0/0x1a0 [ 671.330726] ? direct_splice_actor+0x1a0/0x1a0 [ 671.335326] splice_from_pipe+0x108/0x170 [ 671.339474] ? splice_shrink_spd+0xd0/0xd0 [ 671.343708] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 671.349241] ? security_file_permission+0x94/0x320 [ 671.354191] generic_splice_sendpage+0x3c/0x50 [ 671.358780] ? splice_from_pipe+0x170/0x170 [ 671.363108] do_splice+0x70a/0x1490 [ 671.366733] ? iterate_fd+0x360/0x360 [ 671.370551] ? opipe_prep.part.0+0x2d0/0x2d0 [ 671.374962] ? __fget_light+0x1a9/0x230 [ 671.378944] __x64_sys_splice+0x2c6/0x330 [ 671.383093] do_syscall_64+0x103/0x610 [ 671.386966] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 671.392144] RIP: 0033:0x457e29 [ 671.395547] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 671.414431] RSP: 002b:00007f2baa4adc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 671.422132] RAX: ffffffffffffffda RBX: 00007f2baa4adc90 RCX: 0000000000457e29 [ 671.429403] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000003 [ 671.436662] RBP: 000000000073bfa0 R08: 00000000000100e0 R09: 0000000000000000 [ 671.443921] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f2baa4ae6d4 [ 671.451186] R13: 00000000004c6c75 R14: 00000000004db870 R15: 0000000000000007 16:58:32 executing program 5: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r3 = socket$inet(0x2, 0x3, 0x2) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f0000000200)={0xffffffffffffffff, 0x1, 0x3f, 0x3, 0x2}) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f00000000c0)=@assoc_value={0x0}, &(0x7f0000000100)=0x8) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f00000001c0)=@sack_info={r4, 0x7f, 0x101}, 0xc) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x8, &(0x7f0000000000)=0x10000, 0x4) splice(r0, 0x0, r2, 0x0, 0x7, 0x1) 16:58:32 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0xfffff000, 0x0, {0xa, 0x0, 0x0, r1}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x3, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) 16:58:32 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x1a0ffffffff, 0x0, {0xa, 0x0, 0x0, r1, 0x0, 0x0, 0xa00000000000000}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) 16:58:32 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000, 0x0, 0x8000a0]}}]}, 0x2b2}}, 0x0) 16:58:32 executing program 5: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x3, 0x2) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) r3 = perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000200)={0x0, @in={{0x2, 0x4e22, @remote}}, 0xe9, 0x7}, &(0x7f0000000000)=0x90) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r3, 0x84, 0x71, &(0x7f00000000c0)={r4, 0x7}, &(0x7f0000000100)=0x8) splice(r0, 0x0, r2, 0x0, 0x1ffe0, 0x0) [ 671.535877] net_ratelimit: 96 callbacks suppressed [ 671.535884] neighbour: ndisc_cache: neighbor table overflow! [ 671.563296] neighbour: ndisc_cache: neighbor table overflow! [ 671.576844] neighbour: ndisc_cache: neighbor table overflow! 16:58:32 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000, 0x0, 0xf0ffff]}}]}, 0x2b2}}, 0x0) 16:58:32 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0xffffff7f, 0x0, {0xa, 0x0, 0x0, r1}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x3, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) [ 671.594868] neighbour: ndisc_cache: neighbor table overflow! [ 671.605918] neighbour: ndisc_cache: neighbor table overflow! [ 671.617931] neighbour: ndisc_cache: neighbor table overflow! [ 671.675807] neighbour: ndisc_cache: neighbor table overflow! [ 671.690885] neighbour: ndisc_cache: neighbor table overflow! [ 671.800966] neighbour: ndisc_cache: neighbor table overflow! [ 671.849221] neighbour: ndisc_cache: neighbor table overflow! 16:58:32 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r1 = socket$inet(0x2, 0x3, 0x2) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) io_setup(0x81, &(0x7f0000000080)=0x0) r3 = syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x1, 0x2) io_cancel(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x3, 0x2, r1, &(0x7f0000000200)="db2d285de9323acbeefaaa97d5c59530b77d31499ebf64b66c1d4574081cd0d66e452532465d4a5a3c85037ad1f3462bc80a4604caed87430949aa89fbc5c3a8bc2b06603b320e2a7c89b5414f22d8e0093a0f8853101713089077f53d2dd2e6550d89f6b415deea9ae3ba4b4b5c91cf3daab2bd2de7f3c1a20220b2f82d823278c35da618bc2b1bf675128da80e05ad80887933940c4d255a1832c4609ac08ad813879aff48c88d8696dfa53eb943cdd0f5b2a978fb", 0xb6, 0x8, 0x0, 0x1, r3}, &(0x7f0000000300)) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) openat$audio(0xffffffffffffff9c, &(0x7f0000000340)='/dev/audio\x00', 0x80000, 0x0) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r1, 0x84, 0x21, &(0x7f0000000000), &(0x7f00000000c0)=0x4) perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x10005, 0xa00000000000000) 16:58:32 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x8000a0ffffffff, 0x0, {0xa, 0x0, 0x0, r1, 0x0, 0x0, 0xa00000000000000}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) 16:58:32 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0xffffff9e, 0x0, {0xa, 0x0, 0x0, r1}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x3, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) 16:58:32 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000, 0x0, 0x1000000]}}]}, 0x2b2}}, 0x0) 16:58:32 executing program 0 (fault-call:8 fault-nth:85): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x3, 0x2) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) splice(r0, 0x0, r2, 0x0, 0x100e0, 0x0) 16:58:32 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0xfffffff0, 0x0, {0xa, 0x0, 0x0, r1}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x3, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) 16:58:32 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0xf0ffffffffffff, 0x0, {0xa, 0x0, 0x0, r1, 0x0, 0x0, 0xa00000000000000}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) 16:58:33 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000, 0x0, 0x2000000]}}]}, 0x2b2}}, 0x0) 16:58:33 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x1a0ffffffff, 0x0, {0xa, 0x0, 0x0, r1}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x3, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) [ 672.279158] FAULT_INJECTION: forcing a failure. [ 672.279158] name failslab, interval 1, probability 0, space 0, times 0 [ 672.326052] CPU: 0 PID: 29611 Comm: syz-executor.0 Not tainted 5.0.0+ #6 [ 672.332919] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 672.332925] Call Trace: [ 672.332952] dump_stack+0x172/0x1f0 [ 672.332977] should_fail.cold+0xa/0x1b [ 672.332997] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 672.333029] __should_failslab+0x121/0x190 [ 672.333050] should_failslab+0x9/0x14 [ 672.333065] kmem_cache_alloc+0x47/0x6f0 [ 672.333093] skb_clone+0x150/0x3b0 [ 672.333114] ip_mc_output+0x3aa/0xf70 [ 672.333138] ? __ip_queue_xmit+0x1bf0/0x1bf0 [ 672.333156] ? rcu_lockdep_current_cpu_online+0xe3/0x130 [ 672.333179] ? ip_append_data.part.0+0x170/0x170 [ 672.361900] ? dst_release+0x62/0xb0 [ 672.361918] ? __ip_make_skb+0xf93/0x1820 [ 672.361938] ip_local_out+0xc4/0x1b0 [ 672.361956] ip_send_skb+0x42/0xf0 [ 672.406764] ip_push_pending_frames+0x64/0x80 [ 672.411280] raw_sendmsg+0x1e5d/0x2f10 [ 672.415204] ? raw_getsockopt+0x100/0x100 [ 672.419361] ? ima_match_policy+0xa19/0x13d0 [ 672.423768] ? process_measurement+0xd5d/0x1570 [ 672.428425] ? process_measurement+0xd5d/0x1570 [ 672.433096] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 672.437855] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 672.442609] ? mark_held_locks+0xb1/0x100 [ 672.446772] ? __lock_acquire+0x53b/0x4700 [ 672.451021] ? lockdep_hardirqs_on+0x415/0x5d0 [ 672.455596] ? retint_kernel+0x2d/0x2d [ 672.459502] ? trace_hardirqs_on_caller+0x6a/0x220 [ 672.464497] inet_sendmsg+0x147/0x5d0 [ 672.468324] ? raw_getsockopt+0x100/0x100 [ 672.472489] ? inet_sendmsg+0x147/0x5d0 [ 672.476491] ? ipip_gro_receive+0x100/0x100 [ 672.480828] sock_sendmsg+0xdd/0x130 [ 672.484551] kernel_sendmsg+0x44/0x50 [ 672.488370] sock_no_sendpage+0x116/0x150 [ 672.492554] ? sock_kzfree_s+0x70/0x70 [ 672.496460] ? trace_hardirqs_on_caller+0x6a/0x220 [ 672.501410] ? retint_kernel+0x2d/0x2d [ 672.505330] inet_sendpage+0x44a/0x630 [ 672.509268] kernel_sendpage+0x95/0xf0 [ 672.509284] ? inet_sendmsg+0x5d0/0x5d0 [ 672.509309] sock_sendpage+0x8b/0xc0 [ 672.509325] ? lockdep_hardirqs_on+0x415/0x5d0 16:58:33 executing program 5: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) getpeername$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, &(0x7f00000000c0)=0x1c) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x3, 0x2) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_FSSETXATTR(r3, 0xc020660b, &(0x7f0000000040)={0x6, 0x0, 0x0, 0x7fffffff, 0x0, 0x980000}) splice(r0, 0x0, r2, 0x0, 0x1ffe0, 0x0) 16:58:33 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x100000000000000, 0x0, {0xa, 0x0, 0x0, r1, 0x0, 0x0, 0xa00000000000000}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) 16:58:33 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000, 0x0, 0x3000000]}}]}, 0x2b2}}, 0x0) 16:58:33 executing program 2: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000300)=[@in6={0xa, 0x4e22, 0xff, @dev={0xfe, 0x80, [], 0xe}, 0x1}, @in={0x2, 0x4e22, @local}, @in={0x2, 0x4e20, @multicast1}, @in6={0xa, 0x4e21, 0x6, @rand_addr="cbcd6aaba2d0da3331c8b6331c586755", 0x9}, @in={0x2, 0x4e24, @remote}, @in={0x2, 0x4e20, @broadcast}, @in={0x2, 0x4e23, @local}, @in6={0xa, 0x4e24, 0xfffffffffffffffc, @mcast1, 0x1ff}], 0xa4) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$SIOCX25GCALLUSERDATA(r1, 0x89e4, &(0x7f0000000200)={0x29, "731351dbc72dc30b9c041daaed7a1e3a423baada250748939c8797c5b07b6822a28b28a0eb5bf758fee9de70de7596e18506c2e26dbdac0c0b6acda773ad8f32a3d5ba9cb6d2532a05b1f5413c9cd13e86856722a796372908b9f9a734e0cff8fd24854f166ff4c3acd13e049f4e3f1abf44231de0e496d9347718d5cae83508"}) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x800000000000a, 0x1b5) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, &(0x7f0000000000)={0x0}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000100)={r3, 0x3}, &(0x7f00000002c0)=0x8) splice(r0, 0x0, r2, 0x0, 0x10005, 0xa00000000000000) [ 672.509347] pipe_to_sendpage+0x299/0x370 [ 672.509362] ? kernel_sendpage+0xf0/0xf0 [ 672.517244] ? direct_splice_actor+0x1a0/0x1a0 [ 672.538310] ? __put_page+0x92/0xd0 [ 672.541950] ? anon_pipe_buf_release+0x1c6/0x270 [ 672.546730] __splice_from_pipe+0x39a/0x7e0 [ 672.551063] ? direct_splice_actor+0x1a0/0x1a0 [ 672.555663] ? direct_splice_actor+0x1a0/0x1a0 [ 672.560269] splice_from_pipe+0x108/0x170 [ 672.564436] ? splice_shrink_spd+0xd0/0xd0 [ 672.568704] ? security_file_permission+0x94/0x320 16:58:33 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000, 0x0, 0x4000000]}}]}, 0x2b2}}, 0x0) [ 672.573655] generic_splice_sendpage+0x3c/0x50 [ 672.578244] ? splice_from_pipe+0x170/0x170 [ 672.582619] do_splice+0x70a/0x1490 [ 672.586274] ? iterate_fd+0x360/0x360 [ 672.590099] ? opipe_prep.part.0+0x2d0/0x2d0 [ 672.594520] ? __fget_light+0x1a9/0x230 [ 672.598534] __x64_sys_splice+0x2c6/0x330 [ 672.602692] do_syscall_64+0x103/0x610 [ 672.606629] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 672.611839] RIP: 0033:0x457e29 [ 672.615030] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 672.633939] RSP: 002b:00007f2baa4adc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 672.633955] RAX: ffffffffffffffda RBX: 00007f2baa4adc90 RCX: 0000000000457e29 [ 672.633963] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000003 [ 672.633971] RBP: 000000000073bfa0 R08: 00000000000100e0 R09: 0000000000000000 [ 672.633980] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f2baa4ae6d4 16:58:33 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x40030000000000, 0x0, {0xa, 0x0, 0x0, r1}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x3, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) 16:58:33 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x8000a0ffffffff, 0x0, {0xa, 0x0, 0x0, r1}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x3, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) [ 672.633989] R13: 00000000004c6c75 R14: 00000000004db870 R15: 0000000000000007 16:58:33 executing program 0 (fault-call:8 fault-nth:86): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x3, 0x2) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) splice(r0, 0x0, r2, 0x0, 0x100e0, 0x0) 16:58:33 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x200000000000000, 0x0, {0xa, 0x0, 0x0, r1, 0x0, 0x0, 0xa00000000000000}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) 16:58:33 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000, 0x0, 0x6000000]}}]}, 0x2b2}}, 0x0) 16:58:33 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0xf0ffffffffffff, 0x0, {0xa, 0x0, 0x0, r1}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x3, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) 16:58:33 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x300000000000000, 0x0, {0xa, 0x0, 0x0, r1, 0x0, 0x0, 0xa00000000000000}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) [ 673.027986] FAULT_INJECTION: forcing a failure. [ 673.027986] name failslab, interval 1, probability 0, space 0, times 0 [ 673.042685] CPU: 1 PID: 29672 Comm: syz-executor.0 Not tainted 5.0.0+ #6 [ 673.049533] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 673.058876] Call Trace: [ 673.061452] dump_stack+0x172/0x1f0 [ 673.065064] should_fail.cold+0xa/0x1b [ 673.068934] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 673.074024] ? lock_downgrade+0x810/0x810 [ 673.078186] __should_failslab+0x121/0x190 [ 673.082408] should_failslab+0x9/0x14 [ 673.086187] kmem_cache_alloc+0x47/0x6f0 [ 673.090229] ? __lock_is_held+0xb6/0x140 [ 673.094282] ? check_preemption_disabled+0x48/0x290 [ 673.099303] dst_alloc+0x10e/0x1d0 [ 673.102839] rt_dst_alloc+0x83/0x3f0 [ 673.106534] ip_route_output_key_hash_rcu+0x97d/0x30e0 [ 673.111843] ? ip_route_input_noref+0x280/0x280 [ 673.116505] ? kasan_check_read+0x11/0x20 [ 673.120656] ip_route_output_key_hash+0x212/0x380 [ 673.125494] ? ip_route_output_key_hash_rcu+0x30e0/0x30e0 [ 673.131030] ? raw_sendmsg+0x6b0/0x2f10 [ 673.135007] ? lock_downgrade+0x810/0x810 [ 673.139150] ip_route_output_flow+0x28/0xc0 [ 673.143483] raw_sendmsg+0xa10/0x2f10 [ 673.147279] ? raw_getsockopt+0x100/0x100 [ 673.151419] ? ima_match_policy+0xa19/0x13d0 [ 673.155832] ? process_measurement+0xd5d/0x1570 [ 673.160484] ? process_measurement+0xd5d/0x1570 [ 673.165154] ? lock_downgrade+0x810/0x810 [ 673.169324] ? __lock_acquire+0x53b/0x4700 [ 673.173563] ? __lock_acquire+0x53b/0x4700 [ 673.177780] ? __lock_acquire+0x53b/0x4700 [ 673.182025] inet_sendmsg+0x147/0x5d0 [ 673.185818] ? raw_getsockopt+0x100/0x100 [ 673.189984] ? inet_sendmsg+0x147/0x5d0 [ 673.193968] ? ipip_gro_receive+0x100/0x100 [ 673.198284] sock_sendmsg+0xdd/0x130 [ 673.201987] kernel_sendmsg+0x44/0x50 [ 673.205774] sock_no_sendpage+0x116/0x150 [ 673.209919] ? sock_kzfree_s+0x70/0x70 [ 673.213819] ? debug_check_no_obj_freed+0x200/0x464 [ 673.218827] ? mark_held_locks+0xb1/0x100 [ 673.222957] inet_sendpage+0x44a/0x630 [ 673.226830] kernel_sendpage+0x95/0xf0 [ 673.230701] ? inet_sendmsg+0x5d0/0x5d0 [ 673.234657] sock_sendpage+0x8b/0xc0 [ 673.238363] ? lockdep_hardirqs_on+0x415/0x5d0 [ 673.242956] pipe_to_sendpage+0x299/0x370 [ 673.247084] ? kernel_sendpage+0xf0/0xf0 [ 673.251126] ? direct_splice_actor+0x1a0/0x1a0 [ 673.255708] ? __put_page+0x92/0xd0 [ 673.259317] ? anon_pipe_buf_release+0x1c6/0x270 [ 673.264071] __splice_from_pipe+0x39a/0x7e0 [ 673.268387] ? direct_splice_actor+0x1a0/0x1a0 [ 673.272968] ? direct_splice_actor+0x1a0/0x1a0 [ 673.277528] splice_from_pipe+0x108/0x170 [ 673.281664] ? splice_shrink_spd+0xd0/0xd0 [ 673.286162] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 673.291695] ? security_file_permission+0x94/0x320 [ 673.296633] generic_splice_sendpage+0x3c/0x50 [ 673.301197] ? splice_from_pipe+0x170/0x170 [ 673.305502] do_splice+0x70a/0x1490 [ 673.309115] ? iterate_fd+0x360/0x360 [ 673.312924] ? opipe_prep.part.0+0x2d0/0x2d0 [ 673.317342] ? __fget_light+0x1a9/0x230 [ 673.321308] __x64_sys_splice+0x2c6/0x330 [ 673.325443] do_syscall_64+0x103/0x610 [ 673.329339] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 673.334520] RIP: 0033:0x457e29 [ 673.337728] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 673.356613] RSP: 002b:00007f2baa4adc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 673.364307] RAX: ffffffffffffffda RBX: 00007f2baa4adc90 RCX: 0000000000457e29 [ 673.371567] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000003 [ 673.378834] RBP: 000000000073bfa0 R08: 00000000000100e0 R09: 0000000000000000 [ 673.386081] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f2baa4ae6d4 [ 673.393332] R13: 00000000004c6c75 R14: 00000000004db870 R15: 0000000000000007 16:58:34 executing program 5: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) ioctl$VIDIOC_ENUMAUDIO(r1, 0xc0345641, &(0x7f0000000000)={0x9, "21298079a37ceb57ac3df7df90227b96b63b46f1cda4c44e7982e5d9ad33265e", 0x0, 0x1}) socket$inet(0x2, 0x3, 0x2) socketpair$unix(0x1, 0x1000000005, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'nr0\x01\x00', 0x2}) ioctl$UI_ABS_SETUP(r1, 0x401c5504, &(0x7f00000000c0)={0x0, {0x0, 0x6, 0x80000001, 0x6, 0x2d83, 0x5}}) ioctl$TUNSETPERSIST(r4, 0x400454e2, 0x713000) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) ioctl$SIOCX25SFACILITIES(r0, 0x89e3, &(0x7f0000000100)={0x7f, 0x2, 0xc, 0x8, 0x100000001, 0x81}) perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) splice(r0, 0x0, r2, 0x0, 0x1ffe0, 0x0) 16:58:34 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x100000000000000, 0x0, {0xa, 0x0, 0x0, r1}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x3, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) 16:58:34 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000, 0x0, 0x8000000]}}]}, 0x2b2}}, 0x0) 16:58:34 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x400000000000000, 0x0, {0xa, 0x0, 0x0, r1, 0x0, 0x0, 0xa00000000000000}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) 16:58:34 executing program 2: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) r3 = socket$inet(0x2, 0x3, 0x2) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r3, &(0x7f0000001780)=[{&(0x7f0000000200)=""/177, 0xb1}, {&(0x7f00000002c0)=""/170, 0xaa}, {&(0x7f0000000380)=""/214, 0xd6}, {&(0x7f0000000480)=""/186, 0xba}, {&(0x7f0000000540)=""/4096, 0x1000}, {&(0x7f00000000c0)=""/77, 0x4d}, {&(0x7f0000001540)=""/104, 0x68}, {&(0x7f00000015c0)=""/241, 0xf1}, {&(0x7f00000016c0)=""/168, 0xa8}], 0x9, 0x0) splice(r0, 0x0, r2, 0x0, 0x10005, 0xa00000000000000) 16:58:34 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x500000000000000, 0x0, {0xa, 0x0, 0x0, r1, 0x0, 0x0, 0xa00000000000000}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) 16:58:34 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000, 0x0, 0xa000000]}}]}, 0x2b2}}, 0x0) [ 673.700218] [ 673.701894] ====================================================== [ 673.708065] kobject: 'nr0' (0000000063d6d906): kobject_add_internal: parent: 'net', set: 'devices' [ 673.708204] WARNING: possible circular locking dependency detected [ 673.723709] 5.0.0+ #6 Not tainted [ 673.724046] kobject: 'nr0' (0000000063d6d906): kobject_uevent_env [ 673.727166] ------------------------------------------------------ [ 673.727173] syz-executor.2/29696 is trying to acquire lock: [ 673.727178] 00000000baa60392 (&sig->cred_guard_mutex){+.+.}, at: proc_pid_attr_write+0x1fa/0x530 [ 673.734364] kobject: 'nr0' (0000000063d6d906): fill_kobj_path: path = '/devices/virtual/net/nr0' [ 673.739793] [ 673.739793] but task is already holding lock: [ 673.739797] 00000000c117cc36 (&pipe->mutex/1){+.+.}, at: pipe_lock+0x6e/0x80 [ 673.739822] [ 673.739822] which lock already depends on the new lock. [ 673.739822] [ 673.739825] [ 673.739825] the existing dependency chain (in reverse order) is: [ 673.739828] [ 673.739828] -> #1 (&pipe->mutex/1){+.+.}: [ 673.739854] __mutex_lock+0xf7/0x1310 [ 673.739870] mutex_lock_nested+0x16/0x20 [ 673.747184] kobject: 'queues' (0000000008a11a48): kobject_add_internal: parent: 'nr0', set: '' [ 673.754501] fifo_open+0x159/0xb00 [ 673.754517] do_dentry_open+0x47d/0x1130 [ 673.754526] vfs_open+0xa0/0xd0 [ 673.754539] path_openat+0x10d7/0x4690 [ 673.754551] do_filp_open+0x1a1/0x280 [ 673.754565] do_open_execat+0x13b/0x6d0 [ 673.766128] kobject: 'queues' (0000000008a11a48): kobject_uevent_env [ 673.769648] __do_execve_file.isra.0+0x178d/0x23f0 [ 673.769659] __x64_sys_execve+0x8f/0xc0 [ 673.769672] do_syscall_64+0x103/0x610 [ 673.769684] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 673.769691] [ 673.769691] -> #0 (&sig->cred_guard_mutex){+.+.}: [ 673.776892] kobject: 'queues' (0000000008a11a48): kobject_uevent_env: filter function caused the event to drop! [ 673.785165] lock_acquire+0x16f/0x3f0 [ 673.785176] __mutex_lock+0xf7/0x1310 [ 673.785188] mutex_lock_interruptible_nested+0x16/0x20 [ 673.785200] proc_pid_attr_write+0x1fa/0x530 [ 673.785210] __vfs_write+0x116/0x8e0 [ 673.785219] __kernel_write+0x110/0x3b0 [ 673.785232] write_pipe_buf+0x15d/0x1f0 [ 673.785247] __splice_from_pipe+0x39a/0x7e0 [ 673.795056] kobject: 'rx-0' (00000000d076d7b4): kobject_add_internal: parent: 'queues', set: 'queues' [ 673.798497] splice_from_pipe+0x108/0x170 [ 673.798508] default_file_splice_write+0x3c/0x90 [ 673.798535] do_splice+0x70a/0x1490 [ 673.802933] kobject: 'rx-0' (00000000d076d7b4): kobject_uevent_env [ 673.807403] __x64_sys_splice+0x2c6/0x330 [ 673.807414] do_syscall_64+0x103/0x610 [ 673.807428] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 673.819395] kobject: 'rx-0' (00000000d076d7b4): fill_kobj_path: path = '/devices/virtual/net/nr0/queues/rx-0' [ 673.820850] [ 673.820850] other info that might help us debug this: [ 673.820850] [ 673.820854] Possible unsafe locking scenario: [ 673.820854] [ 673.820857] CPU0 CPU1 [ 673.820860] ---- ---- [ 673.820862] lock(&pipe->mutex/1); [ 673.825574] kobject: 'tx-0' (00000000c249b71c): kobject_add_internal: parent: 'queues', set: 'queues' [ 673.829219] lock(&sig->cred_guard_mutex); [ 673.829227] lock(&pipe->mutex/1); [ 673.829235] lock(&sig->cred_guard_mutex); [ 673.829242] [ 673.829242] *** DEADLOCK *** [ 673.829242] [ 673.829249] 2 locks held by syz-executor.2/29696: [ 673.829252] #0: 000000002f5f54eb (sb_writers#6){.+.+}, at: do_splice+0xdf9/0x1490 [ 673.829313] #1: 00000000c117cc36 (&pipe->mutex/1){+.+.}, at: pipe_lock+0x6e/0x80 [ 673.844771] kobject: 'tx-0' (00000000c249b71c): kobject_uevent_env [ 673.848996] [ 673.848996] stack backtrace: [ 673.849010] CPU: 0 PID: 29696 Comm: syz-executor.2 Not tainted 5.0.0+ #6 [ 673.849016] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 673.849020] Call Trace: [ 673.849038] dump_stack+0x172/0x1f0 [ 673.849065] print_circular_bug.isra.0.cold+0x1cc/0x28f [ 673.849080] __lock_acquire+0x2f00/0x4700 [ 673.872370] kobject: 'tx-0' (00000000c249b71c): fill_kobj_path: path = '/devices/virtual/net/nr0/queues/tx-0' [ 673.875392] ? trace_hardirqs_on+0x67/0x230 [ 673.875408] ? kasan_check_read+0x11/0x20 [ 673.933394] kobject: 'batman_adv' (0000000053f41a16): kobject_add_internal: parent: 'nr0', set: '' [ 673.936988] ? mark_held_locks+0x100/0x100 [ 673.937005] ? __kmalloc_track_caller+0x158/0x740 [ 673.937019] ? memdup_user+0x26/0xb0 [ 673.937036] ? proc_pid_attr_write+0x196/0x530 [ 673.995961] kobject: 'loop4' (000000003311922a): kobject_uevent_env [ 673.996540] ? __vfs_write+0x116/0x8e0 [ 673.996552] ? __kernel_write+0x110/0x3b0 [ 673.996565] ? write_pipe_buf+0x15d/0x1f0 [ 673.996581] ? __splice_from_pipe+0x39a/0x7e0 [ 674.002179] kobject: 'loop4' (000000003311922a): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 674.004860] ? __lock_is_held+0xb6/0x140 [ 674.004877] ? proc_pid_attr_write+0x1fa/0x530 [ 674.004891] lock_acquire+0x16f/0x3f0 [ 674.190650] ? proc_pid_attr_write+0x1fa/0x530 [ 674.195219] ? proc_pid_attr_write+0x1fa/0x530 [ 674.199784] __mutex_lock+0xf7/0x1310 [ 674.203593] ? proc_pid_attr_write+0x1fa/0x530 [ 674.208167] ? proc_pid_attr_write+0x1fa/0x530 [ 674.212751] ? mutex_trylock+0x1e0/0x1e0 [ 674.216807] ? _copy_from_user+0xfe/0x150 [ 674.220933] ? copy_user_generic_string+0x40/0x40 [ 674.225756] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 674.231277] ? _copy_from_user+0xdd/0x150 [ 674.235431] mutex_lock_interruptible_nested+0x16/0x20 [ 674.240735] ? mutex_lock_interruptible_nested+0x16/0x20 [ 674.246168] proc_pid_attr_write+0x1fa/0x530 [ 674.250561] __vfs_write+0x116/0x8e0 [ 674.254270] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 674.259027] ? proc_loginuid_write+0x4d0/0x4d0 [ 674.263611] ? kernel_read+0x120/0x120 [ 674.267485] ? retint_kernel+0x2d/0x2d [ 674.271352] ? trace_hardirqs_on_caller+0x6a/0x220 [ 674.276313] ? __lock_is_held+0xb6/0x140 [ 674.280394] __kernel_write+0x110/0x3b0 [ 674.284350] write_pipe_buf+0x15d/0x1f0 [ 674.288324] ? do_splice_direct+0x2a0/0x2a0 [ 674.292622] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 674.298136] ? splice_from_pipe_next.part.0+0x255/0x2f0 [ 674.303481] __splice_from_pipe+0x39a/0x7e0 [ 674.307797] ? do_splice_direct+0x2a0/0x2a0 [ 674.312098] ? do_splice_direct+0x2a0/0x2a0 [ 674.316421] splice_from_pipe+0x108/0x170 [ 674.320581] ? splice_shrink_spd+0xd0/0xd0 [ 674.324794] ? __lock_is_held+0xb6/0x140 [ 674.328857] ? rcu_lockdep_current_cpu_online+0xe3/0x130 [ 674.334332] default_file_splice_write+0x3c/0x90 [ 674.339083] ? generic_splice_sendpage+0x50/0x50 [ 674.343831] do_splice+0x70a/0x1490 [ 674.347461] ? iterate_fd+0x360/0x360 [ 674.351255] ? opipe_prep.part.0+0x2d0/0x2d0 [ 674.355662] ? __fget_light+0x1a9/0x230 [ 674.359629] __x64_sys_splice+0x2c6/0x330 [ 674.363773] do_syscall_64+0x103/0x610 [ 674.367645] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 674.372843] RIP: 0033:0x457e29 [ 674.376051] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 674.394931] RSP: 002b:00007f7b371ddc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 674.402616] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000000457e29 [ 674.409869] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000003 [ 674.417148] RBP: 000000000073bfa0 R08: 0000000000010005 R09: 0a00000000000000 [ 674.424419] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f7b371de6d4 [ 674.431677] R13: 00000000004c6c75 R14: 00000000004db870 R15: 00000000ffffffff 16:58:35 executing program 0 (fault-call:8 fault-nth:87): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x3, 0x2) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) splice(r0, 0x0, r2, 0x0, 0x100e0, 0x0) 16:58:35 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x200000000000000, 0x0, {0xa, 0x0, 0x0, r1}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x3, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) 16:58:35 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x600000000000000, 0x0, {0xa, 0x0, 0x0, r1, 0x0, 0x0, 0xa00000000000000}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) 16:58:35 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000, 0x0, 0xc000000]}}]}, 0x2b2}}, 0x0) [ 674.538305] kobject: 'loop0' (00000000a034939f): kobject_uevent_env [ 674.574135] kobject: 'loop0' (00000000a034939f): fill_kobj_path: path = '/devices/virtual/block/loop0' 16:58:35 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x300000000000000, 0x0, {0xa, 0x0, 0x0, r1}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x3, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) [ 674.626031] kobject: 'loop1' (00000000931e812b): kobject_uevent_env [ 674.654122] kobject: 'loop1' (00000000931e812b): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 674.682513] FAULT_INJECTION: forcing a failure. [ 674.682513] name failslab, interval 1, probability 0, space 0, times 0 [ 674.699795] kobject: 'loop4' (000000003311922a): kobject_uevent_env [ 674.708790] CPU: 0 PID: 29720 Comm: syz-executor.0 Not tainted 5.0.0+ #6 [ 674.715635] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 674.725001] Call Trace: [ 674.727601] dump_stack+0x172/0x1f0 [ 674.731238] should_fail.cold+0xa/0x1b [ 674.735156] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 674.740273] ? lock_downgrade+0x810/0x810 [ 674.744441] ? set_page_refcounted+0x100/0x100 [ 674.749025] ? ___might_sleep+0x163/0x280 [ 674.753185] __should_failslab+0x121/0x190 [ 674.757427] should_failslab+0x9/0x14 [ 674.761233] kmem_cache_alloc_node_trace+0x270/0x720 [ 674.766351] ? kasan_unpoison_shadow+0x35/0x50 [ 674.770945] ? __kasan_kmalloc.constprop.0+0xcf/0xe0 [ 674.776061] __kmalloc_node_track_caller+0x3d/0x70 [ 674.781005] __kmalloc_reserve.isra.0+0x40/0xf0 [ 674.785678] __alloc_skb+0x10b/0x5e0 [ 674.789408] ? skb_scrub_packet+0x440/0x440 [ 674.793733] ? raw_getfrag+0x164/0x230 [ 674.797633] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 674.802657] __ip_append_data.isra.0+0x24d6/0x2dd0 [ 674.807594] ? raw_destroy+0x30/0x30 [ 674.811339] ? __ip_flush_pending_frames.isra.0+0x2d0/0x2d0 [ 674.817057] ? ipv4_mtu+0x2a9/0x400 [ 674.819043] kobject: 'loop4' (000000003311922a): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 674.820698] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 674.820712] ? ip_setup_cork+0x53b/0x870 [ 674.820727] ? raw_destroy+0x30/0x30 [ 674.836686] kobject: 'loop2' (00000000233ed60c): kobject_uevent_env [ 674.839794] ip_append_data.part.0+0xf2/0x170 [ 674.839811] ? raw_destroy+0x30/0x30 [ 674.839827] ip_append_data+0x6e/0x90 [ 674.839848] raw_sendmsg+0xbd8/0x2f10 [ 674.843943] kobject: 'loop2' (00000000233ed60c): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 674.849973] ? raw_getsockopt+0x100/0x100 [ 674.849989] ? ima_match_policy+0xa19/0x13d0 [ 674.850001] ? kasan_check_read+0x11/0x20 [ 674.850022] ? lock_downgrade+0x810/0x810 [ 674.850034] ? process_measurement+0x9ae/0x1570 [ 674.850053] ? up_write+0x1c/0x150 [ 674.900203] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 674.905735] ? process_measurement+0x19a/0x1570 [ 674.910421] ? smk_access+0x40d/0x570 [ 674.914227] inet_sendmsg+0x147/0x5d0 [ 674.918013] ? raw_getsockopt+0x100/0x100 [ 674.922141] ? inet_sendmsg+0x147/0x5d0 [ 674.926110] ? ipip_gro_receive+0x100/0x100 [ 674.930433] sock_sendmsg+0xdd/0x130 [ 674.934134] kernel_sendmsg+0x44/0x50 [ 674.937921] sock_no_sendpage+0x116/0x150 [ 674.942059] ? sock_kzfree_s+0x70/0x70 [ 674.945941] ? get_mctgt_type_thp.isra.0+0x3c0/0x3c0 [ 674.951037] ? kasan_check_read+0x11/0x20 [ 674.955176] ? do_raw_spin_lock+0x12a/0x2e0 [ 674.959489] inet_sendpage+0x44a/0x630 [ 674.963360] kernel_sendpage+0x95/0xf0 [ 674.967226] ? inet_sendmsg+0x5d0/0x5d0 [ 674.971227] sock_sendpage+0x8b/0xc0 [ 674.974924] pipe_to_sendpage+0x299/0x370 [ 674.979052] ? kernel_sendpage+0xf0/0xf0 [ 674.983095] ? direct_splice_actor+0x1a0/0x1a0 [ 674.987659] ? __put_page+0x92/0xd0 [ 674.991291] ? anon_pipe_buf_release+0x1c6/0x270 [ 674.996037] __splice_from_pipe+0x39a/0x7e0 [ 675.000339] ? direct_splice_actor+0x1a0/0x1a0 [ 675.004904] ? direct_splice_actor+0x1a0/0x1a0 [ 675.009480] splice_from_pipe+0x108/0x170 [ 675.013632] ? splice_shrink_spd+0xd0/0xd0 [ 675.017864] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 675.023385] ? security_file_permission+0x94/0x320 [ 675.028306] ? __fget+0x9d/0x540 [ 675.031668] generic_splice_sendpage+0x3c/0x50 [ 675.036241] ? splice_from_pipe+0x170/0x170 [ 675.040562] do_splice+0x70a/0x1490 [ 675.044190] ? iterate_fd+0x360/0x360 [ 675.047984] ? opipe_prep.part.0+0x2d0/0x2d0 [ 675.052373] ? __fget_light+0x1a9/0x230 [ 675.056328] __x64_sys_splice+0x2c6/0x330 [ 675.060473] do_syscall_64+0x103/0x610 [ 675.064343] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 675.069542] RIP: 0033:0x457e29 [ 675.072785] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 675.091717] RSP: 002b:00007f2baa4adc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 675.099411] RAX: ffffffffffffffda RBX: 00007f2baa4adc90 RCX: 0000000000457e29 [ 675.106659] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000003 [ 675.113906] RBP: 000000000073bfa0 R08: 00000000000100e0 R09: 0000000000000000 [ 675.121152] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f2baa4ae6d4 [ 675.128402] R13: 00000000004c6c75 R14: 00000000004db870 R15: 0000000000000007 [ 675.138252] kobject: 'batman_adv' (0000000053f41a16): kobject_uevent_env [ 675.145689] kobject: 'batman_adv' (0000000053f41a16): kobject_uevent_env: filter function caused the event to drop! [ 675.157467] kobject: 'batman_adv' (0000000053f41a16): kobject_cleanup, parent (null) [ 675.166396] kobject: 'batman_adv' (0000000053f41a16): calling ktype release [ 675.173529] kobject: (0000000053f41a16): dynamic_kobj_release [ 675.179529] kobject: 'batman_adv': free name [ 675.184078] kobject: 'rx-0' (00000000d076d7b4): kobject_cleanup, parent 0000000008a11a48 [ 675.192375] kobject: 'rx-0' (00000000d076d7b4): auto cleanup 'remove' event [ 675.199626] kobject: 'rx-0' (00000000d076d7b4): kobject_uevent_env [ 675.205943] kobject: 'rx-0' (00000000d076d7b4): fill_kobj_path: path = '/devices/virtual/net/nr0/queues/rx-0' [ 675.216183] kobject: 'rx-0' (00000000d076d7b4): auto cleanup kobject_del [ 675.223052] kobject: 'rx-0' (00000000d076d7b4): calling ktype release [ 675.229682] kobject: 'rx-0': free name [ 675.233612] kobject: 'tx-0' (00000000c249b71c): kobject_cleanup, parent 0000000008a11a48 [ 675.241896] kobject: 'tx-0' (00000000c249b71c): auto cleanup 'remove' event [ 675.249089] kobject: 'tx-0' (00000000c249b71c): kobject_uevent_env [ 675.255428] kobject: 'tx-0' (00000000c249b71c): fill_kobj_path: path = '/devices/virtual/net/nr0/queues/tx-0' [ 675.265676] kobject: 'tx-0' (00000000c249b71c): auto cleanup kobject_del [ 675.272583] kobject: 'tx-0' (00000000c249b71c): calling ktype release [ 675.279206] kobject: 'tx-0': free name [ 675.283098] kobject: 'queues' (0000000008a11a48): kobject_cleanup, parent (null) [ 675.291728] kobject: 'queues' (0000000008a11a48): calling ktype release [ 675.298479] kobject: 'queues' (0000000008a11a48): kset_release [ 675.304475] kobject: 'queues': free name [ 675.308803] kobject: 'nr0' (0000000063d6d906): kobject_uevent_env [ 675.315128] kobject: 'nr0' (0000000063d6d906): fill_kobj_path: path = '/devices/virtual/net/nr0' 16:58:36 executing program 5: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000200)=ANY=[@ANYPTR64=&(0x7f0000000340)=ANY=[@ANYRES64=r2, @ANYBLOB="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", @ANYRESHEX=r2, @ANYRES32=r1, @ANYRES64=r1, @ANYRESDEC, @ANYRESDEC=r2, @ANYRESOCT=r0, @ANYPTR64=&(0x7f00000002c0)=ANY=[@ANYRESHEX=r2, @ANYRESOCT=0x0, @ANYRESOCT=r2, @ANYRESDEC=r0, @ANYRES64=r0, @ANYRES64=r1, @ANYRESOCT=r2, @ANYRES16=r1], @ANYPTR], @ANYRESOCT=r2, @ANYPTR64, @ANYRES32=r2], 0x9e) r3 = socket$inet(0x2, 0x3, 0x2) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) munlockall() fcntl$getown(r3, 0x9) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f00000000c0)={[{0x9, 0x4, 0xa133, 0x1ff, 0x7ff, 0x7f, 0x2, 0x9, 0x2, 0x3, 0x3369, 0x1ff, 0x29800}, {0x200, 0x1f, 0x6, 0x0, 0x9, 0x7f4, 0xfffffffffffffff7, 0x3, 0x6, 0x90f3, 0xffff, 0x1, 0x1}, {0x2, 0x1c2, 0x9, 0xf6c0, 0x31d, 0x3, 0x3, 0x3, 0x4, 0x8, 0xe2e, 0x7, 0x7}], 0x6}) splice(r0, 0x0, r2, 0x0, 0x1ffe0, 0x0) 16:58:36 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x700000000000000, 0x0, {0xa, 0x0, 0x0, r1, 0x0, 0x0, 0xa00000000000000}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) 16:58:36 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000, 0x0, 0xe000000]}}]}, 0x2b2}}, 0x0) 16:58:36 executing program 2: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000000)={0x0}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000200)={r3, @in={{0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x1, 0x7fffffff}, &(0x7f0000000100)=0x90) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x3, 0x2) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) splice(r0, 0x0, r2, 0x0, 0x10005, 0xa00000000000000) 16:58:36 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x400000000000000, 0x0, {0xa, 0x0, 0x0, r1}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x3, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) [ 675.378856] kobject: 'nr0' (0000000063d6d906): kobject_cleanup, parent (null) [ 675.387096] kobject: 'nr0' (0000000063d6d906): calling ktype release [ 675.394607] kobject: 'nr0': free name [ 675.401627] kobject: 'loop5' (000000001e5b6c67): kobject_uevent_env 16:58:36 executing program 0 (fault-call:8 fault-nth:88): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x3, 0x2) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) splice(r0, 0x0, r2, 0x0, 0x100e0, 0x0) 16:58:36 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x800000000000000, 0x0, {0xa, 0x0, 0x0, r1, 0x0, 0x0, 0xa00000000000000}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) 16:58:36 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x600000000000000, 0x0, {0xa, 0x0, 0x0, r1}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x3, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) [ 675.434630] kobject: 'loop5' (000000001e5b6c67): fill_kobj_path: path = '/devices/virtual/block/loop5' 16:58:36 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000, 0x0, 0xf000000]}}]}, 0x2b2}}, 0x0) [ 675.484394] kobject: 'loop0' (00000000a034939f): kobject_uevent_env [ 675.528675] kobject: 'loop0' (00000000a034939f): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 675.558512] kobject: 'loop1' (00000000931e812b): kobject_uevent_env 16:58:36 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x800000000000000, 0x0, {0xa, 0x0, 0x0, r1}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x3, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) 16:58:36 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0xa00000000000000, 0x0, {0xa, 0x0, 0x0, r1, 0x0, 0x0, 0xa00000000000000}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) [ 675.573898] kobject: 'loop1' (00000000931e812b): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 675.597168] kobject: 'loop4' (000000003311922a): kobject_uevent_env [ 675.601836] FAULT_INJECTION: forcing a failure. [ 675.601836] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 675.615373] CPU: 1 PID: 29756 Comm: syz-executor.0 Not tainted 5.0.0+ #6 16:58:36 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0xc00000000000000, 0x0, {0xa, 0x0, 0x0, r1, 0x0, 0x0, 0xa00000000000000}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) [ 675.616223] kobject: 'loop4' (000000003311922a): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 675.622211] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 675.622217] Call Trace: [ 675.622242] dump_stack+0x172/0x1f0 [ 675.622276] should_fail.cold+0xa/0x1b [ 675.650435] kobject: 'loop1' (00000000931e812b): kobject_uevent_env [ 675.651153] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 675.662638] ? mark_held_locks+0x100/0x100 [ 675.665475] kobject: 'loop1' (00000000931e812b): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 675.666877] should_fail_alloc_page+0x50/0x60 [ 675.666891] __alloc_pages_nodemask+0x1a1/0x710 [ 675.666907] ? sock_sendpage+0x8b/0xc0 [ 675.689344] ? pipe_to_sendpage+0x299/0x370 [ 675.693672] ? __splice_from_pipe+0x39a/0x7e0 [ 675.698166] ? splice_from_pipe+0x108/0x170 [ 675.702487] ? __alloc_pages_slowpath+0x2900/0x2900 [ 675.707529] ? dst_alloc+0x10e/0x1d0 [ 675.711282] ? rt_dst_alloc+0x83/0x3f0 [ 675.715189] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 675.718914] kobject: 'loop4' (000000003311922a): kobject_uevent_env 16:58:36 executing program 5: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$BLKBSZGET(r0, 0x80081270, &(0x7f0000000080)) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x3, 0x2) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f00000000c0)={0x0, r0}) perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) splice(r0, 0x0, r2, 0x0, 0x1ffe0, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0) 16:58:36 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0xe00000000000000, 0x0, {0xa, 0x0, 0x0, r1, 0x0, 0x0, 0xa00000000000000}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) 16:58:36 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000, 0x0, 0x10000000]}}]}, 0x2b2}}, 0x0) [ 675.720324] cache_grow_begin+0x9c/0x8c0 [ 675.726724] kobject: 'loop4' (000000003311922a): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 675.730762] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 675.730776] ? check_preemption_disabled+0x48/0x290 [ 675.730800] kmem_cache_alloc_node_trace+0x658/0x720 [ 675.730815] ? kasan_unpoison_shadow+0x35/0x50 [ 675.760443] ? __kasan_kmalloc.constprop.0+0xcf/0xe0 [ 675.765569] __kmalloc_node_track_caller+0x3d/0x70 [ 675.770537] __kmalloc_reserve.isra.0+0x40/0xf0 [ 675.775248] __alloc_skb+0x10b/0x5e0 [ 675.778966] ? skb_scrub_packet+0x440/0x440 [ 675.783298] ? rt_set_nexthop.constprop.0+0x529/0x11d0 [ 675.788586] ? dst_init+0x38e/0x4d0 [ 675.792222] __ip_append_data.isra.0+0x24d6/0x2dd0 [ 675.797207] ? raw_destroy+0x30/0x30 [ 675.800934] ? __ip_flush_pending_frames.isra.0+0x2d0/0x2d0 [ 675.806645] ? ipv4_mtu+0x2a9/0x400 [ 675.810286] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 675.812828] kobject: 'loop5' (000000001e5b6c67): kobject_uevent_env [ 675.815865] ? ip_setup_cork+0x53b/0x870 [ 675.815878] ? raw_destroy+0x30/0x30 [ 675.815894] ip_append_data.part.0+0xf2/0x170 [ 675.834539] ? raw_destroy+0x30/0x30 [ 675.838254] ip_append_data+0x6e/0x90 [ 675.842097] raw_sendmsg+0xbd8/0x2f10 [ 675.845907] ? raw_getsockopt+0x100/0x100 [ 675.850081] ? _raw_spin_unlock_irq+0x5e/0x90 [ 675.854584] ? __schedule+0x81f/0x1cc0 [ 675.858483] ? retint_kernel+0x2d/0x2d [ 675.862384] ? trace_hardirqs_on_caller+0x6a/0x220 [ 675.867324] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 675.872090] inet_sendmsg+0x147/0x5d0 [ 675.872126] kobject: 'loop5' (000000001e5b6c67): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 675.875887] ? raw_getsockopt+0x100/0x100 [ 675.875899] ? inet_sendmsg+0x147/0x5d0 [ 675.875912] ? ipip_gro_receive+0x100/0x100 [ 675.875941] sock_sendmsg+0xdd/0x130 [ 675.901498] kernel_sendmsg+0x44/0x50 [ 675.905331] sock_no_sendpage+0x116/0x150 [ 675.909516] ? sock_kzfree_s+0x70/0x70 [ 675.913417] ? get_mctgt_type_thp.isra.0+0x3c0/0x3c0 [ 675.918531] ? kasan_check_read+0x11/0x20 [ 675.922681] ? do_raw_spin_lock+0x12a/0x2e0 [ 675.923833] kobject: 'loop1' (00000000931e812b): kobject_uevent_env [ 675.927007] inet_sendpage+0x44a/0x630 [ 675.927023] kernel_sendpage+0x95/0xf0 [ 675.927037] ? inet_sendmsg+0x5d0/0x5d0 [ 675.943177] kobject: 'loop1' (00000000931e812b): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 675.945148] sock_sendpage+0x8b/0xc0 [ 675.945167] pipe_to_sendpage+0x299/0x370 [ 675.945184] ? kernel_sendpage+0xf0/0xf0 [ 675.966575] ? direct_splice_actor+0x1a0/0x1a0 [ 675.971198] ? __put_page+0x92/0xd0 [ 675.974832] ? anon_pipe_buf_release+0x1c6/0x270 [ 675.979595] __splice_from_pipe+0x39a/0x7e0 [ 675.983937] ? direct_splice_actor+0x1a0/0x1a0 [ 675.988533] ? direct_splice_actor+0x1a0/0x1a0 [ 675.993108] splice_from_pipe+0x108/0x170 [ 675.997267] ? splice_shrink_spd+0xd0/0xd0 [ 676.001504] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 676.007030] ? security_file_permission+0x94/0x320 [ 676.011950] ? __fget+0x9d/0x540 [ 676.015302] generic_splice_sendpage+0x3c/0x50 [ 676.019877] ? splice_from_pipe+0x170/0x170 [ 676.024189] do_splice+0x70a/0x1490 [ 676.027808] ? iterate_fd+0x360/0x360 [ 676.031591] ? opipe_prep.part.0+0x2d0/0x2d0 [ 676.035977] ? __fget_light+0x1a9/0x230 [ 676.039931] __x64_sys_splice+0x2c6/0x330 [ 676.044061] do_syscall_64+0x103/0x610 [ 676.047964] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 676.053149] RIP: 0033:0x457e29 [ 676.056337] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 676.075219] RSP: 002b:00007f2baa4adc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 676.082905] RAX: ffffffffffffffda RBX: 00007f2baa4adc90 RCX: 0000000000457e29 [ 676.090153] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000003 [ 676.097402] RBP: 000000000073bfa0 R08: 00000000000100e0 R09: 0000000000000000 [ 676.104664] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f2baa4ae6d4 [ 676.111916] R13: 00000000004c6c75 R14: 00000000004db870 R15: 0000000000000007 16:58:37 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x1000000000000000, 0x0, {0xa, 0x0, 0x0, r1, 0x0, 0x0, 0xa00000000000000}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) 16:58:37 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0xa00000000000000, 0x0, {0xa, 0x0, 0x0, r1}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x3, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) [ 676.294758] kobject: 'loop2' (00000000233ed60c): kobject_uevent_env [ 676.304116] kobject: 'loop2' (00000000233ed60c): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 676.323149] kobject: 'loop1' (00000000931e812b): kobject_uevent_env [ 676.329895] kobject: 'loop1' (00000000931e812b): fill_kobj_path: path = '/devices/virtual/block/loop1' 16:58:37 executing program 0 (fault-call:8 fault-nth:89): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x3, 0x2) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) splice(r0, 0x0, r2, 0x0, 0x100e0, 0x0) 16:58:37 executing program 2: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) flistxattr(r0, &(0x7f0000000200)=""/4096, 0x1000) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x65, &(0x7f0000001200)=[@in6={0xa, 0x4e20, 0x7, @loopback, 0x8}, @in={0x2, 0x4e20, @broadcast}], 0x2c) r3 = socket$inet(0x2, 0x3, 0x2) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) splice(r0, 0x0, r2, 0x0, 0x10005, 0xa00000000000000) r4 = geteuid() ioprio_get$uid(0x3, r4) ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, &(0x7f0000000000)) setsockopt$IP_VS_SO_SET_DELDEST(r3, 0x0, 0x488, &(0x7f00000000c0)={{0x33, @dev={0xac, 0x14, 0x14, 0x2a}, 0x4e22, 0x2, 'rr\x00', 0x0, 0x7, 0x29}, {@multicast1, 0x4e22, 0x1, 0x1, 0x6, 0xff}}, 0x44) 16:58:37 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000, 0x0, 0x3f000000]}}]}, 0x2b2}}, 0x0) 16:58:37 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x6000000000000000, 0x0, {0xa, 0x0, 0x0, r1, 0x0, 0x0, 0xa00000000000000}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) 16:58:37 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0xc00000000000000, 0x0, {0xa, 0x0, 0x0, r1}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x3, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) 16:58:37 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x6558000000000000, 0x0, {0xa, 0x0, 0x0, r1, 0x0, 0x0, 0xa00000000000000}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) 16:58:37 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000, 0x0, 0x60000000]}}]}, 0x2b2}}, 0x0) [ 676.396965] kobject: 'loop0' (00000000a034939f): kobject_uevent_env [ 676.414525] kobject: 'loop0' (00000000a034939f): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 676.454176] kobject: 'loop4' (000000003311922a): kobject_uevent_env [ 676.464647] kobject: 'loop4' (000000003311922a): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 676.478140] kobject: 'loop1' (00000000931e812b): kobject_uevent_env [ 676.485329] kobject: 'loop1' (00000000931e812b): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 676.552979] IPVS: set_ctl: invalid protocol: 51 172.20.20.42:20002 [ 676.566360] FAULT_INJECTION: forcing a failure. [ 676.566360] name failslab, interval 1, probability 0, space 0, times 0 [ 676.578780] CPU: 1 PID: 29812 Comm: syz-executor.0 Not tainted 5.0.0+ #6 [ 676.585627] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 676.594963] Call Trace: [ 676.597571] dump_stack+0x172/0x1f0 [ 676.601184] should_fail.cold+0xa/0x1b [ 676.605055] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 676.610143] ? lock_downgrade+0x810/0x810 [ 676.614281] ? inet_lookup_ifaddr_rcu+0x170/0x170 [ 676.619143] __should_failslab+0x121/0x190 [ 676.623375] should_failslab+0x9/0x14 [ 676.627156] kmem_cache_alloc+0x47/0x6f0 [ 676.631331] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 676.636881] dst_alloc+0x10e/0x1d0 [ 676.640425] ? retint_kernel+0x2d/0x2d [ 676.644324] rt_dst_alloc+0x83/0x3f0 [ 676.648038] ip_route_output_key_hash_rcu+0x97d/0x30e0 [ 676.653303] ? ip_route_input_noref+0x280/0x280 [ 676.657964] ? ip_route_output_key_hash+0x183/0x380 [ 676.662975] ip_route_output_key_hash+0x212/0x380 [ 676.667802] ? ip_route_output_key_hash_rcu+0x30e0/0x30e0 [ 676.673337] ? ip4_datagram_connect+0x50/0x50 [ 676.677814] ? lock_downgrade+0x810/0x810 [ 676.681940] ip_route_output_flow+0x28/0xc0 [ 676.686241] raw_sendmsg+0xa10/0x2f10 [ 676.690024] ? write_comp_data+0x52/0x70 [ 676.694062] ? raw_getsockopt+0x100/0x100 [ 676.698183] ? mark_held_locks+0x100/0x100 [ 676.702396] ? check_preemption_disabled+0x48/0x290 [ 676.707411] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 676.712929] ? __this_cpu_preempt_check+0x1d/0x30 [ 676.717765] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 676.723291] ? lock_downgrade+0x810/0x810 [ 676.727431] ? lock_acquire+0x16f/0x3f0 [ 676.731388] ? trace_hardirqs_on+0x67/0x230 [ 676.735687] ? kasan_check_read+0x11/0x20 [ 676.739824] ? _raw_spin_unlock_irq+0x5e/0x90 [ 676.744307] ? retint_kernel+0x2d/0x2d [ 676.748176] inet_sendmsg+0x147/0x5d0 [ 676.751959] ? raw_getsockopt+0x100/0x100 [ 676.756084] ? inet_sendmsg+0x147/0x5d0 [ 676.760047] ? ipip_gro_receive+0x100/0x100 [ 676.764377] sock_sendmsg+0xdd/0x130 [ 676.768086] kernel_sendmsg+0x44/0x50 [ 676.771882] sock_no_sendpage+0x116/0x150 [ 676.776010] ? sock_kzfree_s+0x70/0x70 [ 676.779887] ? trace_hardirqs_on_caller+0x6a/0x220 [ 676.784839] ? retint_kernel+0x2d/0x2d [ 676.788719] inet_sendpage+0x44a/0x630 [ 676.792603] kernel_sendpage+0x95/0xf0 [ 676.796565] ? inet_sendmsg+0x5d0/0x5d0 [ 676.800530] sock_sendpage+0x8b/0xc0 [ 676.804238] pipe_to_sendpage+0x299/0x370 [ 676.808373] ? kernel_sendpage+0xf0/0xf0 [ 676.812417] ? direct_splice_actor+0x1a0/0x1a0 [ 676.816978] ? __put_page+0x92/0xd0 [ 676.820617] ? anon_pipe_buf_release+0x1c6/0x270 [ 676.825369] __splice_from_pipe+0x39a/0x7e0 [ 676.829679] ? direct_splice_actor+0x1a0/0x1a0 [ 676.834240] ? direct_splice_actor+0x1a0/0x1a0 [ 676.838819] splice_from_pipe+0x108/0x170 [ 676.842952] ? splice_shrink_spd+0xd0/0xd0 [ 676.847164] ? retint_kernel+0x2d/0x2d [ 676.851043] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 676.856563] ? security_file_permission+0x94/0x320 [ 676.861496] generic_splice_sendpage+0x3c/0x50 [ 676.866082] ? splice_from_pipe+0x170/0x170 [ 676.870397] do_splice+0x70a/0x1490 [ 676.874004] ? iterate_fd+0x360/0x360 [ 676.877783] ? opipe_prep.part.0+0x2d0/0x2d0 [ 676.882179] ? __fget_light+0x1a9/0x230 [ 676.886140] __x64_sys_splice+0x2c6/0x330 [ 676.890279] do_syscall_64+0x103/0x610 [ 676.894157] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 676.899342] RIP: 0033:0x457e29 [ 676.902522] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 676.921400] RSP: 002b:00007f2baa4adc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 676.929094] RAX: ffffffffffffffda RBX: 00007f2baa4adc90 RCX: 0000000000457e29 [ 676.936363] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000003 [ 676.943637] RBP: 000000000073bfa0 R08: 00000000000100e0 R09: 0000000000000000 [ 676.950886] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f2baa4ae6d4 [ 676.958132] R13: 00000000004c6c75 R14: 00000000004db870 R15: 0000000000000007 16:58:37 executing program 5: r0 = syz_open_dev$sndpcmp(&(0x7f00000000c0)='/dev/snd/pcmC#D#p\x00', 0xcd, 0x80) ioctl$CAPI_SET_FLAGS(r0, 0x80044324, &(0x7f0000000100)) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) write$binfmt_misc(r2, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x3, 0x2) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) splice(r1, 0x0, r3, 0x0, 0x1ffe0, 0x0) syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x6, 0x100) 16:58:37 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0xe00000000000000, 0x0, {0xa, 0x0, 0x0, r1}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x3, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) 16:58:37 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x8100000000000000, 0x0, {0xa, 0x0, 0x0, r1, 0x0, 0x0, 0xa00000000000000}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) 16:58:37 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000, 0x0, 0x65580000]}}]}, 0x2b2}}, 0x0) [ 677.022237] kobject: 'loop5' (000000001e5b6c67): kobject_uevent_env [ 677.039343] kobject: 'loop5' (000000001e5b6c67): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 677.043199] net_ratelimit: 81 callbacks suppressed [ 677.043205] neighbour: ndisc_cache: neighbor table overflow! [ 677.061093] neighbour: ndisc_cache: neighbor table overflow! 16:58:37 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x88a8ffff00000000, 0x0, {0xa, 0x0, 0x0, r1, 0x0, 0x0, 0xa00000000000000}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) [ 677.067099] neighbour: ndisc_cache: neighbor table overflow! [ 677.073685] neighbour: ndisc_cache: neighbor table overflow! [ 677.081177] neighbour: ndisc_cache: neighbor table overflow! [ 677.087652] neighbour: ndisc_cache: neighbor table overflow! [ 677.115240] kobject: 'loop4' (000000003311922a): kobject_uevent_env [ 677.121627] neighbour: ndisc_cache: neighbor table overflow! [ 677.128454] neighbour: ndisc_cache: neighbor table overflow! [ 677.136630] kobject: 'loop4' (000000003311922a): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 677.161487] kobject: 'loop1' (00000000931e812b): kobject_uevent_env [ 677.168441] kobject: 'loop1' (00000000931e812b): fill_kobj_path: path = '/devices/virtual/block/loop1' 16:58:38 executing program 0 (fault-call:8 fault-nth:90): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x3, 0x2) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) splice(r0, 0x0, r2, 0x0, 0x100e0, 0x0) 16:58:38 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000, 0x0, 0x81000000]}}]}, 0x2b2}}, 0x0) 16:58:38 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0xf00000000000000, 0x0, {0xa, 0x0, 0x0, r1}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x3, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) 16:58:38 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x9c08000000000000, 0x0, {0xa, 0x0, 0x0, r1, 0x0, 0x0, 0xa00000000000000}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) 16:58:38 executing program 2: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x3, 0x2) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) llistxattr(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)=""/28, 0x1c) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) splice(r0, 0x0, r2, 0x0, 0x10005, 0xa00000000000000) [ 677.222235] IPVS: set_ctl: invalid protocol: 51 172.20.20.42:20002 [ 677.244635] kobject: 'loop2' (00000000233ed60c): kobject_uevent_env [ 677.270083] neighbour: ndisc_cache: neighbor table overflow! [ 677.281338] kobject: 'loop2' (00000000233ed60c): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 677.289975] neighbour: ndisc_cache: neighbor table overflow! [ 677.299600] kobject: 'loop0' (00000000a034939f): kobject_uevent_env 16:58:38 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x1000000000000000, 0x0, {0xa, 0x0, 0x0, r1}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x3, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) 16:58:38 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000, 0x0, 0x82020000]}}]}, 0x2b2}}, 0x0) [ 677.318881] kobject: 'loop0' (00000000a034939f): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 677.334406] FAULT_INJECTION: forcing a failure. [ 677.334406] name failslab, interval 1, probability 0, space 0, times 0 [ 677.340198] kobject: 'loop4' (000000003311922a): kobject_uevent_env [ 677.352220] kobject: 'loop4' (000000003311922a): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 677.363042] kobject: 'loop1' (00000000931e812b): kobject_uevent_env [ 677.380815] kobject: 'loop1' (00000000931e812b): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 677.398469] CPU: 0 PID: 29852 Comm: syz-executor.0 Not tainted 5.0.0+ #6 [ 677.405318] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 677.414682] Call Trace: [ 677.417299] dump_stack+0x172/0x1f0 [ 677.420934] should_fail.cold+0xa/0x1b [ 677.424823] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 677.429928] ? lock_downgrade+0x810/0x810 [ 677.434086] ? set_page_refcounted+0x100/0x100 [ 677.438674] ? ___might_sleep+0x163/0x280 [ 677.442840] __should_failslab+0x121/0x190 [ 677.447080] should_failslab+0x9/0x14 [ 677.450890] kmem_cache_alloc_node+0x264/0x710 [ 677.455467] ? rt_add_uncached_list+0x147/0x1a0 [ 677.460121] __alloc_skb+0xd5/0x5e0 [ 677.463737] ? skb_scrub_packet+0x440/0x440 [ 677.468067] ? rt_set_nexthop.constprop.0+0x529/0x11d0 [ 677.473329] ? dst_init+0x38e/0x4d0 [ 677.476952] __ip_append_data.isra.0+0x24d6/0x2dd0 [ 677.481912] ? raw_destroy+0x30/0x30 [ 677.485613] ? __ip_flush_pending_frames.isra.0+0x2d0/0x2d0 [ 677.491320] ? ipv4_mtu+0x2a9/0x400 [ 677.494940] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 677.500467] ? ip_setup_cork+0x53b/0x870 [ 677.504526] ? raw_destroy+0x30/0x30 [ 677.508223] ip_append_data.part.0+0xf2/0x170 [ 677.512701] ? raw_destroy+0x30/0x30 [ 677.516398] ip_append_data+0x6e/0x90 [ 677.520184] raw_sendmsg+0xbd8/0x2f10 [ 677.523970] ? raw_getsockopt+0x100/0x100 [ 677.528101] ? ima_match_policy+0xa19/0x13d0 [ 677.532520] ? kasan_check_read+0x11/0x20 [ 677.536676] ? lock_downgrade+0x810/0x810 [ 677.540819] ? process_measurement+0x9ae/0x1570 [ 677.545492] ? up_write+0x1c/0x150 [ 677.549027] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 677.554544] ? process_measurement+0x19a/0x1570 [ 677.559212] ? smk_access+0x40d/0x570 [ 677.563001] inet_sendmsg+0x147/0x5d0 [ 677.566779] ? raw_getsockopt+0x100/0x100 [ 677.570924] ? inet_sendmsg+0x147/0x5d0 [ 677.574891] ? ipip_gro_receive+0x100/0x100 [ 677.579195] sock_sendmsg+0xdd/0x130 [ 677.582894] kernel_sendmsg+0x44/0x50 [ 677.586684] sock_no_sendpage+0x116/0x150 [ 677.590828] ? sock_kzfree_s+0x70/0x70 [ 677.594708] ? get_mctgt_type_thp.isra.0+0x3c0/0x3c0 [ 677.599798] ? kasan_check_read+0x11/0x20 [ 677.603958] ? do_raw_spin_lock+0x12a/0x2e0 [ 677.608294] inet_sendpage+0x44a/0x630 [ 677.612181] kernel_sendpage+0x95/0xf0 [ 677.616054] ? inet_sendmsg+0x5d0/0x5d0 [ 677.620010] sock_sendpage+0x8b/0xc0 [ 677.623726] pipe_to_sendpage+0x299/0x370 [ 677.627857] ? kernel_sendpage+0xf0/0xf0 [ 677.631899] ? direct_splice_actor+0x1a0/0x1a0 [ 677.636480] ? __put_page+0x92/0xd0 [ 677.640107] ? anon_pipe_buf_release+0x1c6/0x270 [ 677.644859] __splice_from_pipe+0x39a/0x7e0 [ 677.649204] ? direct_splice_actor+0x1a0/0x1a0 [ 677.653788] ? direct_splice_actor+0x1a0/0x1a0 [ 677.658368] splice_from_pipe+0x108/0x170 [ 677.662505] ? splice_shrink_spd+0xd0/0xd0 [ 677.666725] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 677.672267] ? security_file_permission+0x94/0x320 [ 677.677185] ? __fget+0x9d/0x540 [ 677.680532] generic_splice_sendpage+0x3c/0x50 [ 677.685109] ? splice_from_pipe+0x170/0x170 [ 677.689437] do_splice+0x70a/0x1490 [ 677.693054] ? iterate_fd+0x360/0x360 [ 677.696843] ? opipe_prep.part.0+0x2d0/0x2d0 [ 677.701231] ? __fget_light+0x1a9/0x230 [ 677.705191] __x64_sys_splice+0x2c6/0x330 [ 677.709327] do_syscall_64+0x103/0x610 [ 677.713245] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 677.718468] RIP: 0033:0x457e29 [ 677.721643] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 677.740546] RSP: 002b:00007f2baa4adc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 677.748256] RAX: ffffffffffffffda RBX: 00007f2baa4adc90 RCX: 0000000000457e29 [ 677.755555] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000003 [ 677.762808] RBP: 000000000073bfa0 R08: 00000000000100e0 R09: 0000000000000000 [ 677.770070] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f2baa4ae6d4 [ 677.777338] R13: 00000000004c6c75 R14: 00000000004db870 R15: 0000000000000007 16:58:38 executing program 5: r0 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x3, 0x2) ioctl$KVM_GET_IRQCHIP(r0, 0xc208ae62, &(0x7f0000000200)={0x0, 0x0, @ioapic}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) write$binfmt_misc(r2, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x3, 0x2) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x4e24, @broadcast}, 0x10) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) splice(r1, 0x0, r3, 0x0, 0x1ffe0, 0x0) 16:58:38 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x9effffff00000000, 0x0, {0xa, 0x0, 0x0, r1, 0x0, 0x0, 0xa00000000000000}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) 16:58:38 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x6000000000000000, 0x0, {0xa, 0x0, 0x0, r1}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x3, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) 16:58:38 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000, 0x0, 0x88a8ffff]}}]}, 0x2b2}}, 0x0) 16:58:38 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000, 0x0, 0x9d020000]}}]}, 0x2b2}}, 0x0) [ 677.883381] kobject: 'loop5' (000000001e5b6c67): kobject_uevent_env [ 677.891548] kobject: 'loop5' (000000001e5b6c67): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 677.919685] kobject: 'loop4' (000000003311922a): kobject_uevent_env [ 677.939746] kobject: 'loop4' (000000003311922a): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 677.955796] kobject: 'loop1' (00000000931e812b): kobject_uevent_env [ 677.962721] kobject: 'loop1' (00000000931e812b): fill_kobj_path: path = '/devices/virtual/block/loop1' 16:58:38 executing program 0 (fault-call:8 fault-nth:91): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x3, 0x2) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) splice(r0, 0x0, r2, 0x0, 0x100e0, 0x0) 16:58:38 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0xf0ffffff00000000, 0x0, {0xa, 0x0, 0x0, r1, 0x0, 0x0, 0xa00000000000000}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) 16:58:38 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x6206000000000000, 0x0, {0xa, 0x0, 0x0, r1}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x3, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) 16:58:38 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000, 0x0, 0x9effffff]}}]}, 0x2b2}}, 0x0) [ 678.113186] kobject: 'loop0' (00000000a034939f): kobject_uevent_env [ 678.144119] kobject: 'loop0' (00000000a034939f): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 678.169322] kobject: 'loop4' (000000003311922a): kobject_uevent_env [ 678.175766] kobject: 'loop4' (000000003311922a): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 678.197414] kobject: 'loop1' (00000000931e812b): kobject_uevent_env [ 678.206352] FAULT_INJECTION: forcing a failure. [ 678.206352] name failslab, interval 1, probability 0, space 0, times 0 16:58:39 executing program 2: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SCSI_IOCTL_START_UNIT(r1, 0x5) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x3, 0x2) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) splice(r0, 0x0, r2, 0x0, 0x10005, 0xa00000000000000) 16:58:39 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x6558000000000000, 0x0, {0xa, 0x0, 0x0, r1}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x3, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) 16:58:39 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000, 0x0, 0xa0008000]}}]}, 0x2b2}}, 0x0) [ 678.226114] kobject: 'loop1' (00000000931e812b): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 678.250213] CPU: 1 PID: 29897 Comm: syz-executor.0 Not tainted 5.0.0+ #6 [ 678.257080] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 678.266431] Call Trace: [ 678.269038] dump_stack+0x172/0x1f0 [ 678.272679] should_fail.cold+0xa/0x1b [ 678.276608] ? kasan_unpoison_shadow+0x35/0x50 [ 678.281209] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 678.285323] kobject: 'loop2' (00000000233ed60c): kobject_uevent_env [ 678.286322] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 678.286338] ? check_preemption_disabled+0x48/0x290 [ 678.286367] ? ip_finish_output2+0x969/0x1740 [ 678.286384] __should_failslab+0x121/0x190 [ 678.292921] kobject: 'loop2' (00000000233ed60c): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 678.298315] should_failslab+0x9/0x14 [ 678.298329] kmem_cache_alloc_node+0x56/0x710 [ 678.298344] ? ip_finish_output2+0x9a1/0x1740 [ 678.298363] ? refcount_add_not_zero_checked+0x181/0x240 [ 678.331520] kobject: 'loop4' (000000003311922a): kobject_uevent_env [ 678.334298] __alloc_skb+0xd5/0x5e0 [ 678.334314] ? skb_scrub_packet+0x440/0x440 [ 678.334327] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 678.334345] ip_do_fragment+0x9e4/0x2520 [ 678.341990] kobject: 'loop4' (000000003311922a): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 678.346204] ? ip_copy_metadata+0xcc0/0xcc0 [ 678.346237] ip_fragment.constprop.0+0x176/0x240 [ 678.346253] ip_finish_output+0x5fd/0xd50 [ 678.386405] ip_mc_output+0x292/0xf70 [ 678.390219] ? __ip_queue_xmit+0x1bf0/0x1bf0 [ 678.394639] ? ip_setup_cork+0x53b/0x870 [ 678.398709] ? ip_fragment.constprop.0+0x240/0x240 [ 678.403648] ? dst_release+0x62/0xb0 [ 678.407410] ? __ip_make_skb+0xf93/0x1820 [ 678.411565] ip_local_out+0xc4/0x1b0 [ 678.415300] ip_send_skb+0x42/0xf0 [ 678.418848] ip_push_pending_frames+0x64/0x80 [ 678.423354] raw_sendmsg+0x1e5d/0x2f10 [ 678.427270] ? raw_getsockopt+0x100/0x100 [ 678.431430] ? ima_match_policy+0xa19/0x13d0 [ 678.435884] ? kasan_check_read+0x11/0x20 [ 678.437180] kobject: 'loop1' (00000000931e812b): kobject_uevent_env [ 678.440060] ? lock_downgrade+0x810/0x810 [ 678.440074] ? process_measurement+0x9ae/0x1570 [ 678.440090] ? up_write+0x1c/0x150 [ 678.440103] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 678.440118] ? process_measurement+0x19a/0x1570 [ 678.446611] kobject: 'loop1' (00000000931e812b): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 678.450652] ? smk_access+0x40d/0x570 [ 678.450676] inet_sendmsg+0x147/0x5d0 [ 678.450689] ? raw_getsockopt+0x100/0x100 [ 678.450701] ? inet_sendmsg+0x147/0x5d0 [ 678.450717] ? ipip_gro_receive+0x100/0x100 [ 678.498749] sock_sendmsg+0xdd/0x130 [ 678.502449] kernel_sendmsg+0x44/0x50 [ 678.506239] sock_no_sendpage+0x116/0x150 [ 678.510392] ? sock_kzfree_s+0x70/0x70 [ 678.514267] ? get_mctgt_type_thp.isra.0+0x3c0/0x3c0 [ 678.519365] ? kasan_check_read+0x11/0x20 [ 678.523504] ? do_raw_spin_lock+0x12a/0x2e0 [ 678.527813] inet_sendpage+0x44a/0x630 [ 678.531683] kernel_sendpage+0x95/0xf0 [ 678.535548] ? inet_sendmsg+0x5d0/0x5d0 [ 678.539503] sock_sendpage+0x8b/0xc0 [ 678.543199] pipe_to_sendpage+0x299/0x370 [ 678.547326] ? kernel_sendpage+0xf0/0xf0 [ 678.551368] ? direct_splice_actor+0x1a0/0x1a0 [ 678.555932] ? __put_page+0x92/0xd0 [ 678.559541] ? anon_pipe_buf_release+0x1c6/0x270 [ 678.564302] __splice_from_pipe+0x39a/0x7e0 [ 678.568615] ? direct_splice_actor+0x1a0/0x1a0 [ 678.573205] ? direct_splice_actor+0x1a0/0x1a0 [ 678.577771] splice_from_pipe+0x108/0x170 [ 678.581912] ? splice_shrink_spd+0xd0/0xd0 [ 678.586138] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 678.591658] ? security_file_permission+0x94/0x320 [ 678.596587] ? __fget+0x9d/0x540 [ 678.599945] generic_splice_sendpage+0x3c/0x50 [ 678.604518] ? splice_from_pipe+0x170/0x170 [ 678.608823] do_splice+0x70a/0x1490 [ 678.612450] ? iterate_fd+0x360/0x360 [ 678.616656] ? opipe_prep.part.0+0x2d0/0x2d0 [ 678.621063] ? __fget_light+0x1a9/0x230 [ 678.625021] __x64_sys_splice+0x2c6/0x330 [ 678.629163] do_syscall_64+0x103/0x610 [ 678.633037] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 678.638204] RIP: 0033:0x457e29 [ 678.641412] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 678.660312] RSP: 002b:00007f2baa4adc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 678.668027] RAX: ffffffffffffffda RBX: 00007f2baa4adc90 RCX: 0000000000457e29 16:58:39 executing program 5: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) mmap(&(0x7f0000ff7000/0x9000)=nil, 0x9000, 0xd, 0x121010, r0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x3, 0x2) ioctl$VIDIOC_G_FREQUENCY(r0, 0xc02c5638, &(0x7f00000000c0)={0x1f, 0x1, 0x5}) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) getsockopt$inet_dccp_buf(r1, 0x21, 0xcd, &(0x7f0000000200)=""/114, &(0x7f0000000100)=0x72) connect$inet(r2, &(0x7f0000000040)={0x2, 0xffffffffffffffff, @multicast1}, 0x10) ioctl$KVM_SET_CPUID(r1, 0x4008ae8a, &(0x7f0000000000)={0x2, 0x0, [{0x0, 0x75, 0x2, 0x0, 0x20}, {0x80000007, 0x81, 0x10001, 0x1, 0x3}]}) perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x3, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) splice(r0, 0x0, r2, 0x0, 0x1ffe0, 0x0) ioctl$EXT4_IOC_MIGRATE(r2, 0x6609) 16:58:39 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0xffffff7f00000000, 0x0, {0xa, 0x0, 0x0, r1, 0x0, 0x0, 0xa00000000000000}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) [ 678.675313] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000003 [ 678.682578] RBP: 000000000073bfa0 R08: 00000000000100e0 R09: 0000000000000000 [ 678.689839] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f2baa4ae6d4 [ 678.697088] R13: 00000000004c6c75 R14: 00000000004db870 R15: 0000000000000007 16:58:39 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000, 0x0, 0xa0010000]}}]}, 0x2b2}}, 0x0) 16:58:39 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x8100000000000000, 0x0, {0xa, 0x0, 0x0, r1}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x3, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) 16:58:39 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000, 0x0, 0xf0ffffff]}}]}, 0x2b2}}, 0x0) [ 678.730368] kobject: 'loop5' (000000001e5b6c67): kobject_uevent_env [ 678.759372] kobject: 'loop5' (000000001e5b6c67): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 678.780503] kobject: 'loop4' (000000003311922a): kobject_uevent_env [ 678.795877] kobject: 'loop4' (000000003311922a): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 678.815488] kobject: 'loop1' (00000000931e812b): kobject_uevent_env [ 678.822236] kobject: 'loop1' (00000000931e812b): fill_kobj_path: path = '/devices/virtual/block/loop1' 16:58:39 executing program 0 (fault-call:8 fault-nth:92): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x3, 0x2) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) splice(r0, 0x0, r2, 0x0, 0x100e0, 0x0) 16:58:39 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0xffffffffa0008000, 0x0, {0xa, 0x0, 0x0, r1, 0x0, 0x0, 0xa00000000000000}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) 16:58:39 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x8202000000000000, 0x0, {0xa, 0x0, 0x0, r1}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x3, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) 16:58:39 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000, 0x0, 0xffffa888]}}]}, 0x2b2}}, 0x0) [ 678.986314] kobject: 'loop0' (00000000a034939f): kobject_uevent_env [ 679.001456] kobject: 'loop0' (00000000a034939f): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 679.024899] kobject: 'loop4' (000000003311922a): kobject_uevent_env [ 679.031696] kobject: 'loop4' (000000003311922a): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 679.047140] kobject: 'loop1' (00000000931e812b): kobject_uevent_env [ 679.055688] kobject: 'loop1' (00000000931e812b): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 679.087485] FAULT_INJECTION: forcing a failure. [ 679.087485] name failslab, interval 1, probability 0, space 0, times 0 [ 679.100720] CPU: 1 PID: 29944 Comm: syz-executor.0 Not tainted 5.0.0+ #6 [ 679.107555] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 679.116904] Call Trace: [ 679.119479] dump_stack+0x172/0x1f0 [ 679.123097] should_fail.cold+0xa/0x1b [ 679.127014] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 679.132118] ? lock_downgrade+0x810/0x810 16:58:39 executing program 2: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r3 = socket$inet(0x2, 0x3, 0x2) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) splice(r0, 0x0, r2, 0x0, 0x10005, 0xa00000000000000) getsockopt$inet_sctp_SCTP_RTOINFO(r3, 0x84, 0x0, &(0x7f0000000100)={0x0, 0x9, 0xd3, 0x198}, &(0x7f0000000200)=0x10) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r1, 0x84, 0x19, &(0x7f0000000240)={r4, 0x4}, 0x8) ioctl$sock_SIOCGIFCONF(r2, 0x8912, &(0x7f00000000c0)=@buf={0x26, &(0x7f0000000000)="8b6ac01f8a52210c01a32e7577593ebc1ff11af6ed4e3b4d3b6b15e56f24796a1f99478744ae"}) 16:58:39 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000, 0x0, 0xfffff000]}}]}, 0x2b2}}, 0x0) 16:58:39 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x88a8ffff00000000, 0x0, {0xa, 0x0, 0x0, r1}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x3, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) [ 679.136268] ? set_page_refcounted+0x100/0x100 [ 679.140853] ? ___might_sleep+0x163/0x280 [ 679.145010] __should_failslab+0x121/0x190 [ 679.149245] should_failslab+0x9/0x14 [ 679.153056] kmem_cache_alloc_node_trace+0x270/0x720 [ 679.158162] ? kasan_unpoison_shadow+0x35/0x50 [ 679.162744] ? __kasan_kmalloc.constprop.0+0xcf/0xe0 [ 679.167858] __kmalloc_node_track_caller+0x3d/0x70 [ 679.172799] __kmalloc_reserve.isra.0+0x40/0xf0 [ 679.177472] __alloc_skb+0x10b/0x5e0 [ 679.181183] ? skb_scrub_packet+0x440/0x440 [ 679.185510] ? raw_getfrag+0x164/0x230 [ 679.189392] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 679.194419] __ip_append_data.isra.0+0x24d6/0x2dd0 [ 679.197136] kobject: 'loop2' (00000000233ed60c): kobject_uevent_env [ 679.199358] ? raw_destroy+0x30/0x30 [ 679.199384] ? __ip_flush_pending_frames.isra.0+0x2d0/0x2d0 [ 679.199397] ? ipv4_mtu+0x2a9/0x400 [ 679.199412] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 679.199426] ? ip_setup_cork+0x53b/0x870 [ 679.199443] ? raw_destroy+0x30/0x30 [ 679.205923] kobject: 'loop2' (00000000233ed60c): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 679.209554] ip_append_data.part.0+0xf2/0x170 [ 679.209572] ? raw_destroy+0x30/0x30 [ 679.209605] ip_append_data+0x6e/0x90 [ 679.209625] raw_sendmsg+0xbd8/0x2f10 [ 679.215768] kobject: 'loop1' (00000000931e812b): kobject_uevent_env [ 679.218970] ? raw_getsockopt+0x100/0x100 [ 679.218986] ? ima_match_policy+0xa19/0x13d0 [ 679.219013] ? trace_hardirqs_on_caller+0x6a/0x220 [ 679.224665] kobject: 'loop1' (00000000931e812b): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 679.228589] ? lock_downgrade+0x810/0x810 [ 679.228610] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 679.228626] ? retint_kernel+0x2d/0x2d [ 679.228642] ? trace_hardirqs_on_caller+0x6a/0x220 [ 679.255640] kobject: 'loop4' (000000003311922a): kobject_uevent_env [ 679.257566] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 679.257592] inet_sendmsg+0x147/0x5d0 [ 679.257609] ? raw_getsockopt+0x100/0x100 [ 679.265816] kobject: 'loop4' (000000003311922a): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 679.268143] ? inet_sendmsg+0x147/0x5d0 [ 679.268159] ? ipip_gro_receive+0x100/0x100 [ 679.268176] sock_sendmsg+0xdd/0x130 [ 679.268192] kernel_sendmsg+0x44/0x50 [ 679.349108] sock_no_sendpage+0x116/0x150 [ 679.353250] ? sock_kzfree_s+0x70/0x70 [ 679.357129] ? trace_hardirqs_on_caller+0x6a/0x220 [ 679.362043] ? retint_kernel+0x2d/0x2d [ 679.365913] inet_sendpage+0x44a/0x630 [ 679.369781] kernel_sendpage+0x95/0xf0 [ 679.373672] ? inet_sendmsg+0x5d0/0x5d0 [ 679.377635] sock_sendpage+0x8b/0xc0 [ 679.381332] pipe_to_sendpage+0x299/0x370 [ 679.385460] ? kernel_sendpage+0xf0/0xf0 [ 679.389528] ? direct_splice_actor+0x1a0/0x1a0 [ 679.394120] ? __put_page+0x92/0xd0 [ 679.397730] ? anon_pipe_buf_release+0x1c6/0x270 [ 679.402483] __splice_from_pipe+0x39a/0x7e0 [ 679.406808] ? direct_splice_actor+0x1a0/0x1a0 [ 679.411375] ? direct_splice_actor+0x1a0/0x1a0 [ 679.415935] splice_from_pipe+0x108/0x170 [ 679.420064] ? splice_shrink_spd+0xd0/0xd0 [ 679.424289] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 679.429813] ? security_file_permission+0x94/0x320 [ 679.434722] ? __fget+0x9d/0x540 [ 679.438070] generic_splice_sendpage+0x3c/0x50 [ 679.442630] ? splice_from_pipe+0x170/0x170 [ 679.446932] do_splice+0x70a/0x1490 [ 679.450547] ? iterate_fd+0x360/0x360 [ 679.454348] ? opipe_prep.part.0+0x2d0/0x2d0 [ 679.458752] ? __fget_light+0x1a9/0x230 [ 679.462736] __x64_sys_splice+0x2c6/0x330 [ 679.466881] do_syscall_64+0x103/0x610 [ 679.470763] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 679.475947] RIP: 0033:0x457e29 [ 679.479119] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 679.498020] RSP: 002b:00007f2baa4adc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 679.505718] RAX: ffffffffffffffda RBX: 00007f2baa4adc90 RCX: 0000000000457e29 [ 679.512973] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000003 [ 679.520242] RBP: 000000000073bfa0 R08: 00000000000100e0 R09: 0000000000000000 [ 679.527500] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f2baa4ae6d4 [ 679.534778] R13: 00000000004c6c75 R14: 00000000004db870 R15: 0000000000000007 16:58:40 executing program 5: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) getsockopt$inet_sctp6_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f0000000000), &(0x7f00000000c0)=0x8) socket$inet(0x2, 0x3, 0x2) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) splice(r0, 0x0, r2, 0x0, 0x1ffe0, 0x800) 16:58:40 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0xffffffffa0010000, 0x0, {0xa, 0x0, 0x0, r1, 0x0, 0x0, 0xa00000000000000}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) 16:58:40 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x9effffff00000000, 0x0, {0xa, 0x0, 0x0, r1}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x3, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) 16:58:40 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000, 0x0, 0xffffff7f]}}]}, 0x2b2}}, 0x0) [ 679.669164] kobject: 'loop5' (000000001e5b6c67): kobject_uevent_env [ 679.675603] kobject: 'loop5' (000000001e5b6c67): fill_kobj_path: path = '/devices/virtual/block/loop5' 16:58:40 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0xfffffffffffff000, 0x0, {0xa, 0x0, 0x0, r1, 0x0, 0x0, 0xa00000000000000}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) [ 679.729526] kobject: 'loop4' (000000003311922a): kobject_uevent_env [ 679.735968] kobject: 'loop4' (000000003311922a): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 679.753158] kobject: 'loop1' (00000000931e812b): kobject_uevent_env [ 679.765412] kobject: 'loop1' (00000000931e812b): fill_kobj_path: path = '/devices/virtual/block/loop1' 16:58:40 executing program 0 (fault-call:8 fault-nth:93): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x3, 0x2) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) splice(r0, 0x0, r2, 0x0, 0x100e0, 0x0) 16:58:40 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x2, {0xa, 0x0, 0x0, r1, 0x0, 0x0, 0xa00000000000000}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) 16:58:40 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000, 0x0, 0xffffff9e]}}]}, 0x2b2}}, 0x0) 16:58:40 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0xf0ffffff00000000, 0x0, {0xa, 0x0, 0x0, r1}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x3, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) [ 679.836337] kobject: 'loop0' (00000000a034939f): kobject_uevent_env [ 679.845462] kobject: 'loop0' (00000000a034939f): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 679.875957] kobject: 'loop4' (000000003311922a): kobject_uevent_env [ 679.882840] kobject: 'loop4' (000000003311922a): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 679.893568] kobject: 'loop1' (00000000931e812b): kobject_uevent_env [ 679.900304] kobject: 'loop1' (00000000931e812b): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 679.915879] FAULT_INJECTION: forcing a failure. [ 679.915879] name failslab, interval 1, probability 0, space 0, times 0 [ 679.927762] CPU: 1 PID: 29994 Comm: syz-executor.0 Not tainted 5.0.0+ #6 [ 679.934623] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 679.943963] Call Trace: [ 679.946553] dump_stack+0x172/0x1f0 [ 679.950209] should_fail.cold+0xa/0x1b [ 679.954107] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 679.959194] ? lock_downgrade+0x810/0x810 [ 679.963335] ? set_page_refcounted+0x100/0x100 [ 679.967915] ? ___might_sleep+0x163/0x280 [ 679.972072] __should_failslab+0x121/0x190 [ 679.976294] should_failslab+0x9/0x14 [ 679.980080] kmem_cache_alloc_node_trace+0x270/0x720 [ 679.985170] ? kasan_unpoison_shadow+0x35/0x50 [ 679.989762] ? __kasan_kmalloc.constprop.0+0xcf/0xe0 [ 679.994883] __kmalloc_node_track_caller+0x3d/0x70 [ 679.999826] __kmalloc_reserve.isra.0+0x40/0xf0 [ 680.004532] __alloc_skb+0x10b/0x5e0 [ 680.008245] ? skb_scrub_packet+0x440/0x440 [ 680.012580] ? raw_getfrag+0x164/0x230 [ 680.013176] kobject: 'loop2' (00000000233ed60c): kobject_uevent_env [ 680.016493] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 680.016516] __ip_append_data.isra.0+0x24d6/0x2dd0 [ 680.016534] ? raw_destroy+0x30/0x30 16:58:40 executing program 2: pipe(&(0x7f0000000080)={0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[@ANYRESHEX=r1], 0x279) socket$inet(0x2, 0x3, 0x2) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r1, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) splice(r0, 0x0, r1, 0x0, 0x10005, 0xa00000000000000) 16:58:40 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000, 0x0, 0xfffffff0]}}]}, 0x2b2}}, 0x0) 16:58:40 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0xffffff7f00000000, 0x0, {0xa, 0x0, 0x0, r1}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x3, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) [ 680.024416] kobject: 'loop2' (00000000233ed60c): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 680.027946] ? __ip_flush_pending_frames.isra.0+0x2d0/0x2d0 [ 680.027959] ? ipv4_mtu+0x2a9/0x400 [ 680.027974] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 680.060903] ? ip_setup_cork+0x53b/0x870 [ 680.064970] ? raw_destroy+0x30/0x30 [ 680.068691] ip_append_data.part.0+0xf2/0x170 [ 680.073203] ? raw_destroy+0x30/0x30 [ 680.076946] ip_append_data+0x6e/0x90 [ 680.080753] raw_sendmsg+0xbd8/0x2f10 [ 680.084565] ? raw_getsockopt+0x100/0x100 [ 680.088717] ? ima_match_policy+0xa19/0x13d0 [ 680.093135] ? kasan_check_read+0x11/0x20 [ 680.097295] ? lock_downgrade+0x810/0x810 [ 680.101291] kobject: 'loop1' (00000000931e812b): kobject_uevent_env [ 680.101445] ? process_measurement+0x9ae/0x1570 [ 680.111796] kobject: 'loop1' (00000000931e812b): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 680.112490] ? up_write+0x1c/0x150 [ 680.112504] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 680.112515] ? process_measurement+0x19a/0x1570 [ 680.112532] ? smk_access+0x40d/0x570 [ 680.139447] inet_sendmsg+0x147/0x5d0 [ 680.142635] kobject: 'loop4' (000000003311922a): kobject_uevent_env [ 680.143246] ? raw_getsockopt+0x100/0x100 [ 680.143269] ? inet_sendmsg+0x147/0x5d0 [ 680.143283] ? ipip_gro_receive+0x100/0x100 [ 680.143305] sock_sendmsg+0xdd/0x130 [ 680.156467] kobject: 'loop4' (000000003311922a): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 680.157795] kernel_sendmsg+0x44/0x50 [ 680.157812] sock_no_sendpage+0x116/0x150 [ 680.157828] ? sock_kzfree_s+0x70/0x70 [ 680.187113] ? get_mctgt_type_thp.isra.0+0x3c0/0x3c0 [ 680.192267] ? kasan_check_read+0x11/0x20 [ 680.196411] ? do_raw_spin_lock+0x12a/0x2e0 [ 680.200712] inet_sendpage+0x44a/0x630 [ 680.204602] kernel_sendpage+0x95/0xf0 [ 680.208483] ? inet_sendmsg+0x5d0/0x5d0 [ 680.212452] sock_sendpage+0x8b/0xc0 [ 680.216153] pipe_to_sendpage+0x299/0x370 [ 680.220291] ? kernel_sendpage+0xf0/0xf0 [ 680.224347] ? direct_splice_actor+0x1a0/0x1a0 [ 680.228933] ? __put_page+0x92/0xd0 [ 680.232566] ? anon_pipe_buf_release+0x1c6/0x270 [ 680.237309] __splice_from_pipe+0x39a/0x7e0 [ 680.241751] ? direct_splice_actor+0x1a0/0x1a0 [ 680.246351] ? direct_splice_actor+0x1a0/0x1a0 [ 680.250925] splice_from_pipe+0x108/0x170 [ 680.255078] ? splice_shrink_spd+0xd0/0xd0 [ 680.259300] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 680.264829] ? security_file_permission+0x94/0x320 [ 680.269758] ? __fget+0x9d/0x540 [ 680.273132] generic_splice_sendpage+0x3c/0x50 [ 680.277721] ? splice_from_pipe+0x170/0x170 [ 680.282024] do_splice+0x70a/0x1490 [ 680.285630] ? iterate_fd+0x360/0x360 [ 680.289427] ? opipe_prep.part.0+0x2d0/0x2d0 [ 680.293842] ? __fget_light+0x1a9/0x230 [ 680.297802] __x64_sys_splice+0x2c6/0x330 [ 680.301940] do_syscall_64+0x103/0x610 [ 680.305836] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 680.311027] RIP: 0033:0x457e29 [ 680.314209] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 680.333089] RSP: 002b:00007f2baa4adc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 680.340796] RAX: ffffffffffffffda RBX: 00007f2baa4adc90 RCX: 0000000000457e29 [ 680.348060] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000003 [ 680.355309] RBP: 000000000073bfa0 R08: 00000000000100e0 R09: 0000000000000000 [ 680.362574] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f2baa4ae6d4 [ 680.369829] R13: 00000000004c6c75 R14: 00000000004db870 R15: 0000000000000007 16:58:41 executing program 5: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x3, 0x2) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) splice(r0, 0x0, r2, 0x0, 0x1ffe0, 0x0) 16:58:41 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x3, {0xa, 0x0, 0x0, r1, 0x0, 0x0, 0xa00000000000000}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) 16:58:41 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0xffffffffa0008000, 0x0, {0xa, 0x0, 0x0, r1}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x3, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) 16:58:41 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000, 0x0, 0x1a0ffffffff]}}]}, 0x2b2}}, 0x0) 16:58:41 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000, 0x0, 0x40030000000000]}}]}, 0x2b2}}, 0x0) [ 680.502552] kobject: 'loop5' (000000001e5b6c67): kobject_uevent_env [ 680.516108] kobject: 'loop5' (000000001e5b6c67): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 680.547754] kobject: 'loop4' (000000003311922a): kobject_uevent_env [ 680.564540] kobject: 'loop4' (000000003311922a): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 680.579975] kobject: 'loop1' (00000000931e812b): kobject_uevent_env [ 680.586425] kobject: 'loop1' (00000000931e812b): fill_kobj_path: path = '/devices/virtual/block/loop1' 16:58:41 executing program 0 (fault-call:8 fault-nth:94): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x3, 0x2) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) splice(r0, 0x0, r2, 0x0, 0x100e0, 0x0) 16:58:41 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x4, {0xa, 0x0, 0x0, r1, 0x0, 0x0, 0xa00000000000000}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) 16:58:41 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0xffffffffa0010000, 0x0, {0xa, 0x0, 0x0, r1}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x3, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) 16:58:41 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000, 0x0, 0x8000a0ffffffff]}}]}, 0x2b2}}, 0x0) [ 680.691715] kobject: 'loop0' (00000000a034939f): kobject_uevent_env [ 680.698180] kobject: 'loop0' (00000000a034939f): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 680.755322] kobject: 'loop1' (00000000931e812b): kobject_uevent_env [ 680.761934] kobject: 'loop1' (00000000931e812b): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 680.774189] kobject: 'loop4' (000000003311922a): kobject_uevent_env [ 680.780730] kobject: 'loop4' (000000003311922a): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 680.794085] FAULT_INJECTION: forcing a failure. [ 680.794085] name failslab, interval 1, probability 0, space 0, times 0 [ 680.805584] CPU: 1 PID: 30042 Comm: syz-executor.0 Not tainted 5.0.0+ #6 [ 680.812410] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 680.821752] Call Trace: [ 680.824359] dump_stack+0x172/0x1f0 [ 680.827965] should_fail.cold+0xa/0x1b [ 680.831852] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 680.836959] ? lock_downgrade+0x810/0x810 [ 680.841085] ? set_page_refcounted+0x100/0x100 [ 680.845656] ? ___might_sleep+0x163/0x280 [ 680.849791] __should_failslab+0x121/0x190 [ 680.854006] should_failslab+0x9/0x14 [ 680.857833] kmem_cache_alloc_node_trace+0x270/0x720 [ 680.862947] ? kasan_unpoison_shadow+0x35/0x50 [ 680.867515] ? __kasan_kmalloc.constprop.0+0xcf/0xe0 [ 680.872603] __kmalloc_node_track_caller+0x3d/0x70 [ 680.877517] __kmalloc_reserve.isra.0+0x40/0xf0 [ 680.882167] __alloc_skb+0x10b/0x5e0 [ 680.885861] ? skb_scrub_packet+0x440/0x440 [ 680.890163] ? rt_set_nexthop.constprop.0+0x529/0x11d0 [ 680.895422] ? dst_init+0x38e/0x4d0 [ 680.899034] __ip_append_data.isra.0+0x24d6/0x2dd0 16:58:41 executing program 2: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x3, 0x2) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) r3 = perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) splice(r0, 0x0, r3, 0x0, 0x10005, 0xa00000000000000) 16:58:41 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x5, {0xa, 0x0, 0x0, r1, 0x0, 0x0, 0xa00000000000000}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) 16:58:41 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0xfffffffffffff000, 0x0, {0xa, 0x0, 0x0, r1}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x3, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) [ 680.903960] ? raw_destroy+0x30/0x30 [ 680.907687] ? __ip_flush_pending_frames.isra.0+0x2d0/0x2d0 [ 680.913401] ? ipv4_mtu+0x2a9/0x400 [ 680.917035] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 680.919380] kobject: 'loop2' (00000000233ed60c): kobject_uevent_env [ 680.922575] ? ip_setup_cork+0x53b/0x870 [ 680.922590] ? raw_destroy+0x30/0x30 [ 680.922607] ip_append_data.part.0+0xf2/0x170 [ 680.933519] kobject: 'loop2' (00000000233ed60c): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 680.936768] ? raw_destroy+0x30/0x30 [ 680.936792] ip_append_data+0x6e/0x90 [ 680.936811] raw_sendmsg+0xbd8/0x2f10 [ 680.962032] ? raw_getsockopt+0x100/0x100 [ 680.966186] ? ima_match_policy+0xa19/0x13d0 [ 680.970598] ? kasan_check_read+0x11/0x20 [ 680.974754] ? lock_downgrade+0x810/0x810 [ 680.978913] ? process_measurement+0x9ae/0x1570 [ 680.983597] ? up_write+0x1c/0x150 [ 680.987152] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 680.992717] ? process_measurement+0x19a/0x1570 [ 680.997405] ? smk_access+0x40d/0x570 [ 681.001213] inet_sendmsg+0x147/0x5d0 [ 681.005022] ? raw_getsockopt+0x100/0x100 [ 681.009167] ? inet_sendmsg+0x147/0x5d0 [ 681.013140] ? ipip_gro_receive+0x100/0x100 [ 681.013528] kobject: 'loop1' (00000000931e812b): kobject_uevent_env [ 681.017460] sock_sendmsg+0xdd/0x130 [ 681.017475] kernel_sendmsg+0x44/0x50 [ 681.017491] sock_no_sendpage+0x116/0x150 [ 681.017506] ? sock_kzfree_s+0x70/0x70 [ 681.025305] kobject: 'loop1' (00000000931e812b): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 681.027598] ? get_mctgt_type_thp.isra.0+0x3c0/0x3c0 [ 681.027617] ? kasan_check_read+0x11/0x20 [ 681.027632] ? do_raw_spin_lock+0x12a/0x2e0 [ 681.062502] inet_sendpage+0x44a/0x630 [ 681.066370] kernel_sendpage+0x95/0xf0 [ 681.070244] ? inet_sendmsg+0x5d0/0x5d0 [ 681.074251] sock_sendpage+0x8b/0xc0 [ 681.078002] pipe_to_sendpage+0x299/0x370 [ 681.082161] ? kernel_sendpage+0xf0/0xf0 [ 681.086208] ? direct_splice_actor+0x1a0/0x1a0 [ 681.090812] ? __put_page+0x92/0xd0 [ 681.094448] ? anon_pipe_buf_release+0x1c6/0x270 [ 681.099216] __splice_from_pipe+0x39a/0x7e0 [ 681.103560] ? direct_splice_actor+0x1a0/0x1a0 [ 681.108141] ? direct_splice_actor+0x1a0/0x1a0 [ 681.112730] splice_from_pipe+0x108/0x170 [ 681.116879] ? splice_shrink_spd+0xd0/0xd0 [ 681.121094] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 681.126626] ? security_file_permission+0x94/0x320 [ 681.131555] ? __fget+0x9d/0x540 [ 681.134921] generic_splice_sendpage+0x3c/0x50 [ 681.139483] ? splice_from_pipe+0x170/0x170 [ 681.143805] do_splice+0x70a/0x1490 [ 681.147443] ? iterate_fd+0x360/0x360 [ 681.151241] ? opipe_prep.part.0+0x2d0/0x2d0 [ 681.155650] ? __fget_light+0x1a9/0x230 [ 681.159610] __x64_sys_splice+0x2c6/0x330 [ 681.163753] do_syscall_64+0x103/0x610 [ 681.167621] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 681.172793] RIP: 0033:0x457e29 [ 681.175962] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 681.194853] RSP: 002b:00007f2baa4adc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 681.202538] RAX: ffffffffffffffda RBX: 00007f2baa4adc90 RCX: 0000000000457e29 [ 681.209801] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000003 [ 681.217059] RBP: 000000000073bfa0 R08: 00000000000100e0 R09: 0000000000000000 [ 681.224307] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f2baa4ae6d4 [ 681.231558] R13: 00000000004c6c75 R14: 00000000004db870 R15: 0000000000000007 16:58:42 executing program 5: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) ioctl$int_out(r2, 0x5462, &(0x7f0000000000)) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x3, 0x2) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) splice(r0, 0x0, r2, 0x0, 0x1ffe0, 0x0) 16:58:42 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000, 0x0, 0xf0ffffffffffff]}}]}, 0x2b2}}, 0x0) 16:58:42 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x6, {0xa, 0x0, 0x0, r1, 0x0, 0x0, 0xa00000000000000}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) 16:58:42 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x2, {0xa, 0x0, 0x0, r1}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x3, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) 16:58:42 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x7, {0xa, 0x0, 0x0, r1, 0x0, 0x0, 0xa00000000000000}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) [ 681.339719] kobject: 'loop5' (000000001e5b6c67): kobject_uevent_env [ 681.361942] kobject: 'loop5' (000000001e5b6c67): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 681.403068] kobject: 'loop1' (00000000931e812b): kobject_uevent_env [ 681.409786] kobject: 'loop1' (00000000931e812b): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 681.427684] kobject: 'loop4' (000000003311922a): kobject_uevent_env [ 681.434768] kobject: 'loop4' (000000003311922a): fill_kobj_path: path = '/devices/virtual/block/loop4' 16:58:42 executing program 0 (fault-call:8 fault-nth:95): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x3, 0x2) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) splice(r0, 0x0, r2, 0x0, 0x100e0, 0x0) 16:58:42 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x3, {0xa, 0x0, 0x0, r1}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x3, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) 16:58:42 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000, 0x0, 0x100000000000000]}}]}, 0x2b2}}, 0x0) 16:58:42 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x8, {0xa, 0x0, 0x0, r1, 0x0, 0x0, 0xa00000000000000}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) [ 681.558979] kobject: 'loop0' (00000000a034939f): kobject_uevent_env [ 681.565412] kobject: 'loop0' (00000000a034939f): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 681.602252] kobject: 'loop1' (00000000931e812b): kobject_uevent_env [ 681.611139] kobject: 'loop1' (00000000931e812b): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 681.624616] kobject: 'loop4' (000000003311922a): kobject_uevent_env [ 681.631158] kobject: 'loop4' (000000003311922a): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 681.650311] FAULT_INJECTION: forcing a failure. [ 681.650311] name failslab, interval 1, probability 0, space 0, times 0 [ 681.661582] CPU: 1 PID: 30089 Comm: syz-executor.0 Not tainted 5.0.0+ #6 [ 681.668435] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 681.677782] Call Trace: [ 681.680371] dump_stack+0x172/0x1f0 [ 681.683985] should_fail.cold+0xa/0x1b [ 681.687855] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 681.692947] __should_failslab+0x121/0x190 [ 681.697162] should_failslab+0x9/0x14 [ 681.700946] kmem_cache_alloc+0x47/0x6f0 [ 681.705002] skb_clone+0x150/0x3b0 [ 681.708526] ip_mc_output+0x3aa/0xf70 [ 681.712326] ? __ip_queue_xmit+0x1bf0/0x1bf0 [ 681.716715] ? ip_setup_cork+0x53b/0x870 [ 681.720769] ? ip_append_data.part.0+0x170/0x170 [ 681.725525] ? dst_release+0x62/0xb0 [ 681.729248] ? __ip_make_skb+0xf93/0x1820 [ 681.733413] ip_local_out+0xc4/0x1b0 [ 681.737132] ip_send_skb+0x42/0xf0 [ 681.740685] ip_push_pending_frames+0x64/0x80 [ 681.745182] raw_sendmsg+0x1e5d/0x2f10 [ 681.749090] ? raw_getsockopt+0x100/0x100 [ 681.753229] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 681.758755] ? flexible_sched_in+0xcb/0x9c0 [ 681.763079] ? visit_groups_merge+0x4c0/0x5d0 [ 681.767559] ? kvm_clock_read+0x18/0x30 [ 681.771537] ? kvm_sched_clock_read+0x9/0x20 [ 681.775925] ? sched_clock+0x2e/0x50 [ 681.779639] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 681.785164] ? check_preemption_disabled+0x48/0x290 [ 681.790174] ? retint_kernel+0x2d/0x2d [ 681.794059] ? trace_hardirqs_on_caller+0x6a/0x220 [ 681.798994] ? retint_kernel+0x2d/0x2d 16:58:42 executing program 2: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) ioctl$PERF_EVENT_IOC_RESET(r1, 0x2403, 0x9) socket$inet(0x2, 0x3, 0x2) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) splice(r0, 0x0, r2, 0x0, 0x10005, 0xa00000000000000) 16:58:42 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x4, {0xa, 0x0, 0x0, r1}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x3, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) 16:58:42 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000, 0x0, 0x200000000000000]}}]}, 0x2b2}}, 0x0) [ 681.802894] ? retint_kernel+0x2d/0x2d [ 681.806794] ? trace_hardirqs_on_caller+0x6a/0x220 [ 681.811762] inet_sendmsg+0x147/0x5d0 [ 681.815575] ? raw_getsockopt+0x100/0x100 [ 681.819734] ? inet_sendmsg+0x147/0x5d0 [ 681.823712] ? ipip_gro_receive+0x100/0x100 [ 681.825676] kobject: 'loop2' (00000000233ed60c): kobject_uevent_env [ 681.828046] sock_sendmsg+0xdd/0x130 [ 681.828062] kernel_sendmsg+0x44/0x50 [ 681.828080] sock_no_sendpage+0x116/0x150 [ 681.842620] kobject: 'loop2' (00000000233ed60c): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 681.846151] ? sock_kzfree_s+0x70/0x70 [ 681.846169] ? get_mctgt_type_thp.isra.0+0x3c0/0x3c0 [ 681.846187] ? kasan_check_read+0x11/0x20 [ 681.868834] ? do_raw_spin_lock+0x12a/0x2e0 [ 681.873174] inet_sendpage+0x44a/0x630 [ 681.877089] kernel_sendpage+0x95/0xf0 [ 681.881009] ? inet_sendmsg+0x5d0/0x5d0 [ 681.884988] sock_sendpage+0x8b/0xc0 [ 681.888729] pipe_to_sendpage+0x299/0x370 [ 681.892920] ? kernel_sendpage+0xf0/0xf0 [ 681.896990] ? direct_splice_actor+0x1a0/0x1a0 [ 681.901588] ? __put_page+0x92/0xd0 [ 681.905246] ? anon_pipe_buf_release+0x1c6/0x270 [ 681.910016] __splice_from_pipe+0x39a/0x7e0 [ 681.914343] ? direct_splice_actor+0x1a0/0x1a0 [ 681.918063] kobject: 'loop4' (000000003311922a): kobject_uevent_env [ 681.919135] ? direct_splice_actor+0x1a0/0x1a0 [ 681.919148] splice_from_pipe+0x108/0x170 [ 681.919175] ? splice_shrink_spd+0xd0/0xd0 [ 681.919211] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 681.925602] kobject: 'loop4' (000000003311922a): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 681.930180] ? security_file_permission+0x94/0x320 [ 681.930195] generic_splice_sendpage+0x3c/0x50 [ 681.930207] ? splice_from_pipe+0x170/0x170 [ 681.930222] do_splice+0x70a/0x1490 [ 681.930237] ? iterate_fd+0x360/0x360 [ 681.952909] kobject: 'loop1' (00000000931e812b): kobject_uevent_env [ 681.953594] ? opipe_prep.part.0+0x2d0/0x2d0 [ 681.953608] ? __fget_light+0x1a9/0x230 [ 681.953622] __x64_sys_splice+0x2c6/0x330 [ 681.958611] kobject: 'loop1' (00000000931e812b): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 681.963117] do_syscall_64+0x103/0x610 [ 681.963135] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 681.963146] RIP: 0033:0x457e29 [ 681.963160] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 681.963166] RSP: 002b:00007f2baa4adc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 681.963179] RAX: ffffffffffffffda RBX: 00007f2baa4adc90 RCX: 0000000000457e29 [ 681.963186] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000003 [ 681.963193] RBP: 000000000073bfa0 R08: 00000000000100e0 R09: 0000000000000000 [ 681.963201] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f2baa4ae6d4 [ 681.963208] R13: 00000000004c6c75 R14: 00000000004db870 R15: 0000000000000007 16:58:43 executing program 5: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x6, 0x7fff) socket$inet(0x2, 0x3, 0x2) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000000)=0x0) syz_open_procfs$namespace(r3, &(0x7f00000000c0)='ns/ipc\x00') bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) ioctl$SIOCX25GFACILITIES(r1, 0x89e2, &(0x7f0000000100)) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f0000000300)={&(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000240)=[0x0, 0x0], &(0x7f0000000280)=[0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0xa, 0x2, 0x3, 0x5}) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) splice(r0, 0x0, r2, 0x0, 0x1ffe0, 0x0) 16:58:43 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0xa, {0xa, 0x0, 0x0, r1, 0x0, 0x0, 0xa00000000000000}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) 16:58:43 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x0, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000, 0x0, 0x300000000000000]}}]}, 0x2b2}}, 0x0) 16:58:43 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x6, {0xa, 0x0, 0x0, r1}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x3, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) [ 682.221981] kobject: 'loop5' (000000001e5b6c67): kobject_uevent_env [ 682.228446] kobject: 'loop5' (000000001e5b6c67): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 682.251734] net_ratelimit: 96 callbacks suppressed [ 682.251740] neighbour: ndisc_cache: neighbor table overflow! [ 682.263560] neighbour: ndisc_cache: neighbor table overflow! 16:58:43 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x8, {0xa, 0x0, 0x0, r1}, [@NDA_DST_IPV6={0x14, 0x1, @empty={[0x3, 0x88a8ffff00000000, 0x0, 0x40030000000000, 0x34000]}}]}, 0x2b2}}, 0x0) [ 682.269842] neighbour: ndisc_cache: neighbor table overflow! [ 682.275919] neighbour: ndisc_cache: neighbor table overflow! [ 682.282409] neighbour: ndisc_cache: neighbor table overflow! [ 682.288481] neighbour: ndisc_cache: neighbor table overflow! [ 682.301057] kobject: 'loop1' (00